Skip to content

Meetings

Meeting integrations use the same proof bundle as API integrations, but the protected action is meeting attendance.

Ratify is useful here when a customer wants a meeting-note agent, a sales-assistant agent, or a support agent to join Zoom, Microsoft Teams, or Google Meet only when it is explicitly authorized. The managed meetings surface lives in the Identities AI app.

  1. Agent platform obtains consent from the human or organization.
  2. The platform creates a proof bundle for meeting:attend, and optionally meeting:speak, meeting:video, or meeting:share_screen.
  3. The platform pre-announces the agent before the meeting.
  4. The meeting adapter verifies the proof when participant events arrive.
  5. Policy decides whether to allow, label, warn, or remove the participant.

Meetings are an organization/team surface. Personal accounts can integrate SDKs and API Gateway, but meeting enforcement requires an organization context.

For a meeting-note platform, your runtime usually does this:

  • generate or load agent keys
  • get a delegation from the workspace admin
  • sign a challenge when the meeting surface asks for proof
  • keep the proof bundle available to the meeting adapter

The meeting adapter or Ratify-managed surface usually does this:

  • issue the challenge
  • verify the signature
  • check revocation and expiry
  • decide whether to allow, label, challenge, or remove the agent
result := ratify.Verify(bundle, ratify.VerifyOptions{
RequiredScope: ratify.ScopeMeetingAttend,
})
if !result.Valid {
http.Error(w, result.ErrorReason, http.StatusForbidden)
return
}

Your callback_url is where Ratify posts lifecycle events about the meeting connection.

For the implementation details, see Callbacks and Webhooks.