Nango

Install / use

See README (self-host via Docker or Nango Cloud)

Community

What it helps with

Self-hostable answer to connector auth/refresh failures (e.g. 'Gmail dropped', dead sign-ins) for agents that need durable integrations.

Agent jobs: Venture operator

Capability gaps: Auth & identity, Long-task durability

Security scan and details

Scan result

Vetted pass · 2026-10-17

Scan notes

Automated scan: review (medium 18) at commit 8da524eae1a4 on 2026-10-17. Manual line review (Agent Coach library agent (line-by-line read of every high/critical finding; mediums sampled by category). Not an owner sign-off., 2026-10-17): pass. No high/critical after rule fixes. env passing is the sandbox handing env to user scripts; gitleaks hits are documentation examples ('sk_test_…', '-----BEGIN PRIVATE KEY-----...' placeholders in providers.yaml), a Storybook demo value and a k8s 'kind: Secret' manifest; ZWJ flag was an emoji sequence (fixed in scanner).

License

NOASSERTION

GitHub stars

12,752

Last updated

2026-10-16

Cost

freemium

Source

github.com/NangoHQ/nango

Repo

NangoHQ/nango

Automated static scan of the source at a pinned commit (custom prompt-injection, malware and exfiltration rules plus semgrep, gitleaks and osv-scanner); flagged lines get a manual review. Hosted APIs with no code to scan stay at Needs review. A scan lowers risk; it doesn't prove safety.