101 Things to Build with Civic
Real-world agent workflows, each with the tools, frameworks, and guardrails to ship it safely.
Personal Productivity
1-1010Personal Assistant Agent
S-TierStarterAn AI that reads your email, manages your calendar, and drafts responses — but can only email approved domains and can't see threads from unverified senders.
Inbox Zero Agent
IntermediateReads, labels, and triages your IMAP inbox. Moves newsletters to folders, flags action items, drafts replies. The agent can never permanently delete an email — only soft-delete to trash.
Document Q&A Agent
StarterSearch across Drive, Dropbox, and Notion to answer team questions. Every response has PII auto-redacted and credentials stripped — the agent never sees raw sensitive data.
Meeting Prep Briefing Agent
StarterBefore each meeting, pulls attendee context from HubSpot, recent Slack threads, and relevant docs. Generates a one-page prep brief. CRM contact details are auto-masked.
Cross-Account Calendar Sync
S-TierIntermediateSyncs calendar events across multiple Google accounts — creating busy blocks on a target calendar from source calendars. The agent can only read from specific source calendars, can only write to specific target calendars, can never delete events, can't touch recurring series, and sensitive event details are auto-redacted before syncing. This is where Civic's guardrails are strictly stronger than OAuth scopes.
Presentation Builder Agent
IntermediateTakes a brief, researches content from Drive, builds slides in Google Slides, adds Canva-designed visuals. Can't modify protected presentations or inject external images.
Note-to-Task Converter
StarterReads Notion meeting notes, extracts action items, creates ClickUp tasks with assignees, posts a summary to Slack. Can only read from approved Notion pages and write to approved databases.
Weekly Cross-Tool Digest
StarterEvery Monday, compiles: unread Gmail highlights, upcoming Calendar events, open Jira tickets, and Slack threads into a Google Doc digest. Sensitive content filtered across all sources.
Email Draft Review Agent
IntermediateReviews Gmail drafts before sending: checks tone, compliance with company guidelines, and flags sensitive content. Can read drafts but can't send — only creates reviewed copies.
Shared Drive Gatekeeper
IntermediateMonitors Google Drive shared folders for misplaced files, sensitive content in public folders, and credential leaks. Alerts on Slack. Can only read — never create or move files outside allowed folders.
Sales & Revenue
11-2212Sales Operations Copilot
S-TierIntermediateSyncs deal data between Salesforce and comms tools. Updates pipeline stages, logs activities, alerts reps on Slack. Financial data is redacted from every response; record deletion is blocked at the guardrail level.
Pipeline Deal Tracker
StarterKeeps Pipedrive deals in sync with Slack updates and Sheets reports. Deal values are redacted, deletion is blocked across all entity types, and only your pipeline is visible.
Lead Enrichment Agent
IntermediateMulti-agent team: Researcher finds contacts via Hunter.io/Findymail, Enricher validates emails and pulls company data, Loader pushes qualified leads to ActiveCampaign. PII masked, VIP contacts protected.
CRM Hygiene Agent
IntermediateScans HubSpot for duplicate contacts, stale deals, and missing properties. Bulk-updates records and generates a hygiene report. Can't change ownership, access archived records, or modify restricted properties.
Proposal Generator
AdvancedPulls deal context from Salesforce, client history from HubSpot, templates from Drive. Generates a proposal doc with financials redacted and emails it as a draft restricted to approved domains.
Account Health Monitor
IntermediateMonitors Salesforce accounts for churn signals — declining engagement, escalating support tickets, missed renewals. Alerts account teams on Slack. Data scoped to the agent's permitted accounts.
Outbound Sequence Builder
IntermediateResearcher agent identifies prospects via Tavily, Enricher validates with Findymail, Loader creates ActiveCampaign contacts and enrolls them in approved drip sequences. High-value automation enrollment requires explicit approval.
Win/Loss Analyst
IntermediateAnalyzes closed Salesforce opportunities, reads associated email threads, generates pattern reports in Sheets. Can't query User or Profile objects, and all financial data is redacted.
Deal Room Agent
AdvancedCreates a dedicated Google Drive folder for each Pipedrive deal. Populates with templates, shares with stakeholders, tracks activity. Path traversal and executable file creation blocked.
Commission Calculator
IntermediateReads closed-won deals from Salesforce, applies rules from a protected Google Sheet, posts payout summaries to Slack. The commission sheet can't be overwritten — only empty cells are writable.
Sales Forecast Agent
AdvancedAggregates pipeline data from Pipedrive and HubSpot, runs trend analysis, produces forecast decks in Google Slides. Financial values are redacted — the agent works with pipeline stage and probability, not dollar amounts.
RFP Response Agent
AdvancedReads RFP documents from Dropbox, pulls case studies from Confluence, assembles a response in Google Docs. Sensitive extensions (.key, .pem, .env) auto-filtered from file searches.
Marketing & Growth
23-3412Marketing Campaign Manager
S-TierIntermediateSpins up Meta ad campaigns with Canva-designed creatives, tracks performance in Google Analytics. Every campaign has mandatory budget caps and geo-targeting — the agent physically cannot create an uncapped global campaign.
Email Campaign Autopilot
IntermediateManages ActiveCampaign contacts and drip sequences. The agent can enroll contacts in automations but can't mass-unsubscribe, strip compliance tags, or immediately remove contacts from active sequences.
Ad Spend Guardian
IntermediateMonitors active Meta Ads campaigns, alerts when spend approaches budget limits, and can pause ad sets — but can never delete campaigns, increase budgets, or create new spending commitments.
Social Media Content Agent
IntermediateMulti-agent team: Writer creates copy, Designer generates Canva visuals, Publisher posts to Twitter and Bluesky. Canva's SSRF protection prevents importing from unauthorized domains.
Landing Page Builder
IntermediateTakes a product brief, generates copy, creates Canva hero images, publishes to Webflow CMS. Content filtered before publish, design imports restricted to approved domains.
Ad Creative Generator
IntermediateThree-agent team: Analyst pulls top-performing ad data from Meta Ads, Designer generates variations in Canva, Reviewer scores against brand guidelines. Payment info auto-redacted from ad account data.
Newsletter Builder
IntermediateCurates content from Notion wiki, Google Docs drafts, and web content (Firecrawl). Assembles an HTML newsletter in ActiveCampaign. PII in source content is auto-redacted before the agent composes.
SEO & Analytics Agent
IntermediateCrawls your site with Firecrawl, pulls Google Analytics performance data, generates SEO recommendations in Notion. User-scoped dimensions blocked — the agent sees aggregate data only.
Google Ads Performance Agent
IntermediatePulls campaign and ad performance from Google Ads, correlates with Analytics conversion data, generates weekly reports in Sheets. PII and user-level data auto-stripped.
Influencer Outreach Agent
IntermediateResearcher finds contacts via Findymail and web search, Drafter creates personalized outreach, Sender creates Gmail drafts (never sends directly). Draft content auto-filtered for compliance.
Event Promotion Agent
IntermediateCreates Calendar events, designs invite graphics in Canva, posts to social channels, sends email invites via ActiveCampaign. Attendee lists verified, calendar creation scoped to approved calendars.
Competitor Ad Monitor
IntermediateTracks competitor ad spending patterns via Meta Ads insights, logs findings in Sheets, alerts on Slack when spending changes. All financial account data (balance, payment methods, spend caps) auto-redacted.
Customer Support
35-4410Customer Support Triage
S-TierIntermediateReads Intercom conversations, creates Jira tickets in the support project, updates Confluence runbooks, notifies the team on Slack. The agent can't touch protected issues, transition critical tickets, or create pages outside the runbook space.
IT Helpdesk Agent
IntermediateMonitors IMAP support inbox, creates Jira tickets, searches Confluence for solutions, replies to users. Batch operations are capped, deletion is soft-only, and attachments are verified-sender-only.
Knowledge Base Auto-Updater
IntermediateAnalyzes resolved Intercom conversations, identifies common questions, creates or updates Confluence FAQ articles. Version messages required on every update, space scoping enforced.
Ticket Auto-Categorizer
StarterReads new Jira issues, auto-assigns priority and labels based on content, routes to the right team. Can't change protected issues, restricted issue types enforced, certain users blocked from assignment.
Escalation Manager
IntermediateMonitors Jira for aging P1 tickets, checks Slack for related discussion threads, creates escalation events on Google Calendar. Can't modify protected calendars or schedule during blackout periods.
Customer Onboarding Agent
IntermediateCreates onboarding task lists in ClickUp, schedules kickoff meetings, sends welcome emails, shares Drive folders. Event attendees verified, email domains approved, file creation scoped.
SLA Tracker
IntermediateMonitors Jira ticket ages against SLA thresholds, escalates breaches to Slack, maintains an SLA dashboard in Sheets. Sensitive issues excluded from monitoring, user info redacted.
Customer Feedback Analyzer
IntermediateReads NPS surveys from Sheets, analyzes Intercom transcripts, categorizes feedback themes, posts insights to Notion. PII in survey responses and cells auto-redacted.
Shared Mailbox Manager
IntermediateManages MS365 shared mailboxes: reads, categorizes, and routes incoming messages to appropriate teams. HTML auto-converted to Markdown, unnecessary metadata stripped for token efficiency.
Confluence Runbook Maintainer
IntermediateMonitors resolved support tickets, identifies outdated runbook pages, suggests updates, creates new runbooks for recurring issues. Space-scoped, version-messaged, content-filtered.
Engineering & DevOps
45-5814Code Review & Issue Triage
IntermediateMonitors GitHub PRs and Sentry errors, creates Linear issues for bugs, posts triage summaries to Slack. Everything scoped to vetted repos and orgs — the agent physically cannot see private repos or non-approved organizations.
PR Reviewer Bot
IntermediateReviews GitHub PRs against team standards, checks for security patterns, posts inline review comments. Can only see vetted repos; private repos are invisible.
Infrastructure Monitor
AdvancedCorrelates Cloudflare traffic anomalies, Grafana dashboard metrics, and Sentry error spikes. Creates incident timelines, manages Slack-based escalation, and tracks resolution in Linear.
Dependency Security Scanner
StarterScans GitHub dependencies with Socket, flags supply chain vulnerabilities, creates Linear issues for critical findings. Code search restricted to vetted repos.
Release Notes Generator
StarterReads GitHub commits and PRs since last release, filters to vetted authors, publishes to Confluence. Author emails redacted; space-scoped page creation enforced.
Incident Postmortem Writer
IntermediateAfter a Sentry incident, gathers error traces, Slack discussion, and Grafana metrics. Generates a structured postmortem in Google Docs. Project-scoped Sentry access, blocked content patterns in docs.
Salesforce Apex Security Auditor
AdvancedReviews Salesforce Apex code for security anti-patterns: `without sharing` classes, delete operations on core objects, bulk DML in anonymous Apex. Creates findings in Linear.
Sprint Planning Assistant
IntermediateAnalyzes Linear backlog, estimates effort from historical data, suggests sprint compositions. Scoped to vetted teams and projects; admin status and user activity timestamps redacted.
Database Migration Validator
AdvancedRuns read-only validation queries against PostgreSQL staging: checks row counts, schema diffs, data integrity post-migration. Full SQL injection protection suite active.
GitHub Org Security Auditor
StarterReviews repository settings, branch protection, and team access across your GitHub org. User PII (real name, email, location, private repo counts) auto-redacted.
Log Analyzer
IntermediateQueries Cloudflare Observability logs and Elasticsearch indices, identifies patterns and anomalies, generates diagnostic summaries in Notion. Write-scoped to approved databases.
API Documentation Generator
IntermediateReads GitHub source code and PRs, pulls library docs from Context7, generates API documentation in Confluence. Space-scoped, content-filtered, private pages enforced.
MSSQL Read-Only Analyst
AdvancedQueries MS-SQL databases for business intelligence. Full T-SQL injection protection: no xp_cmdshell, no OPENROWSET, no query stacking, no system table access. WHERE clause required on any UPDATE.
Workflow Automation Monitor
IntermediateWatches n8n workflow executions, detects failures, creates Linear issues for broken automations, alerts on Slack. Issue creation scoped to approved teams and projects.
Data & Analytics
59-7012Secure Data Analyst
S-TierIntermediateRuns SQL queries against your warehouse, writes results to Sheets. The agent physically cannot write data, construct dynamic SQL, access system tables, read sensitive columns, or exfiltrate data via COPY/UNLOAD. This is the strongest technical guardrail demo on the platform.
Secure Database Admin Assistant
S-TierAdvancedHelps DBAs query across PostgreSQL, MySQL, MSSQL, and MongoDB. Every database has its own injection protection suite. Tables are protected regardless of aliasing or obfuscation attempts.
Executive Dashboard Builder
AdvancedPulls data from Google Analytics, Salesforce, and Stripe into a live dashboard. Financial data redacted across all three sources — the dashboard shows trends, not dollar amounts.
Product Analytics Agent
IntermediateQueries Mixpanel and PostHog for user behavior, correlates with Elasticsearch logs, writes insights to Sheets. Universal guardrails protect all analytics queries; Sheets prevents formula injection.
Data Quality Monitor
IntermediateRuns validation queries against PostgreSQL: checks for nulls, duplicates, outliers, schema drift. Full SQL injection protection active even for "just" validation queries.
Google Analytics Privacy Agent
IntermediateGenerates analytics reports with privacy controls: user-scoped dimensions blocked, geo details hidden below country level, IP addresses filtered, user IDs redacted. The agent sees aggregate trends, not individuals.
Customer Segmentation Agent
AdvancedQueries Redshift for behavioral data, runs clustering analysis, pushes segments to ActiveCampaign as tags. Write-blocked on Redshift, sensitive columns protected, tag operations controlled.
Redshift Data Exfiltration Guard
IntermediateMonitors and validates Redshift queries: blocks COPY/UNLOAD (bulk export), external schema access (Spectrum), and maintenance operations. Logs all query patterns to Sheets.
A/B Test Analyst
IntermediateReads experiment configs from Notion, pulls metrics from Google Analytics and PostHog, calculates significance, reports results. User-scoped dimensions blocked for privacy.
MySQL Read-Only Analyst
IntermediateQueries MySQL databases for reporting. Write operations fully blocked, table listings filtered, schema access restricted. Character set enforcement prevents encoding-based attacks.
ETL Pipeline Monitor
IntermediateMonitors Redshift query performance, checks for stale tables, validates row counts post-ETL. Bulk export operations blocked even for monitoring agents.
Cross-Database Query Agent
AdvancedQueries PostgreSQL, MySQL, and MSSQL in a single workflow — joining results across databases. Each database has its own injection protection suite; anti-aliasing protection prevents table access tricks across all three.
Finance & Accounting
71-8212Invoice Automation Agent
S-TierAdvancedCreates Stripe invoices from Salesforce deal data, tracks payment status, reconciles with QuickBooks. Every write operation — create invoice, create price, finalize invoice — requires admin role. Non-admins are blocked at the guardrail level.
Subscription Manager
S-TierAdvancedHandles Stripe subscription lifecycle: upgrades, downgrades, coupon applications, cancellations. Every action admin-gated. Coupon discounts capped at both percentage and dollar amount.
E-Commerce Operations Agent
S-TierAdvancedMonitors Shopify orders, processes Stripe payments, updates inventory in Sheets, sends order updates via MS365 Mail. Payment operations admin-gated, product naming enforced, HTML auto-converted for email processing.
Expense Report Processor
IntermediateReads receipt emails, extracts data via Mistral OCR, categorizes in Bill.com, summarizes in Sheets. OCR output has PII auto-redacted; SSRF protection on URL-based OCR.
Crypto Portfolio Tracker
StarterTracks prices and market data for your approved coins only. The agent can't see trending coins, new listings, or gainers/losers outside your vetted list — preventing exposure to unvetted assets.
Stripe Payment Dashboard
IntermediateReal-time payment monitoring: tracks payment intents, filters by status, alerts on failures. Customer data redacted, sensitive search terms blocked, payment statuses filtered.
AP Automation Agent
IntermediateProcesses incoming bills from Bill.com, matches to POs in Sheets, routes for approval. Protected spreadsheets are read-only; the agent can only write to empty cells.
Revenue Recognition Agent
AdvancedMaps Stripe payment data to QuickBooks accounts, generates revenue schedules in Sheets. Payment intents filtered by status; protected sheet ranges enforced.
Payment Reconciliation Agent
AdvancedCompares Stripe transactions against PayPal records and bank statements in Sheets. Sensitive search terms blocked across both payment platforms, customer data redacted.
Financial Reporting Agent
AdvancedQueries Redshift for financial data, pulls QuickBooks reports, produces monthly P&L in Google Slides. Sensitive columns (salary, revenue, cost) protected at query level; write operations blocked.
CardPointe Payment Agent
IntermediateProcesses credit card authorizations, manages customer payment profiles for recurring billing, generates transaction reports. Universal guardrails protect all payment operations.
Stripe Product Catalog Manager
IntermediateManages Stripe product catalog: creates products and prices with naming pattern enforcement, price floors and ceilings. All write operations admin-gated.
HR & People Ops
83-886HR Onboarding Coordinator
IntermediateSchedules onboarding meetings, creates Notion tasks, sends welcome emails. Calendar blackout periods enforced, exec calendars protected, email recipients verified.
Recruiting Pipeline Agent
IntermediateTracks candidates in Sheets, schedules interviews via Calendar, sends status update emails, logs notes in Notion. Candidate PII masked in spreadsheets, interview attendees domain-verified.
Performance Review Aggregator
IntermediateCollects peer feedback from Google Forms (Sheets), manager notes from Notion, compiles anonymized review summaries in Docs. PII patterns auto-redacted across all sources.
Offboarding Checklist Agent
IntermediateWhen an employee departs: creates ClickUp checklist, blocks calendar deletion of recurring events, notifies IT on Slack. The agent can process offboarding without destroying calendar history.
ServiceTitan Field Staff Agent
IntermediateCoordinates ServiceTitan jobs, schedules routes via Calendar, logs notes in Notion. Customer PII (phone, email, address) auto-redacted. Technicians filtered by business unit.
Insperity HR Data Agent
IntermediateAccesses employee data and payroll information through Insperity, generates workforce reports in Sheets. Universal guardrails protect all HR data with PII and prompt injection filtering.
Legal & Compliance
89-935Contract Review Agent
AdvancedReads contracts from Dropbox, extracts key terms via OCR, flags risky clauses, logs findings in Sheets. Sensitive file extensions auto-filtered; SSRF protection on OCR; folder-scoped access.
GDPR Data Subject Request Handler
S-TierAdvancedOn DSR request, searches Gmail, HubSpot, Salesforce, and Sheets for the subject's data. Compiles a report with PII auto-redacted from each source. The agent finds data without exposing it.
Compliance Audit Trail Agent
IntermediateMonitors Cloudflare audit logs for policy violations, cross-references with Sentry access patterns, logs findings in Notion. Org-scoped access across all tools.
HubSpot Data Compliance Agent
IntermediateMonitors HubSpot for data compliance: filters by data classification, hides pipeline objects from unauthorized views, redacts PII from search results, blocks regex search operators.
Notion Access Control Agent
IntermediateEnforces Notion workspace governance: restricts page creation to approved parents, protects critical databases from updates, filters sensitive content from searches and queries.
Content & Design
94-985Content Ops Pipeline
AdvancedMulti-agent team: Writer drafts in Google Docs, Designer creates in Canva, Publisher pushes to Webflow. Content pattern blocking catches sensitive data, SSRF protection on Canva imports.
Canva Design Governance Agent
IntermediateManages Canva design library: enforces export format restrictions, filters designs by owner, restricts folder access, controls AI generation types. Sensitive text in designs auto-redacted.
Documentation Site Updater
IntermediateReads API changes from GitHub PRs, generates updated doc pages, pushes to Webflow CMS, notifies on Slack. PR access scoped to vetted repos; branch listings filtered.
Content Localization Agent
AdvancedMulti-agent conversation: Translator localizes content, Reviewer validates accuracy, Publisher updates Webflow pages. PII patterns redacted from source content before translation.
Dropbox Security Scanner
IntermediateScans Dropbox for security risks: sensitive file extensions, malicious formats, files in wrong directories. Folder-scoped, regex search blocked, large files filtered.
IoT & Physical World
99-1013Smart Home Voice Agent
S-TierStarterControl lights, climate, and appliances through natural language. The agent physically cannot touch locks, garage doors, or gates — and temperature is hard-capped at safe limits. This is the most intuitive guardrail demo: "The AI controls your lights but can't unlock your door."
Morning Routine Orchestrator
StarterAt wake time: gradually increases light brightness, reads today's calendar events, summarizes top emails, sets climate to preferred temperature. Device classes restricted, brightness capped.
Smart Office Manager
IntermediateManages meeting room lights and climate based on Calendar occupancy. Turns on lights before meetings, adjusts temperature based on room size, dims after hours. Floor and area scoped.
Showing 101 of 101 use cases.
Ready to build?
Free to start. No credit card required. Connect your first tool in under two minutes.