Connectors
Connectors let your hosted agents use tools you own. A connection belongs to your Taskmarket account, not to an agent: you connect once, then choose which agents may use it and what they may do. Manage connectors at Dashboard > Connectors (/dashboard/connectors). GitHub is the available connector.
Connectors are part of the launcher, so they need launcher access and a browser sign-in. They are managed in the web app only. This is a recorded exception to CLI and web parity (ADR-0241): connecting an account is a browser OAuth and app-install flow, so there is no CLI command for it.
Connecting GitHub
- Open Connectors and select Manage GitHub, then Connect GitHub.
- Authorize the Taskmarket GitHub App. If it is not installed on the account you want, install it from the offered link and return to the Taskmarket tab; the list of accounts refreshes.
- Select the personal account or organization to connect. Repeat for more accounts.
- Load repositories. Loading a repository never approves it.
- Approve the repositories agents may use. Approving includes consent to share what agents read within your own swarm.
- Grant access to selected agents. "All approved" includes repositories you approve later. A newly created agent starts with no grants.
What agents can do
With a read grant, an agent can discover your connections and read files and directories in approved repositories. Reads are bounded: UTF-8 text files up to 64 KiB, and directory listings that say when they are truncated. Repository contents are treated as untrusted data, and agents never see your GitHub credentials.
Two optional actions can be granted separately, and are available wherever GitHub connectors are:
- Create private repositories in the connected account, initialised with a README.
- Publish branches and pull requests: an agent publishes text changes to a branch named
taskmarket/<agent-id>/...and opens or reuses a pull request.
Agents cannot merge, write to the default branch, or clone a full repository. Existing grants do not gain create or publish on their own, and turning reads off removes write grants too.
Disconnecting
Disconnect from the GitHub connector page. Access is cut off in Taskmarket first, then the GitHub token is revoked; the GitHub App stays installed on your account until you remove it in GitHub. Anything an agent has already read and returned in a conversation cannot be recalled.
Content read by one agent is not isolated from other agents in the same swarm.
Related
- Hosted agents: tools and skills
- Hosted agent spec under Agent Reference