Everything between your agent and your customers’ apps
Connect customer accounts, find tools for each task, and check access before calling an API. Track calls in one dashboard.
Connect every app your agent needs
Your customers connect their accounts. Dexby encrypts the credentials and refreshes supported tokens when needed.
- Managed authUse your own OAuth app or a managed app where supported. Dexby handles the connection flow and token refresh.
- Connect links with your brandA single-use link with your name, logo and colour. Customers land back in your product.
- Several accounts per appEach account has a name, and one is the default.
- crm.objects.contacts.readRead
- crm.objects.contacts.writeWrite
Load the right tools, not all of them
Sessions give your agent search over the catalog instead of thousands of tool definitions.
- Meta toolsSearch, load schemas, execute and read results. A few tools cover the whole catalog.
- Pinned actionsPin up to 20 actions the agent calls on every request. They skip the search step.
- Scoped searchChoose the apps and actions a session can use. Tool search stays within that scope.
hubspot_create_noteAdd a note to a contactwriteConnected
google_calendar_create_eventCreate a calendar eventwriteConnected
salesforce_create_taskLog a task on a recordwriteNot connected
4 of 7,500+ actions, filtered to this session’s scope
Run every action with the right customer’s account
Dexby validates input, picks the customer’s account, refreshes the token if needed and calls the API.
- Refusals the model understandsWhen a call cannot run, the model gets the reason and a next step, such as a connect link.
- Scopes checked firstA grant without the needed scopes fails before it reaches the provider.
- Results in pagesLarge responses are stored and paged back with dexby_read_result.
Log my call with Dana Wu and book a follow-up next Tuesday at 10.
- dexby_search_actionsFound 3 actions for "log a call" and "book a meeting"42ms
Logged the call on Dana Wu in HubSpot and booked Tuesday at 10:00.
Bring your own apps, servers and APIs
Everything you bring runs through the same sign-in, policy and audit as the catalog.
Control what every agent can touch
Policy, classification and audit are part of the runtime, so they apply to every connector without extra code.
- Limits on sensitive dataActions are marked as general, personal or health data. Choose which data a session can use.
- Audit chainCredential access, rotations, permission changes and executions are hash-chained.
- ErasureErase a customer and their credentials, connections and traces go with them.
- Read onlyWrite and destructive actions are refusedOn
- Data it can useGeneral and personal dataNo health data
- AppsOnly these appsHubSpot, Calendar
- Raw proxyOff unless you opt inOff
- Disconnect accountsOff unless you opt inOff
See everything your agents do
A dashboard for the people who run agents in production.
- LogsWhen request logging is on, see each call’s user ID, status, timing and audit record.
- UsageExecution counts, latency and payload sizes per project, from the first call.
- PlaygroundTry any action with your own test accounts before you wire it into an agent.
| Action | Customer | Status |
|---|---|---|
| hubspot_create_note | 3f2a…9c1d | 200 |
| slack_post_message | b71e…04aa | 200 |
| gmail_send_email | 5c09…e83f | 200 |
| linear_create_issue | e4d2…71b0 | Scope |
| quickbooks_create_invoice | 90ab…2f56 | 200 |