"
```
The provider ID must be unique and cannot end with `-agent-builder` or `-oauth-provider`.
### Provider setup guides
To enable GitHub OAuth for Fleet, you need to create a GitHub OAuth app and configure it with the required permissions.
Go to [GitHub Settings > Developer settings > OAuth Apps](https://github.com/settings/developers) and click **New OAuth App**.
Fill in the application details. You can name it whatever you like and leave the default checkbox settings.
Give the app read/write permissions to **Pull Requests** and **Issues**.
Set the callback URL, replacing `` with your LangSmith hostname and `` with your provider ID:
```
https:///host-oauth-callback/
```
Click **Generate a new client secret** and copy both the **Client ID** (shown at the top of the app page) and the **Client Secret**.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Client ID**: from GitHub app
* **Client Secret**: from GitHub app
* **Authorization URL**: `https://github.com/login/oauth/authorize`
* **Token URL**: `https://github.com/login/oauth/access_token`
* **Provider ID**: Unique string, for example: `github`
Add the following to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
githubOAuthProvider: ""
```
After creating the app, you need to:
1. Authenticate the app to your GitHub account.
2. Go to **Settings > Applications > Installed GitHub Apps** and install the app on the repositories you want it to access.
For private repositories, you must explicitly install the app on each repository you want Fleet to access.
To enable Google OAuth for Fleet, you need to create an OAuth client in GCP and configure it with the required URLs and credentials.
Create a new OAuth client app (Web application) in [Google Cloud Console](https://console.cloud.google.com/apis/credentials).
Add the following URLs to your OAuth client, replacing `` with your LangSmith hostname and `` with the provider ID you'll use (e.g., `google`):
**Authorized JavaScript origins:**
* `https://`
**Authorized redirect URIs:**
* `https:///api-host/v2/auth/callback/`
* `https:///host-oauth-callback/`
Copy the **Client ID** and **Client Secret** from the GCP OAuth app.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Client ID**: Find in GCP
* **Client Secret**: Find in GCP
* **Authorization URL**: `https://accounts.google.com/o/oauth2/auth`
* **Token URL**: `https://oauth2.googleapis.com/token`
* **Provider ID**: Unique string, for example: `google`
Add the LangSmith OAuth provider ID to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
googleOAuthProvider: ""
```
To enable Microsoft OAuth for Fleet, create an Azure app registration, add the required Microsoft Graph delegated permissions, and configure a Microsoft OAuth provider in LangSmith.
In the [Microsoft Entra admin center](https://entra.microsoft.com/), go to **Applications > App registrations** and create a new registration.
Select the account type that matches your deployment. If you need users from multiple Microsoft Entra tenants to authenticate, choose a multi-tenant option. If your deployment is limited to one tenant, you can use a single-tenant app registration.
Add the following web redirect URI, replacing `` with your LangSmith hostname and `` with your provider ID:
```
https:///host-oauth-callback/
```
In **Certificates & secrets**, create a new client secret. Copy the **Application (client) ID** and the generated client secret value.
In **API permissions**, add the following Microsoft Graph delegated permissions:
* `Mail.ReadWrite`
* `Mail.Send`
* `Calendars.ReadWrite`
* `Team.ReadBasic.All`
* `Channel.ReadBasic.All`
* `Channel.Create`
* `ChannelMessage.Send`
* `ChannelMessage.Read.All`
* `Chat.Create`
* `Chat.ReadWrite`
* `User.ReadBasic.All`
* `Files.ReadWrite.All`
* `Sites.ReadWrite.All`
LangSmith automatically requests `offline_access` for Microsoft providers so users can receive refresh tokens.
Grant admin consent for the tenant if your Microsoft 365 policies require it for these delegated permissions.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Name**: For example, `Microsoft`
* **Provider ID**: Unique string, for example: `microsoft-oauth-provider`
* **Client ID**: Application (client) ID from Azure
* **Client Secret**: Client secret value from Azure
* **Authorization URL**: `https://login.microsoftonline.com/common/oauth2/v2.0/authorize`
* **Token URL**: `https://login.microsoftonline.com/common/oauth2/v2.0/token`
* **Provider Type**: `microsoft`
* **Token endpoint auth method**: `client_secret_post`
If you created a single-tenant app registration, replace `common` in the authorization and token URLs with your tenant ID.
Add the following to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
microsoftOAuthProvider: ""
```
To enable Linear OAuth for Fleet, you need to create a Linear OAuth app and configure it with the required credentials.
Go to [Linear Settings > API > Applications](https://linear.app/settings/api/applications/new) and create a new OAuth application.
Set the callback URL, replacing `` with your LangSmith hostname and `` with your provider ID:
```
https:///host-oauth-callback/
```
After creating the app, copy the **Client ID** and **Client Secret**.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Client ID**: from Linear app
* **Client Secret**: from Linear app
* **Authorization URL**: `https://linear.app/oauth/authorize`
* **Token URL**: `https://api.linear.app/oauth/token`
* **Provider ID**: Unique string, for example: `linear`
Add the following to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
linearOAuthProvider: ""
```
To enable LinkedIn OAuth for Fleet, you need to create a LinkedIn OAuth app and configure it with the required credentials.
Go to [linkedin.com/developers/apps](https://www.linkedin.com/developers/apps/) and create a new app.
In your app settings, go to the **Auth** tab.
Add the following redirect URI, replacing `` with your LangSmith hostname and `` with your provider ID:
```
https:///host-oauth-callback/
```
Copy the **Client ID** and **Client Secret** from the Auth tab.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Client ID**: from LinkedIn app
* **Client Secret**: from LinkedIn app
* **Authorization URL**: `https://www.linkedin.com/oauth/v2/authorization`
* **Token URL**: `https://www.linkedin.com/oauth/v2/accessToken`
* **Provider ID**: Unique string, for example: `linkedin`
Add the following to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
linkedinOAuthProvider: ""
```
To enable Slack OAuth for Fleet, you need to create a Slack app and configure it with the required scopes, credentials, and event subscriptions.
Go to [api.slack.com/apps](https://api.slack.com/apps) and click **Create New App**.
In **OAuth & Permissions**, add the following scopes:
* `channels:history`
* `channels:read`
* `chat:write`
* `groups:history`
* `groups:read`
* `im:history`
* `im:read`
* `im:write`
* `mpim:history`
* `team:read`
* `users:read`
* `users:read.email`
Copy the **Client ID**, **Client Secret**, and **Signing Secret** from the Slack app settings.
In LangSmith, go to **Settings > OAuth Providers** and add a new provider:
* **Client ID**: Find in Slack app
* **Client Secret**: Find in Slack app
* **Authorization URL**: `https://slack.com/oauth/v2/authorize`
* **Token URL**: `https://slack.com/api/oauth.v2.access`
* **Provider ID**: Unique string, for example: `slack`
Add the following redirect URI to your Slack app under **OAuth & Permissions > Redirect URLs**, replacing `` with your LangSmith hostname and `` with your provider ID (e.g., `slack`):
```
https:///host-oauth-callback/
```
1. Get the bot token from **OAuth & Permissions** in your Slack app.
2. Run the following command:
```bash theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
curl -X POST https://slack.com/api/auth.test \
-H "Authorization: Bearer "
```
3. Copy the `bot_id` from the response.
Add the following to your `values.yaml` and deploy:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
oauthProviderOrgId: ""
oauth:
slackOAuthProvider: ""
slackSigningSecret: ""
slackBotId: ""
```
1. After deployment, go to **Event Subscriptions** in your Slack app and enable events.
2. Set the **Request URL** to:
```
https:///v1/triggers/webhooks/d809e66e-0000-4000-8000-000000000002
```
3. Add the following bot events:
* `message.channels`
* `message.groups`
* `message.im`
* `message.mpim`
1. Add the Slack bot to the channel you want it to read from.
2. When configuring the Slack tool or trigger in Fleet, provide the **channel ID** and **channel name**.
## Disable Fleet
To disable Fleet, set the following to `false` in your `values.yaml`:
```yaml theme={"theme":{"light":"catppuccin-latte","dark":"catppuccin-mocha"}}
config:
agentBuilder:
enabled: false
```
***
[Edit this page on GitHub](https://github.com/langchain-ai/docs/edit/main/src/langsmith/fleet/self-hosted.mdx) or [file an issue](https://github.com/langchain-ai/docs/issues/new/choose).
[Connect these docs](/use-these-docs) to Claude, VSCode, and more via MCP for real-time answers.