How do AI agents use Dub through Open Connector?

Your user connects Dub once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Dub tools to your agent over MCP or a typed API, with credentials injected server-side on each call.

Is this a Dub MCP server?

Yes. Open Connector can serve Dub as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Dub actions with credentials injected server-side.

Where do Dub credentials live?

In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.

Dub integration

Dub integration for AI agents.

Dub integration for AI agents with secure authentication and server-side credential injection. Open Connector runs the OAuth, seals the token in an encrypted vault, and serves Dub tools to your agent over MCP or a typed API — credentials injected server-side, every call audited, nothing leaving your infrastructure. Open source (AGPL-3.0) and self-hostable.

View source on GitHub All integrations →

What your agents can do

Real Dub actions, managed and audited.

Your user connects Dub once; your agent can then manage Dub short links, domains, tags, folders, analytics, conversion tracking, partner programs, commissions, payouts, and webhooks — scoped to the OAuth permissions you grant and the tool allowlist you configure. Every action is least-privilege and written to a tamper-evident audit trail.

1
Your user grants Dub access once (OAuth) — the token lands in the vault.
2
Your agent calls a tool over MCP or the typed API; Open Connector injects the credential server-side.
3
Every routed call appends a hash-chained audit record — nothing leaves your infra.

Tools & triggers

Supported Dub tools.

54 tools are generated from the published Dub catalog. Descriptions are plain text; each action remains subject to its configured authentication and tool allowlist.

Showing 54 tools. All published catalog entries are included in this page's server-rendered HTML.

Approve a bounty submission: Approve a bounty submission. Optionally specify a custom reward amount.; Bounties
Approve a partner application: Approve a pending partner application to your program. The partner will be enrolled in the specified group and notified of the approval.; Partner Applications
Ban a partner: Ban a partner from your program. This will disable all links and mark all commissions as canceled.; Partners
Bulk create links: Bulk create up to 100 links for the authenticated workspace.; Links
Bulk delete links: Bulk delete up to 100 links for the authenticated workspace.; Links
Bulk update commissions: Bulk update up to 100 commissions with the same status.; Commissions
Bulk update links: Bulk update up to 100 links with the same data for the authenticated workspace.; Links
Check the availability of one or more domains: Check if a domain name is available for purchase. You can check multiple domains at once.; Domains
Create commission: Create one or more commissions (custom, lead or sale) for a partner. Commission creation is processed asynchronously. Use the List Commissions endpoint or webhooks to be notified when the commission is created.; Commissions
Create a domain: Create a domain for the authenticated workspace.; Domains
Create a folder: Create a folder for the authenticated workspace.; Folders
Create a link: Create a link for the authenticated workspace.; Links
Create or update a partner: Creates or updates a partner record (upsert behavior). If a partner with the same email already exists, their program enrollment will be updated with the provided tenantId. If no existing partner is found, a new partner will be created using the supplied information.; Partners
Create a link for a partner: Create a link for a partner that is enrolled in your program.; Partners
Create a referrals embed token: Create a referrals embed token for the given partner/tenant. The endpoint first attempts to locate an existing enrollment using the provided tenantId. If no enrollment is found, it resolves the partner by email and creates a new enrollment as needed. This results in an upsert-style flow that guarantees a valid enrollment and returns a usable embed token.; Embed Tokens
Create a tag: Create a tag for the authenticated workspace.; Tags
Deactivate a partner: This will deactivate the partner from your program and disable all their active links. Their commissions and payouts will remain intact. You can reactivate them later if needed.; Partners
Delete a customer: Delete a customer from a workspace.; Customers
Delete a domain: Delete a domain from a workspace. It cannot be undone. This will also delete all the links associated with the domain.; Domains
Delete a folder: Delete a folder from the workspace. All existing links will still work, but they will no longer be associated with this folder.; Folders
Delete a link: Delete a link for the authenticated workspace.; Links
Delete a tag: Delete a tag from the workspace. All existing links will still work, but they will no longer be associated with this tag.; Tags
Retrieve a customer: Retrieve a customer by ID for the authenticated workspace. To retrieve a customer by external ID, prefix the ID with `ext_`.; Customers
List all customers: Retrieve a paginated list of customers for the authenticated workspace.; Customers
Retrieve a link: Retrieve the info for a link.; Links
List all links: Retrieve a paginated list of links for the authenticated workspace.; Links
Retrieve links count: Retrieve the number of links for the authenticated workspace.; Links
Retrieve a QR code: Retrieve a QR code for a link.; QR Codes
List all tags: Retrieve a paginated list of tags for the authenticated workspace.; Tags
List bounty submissions: List all submissions for a specific bounty in your partner program.; Bounties
List all commissions: Retrieve a paginated list of commissions for your partner program.; Commissions
List all domains: Retrieve a paginated list of domains for the authenticated workspace.; Domains
List all events: Retrieve a paginated list of events for the authenticated workspace.; Events
List all folders: Retrieve a paginated list of folders for the authenticated workspace.; Folders
List all pending partner applications: Retrieve a paginated list of pending applications for your partner program.; Partner Applications
List all partners: List all partners for a partner program.; Partners
List all payouts: Retrieve a paginated list of payouts for your partner program.; Payouts
Register a domain: Register a domain for the authenticated workspace. Only available for Enterprise Plans.; Domains
Reject a bounty submission: Reject a bounty submission with a specified reason and optional note.; Bounties
Reject a partner application: Reject a pending partner application to your program. The partner will be notified via email that their application was not approved.; Partner Applications
Retrieve analytics for a link, a domain, or the authenticated workspace.: Retrieve analytics for a link, a domain, or the authenticated workspace. The response type depends on the `event` and `type` query parameters.; Analytics
Retrieve analytics for a partner: Retrieve analytics for a partner within a program. The response type vary based on the `groupBy` query parameter.; Partners
Retrieve a partner's links.: Retrieve a partner's links by their partner ID or tenant ID.; Partners
Track a lead: Track a lead for a short link.; Track
Track a deep link open event: This endpoint is used to track when a user opens your app via a Dub-powered deep link (for both iOS and Android).; Track
Track a sale: Track a sale for a short link.; Track
Update a commission: Update an existing commission amount. This is useful for handling refunds (partial or full) or fraudulent sales.; Commissions
Update a customer: Update a customer for the authenticated workspace.; Customers
Update a domain: Update a domain for the authenticated workspace.; Domains
Update a folder: Update a folder in the workspace.; Folders
Update a link: Update a link for the authenticated workspace. If there's no change, returns it as it is.; Links
Update a tag: Update a tag in the workspace.; Tags
Upsert a link: Upsert a link for the authenticated workspace by its URL. If a link with the same URL already exists, return it (or update it if there are any changes). Otherwise, a new link will be created.; Links
Upsert a link for a partner: Upsert a link for a partner that is enrolled in your program. If a link with the same URL already exists, return it (or update it if there are any changes). Otherwise, a new link will be created.; Partners

FAQ

Dub integration, answered

How do AI agents use Dub through Open Connector?: Your user connects Dub once with one of its cataloged authentication methods. Open Connector stores the credential in an encrypted vault and exposes Dub tools to your agent over MCP or a typed API, with credentials injected server-side on each call.
Is this a Dub MCP server?: Yes. Open Connector can serve Dub as a named MCP server with a scoped allowlist and a per-user connection URL, so any MCP client can call Dub actions with credentials injected server-side.
Where do Dub credentials live?: In your own infrastructure. Open Connector keeps credentials in its own vault and injects them at call time, so they never leave your environment.

Give your agents Dub — keep the keys.

Open source, self-hostable, with Dub credentials that never leave your infrastructure. Run it from source today.

View source on GitHub How the MCP gateway works →