Developer overview
Everything programmable in OpenAgent: the widget embed and JavaScript SDK, verified identity, webhooks out, the CRM ingest API in, the Contacts API, and the hosted MCP server.
View as MarkdownOpenAgent is operable without code — but every edge is programmable. This section covers the surfaces you'd wire into your own site or backend:
Embed & JavaScript SDK
One script tag; window.bookbag to control the widget from your own UI.
Identity verification
Server-signed HMAC identity: the agent knows who it's talking to, provably.
Webhooks
Signed HTTP POSTs when leads land, conversations end, or actions run.
CRM ingest API
POST any form's fields into a board with a crk_ Connections key.
Contacts API
Create, upsert, and manage contacts and custom attributes.
MCP server
The whole platform as tools for any MCP-capable AI.
Auth at a glance
| Credential | Prefix | Used for |
|---|---|---|
| Workspace API key | bk_… | The MCP server and workspace APIs — full access, treat as a password. |
| CRM Connections key | crk_… | Write-only lead ingest to one board/column. Safe to give a partner site. |
| Agent signing secret | (per agent) | HMAC for identity verification — server-side only. |
| Webhook signing secret | (per endpoint) | Verifying webhook deliveries are really from OpenAgent. |