Product by apideck
Try it live
This agent works in real connected apps. Every call goes through Apideck, which adds the credentials, so the agent never sees a token.
- Reads run straight away.
- Writes wait for you to approve the exact call and body.
- Hosts are limited to each app's own API.
Advanced: agent policy Beta
Scope each agent like a service account: which apps and methods, read-only, writes behind approval. Set it today in guardrails.config.ts; enforcement inside Apideck's proxy, with IP locks, is next.
{
"apps": {
"hubspot": ["GET", "POST /crm/v3/objects/notes"],
"moneybird": ["GET"]
},
"screening": "lakera",
"writes": "require-approval"
}You connect your own apps, and the agent only ever sees your accounts. Your connections and their tokens are deleted after 24 hours.
Integrations agent
Ask about anything in the connected apps. Reads run straight away; changes wait for your approval.
Webhook eventsListening…