Actions
Schema-bound API actions agents may call. Endpoints, methods, secrets, and approval rules are trusted policy — never chosen from message text.
Registered actions
4
Calls · 7d
612
Approval queue
1
Failures · 7d
3
Fetch a minimal order status for a verified customer.
GET https://api.suncoastservers.com/v1/orders/{order_id}
Check refund eligibility against the approved policy dataset.
POST https://api.suncoastservers.com/v1/refunds/eligibility
Post an escalation summary to the billing desk channel.
POST https://hooks.internal/suncoast/billing
Append a support note to the linked CRM contact.
PATCH https://api.hubspot.com/crm/v3/objects/contacts/{id}
Endpoint allowlist
Only HTTPS destinations resolved and validated at publish time are reachable. Loopback, metadata, and private ranges are blocked unless explicitly tunnelled.
Scoped secrets
Each action references one secret with the narrowest scope. Values are decrypted only inside the execution worker and redacted from traces.
Test before publish
Dry runs use fixed fixtures and never touch customer records. Real tests are clearly labeled and require confirmation.