OAUTH 2.0
MEETING INTELLIGENCE
200 Gong calls and nobody has time to replay them. Your agent surfaces the exact objections, competitor mentions, and champion signals per deal, scoped to the rep who owns it.
For more tools, view docs.
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";
const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["gong"], toolNames: ["gong_calls_list", "gong_call_transcript_get", "gong_users_list"] },
pageSize: 100,
});
const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));
const agent = createReactAgent({ llm, tools: lcTools });import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";
const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();
const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["gong"], toolNames: ["gong_calls_list", "gong_call_get", "gong_users_list"] },
pageSize: 100,
});
const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));
const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
.svg)
.svg.png){kind=icon}
// shared bot token
token = "sk_gong_shared_xxx"
audit → bot_service_account
rep_filter → broken
// scalekit · per-user
token = resolve(user_id)
audit → user_abc
scope → enforced ✓
Does the agent access Gong as the user or as a shared key?
As the user. Each workspace member authorizes once and Scalekit resolves their credential at request time. Audit logs attribute every action to that user, not a shared service account.
Where is the Gong oauth 2.0 stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. Refresh is automatic. Revocation is a single dashboard action. Tokens never appear in prompts, logs, or LLM context.
Can I limit what the agent is allowed to do in Gong?
Yes. Pass a tool name filter to listScopedTools so the deal intelligence agent only sees the subset you authorize. Pre-API-call scope checks block out-of-policy actions before the request reaches Gong.
What happens when a user revokes Gong access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Can the agent pull call transcripts for any rep?
Only for reps the authorizing user can already see in Gong. Manager-level access surfaces team transcripts. IC-level access stays scoped to that rep. Scalekit respects Gong's native permissions.
.svg)
.png)
