Product update of the week: Year 4 • Week 36

New in Truto: actionable 403 errors, write validation, deeper HRIS coverage, and 20 new integrations

This week expands our Unified HRIS and Conversational Intelligence APIs, bringing deeper reads and writes to Humaans and Gong. We are also introducing opt-in schema validation for writes, better 403 error insights, and 20 new AI-ready integrations to help you build smarter workflows faster.

✨ Highlights

• Added 20 new AI-ready integrations, including Gusto, LangChain, and VirusTotal, for building AI workflows
• Expanded Humaans Unified HRIS support with 9 new reads and 3 new writes
• Introduced truto_enforce_write_schema=true for opt-in, instant validation of required fields on Unified API write calls
• Added truto_error_insight.forbidden_error to detail the exact reason for permission-denied errors and indicate if a user reconnect will fix them
• Added support for Zscaler's new admin dashboard using Client ID, Secret, and Vanity Domain
• Expanded Gong Conversational Intelligence APIs with deeper call metadata, a new call insights endpoint, and manager info in the User Directory
• Fixed the SharePoint Client Credentials flow, allowing developers to connect using their own Azure app
• Hardened platform security with tighter session validation and access checks across login, webhooks, and APIs
• Fixed minor issues in the CLI build integrations command

🤖 AI-ready integrations

This week we added 20 new AI-ready integrations, giving developers more ways to build AI workflows, assistants, and automations on top of Truto:

• Dotdigital: Connect AI agents to cross-channel marketing automation and customer engagement workflows.
• Cloudways: Build hosting management and server monitoring automation into your AI tools.
• Gusto: Enable AI assistants to manage payroll, benefits, and HR data.
• Humand: Bring employee experience and internal communication data into AI workflows.
• ShipEngine: Connect AI tools to shipping logistics, rates, and tracking data.
• CoinAPI: Fetch cryptocurrency market data and historical pricing for AI analysis.
• Ayla Networks: Integrate IoT device management and smart home data into AI automations.
• VirusTotal: Power security co-pilots with malware analysis and threat intelligence data.
• Orderly: Connect restaurant supply chain and inventory management to AI agents.
• WorkRamp: Build AI-driven corporate learning, training, and enablement workflows.
• Method CRM: Connect QuickBooks-synced CRM records and lead management to AI assistants.
• Quip: Bring collaborative documents and Salesforce-connected spreadsheets into AI context.
• Lob: Automate direct mail and address verification workflows using AI tools.
• LendingWise: Connect loan origination and CRM data for real estate finance into AI agents.
• 360Learning: Fetch course completion and collaborative learning data for HR AI assistants.
• Channable: Build e-commerce feed management and PPC automation into AI workflows.
• LangChain: Bridge complex LLM application logic and agentic workflows directly.
• SideDrawer: Integrate secure document organization and client collaboration into AI tools.
• Midtrans: Connect payment gateway analytics and transaction data for AI financial reporting.
• SecurityScorecard: Pull cybersecurity ratings and vendor risk assessments into AI security workflows.

Expanded Unified HRIS coverage for Humaans

Continuing our recent HRIS expansions, Humaans now supports significantly more resources across the Unified HRIS API.

Developers can now read:

• Bank Details
• Companies
• Custom Fields
• Group Types
• Groups
• Job Roles
• Locations
• Time-off Balances
• Time-off Policies

We also added write support, allowing you to:

• Create and update Employees
• Create and update Compensation records
• Update and delete Time-off Requests

🎙️ Deeper Conversational Intelligence for Gong

We expanded our Unified Conversational Intelligence API for Gong.

Call metadata now includes privacy status, host, direction, scope, and workspace. We also added a new endpoint for detailed call insights, which covers participants, trackers, interaction metrics, and comments.

Additionally, Gong manager information is now available in the Unified User Directory API.

⚙️ Developer Experience

Actionable 403 error insights

Building on recent error reporting improvements, every permission-denied error now comes with a truto_error_insight.forbidden_error object. Instead of generic "insufficient permissions" messages, this tells you the real reason for the failure. It specifies whether the issue is a missing scope, a permission that can only be granted from the provider's console, or something unrelated to permissions entirely.

When reconnecting will actually fix the issue, we tell you exactly what to grant. When it will not help, we make that clear too.

Opt-in write validation

You can now append truto_enforce_write_schema=true to any Unified API create or update call. When enabled, we check the request body for missing required fields before sending it to the integration. You get an instant error listing the exact missing fields instead of waiting for a downstream failure. This feature is off by default.

Zscaler admin dashboard support

If you have migrated to Zscaler's new admin dashboard system, you can now connect directly using Client ID, Secret, and Vanity Domain.

🛠️ Fixes and Reliability

• Platform Security: We tightened session validation and access checks across login, webhooks, and API requests to close edge cases. No action is needed on your end.
• SharePoint: Fixed the Client Credentials connection flow. You can now register your own Azure app and connect directly with your own credentials.
• CLI: build integrations --only no longer loses good work to one bad method. A method that fails validation is dropped on its own, with a reason, while the rest of the batch still lands. Builds that stop making progress now bail out early instead of running every retry, and the summary tells you how many of the methods actually made it in.