Grok Bot plugins: connect only what you need

Grok Bot currently calls these integrations plugins. Some older material and search queries call them connectors. Plugins are how Grok Bot reaches services you authorize. Used well, they remove copy-paste friction. Used carelessly, they expand blast radius. This guide focuses on judgment: what to connect, when, and how to keep the setup boringly safe.

What connectors are for

A connector exists to let the assistant read or act through an approved integration. Typical goals:

• Pull context without manual export every time
• Draft messages or docs in the right system of record
• Keep routines fed with fresh inputs

This site is not a plugin directory. Catalogs change. Open Settings → Plugins in the app for what you can install today. As of 27 August 2026, Cursor help has listed Gmail, Notion, and Slack; treat that as a snapshot, not a complete or permanent catalog.

Least privilege first

Start with the smallest useful grant:

1. Identify the routine that needs external data.
2. Connect only the service that routine requires.
3. Prefer read access before write access.
4. Test with non-sensitive material.
5. Expand only after a clean review cycle.

If you cannot explain why a connector is needed in one sentence, wait.

A practical connection checklist

Before enabling a connector, answer:

• What routine does this unlock?
• What data can it see?
• What actions can it take?
• How will I notice mistakes?
• How do I revoke access?

Write the answers in a short note. Future you will thank present you.

Patterns that work

Read-then-draft

The assistant reads calendar events or tickets, then drafts a summary in a local document you publish manually. Low risk, high clarity.

Export-assisted research

You export a CSV or report, the assistant analyzes it on Agent Computer, and you keep the connector count low.

Dual-control publishing

The assistant prepares a post or email; a human sends it. Excellent default for public or customer-facing channels.

Patterns to avoid early

• Broad write access to production systems on day one
• Connecting personal and work identities in one soup
• Letting routines send external messages unattended
• Hoarding unused connectors “just in case”

Review and revocation

Schedule a monthly connector review:

• Remove unused connections
• Rotate tokens if your provider recommends it
• Re-validate scopes after product updates
• Confirm shared-team ownership for work accounts

Plugins, MCP, and the computer

Prefer a plugin when one exists. Use MCP when a server exists without a first-party plugin. Use Agent Computer in the browser for everything else, including tools with no API.

Sometimes you do not need a live connector. Generating files on the cloud computer from uploaded exports can be safer for one-off analysis. Choose the narrower path.

FAQ

Do connectors make Grok Bot “always watching”?

No. Capability depends on what you authorize and how routines are designed. Still, review scopes seriously.

Should every teammate share the same connectors?

Prefer clear ownership. Shared bots need shared policy.

What if a vendor has no fine-grained scopes?

Compensate with process: read-only exports, human send gates, and limited routines.

Next steps

• Routines
• Getting started
• Setup checklist

Choosing the first connector

Ask three questions:

1. Which routine is blocked without this data?
2. Is there a manual export that is good enough for now?
3. What is the worst plausible mistake if write access is wrong?

If (2) is acceptable for a month, delay the connector. Friction can be protective while you learn.

Security hygiene specifics

• Separate personal and work identities
• Prefer unique passwords / SSO policies your org already requires
• Revoke access when a teammate leaves
• Do not put long-lived secrets into prompts “for convenience”
• Log which routines use which connectors

Incident response, lightly

If something goes wrong (unexpected draft in the wrong folder, odd permission prompt):

1. Pause the routine
2. Revoke or narrow the connector
3. Preserve logs or screenshots for diagnosis
4. Fix the brief so it cannot repeat the action
5. Re-enable only after a dry run

Connector alternatives

Sometimes the better architecture is:

• CSV export → Agent Computer analysis → human publish
• Read-only dashboard screenshot notes → assistant summary
• Ticket URL paste → local draft → human update in the system of record

These paths are less elegant and often safer.

Team policy template (short)

• Connectors require a named owner
• Write scopes need a second reviewer to enable
• Monthly access review is mandatory
• Customer PII workflows need an explicit allowlist

Closing

Connectors should feel boring. Boring means intentional. If your connector list looks like a trophy shelf, prune it, then revisit Routines with a smaller surface area.

Sources and verification

Last verified: August 27, 2026. Do not treat the Gmail / Notion / Slack snapshot as a live catalog. Availability and scopes change; the in-app plugin screen wins.

• Connect plugins to Grok Bot (Cursor)
• Approvals, security, and privacy (xAI)
• Settings and notifications (xAI)