Each one says what the tool costs, why SHAI uses it, and the steps to connect it.
An email inbox for SHAI, on your own AgentMail API key. When you connect it, SHAI gets its own email address and sends you approvals and needs-you items from it, with the same wording as its texts and a note that it is AI; replying YES or NO decides the approval, just like a text.
What happens without it
Nothing: SHAI reaches you in the app chat, then by text, then by call, exactly as before.
Amazon Ads API (your own Amazon Ads account)
The seller signs in to their own Amazon Ads account on Amazon's consent screen (Login with Amazon, scope advertising::campaign_management) through the operator's app, which Amazon must approve for the Ads API. SHAI seals the refresh token and works on the one advertising profile picked on Store. Offered only once AMAZON_ADS_CLIENT_ID and AMAZON_ADS_CLIENT_SECRET are set.
What happens without it
SHAI reads and manages the seller account; Sponsored Products stay the seller's to run in Amazon Ads.
Amazon Alexa
Amazon's voice assistant and Echo devices. Amazon offers no way for an outside app to list, read or control the devices in your Alexa account or run your routines, and SHAI never uses password-based workarounds.
What happens without it
Nothing that Home Assistant or SmartThings cannot do: SHAI reaches Alexa-connected devices through the hub you share with Alexa, and routines you made in the Alexa app keep running; SHAI does not start them.
Amazon Selling Partner API (your own seller account)
A seller's OWN private SP-API app, registered in their own Seller Central (Develop Apps) and self-authorized there - SHAI does not apply to Amazon as a public developer and never sees the Amazon password. The seller pastes the app's LWA client identifier and client secret, the refresh token from Authorize app, and their Merchant Token; SHAI checks them with a refresh-token grant and the Sellers API before sealing them. Orders are read without buyer data; buyer names and addresses only if the seller's app holds Amazon's approved restricted role, through a Restricted Data Token.
What happens without it
Amazon stays out of the Store; the rest of the Store works.
Anthropic Console API key (pay-as-you-go)
A separate, per-token-billed Anthropic account/key the platform worker uses via the Claude Agent SDK to run skills on the user's behalf.
What happens without it
The platform cannot execute any skill for that tenant.
Any other email (IMAP/SMTP)
Any mailbox that speaks IMAP and SMTP, linked on Unipile's own hosted sign-in page ("Unipile supports all email providers if they all rely on IMAP and SMTP"; its hosted page "automatically handles the process of requesting additional details if the IMAP/SMTP configuration cannot be detected"). Use the provider's app password where it has one. The password is typed on Unipile's page, never into SHAI. Pipedream also lists an IMAP app, but it publishes only a New Email trigger and no send action, so it is not this tile's route.
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.
The person's own AOL Mail account, linked as an IMAP mailbox on Unipile's own hosted sign-in page with an AOL app password. AOL mail OAuth is the same restricted, approval-only access as Yahoo's (senders.yahooinc.com/developer/developer-access covers AOL, Yahoo and Verizon.net), so the app password is the route; it is typed on Unipile's page, never into SHAI.
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.
Second named data vendor — marketplace of pre-built Actors for Instagram/Facebook/LinkedIn/web data, billed by compute unit plus proxy usage.
What happens without it
Same gap as Bright Data — needs-connector: apify recorded.
UGC-style ads with AI actors: script, actor, voice and a talking-actor video. Its API is only on Arcads' custom (Pro) plan, through sales. An optional route for SHAI's ad creatives agent, always quoted first.
What happens without it
Nothing: your ad images and video edits are made as before; on a Starter or Creator plan, the card says the API is not on your plan and nothing is saved.
Publishes and schedules your posts to fourteen networks, including TikTok, Instagram, Facebook, YouTube, LinkedIn, X and Pinterest, with a separate profile per client on its Launch, Business or Enterprise plans. It lets SHAI take a video from upload to edit, captions and a scheduled post, and it powers scheduling on the Viral Clips screen; every post waits for your approval.
What happens without it
Nothing stops: finished edits come to you as files with their captions and details, and organic posts go out through GoHighLevel's Social Planner as before.
One of the data vendors SHAI's lead list builder can use for public lead datasets and collecting public web pages, under Bright Data's own terms, without signing in anywhere. Any other platform's own terms are your call, and SHAI never handles your login or session.
What happens without it
no live collection or vendor dataset pull; your filters and the list layout are still delivered.
Canva's official REST API for integrations (the Connect API). After the person signs in at Canva (OAuth with PKCE) SHAI lists their designs, folders and brand templates, exports PNG, PDF or MP4 copies into the Library, opens a design in Canva's own editor through its temporary edit URL with return navigation (Canva's Return button brings the person back and the new version is copied in), and fills brand templates through the Autofill API. Canva publishes no endpoint for the Brand Kit's fonts and no editor embedded in another site, so SHAI measures colours and shapes from the designs and edits happen on Canva itself.
What happens without it
Nothing made in Canva shows in the Library and new creatives cannot follow it; download the designs from Canva and drop them into SHAI instead.
City and county permit open data (Socrata and ArcGIS feeds, free and keyless)
Each city's or county's free public feed of building permits. SHAI searches it by date and keyword, a limited number of pages per run, and never signs in, solves a CAPTCHA or uses a city portal. A built-in list covers known cities, and you can add your own county's feed on the Permit Tracker page. Chicago is confirmed by a real search; others are expected to work until proven. Cities with only a portal get a step-by-step checklist instead.
What happens without it
Nothing to connect. A feed that does not answer is named in the search summary and the rest of the search still runs; a portal-only city gets the exact steps and an Update by hand option.
CJdropshipping (your own supplier account)
A business's own CJdropshipping account and API key. SHAI gets an access token (getAccessToken) and searches CJ's catalogue (product/listV2): every product shown is a real CJ row with its id, name, SKU, photo, USD price before shipping, stock and delivery days, and the request and time it was read. Nothing is invented; a row without a price is left out and counted.
What happens without it
Find products takes your own supplier's products instead (name, cost, photo, link - your own figures).
Claude subscription (Pro / Max / Team)
The user's own Claude.ai subscription for running skills in Claude Code on their own account.
What happens without it
Nothing runs in Claude Code at all.
Clerk application keys (for Spaces with sign-in)
Your own Clerk application's keys, stored as publishable:secret, for a Space with user sign-in. Not the platform's own Clerk row.
What happens without it
A Space that needs sign-in deploys without it and says so until the keys are pasted.
Column Tax (embedded tax filing API, IRS-authorized e-file provider)
An IRS Authorized e-file Provider with an embedded, API-first filing product for partner businesses (banks, brokerages, apps): the partner creates a user by API and opens Column Tax's own screens, where the filer reviews, signs and e-files. Listed as an optional connector for Personal → Taxes; SHAI has no adapter (needs-connector: column-tax) and never files.
What happens without it
Nothing: Personal → Taxes prepares a packet for IRS Free File, your own tax software, your CPA or paper.
Composio (managed OAuth connections)
The integration platform behind SHAI's one-click connections: it runs the OAuth hop for 1,500+ apps, holds the refresh token, and executes an action on the connected account's behalf. It is the platform's own connector rather than a per-skill one — the owner sets one key on the deployment and every tenant then connects their own accounts through it, per business. The five tools with no catalog app (GoHighLevel's agency API, Twilio, Higgsfield, OpenArt, cutroom) keep the pasted-key path, which is unchanged.
What happens without it
Nothing that works today stops working: every tool is still connected by pasting its key in Setup, which is how all 33 rows here have been connected since Phase 5. What is missing is the one-click OAuth path — a non-technical owner has to find and paste an API key for each app, which is the step they most often stall on. GET /api/healthz says "no provider configured" in words.
AI video ads: a video from a product link, an AI avatar clip from text or audio, short videos from a script, and template videos. It needs a Creatify API subscription. An optional route for SHAI's ad creatives agent, always quoted first. Once connected, your Creatify videos and custom avatars also appear in SHAI's Library under From Creatify, refreshed every six hours.
What happens without it
Nothing: your ad images and video edits are made as before.
Cutroom (standalone video editor, external product)
A standalone video-editor app, sold as a separate product. It shares no code or data with SHAI, and nothing in SHAI uses it.
What happens without it
Nothing in SHAI. SHAI's own video editing agents already do the editing here; Cutroom is a separate product for the same kind of work.
Datazapp (data append and list files — Audiences)
A data-append vendor: it matches records you already have (name and address, email or phone) and adds phones, emails, age and demographics, plus email checks and phone and Do Not Call scrubbing. It does not search for new people; its lists are made on Datazapp's own site and imported as a CSV. SHAI never asks for ethnicity, religion, health, political, voter, credit or loan fields, and removes them from any file.
What happens without it
Audiences can still pull lists from LeadsPlease, without the extra details added.
The tenant's own DeepSeek key, reached through DeepSeek's own OpenAI-compatible API. Routed work only.
What happens without it
Nothing stops. A policy that names DeepSeek without this key parks that step as needs-connector: deepseek.
Where SHAI lives in Discord: /shai in a channel it has been invited into or in a direct message, approvals as buttons that resolve the same approval row the dashboard, SMS, voice, Slack and Teams resolve, files and page links posted back as links, and scheduled tasks delivered to a channel. Every reply is ephemeral by default, because a Discord server is usually a room full of people who did not ask.
What happens without it
@SHAI reaches nothing in Discord and no approval can be pressed there. The dashboard, chat, SMS, voice, Slack and Teams are unaffected and every approval is still decidable in all of them.
DocuSign (e-signature - not sendable from SHAI yet)
DocuSign e-signature. SHAI cannot send through DocuSign yet, so no key is asked for: send the agreement from DocuSign yourself, then press Mark signed on the New client pack.
What happens without it
Nothing: the pack's agreement goes through Dropbox Sign, or is sent by hand and marked signed.
Dropbox Sign (your own account: client agreements for e-signature)
The business's own Dropbox Sign account, connected with its API key pasted on Sales Team -> Client pack (checked with GET /v3/account before it is sealed). The New client pack sends the business's own template (send_with_template) with the merge fields the business mapped filled from the GoHighLevel deal, reads each request back (viewed, signed, declined), sends Dropbox Sign's own reminders at the manager's interval, and takes Dropbox Sign's account events, verified with the business's key. Dropbox Sign emails the signer and handles the ESIGN/UETA consent; SHAI never writes legal terms or stores the document. Read-only in runs.
What happens without it
Only the pack's agreement: the invoice, onboarding link and welcome message still go, and the page says to send the agreement from your e-sign tool and press Mark signed.
EasyPost (parcel tracking across UPS, FedEx, USPS, DHL and more)
EasyPost's Tracking API (POST /v2/trackers) on the business's own key: a parcel's status, the carrier's ETA and its events, read only when someone presses Read tracking now. No ETA from the carrier means Unknown.
What happens without it
Nothing else: type the ETA you were given, or the step shows Unknown.
ElevenLabs API key (SHAI's voice, and Pitch Studio's voice demos)
The tenant's own ElevenLabs key, so SHAI's replies in the portal are spoken by the Flash model (eleven_flash_v2_5) streamed from ElevenLabs' own text-to-speech endpoint, and so a phone call through Twilio's ConversationRelay names the same ElevenLabs voice. Optional: with no key the free browser voice speaks exactly as before. The same key, given the ElevenAgents permission, builds Pitch Studio's voice demos: a private ElevenLabs agent per prospect, trained on the scan, with the disclosure as its first line, deleted after 14 days unless the prospect signs.
What happens without it
Nothing stops. With Settings -> Voice on the free browser voice nothing here is read. With Settings -> Voice set to ElevenLabs and no key, the portal's spoken reply parks as needs-connector: elevenlabs and says so on the panel - it never falls back to the browser voice silently - and a call uses Twilio's documented default voice. In Pitch Studio a voice demo answers needs-connector: elevenlabs-api-key and builds nothing; the chat, spec-site and video demos and the GoHighLevel voice mode still work.
Exelo (white-label AI phone receptionists)
A reseller portal for AI phone receptionists. Exelo has no public API, so SHAI cannot connect to it and never scripts the portal; you get a click-by-click checklist instead. SHAI's own voice agent builder covers similar work.
What happens without it
Nothing: no SHAI agent uses it.
The tenant's own Fish Audio key, so SHAI's replies in the portal are spoken by Fish Audio's text-to-speech endpoint (POST https://api.fish.audio/v1/tts, chunked audio, model header s1 / s2-pro / s2.1-pro). Portal only: Twilio's ConversationRelay carries Google, Amazon and ElevenLabs voices and not Fish Audio, so a Fish Audio tenant's calls use Twilio's documented default voice and Settings -> Voice says so.
What happens without it
Nothing stops. With Settings -> Voice on the free browser voice nothing here is read. With Settings -> Voice set to Fish Audio and no key, the portal's spoken reply parks as needs-connector: fishaudio and says so on the panel - never a silent fall back to the browser voice.
GitHub
Hosts the user's private SHAI instance repo (via the SHAI GitHub App), every client website repo, and release-repo access grants.
What happens without it
No instance repo can be created; no client website repos.
Gmail / Google Workspace (your own mailbox)
Your own Gmail or Google Workspace mailbox, connected with Google's own sign-in, so SHAI can send new emails and replies and find emails for you. SHAI never sees your Google password. If you connect more than one mailbox, SHAI uses Gmail first.
What happens without it
with another mailbox connected (Outlook, Zoho Mail or IMAP), SHAI uses that one instead. With none, emails are drafted for you to send by hand.
The CRM your businesses run on. SHAI's GoHighLevel agents work inside it, and it can also send your texts and emails and hold your calendar.
What happens without it
None of the GoHighLevel agents can run; your personal-life agents lose only this way of sending, not their plans.
GoDaddy (your own online store)
A business's own GoDaddy store. GoDaddy's Commerce API (launched 2026-08-27) is available to an account with an active commerce store, whose store id GoDaddy creates with a GoDaddy Payments account. Read 2026-10-27, its pages now state the address (https://api.godaddy.com, in the published OpenAPI contracts) and the scope names, so Ecommerce -> GoDaddy connects with a Personal Access Token holding only commerce.store:read, commerce.product:read and commerce.order:read plus the store id, checks them with GET /v1/commerce/stores/{storeId} before sealing, and reads SKUs (the catalog GraphQL skus query) and orders (the order GraphQL filterOrders query, by processed date) - read-only, so approved copy is pasted by the owner. GoDaddy does not say whether every Websites + Marketing Online Store is a Commerce API store, so the CSV route stays: the Store writes the product CSV and the owner imports it (physical products, up to 100 per import on Websites + Marketing Commerce, one photo each).
What happens without it
Nothing: without a token the GoDaddy page shows no figures and gives the CSV import route step by step (a manual-fallback).
Google's official API for creating and managing Search/Display campaigns (v25): a CampaignBudget then a Campaign, batched through GoogleAdsService.Mutate with temporary resource names; for a store, Performance Max with a Shopping listing group from the business's own Merchant Center feed, a purchase conversion action, search-term and product reads, negatives and ad-group bids (each launch and each budget or bid increase on one approval). On the platform a business connects its own Google Ads account by signing in with Google on /connections.
What happens without it
setup/plan still deliver in full; launch holds at needs-connector: google_ads. On the platform the sign-in is offered once SHAI's Google Cloud project has production API access recorded (Explorer, Basic or Standard).
Google AI (Gemini) API key
The tenant's own Gemini key, reached through Google's own OpenAI-compatibility layer. Routed work only, for the reason the OpenAI row gives.
What happens without it
Nothing stops. A policy that names Google without this key parks that step as needs-connector: google.
The calendar your life planner writes to. GoHighLevel's calendar works too.
What happens without it
your plans are still built, merged and checked for clashes, but nothing lands on a real calendar; the report says planned, never written.
Google Merchant Center (your own, for Google Shopping)
The business signs in with Google on Google's own screen (scope https://www.googleapis.com/auth/content) through the operator's Google Cloud project - the same OAuth client as Google Ads. SHAI seals the refresh token, writes the store's products into its own API data source ('SHAI Store products') with the Merchant API v1 (productInputs:insert), and reads each product's status back. A WooCommerce store or the store SHAI builds on Vercel is sent directly; Shopify, Wix and GoDaddy sync through their own free Google channel, step by step. Offered only once GOOGLE_ADS_CLIENT_ID, GOOGLE_ADS_CLIENT_SECRET and GOOGLE_MERCHANT_API_READY=1 are set.
What happens without it
Google ads for a store run as Search only; Shopping and Performance Max need products in a Merchant Center linked to the Google Ads account.
Google's official Device Access API for a person's own Nest thermostats, cameras, doorbells and displays: real, documented and user-authorizable, but only on the user's own Device Access project (a one-time US$5 registration), through an OAuth client in the user's own Google Cloud project, and for personal use only. On the platform (2026-10-17) the Google Nest card saves that client and runs Google's sign-in; in Claude Code alone it stays a manual-fallback checklist. Not on the owner's integrations list, so no /integrations page.
What happens without it
Direct Nest reads and commands park as a manual-fallback unit with the row's checklist; the same devices work through the user's own Home Assistant Nest integration if they have set it up there.
Google's real speed test, which SHAI's site speed agent uses for before and after scores. It needs a Google Cloud API key; the free tier is generous once you have one.
What happens without it
the speed fixes are still delivered in full; the before and after scores wait until a key is connected, and a score is never guessed.
Google Places API (New)
Google's official business search (for example "HVAC in San Diego"). Pitch Studio's Find step searches it on your own Google Cloud key: name, category, rating and review count, website, phone and hours, up to 20 businesses per search.
What happens without it
Find cannot search Google. Apify, an imported CSV or a prospect added by hand still work, and so do the scan, the Leak Report and the proposal.
Google's own API for a site's search performance — the real data /seo reads instead of an invented ranking figure.
What happens without it
Live query/impression/position data; the rest of an SEO pass still runs.
The tenant's own xAI API key, reached through xAI's OpenAI-compatible API at https://api.x.ai/v1. Routed work only, and only for the kinds of work the owner moves to Grok. grok.com's own sign-in is never used.
What happens without it
Nothing stops. A kind of work moved to Grok without this key parks as needs-connector: xai.
Avatar videos from a script: HeyGen's stock avatars, a photo avatar, or a digital twin of a real person, plus voices, translation and lip-sync, billed to your own prepaid HeyGen API balance. Nothing is made of a real person until their recorded consent is on file, and every video is labelled as AI-made.
What happens without it
Nothing stops: the avatar video waits for HeyGen to be connected, with steps to do it by hand meanwhile.
The video-generation service SHAI's video editing agents use, on your own Higgsfield account.
What happens without it
The videos only Higgsfield can make; everything else in an edit still runs.
The open-source smart-home hub you run on your own hardware, which reaches every brand you already own. You connect it with an access token you create on your own Home Assistant profile page. This is the recommended way to connect SHAI's smart home agent: connect the hub, not each brand.
What happens without it
the smart home agent cannot read or control anything (unless SmartThings is connected instead); it still writes its schedule suggestions and approval requests and tells you in one line what to connect.
Hotel and flight search/booking APIs (Booking.com, major OTAs)
Booking.com and the other big travel sites only give booking access to approved partners with a signed contract, and Booking.com is not taking new partner sign-ups right now. No major flight search site offers a personal API, and Amadeus Self-Service shut down on 2026-07-17.
What happens without it
Nothing. This is how it works today: SHAI's flight, hotel and booking agents search airline, hotel and travel-site results pages and cite real prices each time, with no paid connector. Hotels are booked on the property's own site, through a travel site's booking steps you finish yourself, or by SHAI's phone agent. If your company uses Navan, its read-only connection gives SHAI your travel policy and existing trips, and booking still happens in Navan by hand.
The person's own iCloud Mail, linked as an IMAP mailbox on Unipile's own hosted sign-in page with an Apple app-specific password. Apple offers third-party apps no OAuth for mail through either route SHAI has, and its own page says app-specific passwords "allow you to sign in to your Apple Account in apps made by developers other than Apple". The password is typed on Unipile's page, never into SHAI.
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.
Mailbox warm-up, sending-domain rotation, sequence builder, and deliverability/reply-tracking platform for cold outbound — distinct from Resend (transactional only).
What happens without it
Sequence copy and compliance checklist still deliver; no mailbox warm-up, live send, or real reply/deliverability numbers. needs-connector: instantly recorded.
Klaviyo (your own email marketing)
A business's own Klaviyo account, connected with a private API key (pk_) the owner creates with Accounts Read, Metrics Read, Templates Full and Flows Full. SHAI reads the account's sender and postal address, finds the store's Started Checkout or Placed Order metric, makes one CODE template per email (Klaviyo's own unsubscribe tag and organization address in the footer) and one flow per sequence with every email in draft. The owner sets each email live in Klaviyo; SHAI never turns on sending.
What happens without it
The sequences stay in SHAI, with click-by-click steps for Shopify Messaging or GoHighLevel.
LeadsPlease (licensed consumer and business data — Audiences)
A licensed marketing-data vendor. Audiences uses it to count and pull consumer or business lists by area and demographics, with email and phone when you ask, plus its intent scores (not yet tested). Its terms: marketing use only, not a consumer report, no credit, insurance, job or housing decisions, no reselling, and Do Not Call numbers removed. SHAI uses it only after your one-time acknowledgement, and never texts or calls anyone from it.
What happens without it
your Audiences search can still be written and saved, but nothing is counted or pulled.
LinkedIn's official API: sign-in and posting, commenting and liking as you, plus marketing tools for approved partners. It cannot send connection requests or private messages, or search member profiles, and LinkedIn's Sales Navigator partner program is closed to new partners.
What happens without it
This is a limit of LinkedIn's API, not a missing key: it sends no invitations or messages. For LinkedIn lead lists and outreach, SHAI uses your own PhantomBuster account.
Meta's official API for a business's Instagram professional account and Facebook Page. Its messaging APIs reply only inside a conversation the person opened (the 24-hour standard window) — they cannot send a cold first DM, which is the tool's own limit.
What happens without it
No official-API publishing, comment replies, in-window DM answers or insights on Instagram; the skills use Ayrshare for scheduled posts, the user's own PhantomBuster or Unipile after the acknowledgement, hand the queue to the user, or record needs-connector: meta.
Meta's official API for creating and managing Meta/Instagram ad campaigns (/act_<id>/campaigns, /adsets, /adcreatives, /ads, /insights), Graph API v26.0 -- distinct scope from the Meta Graph API row (organic DMs/engagement). On the platform a business connects its own ad account by signing in with Facebook Login for Business on /connections.
What happens without it
setup/plan still deliver the full structure/calendar; launch holds at needs-connector: meta and nothing spends. On the platform the sign-in is offered once SHAI's Meta app is configured and Meta's App Review has granted Advanced Access.
Microsoft Outlook / Microsoft 365 / Hotmail / Live (your own mailbox)
The person's own Microsoft mailbox — a work or school Microsoft 365 account or a personal Outlook.com, Hotmail or Live account — connected by Microsoft's own sign-in (OAuth) through Pipedream Connect's Microsoft Outlook Email app (actions include Send Email, Reply to Email, Find Email and Get Message). Microsoft Graph reaches both work accounts and personal Microsoft accounts. SHAI never sees the Microsoft password.
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.
Microsoft Teams
Where SHAI lives in Microsoft Teams, through a bot each workspace registers in its own Microsoft tenant (bring-your-own-bot): @SHAI in channels and group chats it has been added to, direct messages, approvals as Adaptive Cards that resolve the same approval row the dashboard, SMS, voice, Slack and Discord resolve, files and page links posted back as links, and scheduled tasks delivered to a conversation. SHAI's operator needs no Microsoft account.
What happens without it
@SHAI reaches nothing in this workspace's Teams and no approval can be pressed there. The dashboard, chat, SMS, voice, Slack and Discord are unaffected and every approval is still decidable in all of them.
National Do Not Call Registry (the business's own SAN download)
The FTC's registry for telemarketers. A seller gets its own Subscription Account Number (SAN) at telemarketing.donotcall.gov and downloads full or change lists by area code (once a day at most) or searches up to 10 numbers at a time; there is no general API (the FTC mentions SOAP change-list services through its help desk only). SHAI takes the business's own download as a file (manual-fallback) and refuses to call a home phone or mobile in an area code without a download from the last 31 days.
What happens without it
Cold calls still reach business landlines; every home phone and mobile in an area code without a current download is blocked, and the screen says which area codes to download.
National Weather Service API (api.weather.gov, free)
NOAA's National Weather Service public API: the 7-day forecast and active alerts for the farm's point. Free and keyless.
What happens without it
Nothing to connect. If it doesn't answer, the page says so and the rest works.
A company's own travel and expense platform. SHAI reads it through Navan's official MCP server (https://mcp.navan.com/mcp): an OAuth sign-in with the company's SSO or a Navan login, and for an SSO company a Navan admin enables MCP under Integrations first. Navan's own MCP page (developer.navan.com/mcp/, dated 2026-09-04) says the server reads existing trips and bookings, policy, approval flows and expenses and does not create, modify or cancel bookings; navan.com/anywhere says of it "Write-access is coming soon". Booking inside Gemini Enterprise, ChatGPT or Slack is Navan's own assistant integrations, not this server. So the S2 travel skills use it on a company trip to mark every quote in or out of the company's travel policy and to see trips already booked, and hand the booking itself back as a manual-fallback unit in Navan. No SHAI-native adapter is built: Navan's developer portal documents an Expense API (OAuth client credentials) and no fare-search or booking endpoint. On the owner's integrations list (entry 1993), so it keeps its /integrations page.
What happens without it
Nothing: the travel skills search fares and hotels on the open web exactly as before. A company trip is not checked against the company's Navan travel policy or its existing Navan trips, and the result says so in one line.
Neon (your own Postgres, for Spaces)
Your own Neon account: SHAI creates one database for each Space (an app SHAI builds and deploys for you), so the data stays yours.
What happens without it
The Space is written but not hosted; SHAI names the two accounts it needs, and nothing is charged.
Your own OpenAI key. SHAI hands it smaller jobs, such as summaries, sorting, first drafts and checks, while the main work stays on Claude. It also transcribes the call recordings you upload to sales roleplay.
What happens without it
Nothing stops. Any step meant for OpenAI is done by SHAI itself, and it says so; it never switches to a more expensive model without asking. Uploaded call recordings are refused before anything is sent, and the roleplay itself still runs.
Image and video generation for AI logos, walkthrough videos and aerial flyovers, on your own OpenArt account and credits.
What happens without it
No AI-made logo and no walkthrough or flyover video for a client; the website and non-video services still work.
The tenant's own OpenRouter key - one key that reaches hundreds of models, including open-weight ones no vendor sells directly. This is the only provider SHAI reaches through a first-party AI SDK provider package rather than an OpenAI-compatible base URL.
What happens without it
Nothing stops. A policy that names OpenRouter without this key parks that step as needs-connector: openrouter.
OpenTable (restaurant reservations)
The reservation system SHAI's restaurant booking agent would use to book a table directly instead of sending you a link. OpenTable has no self-service developer access or personal key; approved partners only, after a written application and a signed agreement.
What happens without it
Nothing stops. SHAI uses the restaurant's own OpenTable booking link first, and its phone agent when there is no online way to book.
Long video in, short clips out, on your own Opus Clip account (Pro plan and above). Once connected, Viral Clips sends your video to Opus Clip after you approve the credit quote, brings the clips back with titles and hashtags, and ranks them by Opus Clip's virality score. That score is not available through its API, so you type it in from the Opus app, and it is labelled as Opus Clip's prediction.
What happens without it
Nothing stops: SHAI picks the clips itself for free, and Viral Clips notes that Opus Clip would add its own picks.
PandaDoc (documents and e-signature - not sendable from SHAI yet)
PandaDoc documents and e-signature. SHAI cannot send through PandaDoc yet, so no key is asked for: send the agreement from PandaDoc yourself, then press Mark signed on the New client pack.
What happens without it
Nothing: the pack's agreement goes through Dropbox Sign, or is sent by hand and marked signed.
The tenant's own Perplexity API key, reached through Perplexity's Agent API at https://api.perplexity.ai/v1/agent (Sonar Chat Completions support ended on 2026-09-27, per Perplexity's own docs). Web research with numbered sources whenever the key is connected, and routed work only for the kinds of work the owner moves to Perplexity. perplexity.ai's own sign-in is never used.
What happens without it
Nothing stops. Runs research the web the way they did before, and a kind of work moved to Perplexity without this key parks as needs-connector: perplexity.
Your own free Pexels API key, an optional extra source of stock footage and images. Pexels has paused new keys (as of 2026-10-13), so only someone who already has one can add it; nobody needs one. Pexels is credited in your review, as it asks.
What happens without it
Nothing: Pixabay, your own library, icons and text cover every visual, and SHAI never asks for a Pexels key.
A data and automation platform, billed by run time. Its automations can act as your own LinkedIn, Instagram, Facebook or X account through a login you connect inside PhantomBuster. SHAI starts them through PhantomBuster's official API only after your one-time acknowledgement, at PhantomBuster's own safe limits, and never sees or keeps your login.
What happens without it
no exports from your own accounts and no first message on any network (Meta does not allow one); your drafted messages come to you as a list to send yourself.
Your own free Pixabay API key, SHAI's main source of stock footage and images after your own library. Files are downloaded rather than linked, results showing a brand or trademark are skipped (Pixabay's licence bars commercial use of those), and each file used is recorded as stock, never presented as your business.
What happens without it
Nothing stops. A styled video still gets icons and text callouts on the speaker's own words, but no stock footage or image pop-ups unless your own library or approved AI generation supplies them.
Plant Hardiness Zone lookup (phzmapi.org, free)
A free JSON API of hardiness zones by ZIP, built from the 2023 USDA map data (PRISM, Oregon State); not the official USDA map, which the page links.
What happens without it
Nothing to connect. A ZIP it doesn't cover is said plainly with the official USDA map's link.
QuickBooks Online (your own books: revenue, invoices)
A business's own QuickBooks Online company, connected with Intuit's own OAuth sign-in on /revenue through the operator's Intuit app (INTUIT_CLIENT_ID / INTUIT_CLIENT_SECRET). SHAI reads Payments, Sales Receipts and Refund Receipts (money received and returned, as the books record it; minorversion 75 pinned) into the revenue report, lists invoices with a balance owed, and - only when the owner switches invoice sending on and approves each invoice - creates an invoice against the company's first Service item and has QuickBooks email it. QuickBooks does not move money, so it never refunds. Tokens are renewed before each hourly expiry and revoked at Intuit on disconnect.
What happens without it
Nothing else: the revenue report says QuickBooks is not connected; until the operator registers the Intuit app, /revenue says which two variables are missing.
Reddit Data API (the Sales Engine's community research)
Reddit's official API, through your own Reddit app with read-only access: public posts and comments where your buyers talk, filtered for relevance, paraphrased or briefly quoted, with no usernames kept. It is not yet connectable on the platform, where the Sales Engine uses YouTube, your own scraper and public pages instead.
What happens without it
Nothing stops. The Sales Engine uses its other allowed sources, or marks every line as a guess to test when none is connected.
Sends the emails SHAI writes for you, such as reminders and notices.
What happens without it
Nothing stops: the email is planned and logged, and its content still lands in your workspace for you to send yourself.
The subscription backend for mobile apps: monthly recurring revenue, active subscriptions, recent revenue, churn, trials and lifetime value. SHAI only reads it, as an optional source of app revenue for your forecast and scaling plan.
What happens without it
Nothing: your forecast and scaling plan use the numbers you gave SHAI and mark app revenue unavailable until it is connected.
Ring (doorbells, cameras, alarm)
Amazon's Ring doorbells, cameras and alarms. Ring has an official partner API, but only for registered, identity-verified developers, by invitation, US-only, and the account needs a paid Ring plan or trial. There is no key you can paste, and SHAI cannot connect to Ring today.
What happens without it
'Who is at the door' is answered by the Ring app, the Ring Alexa skill or IFTTT, not by SHAI; nothing else stops.
The CRM your Salesforce admin agent manages, only through Salesforce's official APIs: never scraping, never a script run against Salesforce's own site.
What happens without it
the Salesforce admin agent cannot read or write any real data in your org. It gives you the connection setup steps instead of making up a field, object, record or report.
Samsung's smart-home cloud and hub. Its public REST API lists devices, reads state, sends commands and runs scenes, authorized with a personal access token the user issues on their own Samsung account with the scopes they choose. A PAT issued since 30 December 2024 expires after 24 hours, and free API access ends in October 2026 (a US$4.99/month personal plan is announced).
What happens without it
Reads and commands park with needs-connector: smartthings when home-assistant is not connected either; nothing else stops.
Shopify (your own store)
A business's own Shopify store, reached through the Admin GraphQL API on an app the store's owner makes in their own Dev Dashboard and installs on their own store (admin-created custom apps can no longer be made). The owner pastes the app's Client ID and Client secret with the store's myshopify.com address on Store; SHAI mints a 24-hour token per piece of work with the client credentials grant, writes each product as a draft (productSet), and publishes it to the Online Store when the owner presses Publish.
What happens without it
Nothing outside the Store: it offers the other platforms or a headless store on your own Vercel.
Shopping and price-comparison APIs (Google Shopping, retailer search)
Google's merchant-facing Content/Merchant API is seller-side only (a store uploading its own product feed), not a consumer price-comparison tool. The consumer side needs no API or account at all — Google Shopping's own public search results and every named retailer's own product-search pages are public pages WebSearch/WebFetch reads directly.
What happens without it
Nothing — no consumer-authorizable purchase API exists for a personal buyer at any retailer checked, so the actual purchase is always the user's own click on the cited retailer link; this was never a gap a connector could close.
Shovels (nationwide building permit and contractor data API)
A commercial API of building permits and the contractors on them, nationwide. Listed as an optional, user-paid source for the Permit Tracker's Find projects mode where a city publishes no open feed; SHAI has no Shovels adapter yet, so the Permit Tracker page reads only the free open-data feeds (needs-connector: shovels). Data refreshes twice a month per its listing; 1 credit = 1 record.
What happens without it
Nothing today: Find projects reads each city's own free open-data feed, and a city without one is a manual-fallback checklist.
Slack
Where SHAI lives in Slack: mention @SHAI in channels, DMs and threads, approve things with a button (the same approvals you see in the dashboard, by text and by phone), get files and page links back, and have scheduled tasks delivered to a channel. SHAI's chat agent builder can also post into your workspace.
What happens without it
@SHAI reaches nothing, no approval can be pressed in Slack, and no task can be delivered to a channel. The dashboard, chat, texts and calls are unaffected, and every approval can still be made there.
Square (your own seller account: revenue, invoices)
A business's own Square seller account, connected with Square's own OAuth sign-in on /revenue through the operator's Square app (SQUARE_APPLICATION_ID / SQUARE_APPLICATION_SECRET on the web service and the worker). SHAI syncs completed payments and refunds (total including tips, processing fees) into the revenue report, lists unpaid invoices, and - only when the owner switches invoice sending on, grants the invoice permissions at Square and approves each invoice - creates an order and an emailed invoice Square publishes from its own page. Refunds need PAYMENTS_WRITE, asked for only when the owner allows refunds, and are approved one at a time. Tokens are renewed weekly and revoked at Square on disconnect. Ecommerce -> Square uses the same sign-in with Square's catalog permissions added (ITEMS_READ, INVENTORY_READ, ITEMS_WRITE), kept on later sign-ins once granted - or, with no operator app, an access token from an app the seller makes in their own Square Developer Console, checked with GET /v2/locations before it is sealed. It reads the catalog (POST /v2/catalog/search), IN_STOCK counts (POST /v2/inventory/counts/batch-retrieve) and completed orders (POST /v2/orders/search, at most 10 locations a call), and writes an approved item name and description_html by reading the item whole and upserting it with its version (POST /v2/catalog/object), only when the owner presses Approve.
What happens without it
Nothing else: the revenue report says Square is not connected; until the operator registers the Square app, /revenue says which two variables are missing instead of offering a button that would fail.
Your business's own Stripe account, connected with a restricted key you create and paste on the Revenue page. SHAI checks the key before saving it, then brings your payments into your revenue report (gross, refunds, fees and net per currency) and lists open invoices for collections. Only if you turn invoice sending on and approve each one does it create and send invoices from Stripe's own page; refunds are prepared only if you allow them, and approved one at a time. A full secret key is refused. This is separate from your SHAI subscription billing.
What happens without it
Nothing else: the revenue report, the cash collected line and invoice drafting say plainly that no payment source is connected, and SHAI uses the numbers you gave it.
A video editor with a self-serve API on the Business plan (x-api-key, api.submagic.co/v1): create a project from a public MP4/MOV link (2 GB, 2 hours at most), read its status and download link, change it with Update Project (transcript words, silence pace, bad takes, hook title, music, B-roll items) and export it again; plus an official MCP server on the same key. The first member of the video-editing capability group: the Video editor's Connected editor panel sends raw footage to the person's own Submagic project after the minute quote is approved, checks the render with SHAI's own QC and files it as a version; SHAI's own Finish is the free member and the fallback. Webhooks are unsigned, so SHAI reads the status itself. No AI eye contact in the API. Not on the owner's integrations list, so it has no /integrations page.
What happens without it
Nothing stops: SHAI's own Finish (rough cut, Style Clone, captions, renders) does the job, free, and the panel says what Submagic would add.
Terminal49 (ocean container tracking)
Terminal49's container-tracking API on the business's own key: a bill of lading, booking or container number becomes a tracked shipment with the line's port ETA and arrival, read only when someone presses Read tracking now.
What happens without it
Nothing else: type the ETA you were given, or the step shows Unknown.
A business's own TikTok Shop, reached through TikTok Shop's official Open API (https://open-api.tiktokglobalshop.com, signed HMAC-SHA256 requests, versioned paths such as /authorization/202309/shops) on an in-house custom app the seller makes in their own TikTok Shop Partner Center. To register as a seller developer you need an active shop and its bound Account Manager. You upload a business certificate and pass TikTok's registration review (about 5 business days), plus a compliance review in the US and UK. A custom app for your own shop usually needs no app review. SHAI has no approved public partner app, which would need TikTok's full app review and Data Security and Privacy Review. So each business brings its own app, as with Amazon's SP-API. The seller pastes the App key, App secret and Service ID, authorizes on TikTok's own page (services.us.tiktokshop.com for a US shop), and SHAI exchanges the one-time code (grant_type authorized_code, a 7-day access token with a refresh token) and reads the authorized shop's cipher. Reads: products (Search Products 202502), warehouses, orders (Get Order List 202309, no buyer data kept). Writes go through the approval ladder: stock (Update Inventory) follows the owner's settings, and creating a product (Create Product 202309, with photos uploaded from the business's own Store product images) publishes, so it asks every time. Opening the shop, verification, tax and bank details, and agreeing to TikTok Shop's terms happen only in TikTok's own Seller Center. TikTok has no API for them, so the page gives them as a checklist. Pipedream Connect lists no TikTok Shop app (only TikTok Ads Manager).
What happens without it
Nothing else: without it the TikTok Shop page shows the setup checklist step by step (a manual-fallback) and no figures.
Sends your texts and makes your phone calls. It is the only way SHAI can place a call.
What happens without it
Nothing stops: the message is still planned and logged, and you get calendar events and a written schedule instead of a self-sending text.
U.S. Census Bureau geocoder (free)
The Census Bureau's free, keyless geocoder: an address becomes coordinates for route order. An unmatched address is left unplaced, never guessed.
What happens without it
Nothing to connect. Unplaced jobs keep their window order.
One connection for your business's own LinkedIn, Instagram, Facebook Messenger and email accounts (Gmail, Outlook, IMAP). You connect your own Unipile workspace, then link each account on Unipile's own sign-in page, so SHAI never sees a password or login. After your one-time acknowledgement for the social channels and your approval of each campaign's steps, Organic Outreach runs invitations, messages, DMs and emails at safe daily limits you can change, with one shared inbox and results per account and campaign.
What happens without it
Organic Outreach shows the setup card and sends nothing; SHAI still writes every message and email sequence for you to send by hand (and can still use Instantly for email where connected).
Vehicle marketplace and financing APIs (Cars.com, Autotrader, TrueCar; auto lenders)
Cars.com, Autotrader, TrueCar and auto lenders only offer access to dealers and finance partners. TrueCar has no public API, and no lender lets a third party apply for a loan or place an order on your behalf.
What happens without it
Nothing. This is how it works today: SHAI's car buying agent searches dealer and marketplace listings and uses a real published rate table (Experian's quarterly report) for financing, with no paid connector. The purchase, the finance application and the negotiation stay yours, with an exact next-steps checklist.
Hosts the platform itself and every client website SHAI builds, on your own connected Vercel team.
What happens without it
No client website can go live; the platform itself cannot be deployed.
The video host and player for sales videos. SHAI only reads its analytics: plays, play rate, retention, conversions, revenue, traffic and A/B results. Uploading, embed codes and player settings are done in VTurb's dashboard, with step-by-step instructions from SHAI.
What happens without it
Nothing: your sales video script is delivered in full, and the analytics part says connect VTurb.
Wix (your own Wix store)
A business's own Wix site with Wix Stores, through the Wix Stores REST API on an account API key with the Wix Stores permission plus the site's id. SHAI reads which catalog the site runs (V1 or V3), writes each product hidden to that catalog, and makes it visible when the owner presses Publish.
What happens without it
Nothing outside the Store.
WooCommerce (your own WordPress store)
A business's own WooCommerce store, through the WooCommerce REST API v3 with a Read/Write key the owner generates in WordPress (WooCommerce -> Settings -> Advanced -> REST API). SHAI sends the key over https only, as HTTP Basic auth, writes each product as a draft and publishes it when the owner presses Publish.
What happens without it
Nothing outside the Store.
The tenant's own X (Twitter) Developer App API key and secret. Since 2026-03-31 Ayrshare posts to X only with these keys sent on every X-targeting call (X-Twitter-OAuth1-Api-Key / X-Twitter-OAuth1-Api-Secret; Ayrshare does not store them). For posting, SHAI never calls X directly with them - the worker's social tick adds them to the Ayrshare call for a post that names X. Since 2026-10-14 the same keys also read ONE public post's video as a style reference (an app-only bearer token from POST /oauth2/token, then GET /2/tweets/:id with the media expansion, $0.005 a post read); the file is measured and deleted at once. X's API is pay-per-use: no subscription tiers since the legacy Basic (2026-06-01) and Pro (2026-09-01) plans moved to pay-per-use; X's own API has no scheduling endpoint.
What happens without it
X posts are refused with needs-connector: x-developer-app; every other network still schedules.
The person's own Yahoo Mail account, linked as an IMAP mailbox on Unipile's own hosted sign-in page with a Yahoo app password. Yahoo's OAuth for mail is a restricted scope that needs Yahoo's commercial approval (senders.yahooinc.com/developer/developer-access) and neither Pipedream nor Unipile offers it, so the app password is the route; it is typed on Unipile's page, never into SHAI. Unipile's own docs: "Any other (Yahoo, Zoho, AOL, Apple...) : IMAP Account".
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.
YouTube Data API key (your own, for finding a creator's channel)
A Google Cloud API key with the YouTube Data API v3 enabled, pasted by the workspace. SHAI reads only public metadata with it - search.list (type=channel, 100 quota units) for a creator's channel and channels.list + playlistItems.list (1 unit each) for their latest uploads: names, handles, video titles, URLs and dates. No statistics are requested, nothing is downloaded (YouTube Terms of Service; Developer Policies III.E.1), no figure is aggregated across channels (III.E.2 / III.E.4.h), and API data is refreshed or dropped within 30 days. The videos themselves are watched by Gemini on the account's own Google AI key.
What happens without it
A named creator is resolved only from the pages the person gives and Gemini's cited web search; the niche brief lists no YouTube channel names. Nothing else stops.
Zoho Mail (your own mailbox)
The person's own Zoho Mail account, connected by Zoho's own sign-in (Zoho Mail's API uses OAuth 2.0) through Pipedream Connect's Zoho Mail app, whose published actions are Send Email and Create Task and whose one trigger is New Email. Run actions can therefore SEND from Zoho Mail; reading the inbox needs Zoho Mail connected as an IMAP mailbox too (Any other email), because the one-click app publishes no read action.
What happens without it
SHAI uses another connected mailbox if there is one; with none, drafts are written for the person to send by hand.