Tech Stack and Integrations Inventory

SGA Dental Partners integrations inventory

A complete map of every third-party connection across Dakota's working environment: Claude AI connectors, AI provider APIs, infrastructure, marketing data sources, productivity SaaS, and dental-financing partners. Built for IT review and access governance.
Prepared for Scott (forward to IT)
Prepared by Dakota Milner, SGA Growth
Date 2026-05-15
Scope SGA Growth, sga-intranet, BetterFaith, personal sites
Executive summary

The working environment touches roughly 60 distinct third-party services across eight categories. The largest concentration is AI providers (12 services) and marketing data sources (10+ platforms, including four Google Ads MCCs). One open security item: an OpenAI key abuse incident on 2026-05-15 remains under root-cause review.

10
Claude.ai connectors
12
AI provider APIs
8
Cloud / hosting
10+
Marketing platforms
Status: Active Partial / Auth only Referenced / Planned Security item

1 Claude.ai connectors (MCP servers)

These are the third-party integrations connected through Anthropic's Claude.ai platform. They authenticate via OAuth on a per-user basis. IT should treat each as a SaaS-to-SaaS connection with delegated access to the underlying service.

ServicePurposeStatusData accessed
CanvaBrand templates, design generation, asset exportActiveDesigns, brand kits, folders, assets
Coupler.ioData integration platform; reads pipeline output and runs SQLActiveConnected datasets, dataflows, credentials
GmailEmail read, search, draft creation, label managementActiveInbox, threads, drafts, labels
Google CalendarEvent creation, scheduling, free/busyActiveCalendars, events, invitees
Google DriveFile access (authentication only, not fully provisioned)Auth onlyPending sign-in
GranolaMeeting transcripts and notesActiveMeetings, transcripts, folders. Per-user encrypted tokens.
Microsoft 365Outlook, Teams, OneDrive (authentication only)Auth onlyPending sign-in
NotionWorkspace search, page creation, database queries, commentsActivePages, databases, users, teams
PencilLocal .pen design file editor (runs locally, not SaaS)ActiveLocal files only
RailwayInfrastructure management CLI (project, services, deploys)ActiveWorkspaces, projects, services, logs, env vars

2 AI provider APIs (used in code)

Direct API keys consumed by SGA and BetterFaith applications. Most are routed through the Council of Experts skill or embedded in agentic workflows. Anthropic is the primary provider; the rest are used for multi-model consensus or specialty tasks.

ProviderUsed forStatus
Anthropic (Claude API)Primary LLM, agentic workflows, Council Chair, asset-registry interviewerActive
OpenAI (GPT-5)Council of Experts memberKey rotated 2026-05-15 after abuse incident
Google GeminiCouncil of Experts memberActive
xAI GrokCouncil of Experts memberActive
Fireworks AICouncil of Experts (hosts DeepSeek, Kimi via Fireworks)Active
DeepSeekCouncil of Experts member (via Fireworks)Active
Moonshot KimiCouncil of Experts member (via Fireworks)Active
Fal.ai (Flux)Photoreal image generation for brand templatesProvisioned, optional in code
FirecrawlWeb scraping, crawling, structured extractionActive CLI
Promo Republic / Gen4Engage MCPSocial posting, analytics, inbox, AI content (OAuth + DCR)Active
ZernioSocial distribution API (may be displaced by Gen4Engage)Referenced
Anthropic SDK (Managed Agents)Code-side prompt caching, tool use, file handlingActive
Open security item. OpenAI API key sk-proj-D-6K0lvt... was abused for ~$42 on 2026-05-15. Audit ruled out git, Cloudflare, Railway, and GitHub Actions as the leak vector. Two suspected vectors remain: local .env exfiltration or OpenAI dashboard compromise. Key has been rotated. IT should review endpoint security on the workstation and enable MFA on the OpenAI org account if not already enforced.

3 Cloud and hosting infrastructure

ServicePurposeStatus
RailwayPrimary app hosting: sga3p.com root + 5 subdomains, asset-registry, marketing-ingest, intranet APIActive
CloudflareDNS (DNS-only mode for Railway), Pages (memo sites, attribution flow, calculators), Workers (password gates)Active (two accounts: MODIS and Chasebowers)
VercelBetterFaith docs site, Dakota personal siteActive
AWS S3Asset storage for sga-intranet (sga-assets-dev bucket)Provisioned in env, dev uses local storage
AWS CloudFrontCDN in front of S3Configured in env
AWS SESTransactional email (alternative to Resend)Referenced, not active
GitHubSource control for all repos (SGA, BF, sga-intranet, personal site)Active
ClerkAuth provider on BetterFaith docs (witty-aphid-61.accounts.dev)Active

4 Marketing data sources

Sources feeding the marketing data warehouse (planned Postgres + ClickHouse + Temporal stack, surfaced to Power BI). Google Ads is the first integration, with four separate MCC accounts.

PlatformAccount or scopeStatus
Google AdsGen4 MCC, Modis MCC, LookSee MCC, agency MCC (no unified SGA MCC yet)Active, multi-MCC
GoHighLevel (GHL)Agency-level token with sub-account access; per-call locationId routingActive in marketing-ingest
Google Business ProfilePer-practice profiles, Maps Ads, Local Service AdsActive per practice
Meta Business ManagerPer-practice + champion model; managed centrally by KorrineActive
Frame.ioBrand library asset browser (Adobe)Referenced in env
Promo Republic (Gen4Engage)Social posting + analytics; candidate Content Engine backendActive
Zernio Social APISocial distribution (legacy; may be replaced by Gen4Engage)Referenced
TIE (The Implant Engine)Full-arch paid media agency for Innovative Dental SpringfieldActive vendor
Power BIMarketing warehouse output surfacePlanned Q2 deliverable
SquirrelscanSite audit CLI used by /audit-website skillActive CLI

5 Productivity and operations SaaS

ServicePurposeStatus
Microsoft 365Email, Teams, OneDrive (primary work account: pdakotamilner@modisdental.com via OneDrive sync)Active
Google WorkspacePersonal Gmail + Calendar (pdakotamilner@gmail.com), used by Claude connectorsActive
NotionWorkspace for BetterFaith, SGA shared docsActive (Internal API token in use)
GranolaMeeting transcription, notes (strictly per-user encrypted tokens)Active
Obsidian (CLAUDE OS)Local-first knowledge vault; cross-session memory for ClaudeActive (local)
VS Code + Claude CodePrimary IDE; native Claude Code extension for AI-assisted workActive
GitHub CLI (gh)PR management, deploy triggersActive
Wrangler (Cloudflare CLI)Cloudflare Pages and Workers deploysActive
ntfy.shPush notifications for Claude Code hooks (sga-claude topic)Active
Clime CLITool discovery (CLI search engine)Active

6 Data and engineering stack

Internal stack used by sga-intranet (asset-registry, marketing-ingest, content engine). Not third-party SaaS per se, but worth listing for IT awareness around hosting, secrets, and access.

ComponentRoleStatus
PostgreSQLOperational database (Railway-hosted)Active
ClickHouseAnalytics warehouse (planned Q2)Planned
TemporalWorkflow orchestration for ingest jobsPlanned
Kafka / KafkaJSEvent streaming between servicesStubbed in dev; planned for prod
Drizzle ORMType-safe Postgres access in Node servicesActive
PGliteEmbedded Postgres for local dev (no Docker required)Active in dev
FastifyHTTP framework for SGA servicesActive

7 BetterFaith stack (separate from SGA)

BetterFaith is Dakota's personal venture. Listed here because it shares Dakota's workstation and some credentials surface in the same .env files. IT should treat it as a separate trust boundary.

ServicePurpose
CFC eHealthLiability insurance carrier (v4.0 quote $4,520/yr). Binding constraints: no minors, no conversion therapy.
Cloudflare Pagesmemo.betterfaith.co (investor memo), docs.betterfaith.co (internal)
VercelBetterFaith docs site hosting
ClerkAuth provider on docs.betterfaith.co
NotionBetterFaith workspace + Internal API integration
Counselor recruiting sourcesACBC, CCEF, IABC, AABC, BCC (663 candidates tiered for outreach)

8 Dental financing partners (referenced in audits)

Not technical integrations but listed for completeness, as the cosmetic-dental and full-arch audits reference these by name and IT may field questions about embedding their widgets on practice sites.

PartnerUse case
CareCreditPatient financing (general dental)
SunbitPatient financing (point-of-sale)
CherryPatient financing (cosmetic + elective)
LendingClubPatient financing (large cases, full-arch)

9 Prioritized actions for IT

  1. Close the OpenAI key abuse incident (security item)
    Confirm key sk-proj-D-6K0lvt... is fully revoked across all OpenAI orgs. Audit workstation for malware (local .env exfiltration suspected). Verify MFA on OpenAI dashboard account. Document root cause once known.
    High impact / Low effort
  2. Complete Google Drive and Microsoft 365 Claude connector sign-in
    Both connectors are registered with claude.ai but show only authenticate/complete_authentication tools, meaning sign-in was never finished. Decide whether IT wants these enabled or blocked per data-governance policy before completing.
    Decision needed
  3. Inventory Google Ads MCC access
    Four separate MCCs (Gen4, Modis, LookSee, agency) hold customer data. No unified SGA MCC exists yet. Document who has owner-level access on each and the consolidation plan (per memory: dual-link strategy).
    Medium impact / Medium effort
  4. Audit secrets storage on workstation
    Multiple .env files exist locally with live tokens (Notion, GHL, Anthropic, Railway, Clerk). Recommend moving to a secrets manager (1Password, AWS Secrets Manager, or Doppler) and revoking long-lived tokens still pasted in shell history.
    Medium impact / Medium effort
  5. Document Cloudflare account split
    Two Cloudflare accounts in use (MODIS and Chasebowers). Some SGA deploys are on the personal Chasebowers account (attribution-flow.pages.dev). Decide whether to consolidate into a single SGA Cloudflare account for governance.
    Low impact / Low effort
  6. Confirm Notion API token scope
    A Notion integration token (ntn_19903750664a8w...) is in use against database 49ba6142de2040a3.... Confirm the integration's workspace scope is correct and the token is owned by an SGA-controlled identity, not a personal account.
    Low impact / Low effort
  7. Approve marketing data warehouse roll-out
    Q2 initiative: Postgres + ClickHouse + Temporal + Power BI starting with Google Ads, then GHL. Confirm IT support for ClickHouse hosting and Power BI workspace provisioning.
    Planning