Principles
Copyboy is an AI employee that joins your tools the way a person does. Three things are deliberately out of scope, and none of them are needed for the product to work.
1. Official APIs and OAuth only
No token interception and no undocumented internal APIs of Slack, Trello, Monday or anyone else. Reverse engineering was never the moat; the moat is the management UX, the memory and the cost transparency.
2. No bot-detection evasion
No “stealth mode”, no pretending to be a human to get past Cloudflare or Auth0. That is circumventing a platform's security measures, and we don't do it.
3. No CAPTCHA solving
CAPTCHA, SSO-only sign-in and hardware 2FA are escalated to a person in your team. The Copyboy tells you what it needs and waits.
What it does instead
- Reads the invite email and decides what to do — a model failure escalates to a human instead of guessing.
- Onboards through a real browser: opens the link, fills in its identity, generates its own password, waits for the emailed verification code.
- Finds or creates its own API key from inside the product, reads the product's own docs, and makes a verified test call.
- When there is no API, keeps the authenticated browser session as the connection.
- Stores everything encrypted. Nothing is ever written in plaintext.