One operator for the whole growth loop
Not a bundle of point tools — one always-on AI operator that reads the signals, does the work, books the meetings, keeps the records, and consults you when it matters. Here's everything it does, and how each piece stays safe.
Campaign operations
Your agent reads performance across channels every time it wakes: spend, CPL, fatigue signals, saturation. It proposes budget shifts and executes them within the daily cap you set, pauses what's losing, scales what's working — and attaches fresh creative when an ad is wearing out.
- Inside your caps — a hard daily ad-spend ceiling the agent cannot cross.
- Asks when it matters — budget changes are tier-2: approved by you, or by a standing rule you wrote.
- Everything logged — every read and every change lands in the audit trail.
Lead triage
A lead arriving is a wake signal, not a queue item. The agent enriches it, scores it, and drafts the first touch within minutes — while the lead is still warm. Hot leads escalate to you immediately with everything you need to close; the rest get a considered reply without you lifting a finger.
- Speed where it counts — first response in minutes, not the next business day.
- Sends as you — replies go from your own Gmail, not a stranger's domain.
- Recorded forever — every lead, score, and touch lands in your private ledger.
Form fill on “Commercial maintenance” landing page, 10:12 AM. Enriched: 40-unit portfolio, previous vendor contract expiring. Hot — escalated to you.
The phone and the money
Small businesses live or die on two doors: who answers the line, and who gets paid. Waveguide works both — with the same approval rails as everything else.
Answer every call
AI receptionist with a persona for your business — every call becomes a captured lead, a booked slot, and a confirmation text. Call mining checks transcripts for the quote nobody logged and the callback nobody calendared. Caller speech is quarantined before it can influence any action.
Get paid
On your Stripe account: chase overdue invoices, retry failed payments, send payment links, pause instead of losing subscriptions. A new dispute wakes the agent to assemble evidence and draft the response — refunds and credits always wait for you.
Scheduling that books
One Scheduling Service for the product. Share a native book page at /book/your-slug or connect Calendly — agents list open slots and book inside your SOUL windows (length, buffer, busy time). External-link mode shares your URL only (no API book). Pair with SDR: voice → book → Meet for the full path from outbound call to calendar.
- Waveguide booker — Google Calendar + your hours.
- Calendly — same agent tools; webhooks sync when your plan allows.
- Public booking — visitors book without a human click each time (narrow standing policy).
30-minute estimate · buffer respected · times from your open calendar.
Slot from SOUL windows · Meet link on calendar · confirmation text queued · lead in ledger.
- ✓ Waveguide booker — your slug, your hours
- ✓ Calendly — same agent tools, their UI
- ✓ SDR path — voice → book → Meet, one job
Creative generation
Ad copy, images, and video variants generated in your brand voice — the one you defined once in your agent's persona file. New variants get tested in small batches, and the numbers decide what scales. When a winning ad fatigues, the refresh is already drafted.
- Your voice, defined once — the persona file keeps every asset on-brand.
- Tested, not guessed — small-batch trials before anything scales.
- Stored as assets — every creative lands in your ledger with its performance history.
Variant B outperforming at 3.4% CTR — proposing it replace the fatigued hero ad.
Jobs
The capability that changes what “an AI tool” means: give the agent a goal — not a task — and it pursues it for weeks. Outreach, campaign launches, playbook builds, analysis, or hybrids. Research, multi-channel outreach, replies, follow-ups, booked meetings, even attending the Meet. With an autonomy dial, a per-job budget, and compliance rails on every lane.
About my business
Paste a public website or profile URL. Waveguide reads public pages, drafts identity and voice, imports key logos into Media, and shows a review draft before anything is saved. Accept all, fill empty fields only, or discard. Send windows and do-not-contact lists stay human-authored.
- SOUL.md — standing instructions loaded into every session.
- Media library — browse, upload, label logos and images.
- Scheduling mode — Waveguide booker, Calendly, or share-only external link.
Family-owned · Austin TX · residential repair & remodels
Voice: plain, warm, competent. Priorities: speed-to-lead, booked estimates over volume.
The daily brief
Every morning: what happened, what the agent did about it, and the decisions only you can make. Here's the trick that keeps it affordable — a fast, inexpensive model reads everything and sorts it into act, notify, or ignore. Only the “act” items wake the expensive model. You get judgment where it matters and economy everywhere else.
- Where you already are — Slack, Telegram, or your inbox.
- Decisions surfaced — approvals arrive as one-tap cards, not homework.
- Evening close-out too — on plans with multiple daily digests.
Morning. 3 campaigns healthy, 1 needs a decision. Two hot leads answered overnight — transcripts in the thread. Full brief: waveguide.adwave.com/app
Approval needed (T2): raise retargeting budget $60 → $140/day.
A ledger that becomes your CRM
Everything the agent touches is recorded in wavetable — your tenant's private system of record. Leads, campaigns, creative assets, and the attribution edges connecting them; contacts, companies, deals, and activities as the record deepens. Identity-anchored dedup means one person is one record, no matter how many channels they arrived through.
- Yours alone — an isolated store per tenant, with its own encryption keys.
- Queryable — the agent (and you) can ask real questions of it.
- Portable — export the whole thing, any time, one click.
Counts grow with your account — the dashboard Overview shows live ledger stats.
Web research, safely
The agent gets a managed cloud browser for the work that needs one: researching prospects, reading competitor pages, verifying a company is who it says it is. The web is untrusted input — so everything the browser reads is quarantined and typed before it can influence a risky action, and form submissions require your approval.
- Read freely, act carefully — public reads are open; submits are approval-gated.
- Injection-proof by design — a malicious page can't instruct your agent into a risky action.
- Screenshots kept — what the agent saw is part of the record.
- ✓ navigate riveramechanical.com (T0, public)
- ✓ extract: 22 techs, 3 locations, hiring → quarantined
- ✓ navigate license registry — verified active
- ⏸ submit contact form — requires approval
Bring your own tools
Connect tools from the curated catalog — Apollo for enrichment, Hunter for email verification, Firecrawl
for scraping, Instantly and Mailchimp for sending — or point the agent at any MCP server you run.
Each marketed action is a capability with a pluggable provider (Wave defaults, OAuth, or BYO MCP); the agent
prefers capability_call. Every tool is risk-classified before
the agent can touch it, its description is scanned for prompt injection, and credentials live in the vault.
Approvals that respect you
One card, one decision, wherever you already are. Approve, deny, or write a standing policy — “always allow budget increases under $50/day” — and stop being asked about that kind of thing. There's an interrupt budget too: the agent won't ping you more than a handful of times a day, and it batches the rest into the brief.
- Single-use, signed tokens — the model cannot forge an approval.
- Expire safely — an unanswered approval lapses; nothing runs by default.
- Policies you own — standing rules are yours to write, view, and revoke.
A complete audit trail
Every tool call, every proxied request, every approval, every kill-switch event — timestamped, attributed, and queryable. Not a marketing log; the actual enforcement record from the proxy that gated the action. Export everything, or delete everything, any time, self-serve.
- ✓ read meta.insights (T0)
- ✓ wavetable.leads.upsert ×2 (T1)
- ✓ gmail.send → lead reply (T2, approved)
- ⏸ meta.budget.change — awaiting you
Real work, not a script menu. The agent writes and runs code in a locked-down sandbox.
The model never holds a credential. Tokens are injected by the proxy after the request leaves the model.
Irreversible means you decide. Financial and irreversible actions require a human, by construction.
Waveguide
Your growth loop, running while you sleep
Tell it what to accomplish tonight. Wake up to a plan — and a loop that keeps running.
$5 free AI credits · no card required · upgrade anytime