The business's own systems

Four systems have tools of their own. Each connects through the company's own app or account, so the company decides what the agent may reach. Conecto keeps the encrypted credential and the call log, and copies nothing else.

Each credential is checked before anything is kept. Working in these systems in place of Conecto's own CRM or inbox keeps one source of truth, so the agent leaves their records where they are.

On an account with an owner email, the riskier changes there wait for the owner by default: changing a HubSpot or Salesforce record, canceling an event, replacing a file. Approvals lists each one.

directory_connect connects the company's Microsoft Entra ID or Okta. The agent then opens accounts for people who join, keeps titles and departments in step with HR, and suspends people who leave. A suspension waits for the owner's approval by default. Directory has its tools.

Any system with a REST API, like an ERP or an old help desk, connects with connect_add: its https address, its credential and the calls the agent may make.

{
  "name": "zendesk",
  "base_url": "https://hansenvoss.zendesk.com/api/v2",
  "auth": "bearer",
  "secret": "zd-example-token",
  "allow": ["GET /tickets*", "PUT /tickets/*"],
  "description": "The old help desk, until the move is done"
}

• Allowed calls. Each is a method and a path pattern, like GET /tickets*, where * matches anything. A call outside the list is refused. Up to 50 of them.
• Credentials. bearer, a header of your choice, basic or none. The credential is kept encrypted and never shown again.
• Calls. connect_call sends one request inside the allowed calls and answers with the status, the content type and the body, up to 1 MB. connect_preview shows exactly what it would send, with the credential hidden.
• Writes wait. On an account with an owner email, POST, PUT, PATCH and DELETE calls, and changes to the allowed calls, wait for the owner's approval by default.
• Price. The first 10,000 calls a month are free. After that a call costs $0.0003 for each started 10 seconds the system takes to answer, up to $0.0012. Adding a connection is free, and listing them counts as one of the month's free reads.

A system inside the company's network goes through a bridge: a small program the company runs inside its own network. The bridge connects out to Conecto, collects the calls meant for its systems, checks each one against its own allowed calls and makes it with credentials only it holds. Nothing connects in.

1. admin_make_bridge makes a bridge. Its token comes back once, with the program and the steps for IT.
2. connect_add with bridge and system connects a system the bridge serves.
3. connect_call on that connection answers 202 at once, and account_get_call has the answer once the bridge sends it, usually within seconds. Past the month's free calls, a call through a bridge costs $0.0003, since Conecto waits on nothing.

A bridge that collects no call within 60 seconds fails it with bridge_offline, and one that answers no call within 2 minutes of collecting it fails it with bridge_timeout. Both cost nothing. An account has up to 10 bridges.

Records from a tool the business used before move into Conecto with Imports: contacts and companies from a CSV, a whole HubSpot or Pipedrive CRM with its deals, notes and tasks, and Zendesk tickets with their replies. Running an import again updates what changed and adds no duplicates.