SaaS distribution integration
SaaS license inventory from Pax8 reconciled against the PSA contract — uncontracted licenses and below-margin SKUs surface automatically.
What Vectis syncs
Pax8 partner-to-customer mappings sync on first run, and from there Vectis pulls every subscription with SKU, quantity, cost, and term so the leakage and margin surface has the data to do its job. Pax8 lifecycle webhook events (created, updated, cancelled) come in real time, dropping onto the customer timeline as they happen. Price books sync alongside so margin drift gets detected against the current SKU price, not last quarter's.
What you can do
Pax8 is a read-only adapter here — Vectis doesn't provision licenses or modify subscriptions, by design (changing what the customer pays for is a billing-side decision that lives in Pax8). The value is in the leakage detection: a customer paying for 25 M365 Business Premium seats with a PSA contract covering 20 surfaces in the Licensing-leakage dashboard preset and the weekly Money Found digest, already in dollars, with the customer named.
Honest about the limits
Pax8 doesn't expose a documented provisioning or subscription-modification API to third-party integrations, so Vectis stays read-only by deliberate scope — license changes happen inside Pax8, with the lifecycle webhook reflecting the result back to Vectis. The OAuth client should be dedicated to Vectis so credential rotation doesn't affect other integrations, and the audience field is left blank for production tenants (only sandbox tenants set it).
How it correlates
Pax8 on the customer account hub alongside every other system you run — not a standalone dashboard. A few of the most common shapes this takes:
Pax8 shows a customer pays for 25 M365 Business Premium seats. The PSA contract covers 20. The five uncontracted seats surface in the Licensing-leakage dashboard preset and the weekly Money Found digest — already in dollars, with the customer named.
A Pax8 lifecycle webhook fires when a subscription is added or cancelled. Vectis records the event on the customer timeline and fires any rules you have wired — e.g. 'new subscription without matching contract line → post to #billing'.
Setup snapshot
Create a dedicated OAuth 2.0 client in Pax8 Account → API Settings so credential rotations only affect Vectis. Paste the Client ID and Client Secret into Vectis; leave the audience field blank for production tenants. Vectis tests with the Pax8 companies endpoint before saving so a bad credential fails fast. Webhooks are separate — register the lifecycle webhook at app.pax8.com/integrations/events?tab=webhooks with a bearer token matching what you save in Vectis → Data & Integrations → Pax8 webhooks. Webhook deliveries hit Vectis in real time and drop onto the customer timeline as they arrive.
# In the Vectis hub, add the connector:
category SaaS distribution
vendor Pax8
status Read + WriteOther SaaS distribution integrations
Pricing
Pax8 is available on every Vectis tier — $299/mo and up. See pricing
Also reachable over MCP — bring your own client → /mcp
