ScalePad
Overview
ScalePad is an MSP operating system spanning five products: Lifecycle Manager, ControlMap, Quoter, Backup Radar, and Cognition360. ScalePad is consolidating its product APIs onto one Core API platform.
The Bumblebee integration wraps four ScalePad API surfaces — the Core API (clients, contacts, hardware inventory, contracts, opportunities), the Lifecycle Manager API (hardware purchase dates, warranty expiry, coverage), Quoter (quotes and catalog), and ControlMap (compliance posture: controls, risks, policies, evidence, framework objectives, remediation work). A single ScalePad API key authorises all four — there is no per-product key.
The integration is read-only, so Bumblebee can list and retrieve data but cannot modify ScalePad records.
Note that hardware appears on two of those surfaces with different data: the Core API returns inventory (identity, CPU/RAM/disks, installed software), while Lifecycle Manager returns the lifecycle view (purchase date, warranty expiry, coverage). Ask for purchase or warranty data and Bumblebee uses the Lifecycle Manager tools.
Not covered by this integration:
- Backup Radar — a separate API (
api.backupradar.com) with its own key. - Cognition360 — a BI/analytics product with no public REST API.
Prerequisites & Setup
You need:
- A ScalePad account with at least one paid product. Any paid subscription unlocks the Core API, Quoter, and ControlMap; the Lifecycle Manager API has a higher subscription requirement
- An active user with Administrator permission (required to view and use API keys)
- A personal API key generated from the ScalePad Hub
Generate an API Key
- Sign in to ScalePad as an Administrator
- Open the ScalePad Hub and go to Personal API Keys
- Click New API key, give it a name, and set an expiry (default 2 years)
- Click Generate and copy the key immediately
Keys are per-user; if the owning user is deactivated or loses Administrator permission, the key stops working.
Vendor documentation:
- Getting started: developer.scalepad.com
- API reference: developer.scalepad.com/reference
Configure in Bumblebee
- Go to the Integrations page in Bumblebee
- Select ScalePad
- Paste your API Key
- Set Data Region if your ScalePad tenant is hosted outside the US — see below
- Save the configuration
- Run a test request (e.g. list clients) from the validation card
Data region (ControlMap only)
ScalePad hosts ControlMap in four regions — US, EU, Canada, and Australia — and each tenant's compliance data lives in exactly one of them. The Core API, Lifecycle Manager, and Quoter are US-only and are unaffected by this setting.
Leave Data Region blank for a US tenant. Enter eu, ca, or au if your
tenant was provisioned in one of those regions for data residency reasons.
Warning: Setting the wrong region does not produce an error. ScalePad accepts the key against any region but returns only the data held there, so a European tenant queried as US looks like an account with no controls, risks, or policies. If ControlMap results come back empty when you know the data exists, check this field first.
API Limits
ScalePad enforces 50 requests / 5 seconds; exceeding it returns a 429 with a
Retry-After header. Bumblebee backs off and retries automatically. List
endpoints use cursor-based pagination — pass the returned cursor back to page
through results.
Lifecycle Manager endpoints also return 402 Payment Required if the account is
authenticated but has no Lifecycle Manager subscription. ControlMap is unlocked by
any paid ScalePad product, so it should not hit this.
Available Tools
All tools are read-only. List tools accept cursor and limit for pagination.
Core API
| Tool | Description |
|---|---|
list_clients | List managed client organizations |
get_client | Get one client by id |
list_contacts | List contacts at managed clients |
get_contact | Get one contact by id |
list_hardware_assets | List hardware inventory — identity, CPU/RAM/disks, installed software (optionally scoped to a client). No purchase or warranty dates; see Lifecycle Manager below |
get_hardware_asset | Get one hardware asset's inventory record by id |
list_contracts | List contracts (start/end dates, value; optionally scoped to a client) |
get_contract | Get one contract by id |
list_opportunities | List sales opportunities (optionally scoped to a client) |
Lifecycle Manager
Hardware purchase dates, warranty expiry, and coverage status. These fields live only on ScalePad's Lifecycle Manager API — the Core API's hardware resource does not carry them.
| Tool | Description |
|---|---|
list_lifecycle_manager_hardware_assets | List hardware with purchase date, warranty expiry, coverage and renewal availability. Supports free-text search, sorting, and server-side filters (age, warranty, type, manufacturer, …) |
list_hardware_lifecycle_records | List active lifecycle records — purchase date, warranty expiry and its source, manufacturer expiry. Filterable by serial number |
get_hardware_asset_overview | Get one asset's lifecycle detail — purchase date and age, warranty expiry and time remaining, coverage status. Looked up by asset id, or by serial number + model + manufacturer |
Note: Purchase and warranty dates are populated only when the upstream PSA/RMM reported them, so some assets return
null. Lifecycle Manager tools require a Lifecycle Manager subscription on the ScalePad account — without one they return402 Payment Required.
Quoter
| Tool | Description |
|---|---|
list_quotes | List quotes (status, totals, line items) |
get_quote | Get one quote by id, including line items |
list_items | List catalog items (products/services) |
list_manufacturers | List manufacturers |
list_suppliers | List suppliers/distributors |
ControlMap
Compliance posture per managed client — where each client stands against its frameworks, what is unimplemented, and what remediation work is outstanding.
Start with the health tools: they are the only ones that return the client and framework identifiers the other tools need.
| Tool | Description |
|---|---|
list_client_compliance_health | Compliance and risk scores across every client, optionally with framework breakdowns, work progress, and score history |
get_client_compliance_health | One client's full health snapshot — compliance score, risk score, frameworks, work progress |
Cross-client rollups — one call each, for "how does the whole book of business look on this":
| Tool | Description |
|---|---|
list_clients_control_summaries | Control implementation counts per client (completed, in progress, not started, completion %) |
list_clients_risk_summaries | Risk score and severity breakdown per client |
list_clients_evidence_summaries | Evidence collection status per client |
list_clients_policy_summaries | Policy counts by approval status per client |
list_clients_procedure_summaries | Procedure documentation counts per client |
list_clients_governance_summaries | Governance document counts per client |
list_clients_objective_summaries | Framework objective counts by compliance state per client |
list_clients_assessment_summaries | Assessment questionnaire progress per client |
list_clients_action_item_summaries | Remediation action item counts per client |
Per-client detail, with server-side filtering and sorting:
| Tool | Description |
|---|---|
search_client_controls | One client's controls — status, owner, control set and family, linked objectives. Filter by code, status, owner, control set, or program |
search_client_risks | One client's risk register — inherent/current/target scores, treatment, owner, department, business impact. Filter by status, treatment, owner, or program |
search_client_policies | One client's policies — approval status, owner, linked objectives. Filter by code, owner, status, or program |
search_client_objectives | One client's objectives (requirements) within one framework, with compliance status. Filter by status or scope |
search_client_evidences | One client's evidence records and requests. Filter by code, title, owner, or program |
search_client_action_items | One client's remediation backlog — status, responsible person, linked objectives. Filter by status, code, title, owner, or program |
Note: Procedures and governance have rollups but no per-client search tool, so Bumblebee can report the counts but not list the individual records. ControlMap coverage is read-only — Bumblebee cannot create or update controls, risks, policies, or evidence.
Use-case filtering — expiring warranties, upcoming renewals, won quotes, overdue evidence — is done by the agent over the list responses; the tools are named after the API surface, not the use case.
Example questions
- "Which hardware assets at Acme have warranties expiring in the next 90 days?"
- "When was the hardware at Acme purchased, and how old is it?"
- "Show me every workstation at Contoso older than four years."
- "What's the purchase date and warranty status for serial 91DDPY2?"
- "List contracts renewing this quarter."
- "Show me open opportunities for Contoso."
- "What quotes are still pending approval?"
- "Which of my clients has the weakest compliance score?"
- "Where is Acme non-compliant against SOC 2?"
- "Show me every unimplemented control at Contoso."
- "What are Acme's highest-severity open risks, and who owns them?"
- "Which clients still have policies sitting in draft?"
- "What remediation work is outstanding for Acme, and who is responsible?"