Developers

The API behind every integration.

For the person at your MSP who sets up integrations: what Control Center uses from each tool, the vendor’s official API docs, and what the vendor needs from you before it connects.

156 tools connect today. Their API docs were checked against each vendor’s own site in November 2026.

Find your toolsHow connections work

How it connects

Through each tool’s own API, scoped by you.

The vendor’s own API

Control Center works through the documented API each vendor publishes, using access you grant in that tool, such as an API key or an app you approve.

Scoped per client

Every integration is enabled per tenant with the exact API operations you allow, and nothing else.

Logged, and approved by a person

Every document, price, workflow and approval is logged with who, when and on what input. A person approves before any client sees anything.

Your AI follows the same rules

Your team reaches the same tools from Claude or ChatGPT through Control Center MCP, with the same roles and client scopes as their login.

Before you connect a tool, have:

  • An admin sign-in for the tool.
  • A plan that includes API access. A few vendors keep it to certain plans, and they’re noted below.
  • Permission to create an API key or register an app in the tool.
  • Your region or instance address, where the vendor uses one.

Every tool

Every tool, its API docs and what it needs.

Public docsanyone can read thema customer or partner loginPartner accessthrough the vendor’s partner or developer program

PSA12

  • ConnectWise PSA
    Uses
    Tickets, agreements, billing and time entries.
    Needs
    The docs need a ConnectWise Developer Network account, which ConnectWise approves.
    API docsdeveloper.connectwise.com
  • Autotask PSAPublic docs
    Uses
    Tickets, agreements, billing and time entries.
    Needs
    An API user created in Autotask. The API address depends on your Autotask zone.
    API docsautotask.net
  • HaloPSAPublic docs
    Uses
    Tickets, agreements, billing and time entries.
    Needs
    An API application registered in HaloPSA (client ID and secret). Addresses are specific to your instance.
    API docshalopsa.com
  • Kaseya BMSPublic docs
    Uses
    Tickets, agreements, billing and time entries.
    Needs
    A BMS username, password and tenant. Use your region’s API: US, EMEA or APAC.
    API docshelp.bms.kaseya.com
  • SyncroPublic docs
    Uses
    Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
    Needs
    An API token from Admin > API Tokens. The address uses your Syncro subdomain.
    API docsapi-docs.syncromsp.com
  • SuperOpsPublic docs
    Uses
    Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
    Needs
    An API token from your SuperOps profile settings, plus your SuperOps subdomain.
    API docsdeveloper.superops.com
  • Atera
    Uses
    Tickets, agreements, time entries, devices, alerts and patching.
    Needs
    The docs need an Atera login. The API key is under Admin > API and isn’t available during a trial.
    API docsapp.atera.com
  • AcceloPublic docs
    Uses
    Tickets, agreements and time entries.
    Needs
    An API application registered under Configuration > API (OAuth 2.0).
    API docsaccelo.github.io
  • ServiceNowPublic docs
    Uses
    Tickets.
    Needs
    Your instance address and a user with roles for the tables it reads.
    API docsservicenow.com
  • FreshservicePublic docs
    Uses
    Tickets and time entries.
    Needs
    An API key from your profile settings. Rate limits depend on your plan.
    API docsapi.freshservice.com
  • ZendeskPublic docs
    Uses
    Tickets.
    Needs
    Requests go to your own Zendesk subdomain.
    API docsdeveloper.zendesk.com
  • Jira Service ManagementPublic docs
    Uses
    Tickets and time entries.
    Needs
    An Atlassian account email and API token, against your site address.
    API docsdeveloper.atlassian.com

RMM16

  • SyncroPublic docs
    Uses
    Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
    Needs
    An API token from Admin > API Tokens. The address uses your Syncro subdomain.
    API docsapi-docs.syncromsp.com
  • SuperOpsPublic docs
    Uses
    Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
    Needs
    An API token from your SuperOps profile settings, plus your SuperOps subdomain.
    API docsdeveloper.superops.com
  • Atera
    Uses
    Tickets, agreements, time entries, devices, alerts and patching.
    Needs
    The docs need an Atera login. The API key is under Admin > API and isn’t available during a trial.
    API docsapp.atera.com
  • NinjaOnePublic docs
    Uses
    Devices, alerts, patching, scripts and software inventory.
    Needs
    An API client app (OAuth 2.0) created in NinjaOne.
    API docsapp.ninjaone.com
  • Datto RMMPublic docs
    Uses
    Devices, alerts, patching, scripts and software inventory.
    Needs
    Turn on API access in Global Settings. Each user gets their own keys, and the address depends on your Datto RMM platform.
    API docsrmm.datto.com
  • ConnectWise Automate
    Uses
    Devices, patching and scripts.
    Needs
    The docs need a ConnectWise Developer Network account, which ConnectWise approves.
    API docsdeveloper.connectwise.com
  • ConnectWise RMM
    Uses
    Devices, patching and scripts.
    Needs
    Regional API addresses for the US, EU and Australia, with OAuth 2.0 client credentials.
    OpenAPI reference (US)openapi.service.itsupport247.net
  • Kaseya VSAPublic docs
    Uses
    Devices, alerts, patching, scripts and software inventory.
    Needs
    An administrator creates an API token. Requests go to your own VSA server address.
    API docsapi.vsax.net
  • N-able N-centralPublic docs
    Uses
    Devices, alerts, patching, scripts and software inventory.
    Needs
    An API-only user and its token, created in N-central.
    API docsdeveloper.n-able.com
  • N-able N-sightPublic docs
    Uses
    Devices, alerts, patching, scripts and software inventory.
    Needs
    An API key generated in N-sight.
    API docsdocumentation.n-able.com
  • LevelPublic docs
    Uses
    Devices, alerts, patching and scripts.
    Needs
    An API key from Settings > API keys, read-only or read-write.
    API docsdevelopers.level.io
  • Action1Public docs
    Uses
    Devices, patching, scripts and software inventory.
    Needs
    An API client ID and secret from Action1’s API Credentials page.
    API docsaction1.com
  • PulsewayPublic docs
    Uses
    Devices.
    API docsapi.pulseway.com
  • ImmyBotPublic docs
    Uses
    Devices, scripts and software inventory.
    Needs
    A Microsoft Entra app registration. Each instance has its own API reference at your-subdomain.immy.bot/swagger.
    API docsimmy.bot
  • AutomoxPublic docs
    Uses
    Devices, patching, scripts and software inventory.
    Needs
    An API key from the Automox console.
    API docsdocs.automox.com
  • Microsoft IntunePublic docs
    Uses
    Devices, patching, scripts, software inventory and device compliance.
    Needs
    An Intune license and a Microsoft Entra app with Microsoft Graph permissions.
    API docslearn.microsoft.com

Endpoint security13

  • SentinelOne
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    The API reference and API tokens are inside your SentinelOne management console.
    No public link
  • CrowdStrike FalconPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    A Falcon Administrator creates an API client (ID and secret) with the scopes it needs.
    API docsdeveloper.crowdstrike.com
  • HuntressPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    A user-based API key from your Huntress account. Huntress has deprecated the older account-level key.
    API docsapi.huntress.io
  • Microsoft Defender for EndpointPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    A Microsoft Entra app registration. Use your region’s API address.
    API docslearn.microsoft.com
  • Sophos CentralPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    A Super Admin creates API credentials in Sophos Central. Each tenant has its own data-region address.
    API docsdeveloper.sophos.com
  • Bitdefender GravityZonePublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    An API key from your GravityZone account settings.
    API docsbitdefender.com
  • ESET PROTECTPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    Through ESET Connect, for ESET PROTECT Cloud, ESET Inspect and ESET Cloud Office Security.
    API docshelp.eset.com
  • ThreatDownPublic docs
    Uses
    Threats, agent health, isolating devices and remediation.
    Needs
    A Global or Site Administrator creates an OAuth client (read, write or execute) under Integrate in OneView.
    API setup guidesupport.threatdown.com
  • WebrootPublic docs
    Uses
    Threats, agent health and remediation.
    Needs
    An API client ID and secret, which come from your Webroot representative.
    API docsunityapi.webrootcloudav.com
  • Blackpoint Cyber
    Uses
    Threats.
    Needs
    We couldn’t find public API docs. Ask Blackpoint for them.
    No public link
  • Arctic WolfPublic docs
    Uses
    Threats.
    Needs
    A personal API key from the Unified Portal. The Data Retrieval API needs a Data Explorer license.
    API docsdocs.arcticwolf.com
  • CynetPublic docs
    Uses
    Threats, agent health and remediation.
    API docshelp.api.cynet.com
  • Datto EDR
    Uses
    Threats, agent health and remediation.
    Needs
    The API explorer is inside each customer’s own Datto EDR instance.
    API docsedr.datto.com

SIEM and managed SOC16

  • Microsoft SentinelPublic docs
    Uses
    Alerts, incidents and log search.
    Needs
    A Microsoft Entra app with a Microsoft Sentinel role on the workspace. Log search runs through the Azure Monitor Logs API.
    API docslearn.microsoft.com
  • BlumiraPublic docs
    Uses
    Alerts, incidents and agent health.
    Needs
    Its MSP endpoints cover every client account you manage.
    API docssupport.blumira.com
  • Stellar CyberPublic docs
    Uses
    Alerts, incidents and log search.
    API docsdocs.stellarcyber.ai
  • RocketCyberPublic docs
    Uses
    Alerts and incidents.
    Needs
    The API is read-only.
    API docsapi-doc.rocketcyber.com
  • N-able AdluminPublic docs
    Uses
    Alerts.
    Needs
    Requests are made per tenant.
    API docsdeveloper.n-able.com
  • Rapid7 InsightIDRPublic docs
    Uses
    Alerts, incidents and log search.
    API docsdocs.rapid7.com
  • SplunkPublic docs
    Uses
    Alerts and log search.
    Needs
    Splunk Enterprise Security adds endpoints for findings, investigations and risk.
    API docshelp.splunk.com
  • Elastic SecurityPublic docs
    Uses
    Alerts, incidents and log search.
    API docselastic.co
  • Sumo LogicPublic docs
    Uses
    Alerts and log search.
    API docssumologic.com
  • ExabeamPublic docs
    Uses
    Alerts, incidents and log search.
    API docsdevelopers.exabeam.com
  • LogRhythmPublic docs
    Uses
    Alerts, incidents and log search.
    API docsdevelopers.exabeam.com
  • Fortinet FortiSIEMPublic docs
    Uses
    Alerts and incidents.
    Needs
    The guide for version 6.7 is public. Guides for 7.x need a Fortinet login.
    Integration API guidedocs.fortinet.com
  • CoroPublic docs
    Uses
    Alerts.
    API docsdevelopers.coro.net
  • WazuhPublic docs
    Uses
    Alerts and agent health.
    Needs
    Open source. Alerts come through the Wazuh indexer’s API.
    API docsdocumentation.wazuh.com
  • SaaS AlertsPublic docs
    Uses
    Alerts.
    API docshelp.saasalerts.kaseya.com
  • Field Effect MDR
    Uses
    What the API covers isn’t public; its docs need a Field Effect login.
    Needs
    An API key and an approved IP address, both from Field Effect support.
    API docssupport.fieldeffect.com

Email security10

  • AvananPublic docs
    Uses
    Threats and remediation.
    Needs
    A client ID and secret. MSPs use an MSP key, and Avanan support issues them if you don’t have one.
    API docssc1.checkpoint.com
  • MimecastPublic docs
    Uses
    Threats, remediation and users.
    Needs
    An API application registered in Mimecast, which you can set up yourself.
    API docsdeveloper.services.mimecast.com
  • IRONSCALESPublic docs
    Uses
    Threats and remediation.
    Needs
    A company token from Settings > General, exchanged for a scoped token. Limit: 120 calls a minute.
    API docsappapi.ironscales.com
  • AbnormalPublic docs
    Uses
    Threats and remediation.
    Needs
    A token from the Abnormal portal, under Settings > Integrations > Abnormal REST API.
    OpenAPI specapi.swaggerhub.com
  • ProofpointPublic docs
    Uses
    Threats.
    Needs
    A service principal and secret from the TAP Dashboard settings.
    API docshelp.proofpoint.com
  • Proofpoint EssentialsPublic docs
    Uses
    Users.
    Needs
    An organization admin’s credentials. The address depends on your Essentials stack (us1, eu1 and others).
    API docsus1.proofpointessentials.com
  • Material SecurityPublic docs
    Uses
    Threats and users.
    Needs
    A token from Integrations > API and MCP > Tokens. The address is your own instance.
    API docsdocs.material.security
  • BarracudaPublic docs
    Uses
    Account and email traffic numbers. The API is read-only for now.
    Needs
    An app registered in the Barracuda Token Service. The API is in beta, for the US and UK regions.
    API docsdocumentation.campus.barracuda.com
  • SpamTitanPublic docs
    Uses
    Threats.
    API docsapi-spamtitan.titanhq.com
  • EasyDMARCPublic docs
    Uses
    Domains, DMARC reports and DNS checks.
    API docsdevelopers.easydmarc.com

Backup11

  • Datto BCDR
    Uses
    Backup jobs and restore checks.
    Needs
    A Datto Partner Portal admin creates the key under Admin > Integrations > API Keys.
    API docsportal.dattobackup.com
  • Datto SaaS Protection
    Uses
    Backup jobs and which accounts are backed up.
    Needs
    A Datto Partner Portal admin creates the key under Admin > Integrations > API Keys.
    API docsportal.dattobackup.com
  • VeeamPublic docs
    Uses
    Backup jobs and restore checks.
    Needs
    For MSPs, Veeam Service Provider Console uses API keys created in its portal.
  • AcronisPublic docs
    Uses
    Backup jobs.
    Needs
    An API client (ID and secret) registered in the management console. The address depends on your data center.
    API docsdeveloper.acronis.com
  • Axcient x360RecoverPublic docs
    Uses
    Backup jobs and restore checks.
    Needs
    An administrator creates an API key in the partner portal, under Settings > API Keys.
    API docsdeveloper.axcient.com
  • Cove Data ProtectionPublic docs
    Uses
    Backup jobs.
    API docsdocumentation.n-able.com
  • RubrikPublic docs
    Uses
    Backup jobs and restore checks.
    Needs
    A service account (client ID and secret). Tokens come from your tenant’s my.rubrik.com address.
    API docsdeveloper.rubrik.com
  • DropsuitePartner access
    Uses
    Which accounts are backed up.
    Needs
    API tokens are for direct partners and distributors of Dropsuite (NinjaOne SaaS Backup).
    API docshelp.dropsuite.com
  • KeepitPublic docs
    Uses
    Backup jobs and which accounts are backed up.
    Needs
    API token credentials created in Keepit.
    API docsdevelopers.keepit.com
  • AvePointPublic docs
    Uses
    Backup jobs and which accounts are backed up.
    Needs
    An app registered in AvePoint Online Services. Token addresses depend on your region.
    API docslearn.avepoint.com
  • RedstorPublic docs
    Uses
    Backup jobs.
    Needs
    A Partner Admin creates a service account. Redstor’s docs tie the API to its newer pricing plan.
    API docshelpdesk.redstor.com

Documentation5

  • IT GluePublic docs
    Uses
    Documentation, read and write and stored passwords.
    Needs
    The Enterprise plan. An administrator creates the key under Admin > Settings, and North America, the EU and Australia have different addresses.
    API docsapi.itglue.com
  • Hudu
    Uses
    Documentation, read and write and stored passwords.
    Needs
    Admins create keys under Admin > API Keys. The full reference is inside your Hudu instance.
    API overviewsupport.hudu.com
  • ConfluencePublic docs
    Uses
    Documentation, read and write.
    Needs
    An Atlassian account email and API token, against your site address.
    API docsdeveloper.atlassian.com
  • SharePointPublic docs
    Uses
    Documentation, read and write.
    Needs
    A Microsoft Entra app with Microsoft Graph permissions. Some permissions need admin consent.
    API docslearn.microsoft.com
  • NotionPublic docs
    Uses
    Documentation, read and write.
    Needs
    An internal connection token, or OAuth.
    API docsdevelopers.notion.com

Microsoft 365 and identity8

  • Microsoft 365Public docs
    Uses
    Users, MFA status, sign-ins and licenses.
    Needs
    A Microsoft Entra app with Microsoft Graph permissions, and admin consent where required.
    API docslearn.microsoft.com
  • Google WorkspacePublic docs
    Uses
    Users, MFA status, sign-ins and licenses.
    Needs
    A Google Cloud project. A service account needs domain-wide delegation from a super admin.
    API docsdevelopers.google.com
  • Microsoft Entra IDPublic docs
    Uses
    Users, MFA status and sign-ins.
    Needs
    Sign-in logs need Microsoft Entra ID P1 or P2, and AuditLog.Read.All or Directory.Read.All.
    API docslearn.microsoft.com
  • OktaPublic docs
    Uses
    Users, MFA status and sign-ins.
    Needs
    A scoped OAuth 2.0 service app (Okta’s recommendation) or an API token.
    API docsdeveloper.okta.com
  • JumpCloudPublic docs
    Uses
    Users, MFA status and sign-ins.
    Needs
    An admin API key. An admin with the Billing role has to turn on API access.
    API docsdocs.jumpcloud.com
  • DuoPublic docs
    Uses
    MFA status and sign-ins.
    Needs
    An Owner creates an Admin API application. Duo Essentials, Advantage or Premier; each account has its own API hostname.
    API docsduo.com
  • CIPPPublic docs
    Uses
    MFA status and sign-ins.
    Needs
    An API client set up in CIPP (Entra client credentials), against your own CIPP address.
    API docsdocs.cipp.app
  • Microsoft PurviewPublic docs
    Uses
    Audit log searches, eDiscovery, sensitivity labels and data loss prevention.
    Needs
    Through Microsoft Graph, with a Microsoft Entra app.
    API docslearn.microsoft.com

Network12

  • Cisco MerakiPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    An API key from Organization > API & Webhooks.
    API docsdeveloper.cisco.com
  • Ubiquiti UniFiPublic docs
    Uses
    Device status and uptime and configuration and firmware.
    Needs
    A Site Manager API key from unifi.ui.com, under Settings > API Keys. It’s read-only for now.
    API docsdeveloper.ui.com
  • Fortinet FortiGatePartner access
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    The full REST reference is on the Fortinet Developer Network, which needs two Fortinet employees to sponsor your account.
    API docsfndn.fortinet.net
  • SonicWallPublic docs
    Uses
    Configuration and firmware.
    Needs
    A full admin turns on API access in Device > Settings > Administration.
    API docssonicos-api.sonicwall.com
  • AuvikPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    A per-user API key. The address depends on your region.
    API docssupport.auvik.com
  • DomotzPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    An API key from Portal Settings > API Key.
    API docsportal.domotz.com
  • LiongardPublic docs
    Uses
    Configuration and firmware and alerts.
    Needs
    An access key ID and secret. The address is your own Liongard instance.
    API docsdocs.liongard.com
  • PRTGPublic docs
    Uses
    Device status and uptime and alerts.
    Needs
    An API key from Account Settings > My Account > API Keys.
    API docspaessler.com
  • Cisco Catalyst CenterPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    Catalyst Center credentials, exchanged for a token that lasts 60 minutes.
    API docsdeveloper.cisco.com
  • Aruba CentralPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    New Central uses a personal API client in HPE GreenLake. Classic Central uses an API Gateway token.
    API docsdeveloper.arubanetworks.comClassic Central
  • RuckusPublic docs
    Uses
    Device status and uptime, configuration and firmware and alerts.
    Needs
    RUCKUS One has regional addresses. SmartZone has an API guide for each release.
    API docsdocs.ruckus.cloudSmartZone
  • WatchGuard CloudPublic docs
    Uses
    Configuration and firmware and alerts.
    API docswatchguard.com

Billing and accounting12

  • QuickBooks OnlinePublic docs
    Uses
    Invoices.
    Needs
    An app on the Intuit Developer portal. Intuit’s free Builder tier caps some read calls.
    API docsdeveloper.intuit.com
  • XeroPublic docs
    Uses
    Invoices.
    Needs
    An OAuth 2.0 app. Xero’s free Starter tier allows five connections, and paid tiers allow more.
    API docsdeveloper.xero.com
  • StripePublic docs
    Uses
    Invoices.
    Needs
    An API key from your Stripe account.
    API docsdocs.stripe.com
  • SherwebPartner access
    Uses
    Costs and usage.
    Needs
    API keys from the Security > APIs section of the Sherweb partner portal.
    API docsdevelopers.sherweb.com
  • QuoteWerksPublic docs
    Uses
    Quotes.
    Needs
    QuoteWerks Web; the desktop edition has no web API. The key is under Setup > Options > Zapier and API.
    API docsqwwapi.quotewerks.com
  • Sage IntacctPartner access
    Uses
    Accounting data, once Sage approves the connection.
    Needs
    A Web Services license (sender ID) from Sage. The connection depends on Sage’s approval.
    API docsdeveloper.intacct.com
  • Pax8Partner access
    Uses
    Costs and usage.
    Needs
    API credentials from the Pax8 Integrations Hub, created by a Partner Admin.
    API docsdevx.pax8.com
  • ConnectWise CPQPartner access
    Uses
    Quotes, once ConnectWise approves the connection.
    Needs
    The docs need a ConnectWise Developer Network account. ConnectWise opens the CPQ API to its program partners.
    API docsdeveloper.connectwise.com
  • Gradient MSPPartner access
    Uses
    Billing data, once Gradient approves the connection.
    Needs
    Vendors get an API key through Gradient’s Technology Alliances team, and each MSP adds its own partner key.
    API docsapi-docs.meetgradient.com
  • Microsoft Partner CenterPublic docs
    Uses
    Costs and usage.
    Needs
    For Microsoft CSP partners.
    API docslearn.microsoft.com
  • Ingram Micro XvantagePublic docs
    Uses
    Costs and usage.
    Needs
    For Ingram Micro reseller accounts.
    API docsdeveloper.ingrammicro.com
  • QuoterPublic docs
    Uses
    Quotes.
    API docsdocs.quoter.com

Security training and compliance4

  • KnowBe4Public docs
    Uses
    Training completion and phishing tests.
    Needs
    The reporting API comes with the Platinum, Diamond, SAT Foundation and SAT Advanced plans. The address depends on your region.
    API docsdeveloper.knowbe4.com
  • Huntress Security Awareness TrainingPublic docs
    Uses
    Phishing tests.
    Needs
    The same Huntress API key. Phishing campaign results are part of the Huntress API.
    API docsapi.huntress.io
  • VantaPublic docs
    Uses
    Training completion and compliance controls.
    Needs
    An admin creates an OAuth app in Settings > Developer Console.
    API docsdeveloper.vanta.com
  • DrataPublic docs
    Uses
    Compliance controls.
    Needs
    An API key or OAuth. Some endpoints need specific plan features.
    API docsdevelopers.drata.com

Vulnerability scanning5

  • TenablePublic docs
    Uses
    Vulnerabilities, assets and scans.
    Needs
    Includes an MSSP Portal API that works across clients.
    API docsdeveloper.tenable.com
  • QualysPublic docs
    Uses
    Vulnerabilities, assets and scans.
    API docsdocs.qualys.com
  • Rapid7 InsightVMPublic docs
    Uses
    Vulnerabilities, assets and scans.
    API docshelp.rapid7.com
  • ConnectSecure
    Uses
    Vulnerabilities and assets.
    Needs
    The API reference is inside the ConnectSecure portal, under your profile.
    API FAQcybercns.atlassian.net
  • runZeroPublic docs
    Uses
    Assets.
    API docshelp.runzero.com

DNS filtering6

  • DNSFilterPublic docs
    Uses
    Filtering policies and blocked threats.
    Needs
    An API key from Account Settings in the dashboard.
    API docsapi.dnsfilter.com
  • Cisco UmbrellaPublic docs
    Uses
    Filtering policies, agent health and blocked threats.
    Needs
    An Umbrella API key and secret, exchanged for an OAuth 2.0 token.
    API docsdeveloper.cisco.com
  • Cloudflare Zero TrustPublic docs
    Uses
    Filtering policies, agent health and blocked threats.
    Needs
    A scoped API token with Zero Trust permissions.
    API docsdevelopers.cloudflare.com
  • ZscalerPublic docs
    Uses
    Filtering policies and agent health.
    Needs
    API clients and roles in ZIdentity (Zscaler OneAPI). Zscaler now calls the older ZIA API legacy.
    API docshelp.zscaler.com
  • SafeDNSPublic docs
    Uses
    Filtering policies.
    Needs
    Your SafeDNS account sign-in. The API is in beta.
    API docsdocs.safedns.com
  • WebTitanPublic docs
    Uses
    Filtering policies and blocked threats.
    API docsapidoc.webtitancloud.com

Passwords5

  • 1PasswordPublic docs
    Uses
    Vault items and user provisioning.
    Needs
    1Password Business, with a token from the integration you set up, such as Events Reporting.
    API docs1password.dev
  • BitwardenPublic docs
    Uses
    User provisioning.
    Needs
    A Teams or Enterprise organization. The organization API key is in the Admin Console; US, EU and self-hosted addresses differ.
    API docsbitwarden.com
  • PassportalPublic docs
    Uses
    Vault items.
    Needs
    An API key generated in Passportal.
    API docsdeveloper.n-able.com
  • DevolutionsPublic docs
    Uses
    Vault items and user provisioning.
    Needs
    Devolutions Server: an application key and secret. The reference is built into your server.
    API docsdocs.devolutions.net
  • Keeper SecurityPublic docs
    Uses
    User provisioning.
    API docsdocs.keeper.io

Admin rights and allowlisting2

  • ThreatLockerPublic docs
    Uses
    Approval requests.
    Needs
    An API user (token or OAuth 2.0) created in the portal. The address is your own instance.
    API docsthreatlocker.kb.help
  • Admin By RequestPublic docs
    Uses
    Approval requests.
    Needs
    Included with your license. The API key is in Tenant Settings, and the address depends on your data center.
    API docsdocs.adminbyrequest.com

Remote access4

  • ConnectWise ScreenConnectPublic docs
    Uses
    Remote sessions.
    Needs
    Install the RESTful API Manager extension.
    API docsdocs.connectwise.com
  • TeamViewerPublic docs
    Uses
    Remote sessions and devices.
    API docswebapi.teamviewer.com
  • SplashtopPublic docs
    Uses
    Remote sessions and devices.
    Needs
    Splashtop’s Enterprise plans.
    API docssupport-splashtopbusiness.splashtop.com
  • BeyondTrust Remote SupportPublic docs
    Uses
    Remote sessions.
    API docsdocs.beyondtrust.com

Teams, chat and phones5

  • Microsoft TeamsPublic docs
    Uses
    Messages.
    Needs
    A Microsoft Entra app with Microsoft Graph permissions.
    API docslearn.microsoft.com
  • SlackPublic docs
    Uses
    Messages.
    Needs
    A Slack app with a bot or user token.
    API docsdocs.slack.dev
  • ZoomPublic docs
    Uses
    Messages.
    Needs
    An OAuth or Server-to-Server OAuth app with the scopes it needs.
    API docsdevelopers.zoom.us
  • RingCentralPublic docs
    Uses
    Messages.
    Needs
    An app in the RingCentral Developer Console (client ID and secret). Some scopes need RingCentral’s approval.
    API docsdevelopers.ringcentral.com
  • 3CXPublic docs
    Uses
    Users and call control.
    Needs
    An 8SC+ license. The API client is created under Admin Console > Integrations > API.
    API docs3cx.com

Cloud and files5

  • Microsoft AzurePublic docs
    Uses
    Costs and usage.
    Needs
    A Microsoft Entra app with an Azure role on the subscriptions it reads.
    API docslearn.microsoft.comCost Management
  • AWSPublic docs
    Uses
    Costs and usage.
    Needs
    AWS charges $0.01 for each Cost Explorer API request.
    API docsdocs.aws.amazon.com
  • DropboxPublic docs
    Uses
    Users.
    API docsdropbox.com
  • BoxPublic docs
    Uses
    Users.
    Needs
    An OAuth 2.0 access token.
    API docsdeveloper.box.com
  • WasabiPublic docs
    Uses
    Costs and usage.
    API docsdocs.wasabi.com

Reporting and lifecycle6

  • ScalePadPublic docs
    Uses
    Warranties.
    Needs
    Lifecycle Manager’s API needs a higher subscription tier and an administrator’s API key. US only.
    API docsdeveloper.scalepad.com
  • Power BIPublic docs
    Uses
    Sending your metrics to dashboards.
    Needs
    A Microsoft Entra app. A Power BI admin allows service principal access.
    API docslearn.microsoft.com
  • GrafanaPublic docs
    Uses
    Sending your metrics to dashboards.
    Needs
    A service account token.
    API docsgrafana.com
  • DatadogPublic docs
    Uses
    Sending your metrics to dashboards.
    Needs
    An API key, plus an application key for some endpoints.
    API docsdocs.datadoghq.com
  • CloudRadialPublic docs
    Uses
    Companies, users, endpoints, assessments and the service catalog.
    API docssupport.cloudradial.com
  • CrewhuPublic docs
    Uses
    Surveys, users and contest metrics.
    API docsget-help-tnt.crewhu.com

Automation platforms5

  • RewstPublic docs
    Uses
    Starting your workflows.
    Needs
    Rewst’s API is GraphQL, and Rewst workflows can also start from webhook triggers.
    API docsdocs.rewst.help
  • Power AutomatePublic docs
    Uses
    Starting your workflows.
    Needs
    Through the Dataverse Web API, for flows that live in solutions.
    API docslearn.microsoft.com
  • n8nPublic docs
    Uses
    Starting your workflows.
    Needs
    Not on the free trial: n8n Cloud Starter, Pro or Enterprise, or any self-hosted edition.
    API docsdocs.n8n.io
  • ZapierPartner access
    Uses
    Starting your workflows.
    Needs
    Zapier’s Workflow API needs a publicly listed Zapier integration or White Label onboarding.
    API docsdocs.zapier.com
  • MakePublic docs
    Uses
    Starting your workflows.
    Needs
    Use your organization’s zone address, such as eu1 or us1.
    API docsdevelopers.make.com

No public API

No public API found, yet.

We couldn’t find a public API for these tools, so Control Center can’t connect to them yet. If your vendor gives you API docs for one of them, send them to us and we’ll check them.

  • TodylEndpoint security
  • ConnectWise SIEMSIEM and managed SOC
  • Barracuda XDRSIEM and managed SOC
  • IT Portal (SI Portal)Documentation
  • ITBoostDocumentation
  • Breach Secure NowSecurity training and compliance
  • Hook SecuritySecurity training and compliance
  • ApptegaSecurity training and compliance
  • Compliance ScorecardSecurity training and compliance
  • CynomiSecurity training and compliance
  • RapidFire VulScanVulnerability scanning
  • RapidFire Network DetectiveVulnerability scanning
  • RapidFire Cyber HawkVulnerability scanning
  • NodewareVulnerability scanning
  • AutoElevateAdmin rights and allowlisting
  • BrightGaugeReporting and lifecycle
  • SmileBackReporting and lifecycle

Not listed

Using a tool that isn’t listed?

If it has a documented API, Control Center can connect to it. Send us the tool’s name and a link to its API docs.

Coming to this page: step-by-step setup for each connection, and the reference for Control Center MCP.

Product names belong to their owners. Listing a tool shows that Control Center can work with it, not a partnership or endorsement. Vendors change their APIs and plans, so their own docs are the final word.