PandaDoc setup guide

Agents prepare documents and send them for signature.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open PandaDoc, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

PandaDoc can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

API key

API key.

1. Sign in to PandaDoc as a workspace admin and, under Settings > API and Integrations > API, enable API and Webhooks.
2. Sign in as the user the agent should act as, ideally a dedicated user such as "AI Employee". The user must have the Admin role in the workspace when the key is created; the key then acts with that user's role, its work shows under that user's name, and it stops working if the user leaves the workspace.
3. Open the Developer Dashboard configuration page (https://app.pandadoc.com/a/#/settings/api-dashboard/configuration; app.pandadoc.eu for European accounts) and generate a key. A Production key needs the Enterprise plan and production API access switched on by PandaDoc (ask support or your account manager). A free Sandbox key (Business and Enterprise plans, including trials) works for testing: 10 requests per minute per endpoint, watermarked [DEV] documents, and sending only to addresses in your own email domain.
4. Paste the key and choose your region.

Field	What to enter
PandaDoc region (where you sign in)	Choice: Global (app.pandadoc.com), Europe (app.pandadoc.eu).
API key	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at PandaDoc until you delete or rotate it there.

Your PandaDoc OAuth app

Your OAuth app.

This way signs in with an OAuth app you create for PandaDoc, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Open the PandaDoc Developer Dashboard (https://app.pandadoc.com/a/#/settings/api-dashboard/configuration; app.pandadoc.eu for European accounts) and create an application. Creating applications needs production API access (Enterprise plan, switched on by PandaDoc).
2. Set the application's redirect URI to https://everdeck.io/api/oauth/callback.
3. Copy the Client ID and Client Secret into the form and choose your region.
4. Connect and sign in as the PandaDoc user the agent should act as; documents it creates and sends are owned by that user.

Field	What to enter
PandaDoc region (where you sign in)	Choice: Global (app.pandadoc.com), Europe (app.pandadoc.eu).

The scopes Everdeck asks for:

• read
• write

Disconnecting deletes the tokens Everdeck saved. PandaDoc documents no revocation endpoint: remove the app in PandaDoc's settings.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Find documentsTier 0 · ReadReads outside contentpandadoc_list_documents

  List documents in the workspace, newest change first, optionally searching names and reference numbers or filtering by status, tag, template and dates. Returns id, name, status and key dates.

• Check a document's statusTier 0 · ReadReads outside contentpandadoc_get_document_status

  Read a document's current status quickly, for example to wait after creating a document until it moves from document.uploaded to document.draft (usually a few seconds) before updating or sending it.

• Read a documentTier 0 · ReadReads outside contentpandadoc_get_document

  Read a document's details: status, recipients and whether each has completed, field values, variables (tokens), grand total, tags and metadata. Not available while the document is still being created (document.uploaded).

• Find templatesTier 0 · ReadReads outside contentpandadoc_list_templates

  List templates in the workspace, optionally searching names or filtering by tag. Returns id and name.

• Read a templateTier 0 · ReadReads outside contentpandadoc_get_template

  Read a template's roles (in signing order), variables (tokens) and fields with their merge field names. Call this before create_document_from_template to know which roles, variables and fields to fill.

• Draft a document from a templateTier 2 · ReversibleReads outside contentpandadoc_create_document_from_template

  Create a draft document from a template with recipients for its roles, variable values and pre-filled fields. Nobody is emailed. The document starts as document.uploaded and becomes document.draft a few seconds later; check with get_document_status before updating or sending it.

• Draft a document from a PDFTier 2 · ReversibleReads outside contentpandadoc_create_document_from_pdf

  Create a draft document from a PDF at an HTTPS link anyone can download. Field tags in the PDF text such as {signature:Client} and {date:Client} place fields for the recipient with that role. Nobody is emailed; wait for document.draft (get_document_status) before sending.

• Update a draft documentTier 2 · ReversibleReads outside contentpandadoc_update_document

  Change a draft document's variable values, field values or metadata before it is sent. Only works in document.draft; sent documents cannot be edited this way.

• Send a documentTier 4 · Money or irreversibleReads outside contentpandadoc_send_document

  Send a draft document to its recipients for viewing and signing. PandaDoc emails them right away and the document's content is locked. Quotes commit the company to their prices and invoices or payment fields ask the recipient to pay, so a person approves every send. If the template has an approval workflow, the document waits for approval (document.waiting_approval) and must be sent again once approved.

• Remind a recipientTier 3 · ExternalReads outside contentpandadoc_send_reminder

  Email a recipient a reminder to complete a sent document.

• Cancel a sent documentTier 4 · Money or irreversibleReads outside contentpandadoc_cancel_document

  Mark a sent or viewed document as expired so nobody can complete it any more, with a private note, and by default email the recipients that it changed. Drafts cannot be cancelled this way.

• Save the signed PDFTier 0 · ReadReads outside contentpandadoc_download_document

  Download a document as a PDF (the signed, verifiable copy once it is completed), save it to the company's files and return its text.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If PandaDoc later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using PandaDoc, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.