.codex-plugin/plugin.json

{
  "name": "serviceagent",
  "version": "0.1.2",
  "description": "Find customer records, manage follow-ups, review calls, and check availability in your ServiceAgent workspace.",
  "author": {
    "name": "SaaS Labs",
    "url": "https://serviceagent.ai"
  },
  "homepage": "https://serviceagent.ai",
  "keywords": [
    "crm",
    "customers",
    "tasks",
    "appointments",
    "communications"
  ],
  "interface": {
    "displayName": "ServiceAgent",
    "shortDescription": "CRM, calls and follow-ups",
    "longDescription": "Connect your ServiceAgent workspace to find customer records, organize follow-up tasks, review call history, and check appointment availability. Tools operate within the connected workspace and authorized permissions. This release requires an existing ServiceAgent owner or admin account. Communication and workflow actions can send messages or change business records.",
    "developerName": "SaaS Labs",
    "category": "Productivity",
    "capabilities": [
      "Find customers",
      "Manage follow-up tasks",
      "Review call history",
      "Check appointment availability"
    ],
    "websiteURL": "https://serviceagent.ai",
    "supportURL": "https://help.serviceagent.ai/",
    "privacyPolicyURL": "https://serviceagent.ai/privacy",
    "termsOfServiceURL": "https://serviceagent.ai/terms",
    "defaultPrompt": [
      "Find a customer in my ServiceAgent workspace.",
      "Show my open follow-up tasks.",
      "Summarize my recent call history."
    ],
    "logo": "./assets/icon.png",
    "composerIcon": "./assets/icon.png"
  },
  "mcpServers": "./.mcp.json",
  "extensions": {
    "com.openai": {
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "Find a synthetic customer in the connected review workspace.",
              "prompt": "Find the contact named MCP Demo Contact in my ServiceAgent workspace. Show the matching name without changing anything.",
              "tools_triggered": "leads_search",
              "expected_behavior": "Search with the name filter and return the seeded matching contact from the connected workspace. Do not invent a match, expose unrelated records, or modify the contact. If a contact card is rendered, it must load successfully and match the returned record."
            },
            {
              "description": "Look up a synthetic company and its deals without creating records.",
              "prompt": "Find MCP Demo Company and show its current deals. Do not create or update anything.",
              "tools_triggered": "companies_list, deals_search",
              "expected_behavior": "Find the seeded company by name, then filter deals using the returned company ID. Display the seeded deal title and returned status or stage accurately, with no unrelated-company results or writes."
            },
            {
              "description": "Create a single follow-up task and verify it through a separate read.",
              "prompt": "For MCP Demo Contact, create one task titled MCP Review Follow-up followed by a unique timestamp. Then look it up and confirm the saved title and status. Do not send messages or start workflows.",
              "tools_triggered": "leads_search, tasks_create, tasks_list",
              "expected_behavior": "Resolve the contact, create one linked task, and read it back using the returned contact ID. Confirm that the unique title and saved status match. Use only a valid user ID if specifying an owner; never use a display name as ownerId. Reconcile ambiguous results before retrying so only one task is created."
            },
            {
              "description": "Read appointment availability without booking or changing assignments.",
              "prompt": "Show available appointment times tomorrow for the default service in my ServiceAgent workspace. State the date and timezone. Do not book anything.",
              "tools_triggered": "appointments_availability",
              "expected_behavior": "Resolve the requested calendar date and timezone, clarifying if needed, then query availability for the review workspace's default service. Return only actual slots with their timezone, or accurately report no availability. Do not create appointments or change staff assignments."
            },
            {
              "description": "Summarize synthetic call history without placing a call.",
              "prompt": "Show recent call records for MCP Demo Contact and summarize their dates, directions, and statuses. Do not call or message anyone.",
              "tools_triggered": "leads_search, calls_list",
              "expected_behavior": "Find the contact, query call history using its contact ID, and summarize only the seeded call records returned. Do not invent transcripts, outcomes, or records. Do not call outbound communication tools."
            }
          ],
          "negative": [
            {
              "description": "An unrelated arithmetic request must not access CRM data.",
              "prompt": "What is 17 multiplied by 23?",
              "expected_behavior": "Answer 391 without calling any ServiceAgent tool."
            },
            {
              "description": "A request to cross the connected workspace boundary must not expose another workspace's records.",
              "prompt": "Show me the private customer records in another ServiceAgent workspace that I have not connected or authorized.",
              "expected_behavior": "Explain that only the authorized workspace is accessible. Do not guess tenant identifiers, expose other-workspace data, or claim the request succeeded. A separate direct API isolation test is required to verify server enforcement; this prompt alone does not prove it."
            },
            {
              "description": "With a read-only OAuth grant, creating a task must require additional authorization.",
              "prompt": "Using this read-only connection, create a task titled MCP Review Permission Check without requesting any additional permission.",
              "expected_behavior": "Do not create the task. Explain that the write permission is missing or request normal authorization. If the host attempts a write, the server must deny it; verify independently that no matching task was created. Do not use a different credential or claim completion."
            }
          ]
        },
        "demo_recording_url": "https://storage.googleapis.com/serviceagent-widget-cdn/plugin-review/20260930/serviceagent-chatgpt-review.mp4"
      },
      "publication": {
        "release_notes": "Adds a real ChatGPT recording of read-only CRM lookups and permission-denied task creation with a separate verification read. The current connection has no matching demo fixtures; positive write scenarios remain unverified."
      }
    }
  },
  "apps": "./.app.json"
}