Skip to main content
Integration automation uses POST /api/tools/call. There are no public provider-credential or disconnect REST routes. Send an Outlit bearer API key in the Authorization header; setup calls for supported actor-owned integrations use integrations:connect_own, while workspace or admin setup uses integrations:manage. Core determines which authorization route applies to the setup request.

Available tools

Older installed clients may continue to call legacy integration reads during the compatibility window, but those names are intentionally absent from public discovery. New agents should use outlit_get_integration_status and outlit_setup_integration only. The generated OpenAPI specification and @outlit/tools publicToolContracts contain the exact input and output schemas.

Preferred setup negotiation

Call outlit_get_integration_capabilities with the provider first. Do not include credentials in this request. When the result contains preferredSetupVersion: 1, call outlit_setup_integration with the provider and, when requested, its generated connectionMode, credentials, or configuration shape.
outlit_setup_integration returns the provider, its canonical status, an optional next transition, and an optional stable error. Supported next transitions are:
  • browser_handoff for authentication, recovery, or provider-controlled external setup
  • crm_mapping with the exact recommendation that can be confirmed and returned
  • mixpanel_mapping with a preview used to choose and confirm an exact mapping
On CREDENTIAL_REQUIRED, collect the provider’s declared credential shape through a secret-safe channel and retry once. Never log, serialize into errors, or return submitted credentials. Browser handoffs must remain on the configured Outlit origin and must not carry credential material in the URL. Only authentication handoffs with a session ID use the compatibility status poll; recovery and external-setup handoffs are terminal responses. If preferredSetupVersion is absent or not 1, use the browser compatibility tools without sending credentials or provider configuration.

Canonical readiness

outlit_get_integration_status returns exactly these configuration-readiness states: ready is not evidence that sync, backfill, or data ingestion is complete. Consumers must not compose the compatibility session status, raw provider state, or sync metadata into a different readiness contract.