Your AI agent becomes dramatically more useful when it can reach into your own systems — not just your help articles. With the right connections in place, the agent can look up a specific customer’s order history, verify their subscription status, check current product availability, or trigger a write action like a refund or address update, all from within a live support conversation. My AskAI connects to your internal systems securely via APIs that you control and configure.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/arainey2022/myaskai-docs/llms.txt
Use this file to discover all available pages before exploring further.
Use Cases
Order management
Look up real-time order status, dispatch information, tracking numbers, and return eligibility for any order ID or customer.
CRM and customer records
Retrieve account details, contact history, support tier, and any open issues for a verified customer.
Subscription systems
Check active plan, renewal date, usage limits, and feature entitlements — then surface the right answer automatically.
Authentication and identity
Trigger password resets, verify account ownership, or unlock accounts — all via API, without human intervention.
Inventory and product data
Query live stock levels, product variants, and availability to answer “do you have this in my size?” accurately.
Payments and billing
Issue refunds, apply credits, or retrieve invoice history by calling your payments platform API directly.
How My AskAI Connects to Your Systems
All connections to internal systems are made via AI Actions (Tools) — HTTP POST requests that your AI agent makes to endpoints you define. The flow looks like this:Authentication Options
My AskAI supports three primary authentication patterns for internal APIs:| Method | When to use |
|---|---|
| Bearer token | Simple, long-lived server-to-server tokens. Best for internal tools. |
| API key (custom header) | When your API uses a non-standard header like X-Internal-Key. |
| OAuth 2.0 | For third-party systems that require delegated access with token refresh. |
Setting Up an Authorization
Before configuring a tool, create an Authorization record to store your API credentials securely.Navigate to Connections > Authorizations
Log in to your Dashboard and go to Connections > Authorizations.
Create a new authorization
Click + New Authorization and give it a descriptive name, such as
Order Management API – Production.Choose your auth type and enter credentials
Select the authorization type (Bearer token, API key, or OAuth 2.0) and enter the required credentials.Bearer token example:API key example:
Configuring a Tool to Call Your Internal API
Once your Authorization is set up, create the Tool (AI Action) that uses it:Go to Tasks & Tools > Tools (APIs)
In your Dashboard, navigate to Tasks & Tools > Tools (APIs) and click + New.
Select your Authorization
Choose the Authorization you created in the previous section. My AskAI will attach the stored credentials to every request automatically.
Define request and response schemas
Tell the agent what to send and what to expect back.Request body:Expected response:
Example: Internal API Call
Here is a representative cURL command showing exactly what My AskAI sends to your internal API when a tool is triggered:Security Best Practices
Use read-only API scopes where possible
Use read-only API scopes where possible
If a tool only needs to retrieve data (e.g. order lookup), create a dedicated API key or OAuth scope with read-only permissions. Reserve write-enabled credentials only for tools that need to make changes (e.g. refunds, cancellations).
Create dedicated API credentials for My AskAI
Create dedicated API credentials for My AskAI
Rather than reusing existing admin credentials, create a dedicated API key or service account specifically for My AskAI. This allows you to rotate, audit, or revoke access independently without affecting other integrations.
IP allowlisting
IP allowlisting
For additional security, you can restrict your internal API to only accept requests from My AskAI’s IP addresses. Contact My AskAI support via the live chat widget to obtain the list of egress IP addresses to allowlist on your firewall or API gateway.
Validate request authenticity
Validate request authenticity
Your API should validate the Authorization header on every request and return a
401 Unauthorized immediately if it is missing or incorrect — never process requests without a valid credential.Never expose credentials to users
Never expose credentials to users
All API credentials are stored server-side within My AskAI and are never surfaced in the browser, the chat widget, or in any conversation. Users cannot see or access your internal API keys.
Choosing the Right Connection Type
My AskAI offers three distinct ways to connect your internal systems depending on your use case:| Scenario | Best approach |
|---|---|
| Look up data for a verified user (e.g. order history by email) | User Data API |
| Look up data for any user using parameters they provide (e.g. order ID) | AI Actions (Tools) |
| Multi-step workflow that collects info, applies logic, and calls APIs | Tasks |