Your users trust your agent with their accounts.
Encrypted credentials, per-user isolation, scoped tools and a log of every call. Hoook is designed for teams with SOC 2, GDPR and HIPAA obligations.
refresh: 10 minutes before expiry revoked: pause calls, ask the user to reconnect secrets: encrypted, never returned to your code
1,134 tokens refreshed on their own today. Three users revoked access, and each was asked to reconnect.
Reconnect emails sentThe same integration, shipped.
Without Hoook
- Thousands of OAuth tokens sitting in your own database
- No clear answer when a security review asks who can reach them
- Agents with broader access than the task needs
- No record of what an agent did in a customer's account
With Hoook
- Tokens encrypted and held by Hoook, never by your code
- Access controls, SSO and roles for your team
- Tools scoped to the apps and actions you allow
- Every call logged with the user, the tool and the result
How Hoook protects a connected account
- 01
Encrypted on arrival
Credentials are encrypted in transit and at rest the moment a user connects.
connect.tsconst { token } = await hoook.connect.createToken({ userId: "u_42" })
→ open Connect Link inside your app
u_42 signs in to HubSpot · scopes: crm.objects.deals
✓ account apn_7Kx2 connected
await hoook.accounts.list({ userId: "u_42" })
[{ "app": "hubspot", "id": "apn_7Kx2", "healthy": true }]
- 02
Isolated per user
Each account is bound to one end user in one project.
Managed auth Connected accountsWhich connected accounts need attention this week?Connected accounts8,412Refreshed today1,134Need reconnecting3Hoook · connected accountsrefresh: 10 minutes before expiry revoked: pause calls, ask the user to reconnect secrets: encrypted, never returned to your code
Tokens refreshed today, by app612Google318Slack204HubSpot3Revoked1,134 tokens refreshed on their own today. Three users revoked access, and each was asked to reconnect.
Reconnect emails sent - 03
Scoped per request
A call can reach only the account and the tools it is allowed.
Your agent, on ClaudeHoook connected Find the HubSpot deals that went quiet this month and send each owner a nudge from my Gmail.
Hoookhubspot.search_dealsHoookgmail.send_emailFive deals have had no activity for 21 days. I sent a short nudge to each owner from your Gmail.
5 emails sentMessage your agent - 04
Recorded every time
The call, its input and its outcome go to the log, and failures raise an alert.
Managed auth Connected accountsWhich connected accounts need attention this week?Connected accounts8,412Refreshed today1,134Need reconnecting3Hoook · connected accountsrefresh: 10 minutes before expiry revoked: pause calls, ask the user to reconnect secrets: encrypted, never returned to your code
Tokens refreshed today, by app612Google318Slack204HubSpot3Revoked1,134 tokens refreshed on their own today. Three users revoked access, and each was asked to reconnect.
Reconnect emails sent
const { token } = await hoook.connect.createToken({ userId: "u_42" })
→ open Connect Link inside your app
u_42 signs in to HubSpot · scopes: crm.objects.deals
✓ account apn_7Kx2 connected
await hoook.accounts.list({ userId: "u_42" })
[{ "app": "hubspot", "id": "apn_7Kx2", "healthy": true }]
What Hoook takes off your plate.
Pass the security review
Clear answers on where credentials live and who can reach them.
Regulated customers
Business plans support SSO, custom data retention and HIPAA workloads.
Know what happened
Search every call by user, app and status when a customer asks.
The numbers behind agent integrations
Public documentation from the providers, and our own figures, each labelled with its source.
is how long a Google OAuth access token lasts, so every account your agent acts in needs refreshing all day.
Google Identity documentationis when Anthropic opened the Model Context Protocol, the standard way for AI assistants to reach tools.
Anthropic, 2024connected end users included on the Connect plan, then $2 for each one after that.
Hoook pricingBuilt for agents that act.
Least privilege
Agents get the tools a task needs, not every tool in the catalogue.
No credentials in prompts
The model never sees a token, a key or a password.
Your data, not our training set
Nothing that passes through Hoook is used to train models.
Built for your obligations
Designed for teams with SOC 2, GDPR and HIPAA obligations.