Plug the AI salesperson into your product

<script src="https://app.salescoreai.com/widget.js"
        data-agent-id="YOUR_AGENT_ID" async></script>

<!-- Fixed language -->
<script src="https://app.salescoreai.com/widget.js" data-agent-id="YOUR_AGENT_ID" data-lang="ru" async></script>

<!-- Or nothing at all: the chat follows <html lang="…"> of the page -->
<html lang="de">

// Open, close or toggle the chat from your own button
SalesCoreAI.open();
SalesCoreAI.close();
SalesCoreAI.toggle();

// A signed-in visitor: the agent will not ask for what it already knows
SalesCoreAI.identify({ name: user.name, email: user.email, phone: user.phone });

// Your language switcher changed the site's language without a reload
SalesCoreAI.setLanguage('es');

window.addEventListener('salescoreai:conversion', (event) => {
  // 'booking' | 'order' | 'contact'
  if (event.detail.kind === 'booking') {
    gtag('event', 'conversion', { send_to: 'AW-XXXXXXXXX/XXXXXXXXXXXX' });
  }
});

function withChat(run) {
  if (window.SalesCoreAI) run(window.SalesCoreAI);
  else window.addEventListener('ai-sales:ready', (event) => run(event.detail), { once: true });
}

document.querySelector('#talk-to-sales').addEventListener('click', () => {
  withChat((chat) => chat.open());
});

import express from 'express';
import { verify } from './verify.js';

const app = express();
const secret = process.env.SALES_CORE_SECRET;
// The signature covers the exact bytes: keep the raw body.
app.use(express.text({ type: 'application/json' }));

const manifest = { protocol: 'ai-sales-connector/1', name: 'My shop', tools: [/* … */] };
const tools = {
  async search_mats(input, context) {
    const items = await db.findSets(input);
    return { success: true, data: { items } };
  }
};

app.get('/ai-sales/manifest', (req, res) => {
  if (!verify(secret, req.headers, '')) return res.status(401).end();
  res.json(manifest);
});

app.post('/ai-sales/tools/:name', async (req, res) => {
  if (!verify(secret, req.headers, req.body)) return res.status(401).end();
  const { input, context } = JSON.parse(req.body);
  const tool = tools[req.params.name];
  if (!tool) return res.json({ success: false, error: { code: 'UNKNOWN_TOOL', message: 'No such tool' } });
  try {
    res.json(await tool(input ?? {}, context));
  } catch (error) {
    console.error(error); // never send internals back: the model reads the message
    res.json({ success: false, error: { code: 'INTERNAL_ERROR', message: 'Could not process this request. Try again or hand over to a colleague.' } });
  }
});

app.listen(8080);

{
  "protocol": "ai-sales-connector/1",
  "name": "MatFit shop",
  "description": "Made-to-fit car mats: catalog with stock, orders and their status.",
  "testMode": true,
  "tools": [
    {
      "name": "search_mats",
      "role": "catalog.search",
      "description": "Find mat sets that fit a car. Returns sets with exact price and stock.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "make": { "type": "string" },
          "model": { "type": "string" },
          "year": { "type": "integer", "minimum": 1980 }
        },
        "required": ["make", "model"]
      }
    },
    {
      "name": "create_order",
      "role": "order.create",
      "requiresContact": true,
      "description": "Place an order for chosen sets with a delivery address.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "items": { "type": "array", "items": { "type": "object" } },
          "deliveryAddress": { "type": "string" }
        },
        "required": ["items"]
      }
    },
    {
      "name": "get_order_status",
      "role": "order.status",
      "description": "Status of the customer's orders.",
      "inputSchema": { "type": "object", "properties": {} }
    }
  ]
}

POST {baseUrl}/ai-sales/tools/search_mats
Content-Type: application/json
X-AI-Sales-Timestamp: 1790331159
X-AI-Sales-Signature: sha256=5d41402abc4b2a76b9719d911017c592…

{
  "input": { "make": "Kia", "model": "Rio", "year": 2019 },
  "context": {
    "organizationId": "org_…",
    "conversationId": "conv_…",
    "customerId": "cust_…",
    "previousCustomerIds": ["cust_…"],
    "leadId": "lead_…",
    "customer": { "name": "Anna", "email": null, "phone": "+30…" },
    "channel": "WEB_CHAT",
    "timezone": "Europe/Athens",
    "idempotencyKey": "conv_…:create_order:3f2a…",
    "test": false
  },
  "requestId": "req_…"
}

const ids = [context.customerId, ...(context.previousCustomerIds ?? [])];
const orders = await db.orders.findMany({ where: { salesCoreCustomerId: { in: ids } } });

{
  "success": true,
  "data": {
    "items": [
      { "id": "MF-RIO-17-EVA", "name": "Kia Rio 2017–2023 · EVA · Full interior",
        "price": 89, "currency": "EUR", "material": "EVA", "inStock": true }
    ]
  }
}

{
  "success": true,
  "data": {
    "orderId": "A-1042",
    "status": "NEW",
    "items": [{ "id": "MF-RIO-17-EVA", "name": "Kia Rio · EVA", "price": 89, "currency": "EUR", "quantity": 1 }],
    "total": 89,
    "currency": "EUR",
    "deliveryAddress": "12 Ermou St, Athens",
    "checkoutUrl": "https://shop.example.com/pay/A-1042"
  }
}

X-AI-Sales-Timestamp: 1790331159
X-AI-Sales-Signature: sha256=<hex HMAC-SHA256(secret, timestamp + "." + rawBody)>

import { createHmac, timingSafeEqual } from 'node:crypto';

export function verify(secret, headers, rawBody) {
  const timestamp = headers['x-ai-sales-timestamp'] ?? '';
  const signature = headers['x-ai-sales-signature'] ?? '';
  if (!/^\d+$/.test(timestamp) || !signature.startsWith('sha256=')) return false;
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return false; // 5 minutes

  const expected = createHmac('sha256', secret).update(`${timestamp}.${rawBody}`).digest();
  const given = Buffer.from(signature.slice(7), 'hex');
  return given.length === expected.length && timingSafeEqual(given, expected);
}

{
  "type": "order.updated",
  "orderId": "A-1042",
  "orderNumber": "FE-009774",
  "status": "PAID",
  "note": "Paid by card"
}

BODY='{"type":"order.updated","orderId":"A-1042","status":"PAID"}'
TS=$(date +%s)
SIG=$(printf '%s.%s' "$TS" "$BODY" | openssl dgst -sha256 -hmac "$SALES_CORE_SECRET" | sed 's/^.* //')

curl -X POST "https://api.salescoreai.com/api/webhooks/connectors/$CONNECTOR_ID" \
  -H "Content-Type: application/json" \
  -H "X-AI-Sales-Timestamp: $TS" \
  -H "X-AI-Sales-Signature: sha256=$SIG" \
  -d "$BODY"

async function createOrder(input, context) {
  const problem = await validateOrder(input, context.customer); // stock, address, contact
  if (problem) return { success: false, error: problem };

  if (context.test) {
    // Same answer as a real order, but nothing is stored, charged or emailed
    return { success: true, data: previewOrder(input) };
  }
  const order = await placeOrderOnce(context.idempotencyKey, input, context);
  return { success: true, data: order };
}

GET https://api.salescoreai.com/api/connectors/{connectorId}/account

{
  "organization": { "name": "MatFit" },
  "connector": { "name": "MatFit shop", "status": "ACTIVE" },
  "balance": { "balanceUsd": 42.17, "lowBalanceUsd": 5, "low": false },
  "usage": { "month": "2026-09", "usageUsd": 12.4, "commissionUsd": 3.1, "turns": 318 },
  "links": {
    "dashboard": "https://app.salescoreai.com/dashboard",
    "billing": "https://app.salescoreai.com/billing",
    "connector": "https://app.salescoreai.com/connections/{connectorId}"
  }
}