Can AI agents automate Penneo?

Penneo Sign and Penneo Collect are automatable today through the documented HTTP APIs. This record is those two products. It is not Visma Sign or Scrive. Production API base is https://app.penneo.com and sandbox is https://sandbox.penneo.com. Login hosts are https://login.penneo.com and https://login-sandbox.penneo.com. Recommended authentication is OAuth 2.0. Authorization Code is for a user login and returns a refresh token. API Keys is for server-to-server calls: POST /oauth/token with grant_type=api_keys, a client id and secret, and a SHA1 digest of a nonce, timestamp, and API secret. Access tokens expire after 600 seconds. Refresh tokens last 5 days, expire when used, and are omitted on the API Keys grant. A documented call is GET /api/v3/casefiles with Authorization: Bearer and Accept: application/json. OAuth clients are created by an account administrator and are not shared between sandbox and production. Penneo Sign can subscribe to webhooks. Penneo Collect does not offer webhooks yet. The authentication guide says Penneo provides PHP SDKs. Legacy Web Services Security and JWT methods are documented and not recommended. The docs index lists a Microsoft Power Platform guide. That connector page was not opened, and Zapier, Make, and n8n were not opened. A first-party MCP server was not established. Computer-use viability is unassessed. The API scores 7 and is the best path. The ten-minute access token and the API Keys digest are the main operational limits.

Best path today: api · Overall automatability: 7/10