Developers
The API behind every integration.
For the person at your MSP who sets up integrations: what Control Center uses from each tool, the vendor’s official API docs, and what the vendor needs from you before it connects.
How it connects
Through each tool’s own API, scoped by you.
The vendor’s own API
Control Center works through the documented API each vendor publishes, using access you grant in that tool, such as an API key or an app you approve.
Scoped per client
Every integration is enabled per tenant with the exact API operations you allow, and nothing else.
Logged, and approved by a person
Every document, price, workflow and approval is logged with who, when and on what input. A person approves before any client sees anything.
Your AI follows the same rules
Your team reaches the same tools from Claude or ChatGPT through Control Center MCP, with the same roles and client scopes as their login.
Before you connect a tool, have:
- An admin sign-in for the tool.
- A plan that includes API access. A few vendors keep it to certain plans, and they’re noted below.
- Permission to create an API key or register an app in the tool.
- Your region or instance address, where the vendor uses one.
Every tool
Every tool, its API docs and what it needs.
PSA12
- ConnectWise PSADocs need a login
- Uses
- Tickets, agreements, billing and time entries.
- Needs
- The docs need a ConnectWise Developer Network account, which ConnectWise approves.
API docsdeveloper.connectwise. com - Autotask PSAPublic docs
- Uses
- Tickets, agreements, billing and time entries.
- Needs
- An API user created in Autotask. The API address depends on your Autotask zone.
API docsautotask.net - HaloPSAPublic docs
- Uses
- Tickets, agreements, billing and time entries.
- Needs
- An API application registered in HaloPSA (client ID and secret). Addresses are specific to your instance.
API docshalopsa.com - Kaseya BMSPublic docs
- Uses
- Tickets, agreements, billing and time entries.
- Needs
- A BMS username, password and tenant. Use your region’s API: US, EMEA or APAC.
API docshelp.bms. kaseya. com - SyncroPublic docs
- Uses
- Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
- Needs
- An API token from Admin > API Tokens. The address uses your Syncro subdomain.
API docsapi-docs.syncromsp. com - SuperOpsPublic docs
- Uses
- Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
- Needs
- An API token from your SuperOps profile settings, plus your SuperOps subdomain.
API docsdeveloper.superops. com - AteraDocs need a login
- Uses
- Tickets, agreements, time entries, devices, alerts and patching.
- Needs
- The docs need an Atera login. The API key is under Admin > API and isn’t available during a trial.
API docsapp.atera. com - AcceloPublic docs
- Uses
- Tickets, agreements and time entries.
- Needs
- An API application registered under Configuration > API (OAuth 2.0).
API docsaccelo.github. io - ServiceNowPublic docs
- Uses
- Tickets.
- Needs
- Your instance address and a user with roles for the tables it reads.
API docsservicenow.com - FreshservicePublic docs
- Uses
- Tickets and time entries.
- Needs
- An API key from your profile settings. Rate limits depend on your plan.
API docsapi.freshservice. com - ZendeskPublic docs
- Uses
- Tickets.
- Needs
- Requests go to your own Zendesk subdomain.
API docsdeveloper.zendesk. com - Jira Service ManagementPublic docs
- Uses
- Tickets and time entries.
- Needs
- An Atlassian account email and API token, against your site address.
API docsdeveloper.atlassian. com
RMM16
- SyncroPublic docs
- Uses
- Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
- Needs
- An API token from Admin > API Tokens. The address uses your Syncro subdomain.
API docsapi-docs.syncromsp. com - SuperOpsPublic docs
- Uses
- Tickets, agreements, billing, time entries, devices, alerts, patching, scripts and software inventory.
- Needs
- An API token from your SuperOps profile settings, plus your SuperOps subdomain.
API docsdeveloper.superops. com - AteraDocs need a login
- Uses
- Tickets, agreements, time entries, devices, alerts and patching.
- Needs
- The docs need an Atera login. The API key is under Admin > API and isn’t available during a trial.
API docsapp.atera. com - NinjaOnePublic docs
- Uses
- Devices, alerts, patching, scripts and software inventory.
- Needs
- An API client app (OAuth 2.0) created in NinjaOne.
API docsapp.ninjaone. com - Datto RMMPublic docs
- Uses
- Devices, alerts, patching, scripts and software inventory.
- Needs
- Turn on API access in Global Settings. Each user gets their own keys, and the address depends on your Datto RMM platform.
API docsrmm.datto. com - ConnectWise AutomateDocs need a login
- Uses
- Devices, patching and scripts.
- Needs
- The docs need a ConnectWise Developer Network account, which ConnectWise approves.
API docsdeveloper.connectwise. com - ConnectWise RMM
- Uses
- Devices, patching and scripts.
- Needs
- Regional API addresses for the US, EU and Australia, with OAuth 2.0 client credentials.
OpenAPI reference (US)openapi.service. itsupport247. net - Kaseya VSAPublic docs
- Uses
- Devices, alerts, patching, scripts and software inventory.
- Needs
- An administrator creates an API token. Requests go to your own VSA server address.
API docsapi.vsax. net - N-able N-centralPublic docs
- Uses
- Devices, alerts, patching, scripts and software inventory.
- Needs
- An API-only user and its token, created in N-central.
API docsdeveloper.n-able. com - N-able N-sightPublic docs
- Uses
- Devices, alerts, patching, scripts and software inventory.
- Needs
- An API key generated in N-sight.
API docsdocumentation.n-able. com - LevelPublic docs
- Uses
- Devices, alerts, patching and scripts.
- Needs
- An API key from Settings > API keys, read-only or read-write.
API docsdevelopers.level. io - Action1Public docs
- Uses
- Devices, patching, scripts and software inventory.
- Needs
- An API client ID and secret from Action1’s API Credentials page.
API docsaction1.com - PulsewayPublic docs
- Uses
- Devices.
API docsapi.pulseway. com - ImmyBotPublic docs
- Uses
- Devices, scripts and software inventory.
- Needs
- A Microsoft Entra app registration. Each instance has its own API reference at your-subdomain.immy.bot/swagger.
API docsimmy.bot - AutomoxPublic docs
- Uses
- Devices, patching, scripts and software inventory.
- Needs
- An API key from the Automox console.
API docsdocs.automox. com - Microsoft IntunePublic docs
- Uses
- Devices, patching, scripts, software inventory and device compliance.
- Needs
- An Intune license and a Microsoft Entra app with Microsoft Graph permissions.
API docslearn.microsoft. com
Endpoint security13
- SentinelOneDocs need a login
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- The API reference and API tokens are inside your SentinelOne management console.
No public link - CrowdStrike FalconPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- A Falcon Administrator creates an API client (ID and secret) with the scopes it needs.
API docsdeveloper.crowdstrike. com - HuntressPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- A user-based API key from your Huntress account. Huntress has deprecated the older account-level key.
API docsapi.huntress. io - Microsoft Defender for EndpointPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- A Microsoft Entra app registration. Use your region’s API address.
API docslearn.microsoft. com - Sophos CentralPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- A Super Admin creates API credentials in Sophos Central. Each tenant has its own data-region address.
API docsdeveloper.sophos. com - Bitdefender GravityZonePublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- An API key from your GravityZone account settings.
API docsbitdefender.com - EPESET PROTECTPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- Through ESET Connect, for ESET PROTECT Cloud, ESET Inspect and ESET Cloud Office Security.
API docshelp.eset. com - ThreatDownPublic docs
- Uses
- Threats, agent health, isolating devices and remediation.
- Needs
- A Global or Site Administrator creates an OAuth client (read, write or execute) under Integrate in OneView.
API setup guidesupport.threatdown. com - WebrootPublic docs
- Uses
- Threats, agent health and remediation.
- Needs
- An API client ID and secret, which come from your Webroot representative.
API docsunityapi.webrootcloudav. com - Blackpoint CyberDocs need a login
- Uses
- Threats.
- Needs
- We couldn’t find public API docs. Ask Blackpoint for them.
No public link - Arctic WolfPublic docs
- Uses
- Threats.
- Needs
- A personal API key from the Unified Portal. The Data Retrieval API needs a Data Explorer license.
API docsdocs.arcticwolf. com - CynetPublic docs
- Uses
- Threats, agent health and remediation.
API docshelp.api. cynet. com - Datto EDRDocs need a login
- Uses
- Threats, agent health and remediation.
- Needs
- The API explorer is inside each customer’s own Datto EDR instance.
API docsedr.datto. com
SIEM and managed SOC16
- Microsoft SentinelPublic docs
- Uses
- Alerts, incidents and log search.
- Needs
- A Microsoft Entra app with a Microsoft Sentinel role on the workspace. Log search runs through the Azure Monitor Logs API.
API docslearn.microsoft. com - BLBlumiraPublic docs
- Uses
- Alerts, incidents and agent health.
- Needs
- Its MSP endpoints cover every client account you manage.
API docssupport.blumira. com - SCStellar CyberPublic docs
- Uses
- Alerts, incidents and log search.
API docsdocs.stellarcyber. ai - RORocketCyberPublic docs
- Uses
- Alerts and incidents.
- Needs
- The API is read-only.
API docsapi-doc.rocketcyber. com - N-able AdluminPublic docs
- Uses
- Alerts.
- Needs
- Requests are made per tenant.
API docsdeveloper.n-able. com - RIRapid7 InsightIDRPublic docs
- Uses
- Alerts, incidents and log search.
API docsdocs.rapid7. com - SPSplunkPublic docs
- Uses
- Alerts and log search.
- Needs
- Splunk Enterprise Security adds endpoints for findings, investigations and risk.
API docshelp.splunk. com - ESElastic SecurityPublic docs
- Uses
- Alerts, incidents and log search.
API docselastic.co - SLSumo LogicPublic docs
- Uses
- Alerts and log search.
API docssumologic.com - EXExabeamPublic docs
- Uses
- Alerts, incidents and log search.
API docsdevelopers.exabeam. com - LOLogRhythmPublic docs
- Uses
- Alerts, incidents and log search.
API docsdevelopers.exabeam. com - Fortinet FortiSIEMPublic docs
- Uses
- Alerts and incidents.
- Needs
- The guide for version 6.7 is public. Guides for 7.x need a Fortinet login.
Integration API guidedocs.fortinet. com - COCoroPublic docs
- Uses
- Alerts.
API docsdevelopers.coro. net - WAWazuhPublic docs
- Uses
- Alerts and agent health.
- Needs
- Open source. Alerts come through the Wazuh indexer’s API.
API docsdocumentation.wazuh. com - SASaaS AlertsPublic docs
- Uses
- Alerts.
API docshelp.saasalerts. kaseya. com - FEField Effect MDRDocs need a login
- Uses
- What the API covers isn’t public; its docs need a Field Effect login.
- Needs
- An API key and an approved IP address, both from Field Effect support.
API docssupport.fieldeffect. com
Email security10
- AvananPublic docs
- Uses
- Threats and remediation.
- Needs
- A client ID and secret. MSPs use an MSP key, and Avanan support issues them if you don’t have one.
API docssc1.checkpoint. com - MimecastPublic docs
- Uses
- Threats, remediation and users.
- Needs
- An API application registered in Mimecast, which you can set up yourself.
API docsdeveloper.services. mimecast. com - IRONSCALESPublic docs
- Uses
- Threats and remediation.
- Needs
- A company token from Settings > General, exchanged for a scoped token. Limit: 120 calls a minute.
API docsappapi.ironscales. com - AbnormalPublic docs
- Uses
- Threats and remediation.
- Needs
- A token from the Abnormal portal, under Settings > Integrations > Abnormal REST API.
OpenAPI specapi.swaggerhub. com - ProofpointPublic docs
- Uses
- Threats.
- Needs
- A service principal and secret from the TAP Dashboard settings.
API docshelp.proofpoint. com - Proofpoint EssentialsPublic docs
- Uses
- Users.
- Needs
- An organization admin’s credentials. The address depends on your Essentials stack (us1, eu1 and others).
API docsus1.proofpointessentials. com - Material SecurityPublic docs
- Uses
- Threats and users.
- Needs
- A token from Integrations > API and MCP > Tokens. The address is your own instance.
API docsdocs.material. security - BarracudaPublic docs
- Uses
- Account and email traffic numbers. The API is read-only for now.
- Needs
- An app registered in the Barracuda Token Service. The API is in beta, for the US and UK regions.
API docsdocumentation.campus. barracuda. com - SPSpamTitanPublic docs
- Uses
- Threats.
API docsapi-spamtitan.titanhq. com - EAEasyDMARCPublic docs
- Uses
- Domains, DMARC reports and DNS checks.
API docsdevelopers.easydmarc. com
Backup11
- Datto BCDRDocs need a login
- Uses
- Backup jobs and restore checks.
- Needs
- A Datto Partner Portal admin creates the key under Admin > Integrations > API Keys.
API docsportal.dattobackup. com - Datto SaaS ProtectionDocs need a login
- Uses
- Backup jobs and which accounts are backed up.
- Needs
- A Datto Partner Portal admin creates the key under Admin > Integrations > API Keys.
API docsportal.dattobackup. com - VeeamPublic docs
- Uses
- Backup jobs and restore checks.
- Needs
- For MSPs, Veeam Service Provider Console uses API keys created in its portal.
- AcronisPublic docs
- Uses
- Backup jobs.
- Needs
- An API client (ID and secret) registered in the management console. The address depends on your data center.
API docsdeveloper.acronis. com - Axcient x360RecoverPublic docs
- Uses
- Backup jobs and restore checks.
- Needs
- An administrator creates an API key in the partner portal, under Settings > API Keys.
API docsdeveloper.axcient. com - Cove Data ProtectionPublic docs
- Uses
- Backup jobs.
API docsdocumentation.n-able. com - RubrikPublic docs
- Uses
- Backup jobs and restore checks.
- Needs
- A service account (client ID and secret). Tokens come from your tenant’s my.rubrik.com address.
API docsdeveloper.rubrik. com - DropsuitePartner access
- Uses
- Which accounts are backed up.
- Needs
- API tokens are for direct partners and distributors of Dropsuite (NinjaOne SaaS Backup).
API docshelp.dropsuite. com - KeepitPublic docs
- Uses
- Backup jobs and which accounts are backed up.
- Needs
- API token credentials created in Keepit.
API docsdevelopers.keepit. com - AvePointPublic docs
- Uses
- Backup jobs and which accounts are backed up.
- Needs
- An app registered in AvePoint Online Services. Token addresses depend on your region.
API docslearn.avepoint. com - RedstorPublic docs
- Uses
- Backup jobs.
- Needs
- A Partner Admin creates a service account. Redstor’s docs tie the API to its newer pricing plan.
API docshelpdesk.redstor. com
Documentation5
- IT GluePublic docs
- Uses
- Documentation, read and write and stored passwords.
- Needs
- The Enterprise plan. An administrator creates the key under Admin > Settings, and North America, the EU and Australia have different addresses.
API docsapi.itglue. com - HuduDocs need a login
- Uses
- Documentation, read and write and stored passwords.
- Needs
- Admins create keys under Admin > API Keys. The full reference is inside your Hudu instance.
API overviewsupport.hudu. com - ConfluencePublic docs
- Uses
- Documentation, read and write.
- Needs
- An Atlassian account email and API token, against your site address.
API docsdeveloper.atlassian. com - SharePointPublic docs
- Uses
- Documentation, read and write.
- Needs
- A Microsoft Entra app with Microsoft Graph permissions. Some permissions need admin consent.
API docslearn.microsoft. com - NotionPublic docs
- Uses
- Documentation, read and write.
- Needs
- An internal connection token, or OAuth.
API docsdevelopers.notion. com
Microsoft 365 and identity8
- Microsoft 365Public docs
- Uses
- Users, MFA status, sign-ins and licenses.
- Needs
- A Microsoft Entra app with Microsoft Graph permissions, and admin consent where required.
API docslearn.microsoft. com - Google WorkspacePublic docs
- Uses
- Users, MFA status, sign-ins and licenses.
- Needs
- A Google Cloud project. A service account needs domain-wide delegation from a super admin.
API docsdevelopers.google. com - Microsoft Entra IDPublic docs
- Uses
- Users, MFA status and sign-ins.
- Needs
- Sign-in logs need Microsoft Entra ID P1 or P2, and AuditLog.Read.All or Directory.Read.All.
API docslearn.microsoft. com - OktaPublic docs
- Uses
- Users, MFA status and sign-ins.
- Needs
- A scoped OAuth 2.0 service app (Okta’s recommendation) or an API token.
API docsdeveloper.okta. com - JumpCloudPublic docs
- Uses
- Users, MFA status and sign-ins.
- Needs
- An admin API key. An admin with the Billing role has to turn on API access.
API docsdocs.jumpcloud. com - DuoPublic docs
- Uses
- MFA status and sign-ins.
- Needs
- An Owner creates an Admin API application. Duo Essentials, Advantage or Premier; each account has its own API hostname.
API docsduo.com - CIPPPublic docs
- Uses
- MFA status and sign-ins.
- Needs
- An API client set up in CIPP (Entra client credentials), against your own CIPP address.
API docsdocs.cipp. app - Microsoft PurviewPublic docs
- Uses
- Audit log searches, eDiscovery, sensitivity labels and data loss prevention.
- Needs
- Through Microsoft Graph, with a Microsoft Entra app.
API docslearn.microsoft. com
Network12
- Cisco MerakiPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- An API key from Organization > API & Webhooks.
API docsdeveloper.cisco. com - Ubiquiti UniFiPublic docs
- Uses
- Device status and uptime and configuration and firmware.
- Needs
- A Site Manager API key from unifi.ui.com, under Settings > API Keys. It’s read-only for now.
API docsdeveloper.ui. com - Fortinet FortiGatePartner access
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- The full REST reference is on the Fortinet Developer Network, which needs two Fortinet employees to sponsor your account.
API docsfndn.fortinet. net - SonicWallPublic docs
- Uses
- Configuration and firmware.
- Needs
- A full admin turns on API access in Device > Settings > Administration.
API docssonicos-api.sonicwall. com - AuvikPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- A per-user API key. The address depends on your region.
API docssupport.auvik. com - DomotzPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- An API key from Portal Settings > API Key.
API docsportal.domotz. com - LiongardPublic docs
- Uses
- Configuration and firmware and alerts.
- Needs
- An access key ID and secret. The address is your own Liongard instance.
API docsdocs.liongard. com - PRTGPublic docs
- Uses
- Device status and uptime and alerts.
- Needs
- An API key from Account Settings > My Account > API Keys.
API docspaessler.com - Cisco Catalyst CenterPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- Catalyst Center credentials, exchanged for a token that lasts 60 minutes.
API docsdeveloper.cisco. com - Aruba CentralPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- New Central uses a personal API client in HPE GreenLake. Classic Central uses an API Gateway token.
- RuckusPublic docs
- Uses
- Device status and uptime, configuration and firmware and alerts.
- Needs
- RUCKUS One has regional addresses. SmartZone has an API guide for each release.
- WCWatchGuard CloudPublic docs
- Uses
- Configuration and firmware and alerts.
API docswatchguard.com
Billing and accounting12
- QBQuickBooks OnlinePublic docs
- Uses
- Invoices.
- Needs
- An app on the Intuit Developer portal. Intuit’s free Builder tier caps some read calls.
API docsdeveloper.intuit. com - XeroPublic docs
- Uses
- Invoices.
- Needs
- An OAuth 2.0 app. Xero’s free Starter tier allows five connections, and paid tiers allow more.
API docsdeveloper.xero. com - StripePublic docs
- Uses
- Invoices.
- Needs
- An API key from your Stripe account.
API docsdocs.stripe. com - SherwebPartner access
- Uses
- Costs and usage.
- Needs
- API keys from the Security > APIs section of the Sherweb partner portal.
API docsdevelopers.sherweb. com - QuoteWerksPublic docs
- Uses
- Quotes.
- Needs
- QuoteWerks Web; the desktop edition has no web API. The key is under Setup > Options > Zapier and API.
API docsqwwapi.quotewerks. com - Sage IntacctPartner access
- Uses
- Accounting data, once Sage approves the connection.
- Needs
- A Web Services license (sender ID) from Sage. The connection depends on Sage’s approval.
API docsdeveloper.intacct. com - Pax8Partner access
- Uses
- Costs and usage.
- Needs
- API credentials from the Pax8 Integrations Hub, created by a Partner Admin.
API docsdevx.pax8. com - ConnectWise CPQPartner access
- Uses
- Quotes, once ConnectWise approves the connection.
- Needs
- The docs need a ConnectWise Developer Network account. ConnectWise opens the CPQ API to its program partners.
API docsdeveloper.connectwise. com - Gradient MSPPartner access
- Uses
- Billing data, once Gradient approves the connection.
- Needs
- Vendors get an API key through Gradient’s Technology Alliances team, and each MSP adds its own partner key.
API docsapi-docs.meetgradient. com - MPMicrosoft Partner CenterPublic docs
- Uses
- Costs and usage.
- Needs
- For Microsoft CSP partners.
API docslearn.microsoft. com - IMIngram Micro XvantagePublic docs
- Uses
- Costs and usage.
- Needs
- For Ingram Micro reseller accounts.
API docsdeveloper.ingrammicro. com - QUQuoterPublic docs
- Uses
- Quotes.
API docsdocs.quoter. com
Security training and compliance4
- KnowBe4Public docs
- Uses
- Training completion and phishing tests.
- Needs
- The reporting API comes with the Platinum, Diamond, SAT Foundation and SAT Advanced plans. The address depends on your region.
API docsdeveloper.knowbe4. com - Huntress Security Awareness TrainingPublic docs
- Uses
- Phishing tests.
- Needs
- The same Huntress API key. Phishing campaign results are part of the Huntress API.
API docsapi.huntress. io - VantaPublic docs
- Uses
- Training completion and compliance controls.
- Needs
- An admin creates an OAuth app in Settings > Developer Console.
API docsdeveloper.vanta. com - DrataPublic docs
- Uses
- Compliance controls.
- Needs
- An API key or OAuth. Some endpoints need specific plan features.
API docsdevelopers.drata. com
Vulnerability scanning5
- TETenablePublic docs
- Uses
- Vulnerabilities, assets and scans.
- Needs
- Includes an MSSP Portal API that works across clients.
API docsdeveloper.tenable. com - QUQualysPublic docs
- Uses
- Vulnerabilities, assets and scans.
API docsdocs.qualys. com - RIRapid7 InsightVMPublic docs
- Uses
- Vulnerabilities, assets and scans.
API docshelp.rapid7. com - COConnectSecureDocs need a login
- Uses
- Vulnerabilities and assets.
- Needs
- The API reference is inside the ConnectSecure portal, under your profile.
API FAQcybercns.atlassian. net - RUrunZeroPublic docs
- Uses
- Assets.
API docshelp.runzero. com
DNS filtering6
- DNSFilterPublic docs
- Uses
- Filtering policies and blocked threats.
- Needs
- An API key from Account Settings in the dashboard.
API docsapi.dnsfilter. com - Cisco UmbrellaPublic docs
- Uses
- Filtering policies, agent health and blocked threats.
- Needs
- An Umbrella API key and secret, exchanged for an OAuth 2.0 token.
API docsdeveloper.cisco. com - Cloudflare Zero TrustPublic docs
- Uses
- Filtering policies, agent health and blocked threats.
- Needs
- A scoped API token with Zero Trust permissions.
API docsdevelopers.cloudflare. com - ZscalerPublic docs
- Uses
- Filtering policies and agent health.
- Needs
- API clients and roles in ZIdentity (Zscaler OneAPI). Zscaler now calls the older ZIA API legacy.
API docshelp.zscaler. com - SafeDNSPublic docs
- Uses
- Filtering policies.
- Needs
- Your SafeDNS account sign-in. The API is in beta.
API docsdocs.safedns. com - WEWebTitanPublic docs
- Uses
- Filtering policies and blocked threats.
API docsapidoc.webtitancloud. com
Passwords5
- 1PasswordPublic docs
- Uses
- Vault items and user provisioning.
- Needs
- 1Password Business, with a token from the integration you set up, such as Events Reporting.
API docs1password.dev - BitwardenPublic docs
- Uses
- User provisioning.
- Needs
- A Teams or Enterprise organization. The organization API key is in the Admin Console; US, EU and self-hosted addresses differ.
API docsbitwarden.com - PassportalPublic docs
- Uses
- Vault items.
- Needs
- An API key generated in Passportal.
API docsdeveloper.n-able. com - DevolutionsPublic docs
- Uses
- Vault items and user provisioning.
- Needs
- Devolutions Server: an application key and secret. The reference is built into your server.
API docsdocs.devolutions. net - Keeper SecurityPublic docs
- Uses
- User provisioning.
API docsdocs.keeper. io
Admin rights and allowlisting2
- ThreatLockerPublic docs
- Uses
- Approval requests.
- Needs
- An API user (token or OAuth 2.0) created in the portal. The address is your own instance.
API docsthreatlocker.kb. help - Admin By RequestPublic docs
- Uses
- Approval requests.
- Needs
- Included with your license. The API key is in Tenant Settings, and the address depends on your data center.
API docsdocs.adminbyrequest. com
Remote access4
- ConnectWise ScreenConnectPublic docs
- Uses
- Remote sessions.
- Needs
- Install the RESTful API Manager extension.
API docsdocs.connectwise. com - TETeamViewerPublic docs
- Uses
- Remote sessions and devices.
API docswebapi.teamviewer. com - SPSplashtopPublic docs
- Uses
- Remote sessions and devices.
- Needs
- Splashtop’s Enterprise plans.
API docssupport-splashtopbusiness.splashtop. com - BRBeyondTrust Remote SupportPublic docs
- Uses
- Remote sessions.
API docsdocs.beyondtrust. com
Teams, chat and phones5
- Microsoft TeamsPublic docs
- Uses
- Messages.
- Needs
- A Microsoft Entra app with Microsoft Graph permissions.
API docslearn.microsoft. com - SlackPublic docs
- Uses
- Messages.
- Needs
- A Slack app with a bot or user token.
API docsdocs.slack. dev - ZoomPublic docs
- Uses
- Messages.
- Needs
- An OAuth or Server-to-Server OAuth app with the scopes it needs.
API docsdevelopers.zoom. us - RingCentralPublic docs
- Uses
- Messages.
- Needs
- An app in the RingCentral Developer Console (client ID and secret). Some scopes need RingCentral’s approval.
API docsdevelopers.ringcentral. com - 3CXPublic docs
- Uses
- Users and call control.
- Needs
- An 8SC+ license. The API client is created under Admin Console > Integrations > API.
API docs3cx.com
Cloud and files5
- Microsoft AzurePublic docs
- Uses
- Costs and usage.
- Needs
- A Microsoft Entra app with an Azure role on the subscriptions it reads.
- AWSPublic docs
- Uses
- Costs and usage.
- Needs
- AWS charges $0.01 for each Cost Explorer API request.
API docsdocs.aws. amazon. com - DropboxPublic docs
- Uses
- Users.
API docsdropbox.com - BoxPublic docs
- Uses
- Users.
- Needs
- An OAuth 2.0 access token.
API docsdeveloper.box. com - WAWasabiPublic docs
- Uses
- Costs and usage.
API docsdocs.wasabi. com
Reporting and lifecycle6
- ScalePadPublic docs
- Uses
- Warranties.
- Needs
- Lifecycle Manager’s API needs a higher subscription tier and an administrator’s API key. US only.
API docsdeveloper.scalepad. com - Power BIPublic docs
- Uses
- Sending your metrics to dashboards.
- Needs
- A Microsoft Entra app. A Power BI admin allows service principal access.
API docslearn.microsoft. com - GrafanaPublic docs
- Uses
- Sending your metrics to dashboards.
- Needs
- A service account token.
API docsgrafana.com - DatadogPublic docs
- Uses
- Sending your metrics to dashboards.
- Needs
- An API key, plus an application key for some endpoints.
API docsdocs.datadoghq. com - CLCloudRadialPublic docs
- Uses
- Companies, users, endpoints, assessments and the service catalog.
API docssupport.cloudradial. com - CRCrewhuPublic docs
- Uses
- Surveys, users and contest metrics.
API docsget-help-tnt.crewhu. com
Automation platforms5
- RewstPublic docs
- Uses
- Starting your workflows.
- Needs
- Rewst’s API is GraphQL, and Rewst workflows can also start from webhook triggers.
API docsdocs.rewst. help - Power AutomatePublic docs
- Uses
- Starting your workflows.
- Needs
- Through the Dataverse Web API, for flows that live in solutions.
API docslearn.microsoft. com - n8nPublic docs
- Uses
- Starting your workflows.
- Needs
- Not on the free trial: n8n Cloud Starter, Pro or Enterprise, or any self-hosted edition.
API docsdocs.n8n. io - ZapierPartner access
- Uses
- Starting your workflows.
- Needs
- Zapier’s Workflow API needs a publicly listed Zapier integration or White Label onboarding.
API docsdocs.zapier. com - MakePublic docs
- Uses
- Starting your workflows.
- Needs
- Use your organization’s zone address, such as eu1 or us1.
API docsdevelopers.make. com
No tool by that name yet. If it has a documented API, Control Center can connect to it. Send us its API docs.
No public API
No public API found, yet.
We couldn’t find a public API for these tools, so Control Center can’t connect to them yet. If your vendor gives you API docs for one of them, send them to us and we’ll check them.
- TodylEndpoint security
- ConnectWise SIEMSIEM and managed SOC
- Barracuda XDRSIEM and managed SOC
- IT Portal (SI Portal)Documentation
- ITBoostDocumentation
- Breach Secure NowSecurity training and compliance
- Hook SecuritySecurity training and compliance
- ApptegaSecurity training and compliance
- Compliance ScorecardSecurity training and compliance
- CynomiSecurity training and compliance
- RapidFire VulScanVulnerability scanning
- RapidFire Network DetectiveVulnerability scanning
- RapidFire Cyber HawkVulnerability scanning
- NodewareVulnerability scanning
- AutoElevateAdmin rights and allowlisting
- BrightGaugeReporting and lifecycle
- SmileBackReporting and lifecycle
Not listed
Using a tool that isn’t listed?
If it has a documented API, Control Center can connect to it. Send us the tool’s name and a link to its API docs.
Coming to this page: step-by-step setup for each connection, and the reference for Control Center MCP.
Product names belong to their owners. Listing a tool shows that Control Center can work with it, not a partnership or endorsement. Vendors change their APIs and plans, so their own docs are the final word.