Skip to content

Integrations preview

Read-only. Short-lived.

Access fictional support or analytics metadata, up to 100 recent rows. No messages, contact addresses, source text or payments. Bearer tokens are secrets: share only with systems you trust. Five active tokens maximum; up to seven days.

GET /api/v1/demo?scope=support:read
Authorization: Bearer YOUR_TOKEN

Connect an MCP client

Point an MCP client (for example Claude or an IDE assistant) at your workspace. Transport: Streamable HTTP, stateless, POST only. Use a token with an MCP scope; revoke it here at any time.

Endpoint
https://your-automatepal-host/mcp
Transport
Streamable HTTP
Header
Authorization: Bearer YOUR_TOKEN

The token appears here only right after you create it.

Tools by scope
ToolWhat it doesScopes
list_knowledge_sourcesKnowledge sources: titles, state, size (no source text)mcp:read, knowledge:write
get_unanswered_digestUnanswered questions from the last 7 daysmcp:read
list_ticketsLatest 100 tickets: status, priority, inbox statemcp:read, support:read, conversations:reply
get_owner_overviewOverview counts: tickets, questions, requests, knowledgemcp:read, analytics:read
get_billing_connection_statusPayment provider connections and 24 h lookup countsmcp:read, support:read
add_text_knowledge_sourcePropose a text source (stays unpublished until you approve)knowledge:write
ask_test_questionPreview a bot answer (not recorded)bot:test
reply_to_conversationReply in the widget to a conversation you already took overconversations:reply
read_settingsWorking hours, away message, AI-or-person choice, contact fieldsettings:read, settings:write
update_settingsChange working hours, away message, AI-or-person choice, contact fieldsettings:write

No code execution, takeover or email tools.

Read tools are marked read-only for the client. Each write tool needs its own scope: propose an unpublished source, preview an answer, reply in a conversation you already took over, or change the support settings. 30 requests per minute per token; 10 proposals, 20 test questions and 20 settings changes per workspace per UTC day; 100 messages per conversation.

Recent tokens

No tokens yet. Create one above to try the read-only API.

Six requests per minute per process is a limited abuse guard, not a distributed API entitlement. Webhooks use a separate explicit opt-in below.

Signed webhooks / manual delivery preview

Off by default. Queue future fictional support-request metadata, not messages, contact addresses or source text. Public HTTPS destinations only. Delivery is manual in this free preview: click Deliver next due event. Failed attempts become due after 1 then 5 minutes, up to 3 attempts. No always-on worker or automatic delivery guarantee.

Verify X-AutomatePal-Signature = v1= + HMAC-SHA256(key, timestamp + "." + raw body). Reject timestamps older than 5 minutes and deduplicate the body id / X-AutomatePal-Event-Id. Timestamp header: X-AutomatePal-Timestamp. A retry keeps the same ID but uses a fresh timestamp/signature.

Add-ons and channels

Ten planned integrations, ranked by value for setup effort. Nothing here is connected, configured or sending. Each lists exactly what it needs from the owner before any build or approval continues. Channel parity with incumbent tools is a roadmap, not a current capability.

Outbound webhooks

Partially built, off

Signed event delivery to a URL you own. Signing and retries are built and locally tested; no live receiver has been verified.

Needs from you

  • A public HTTPS endpoint you control to receive test events
  • Your approval to send a first signed test event

Zapier / Make

Planned, off

Connect 5,000+ apps through our signed webhooks and the read-only API above.

Needs from you

  • Your Zapier or Make account
  • A first zap/scenario you design; nothing is shared until you publish it

Email alerts

Draft rules saved, delivery off

Owner notifications for refund, handoff, negative-feedback and unanswered events. Draft rules exist; delivery is disabled.

Needs from you

  • A verified sender address (your confirmation tap with the email provider)
  • Your approval of the exact message wording

Slack

Planned, off

Owner alerts and handoff notices into a Slack channel.

Needs from you

  • A Slack workspace where you can install apps
  • Creating the Slack app and one OAuth tap from you

Google Chat

Planned, off

Owner alerts into a Google Chat space.

Needs from you

  • A Google Cloud project
  • A Chat webhook app you create and approve

Crisp

Planned, off

Answer visitors inside a Crisp inbox instead of the built-in queue.

Needs from you

  • A Crisp account and website
  • Installing the plugin from your Crisp dashboard

Freshdesk

Planned, off

Create Freshdesk tickets from review-queue items.

Needs from you

  • A Freshdesk account
  • An API key, collected through a private vault link, never in chat

Zendesk

Planned, off

Create Zendesk tickets and sync status.

Needs from you

  • A Zendesk account
  • An OAuth app and your authorization tap

Facebook Messenger

Planned, off

Answer page messages from the same knowledge.

Needs from you

  • A Meta developer app
  • A Facebook Page you manage and its approval

WhatsApp Business

Planned, off

Answer WhatsApp messages from the same knowledge. Heaviest setup.

Needs from you

  • A Meta Business account
  • Cloud API approval and a verified business number

Audit and data controls

Successful owner writes record resource type, operation, ID and time, not raw content. Latest 100 are shown, up to 1000 retained. Not a compliance log. Support cases expire after one hour, but stored data has no automatic age-based purge.

Delete my preview application data

Permanently deletes this workspace's sources, questions, consented contacts, cases, tokens, webhooks, settings, fictional ledger, proposals, Proof records and audit history. All demo links stop working. Uncertain or executing actions block deletion. This does not delete your sign-in account, provider-held data, downloaded copies or backups. No payment is cancelled or refunded.