How it works
Register a read-only HTTPS endpoint on your backend. Order status. Subscription tier. Shipment ETA. Agents look it up from inside the ticket.
Read only
Live customer context
Your backend, inside every ticket.
Register a read-only endpoint on your own API, and agents can pull order status, plan, or shipment ETA without leaving the helpdesk.
Ticket ASV-128
Where is my order?
Verified responseyour-shop.com
Order#10428
StatusShipped
ArrivesMonday
PlanPro
Only mapped fields are stored. Cached 60s.
What's included
HMAC-signed calls
Every outbound request is signed, so your backend can verify it's really Assistive calling.
SSRF-hardened fetching
HTTPS only, private and internal IPs blocked, no redirects, and DNS-rebinding-proof.
Mapped fields only
Only the fields you map are ever stored. Raw upstream responses never persist.
Two-step activation
Sources are created disabled. An owner has to enable them before a single call runs.
Per-ticket history
Every lookup an agent runs is recorded on the ticket it was run from.
60-second caching
Repeated lookups reuse a short-lived cache, keeping agents fast and your API quiet.
The details
Rotation and dry runs
Secrets rotate on demand, immediately. Test against your endpoint. Inspect the mapped result. Then enable.
Rotatable
Size-capped responses
A misbehaving endpoint can't flood the helpdesk.
HTTPS only
Private IPs blocked. No redirects. Rebinding-proof.
Two-step enable
Created disabled until an owner switches it on.
Brief caching
Repeat lookups reuse a 60-second cache.
Ready to answer faster?
See why support teams choose Assistive to turn every customer conversation into a fast, trackable answer.