Settings
Your agency's billing, API key, integrations, vault, and usage.
Credit balance
Prepaid balance used by Ambrose. Add a card to top up manually, or enable auto top-up below to refill automatically when the balance gets low.
Payment method
Used for credit top-ups and auto top-up. Card number stays at Stripe — Ambrose only stores a token plus the brand, last 4, and expiry to display on this page.
Add credits
Charge your saved card. Funds are added to your balance immediately.
Auto top-up
When your balance drops below the threshold, Ambrose automatically charges your saved card to refill. After 3 consecutive failures we turn this off so you don't get hammered with declines.
Top-up history
Every Stripe charge against your saved card — manual top-ups and auto top-ups. Failed attempts surface here too with the decline reason.
Your subscription
Loading...
Plans
Pick a plan to subscribe. Payment is handled securely via Stripe — you'll be redirected to their checkout page, then bounced back here.
Team members
People who can sign in to this agency. Invite a teammate and they'll get an email with a temporary password to log in at /login.
Invite a user
They receive a login email with a temporary password. Members can use the app; Admins can also manage billing, users, and settings.
Agency API Key
Authenticates your agency to the auto-generated APIs for your agents and teams. Treat it like a password.
Connected apps
Apps that signed in with OAuth and currently hold access to your agents/teams — e.g. a Claude Desktop or Cursor custom connector. Revoking forces the app to re-authorize the next time it connects.
AI Provider
Where the War Room sends its model calls. System Bedrock is on us — each message bills your Ambrose credit balance for the LLM tokens consumed plus a flat $0.01 platform fee. BYOK skips our billing entirely — you're billed directly by Anthropic at list price.
Spend Caps — prevent runaway AI bills
Hard ceiling on total LLM spend (your Bedrock + BYOK calls combined) over a rolling window. When a cap is hit, the War Room and @head asks return 429 spend cap reached until the window rolls over or you raise the cap. Set to 0 to disable a window. Defaults: $20 daily / $50 weekly / $100 monthly.
Anthropic API Key
Only required when "My own Anthropic API key" is selected above. Stored encrypted in your isolated vault. Never visible to Ambrose staff.
Connect the external systems Ambrose uses on your behalf. All credentials encrypted at rest. Per-user isolated — SAA never sees them.
Third-party integrations
Store external APIs your agents can use — give each a name, description and API info. Add as many as you like, attach them to any agent or team, and the Executive War Room always has them. Secrets are stored securely and never shown again.
Loading…
GoHighLevel
Not setGive all the permissions to your PIT (Personal Integration Token) from your GHL account.
HealthSherpa
Not setAPI key for syncing clients + generating live ACA quotes. Feeds into your Vault.
ACA Marketplace API key
Not setOptional. Your own healthcare.gov Marketplace API key for live ACA plan + subsidy lookups. Leave blank to use the platform default — this only overrides it for your agency.
GitHub
Not setPersonal Access Token so agents can push generated code & projects to your own GitHub repos. Stored encrypted; only your agency can use it.
How do I get a token?
- Open github.com/settings/tokens/new (Settings → Developer settings → Personal access tokens → Tokens (classic) → Generate new token (classic)). Use a Classic token.
- Add a Note + Expiration, then tick these scopes: repo (required), workflow, write:packages, and write:org (under admin:org, for organization repos).
- Click Generate token, then copy it (GitHub shows it once). A classic token looks like
ghp_…. - Paste it below and Save. Full guide: Connect GitHub →
Twilio
Not setOptional — for SMS / voice via Retell/VAPI-adjacent workflows. Twilio uses two credentials together (HTTP Basic auth): the Account SID identifies your account, the Auth Token is its secret. Both live on the Console dashboard.
Slack
—Bring Ambrose into Slack — chat with it and run your workspace, or just send notifications to a channel. (Slack is not used to sign in.)
Once connected, @mention Ambrose in any channel it's in (or DM it):
• @Ambrose <question> — answers using your agency's data & tools, and can create or update agents, teams, routines, skills and integrations (you get an Approve / Deny button before anything changes — it never deletes).
• @Ambrose renewals: <question> — routes to that specific agent or team.
Advanced — use your own Slack app instead
- Create an app at api.slack.com/apps → From scratch.
- OAuth & Permissions → Bot Token Scopes:
app_mentions:read,chat:write,im:history,im:read,channels:history,users:read(addincoming-webhookif you'll also post notifications). - Event Subscriptions → turn on → paste the Request URL below → subscribe to bot events
app_mentionandmessage.im(skipmessage.channels). - Interactivity & Shortcuts → turn on → set the Request URL to
<this domain>/slack/interactivity— this powers the Approve / Deny buttons. - Install to Workspace, then copy the Bot User OAuth Token (
xoxb-…) and Signing Secret (Basic Information). - Add the bot below and pick who answers. Invite it to a channel and
@mentionit.
Add a bot
Discord
—Two ways to connect — pick whichever fits the use case.
In Discord, right-click the channel → Edit Channel → Integrations → Webhooks → New Webhook → Copy Webhook URL. No bot creation, no permissions. Testing pings the URL via a metadata read — no message posted.
Add a channel
Need something else? Drop a request via the chat drawer and Ambrose can help wire up any OAuth / API-key integration.
MCP Connections
Plug any MCP server into Ambrose. HTTP servers (hosted or local) work today. Discovered tools auto-appear on the Tools page tagged "yours" — any agent or team can use them.
Add an MCP server
Claude Routines
Every Claude Code routine registered for your agency — including ones added from an Agent or Team's Claude Routines tab — shows here. Once registered, any agent, team, the Ambrose chat, and the War Room can trigger it by name. Paste a routine's full claude.ai/code/routines URL or its trig_… ID, plus the per-routine API token. Tokens are stored encrypted-at-rest and never shown again. Docs →
Answer notifications
When an agent or team pauses a run to ask a question (during a webhook, routine, or chat), it always shows in that node's Conversations tab with a “Needs your answer” badge. Choose where else to be pinged. A channel fires only when it's turned on and configured below.
Vault encryption
Your Book of Business is stored locally in vault/. You can add a password so files are encrypted at rest — required before uploading any PHI.
Once enabled, Private Mode unlocks the vault with your password on session start. Losing the password = losing the vault (no recovery). Back it up.
AI Usage
Every LLM call your agency made — agents, teams, war rooms. Cards summarize the selected window; the table lists each call.