Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Twingate (BYOK) — connector documentation

  • MCP endpoint: https://byok-twingate.connectorbay.com/mcp
  • REST API: POST https://byok-twingate.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-twingate.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Twingate Twingate API token (Read only level recommended), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-twingate.connectorbay.com/health · Tool schemas: https://byok-twingate.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-twingate · agent@connectorbay.com

What Twingate (BYOK) is for

Twingate (BYOK) lets an AI assistant read your own Twingate data through the Twingate API with a key you supply (Twingate API token (Read only level recommended)). Read-only: 8 tools (list_remote_networks, list_connectors, list_resources, list_groups, list_users, list_service_accounts, list_security_policies, list_dns_filtering_profiles). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to *.twingate.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Twingate. Twingate and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which remote networks are set up in Twingate?"
  • "Are all my Twingate connectors online?"
  • "Which resources can be reached through Twingate?"
  • "What groups exist in Twingate?"
  • "How many Twingate users are pending or inactive?"
  • "Which service accounts does Twingate have?"

What it does

  • list_remote_networks: List remote networks (the private networks Twingate connects to) with ID, name, location and network type. Cursor paginated.
  • list_connectors: List connectors with their remote network ID, state, version and hostname. Cursor paginated.
  • list_resources: List network resources (addresses users can reach) with address, alias, remote network ID, active and visible flags, routing mode and approval mode. Cursor paginated.
  • list_groups: List groups with name, type (manual, synced or system) and active flag. Cursor paginated.
  • list_users: List users with first and last name, role, type and state; email addresses are not requested. Cursor paginated.
  • list_service_accounts: List service accounts (non-human identities) with ID and name. Keys are not returned. Cursor paginated.
  • list_security_policies: List security policies with ID and name. Cursor paginated.
  • list_dns_filtering_profiles: List DNS filtering profiles with ID, name and priority (all profiles in one answer).

BYOK key

You bring your own Twingate Twingate API token (Read only level recommended) (https://www.twingate.com/docs/api-overview). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to *.twingate.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Twingate API (*.twingate.com) with a BYOK key; documentation: https://www.twingate.com/docs/api-overview. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Twingate. Twingate and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Twingate account.

Built for: Worldwide. Languages: English.