Custom app connections are available on the Team plan. See White-label Connections for the overview.
What You Need
All four scopes are required. In the OAuth Playground, paste them into the scope box separated by spaces before clicking Authorize APIs.
Create the app and mint the refresh token
The Google Cloud setup (project, consent screen, OAuth client, OAuth Playground) is the same for every Google channel and lives on one page.
Connect to Markifact
1
Open the Custom App tab
Go to the Connections page, click Connect on Google Tag Manager, and select the Custom App (White-label) tab.
2
Name the connection
Enter a Connection Name (for example “Acme Agency Tag Manager”). This is how the connection appears in nodes, agents, and MCP.
3
Paste your credentials
Paste the Client ID, Client Secret, and Refresh Token from your Google Cloud app.
4
Verify & Connect
Markifact refreshes an access token with your client and makes one read-only call to the Tag Manager API. Nothing is saved unless both succeed.
Rotating or Replacing the Token
Add the connection again with the same connection name and the new refresh token. Markifact replaces the stored credentials in place, so workflows and agents bound to the connection keep working.Troubleshooting
A node fails with a permission error after connecting
A node fails with a permission error after connecting
The token is missing one of the four scopes (publishing needs
tagmanager.publish, for example). Mint a new refresh token with all four scopes and re-add the connection with the same name.Client, token or scope errors
Client, token or scope errors
See the shared Custom Google Cloud App troubleshooting for
invalid_client, invalid_grant, missing scopes and APIs that are not enabled.Related
Custom Google Cloud App
Create the app and mint a refresh token
List Containers
List Tag Manager containers

