Everything on this page is planned. The architecture page shows how the pieces fit together. Status of every connector below: PLANNED. Nothing is connected, no credentials have been requested, no customer system has been accessed, no form is live, and nobody at Candid8 has been contacted.
Global rules: roles draft only, and a named human says yes before any send, spend, deploy, access grant, legal or financial action. Roles work only on supplied evidence. Every connector below is a PLANNED option limited to read-only or draft-only, and none qualifies a "business-agent adapter" until the owner approves and it is proven. Never invent numbers; missing = UNKNOWN.
A. Lead magnets (gated forms on the new site)
All forms: short, consent line, anti-spam, server confirmation; submissions land as Inbound SDR intake evidence (not auto-emailed). Every outbound reply is a draft requiring a human yes. Magnets contain no invented benchmarks, figures come from the prospect's own uploads or are marked UNKNOWN.
| # | Lead magnet | Who it's for | Gated form fields (draft) | Who drafts it | What the draft is | Human-yes gate |
|---|---|---|---|---|---|---|
| 1 | IT Cost Audit (spend review of ISP, licenses, hardware, support) | SMB/mid-market ops & finance | Company, role, email, #users/sites, upload last 3 invoices (optional), consent | Inbound SDR qualifies; CFO drafts the review (duplicates, overdue, totals by currency); Outbound SDR drafts cover note | Findings memo + follow-up email | Candid8 owner reviews memo & exact recipient before anything leaves; no savings % claimed unless computed from supplied invoices |
| 2 | ISP Quote Comparison (business-internet options for a site) | Offices/sites needing connectivity | Address (site only), current provider/speed/price (optional), #users, timeline, consent | Inbound SDR + CoS (work order) + Outbound SDR (quote email) | Comparison sheet from supplied carrier quotes + draft email | Quotes come only from real upstream quotes entered by humans (ISP partners UNKNOWN); human approves every quote sent; no price invented |
| 3 | License Renewal Calendar | IT managers with M365/security/Adobe/etc. | Vendors, renewal dates, seats, contact, consent | Legal Sentinel (dates/obligations register) + CoS (reminder work orders) + Outbound SDR (reminder drafts) | Renewal timeline + reminder drafts | Human approves each reminder/renewal quote; no auto-renew actions |
| 4 | MBE Supplier Packet | Corporate procurement / supplier-diversity offices, primes | Name, company, buying category, Tier 1/Tier 2 interest, consent | Legal Sentinel (cert + NAICS register) + Outbound SDR (cover email) + CEO (profile summary) | Capability statement draft: cert # HS100001293 and valid-through 2027-07-31 as company-reported, NAICS 541512/541513/541519/541611/561311, service list | Candid8 owner confirms cert current in Houston MSDC directory before packet is published; counsel review for claims; W-9/insurance only if supplied |
| 5 | Security Checklist (self-assessment for SMB) | SMBs | Company, size, email, answers | CTO (checklist content, change plan) + Code Agent (review) + Inbound SDR | Scored checklist (scoring policy to be defined; missing → ask) + follow-up draft | Human reviews content to avoid compliance claims (no "compliant/certified" statements); no vulnerability scanning of prospects |
| 6 | Help-Desk Fit Check (Essential/Standard/Premier match) | Teams of 10+ seats | Seats, hours needed, tools, consent | Inbound SDR + CoS | Plan recommendation using the published plan table (confirm current) | Owner confirms prices before use |
| 7 | Technology Refresh Planner (hardware lifecycle) | Offices with aging devices | Device counts/ages (optional upload) | CFO + CoS | Refresh schedule draft; distributor pricing only from real feeds | Human approves any quote |
Delivery: magnets are served from the new site / HQ; Workqueue card per submission ("Approve & copy").
B. CRM + messaging connectors (PLANNED, none connected)
Public-API status: Public API = documented public API (verify scopes and limits at build time) · Gated = exists but partner or registration gated · Unknown = not verified.
| System | API status | Notes | Scope per role (read / draft-only) |
|---|---|---|---|
| HubSpot | Public API: CRM REST API (OAuth / private app) | Candid8's BDR job post names HubSpot among CRMs, Candid8's actual CRM is UNKNOWN | Inbound SDR/CRO/CEO read contacts, deals; Outbound SDR draft notes/sequences as drafts only; no write, enroll, or send |
| Zoho CRM | Public API: REST API (OAuth) | Same | Same as HubSpot |
| Salesforce | Public API: REST/Bulk APIs (connected app/OAuth) | Named in the BDR job post | Same; read-only objects: Lead, Contact, Opportunity |
| Pipedrive | Public API: REST API (API token/OAuth) | Same | Same |
Rules: one CRM is chosen only after Candid8 tells us theirs (UNKNOWN); role bots never create/modify CRM records, never enroll, never send. CRM write-back would be a separate owner-approved phase with human click-through.
C. Other / ancillary software connectors (PLANNED, none connected)
| Category | Candidate | API status | What a role would do (read / draft-only) | Role(s) |
|---|---|---|---|---|
| Ticketing / PSA | ConnectWise PSA (Manage) | Public API: REST (developer registration required) | Read tickets/SLA/aging → triage board draft | CoS, Listener, Workload |
| Autotask PSA (Datto/Kaseya) | Public API: REST API (API user) | Same | CoS, Listener | |
| Zendesk | Public API: Support API | Same | CoS, Listener | |
| Freshdesk | Public API: REST API v2 | Same | CoS, Listener | |
| Candid8's actual ticketing tool | Unknown (site says "Streamlined Ticketing System"/"Self-Service Portal", vendor not named) | , | , | |
| RMM / monitoring | NinjaOne, Datto RMM | Public API (verify scopes) | Read device/patch/alert exports → patch/risk summary draft | CTO, CoS |
| Candid8's actual RMM | Unknown | , | , | |
| Accounting | QuickBooks Online | Public API: Intuit Accounting API (OAuth) | Read vendor bills/invoices → duplicate/overdue review draft | CFO |
| Xero | Public API: Accounting API (OAuth) | Same | CFO | |
| Productivity / identity | Microsoft 365 (Graph API) | Public API (tenant admin consent) | Read license/seat/renewal data, calendar (consent-based) → renewal calendar draft; no user/license changes | Legal Sentinel, CoS, Workload |
| Google Workspace (Admin SDK, Gmail, Calendar, Drive) | Public API | Same; Drive read for contracts | Legal Sentinel, CoS | |
| Distributor / OEM feeds | Ingram Micro Xvantage (XI) Reseller API | Public API: developer portal (catalog, price & availability, orders, invoices; registration/credentials required), developer.ingrammicro.com | Read price/availability & invoices → quote-line drafts; no order placement | CFO, Outbound SDR (quote drafts) |
| TD SYNNEX Digital Bridge API | Gated: developer docs exist (developer.api.tdsynnex.com); reseller account/credentials required | Read catalog/price → quote drafts | CFO, Outbound SDR | |
| Dell TechDirect APIs | Gated: RESTful, OAuth; warranty, support-request, self-dispatch; TechDirect enrollment required | Read warranty/asset status → refresh planner draft; no dispatch/support requests created | CTO, CFO | |
| Cisco Commerce Xpress Connect APIs | Gated: partner-only (CCO partner access + onboarding exercise) | Read price lists/subscriptions → renewal draft | CFO, Legal Sentinel | |
| Whether Candid8 holds accounts with any of these | Unknown | , | , | |
| ISP quote tools | Carrier / aggregator quoting portals (names UNKNOWN) | Unknown, upstream ISPs and quote tools not public; likely portal/email based | Humans paste real quotes; roles only compare & draft | CFO, Outbound SDR, CoS |
| VoIP | Candid8's VoIP platform (site lists "VoIP, Business Phone System") | Unknown | , | , |
| Cloud billing | AWS Cost Explorer / CUR | Public API | Read cost exports → cost audit draft | CFO, CTO |
| Azure Cost Management API | Public API | Same | CFO, CTO | |
| GCP Cloud Billing API / BigQuery export | Public API | Same | CFO, CTO |
Access pattern if approved: customer-owned least-privilege read-only credentials held in an encrypted credential store (HQ shows credential names only), a per-client allowlist, every API call logged to Activity, exports preferred over live API at first (supplied-evidence model). All writes remain human actions.
D. Suggested sequencing (nothing started)
- Finish the site and HQ, with a connectors tab showing "PLANNED, not connected".
- With the owner's yes, ask Candid8 (through an owner-approved message) which CRM, ticketing, RMM, accounting, distributor accounts, upstream ISPs they actually use.
- Connect one read-only connector at a time (suggested: a shared intake mailbox → accounting exports → ticketing exports), prove with Workqueue round-trip.
- Lead magnets 1-4 first; forms go live only on the owner's yes.