Integrations & APIs

AI agent integrations.
Build with APIs and MCP.

Connect persistent responsibilities to your business applications, internal APIs, and MCP tools. Agents can prepare briefs, maintain working data, and propose supported updates. Your team builds the connections and review experience around the useful result.

Actual product UI with demo data. Connect, approve, and put the agent to work.

Internal APIs and MCP tools

Custom capabilities and skills

DT APIs for your applications

Technical demonstration

Connect your API with governed autonomy.

Choose the operations and review policies, assign agent access, and inspect an actual API read.

Illustrated Decision Terrain thumbnail: Connect AI to your API with governed autonomy. OpenAPI demo.
Local development · Fictional demo data · Public test API without provider authentication. Setup and live read; an approval policy is configured, without a completed approved write.

Playing this video loads content from YouTube.

Read the video description

The technical demonstration introduces a useful supplier-data read, then shows OpenAPI setup, operation selection, read and approval-required policies, catalog publication, and agent access. The agent reads fictional supplier records and summarizes the delivery delays. The API response provides the records behind the answer. The configured approval policy is distinct from executing an approved write. This public no-auth test service does not demonstrate authenticated or private-network connectivity.

The closing card refers to security rules and SIEM. Those paths depend on deployment configuration, supported checks, enabled capture, selected event families, and destination activation. This footage does not demonstrate SIEM delivery. Compare security-rule coverage and SIEM forwarding and verification.

01 / Connect your tools

Work with the systems you already run.

Choose the connection that fits the system and the responsibility. Access follows the assigned credentials, available operations, and deployment’s network rules.

01

Customer APIs

Connect internal services through authenticated HTTP calls or import a supported OpenAPI specification. Select the operations that become agent tools and assign the credentials needed to use them.

02

MCP connections

Connect external Model Context Protocol servers that expose tools and data. Administrators can manage shared connections and assign access to agents. Configured self-hosted deployments can also use local-command servers.

03

Business applications

Read and update supported Google Sheets ranges, select permitted Sheets or Docs through Google Drive, and use supported Gmail or Outlook email connections. Provider scopes, account permissions, and agent assignment determine the available actions. Covered email review is separate from OpenAPI approval.

04

Code, files, and deliverables

Use supplied documents and persistent working data to prepare briefs, charts, CSV exports, or PDFs. Package reusable guidance as skills. Where sandbox compute is enabled, add code-backed tools within the configured execution and network boundaries.

Explore ongoing work and outputs
Rowan’s tool activity and supplier summary from a read through the demo OpenAPI integration.
A useful API read. Fictional demo data · Actual local development UI. Rowan reads supplier records from a public test API with no provider authentication and summarizes the delays. This capture demonstrates the read; the approved-write workflow remains unfinished.View the API read at full resolution

02 / Govern API access

Govern OpenAPI operations.

Supported OpenAPI imports become a curated set of operations. Your administrators decide what to expose and which calls need a human decision.

01

Import and curate operations

Import a bundled OpenAPI 3 JSON or YAML specification and confirm a validated HTTPS base URL. Review the supported subset, exclude unneeded operations, and classify exposed calls as reads, autonomous writes, or approval-required. Unsupported multipart, binary, and callback operations cannot be assumed available.

02

Assign credentials and approvers

Bind an agent to an explicit credential and configure approvers for protected operations. Supported response fields can be redacted before they reach the agent.

03

Publish, review, and inspect the result

Publish the selected catalog after reviewing the draft. For approval-required calls, an eligible configured approver examines the exact operation, arguments, and context. Changes to arguments, credentials, configuration, approver authority, or expiry can invalidate approval. Check the recorded outcome and receiving system before retrying an uncertain write.

Exact-call review applies to configured governed OpenAPI operations. It does not automatically cover native Sheets writes, external MCP tools, or browser actions. Credentials and destination grants retain their boundaries, and Organization security policy can still deny a covered action after approval. Review operation classes and recorded outcomes and coverage.

Published OpenAPI catalog showing read operations and an approval-required supplier follow-up.
Published operation policies. Fictional demo data · Actual local development UI. The catalog exposes selected read operations and a follow-up operation configured for approval. This is configuration evidence; the capture does not show an approved write being executed.View the operation catalog at full resolution

03 / Build with the platform

Choose REST, Remote MCP, and event interfaces.

An internal portal, existing service, or another AI client can work with DT’s persistent agents. Your application can initiate work, follow its progress, and use the results.

Scroll the table horizontally to compare interfaces.

Choose the interface for each part of the workflow
InterfaceUse it forBoundary to keep visible
Persistent Agent REST APICreate, configure, and message agents; manage contacts, peer links, and supported lifecycle actions.REST does not provide general file management. Documented file reads and uploads use platform Remote MCP. When an Organization key creates an agent, the agent starts in the key creator’s Organization-private workspace. Team placement uses supported MCP or Console flows.
Platform Remote MCPLet external AI clients discover, configure, message, and inspect accessible agents; read file resources and upload supported files. Supported tools also handle workspace and integration setup.External MCP servers supply tools to DT; DT’s own endpoint exposes the platform to clients. Both directions have access limits. Readiness checks inspect stored configuration, not worker execution or network reachability. Protected setup changes use browser review where required.
Timeline and pending actionsFollow activity with durable cursors and bounded waits. Present supported human-input, secret, contact, spawn, Outbox, and OpenAPI requests in your own review interface.Decisions retain their action scope and version checks. A pending request or accepted message does not establish completion.
Inbound triggersStart configured agent work from supported app events or an inbound webhook.Webhook 202 acknowledges stored ingress. Holds can prevent processing or queueing; acceptance does not release a hold or prove a worker ran.
Signed outbound eventsReceive supported agent event notifications and reconcile current state through the platform interfaces.Verify signatures and handle retries. Idempotency is endpoint-specific; a notification does not establish downstream business completion.
Browser-task APISubmit standalone asynchronous browser jobs; follow status and retrieve results through callbacks, polling, or bounded waits. Supported output schemas can structure extraction.A separate lower-level interface with its own controls, not the governed OpenAPI approval path or the whole persistent-agent workflow.

Key scope. Personal and Organization keys use read, operate, or manage profiles. Each profile builds on the previous one, within the acting person’s permissions. Every current Organization profile grants Organization-wide agent access. Creating an Organization key requires permission to manage both API keys and Organization agents.

Authority at request admission. REST and Remote MCP recheck the active Organization membership and current agent-management permissions of the person who created the key, along with every scope saved on it. A blocked key can regain access when that person’s permissions are restored, unless the key was revoked. Blocking or revoking a key does not recall work already accepted.

Deployment requirement. Update authentication and key-writing components together, then drain older web processes before relying on these checks.

Configure before running. Create an inactive agent when setup must precede execution. Active creation requests initial processing and normally creates a separate first-check-in timer even with a null primary schedule. Establish tools, credentials, review, and schedules before deliberately activating the responsibility.

Security tooling uses separate SIEM forwarding and scoped response interfaces, with independent prerequisites and human recovery.

04 / An example integration

Read, propose, review, and investigate.

A program portal could prepare a recurring status brief and propose a specific tracker update through a governed API. This illustrative implementation pattern still needs workflow qualification; it is not a demonstrated successful write or a prebuilt portal.

01

Read and prepare

Configure the agent inactive first, then activate it deliberately. The portal sends an assignment; the agent reads authorized status records and supplied files, compares earlier work, and prepares a brief and proposed update.

02

Review the exact update

An approval-required OpenAPI operation holds the proposed call for an eligible configured approver. The portal presents the exact operation, arguments, and context. Approval is specific to that unchanged request; policy and credentials still apply.

03

Verify and carry forward

After dispatch, inspect the recorded outcome and independently read the target record. Reconcile uncertain results before any new write. Retrieve the brief through supported Remote MCP file access and inspect the retained audit chain. Keep working context for the next scheduled cycle.

The current audit example demonstrates a denied email attempt. It does not complete this approved-write pattern. Its matching Splunk record is a separately scoped local forwarding example.

05 / Your implementation path

Build with your team. Bring in ours when you need us.

Your team can develop integrations using platform documentation and the interfaces above. DT can provide additional expertise for the parts you want help with.

01

Customer-led development

Use the platform’s API, MCP, administration, and deployment documentation to plan connections, establish access, and build a solution your team can operate. Bring one workflow, its supported interfaces, and acceptance criteria to an implementation discussion.

Discuss integration setup
02

Optional DT engineers

Add DT engineers for integration, deployment, and testing alongside your team.

Engineering help
03

OEM and solution-provider integrations

Evaluate DT as the governed agent layer in an existing product or customer solution. Start with one workflow, its systems, controls, deployment, and success criteria.

Explore OEM partnerships

Next steps

What will your team build?

Explore the platform around your systems and workflows. Your team can lead implementation, with DT engineering and support available when you need it.