Waypoint Claims
Build on it / Marketplace

An install is a grant of access. It is treated like one.

Third-party apps reach your organization only after Waypoint has reviewed a version and separately published it. Installing one grants it a defined scope, shown to you in plain words, and you can switch it off at once.

Outside companies apply to publish, and are approved as publishers before they can submit anything. Every package file is scanned for malware, and the verdict is on the review row.

Ask what is available How it works
The question this answers
What can an installed application see?
Only what its scopes grant — claims, payments, the document list but never the files, contacts but never tax numbers, and the event streams it asks for. A reach outside its scope is refused and recorded, and a watch every 10 minutes alerts Waypoint when an app’s refusals climb.

How an app reaches your shelf

Apply, review, publish, install
Publishers Apply
Against written program criteria. Waypoint approves or declines the company before it can submit a version.
Each Version Is Reviewed
The reviewer records what they checked. The package is scanned for malware. Approval and publishing are two separate acts.
Scopes Shown Before Install
Your administrator sees what the app asks for, in plain words, before installing it under the Integration Gateway entitlement.
Revoke Or Pull At Once
Revoking stops the app’s key on the next request. If Waypoint pulls a version, every credential running it stops on every shelf.
Before you install anything

Questions to ask of any marketplace app

Ask these here and on every platform with a marketplace. Third-party access is the most common route to a breach that was technically nobody’s fault.

Question
Answer here
Who Reviewed It?
Waypoint, by name, with what was checked
What Scope Does It Request?
Shown in plain words before installation
Can It Read Documents?
The list only, never the files
Is Its Activity Visible?
Yes — everything the app has done shows on its panel
How Fast Can I Cut It Off?
Its key stops on the next request
Where we are honest

The catalog is small, and we will say so

Marketplace pages usually imply an ecosystem. Ours is early, and pretending otherwise would be discovered in the first conversation.

Few Applications Today
We are early-stage. Ask what actually exists rather than assuming a category is covered, and we will give you the real list.
Partner Quality Is The Partner’s
We review and govern access, not the quality of somebody else’s software. An installed app’s bugs are theirs.
Install Is A Security Decision
The mechanics are scoped and revocable. Whether to grant a third party access to claim data remains a judgment worth making deliberately.

Read next

Integration Gateway The keys and events apps run on. Webhooks & Keys Credentials, and revocation. Admin Portal Where apps are installed and watched.

Ask for the real catalog

Not the categories — the applications. A short honest list is more useful than a page implying an ecosystem that is not there yet.

Book a walkthrough Back to the overview