Source catalogue — availability verified separately

842 Definitions. 15 Platforms.No false availability claims.

This catalogue documents the operations Keva is designed to support. Platform-action execution is currently suspended while provider-effect custody is proven; a definition here is not evidence that setup, execution, rollback, or live verification is available.

842
Defined Actions
15
Source Catalogues
4
Risk Labels
Paused
Provider Effects
Intended governed execution path

The contract Keva is working toward

The catalogue records risk and intended controls. Current provider-effect execution remains suspended.

1

AI Decides

The agent reads the ticket and determines what platform action would resolve the issue.

2

Risk Assessed

Each definition carries a risk label used by the intended admission policy.

3

Approval Checked

Admitted mutations must satisfy the applicable approval and authority contract.

4

Effect Verified

A future enabled path must independently read back the provider effect before claiming success.

Key Differentiator

API and browser paths in the source design

The source contains API and browser execution paths. Their presence is preflight evidence only; current admission, configured provider behavior, deployment, and independent product proof vary.

Priority 1

API Action

Catalogue definitions intended for provider APIs when the relevant connector and execution path are admitted.

e.g. Update product price, create refund, restart deployment

Priority 2

Browser Action

A designed fallback for browser-mediated work. Interactive and provider-effect paths are not claimed available here.

e.g. WAF rule config, env var updates, webhook endpoint setup

Fallback

Instructions

If neither API nor browser access is available, Keva guides the customer with step-by-step instructions.

e.g. Platform not connected, requires physical access

Illustrative browser use cases

Cloudflare

Configure WAF rules, update Page Rules, manage rate limiting, deploy Workers

Vercel

Update env vars across environments, configure edge functions, rollback deployments

AWS

Modify IAM policies, update S3 bucket configs, manage CloudFront distributions

Stripe

Configure webhook endpoints, update billing portal settings, manage tax rules

GitHub

Update branch protection rules, manage repository secrets, configure Actions

Selected Admin Consoles

Authentication-mediated workflows and settings not exposed through a supported API

These are target use cases, not verified outcomes. Current source deliberately fails closed for assessed interactive browser work, and configured authentication, provider effects, recovery, deployment, and live product behavior remain separate proof obligations.

All 15 source catalogues

Browse the source catalogue

Counts below are action definitions. WordPress is the only self-serve setup surface for this release; the other 14 catalogues are unavailable and platform execution remains suspended.

GitHub

65 definitions
Developer PlatformUnavailable for this release

Catalogue summary: Repository management and issue tracking from support tickets.

Issue trackingPR managementCI/CD workflowsRelease management+4 more
View all 65 definitions

Cloudflare

62 definitions
InfrastructureUnavailable for this release

Catalogue summary: DNS, CDN, security, and edge computing from support tickets.

DNS managementCache purgingSSL/TLS configFirewall rules+6 more
View all 62 definitions

HubSpot

49 definitions
CRMUnavailable for this release

Catalogue summary: CRM management and customer engagement from support tickets.

Contact managementDeal trackingTicket managementTask management+4 more
View all 49 definitions

Jira

47 definitions
Project ManagementUnavailable for this release

Catalogue summary: Issue tracking and sprint management from support tickets.

Issue trackingSprint managementBoard managementWorklog tracking+4 more
View all 47 definitions

Slack

41 definitions
CommunicationUnavailable for this release

Catalogue summary: Team messaging and notifications from support tickets.

Channel managementMessage sendingThread repliesReactions+4 more
View all 41 definitions

AWS

40 definitions
Cloud InfrastructureUnavailable for this release

Catalogue summary: Cloud infrastructure management from support tickets.

EC2 managementS3 storageCloudWatch monitoringRoute53 DNS+4 more
View all 40 definitions

Salesforce

38 definitions
CRMUnavailable for this release

Catalogue summary: CRM operations with locally implemented customer-sync paths.

Contact managementAccount managementCase creationLead tracking+4 more
View all 38 definitions

Supabase

31 definitions
Backend-as-a-ServiceUnavailable for this release

Catalogue summary: Backend platform management from support tickets.

Project managementEdge functionsStorage managementSecret management+4 more
View all 31 definitions

Docker

30 definitions
Container OrchestrationUnavailable for this release

Catalogue summary: Container lifecycle and infrastructure management from support tickets.

Container lifecycleImage managementContainer logsResource stats+4 more
View all 30 definitions

Kubernetes

30 definitions
Container OrchestrationUnavailable for this release

Catalogue summary: Cluster management and workload orchestration from support tickets.

Pod managementDeployment scalingRollback releasesLog streaming+4 more
View all 30 definitions

Vercel

29 definitions
HostingUnavailable for this release

Catalogue summary: Frontend hosting and deployment management from support tickets.

Deployment managementRollbacksEnv variablesDomain management+4 more
View all 29 definitions

Railway

25 definitions
HostingUnavailable for this release

Catalogue summary: Cloud hosting and service management from support tickets.

Service managementDeployment controlEnv variablesDomain management+4 more
View all 25 definitions
Setup reachability — all 15 catalogues

Know what can be configured before supplying credentials

WordPress is the only customer-reachable self-serve setup surface for this release. The other 14 source catalogues are unavailable; do not supply credentials. Numeric setup-time and provider-success claims remain unproven.

TokenCredential form

Copy & Paste

Unavailable catalogues are listed separately and must not receive credentials.

WordPress
Platform by platform

Copy & Paste

1 connector
WordPress
Self-serve UI

Install the Keva plugin, then paste the Bridge token from Keva → Status in wp-admin

WordPress admin access to install a plugin (an Application Password is optional, for user-account actions)

No customer-reachable setup UI

14 catalogues
ShopifyUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

SlackUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

RailwayUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

VercelUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

SupabaseUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

StripeUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

GitHubUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

CloudflareUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

HubSpotUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

JiraUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

AWSUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

SalesforceUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

DockerUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

KubernetesUnavailable

Unavailable for the WordPress-only design-partner release

Do not supply credentials or configure this connector for the current release

Setup is not execution proof

Current application source applies AES-256-GCM envelopes to selected connector credentials before storage, but platform-action execution is globally suspended. Configured storage, provider authentication, runtime effects, independent read-back, deployment, and product behavior remain separate verification boundaries. Revoke provider-issued credentials at the provider separately.

Safety-first by design

Every action has a risk level

Risk labels describe the intended policy. The current global platform-action suspension takes precedence over every label, including low-risk reads.

Low Risk

Read-only definitions. If execution is later enabled, policy may admit them without approval.

Examples: List orders, get customer details, check deployment status

Medium Risk

Create or update definitions. If enabled, the intended default is an approval queue.

Examples: Update product prices, create tickets, send messages

High Risk

Destructive or hard-to-reverse definitions. Any future admitted path must require explicit approval.

Examples: Process refunds, delete records, restart services

Critical Risk

Definitions with severe consequences. Any future admitted path must require confirmation with full context.

Examples: Cancel subscriptions, delete products, remove workers

Know what is catalogued—and what is proven.

Review the catalogue with us and identify which setup, execution, and verification boundaries matter for your stack.

Catalogue depth is not production-readiness proof.

Book a Demo