101 Things to Build with Civic

Syncs deal data between Salesforce and comms tools. Updates pipeline stages, logs activities, alerts reps on Slack. Financial data is redacted from every response; record deletion is blocked at the guardrail level.

Keeps Pipedrive deals in sync with Slack updates and Sheets reports. Deal values are redacted, deletion is blocked across all entity types, and only your pipeline is visible.

Multi-agent team: Researcher finds contacts via Hunter.io/Findymail, Enricher validates emails and pulls company data, Loader pushes qualified leads to ActiveCampaign. PII masked, VIP contacts protected.

Scans HubSpot for duplicate contacts, stale deals, and missing properties. Bulk-updates records and generates a hygiene report. Can't change ownership, access archived records, or modify restricted properties.

Pulls deal context from Salesforce, client history from HubSpot, templates from Drive. Generates a proposal doc with financials redacted and emails it as a draft restricted to approved domains.

Monitors Salesforce accounts for churn signals — declining engagement, escalating support tickets, missed renewals. Alerts account teams on Slack. Data scoped to the agent's permitted accounts.

Researcher agent identifies prospects via Tavily, Enricher validates with Findymail, Loader creates ActiveCampaign contacts and enrolls them in approved drip sequences. High-value automation enrollment requires explicit approval.

Analyzes closed Salesforce opportunities, reads associated email threads, generates pattern reports in Sheets. Can't query User or Profile objects, and all financial data is redacted.

Creates a dedicated Google Drive folder for each Pipedrive deal. Populates with templates, shares with stakeholders, tracks activity. Path traversal and executable file creation blocked.

Reads closed-won deals from Salesforce, applies rules from a protected Google Sheet, posts payout summaries to Slack. The commission sheet can't be overwritten — only empty cells are writable.

Aggregates pipeline data from Pipedrive and HubSpot, runs trend analysis, produces forecast decks in Google Slides. Financial values are redacted — the agent works with pipeline stage and probability, not dollar amounts.

Reads RFP documents from Dropbox, pulls case studies from Confluence, assembles a response in Google Docs. Sensitive extensions (.key, .pem, .env) auto-filtered from file searches.

Spins up Meta ad campaigns with Canva-designed creatives, tracks performance in Google Analytics. Every campaign has mandatory budget caps and geo-targeting — the agent physically cannot create an uncapped global campaign.

Manages ActiveCampaign contacts and drip sequences. The agent can enroll contacts in automations but can't mass-unsubscribe, strip compliance tags, or immediately remove contacts from active sequences.

Monitors active Meta Ads campaigns, alerts when spend approaches budget limits, and can pause ad sets — but can never delete campaigns, increase budgets, or create new spending commitments.

Multi-agent team: Writer creates copy, Designer generates Canva visuals, Publisher posts to Twitter and Bluesky. Canva's SSRF protection prevents importing from unauthorized domains.

Takes a product brief, generates copy, creates Canva hero images, publishes to Webflow CMS. Content filtered before publish, design imports restricted to approved domains.

Three-agent team: Analyst pulls top-performing ad data from Meta Ads, Designer generates variations in Canva, Reviewer scores against brand guidelines. Payment info auto-redacted from ad account data.

Curates content from Notion wiki, Google Docs drafts, and web content (Firecrawl). Assembles an HTML newsletter in ActiveCampaign. PII in source content is auto-redacted before the agent composes.

Crawls your site with Firecrawl, pulls Google Analytics performance data, generates SEO recommendations in Notion. User-scoped dimensions blocked — the agent sees aggregate data only.

Pulls campaign and ad performance from Google Ads, correlates with Analytics conversion data, generates weekly reports in Sheets. PII and user-level data auto-stripped.

Researcher finds contacts via Findymail and web search, Drafter creates personalized outreach, Sender creates Gmail drafts (never sends directly). Draft content auto-filtered for compliance.

Creates Calendar events, designs invite graphics in Canva, posts to social channels, sends email invites via ActiveCampaign. Attendee lists verified, calendar creation scoped to approved calendars.

Tracks competitor ad spending patterns via Meta Ads insights, logs findings in Sheets, alerts on Slack when spending changes. All financial account data (balance, payment methods, spend caps) auto-redacted.

Reads Intercom conversations, creates Jira tickets in the support project, updates Confluence runbooks, notifies the team on Slack. The agent can't touch protected issues, transition critical tickets, or create pages outside the runbook space.

Monitors IMAP support inbox, creates Jira tickets, searches Confluence for solutions, replies to users. Batch operations are capped, deletion is soft-only, and attachments are verified-sender-only.

Analyzes resolved Intercom conversations, identifies common questions, creates or updates Confluence FAQ articles. Version messages required on every update, space scoping enforced.

Reads new Jira issues, auto-assigns priority and labels based on content, routes to the right team. Can't change protected issues, restricted issue types enforced, certain users blocked from assignment.

Monitors Jira for aging P1 tickets, checks Slack for related discussion threads, creates escalation events on Google Calendar. Can't modify protected calendars or schedule during blackout periods.

Creates onboarding task lists in ClickUp, schedules kickoff meetings, sends welcome emails, shares Drive folders. Event attendees verified, email domains approved, file creation scoped.

Monitors Jira ticket ages against SLA thresholds, escalates breaches to Slack, maintains an SLA dashboard in Sheets. Sensitive issues excluded from monitoring, user info redacted.

Reads NPS surveys from Sheets, analyzes Intercom transcripts, categorizes feedback themes, posts insights to Notion. PII in survey responses and cells auto-redacted.

Manages MS365 shared mailboxes: reads, categorizes, and routes incoming messages to appropriate teams. HTML auto-converted to Markdown, unnecessary metadata stripped for token efficiency.

Monitors resolved support tickets, identifies outdated runbook pages, suggests updates, creates new runbooks for recurring issues. Space-scoped, version-messaged, content-filtered.

Monitors GitHub PRs and Sentry errors, creates Linear issues for bugs, posts triage summaries to Slack. Everything scoped to vetted repos and orgs — the agent physically cannot see private repos or non-approved organizations.

Reviews GitHub PRs against team standards, checks for security patterns, posts inline review comments. Can only see vetted repos; private repos are invisible.

Correlates Cloudflare traffic anomalies, Grafana dashboard metrics, and Sentry error spikes. Creates incident timelines, manages Slack-based escalation, and tracks resolution in Linear.

Scans GitHub dependencies with Socket, flags supply chain vulnerabilities, creates Linear issues for critical findings. Code search restricted to vetted repos.

Reads GitHub commits and PRs since last release, filters to vetted authors, publishes to Confluence. Author emails redacted; space-scoped page creation enforced.

After a Sentry incident, gathers error traces, Slack discussion, and Grafana metrics. Generates a structured postmortem in Google Docs. Project-scoped Sentry access, blocked content patterns in docs.

Reviews Salesforce Apex code for security anti-patterns: `without sharing` classes, delete operations on core objects, bulk DML in anonymous Apex. Creates findings in Linear.

Analyzes Linear backlog, estimates effort from historical data, suggests sprint compositions. Scoped to vetted teams and projects; admin status and user activity timestamps redacted.

Runs read-only validation queries against PostgreSQL staging: checks row counts, schema diffs, data integrity post-migration. Full SQL injection protection suite active.

Reviews repository settings, branch protection, and team access across your GitHub org. User PII (real name, email, location, private repo counts) auto-redacted.

Queries Cloudflare Observability logs and Elasticsearch indices, identifies patterns and anomalies, generates diagnostic summaries in Notion. Write-scoped to approved databases.

Reads GitHub source code and PRs, pulls library docs from Context7, generates API documentation in Confluence. Space-scoped, content-filtered, private pages enforced.

Queries MS-SQL databases for business intelligence. Full T-SQL injection protection: no xp_cmdshell, no OPENROWSET, no query stacking, no system table access. WHERE clause required on any UPDATE.

Watches n8n workflow executions, detects failures, creates Linear issues for broken automations, alerts on Slack. Issue creation scoped to approved teams and projects.

Runs SQL queries against your warehouse, writes results to Sheets. The agent physically cannot write data, construct dynamic SQL, access system tables, read sensitive columns, or exfiltrate data via COPY/UNLOAD. This is the strongest technical guardrail demo on the platform.

Helps DBAs query across PostgreSQL, MySQL, MSSQL, and MongoDB. Every database has its own injection protection suite. Tables are protected regardless of aliasing or obfuscation attempts.

Pulls data from Google Analytics, Salesforce, and Stripe into a live dashboard. Financial data redacted across all three sources — the dashboard shows trends, not dollar amounts.

Queries Mixpanel and PostHog for user behavior, correlates with Elasticsearch logs, writes insights to Sheets. Universal guardrails protect all analytics queries; Sheets prevents formula injection.

Runs validation queries against PostgreSQL: checks for nulls, duplicates, outliers, schema drift. Full SQL injection protection active even for "just" validation queries.

Generates analytics reports with privacy controls: user-scoped dimensions blocked, geo details hidden below country level, IP addresses filtered, user IDs redacted. The agent sees aggregate trends, not individuals.

Queries Redshift for behavioral data, runs clustering analysis, pushes segments to ActiveCampaign as tags. Write-blocked on Redshift, sensitive columns protected, tag operations controlled.

Monitors and validates Redshift queries: blocks COPY/UNLOAD (bulk export), external schema access (Spectrum), and maintenance operations. Logs all query patterns to Sheets.

Reads experiment configs from Notion, pulls metrics from Google Analytics and PostHog, calculates significance, reports results. User-scoped dimensions blocked for privacy.

Queries MySQL databases for reporting. Write operations fully blocked, table listings filtered, schema access restricted. Character set enforcement prevents encoding-based attacks.

Monitors Redshift query performance, checks for stale tables, validates row counts post-ETL. Bulk export operations blocked even for monitoring agents.

Queries PostgreSQL, MySQL, and MSSQL in a single workflow — joining results across databases. Each database has its own injection protection suite; anti-aliasing protection prevents table access tricks across all three.

Creates Stripe invoices from Salesforce deal data, tracks payment status, reconciles with QuickBooks. Every write operation — create invoice, create price, finalize invoice — requires admin role. Non-admins are blocked at the guardrail level.

Handles Stripe subscription lifecycle: upgrades, downgrades, coupon applications, cancellations. Every action admin-gated. Coupon discounts capped at both percentage and dollar amount.

Monitors Shopify orders, processes Stripe payments, updates inventory in Sheets, sends order updates via MS365 Mail. Payment operations admin-gated, product naming enforced, HTML auto-converted for email processing.

Reads receipt emails, extracts data via Mistral OCR, categorizes in Bill.com, summarizes in Sheets. OCR output has PII auto-redacted; SSRF protection on URL-based OCR.

Tracks prices and market data for your approved coins only. The agent can't see trending coins, new listings, or gainers/losers outside your vetted list — preventing exposure to unvetted assets.

Real-time payment monitoring: tracks payment intents, filters by status, alerts on failures. Customer data redacted, sensitive search terms blocked, payment statuses filtered.

Processes incoming bills from Bill.com, matches to POs in Sheets, routes for approval. Protected spreadsheets are read-only; the agent can only write to empty cells.

Maps Stripe payment data to QuickBooks accounts, generates revenue schedules in Sheets. Payment intents filtered by status; protected sheet ranges enforced.

Compares Stripe transactions against PayPal records and bank statements in Sheets. Sensitive search terms blocked across both payment platforms, customer data redacted.

Queries Redshift for financial data, pulls QuickBooks reports, produces monthly P&L in Google Slides. Sensitive columns (salary, revenue, cost) protected at query level; write operations blocked.

Processes credit card authorizations, manages customer payment profiles for recurring billing, generates transaction reports. Universal guardrails protect all payment operations.

Manages Stripe product catalog: creates products and prices with naming pattern enforcement, price floors and ceilings. All write operations admin-gated.

Schedules onboarding meetings, creates Notion tasks, sends welcome emails. Calendar blackout periods enforced, exec calendars protected, email recipients verified.

Tracks candidates in Sheets, schedules interviews via Calendar, sends status update emails, logs notes in Notion. Candidate PII masked in spreadsheets, interview attendees domain-verified.

Collects peer feedback from Google Forms (Sheets), manager notes from Notion, compiles anonymized review summaries in Docs. PII patterns auto-redacted across all sources.

When an employee departs: creates ClickUp checklist, blocks calendar deletion of recurring events, notifies IT on Slack. The agent can process offboarding without destroying calendar history.

Coordinates ServiceTitan jobs, schedules routes via Calendar, logs notes in Notion. Customer PII (phone, email, address) auto-redacted. Technicians filtered by business unit.

Accesses employee data and payroll information through Insperity, generates workforce reports in Sheets. Universal guardrails protect all HR data with PII and prompt injection filtering.

Reads contracts from Dropbox, extracts key terms via OCR, flags risky clauses, logs findings in Sheets. Sensitive file extensions auto-filtered; SSRF protection on OCR; folder-scoped access.

On DSR request, searches Gmail, HubSpot, Salesforce, and Sheets for the subject's data. Compiles a report with PII auto-redacted from each source. The agent finds data without exposing it.

Monitors Cloudflare audit logs for policy violations, cross-references with Sentry access patterns, logs findings in Notion. Org-scoped access across all tools.

Monitors HubSpot for data compliance: filters by data classification, hides pipeline objects from unauthorized views, redacts PII from search results, blocks regex search operators.

Enforces Notion workspace governance: restricts page creation to approved parents, protects critical databases from updates, filters sensitive content from searches and queries.

Multi-agent team: Writer drafts in Google Docs, Designer creates in Canva, Publisher pushes to Webflow. Content pattern blocking catches sensitive data, SSRF protection on Canva imports.

Manages Canva design library: enforces export format restrictions, filters designs by owner, restricts folder access, controls AI generation types. Sensitive text in designs auto-redacted.

Reads API changes from GitHub PRs, generates updated doc pages, pushes to Webflow CMS, notifies on Slack. PR access scoped to vetted repos; branch listings filtered.

Multi-agent conversation: Translator localizes content, Reviewer validates accuracy, Publisher updates Webflow pages. PII patterns redacted from source content before translation.

Scans Dropbox for security risks: sensitive file extensions, malicious formats, files in wrong directories. Folder-scoped, regex search blocked, large files filtered.

Control lights, climate, and appliances through natural language. The agent physically cannot touch locks, garage doors, or gates — and temperature is hard-capped at safe limits. This is the most intuitive guardrail demo: "The AI controls your lights but can't unlock your door."

At wake time: gradually increases light brightness, reads today's calendar events, summarizes top emails, sets climate to preferred temperature. Device classes restricted, brightness capped.

Manages meeting room lights and climate based on Calendar occupancy. Turns on lights before meetings, adjusts temperature based on room size, dims after hours. Floor and area scoped.