Access fictional support or analytics metadata, up to 100 recent rows. No messages, contact addresses, source text or payments. Bearer tokens are secrets: share only with systems you trust. Five active tokens maximum; up to seven days.
GET /api/v1/demo?scope=support:read Authorization: Bearer YOUR_TOKEN
Connect an MCP client
Point an MCP client (for example Claude or an IDE assistant) at your workspace. Transport: Streamable HTTP, stateless, POST only. Use a token with an MCP scope; revoke it here at any time.
Endpoint
https://your-automatepal-host/mcp
Transport
Streamable HTTP
Header
Authorization: Bearer YOUR_TOKEN
The token appears here only right after you create it.
Tools by scope
Tool
What it does
Scopes
list_knowledge_sources
Knowledge sources: titles, state, size (no source text)
Payment provider connections and 24 h lookup counts
mcp:read, support:read
add_text_knowledge_source
Propose a text source (stays unpublished until you approve)
knowledge:write
ask_test_question
Preview a bot answer (not recorded)
bot:test
reply_to_conversation
Reply in the widget to a conversation you already took over
conversations:reply
read_settings
Working hours, away message, AI-or-person choice, contact field
settings:read, settings:write
update_settings
Change working hours, away message, AI-or-person choice, contact field
settings:write
No code execution, takeover or email tools.
Read tools are marked read-only for the client. Each write tool needs its own scope: propose an unpublished source, preview an answer, reply in a conversation you already took over, or change the support settings. 30 requests per minute per token; 10 proposals, 20 test questions and 20 settings changes per workspace per UTC day; 100 messages per conversation.
Recent tokens
No tokens yet. Create one above to try the read-only API.
Six requests per minute per process is a limited abuse guard, not a distributed API entitlement. Webhooks use a separate explicit opt-in below.
Signed webhooks / manual delivery preview
Off by default. Queue future fictional support-request metadata, not messages, contact addresses or source text. Public HTTPS destinations only. Delivery is manual in this free preview: click Deliver next due event. Failed attempts become due after 1 then 5 minutes, up to 3 attempts. No always-on worker or automatic delivery guarantee.
Verify X-AutomatePal-Signature = v1= + HMAC-SHA256(key, timestamp + "." + raw body). Reject timestamps older than 5 minutes and deduplicate the body id / X-AutomatePal-Event-Id. Timestamp header: X-AutomatePal-Timestamp. A retry keeps the same ID but uses a fresh timestamp/signature.
Add-ons and channels
Ten planned integrations, ranked by value for setup effort. Nothing here is connected, configured or sending. Each lists exactly what it needs from the owner before any build or approval continues. Channel parity with incumbent tools is a roadmap, not a current capability.
Outbound webhooks
Partially built, off
Signed event delivery to a URL you own. Signing and retries are built and locally tested; no live receiver has been verified.
Needs from you
A public HTTPS endpoint you control to receive test events
Your approval to send a first signed test event
Zapier / Make
Planned, off
Connect 5,000+ apps through our signed webhooks and the read-only API above.
Needs from you
Your Zapier or Make account
A first zap/scenario you design; nothing is shared until you publish it
Email alerts
Draft rules saved, delivery off
Owner notifications for refund, handoff, negative-feedback and unanswered events. Draft rules exist; delivery is disabled.
Needs from you
A verified sender address (your confirmation tap with the email provider)
Your approval of the exact message wording
Slack
Planned, off
Owner alerts and handoff notices into a Slack channel.
Needs from you
A Slack workspace where you can install apps
Creating the Slack app and one OAuth tap from you
Google Chat
Planned, off
Owner alerts into a Google Chat space.
Needs from you
A Google Cloud project
A Chat webhook app you create and approve
Crisp
Planned, off
Answer visitors inside a Crisp inbox instead of the built-in queue.
Needs from you
A Crisp account and website
Installing the plugin from your Crisp dashboard
Freshdesk
Planned, off
Create Freshdesk tickets from review-queue items.
Needs from you
A Freshdesk account
An API key, collected through a private vault link, never in chat
Zendesk
Planned, off
Create Zendesk tickets and sync status.
Needs from you
A Zendesk account
An OAuth app and your authorization tap
Facebook Messenger
Planned, off
Answer page messages from the same knowledge.
Needs from you
A Meta developer app
A Facebook Page you manage and its approval
WhatsApp Business
Planned, off
Answer WhatsApp messages from the same knowledge. Heaviest setup.
Needs from you
A Meta Business account
Cloud API approval and a verified business number
Audit and data controls
Successful owner writes record resource type, operation, ID and time, not raw content. Latest 100 are shown, up to 1000 retained. Not a compliance log. Support cases expire after one hour, but stored data has no automatic age-based purge.
Delete my preview application data
Permanently deletes this workspace's sources, questions, consented contacts, cases, tokens, webhooks, settings, fictional ledger, proposals, Proof records and audit history. All demo links stop working. Uncertain or executing actions block deletion. This does not delete your sign-in account, provider-held data, downloaded copies or backups. No payment is cancelled or refunded.