API integration & customer onboarding

Get a customer onto an API — and prove it works.

Import a provider's spec, build the call sequence, run it against their real sandbox, and keep the evidence. Every customer sits in their own isolated database schema.

The workbench isn't open to the public yet. Every integration page has a sign-up for when it opens.

The API Endpoints screen, listing thirteen imported endpoints with their methods, paths and descriptions.
01

Import

OpenAPI, a Postman collection, an Insomnia export, or plain markdown. The format is detected rather than declared, and you review the diff before anything is written.

02

Compose

Chain calls into a flow. Each step pulls values out of earlier responses, and decides for itself whether a failure stops the run or is skipped past.

03

Prove

Requests execute server-side against the real provider and are logged as they happen. A 4xx or 5xx opens an issue without anyone filing it.

Every call, kept.

Requests, responses, timings and correlation IDs are recorded as they happen — and any one of them can be opened to see exactly what went out and what came back.

The execution log, showing a day of runs against the sandbox with status codes and durations, with one execution opened to reveal its recorded request body and response headers.
Real runs against a live sandbox — including the 404 that opened an issue on its own.
The Flow Builder, showing a four-step order placement flow with the selected step's endpoint and generated request preview.
Compose

Chain the calls. Pass the values forward.

Steps run in order, and each one can pull {{variables}} out of any earlier response. When a step fails you decide whether the run stops or carries on without it — per step, not per flow.

The Copilot workspace, scoped to a single tenant and provider, offering actions it is permitted to take.
Delegate

An assistant that can act — inside an envelope.

Autonomy is off until a tenant admin turns it on, and what gets turned on is specific: which operation classes, which providers, what rate and budget, which hours. Anything outside that, it asks. Pause takes effect at the next call, not the next deploy.

How it holds

Built so the boundaries can't be forgotten.

A database schema per tenant, one gate for every autonomous call, and tests that are mutation-checked rather than trusted. How it's built →