Before you start
- An Intercom workspace and app access.
Step-by-step
- 1
Connect
Integrations → Intercom → Connect, then "Continue with Intercom" and authorize access.
Security best practices
- OAuth access tokens are scoped to your app and revocable from Intercom.
- Verify inbound webhook signatures before trusting Intercom payloads.
- Credentials are encrypted at rest with AES-256-GCM — they are never stored in plain text.
- Only organization owners and admins can create or modify a connection.
- Prefer OAuth where available: it issues short-lived, scoped, revocable tokens instead of long-lived secrets.
- When you must use a token, create a fine-grained, least-privilege token and rotate it periodically.