Define an action as an HTTP call (GET, POST, PUT, PATCH) to your endpoint, with headers, auth, and request/response templates. Map values in and out using simple variables, and pull exactly the fields you need.
Approval gates, a masked secrets vault, and a host allowlist keep automation safe in production.
Require approval before sensitive actions run, with pending, approved, and rejected states.
Store API keys and credentials masked and encrypted, never exposed in chat.
Outbound calls are restricted to hosts you trust (SSRF protection).
Run a test execution to validate an action, and use Luran's built-in sandbox endpoints (order status, account lookup, appointment booking) to prototype integrations before wiring up the real thing.