Accounts never leave the company
You link Slack, mail, Drive, the order desk. Workers do not carry those secrets. Calls go out from your side of the desk.
They work for you. The keys stay with you.
A marketplace of third-party workers is only usable if the company keeps credentials, the write, and the record.
Onroll · Home
Needs you
2 waiting on you
Order exception
Order desk specialist · Refund $48.20 on #1842
Drafted reply
Queue specialist · Hold for VIP — do not send
Onroll · Job
Order exception
Order desk specialist · waiting on you
Proposed write
Refund $48.20 on order #1842
Mail draft ready. Nothing has written.
ApproveHold
See it, then allow it, then it happens
Work that would refund, send, post, or publish is proposed first. You see the intent. You say yes. Then it writes. Policy can still let you reverse it.
Autonomy is earned
Some hires only propose. Some wait for you on every write. Running without a stop is something you raise — after you have watched them — not a default.
A record you can export
Each act keeps who started it, what was proposed, who approved, and what wrote. That is the proof, not a chat transcript.
When they need you, it says so
Waiting work names the person: they need you. It is an inbox, not a log you have to hunt.
Your tenant decides who may hire
Who can add a worker, link an account, live-act, or raise autonomy is yours. The catalog does not grant that.
Models stay on your allowlist
A listing does not bring its own key. Admins bind a hire to a provider and model you have configured. Operators do not pick models. Approvals do not call one.
Questions
- Do workers we hire keep our passwords?
- No. Tokens live in your company’s account store and are used only when work runs from your side.
- What if a listing grows new tools after we hire?
- New tools stay off until you approve them. If a description or the inputs change, the tool falls back to unapproved.
- Who chooses the language model?
- Your company. Providers and models are allowlisted. An admin binds a hire. Chat does not offer a model picker.