Connections Overview

Connections are the bridges between Horizon and your external business tools. They allow agents to read data from, write data to, and take actions in third-party platforms like Salesforce, QuickBooks, Slack, and more.

How Connections Work

Most connections use OAuth 2.0 to securely authorize Horizon to act on behalf of your organization. When you set up a connection, you are redirected to the third-party provider’s login page where you grant Horizon the required permissions. Horizon stores the resulting access and refresh tokens securely and handles token renewal automatically.

Some integrations, like Sage Intacct, use credential-based authentication where you provide a company ID, user ID, password, and sender ID directly in Horizon.

Note

Horizon never stores your third-party passwords in plaintext. All credentials are encrypted at rest using AES-256 and transmitted over TLS.

Available Integrations

Salesforce CRM data, leads, opportunities, and custom objects.

HubSpot Marketing, sales, and service hub integration.

Sage Intacct Financial management and accounting.

QuickBooks Online Invoicing, expenses, and bookkeeping.

Slack Team messaging and bot interactions.

Google Workspace Gmail, Calendar, Drive, and Sheets.

Microsoft 365 Outlook, Teams, OneDrive, and SharePoint.

Jira Issue tracking and project management.

Connection Status

Each connection displays one of the following statuses:

Status	Meaning
Connected	The integration is active and tokens are valid.
Expired	The access token has expired and automatic refresh failed. Re-authentication is required.
Disconnected	The connection was manually removed or revoked from the third-party side.
Pending	The OAuth flow was started but not completed.
Error	An unexpected issue occurred. Check the connection details for the error message.

Setting Up a New Connection

1. Navigate to Workspace > Connections.
2. Click + Add Connection.
3. Select the integration from the list of available providers.
4. For OAuth-based integrations, click Authorize and complete the login flow on the provider’s site.
5. For credential-based integrations (like Sage Intacct), enter the required fields and click Connect.
6. Once connected, the status badge will change to Connected.

Managing Existing Connections

From the connections list, click any connection to view its detail panel:

• Status and health — current connection state, last successful sync, and any errors.
• Permissions — the scopes granted during authorization.
• Linked agents — which agents are configured to use this connection.
• Activity log — recent API calls made through this connection.

Refreshing a Connection

If a connection enters the Expired state, click Re-authorize to repeat the OAuth flow. Your agents will resume using the connection automatically once the new tokens are in place.

Removing a Connection

To disconnect an integration, open the connection detail panel and click Remove Connection. This revokes Horizon’s access tokens and detaches the connection from all agents that were using it.

Caution

Removing a connection will cause any agents relying on it to fail when they attempt to use skills tied to that integration. Make sure to update agent configurations before removing a connection.

Connection Security

• All OAuth tokens are encrypted at rest and in transit.
• Horizon requests the minimum scopes necessary for each integration.
• You can review granted permissions at any time from the connection detail panel.
• Refresh tokens are rotated automatically when supported by the provider.