Live-data connectors

Connectors let your agent answer with real data from your systems — order status, bookings, account details — while only ever seeing the exact fields you allow. This is a Pro & Enterprise feature.

How it works

1. You define a connector in Dashboard → Connectors: a name, when to use it, an endpoint, its parameters, and a response field allowlist.
2. When a visitor asks a relevant question, the agent calls your endpoint with only the declared parameters.
3. Your endpoint returns data; Torbie strips everything outside the allowlist before the AI ever sees it.

Security model — default deny

• Only parameters you declared are ever sent.
• Only fields you allowlisted come back to the model.
• Every request is signed with a shared secret (HMAC-SHA256).
• Identity-aware lookups (e.g. "what did I order?") only run for email-verified customers.

Verifying the signature

Each request includes X-Torbie-Timestamp and X-Torbie-Signature. Recompute and compare:

expected = hmac_sha256(timestamp + "." + rawBody, YOUR_SECRET)
// reject if it doesn't match, or if the timestamp is over 5 minutes old

Templates

Prebuilt templates get you live in minutes: Shopify (order lookup by number or email), WooCommerce, and a generic REST builder. Enterprise plans can also connect a read-only database with table and column allowlists.