loading...
you'll receive an email invitation to chaos trace. click the link, set your password, and log in at chaostrace.com.
first person at your company?you'll land on the onboarding page, ready to connect your first system.
joining an existing team?you'll see everything your team has already connected — no setup needed.
the onboarding page walks you through connecting each system. you need at least one to get started.
click connect salesforce and log in with your salesforce credentials. chaos trace connects via OAuth and requests read-only access.
Enterprise, Unlimited, Performance, or Developer. Group Edition has no API access. Professional needs the API add-on.
System Administrator profile, or a user with: API Enabled + View Setup and Configuration + View All Data (Setup → Profiles → System Permissions). IP Relaxation must be set to "Relax IP restrictions" on the chaos trace connected app.
flows, process builders, validation rules, approval processes, apex triggers, workflow rules, duplicate rules, matching rules, assignment rules, escalation rules, auto-response rules, and bulk API jobs. also subscribes to Change Data Capture for runtime tool detection.
change data capture (cdc) — required for full value
what cdc is. a salesforce feature that emits a real-time event whenever a record field changes. chaos trace subscribes to those events to see which third-party tools are writing to which fields. this is the only reliable way to detect tools that bypass salesforce's standard ui (api integrations, marketo writes, custom scripts).
without cdc. automation mapping still works — chaos trace pulls all flows, workflows, and rules regardless. but third-party tool detection silently produces nothing because the underlying event stream is dark. you'll see your declared automations but not the tools writing alongside them.
edition requirements. Enterprise, Unlimited, Performance, or Developer. Professional Edition cannot enable CDC — automation mapping works, but tool detection won't.
slot allocation. salesforce includes 5 free CDC channel members per org. chaos trace recommends 4 by default (Account, Lead, Contact, Opportunity), leaving 1 slot free for CampaignMember if you actively use campaigns. if you already have CDC enabled for other tools (Heroku Connect, Mulesoft, warehouses, etc.), those use the same 5-slot allocation. beyond 5 requires salesforce's "Change Data Capture for All Objects" add-on (separate paid SKU — contact your account executive).
how to enable. Setup → Quick Find → "Change Data Capture" → move objects from Available Entities to Selected Entities → Save. the change is immediate; chaos trace will start receiving events on the next field change. chaos trace never modifies your CDC setup — it only subscribes to what you've enabled.
opt-in objects. CampaignMember is intentionally opt-in (not a default) because it can be very high-volume: a single Marketo campaign sync can fire thousands of events. chaos trace defaults to the safer 4-object set; you can opt CampaignMember (or Case, Task, or custom objects) on from the salesforce system page after connecting.
delivery allocation. salesforce's default daily allocation is ~10,000 delivered CDC events per org, shared across all subscribers. high-volume orgs can approach this cap — the /systems page shows your trailing-24h count so you can self-throttle if needed.
nebulalogger (optional). a separate managed package that enables integration traffic mapping. not required — tool detection works without it via CDC, OAuth tokens, and field prefixes.
2–5 minutes. read-only — chaos trace never writes to salesforce.
click connect hubspot and authorize via OAuth.
Professional or Enterprise. Free and Starter don't include workflows. property history (used for tool detection) is available on all tiers.
Super Admin, or a user with: Workflows (edit) + Contacts/Companies/Deals (view) + Property Settings (view). HubSpot validates all permissions at consent time.
all workflows (v3 + v4), property history, sequences, forms, pipeline automations, smart lists, calculated properties, CRM extensions, and custom behavioral events.
for best results
Sales Hub Professional unlocks sequence detection. Enterprise unlocks custom objects. property history works on all tiers — it's how chaos trace identifies which tools are writing your fields.
1–3 minutes. read-only — chaos trace never writes to hubspot.
marketo uses API credentials instead of OAuth. open the marketo panel and enter three fields:
| munchkin ID | Admin → Integration → Munchkin (format: 000-AAA-000) |
| client ID | Admin → Integration → LaunchPoint → New Service (type: Custom) |
| client secret | same LaunchPoint custom service page |
Standard or higher. Growth/Spark can't access the Asset API (needed for flow step definitions).
an API-only user (Admin → Users & Roles → Invite New User → check "API Only") with a LaunchPoint Custom service. the API user's role needs under Access API: Read-Only Campaigns, Read-Only Assets, Read-Only Activity, Read-Only Activity Metadata. if using workspaces, the role must be assigned to all relevant workspaces.
smart campaign metadata via Asset API + recent activity logs. because marketo doesn't expose flow step definitions, chaos trace infers steps from activity data. inferred steps carry confidence scores.
for best results
more active campaigns = better inference. chaos trace samples the last 7 days and needs 3+ leads per campaign for confident inference.
the 50,000 daily API quota is shared across ALL integrations on your instance.
3–8 minutes. read-only — never executes campaigns.
click connect google drive to enable automatic documentation exports.
a google account with Drive access. if your organization uses Google Workspace, your admin may need to whitelist chaos trace.
after connecting, chaos trace automatically exports a PDF change doc to your Drive every time an automation is created or updated. each PDF includes the automation's metadata, a full step-by-step breakdown, and a visual flowchart. automations are organized by connector and by trigger object.
export-only — chaos trace writes reports to your Drive but never reads from it. files count against your personal Drive storage quota.
the systemspage is where all connection management lives. every connector shows up as a tile you can refresh, pause, schedule, or disconnect. you can also reconnect a system that's gone stale — same OAuth flow or credential panel you used the first time.
hit disconnect on any connected tile. chaos trace removes the stored credentials and deletes the automation, field, and step data for that system. your other systems are untouched.
after a disconnect — or if chaos trace flags the tile with reconnect required — the system moves back to the "available" section. click connect (for salesforce or hubspot) or open the marketo panel to re-enter credentials. because tokens are wiped on disconnect, reconnect always runs the full auth flow.
zapier and zoho are visible on the systems page but aren't connectable yet — they show as "coming soon" while we finish those connectors. everything else (salesforce, hubspot, marketo) is live.
after connecting, chaos trace automatically starts pulling and parsing your automations. you can also hit sync now from the onboarding page to trigger it immediately.
| page | what it shows |
|---|---|
| dashboard | your chaos grade — an overall health score |
| automations | every flow, workflow, and campaign parsed to step-level detail |
| fields | which fields are read, written, or filtered, and by which automations |
| chaos map | visual dependency graph |
| tools | third-party tools detected writing to your fields |
the field map is the core of chaos trace. for every field across every connected system, you can see:
start with the highest-risk fields — these are the ones where multiple automations or systems are actively competing to write, and where silent overwrites are most likely happening.
chaos trace natively connects to salesforce, hubspot, and marketo. for tools it doesn't connect to directly:
go to Upload and drop a file with your automation metadata. chaos trace normalizes it into the same format — same field map, same risk scoring, same governance alerts.
use your tenant API key (Settings → API Keys) to push automation events directly via the inbound API. useful for Clay, custom scripts, or any tool that can make HTTP requests.
go to Settings → Team and invite colleagues by email.
| role | invite | connect | sync | upload | view |
|---|---|---|---|---|---|
| owner | yes | yes | yes | yes | yes |
| admin | yes | yes | yes | yes | yes |
| editor | no | no | yes | yes | yes |
| viewer | no | no | no | no | yes |
invited users receive an email, set their password, and land directly on your tenant's dashboard with all data already visible — no reconnection needed.