Works with the tools you already use.
ReeveDesk connects to Microsoft 365 for your support mailbox and your team's sign-in, to GetLibre PBX for phones, to an AI assistant with a limited key, and to your own software through its API.
Microsoft 365.
Two connections, each with only the access it needs: one to your support mailbox, and one for your team to sign in.
Your support mailbox
- In Settings, Mailboxes, choose Connect mailbox, then Microsoft 365, and type your support address. A shared mailbox or a regular user mailbox both work.
- Locked mode (recommended): your Exchange administrator limits ReeveDesk to that one mailbox with Exchange Online's own permission controls, following our step-by-step guide. Easy mode: your Microsoft 365 admin approves ReeveDesk on Microsoft's page instead; quicker, but Microsoft then allows every mailbox in your organization, even though ReeveDesk only uses the one you connect.
- Send one email from the support address with the short code ReeveDesk shows in the subject. It proves the mailbox is yours, and you only do it once.
- The mailbox shows Connected. New mail becomes tickets within seconds, and your team's replies go out from the support address.
What ReeveDesk can and cannot do there
- No password. No mailbox password is ever typed into ReeveDesk or kept by it.
- Reads only what it should. ReeveDesk only ever touches the mailbox you connected, and in locked mode Microsoft enforces that too.
- The reader cannot send. The part of ReeveDesk that reads your mail has no permission to send. Replies go out only when a person on your team presses Send.
- Leaves your mail alone. Messages stay in the Inbox, marked with a ReeveDesk category. If you stop using ReeveDesk, the mailbox is as you left it.
- Shows its health. The mailbox card says when ReeveDesk last checked, offers Check now and Reconnect, and the daily digest reports any problem.
Sign in with Microsoft
Members press Sign in with Microsoft and Microsoft checks who they are, with its own multifactor prompt and sign-in rules. ReeveDesk only asks Microsoft for the person's name and email, never for access to mail or files.
Only people who are already members of your desk can get in, and only from the Microsoft organizations you allow. Your Microsoft admin also decides who may use it.
Make it required
An admin can turn on Require Microsoft sign-in, so members can no longer sign in with a password. The desk owner keeps a password plus an authenticator code as the way back in if Microsoft is ever unavailable.
Turning a member off in ReeveDesk, or removing them from the app in Microsoft, stops their next sign-in. Every change to these settings is in the audit log, before and after.
GetLibre PBX.
GetLibre PBX is NorthReeve's hosted business phone system. The connection is built in ReeveDesk and switches on with the next GetLibre PBX update. ReeveDesk works alongside any phone system; this part is for companies whose phones run on GetLibre PBX.
- The browser phone. A phone button in the corner of the desk, the same phone as the GetLibre portal's. Calls to your extension ring there too.
- Click to call next to every phone number on a ticket, a contact or a company. Without the browser phone, GetLibre rings your own phone first and then connects you.
- Who is calling. When your extension rings, a panel shows the caller, their company and their open tickets, with New ticket from this call. If two contacts share the number, you pick; ReeveDesk never guesses.
- Calls on the record. Calls, voicemails and texts show on the contact, the company and the ticket, with GetLibre's summary of the call and the recording.
- Voicemail and texts to tickets. A voicemail (with its transcript) or a text from a client opens a ticket or joins their open one, as you choose.
Rules that never bend
All calls, texts, numbers, voicemail and recordings stay in GetLibre PBX. ReeveDesk shows them and asks GetLibre to place a call or send a text when a person presses a button. It never blocks, holds or reroutes a call, and it never touches emergency calls; the desk's own call buttons never dial 911 or other special numbers.
ReeveDesk's key to GetLibre can read and ring, but cannot hang up, transfer or change anything in your phone system. ReeveDesk refuses a key that could.
The AI assistant can read calls and voicemails to help with a ticket, but it can never place a call or send a text.
An AI assistant, on a short leash.
ReeveDesk has no AI service built in. You connect an assistant such as Claude with an access key of the kind "assistant", and that kind of key can only ever do four things.
What it can do
- Read tickets and their threads, and read contacts if its key allows it.
- Add private notes, for example a summary of a long thread.
- Save a suggested reply for a person to use, edit or discard.
- Suggest tags or a priority with a reason. Nothing changes until a person presses Apply.
How the server makes sure it never sends
- The key. An assistant key can hold at most four permissions, and no key of any kind can hold the permission to send, call or text.
- The send step. Sending needs a team member who is signed in, in that moment. A key can never start a send.
- The sending service. Before any message leaves, it checks again that a person on your team wrote and sent it.
Ticket text is treated as data, never as instructions, and automatic tests try every route with an assistant's key on every change.
API and webhooks.
Everything the ReeveDesk screens do goes through the same API, described in a standard OpenAPI file. Your own software can open requests and hear back when your team answers.
- One application per piece of software, each with its own access key: explicit permissions, shown once, stored only in scrambled form, an expiry of up to a year, and revocable at any time.
- Open a request for a client company with the person, the subject, the message and context such as the page and version.
- Safe to retry. The Idempotency-Key header means a request sent twice opens one ticket.
- Alerts from your systems open one internal ticket per alert key. Repeats add to it, and your system closes it when the problem is over. Alerts never email a client.
- A software key only sees its own requests, and only what the client sees: never notes or suggested replies.
Example request
# Open a request from your own software
POST /api/v1/requests
Authorization: Bearer <your application key>
Idempotency-Key: 5f0c9e2a-7b1d-4c11-9a52-3e6f1b0d8c47
Content-Type: application/json
{
"product": "other",
"company_ref": "client-042",
"contact": {
"name": "Front desk",
"email": "frontdesk@client.example"
},
"subject": "Card reader will not connect",
"body_text": "The reader at the front desk shows offline.",
"priority": "normal",
"context": { "page": "/checkout", "version": "4.2.1" }
}
Signed webhooks
ReeveDesk tells your software when a ticket is created, changes status, gets a client reply or a team reply, or is merged. Each delivery is signed so your software can check it came from ReeveDesk, and private notes and suggested replies are never included.
Sent only where you allow
Webhooks go only to https addresses on hosts you allowed, never to private network addresses, and never follow redirects. A failed delivery is retried for about three days, and the delivery log shows every try with a Retry button.
Other email providers.
Google Workspace, and other providers through IMAP and SMTP, are coming after Microsoft 365. If your support mailbox is somewhere else, tell us on the early access form.
Want to try it first?
Sign up for early access and tell us which mailbox and phone system you use.
Get early access