Everything between your agent and your customers’ apps
Sign-in and tokens for each customer, a catalog your agent can search, and a runtime that checks policy, uses the right credential and records every call.
Connect every app your agent needs
Your customers sign in once. Dexby stores their credentials encrypted and keeps them working.
- Managed authOAuth 2.0 with PKCE, API keys, client credentials, basic auth and AWS IAM. Refresh and revocation run centrally.
- Connect links with your brandA single-use link with your name, logo and colour. Customers land back in your product.
- Several accounts per appEach account has a name, and one is the default.
- crm.objects.contacts.readRead
- crm.objects.contacts.writeWrite
Load the right tools, not all of them
Sessions give your agent search over the catalog instead of thousands of tool definitions.
- Meta toolsSearch, load schemas, execute and read results. A few tools cover the whole catalog.
- Pinned actionsPin up to 20 actions the agent calls on every request. They skip the search step.
- Scoped searchLimit a session to apps, actions or prefixes like github_list_*. Search never returns anything outside it.
hubspot_create_noteAdd a note to a contactwriteConnected
google_calendar_create_eventCreate a calendar eventwriteConnected
salesforce_create_taskLog a task on a recordwriteNot connected
4 of 7,500+ actions, filtered to this session’s scope
Run every action with the right customer’s account
Dexby validates input, picks the customer’s account, refreshes the token if needed and calls the API.
- Refusals the model understandsWhen a call cannot run, the model gets the reason and a next step, such as a connect link.
- Scopes checked firstA grant without the needed scopes fails before it reaches the provider.
- Results in pagesLarge responses are stored and paged back with dexby_read_result.
Log my call with Dana Wu and book a follow-up next Tuesday at 10.
- dexby_search_actionsFound 3 actions for "log a call" and "book a meeting"42ms
Logged the call on Dana Wu in HubSpot and booked Tuesday at 10:00.
Bring your own apps, servers and APIs
Everything you bring runs through the same sign-in, policy and audit as the catalog.
Control what every agent can touch
Policy, classification and audit are part of the runtime, so they apply to every connector without extra code.
- Personal and health dataEvery action is marked as general, personal or health data. Personal and health data stays out of logs, traces and metrics.
- Audit chainCredential access, rotations, permission changes and executions are hash-chained.
- ErasureErase a customer and their credentials, connections and traces go with them.
- Read onlyWrite and destructive actions are refusedOn
- Data it can useGeneral and personal dataNo health data
- AppsOnly these appsHubSpot, Calendar
- Raw proxyOff unless you opt inOff
- Disconnect accountsOff unless you opt inOff
See everything your agents do
A dashboard for the people who run agents in production.
- LogsEvery call with its customer, connection, status, latency and audit record.
- UsageExecution counts, latency and payload sizes per project, from the first call.
- PlaygroundTry any action with your own test accounts before you wire it into an agent.
| Action | Customer | Status |
|---|---|---|
| hubspot_create_note | user_8f3a2c | 200 |
| slack_post_message | user_b71e09 | 200 |
| gmail_send_email | user_44c1d7 | 200 |
| linear_create_issue | user_e2096a | Scope |
| quickbooks_create_invoice | user_5ad3f8 | 200 |