Commerce & finance · wired today
Drive Square with governed agents
Money data demands the strictest governance of anything agents touch. The Square connector is one of 205 executable connectors and gives agents 4 read-only tools, with the credential held in the vault and every call receipted.
What agents can run against Square
| Tool | What it does |
|---|---|
list_locations | List the Square seller's locations (the IDs every other Square call is scoped by) |
list_payments | List Square payments, optionally filtered to one location or a start time |
list_customers | List Square customer profiles |
list_catalog | List Square catalog objects (items, categories, taxes, discounts), optionally filtered by type |
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Square connector needs
You provide access token from your Square account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Square's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
This connector was blind shape-proven against the real Square API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.
Square integration FAQ
What can Quox agents do with Square?
Agents can run 4 read-only tools against Square: list locations, list payments, list customers, list catalog. Every call is receipted in the evidence trail.
What does the Square integration need?
You provide access token from your Square account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Square credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Square connector?
This connector was blind shape-proven against the real Square API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.