Zuora + Memtro

Only when you ask, and only what it has been granted: post draft invoices (up to 50 named invoices); email an invoice to the addresses you name; change an invoice's due date, invoice date or comments; cancel an invoice; write off an invoice (creates a credit memo); reverse an invoice (creates a credit memo); update a customer account's details; add a contact to a customer account; cancel a subscription; suspend a subscription; resume a suspended subscription; renew a subscription for a new term; record an external payment or charge the customer's payment method. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.

A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.

Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded. An hourly sync anchors recently changed Zuora records into memory as entities.

REST host, OAuth client ID and OAuth client secret. In Zuora, open Settings, then Administration, then Manage Users, and pick the user Memtro should act as. A Zuora administrator creates an OAuth client at the bottom of its details. The secret is shown once.