Auto repair shops: what an AI agent can and can't do with your software

• Last verified October 28, 2026
• Updated Oct 28, 2026Published Oct 27, 2026

This guide is for owners, service advisors and office managers at independent auto repair and general service shops who want to know how much of their shop management system an assistant such as Meta's Muse could actually reach, and which decisions should stay with the advisor, the technician or the owner.

How to read the status labels

Everything below is drawn from vendor and agency publications. We haven't hooked any shop system up to an agent. Before you lean on a row, compare it with your own account, plan and contract. The methodology page describes how we work.

The short version

• Meta's Sept 29 announcement names fifteen connectors, and none of them is a shop management system. QuickBooks and Stripe are among them. Meta adds that the complete list lives in the Muse app's settings. (Confirmed by vendor 1) We can't see that in-app list, so we can't rule out a shop tool on it. (Unverified)
• Tekmetric, Shopmonkey, Shop-Ware and Protractor each publish some way for outside software to reach shop data. Shopmonkey lets an admin create a key; Tekmetric and Shop-Ware hand out credentials only after you or a partner ask; Protractor generates a key inside its setup screens for a third party. (Confirmed by vendor 6 8 11 14)
• Tekmetric's API page currently carries a notice that new API applications aren't being processed. (Confirmed by vendor 6)
• We found no MCP server or Zapier app published by Tekmetric, Shopmonkey, Shop-Ware, AutoLeap, Mitchell 1, Protractor or R.O. Writer. (Unverified)
• The FTC tells drivers to expect a written estimate and to be asked before a job goes past an agreed amount. (Confirmed by the FTC 34)
• Customer approval of repairs, refrigerant work, used oil, and texts to customers are where an agent's mistake becomes a legal or safety problem. Keep a person on those; the risk section has the detail.

Stack map

Shop management systems

Swipe the table sideways to see every column →

Parts, inspections and customer messaging

Swipe the table sideways to see every column →

Money

Swipe the table sideways to see every column →

None of the shop systems above plugs into Muse on its own, so getting one in would take a custom connector that you or a developer you hire would have to build. Meta lets you add custom connectors but doesn't vet them. You can set one to read-only, and anything Muse already pulled in can stay in its memories after you disconnect. (Confirmed by vendor 2) Meta's guidelines for connector builders call for an approval step every time a sensitive write happens and favor read-only OAuth scopes when a service offers them. For now Meta isn't accepting new tools that move money. (Confirmed by vendor 3) What the key can touch is set by the shop system and by whoever creates the key, so decide that before anyone builds anything.

Jobs you could hand off today (per vendor docs)

Swipe the table sideways to see every column →

Keep these out

• Recording that a customer approved a job. Shopmonkey's API can create an authorization on a work order, listing services as authorized, declined or not authorized and marking whether the yes came in person, by phone, text, email or in the app. (Confirmed by vendor 8) An agent should never create that record. The advisor who talked to the customer should, every time.
• Customer texts and emails sent without a person reading them first. Shopmonkey's message endpoint has switches for sending by SMS and email, and Podium's Zapier app includes a send-message action. (Confirmed by vendor 8 18) Have the agent draft, and have a person send.
• Invoices and refunds. Through Zapier, Podium invoices can be created, canceled or refunded. (Confirmed by vendor 18) Keep those actions away from any agent.
• Full-access keys. A Shopmonkey key carries the same permissions as the person who made it, and Shopmonkey says to guard it like a critical password. (Confirmed by vendor 8) If you make one for an agent, make it from a login with the narrowest role you can, give it an expiry date, and invalidate it when the project ends.
• Tokens nobody tracks. A Tekmetric access token works until it's revoked, and a Protractor external service with no end date works until the entry is deleted. (Confirmed by vendor 6 14) Write down each key, its holder and its reach, and retire the ones no one uses.
• Write access you didn't mean to grant. Shop-Ware grants write access separately from read access. (Confirmed by vendor 11) Ask for read only unless you have a specific reason not to.

Risks to keep a person on

• Approval before work starts. The FTC's Auto Repair Basics page for consumers, from August 2012, tells drivers what to expect from a shop: a written estimate naming the repair, the parts and the labor it expects to need, and a request for their approval before the work passes a set amount. It suggests they ask for the replaced parts back, which it says some states require, and it describes a repair order that lists each repair, each part with its cost, the labor charges, and the odometer reading when the car arrives and when it leaves. (Confirmed by the FTC 34) Your paperwork and your agent's drafts should match what customers have been told to look for. State rules on estimates, authorization and returning old parts vary, and no state law is sourced on this page yet. Your state attorney general's office or consumer protection agency can tell you what applies. (Unverified) Whatever your state requires, the yes should come from the customer to a person, and an agent shouldn't move a job forward until that person records it.
• Warranty talk with customers. Under 15 U.S.C. 2302(c), a warrantor of a consumer product can't make its written or implied warranty depend on the customer using an article or service identified by brand, trade or corporate name, unless that item or service is provided free under the warranty. The FTC can waive the ban if the product works properly only with the named item and a waiver serves the public interest. The section reaches only products that cost the consumer more than $5. (Confirmed by Congress 20) The FTC's Businessperson's Guide to Federal Warranty Law, last modified March 11, 2025, says: "Generally, tie-in sales provisions aren't allowed." It lists two ways around that: the warrantor supplies the required part or service at no charge under the warranty, or it wins an FTC waiver by showing the product can't work properly without it. The guide adds that a warrantor can still deny coverage for defects or damage that come from parts or service it didn't supply. (Confirmed by the FTC 32) Don't let an agent tell a customer that an independent shop's work will void their warranty, or that it won't. That's for a person who has read the warranty.
• Claims in your ads. The FTC's small-business advertising guide, dated April 2001, says ads have to be truthful and not deceptive, and that you need evidence for what an ad states or implies before it runs. (Confirmed by the FTC 28) Phrases like "dealer-quality parts," "lifetime warranty" or "certified technicians" should go out only when someone can back them up.
• A/C refrigerant work. Under 40 CFR 82.34, anyone who services motor vehicle air conditioners for pay may not do refrigerant work without approved equipment and training and certification from an EPA-approved program, and class I or class II refrigerant in containers under 20 pounds may be sold only to certified people or for resale. Section 82.42 requires the shop to certify its equipment to the EPA, keep records of where recovered refrigerant goes and of which operators are certified, hold those records on site for at least three years, and let EPA representatives in to see them. The EPA's Section 609 page says that bartering counts as payment. (Confirmed by the EPA 23 24) An agent can remind you when a certificate is on file; a person has to check who actually does the work.
• Used oil and filters. Under 40 CFR 279.22, a shop generating used oil must keep it in tanks or containers that are in good shape, don't leak and are marked "Used Oil." After a release, it must stop it, contain it, clean it up and fix or replace the leaking unit before using it again. Spill prevention and underground tank rules can also apply. Under 279.24, the shop must send it off only with haulers that hold EPA ID numbers. The exceptions include carrying no more than 55 gallons at a time, in its own or an employee's vehicle, to a recognized collection center or to an aggregation point the shop owns. (Confirmed by the EPA 21) The EPA's used oil FAQ (last updated June 23, 2026) says generators don't need an EPA ID number (though a state or local permit may apply) and shouldn't mix used oil with hazardous substances. Hot-drained filters that aren't terne-plated are excluded from hazardous waste rules if not mixed with listed waste. Rags should have the free-flowing oil removed first. Service stations that follow the standards, keep used oil unmixed and take do-it-yourselfers' oil for recycling are relieved of responsibility for cleanups and liabilities tied to handling the oil off site. States can set stricter rules. (Confirmed by the EPA 22) Pickup schedules are fine to automate. Deciding what goes in which drum isn't.
• Shop chemicals. OSHA's Hazard Communication standard requires a written program with a list of the hazardous chemicals in the workplace, safety data sheets that workers can get to during every shift (electronic access is fine if nothing stands in the way), and training when a worker starts and whenever a new hazard comes in. (Confirmed by OSHA 26) An agent can keep the chemical list tidy; a person owns the program and the training.
• Service reminders by text or call. Paragraph (a)(1)(iii) of 47 CFR 64.1200 requires prior express consent for autodialed or prerecorded non-emergency calls to a mobile number, and (a)(2) requires prior express written consent when the call advertises or telemarkets. Under (a)(10), customers can revoke consent in any reasonable way; replies such as "stop," "quit," "cancel" or "unsubscribe" count outright, and the revocation must be honored within a reasonable time of no more than ten business days. Under (a)(12), a single text confirming the opt-out is allowed if it has no marketing in it and nothing else follows; if it goes out within five minutes, the rule presumes consent covers it. (Confirmed by the FCC 25) Keep coupons and upsells out of automated "your car is ready" texts unless you hold written consent, and make sure an agent treats a "stop" as final.
• Email campaigns. The FTC's CAN-SPAM guide applies to commercial email, business-to-business mail included. Headers and subject lines can't mislead, the message must say it's an ad, and it must carry a valid postal address and a clear way to opt out. Opt-outs must be honored within 10 business days, and the unsubscribe option must still function for no less than 30 days after a send. Each violating email can draw a penalty of up to $53,088. (Confirmed by the FTC 30)
• Customer and vehicle data. The FTC's data security guide for businesses (October 2016, updated April 2, 2024) is built on five steps: know what personal information you hold, keep only what the business needs, protect what you keep, get rid of what's no longer needed in a proper way, and have a plan for security incidents. (Confirmed by the FTC 29) Names, phone numbers, addresses, VINs and plates all count. Don't let an agent copy customer lists into chats or new files.
• Financing at the counter. The FTC's December 2024 business guide to the Safeguards Rule says it reaches an institution "significantly engaged in financial activities" and that "what matters are the types of activities your business undertakes." The examples it gives are mortgage lenders, payday lenders, finance companies and mortgage brokers. Repair shops aren't mentioned. (Confirmed by the FTC 33) Among the covered examples in 16 CFR 314.2(h) are "a retailer that extends credit by issuing its own credit card directly to consumers" and "a company acting as a finder in bringing together one or more buyers and sellers of any product or service for transactions that the parties themselves negotiate and consummate." Left out are entities "not significantly engaged in those financial activities," for instance a retailer whose "only means of extending credit are occasional “lay away” and deferred payment plans or accepting payment by means of credit cards issued by others," and a merchant that lets someone "run a tab." (Confirmed by the FTC 27) Those definitions don't settle whether a shop that offers or arranges financing for customers is covered, and the rule doesn't say how much activity makes a business "significantly engaged." Going by the text, two questions would decide it. First, does the shop extend credit itself, through its own card or regular in-house payment plans, rather than occasional deferred payment or other companies' cards? Second, does sending customers to an outside lender count as acting as a finder? The rule takes that activity from 12 CFR 225.86(d)(1), whose list of finder services includes "introducing and referring potential parties to each other." (Unverified 35) Ask your attorney before an agent starts sending customers financing offers or applications.
• Open recalls. NHTSA's Check for Recalls page says a plate or VIN search shows an "unrepaired recall for a vehicle from certain manufacturers," and that you can "search up to 100 VINs." The search won't show a "safety recall that has already been repaired," "recently announced safety recalls for which not all VINs have been identified," recalls "more than 15 years old (except where a manufacturer offers more coverage)," recalls by "small vehicle manufacturers," "customer service or other non-safety recall campaigns" or a "recall involving an international vehicle." Owners are told to "contact your local dealership to fix the recalled part for free." (Confirmed by NHTSA 31) An agent can run the lookup; a person should tell the customer what it means, and not as a promise that the car has no recalls.
• Keys and cars on the lot. Tekmetric's API can write a repair order's key tag. (Confirmed by vendor 6) We found no federal rule on key custody for repair shops. Your garage liability insurer may have one. (Unverified) Don't let an agent change key tags, or tell anyone where a key or car is, without a person checking.

This page isn't legal, tax, environmental or safety advice. State law, an insurance policy, a franchise agreement or a software contract can each demand more than what's written here.

FAQ

Can Muse work with Tekmetric or Shopmonkey today? Neither is among the connectors Meta named. (Confirmed by vendor 1) A developer could build on either one's published API to make a custom connector, although Tekmetric has paused new API applications. (Confirmed by vendor 6 8) Nobody has published a Muse connector for either one, as far as we could find. (Unverified)

Does any shop system have its own AI connector or MCP server? Not that we found from Tekmetric, Shopmonkey, Shop-Ware, AutoLeap, Mitchell 1, Protractor or R.O. Writer. (Unverified)

Could an agent text customers their estimates? It could write the message. Tekmetric's API can create share links for estimates, and Shopmonkey's can send messages by text. (Confirmed by vendor 6 8) Sending, and getting the customer's approval, should stay with the advisor; see the approval and texting risks above.

What's the safest first step? Turn on the QuickBooks connector, if your shop system already syncs there, and ask questions about the books. Nothing in the shop system changes.

Where are the other trades? See all trade guides.

Changes to this page

Swipe the table sideways to see every column →

If a line here is wrong or has gone stale, send it to us via Corrections. This page summarizes published material; we haven't tested any of these tools ourselves.