The systems we read, and how.
Three kinds, labelled the way you will ask about them. Every one is read-only: nothing here writes to a source system, and the agent's own report is never evidence.
Native read-only connectors
Connected with CommitLayer's own read-only credential and least-privilege scopes. Available on every paid plan.
Stripe
Refunds, credit notes and subscription cancellations, with the customer email hashed for cross-system matching.
Never read: Card details, payment methods, names, addresses, invoice line items, descriptions.
Shopify
Orders changed since the last sync: status, cancellation, refunds and fulfilments, keyed by the order id your agent's tools see.
Never read: Line items, addresses, names, phone numbers, notes, payment details.
Salesforce
Cases, opportunities and the CRM records a contract names, by stage and status over time.
Never read: Free-text fields beyond the ones a contract names; nothing is written back.
HubSpot
Tickets, deals, meetings and CRM records, through a service key or private-app token with read scopes only.
Never read: Marketing contacts, email content, anything outside the read scopes.
Zendesk
Tickets, their audit trail and satisfaction ratings, incrementally, with requester identities hashed.
Never read: Comment bodies, attachments, agent personal data.
Intercom
Conversations, ratings, handoffs and Fin resolution claims, with contact identities hashed.
Never read: Message bodies, contact profiles beyond the hashed identity.
Coinbase
Orders and fills from the Advanced Trade API, scoped to the portfolio your agent trades in: product, side, notional, status, fill price and time, and any fill Coinbase later busted or corrected. A CDP key with the View permission only.
Never read: Balances, deposits, withdrawals, payment methods, personal details. The key cannot trade or transfer.
Two accounts at the same vendor are two connections; the plan sets how many you may connect at once. Exact scopes and fields per connector are in the Trust Center.
Bring your own systems
Send authoritative events from internal order systems, CI/CD, monitoring, HR, identity, scheduling and proprietary applications. Never metered.
Facts API
Push records with a watermark that says how far they are complete
OpenTelemetry
Record actions from the spans your runtime already emits
SDKs
Python, TypeScript, Go and Java clients and action decorators
MCP recorder
Record tool calls an agent makes through any MCP server
Temporal and Inngest
Record before the activity or step, wait on the verdict after
CSV import
A one-off export standing in for a system without a connector
Enterprise and custom
A system of record that is none of the above: we build the connector with you on the Enterprise plan, read-only and scoped like every other.