Sep 3, 2026

Microsoft Teams intake, API tokens, and identity checks on every PSA

Date pill, the entry title, and the five highlights with pixel glyphs

August was about meeting requesters where they already are and locking down who Rallied will act for. Microsoft Teams intake, an API for your own tooling, identity checks on every PSA, and every integration now holding its own credentials.

Microsoft Teams intake and per-ticket chat

Requesters can open a ticket by messaging your MSP's bot in Teams. The bot gathers the essentials, files the ticket in your PSA, and opens a group chat for that ticket with the requester in it. Technicians keep working in the PSA, the requester keeps talking in Teams, and notes flow both ways. Each MSP gets its own white-labeled bot.

API tokens and a talk endpoint

Settings has an API Tokens page. Create a token, show the secret once, and call the talk endpoint with a ticket id and a prompt to ask the agent about that ticket from your own scripts or tooling. The reply comes back in the same request, and tokens can be revoked at any time.

Identity verification on HaloPSA, Autotask, and Jira

ConnectWise has had Traceless identity verification for a while. HaloPSA, Autotask, and Jira now get the same flow: a sensitive ticket in execute mode, such as an MFA reset, waits for the requester to verify before the agent does anything. If there is no email to verify against, the agent stays parked and the ticket gets a note saying why.

Every integration holds its own credentials

The Pipedream proxy is gone. Each of the 21 integrations that used to run through it now has its own connect form, checks the credentials against the vendor before saving, and stores the secret encrypted in Rallied. Atera, Huntress, SentinelOne, KnowBe4, Mimecast, Syncro, and HubSpot are among them.

ConnectWise status gate per board

The accepted-status setting for ConnectWise is now scoped by board and matched on status id instead of name, so two boards that both use a status called New are no longer confused and a status rename no longer breaks the gate.

The agent can search the web

Agents have web search, fetch, and map tools, so a vendor review or a licensing question that needs a page from the open web no longer stalls on a CAPTCHA.

Also shipped

Rallied learns from closed tickets. After a ticket closes, it proposes a memory such as a client access rule, and a person accepts or dismisses it before anything is used again.
Outcome reporting shows which tickets Rallied resolved and what that was worth, on a per-client ROI page that now loads in one query.
HaloPSA imports every company, not just the first 50.
ConnectWise imports skip soft-deleted companies and keep any-board coverage when part of a sync fails.
The agent checks the details of an action before asking for approval, so the approval you see matches what will run.
Teams relays every client-facing ConnectWise note, not only the latest, and no longer echoes the requester's own message back.
Outbound email can send from a different mailbox on your verified domain, such as alerts@ or billing@, and never from any other domain.
Production now has memory and restart alerts, a per-MSP silence heartbeat, and an external uptime check after the August 9 outage.
Baseline security response headers on every API response.