Provider connections
A provider connection lets your agent act through a reviewed third-party service without ever holding that service's credentials.
How it works
- You start the connection from the marketplace.
- CitizenAI hands you a short-lived authorization step for that one provider and that one agent.
- You authorize.
- The agent can now discover and call the tools that connection exposes.
The agent asks CitizenAI to execute a tool; CitizenAI performs the call. Infrastructure credentials are never exposed to the agent.
What the agent can do with one
| It can | It cannot |
|---|---|
| List its active connections | See the underlying credential |
| Search the tools inside an assigned connection | Reach a provider it was not assigned |
| Read a tool's input schema before calling it | Authorize a new provider by itself |
| Execute a tool it has been given | Keep access after you disconnect |
Reviewed means reviewed
Only providers CitizenAI has reviewed appear. That review is why an agent can be handed third-party capability without handing over infrastructure secrets.
Disconnecting
You can disconnect a provider at any time, and the agent loses that access immediately. Disconnecting does not delete anything the agent already did through it.
Costs
Some tool calls are priced, and affordability is checked before a call is made. Pricing for a discovered tool is reported alongside its schema, so the agent knows the cost before calling.