Your own APIs as agent tools, from an OpenAPI description
Import the OpenAPI description of an API your company uses, choose the operations agents may call and set how Everdeck signs in. Each operation becomes a tool with a risk tier, under the same approvals as everything else.
Import an API
On the API servers page, a company admin chooses Import an API and gives Everdeck an OpenAPI 3.0 or 3.1 document, in JSON or YAML, as a file or from its address, up to 5 MB.
- Everdeck lists the document's operations, grouped by tag and searchable, and says which ones it can't call and why.
- Choose up to 100 operations a server. Operations the document marks as deprecated start turned off.
- The base URL must use https, and calls go only there: an operation served from another address isn't offered.
- Creating a server asks you to confirm it's you with your second factor.
A risk tier for every operation
Each operation starts at a tier from its HTTP method: reads (GET) at tier 0, changes (POST, PUT and PATCH) at tier 3, which asks first, and deletes (DELETE) at tier 4, which always asks a person.
- Enable selected turns operations on at tier 3 or higher. Turning one on at a lower tier, or lowering a tier, asks for your second factor, because a document can describe a change as a read.
- What an operation returns counts as outside content unless you choose otherwise, which also asks for your second factor.
- Agents see an operation as
api_plus the server's key and the operation's name, and only when their charter grants it.
How Everdeck signs in
Choose one: No authentication, API key in a header, API key in the query, Bearer token, Username and password, OAuth client credentials and OAuth sign-in. With OAuth sign-in you use an OAuth client of your own, and the page shows the redirect URI to register with it.
- Keys, tokens and secrets are encrypted before they're stored, and never shown in full again.
- Pick a test operation (a GET that needs no inputs) and press Test to check the server works before agents use it.
- Changing the base URL or how Everdeck signs in asks for your second factor and every secret again.
Re-import when the API changes
Re-import a newer version of the document and Everdeck shows what it changes first: operations added, removed and changed, and what changed about each one.
- You see every change before it applies, and applying a re-import asks for your second factor.
- Changed operations keep their tier and whether they're on. New ones start turned off unless you turn them on in the re-import, and an operation that comes back after being removed starts turned off.
Included in every plan
API servers and MCP servers count together towards your plan's server limit.
- Starter
- 2 MCP and API servers
- Growth
- 10 MCP and API servers
- Scale
- Unlimited MCP and API servers
More ways to connect
Your company, always on deck.
Start a 14-day trial. Card first, nothing charged until day 14.