{
 "categories": [
  "customer-support",
  "helpdesk",
  "communication"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-09-19",
   "fact": "homepage",
   "note": "Front presents a commercial customer-operations platform that unifies email, SMS, chat, and other channels with shared inboxes, comments, and AI assistance.",
   "source": "https://front.com/",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "license",
   "note": "Opened pricing sells paid Starter, Professional, and Enterprise seats. A 14-day Professional trial is offered without a credit card. That is a commercial product with a trial, not a permanent free tenant.",
   "source": "https://front.com/pricing",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.exists",
   "note": "Front documents a Core API that authenticates with Bearer tokens and operates on conversations, contacts, inboxes, and related resources.",
   "source": "https://dev.frontapp.com/docs/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.kinds[0]",
   "note": "The getting-started tutorial creates and updates contacts with JSON POST and PATCH against https://api2.frontapp.com/contacts.",
   "source": "https://dev.frontapp.com/docs/core-api-getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.auth[0]",
   "note": "Integrators can mint an API token in Front settings and send it as Authorization Bearer. Token scopes cover features, namespaces (global, shared, private), and read/write/delete/send permissions.",
   "source": "https://dev.frontapp.com/docs/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.auth[1]",
   "note": "OAuth 2.0 authorization-code uses https://app.frontapp.com/oauth/authorize and https://app.frontapp.com/oauth/token. Access tokens expire after about 60 minutes; refresh tokens last six months. Public integrations must use OAuth unless Front grants an exception.",
   "source": "https://dev.frontapp.com/docs/oauth",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.coverage",
   "note": "The Core API documents conversation create, search, update, assign, tag, comment, and message flows, plus related contact and inbox resources. Coverage is permission-scoped and excludes some mass-action events from webhooks.",
   "source": "https://dev.frontapp.com/reference/conversations",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.docs",
   "note": "Opened as the current Core API authentication page for Bearer tokens, API tokens, and OAuth.",
   "source": "https://dev.frontapp.com/docs/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.mcp.first_party",
   "note": "Front documents a first-party remote MCP at https://mcp.frontapp.com/mcp over Streamable HTTP. Auth is OAuth 2.1 plus PKCE. Dynamic Client Registration is not supported.",
   "source": "https://dev.frontapp.com/docs/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.mcp.verdict",
   "note": "Open beta. Scopes are read, write, and send. Named tools search and read conversations, draft and send replies, comment, tag, assign, move, and search contacts. Codex and other DCR-only clients are incompatible. Agents inherit the authorizing teammate's permissions.",
   "source": "https://dev.frontapp.com/docs/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.extensibility.webhooks",
   "note": "Front documents application webhooks (retry failed deliveries, full payload, shared inboxes) and rule webhooks (can target a private inbox, no equivalent retries).",
   "source": "https://dev.frontapp.com/docs/webhooks-1",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.data_access.export",
   "note": "GET conversation, message, comment, and related list endpoints return JSON resources the token is permitted to see.",
   "source": "https://dev.frontapp.com/reference/conversations",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.data_access.import",
   "note": "POST /contacts creates a contact from JSON. Conversation create, comment, and import-message endpoints write inbox state through the same JSON API.",
   "source": "https://dev.frontapp.com/docs/core-api-getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "Opened https://dev.frontapp.com/llms.txt as a first-party documentation index listing Core API, OAuth, MCP, webhook, and conversation reference pages.",
   "source": "https://dev.frontapp.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "verdict.scores.api",
   "note": "The Core API is a broad documented production REST surface with Bearer API tokens, OAuth, conversation writes, and webhook delivery. Namespace and send-permission gates keep the path in the practical-and-broad band.",
   "source": "https://dev.frontapp.com/docs/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "verdict.scores.mcp",
   "note": "The official remote server has useful conversation, comment, tag, assignment, and contact tools, including send. Open beta, no Dynamic Client Registration, and a confidential-app requirement for custom clients keep the score in the official-and-useful band rather than unusually complete.",
   "source": "https://dev.frontapp.com/docs/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Core API authentication page.",
   "source": "https://dev.frontapp.com/docs/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current first-party Front MCP page, including endpoint, OAuth 2.1, scopes, tool list, and DCR incompatibility.",
   "source": "https://dev.frontapp.com/docs/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current OAuth guide for authorization-code and refresh tokens.",
   "source": "https://dev.frontapp.com/docs/oauth",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the current webhook comparison of application webhooks and rule webhooks.",
   "source": "https://dev.frontapp.com/docs/webhooks-1",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-09-19",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://dev.frontapp.com/docs/authentication"
   },
   {
    "type": "mcp",
    "url": "https://dev.frontapp.com/docs/mcp-server"
   },
   {
    "type": "docs",
    "url": "https://dev.frontapp.com/docs/oauth"
   },
   {
    "type": "docs",
    "url": "https://dev.frontapp.com/docs/webhooks-1"
   }
  ]
 },
 "homepage": "https://front.com/",
 "id": "front",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": true
  },
  "api": {
   "auth": [
    "api-token",
    "oauth2"
   ],
   "coverage": "partial",
   "docs": "https://dev.frontapp.com/docs/authentication",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": [
    "json"
   ]
  },
  "extensibility": {
   "scripting": [],
   "webhooks": true
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Front's Core API, application and rule webhooks, and the first-party hosted MCP cover inbox automation without browser control.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Front",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "zendesk",
   "freshdesk",
   "intercom"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Front",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 8,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": 7,
   "overall": 8,
   "rpa": null
  },
  "summary": "Front is automatable today through the Core API. This record is the Front shared inbox and customer-communication workspace (email, SMS, chat, comments, tags, and assignments), including the vendor-hosted MCP at https://mcp.frontapp.com/mcp. It is not Zendesk, Freshdesk, Intercom, or Freshservice. The Core API host in opened examples is https://api2.frontapp.com. Callers send Authorization Bearer. Tokens come from Front settings or from OAuth 2.0 authorization-code against https://app.frontapp.com/oauth/authorize and https://app.frontapp.com/oauth/token. Public App Store integrations must use OAuth unless Front grants an exception. OAuth access tokens last about 60 minutes; refresh tokens last six months. Core API resources include conversations, messages, comments, contacts, inboxes, tags, and teammates. Conversations are created by sending a message, starting a discussion, or creating a draft. Application webhooks retry failed deliveries and always send the full event; rule webhooks can target a private inbox but do not offer the same retries. First-party MCP is open beta over Streamable HTTP. Auth is OAuth 2.1 plus PKCE. Front does not support Dynamic Client Registration; custom clients need a confidential developer app with the MCP Server feature. Codex and other DCR-only clients are incompatible. Scopes are read, write, and send. Agents inherit the authorizing teammate's inbox permissions. Official language SDKs, a general-purpose CLI, and iPaaS catalogs were not established from the opened pages. Computer-use viability is unassessed. API scores 8 and is the best path because MCP is an open-beta subset that cannot serve DCR-only clients.\n"
 }
}