Gateway dev

Your accounts. Your agent. One key.

Connect the accounts you actually run a business on. Your agent reaches exactly what you connected, nothing else, and you see every call it made.

What your agent can read

52 read-only tools today, across the accounts you connect. Read-only everywhere the platform allows it, and enforced in code where it does not.

Google Analytics & Search Console

Traffic, and what you rank for.

Google Ads

Campaign spend and performance. Read-only by construction.

Google Workspace

Drive, Sheets, Docs, Calendar. Gmail is metadata only, never message bodies.

YouTube

Your own channel and how its uploads perform.

Slack

Public channels, their messages, and who wrote them.

HubSpot CRM

Contacts, companies, deals, leads, owners and pipelines. Leads needs Sales Hub Professional.

Asana

Workspaces, projects, tasks and sections, through a personal access token you mint. Read-only here: an Asana token cannot be narrowed, so we implement no write path.

Coda

Docs, tables and rows, through an API token you mint. Read-only here: a Coda token cannot be narrowed, so we implement no write path at all.

Gong

Calls, transcripts and Gong’s own summaries, through an API key you mint. Transcripts carry participant ids rather than names.

Stripe

Charges and revenue, through a restricted key you mint.

How it works

  1. Connect your own accountsSign in with your own Google, Slack or HubSpot. We store a token that reads them and nothing else, encrypted and scoped to your organization.
  2. Create one keyPaste it into Claude or your own agent. Its reach is defined by what you connected, so there is nothing else to configure.
  3. Watch what it didEvery call is on your activity page, including the ones we refused. The shape of each request, never its contents.

Why this is different

Your credential, not ours

Other gateways hand your agent their own keys to public APIs. Here the platform itself enforces that your key cannot reach another customer.

Isolation in the database

Every row carries its organization, and Postgres refuses cross-organization reads. A query that forgets its filter returns nothing, not someone else's data.

A receipt, not a promise

You can see what the agent touched and when. Most tools ask you to trust them instead.

Privacy policy