Let your AI book home services — you stay in control.
Connect an AI assistant to your Hekk account. It can discover, book, coordinate and review for you — inside spending caps you set, with email approval for anything unusual, and one-tap revoke.
Or send your AI agent to do it
Copy one prompt into Claude, ChatGPT or any assistant — it handles the whole thing end to end while you stay in control.
Fill in what you need — the prompt writes itself. Paste it into your assistant and it takes care of the account, the booking and the coordination through the official Hekk Agent Gateway.
Your agent acts only within the scopes and spend cap you approve, and you can revoke it anytime via the Agent Gateway
Book a home service for me on hekkapp.com (Hekk, Bahrain) — end to end. My details: - Name: [your full name] - Phone: [+973 3xxx xxxx] - What I need: [e.g. AC repair at home, tomorrow morning] - Budget cap: [e.g. 25] BHD Follow the official path for AI agents: 1. Read https://hekkapp.com/llms.txt and https://hekkapp.com/auth.md first — use the Hekk Agent Gateway, not the human pages. 2. If I have no Hekk account yet, ask me for an email and a password, then create it with my real details via POST https://hekkapp.com/api/v1/customers/signup with the header X-Hekk-Agent: 1. 3. Register your agent app at hekkapp.com/en/agents/developers, then send me the consent link so I can approve your access — scopes discover, book and message, spend cap [e.g. 25] BHD. 4. Compare the top-rated providers for my need and request the best one at its listed starting price, then coordinate timing in the in-app chat. 5. If anything needs my approval, send me the confirm link immediately, and report back after each step.
How you stay in control
Spending caps
Set a per-job and a 30-day limit in BHD. Leave them blank and every booking or payment needs your emailed approval — no cap means zero autonomous spending, not unlimited.
You approve the unusual
Anything over your cap — or a first booking with a provider you've never used — pauses and emails you a 30-minute confirm link. Nothing happens until you say so.
Revoke instantly
Access is re-checked on every single call. Revoke an agent and it's cut off mid-session — no waiting for tokens to expire.
Everything on the record
Every action an agent takes for you is logged and visible in your account. Providers always see when an agent is acting on your behalf.
What agents can do
Discover & quote
Browse categories and providers, and request prices — read-only.
discover_servicesrequest_quoteget_bookinglist_bookingsMessage providers
Send and read coordination messages with the assigned provider.
send_messageget_messagesCreate & cancel bookings
caps / approvalBook services and cancel them within your caps.
create_bookingcancel_bookingConfirm completion
Mark a job complete on your behalf.
confirm_completionPay
caps / approvalSettle payment for a job within your caps.
payLeave reviews
Submit your own rating and words after a job (never fabricated).
submit_reviewAlways available to any connected agent: get_audit_logget_approval
How consent works
- 1
The agent sends you to a Hekk consent screen, where you log in.
- 2
You choose exactly what it may do and set per-job + 30-day spend caps.
- 3
Hekk issues a scoped, revocable token bound to your account and that agent only.
- 4
Over-cap or first-time-provider actions pause and email you to confirm.
- 5
Reviews use your real words, and providers always see when an agent acts for you.
The 30-day cap counts only bookings made through that agent — not bookings you make yourself.
Common questions
Can an agent see the provider's phone number?
Only after the provider accepts the booking. Until then, contact details stay hidden.
Can an agent spend my money online?
No. At launch, "pay" only records an authorized cash settlement within your caps — no card is charged online.
Do providers know an agent is involved?
Yes. Every booking, message and review made through an agent is clearly marked as via-agent to the provider.
What happens when I revoke an agent?
It loses access immediately — even mid-session. Your past bookings and history are unaffected.
Quickstart & endpoints
For AI agents and their developers: connect over MCP or REST. OAuth2 + PKCE; the same human consent screen gates both.
MCP (Streamable HTTP)
https://hekkapp.com/agents/mcpREST API base
https://hekkapp.com/api/agent/v1Authorize (consent)
https://hekkapp.com/en/agents/connectToken
https://hekkapp.com/api/agent/v1/oauth/tokenOAuth protected resource
https://hekkapp.com/.well-known/oauth-protected-resourceOAuth authorization server
https://hekkapp.com/.well-known/oauth-authorization-serverMCP discovery
https://hekkapp.com/.well-known/mcpllms.txt
https://hekkapp.com/llms.txtConnect an MCP client
{
"mcpServers": {
"hekk": { "url": "https://hekkapp.com/agents/mcp" }
}
}First call over REST (read-only, zero risk)
curl -X POST https://hekkapp.com/api/agent/v1/tools/discover_services \
-H "Authorization: Bearer <access_token>" \
-H "Content-Type: application/json" \
-d '{}'Full developer docs & registration →
No Hekk account for your human yet?
- Create their customer account via POST /api/v1/customers/signup with the header X-Hekk-Agent: 1 (honest attribution). Use the person's real email and phone — booking updates go there.
- Register your agent app once on the developers page to get a client_id.
- Send the person to the consent screen — they sign in and set scopes, spend caps and expiry.
- Exchange the code at the token endpoint (PKCE S256) and start calling tools.
If you operate the human web UI instead, self-declare with the AI-agent checkbox on signup. Undeclared automation is heuristically detected and reviewed.