Connect your tools
Read-only OAuth for Google — Gmail, Drive, Docs and Calendar. We request the minimum read scopes each API offers, and never a write scope.
Moat8 is a tool that pulls the data from your Google Workspace accounts — Gmail, Drive, Docs, Calendar — and prepares it into clean files for your AI agents. Connect your accounts on the web, install the Mac app, and the files download straight to your computer. We don't keep your data — we store only your encrypted access tokens.
Your company's knowledge lives in six different tools. The AI you pay for can't see any of it — so it answers like it has never met your business. The vault is the missing foundation.
of corporate AI pilots fail to deliver ROI. The root cause MIT names is data readiness — not models.
Read-only OAuth for Google — Gmail, Drive, Docs and Calendar. We request the minimum read scopes each API offers, and never a write scope.
Every thread, document, file and calendar event becomes plain markdown or CSV with a stable path. Only what changed moves.
A scoped, read-only token for the API — or sync the vault to a folder with the Mac app and let local tools read files directly.
Four Google connectors are live today and can be connected from the app dashboard. Everything under Coming soon is on the roadmap and cannot be connected yet. Want your stack prioritized — or a custom connector for an internal tool, a legacy database or an odd format — tell us what you run on.
Gmail, Google Drive, Google Docs and Google Calendar — synced incrementally, normalized with stable paths.
Plain files plus a read-only API. No proprietary index to rebuild when you switch models.
Scoped, revocable tokens. Agents read your business — they can never touch the source systems.
No black-box index. Sync the vault to your own machine and see exactly what any AI sees.
Content-hash based sync: unchanged files never move. Fresh without re-processing everything.
Expert-assisted AI projects succeed at 67% vs 22% alone (MIT). The moat8.ai team configures your vault with you.
The worst case is bounded by design — not by policy.
Prepared files are a short-lived delivery buffer only: each read-only token can sync from several machines, and buffered content is auto-purged within 24 hours. We permanently store just your encrypted access tokens and a small file index (names + checksums) — not file contents.
Moat8 never writes back to Gmail, Drive, Docs or Calendar. The worst case is bounded by design.
Every device gets its own token, limited to one vault and to the connections you pick, and revocable instantly without touching your other installs. Tokens are stored only as hashes — shown once when the device is paired, and never again.
The vault is human-readable files. Open them, audit them, sync them to your own machines.
The vault is storage and plumbing. Nothing is used for training — ours or anyone else's.
Read-only OAuth for Google, no write scopes requested. Connector credentials AES-256-GCM encrypted at rest, TLS in transit, isolated per-workspace tenancy, audit log of administrative actions.
Mirror your vault into a local folder so your editor, scripts and local agents read plain files. One code pairs the machine, then the app keeps syncing from the menu bar.
Moat8 Data Vault into Applications and launch it.
M8-…). Single use, good for 12 hours, and the machine gets its own revocable token.
Don't want a local folder? The same read-only token works straight against the HTTP API — GET /v1/vaults/:id/files and /files/content — so an agent can read the vault without syncing anything to disk.
Every vault is scoped and set up with you by the moat8 team — fixed scope, clear milestone, defined outcome. Not a retainer. Not seats.
TALK TO THE TEAM →We map your sources, configure every connector and hand over a working vault — not a how-to guide.
Internal tools, legacy databases, odd formats — built for what you actually run on.
Weekly digests, account briefs, ops copilots — grounded in your data from day one.
You pay for the working system, not hours or headcount. No retainers.
~/Moat8Vault by default. From there the app sits in the menu bar, keeps that folder fresh in the background and updates itself. The machine gets its own token, so you can revoke that one install from the dashboard without touching the others.moat8 turns complex AI experiments into proprietary business infrastructure. Seven iterations aren't failures — they're the foundation of an advantage your competitors can never buy.
We embed a CTO-level strike team that owns the outcome. You pay for the win, not the headcount — and we don't give up until the moat is built.