Workflows
Structured, Zapier-style flows. Triggers, syncs, and pushes. Deterministic: the same input takes the same path every time.
Agent tokens
Access-controlled credentials the agent uses directly from its environment, for actions that depend on judgment.
Workflows — the plumbing
A workflow is a graph: a trigger, then a sequence of actions. Use it for the parts of the process that shouldn’t require thought. Triggers start a workflow:
Actions do the work: run an extraction, run a reconcile table, call an agent, run Python, branch on a condition, loop over a list, write into a storage table, send an email, update a ticket. Plus connector actions for the app you’ve connected.
Two shapes you’ll build early:
Intake. A support ticket arrives → fetch its attachments → create a case in the reconcile table → the agent works it → update the ticket with the outcome.
Agent tokens — the judgment calls
Some actions can’t be pre-wired, because what to do depends on what’s in the case. Drafting the right reply to a supplier who sent a partial order isn’t a template — it needs the facts of that case. For those, you connect the system and grant the agent a token. The agent then acts from inside its own environment: composing the email with the case’s actual data, looking up the record it needs, checking the state of the system before it writes. Once a system is integrated, the agent can query it directly — including your ERP. There is no ceiling where the agent hands off to a fixed connector for the interesting part. What bounds it is the grant: which connectors this reconcile table may use, and what that token is allowed to do. Outbound actions still pass the approval gate. A drafted email is a draft until someone approves it. A case doesn’t end when the agent sends something, either. When the response lands — the supplier answers, the ticket gets a reply — the agent picks the case back up and carries on from where it left off.Choosing between them
In practice most deployments use both: a workflow brings the event in and pushes the final result out, and the agent uses tokens for everything in between.
Connecting a system
Connectors are managed per project under Connect. Connect an app once and it’s available to that project’s workflows and — where you grant it — to the agent. Beyond the native integrations, cloudsquid connects to hundreds of apps through Pipedream, so most systems your team already uses are reachable without custom work. For systems that expose an MCP server, see MCP servers.Connecting Outlook
Outlook connects per project. You can link multiple accounts to one project, and use the same account across projects. Two ways to connect:- Ask the agent — “Connect my Outlook account”. It gives you an authentication link.
- Via Connect — open the project’s Connect panel and click Connect next to Outlook. Same authentication flow.
- By hand — move or copy any email into the folder.
- By rule — in Outlook, go to Settings → Rules → Add new rule, set your conditions (sender, subject keywords, has-attachment), and choose Move to folder → cloudsquid_[projectname]. Orders, invoices, or anything else then flow in without anyone touching them.
Inbox intake cookbook
A shared mailbox turned into structured, worked cases.
The agent runtime
How the agent uses tokens from inside its environment.
Governance
Connector grants, approval gates, and zero retention.
MCP servers
Extending what the agent can reach.