Features
Six capabilities. One dashboard. Over 300 vendor-specific tools. No chatbots.
Capability 01
The runtime for your standard operating procedures.
Replaces: the Confluence page no one reads, the Google Doc that's three versions behind, the engineer who knows how.
Capability 01
SOP Engine
The runtime for your standard operating procedures.
SOP · password-reset
Capability 02
Vendor-specific tools. Not a chatbot with a chat-shaped answer for every question.
Replaces: the generic LLM that searches docs and hopes for the best.
Capability 02
AI Copilot — 300+ tools
Vendor-specific tools. Not a chatbot with a chat-shaped answer for every question.
Copilot · run trace
user
License headroom for Westwood Health?
tool · pax8.license_check
customer="westwood-health" · sku="m365-e3"
result
19/20 seats. 95% used. Suggest +5 next renewal.
Capability 03
One customer, one identity, across every vendor you use.
Replaces: the six-tab search for what the customer is called in each system.
Capability 03
Customer Mapping
One customer, one identity, across every vendor you use.
One customer · five vendors
Capability 04
Deterministic, idempotent retries for every run.
Replaces: the 'was that ticket created twice?' Slack thread.
Capability 04
Webhook Replay
Deterministic, idempotent retries for every run.
Failed runs · last 24h
Capability 05
Every run priced, to the token.
Replaces: the surprise on your AI bill.
Capability 05
Cost Telemetry
Every run priced, to the token.
Cost · last 7 days
$42.18
Capability 06
Gated writes. Immutable audit. No surprises.
Replaces: guessing whether the AI did something it shouldn't have.
Capability 06
Approvals & Audit
Gated writes. Immutable audit. No surprises.
Pending approval
tool autotask.update_ticket
customer Pioneer Print
change status → resolved
The agent team
Ops AI isn't a single chat agent answering everything. Each agent has a job, a scope, and a tool set. They hand off to each other when they need to — and to a human when the policy says so.
Agent 01
Classifies and routes every incoming event.
Reads the webhook, pulls context from your PSA, RMM, IT Glue and CSP, decides whether to run an SOP, escalate to a human, or close on the spot.
Example · Outlook offline ticket — looks up tenant health, finds the live Azure incident, notifies customer, closes ticket.
Agent 02
Runs your standard operating procedures step by step.
Walks the visual DAG, calls vendor tools in order, branches on conditions, asks for approval where you've gated it.
Example · New starter onboarding — eight steps across Microsoft CSP, IT Glue and Autotask, with one approval gate for the license assignment.
Agent 03
Pulls related alerts into a single investigation.
Groups noisy multi-source alerts (Datto EDR plus Datto RMM plus UniFi) into one incident with one ticket, one trace, one timeline.
Example · Endpoint isolated, matching RMM offline, matching UniFi flap — one EDR-anchored incident, not three duplicate tickets.
Agent 04
Acts on EDR signals under explicit approval policy.
Isolates an endpoint, raises a ticket with full IoC context, notifies the channels you've configured, hands off to a human for the destructive steps.
Example · Ransomware signature on a laptop — endpoint isolated, ticket opened, customer notified, the wipe-and-reimage call gated for human approval.
Agent 05
Generates scheduled summaries for you and your customers.
Reads from your audit log and vendor APIs, produces customer-facing reports on a cron, posts internal summaries to the channels you choose.
Example · Monthly per-customer activity report — tickets handled, SOPs run, license headroom — delivered on the first business day of every month.
Also built in
Three primitives every MSP automation needs and most products leave you to bolt on.
Cron-style triggers for the SOPs that don't start with a webhook. Daily license-headroom checks, weekly stale-ticket sweeps, monthly reporting — all running on the same runtime as your webhook-triggered SOPs.
Teams channels, Slack, email, in-app, and browser push — with per-user preferences for email, Slack, push, and in-app. Every alert names the run, links the trace, and surfaces the customer. Nothing gets dispatched without a record.
Every agent run streams to the dashboard in real time over WebSockets. Watch a triage decision land. Approve a gated write the moment it's queued. No polling, no F5.
For Microsoft CSP partners
If you sell Microsoft 365 through Pax8 or direct via Microsoft CSP, the manual parts of onboarding a new tenant are exactly the parts Ops AI is built for.
Replaces: the spreadsheet that tracks which tenant-onboarding step is still pending and the team chat where someone has to remember to chase it.
SOP · new-tenant-onboarding
Integrations
Each tool is written against the vendor's official API, versioned, and tested. If the vendor ships a breaking change, our tests catch it before your SOPs do.
Read and write tickets, resolve customers, assign resources. Full Autotask Web Services API coverage for the calls that matter.
autotask_create_ticket update_autotask_ticket search_tickets autotask_close_ticket + 56 more Trigger components against a device, look up device state, surface alerts into SOPs and triage decisions.
rmm_run_component rmm_list_devices rmm_list_alerts + 38 more Resolve passwords for verified requests, pull SOPs and runbooks into agent context, read configs.
itglue_get_password itglue_list_documents itglue_list_configurations + 31 more Proactive license checks, seat counts, and expiry warnings. Catch a depleted SKU before the customer does.
pax8_get_subscription pax8_list_subscriptions + 35 more Resolve a tenant, read subscription state, and run M365 admin actions — users, licenses, mailboxes, groups, conditional access — under GDAP, with safety gates on every write and human approval where you require it. Anchor cross-vendor identity to the Microsoft tenant.
list_csp_tenants get_csp_subscription_status + 93 more Network state at a glance, client diagnostics, and remote actions where you allow them.
get_unifi_site_health get_unifi_client + 42 more Correlate EDR alerts with the ticket queue. Isolate an endpoint from an agent run — with approval.
get_edr_threat_info edr_isolate_device + 27 more Need a tool we don't ship? Tell us — the tool surface grows every release.
Microsoft Azure. Tenant-scoped Postgres. Entra auth. Every claim on the Security page is a fact, not a certification badge.
Try it
14 days, no card. Connect your PSA, point Ops AI at a test queue, and watch what an agent actually does before you roll it out.