A connection gives your agent access to one third-party service. Your agent writes it for you.
A connection is one folder per service under connections/. connection.yaml declares what the service needs by name: which secrets, which Python packages. index.md holds how the API works in practice.
Secret values never appear in these files. They live in secrets.env, gitignored, injected at run time and scrubbed from every output.
Run the setup prompt in your client and name the service. The agent writes the folder, asks you to paste the token into secrets.env, and verifies the connection against the real API.
You paste one value into one file. Everything else is the agent's work.
Now that you know what a connection is, pick an agent. Setup maps its connection slots to your services.