Manage organization connectors from the Admin Console.
1. What you can do
Connectors allow Qwen Work to access external systems or tools approved by your organization, such as CRM, knowledge base, and ticketing systems. Admins can:
- control whether members can browse the public connector marketplace or submit connectors to the organization;
- create and maintain the organization's own MCP connectors;
- enable or disable organization connectors; and
- review connectors submitted by members.
2. Configure connector access
The top of the page contains three organization-wide settings.
Public marketplace visibility
- On: Members can browse the public connector marketplace.
- Off: The public marketplace entry is hidden. Public connectors that are already configured are not automatically removed.
Allow personal connector uploads
This capability is marked Coming soon and cannot currently be changed.
Allow members to add connectors to Organization connectors
- On: Members can submit connectors to the organization. New submissions appear under Connector reviews.
- Off: Members cannot create new organization submissions. Existing review records remain available.
3. Add an organization connector
- Open Organization connectors.
- Select Add connector.
- Enter the connector information.
- Choose an authorization method.
- Upload an icon and choose supported clients when needed.
- Select Create.
Field reference
| Field | Required | Guidance |
|---|---|---|
| Connector key | Yes | Technical identifier using lowercase letters, numbers, and hyphens only, up to 128 characters; for example, crm-search |
| Service URL | Yes | Full http:// or https:// URL of the MCP service, up to 1,024 characters |
| Authorization method | Yes | Choose No authorization or OAuth |
| Display name | No | English or general display name |
| Chinese display name | No | Name shown in the Chinese interface |
| Version | No | Use a clear version such as 1.0.0 |
| Description | No | Explain the connector's purpose, data scope, and prerequisites |
| Icon | No | Image file up to 2 MB |
| Supported clients | Yes | Choose where members can discover the connector |
4. Choose an authorization method
No authorization
Use this option for an MCP service that does not require user authentication, or where organization authentication is handled centrally by the service.
Before selecting it, confirm that the absence of a user-level identity will not expose data that the member should not be able to access.
OAuth
Use this option when members must sign in to an external account and grant access. Members may need to authorize the external service the first time they use the connector.
Before selecting OAuth, confirm that:
- the external service has a correctly configured OAuth application;
- members receive only the permissions they need; and
- the organization has a process for revoking access and handling departing employees.
5. Find and review connectors
- Search by name under Organization connectors.
- Review the connector name, service URL, authorization method, supported clients, enabled status, and update time.
- Use pagination to view more connectors.
6. Edit a connector
- Find the connector.
- Select Edit.
- Change the authorization method, display name, Chinese display name, version, description, icon, or supported clients.
- Select Save changes.
7. Enable or disable a connector
Use the Enabled control in the list:
- On: Organization members can use the connector.
- Off: The connector stops providing service to organization members.
8. Remove a connector
- Find the connector.
- Select Remove.
- Verify the connector name and service URL.
- Confirm removal.
9. Review member submissions
- Open Connector reviews.
- Filter by Pending, Approved, Rejected, Cancelled, or All.
- Select Details and review the name, description, author, version, supported clients, and configuration.
- For a pending submission:
- select Approve to publish it to Organization connectors; or
- select Reject, enter a reason, and return it to the submitter.
- After publication, check the connector's default status and enable it according to your organization's requirements.
- the service domain and operator are trusted;
- the URL uses a secure protocol and points to the intended environment;
- the authorization method matches the service requirements;
- the description clearly states what external data the connector accesses; and
- the connector does not ask members to upload shared passwords or long-lived keys.
10. Troubleshooting
The connector key is invalid
Use lowercase letters, numbers, and hyphens only. Do not begin or end the key with a hyphen. For example, use salesforce-search.
The service URL cannot be saved
Confirm that the address begins with http:// or https:// and contains no spaces. Use HTTPS for a production environment.
Why can't I change the service URL?
The service URL is part of the connector's identity and is locked after creation. Create a new connector and gradually replace the old one.
Members can see the connector but cannot use it
Check whether the connector is enabled, whether its supported clients are correct, and whether the member has completed OAuth authorization.
Why is personal upload unavailable?
Personal connector uploads are not currently available. Submitting a connector to the organization uses the separate Add to organization setting.
Previous: Kits · Back to overview · Next: Organization settings