Tokens are stored encrypted, issued on demand, never shown again and never passed to the model. You can replace a saved value, but you can't view it.
One OAuth application per user. Listing projects, polling branches and opening merge requests all run on that user's behalf.
What you need: permission to create an OAuth application in your GitLab (Settings → Applications) and the GitLab server address.
api read_repository write_repository. The redirect is built from the installation address and may point to localhost on a fresh install. Check it against the address users open Council at, and fix the installation address before registering if needed.Card actions: TEST CONNECTION checks the connection, REPLACE APP replaces the application, REMOVE APP deletes it, DISCONNECT revokes the token. Projects created from the forge remain after disconnecting, but new commits stop arriving.
One GitHub App per Council installation, registered by an administrator. Each user installs the app on their own accounts and organizations.
| Message or symptom | Cause and fix |
|---|---|
| The redirect URI included is not valid | The redirect in the GitLab application differs from the one shown in the form. Match the application by Application ID, not by name. |
| GitHub installation doesn't appear in the list | The installation is recorded only on return via the Setup URL. Install the app again and wait for the redirect back. |
| Forge is connected, but repositories aren't visible | The application is missing scopes from the registration form. Fix the application and run TEST CONNECTION again. |
| GitHub rejects the saved value | The wrong type of value was saved: you need the app's private key, not a personal access token or client secret. |