๐Ÿ›ก๏ธ Interven
SaaS Agent Protection

Intercom Fin

Protect Intercom Fin via Data Connectors pointing at Interven.

Intercom Fin

Intercom Fin calls external systems via Data Connectors. Each connector has a URL โ€” point it at Interven.

Setup

1. Create the inbound route in Interven

Console โ†’ Inbound Routes โ†’ Add route

  • Path prefix: fin-billing
  • Upstream URL: https://api.your-billing-saas.com/v2
  • Upstream headers:
    Authorization: Bearer your-real-billing-token

2. Configure Data Connector in Intercom

In Intercom โ†’ Settings โ†’ Data Connectors โ†’ New Data Connector:

  • URL: https://api.intervensecurity.com/inbound/fin-billing/customers/{customerId}
  • Method: GET
  • Authentication: None (Interven adds the real auth)
  • Variables: Map {customerId} to a Fin conversation attribute

3. Use in Procedures

Reference the Data Connector inside a Fin Procedure. Fin invokes it during conversations; Interven scans every call.

Notes

  • Data Connectors have a 15-second timeout (30s for Procedures). Interven adds under 100ms overhead, well within budget.
  • HMAC-SHA256 webhook signatures from Intercom are pass-through โ€” Interven doesn't strip them.

Limitations

  • This covers what Fin actively does via Data Connectors. It does not cover Fin's core conversational behavior or knowledge retrieval โ€” those happen inside Intercom's cloud and have no extension point.
  • For knowledge-base content governance, use Intercom's native data classification settings.