Account AI copilot
Sends a natural-language request to an AI copilot that can configure your entire account and review call history by calling your own API operations on your behalf. It streams progress and returns its reply with any changes applied. Actions that could be destructive are paused and listed for you to approve; resend them marked as confirmed to carry them out.
Authorizations
Flowyte secret API key (Authorization: Bearer flowyte_sk_live_…). Scope-gated; is scoped to your organization — a key can never reach another tenant. The listed scopes in each operation's apiKey requirement are the scopes that key must hold. The tokenUrl is nominal: keys are minted in the dashboard.
Body
Plain-language instruction for the copilot.
Continue an existing copilot conversation (from listAssistThreads). Omit to start a new thread.
Optional free-form hints the client attaches to the turn (e.g. the screen the user is on). Any JSON object; keys are advisory and passed through to the copilot.
Previously returned pendingConfirmations entries the user approved, re-sent verbatim to actually run those held destructive actions.
Response
SSE stream; terminal frame carries AssistResult.
The thread this turn belongs to (persistent memory).
Destructive tool calls the copilot wants to run, held until the user confirms (re-send as confirmed).
OAuth connect affordances the client renders as a button (never the raw consent URL in the reply prose).