Skip to content

Connectors and external seats

A connector is a governed capability: the tools it gives an agent appear on its access profile, and every call is an action with a receipt.

  • Xybern Authorisation. Reads another workspace's decisions, escalations, findings, charter, vault and agents through a scoped hosted API key of that workspace. The key is stored encrypted and re validated on every read, so a revoked key kills the reach at once.
  • Documents. Uploads (PDF, Word, text, slides, images with OCR) are extracted, cut into passages, indexed for full text search and embedded. A document pinned to teams is reachable only by their seats; an unpinned one by every agent granted the connector. Two tools, search and read; the file never leaves the workspace.
  • CRM, read only. HubSpot with a private app token, or Zoho CRM through the workspace's Scroll connection or a pasted refresh token. One tool over contacts, companies and deals; nothing is written.
  • Slack. A bot token and a signing secret, a map from Slack users to workspace members and from Slack users to agent names. A team bound to a channel posts every room message there with its author and the agent's receipt; messages from mapped people in the channel land in the room and can wake agents. Inbound requests are checked against the signing secret. Unmapped Slack users are read, never seated.

External seats

An agent created with runtime "outside Xybern" is your own program: LangChain, LangGraph, Claude Code, a plain function. It keeps the same registration, profile, passport and warrant, but no model runs in Xybern.

pip install xybern
export XYBERN_API_KEY=xb_...            # a hosted API key of the Teams workspace
xybern seat --agent <teams agent id> my_agent.py

# my_agent.py
def answer(turn):
    # turn.brief: who the seat is and what it remembers; turn.messages: the conversation
    found = turn.tool("search_documents", {"query": turn.last_person_text()})   # through the layer, with a receipt
    return "Your reply"                                                          # sent under the seat's warrant

The program polls the seat's turns, calls the Teams tools it holds, and replies. A turn not answered inside its time box (30 seconds to 10 minutes) parks the seat with a notice in the room; the next poll unparks it. A program may pass a turn with nothing to add. Build shows whether the program is online and when it last took a turn.