Setup Guide

Complete step-by-step guide to setting up TraceMem for your first agent workflow.

Overview

Before your agents can use TraceMem, you need to set up the foundational components. Complete these steps in order:

Step 1: Create a Connector

Connect to your data source (database or SaaS system):

1. Navigate to Setup → Connectors in the TraceMem dashboard
2. Click Create Connector
3. Select your connector type:
   • Database: PostgreSQL or MySQL
   • SaaS: Salesforce (or other supported systems)
4. Enter a descriptive name (e.g., "Production Database")
5. Configure connection:
   • For databases: Use a connection string (recommended):
     textCopy

     postgresql://username:password@host:5432/database?sslmode=require
     

   • For SaaS: Enter instance URL and OAuth credentials
6. Click Create and test the connection

The system will automatically discover your schema. Wait a few minutes for schema discovery to complete.

Step 2: Create an Approval Integration (If Needed)

If your policies will require human approvals, set up an integration:

1. Navigate to Config → Integrations in the dashboard
2. Choose your integration type:
   • Slack: For Slack channel approvals
   • Email: For email-based approvals
   • Webhook: For custom webhook endpoints
3. Configure the integration:
   • Slack: Provide workspace ID, bot token, signing secret, and default channel
   • Email: Configure SMTP/SES settings
   • Webhook: Provide webhook URL, events, timeout, and retry settings
4. Click Create

Note: You can skip this step if you only need automatic policy approvals (no human intervention).

Step 3: Create an Approval Route

Define how approvals are delivered:

1. Navigate to Config → Approval Routes in the dashboard
2. Click Create Approval Route
3. Enter:
   • Route ID: Unique identifier (e.g., apr_route_finance_01)
   • Name: Descriptive name (e.g., "Finance approvals")
   • Channel: Select the integration type (Slack, email, or webhook)
   • Route: Where to send (Slack channel like #finance-approvals, email address, or webhook URL)
   • Require Rationale: Whether approvers must provide reasoning
   • Expires In Seconds: How long the approval request is valid (e.g., 86400 for 24 hours)
4. Click Create

Step 4: Create a Policy

Define rules that determine if actions are allowed:

1. Navigate to Config → Policies in the dashboard
2. Click Create Policy
3. Enter:
   • Policy ID: Unique identifier (e.g., discount_cap_v1)
   • Description: What this policy does
4. Define inputs (what the policy needs to evaluate):
   textCopy

   {
     "inputs": [
       {
         "name": "proposed_discount",
         "type": "number",
         "required": true
       }
     ]
   }
   

5. Define evaluation logic:
   textCopy

   {
     "logic": {
       "type": "rule_set",
       "rules": [
         {
           "if": {
             "left": {
               "var": "proposed_discount"
             },
             "op": "<=",
             "right": 0.2
           },
           "then": {
             "outcome": "allow"
           }
         },
         {
           "then": {
             "outcome": "requires_exception",
             "reason_code": "DISCOUNT_CAP_EXCEEDED"
           }
         }
       ]
     }
   }
   

6. Configure exception route (if policy can return requires_exception):
   • Enable exception route
   • Select the approval route you created in step 3
   • Set whether rationale is required
   • Set expiration time
7. Click Save as Draft, then Publish when ready

Step 5: Create a Data Product

Create a governed interface to your data:

1. Navigate to Config → Data Products in the dashboard
2. Click Create Data Product
3. Enter:
   • Product ID: Unique identifier (e.g., customer_data)
   • Description: What this data product provides
4. Select sources:
   • Choose the connector you created in step 1
   • Select the resource (table/object) to expose (e.g., public.customers)
5. Define exposed schema:
   • Select which columns/fields agents can access
   • Set data classification for each field (identifier, business, pii, sensitive_business)
6. Set allowed purposes:
   • Add purposes like order_processing, support_triage, renewal_context
   • Every read/write operation must specify one of these purposes
7. Configure allowed operations:
   • Enable read, write, insert, update, delete as needed
8. (Optional) Attach policies that apply to all access
9. Click Save as Draft, then Publish when ready

Step 6: Get Your API Key

Create an agent and get an API key:

1. Navigate to Settings → Agents in the TraceMem dashboard
2. Create an agent (if you haven't already)
3. Create a credential to get an API key
4. Save the API key securely (it's only shown once)
5. Grant the agent access to the data products you created