AI & roadmap

Bring your own agent.
We'll make sure it can do the work.

We don't bolt a chatbot onto Flex and call it AI. We make Flex easy for your tools to operate — an MCP server, a documented API, signed webhooks — and we're honest about what's shipped, what's next, and what we do with your data.

What Flex has today

  • An MCP server at app.flexonthejob.com/mcp — 16 tools and 2 resources covering customers, jobs, schedule, items and invoices.
  • A REST API with an OpenAPI spec, interactive reference and llms.txt.
  • Eight signed webhook events so an agent can react instead of poll.
  • Idempotent writes, cursor paging and RFC 7807 errors — the things that make an agent's retries safe.

What Flex does not do

  • Train any model on your business data, or let anyone else.
  • Send your data to an AI provider on your behalf. There is no built-in model call in the product. If you connect an agent, it's your agent and your provider.
  • Let an agent exceed the API key you gave it. Same permissions, same organization, same rate limit, same log.
  • Make AI-generated changes look like human ones. Writes through the API or MCP are attributed to the key in the job history.

Why this way

A three-truck HVAC shop doesn't want to evaluate our model choice; it wants "what's on Truck 3?" answered in whatever assistant it already uses. Standards — OpenAPI, MCP, webhooks — get you that without a lock-in, and let you switch agents without switching inventory systems.

When we do add first-party assistance inside Flex it will be opt-in, per organization, with the provider named on this page.

Acceptable use for agents

Automated access is welcome. Here are the rules.

Agents and scripts are first-class users of the API and MCP server. The same terms apply as for a person, plus these specifics.

  • Use a key, not a login. Automations authenticate with an API key so they can be scoped, rate-limited and revoked independently of any person.
  • Respect 429 and Retry-After. The limits are generous for a business; they exist so one runaway loop can't slow down the crew in the field.
  • Send an Idempotency-Key. It's required on writes precisely so an agent's retry never creates a second invoice.
  • Reading the docs is free and unauthenticated. /docs, /openapi/v1.json, /llms.txt and /llms-full.txt need no key and aren't rate-limited. Crawl them.
  • Only your organization's data. Probing for other tenants is a violation of the terms and technically pointless: the server scopes every query.
Data handling

Where the line is.

Your data → your agent. When you connect an assistant over MCP, whatever it reads goes to the provider you chose under your agreement with them. Flex is not a party to that. Prefer read-only keys for exploration and add write permissions deliberately.

Our staff. Flex support accesses an organization's data only to resolve a request you made, and that access is by named, individually-accountable administrator accounts.

Aggregate product metrics (how many jobs are created per day across all customers, which pages are slow) are used to run the service. They are never per-customer benchmarks and never leave us.

Full detail in the privacy policy and on the security page.

Roadmap

What's shipped, what's next.

Dates are targets, not promises; order is the commitment. Anything here can be pulled forward by a customer who needs it.

API changelog

Every change to the contract.

Additive changes are listed here as they ship; anything deprecated gets a dated notice at least 12 months ahead. Subscribe by watching llms.txt — it carries the same notices.

Need something on this list sooner?

Tell us what you're building. Customers set the order.

developers@flexonthejob.com Developer docs