Your accounts. Your agent. One key.
Connect the accounts you actually run a business on. Your agent reaches exactly what you connected, nothing else, and you see every call it made.
What your agent can read
52 read-only tools today, across the accounts you connect. Read-only everywhere the platform allows it, and enforced in code where it does not.
Google Analytics & Search Console
Traffic, and what you rank for.
Google Ads
Campaign spend and performance. Read-only by construction.
Google Workspace
Drive, Sheets, Docs, Calendar. Gmail is metadata only, never message bodies.
YouTube
Your own channel and how its uploads perform.
Slack
Public channels, their messages, and who wrote them.
HubSpot CRM
Contacts, companies, deals, leads, owners and pipelines. Leads needs Sales Hub Professional.
Asana
Workspaces, projects, tasks and sections, through a personal access token you mint. Read-only here: an Asana token cannot be narrowed, so we implement no write path.
Coda
Docs, tables and rows, through an API token you mint. Read-only here: a Coda token cannot be narrowed, so we implement no write path at all.
Gong
Calls, transcripts and Gong’s own summaries, through an API key you mint. Transcripts carry participant ids rather than names.
Stripe
Charges and revenue, through a restricted key you mint.
How it works
- Connect your own accountsSign in with your own Google, Slack or HubSpot. We store a token that reads them and nothing else, encrypted and scoped to your organization.
- Create one keyPaste it into Claude or your own agent. Its reach is defined by what you connected, so there is nothing else to configure.
- Watch what it didEvery call is on your activity page, including the ones we refused. The shape of each request, never its contents.
Why this is different
Your credential, not ours
Other gateways hand your agent their own keys to public APIs. Here the platform itself enforces that your key cannot reach another customer.
Isolation in the database
Every row carries its organization, and Postgres refuses cross-organization reads. A query that forgets its filter returns nothing, not someone else's data.
A receipt, not a promise
You can see what the agent touched and when. Most tools ask you to trust them instead.