Our core business is subscription-based and therefore have a lot of information in relation to users and their subscriptions / deliveries. We would love to have Fin be able to take actions on a user’s behalf such as “move my next delivery back by a week”, “update the contents of my next order / subscription” etc.
As it currently stands, to do these actions we would need to provide application-level access for Fin to execute on these actions and that is a security risk - it would have access to our whole API (GraphQL based) and be able to make changes arbitrarily with little effort. If this access was compromised an attacker would effectively have admin access with a single token to our company data.
To rectify this, we would love to have per-user authentication for custom actions using something such as JWT that can sign and encrypt each individual request for an individual user.
Having the ability for a user to handle simple changes or queries inside of Intercom messenger and with the help of Fin would be a huge benefit for us and allow our customer support teams to focus on more complex queries and handling the vital cases for customers.