Stepper

Workflows act across 489 apps, each with its own triggers and actions, among them Gmail, Slack, Google Sheets, HubSpot, Salesforce, Notion, Airtable, Stripe, Shopify, Jira, Zendesk, Xero, Microsoft Teams and Paperform itself, where actions reach as far as updating form fields, products and submissions.

An HTTP Request action calls any URL with full control of method, headers and body, custom connectors cover systems outside the catalog, and teams can bring their own credentials. Skill Sets hand the same authenticated actions to outside AI agents, so an assistant can add a spreadsheet row, post to Slack or create a Jira ticket through one connection.

Sourcestepper.ioread 2026-10-18

A conversational builder turns a plain language description into workflow steps and edits existing logic on request, and the visual editor shows the result for manual changes.

Workflows support conditional branches, loops and iterators, error handling and JavaScript code steps, and components package a reusable set of steps into a library that any workflow can call, so a lookup or authentication routine is built once and changed in one place.

The steps themselves are fixed when the workflow is saved: an AI step can classify a record or pick a route inside the flow, but no model plans the sequence at run time.

Sourcestepper.io/automation/stepper-vs-zapierread 2026-10-18

The built in AI app answers questions about or extracts text from images and PDFs, runs web searches, and takes whatever data earlier steps pass into its instructions, so an AI step can work from an invoice, a form submission or a search result. There is no knowledge base of Stepper's own to upload documents into, index and retrieve from with citations. Retrieval over a team's documents means wiring in a separate service from the catalog, such as Pinecone, Dify Knowledge Base, Voyage AI or Jina AI, each on its own account.

Sourcestepper.io/apps/airead 2026-10-18

Skill Sets put guardrails on what an outside agent can do: each one lists the connected apps and the exact actions allowed, can lock parameter values so that an agent allowed to send a Slack message can post only to #alerts, and issues separate tokens per role that can be revoked at once from the interface. Marketing can get email and CRM while engineering gets project tools and monitoring. Inside workflows, approvals appear as a use case, but no step pauses a run for a person to approve, reject or edit before it continues.

Sourcestepper.io/skill-setsread 2026-10-18

Skill Sets authenticate with static bearer tokens for scripts or OAuth 2.0 with PKCE for richer clients, scope each token to chosen apps and actions, and show which token or OAuth client made every call. Accounts sign in through Paperform. Stepper is GDPR compliant and holds no SOC 2, ISO 27001 or HIPAA certification, and single sign on and team roles are absent today, with collaboration features and advanced permissions slated for a Team plan that has not launched.

Sourcestepper.io/skill-setsread 2026-10-18

Every Skill Set call, successful or failed, is logged with the tool name, status, authentication method, timestamp and the token or OAuth client that made it, kept for 30 days and visible in the Stepper interface, so a team can see each action an outside agent took. Workflows themselves have no step level run trace, log export or link to an outside monitoring tool, and nothing records the reasoning behind an AI step's output beyond the result it passes to the next step.

Sourcestepper.io/skill-setsread 2026-10-18

Data moves from step to step within a run and lands in whatever records the workflow writes, such as a Google Sheets tracker or a CRM entry, but Stepper keeps no memory of past runs or conversations for its AI steps to draw on. Memory services in the catalog, including Mem0, Letta and Mem, can be called as ordinary actions on their own accounts. That puts the memory in another vendor's store, so Stepper manages no state of its own for its workflows or for the agents that call Skill Sets.

Sourcestepper.io/apps/airead 2026-10-18

Stepper runs only as a hosted service, with no self hosted edition, no open source release and no private cloud option, so workflows, credentials and logs live in Stepper's cloud; self hosting is slated as coming soon. Bringing your own API keys keeps AI and email calls on the customer's own provider accounts, which changes who bills for those calls but leaves the platform where it is, and the Skill Sets MCP endpoint is likewise a single hosted address at mcp.stepper.io. No region choice is offered.

Sourcestepper.io/automation/stepper-vs-zapierread 2026-10-18

Live templates can be copied and run straight away, such as one that extracts invoice details from PDF invoices with AI OCR and one that drafts replies to new Gmail messages while skipping notifications and transactional senders. Component libraries let a team assemble its own reusable building blocks, and the same components can be exposed to agents as single tools. The template set is small next to the 489 app catalog, and there are no packaged agents for a role or business function.

Sourcestepper.ioread 2026-10-18

Workflows start from instant and webhook triggers, polling triggers and scheduled runs, and from app events across the catalog, such as a new Paperform submission, a partial submission, a Papersign event, a new Gmail message or a new message in a chat channel. Components run when another workflow calls them, and through Skill Sets an outside agent, a terminal script or any MCP client can call an action or a whole component on demand and poll for its result. Stepper has no chat or voice channel of its own; conversations reach a workflow through the apps that trigger it.

Sourcestepper.io/automation/stepper-vs-zapierread 2026-10-18

AI steps run on Stepper's built in providers by default or on the customer's own keys, with OpenAI, Anthropic, Google Gemini, Mistral, DeepSeek, xAI, Cohere and Perplexity in the catalog alongside OpenRouter for reaching other makers. Each AI step names its own provider, so one workflow can read a document with one maker's model and draft a reply with another's, and bringing your own key moves the cost of those calls off Stepper credits onto the provider's bill. The builder makes that choice step by step, and there is no automatic routing or fallback between providers.

Sourcestepper.io/apps/airead 2026-10-18

Each Skill Set is served as a standard MCP endpoint at mcp.stepper.io for Claude, Cursor, Windsurf or any MCP client, with built in meta tools that handle dynamic parameters, dropdown options and async polling so an agent can fill in a form step by step.

The stpr command line tool on npm discovers, inspects and calls the same actions from a terminal with OAuth login, saved profiles or a static token, and multistep workflows from a component library become single callable tools that run asynchronously. Most of those tools are actions in connected apps such as Slack or Jira.

There is no REST API or SDK for creating, editing or managing Stepper workflows themselves, so the MCP endpoint and the CLI are the only programmatic way in.

Sourcestepper.io/skill-setsread 2026-10-18

The conversational assistant can explain what an existing workflow does, and the stpr tool returns an action's live parameter schema without executing it unless the call flag is set, which lets a builder check inputs before an agent uses them. Beyond that there is no test run against sample data, replay of a past execution, version history or evaluation of AI step outputs, so checking a workflow or a Skill Set before it goes live comes down to running it and reading the result.

Sourcenpmjs.com/package/stprread 2026-10-18

Stepper does not run a browser or a desktop of its own, and its AI app reaches the web only through searches.

The catalog does carry browser services, among them Browserbase, Browserless, Hyperbrowser, Steel, Browse AI and Firecrawl, each on its own account and plan, so a workflow can send page work to one of them as an ordinary action and use the result in the next step.

Everything about how those sessions behave lives with the other company: Stepper neither shows the session nor records what happened on screen, and a team that needs a portal filled in picks, pays for and governs that browser engine itself.

Sourcestepper.io/apps/airead 2026-10-18