Where the work comes from

Woken by webhook

Zammad

Read tickets, reply, set state, escalate. A trigger wakes the agent the moment a customer answers — it doesn't wait around, it gets fetched.

Polled by heartbeat

GitLab

Issues as the work queue, source checked out, a fix on a feature branch, a merge request to the supervisor — and the review loop afterwards, red CI included.

Polled by heartbeat

Email (IMAP/SMTP)

A mailbox of the agent's own: triage the inbox, reply, file things away. For everything that arrives without a portal and without an API.

Woken by webhook

Microsoft Teams

A chat channel via the Azure Bot Service: receive and send messages, with every inbound call cryptographically verified.

Files & documents

Polled by heartbeat

Nextcloud

A file store via share link or account: list, read, write, create folders. Access over WebDAV — a bot only needs the link.

Polled by heartbeat

SharePoint / Teams files

The same file operations in the Microsoft stack: a document library through an Entra ID app registration, cleanly scoped.

Web & sandbox

No credentials needed

Browser (headless Chrome)

The universal adapter for web apps that have no plugin of their own: open pages, read text, click, type, save screenshots. Which pages are reachable is decided by the egress allowlist.

No credentials needed

Dev sandbox

The agent's own computer: run shell commands, start dev servers and databases, check them, tear them down again.

Missing one? Plug it in instead of waiting.

Two ways to get there without waiting for a release — both in the UI, neither needs a deploy.

REST system via manifest

A JSON manifest describes auth, actions and the fields of the webhook. Upload it, enable it, assign it — without a line of Go.

MCP servers

Any Model Context Protocol server can be registered as a target system. Covey discovers the tools; you decide per agent which of them it may use.

The sandbox never sees the credentials

No long-lived secret travels into the agent's workplace. Every access goes through the broker at runtime — short-lived, scoped to the target system it needs, and every call lands in the audit trail. What an agent is allowed to do is decided by the control plane's guard rails, not by its prompt.

And the rest of the platform?

Target systems are one half. The other is everything around them that lets you trust an agent workforce in the first place.