Integration IDs

An agent definition names each integration it uses by its integration ID. Use the IDs on this page when you write a definition for Create an agent or edit a file before you import it.

Where the ID goes

Put the ID in integrationConfigNangoId on a tool server entry. Tool server entries appear in two places: the agent’s own toolServerConfigs, and each step’s llmStep.toolServerConfigs.

"toolServerConfigs": [
  {
    "id": "tools-1",
    "enabled": true,
    "integrationConfigNangoId": "reliaquest-greymatter",
    "integrationConnectionId": null
  }
]

The ID must match the integration’s ID exactly, including case and hyphens. The display name doesn’t work: ReliaQuest GreyMatter, greymatter, and Gray-Matter all fail, and only reliaquest-greymatter succeeds. If any ID in a definition doesn’t match an integration set up on the Kindo deployment, the import of that file fails, and POST /v1/agents/create returns 400.

Leave integrationConnectionId as null. After the agent is created, connect your own account to each integration in the agent builder.

Integrations with more than one ID

Some integrations offer several ways to connect, such as delegated OAuth, application credentials, or a GCC High tenant. Each way has its own ID, for example microsoft-entra-id, microsoft-entra-id-application, and microsoft-entra-id-gcc-high. Use the ID for the way your organization connects the integration.

Platform tools

To give an agent Kindo’s own Platform tools, use platform. Platform needs no integration connection. It is different from kindo-platform, an early-access integration that connects to the Kindo API with an API key.

How the ID relates to tool names

The ID is also the prefix on the integration’s tool names. ReliaQuest GreyMatter’s list_incidents tool reaches the agent as reliaquest-greymatter_list_incidents. To read an ID from a tool name, take everything before the first underscore. See How tools are named.

Find an ID that isn’t listed

Build a small agent in the agent builder that uses the integration, then download it and copy integrationConfigNangoId from its toolServerConfigs.

Integration ID list

Available to all organizations

These integrations can be connected by any Kindo-hosted organization.

Integration	ID
Abnormal Security	`abnormal-security`
ActivTrak	`activtrak`
Akamai Guardicore (Basic Auth)	`akamai-guardicore`
Akamai Guardicore (Refresh Token)	`akamai-guardicore-refresh-token`
AWS GuardDuty	`aws-guardduty`
Azure DevOps	`azure-devops`
Box	`box`
Cisco Catalyst Center	`cisco-catalyst`
Cisco Firepower Management Center	`cisco-fmc`
Cisco Secure Access	`cisco-secure-access`
Cisco Secure Workload	`cisco-secure-workload`
Cofense Triage	`cofense-triage`
Confluence	`confluence`
Cribl	`cribl`
CrowdStrike Falcon	`crowdstrike-falcon`
CyberArk Privilege Cloud	`cyberark-privilege-cloud`
Datadog	`datadog`
Doppler	`doppler`
Dropbox	`dropbox`
Dynatrace (OAuth)	`dynatrace`
Dynatrace (Platform Token)	`dynatrace-token`
FireHydrant	`firehydrant`
FireMon	`firemon`
Freshservice	`freshservice`
GitHub (User OAuth)	`github`
GitLab	`gitlab`
Google Docs	`google-docs`
Google Drive	`google-drive`
Google Security Operations	`google-secops`
Grafana	`grafana`
Graylog	`graylog`
Horizon3 NodeZero	`horizon3-nodezero`
Hugging Face	`huggingface`
IBM QRadar SIEM	`ibm-qradar`
Jira (OAuth)	`jira`
Jira Data Center (Basic Auth)	`jira-data-center-basic`
Linear	`linear`
Microsoft Defender for Cloud (Application)	`microsoft-defender-for-cloud-application`
Microsoft Defender for Endpoint (Application)	`microsoft-defender-application`
Microsoft eDiscovery	`microsoft-ediscovery`
Microsoft Entra ID	`microsoft-entra-id`
Microsoft Entra ID Governance	`entra-id-governance`
Microsoft Excel	`microsoft-excel`
Microsoft Fabric	`microsoft-fabric`
Microsoft Graph Security	`microsoft-graph-security`
Microsoft Graph Security (Application)	`microsoft-graph-security-application`
Microsoft Outlook	`outlook`
Microsoft Outlook (Application)	`outlook-application`
Microsoft Purview Compliance	`microsoft-purview-compliance`
Microsoft Purview Compliance (Application)	`microsoft-purview-compliance-application`
Microsoft Teams	`microsoft-teams`
monday.com	`monday-mcp`
MongoDB	`mongodb`
Neo4j Aura	`neo4j`
Notion	`notion`
NVD	`nvd`
Obsidian Security	`obsidian-security`
Okta	`okta-private-key`
OneDrive	`one-drive`
Oracle Database	`oracle-database`
PagerDuty	`pagerduty`
Palo Alto NGFW	`palo-alto-ngfw`
Platform	`platform`
Prisma Cloud	`prisma-cloud`
Qualys	`qualys`
Rapid7 InsightIDR	`rapid7-insightidr`
Recorded Future	`recorded-future`
ReliaQuest GreyMatter	`reliaquest-greymatter`
SailPoint	`sailpoint`
Salesforce	`salesforce-mcp`
SAP S/4HANA (OData)	`sap-s4hana`
SAP S/4HANA (RFC)	`sap-s4hana-rfc`
SentinelOne	`sentinelone`
ServiceNow	`servicenow-oauth-2-cc`
SharePoint Online (Application)	`sharepoint-online-application`
SharePoint Online (v2)	`sharepoint-online`
Slack	`slack`
Smartsheet	`smartsheet`
Snowflake (JWT)	`snowflake-jwt`
Sourcegraph	`sourcegraph`
Splunk	`splunk`
Sumo Logic	`sumo-logic`
Swimlane	`swimlane`
Tenable Vulnerability Management	`tenable-vulnerability-management`
ThreatConnect	`threatconnect`
ThreatConnect (HMAC)	`threatconnect-hmac`
Traceable	`traceable`
Vectra AI	`vectra-ai`
Wiz (Client Credentials)	`wiz-cc`
Zendesk Support Suite	`zendesk-mcp`

Early access

These integrations aren’t available to every Kindo-hosted organization yet. You can import an agent that uses one, but you can’t connect the integration until it is enabled. Ask your Kindo representative to enable it for your organization.

Integration	ID
Aikido Security	`aikido`
Airtable	`airtable-pat`
Anthropic Claude Enterprise	`anthropic-enterprise`
Armis Centrix	`armis`
Asana Gov	`asana-gov`
AWS S3	`aws-s3`
AWS Security	`aws-security`
AWS Shield Advanced	`aws-shield`
Axonius	`axonius`
Azure AI Foundry	`azure-ai-foundry`
Azure AI Foundry (Application)	`azure-ai-foundry-application`
Bitbucket Cloud	`bitbucket-mcp`
Bitsight	`bitsight`
Black Duck	`black-duck`
Burp Suite DAST	`burp-suite`
Check Point Quantum Management	`checkpoint-quantum`
Cisco Secure Network Analytics	`cisco-secure-network-analytics`
Cisco Wireless LAN Controller	`cisco-wireless-lan-controller`
Cloudflare (API Key)	`cloudflare-api`
Confluence Data Center	`confluence-data-center-api-key`
Cursor	`cursor`
CyberArk Privilege Cloud (OAuth)	`cyberark-privilege-cloud-oauth`
Cyberhaven	`cyberhaven`
Cyble Vision	`cyble-vision`
Cyera	`cyera`
Delinea Secret Server	`delinea-secret-server`
ExtraHop (Self-Managed)	`extrahop-self-managed`
ExtraHop RevealX 360	`extrahop`
Fleet	`fleet-dm`
Freshdesk	`freshdesk`
GitHub Enterprise Server	`github-enterprise-server`
Gmail	`google-mail`
Google BigQuery	`google-bigquery`
Google Cloud Security	`google-cloud-security`
Harness	`harness`
Kindo Platform (API key)	`kindo-platform`
LinkSquares	`linksquares`
Microsoft 365 Copilot (Application)	`m365-copilot-application`
Microsoft Azure	`microsoft-azure`
Microsoft Azure (Application)	`microsoft-azure-application`
Microsoft Azure (Government)	`microsoft-azure-government`
Microsoft Azure (Government, Application)	`microsoft-azure-government-application`
Microsoft Defender	`microsoft-defender`
Microsoft Defender for Cloud	`microsoft-defender-for-cloud`
Microsoft Defender for Cloud (Government)	`microsoft-defender-for-cloud-government`
Microsoft Defender for Endpoint (GCC High)	`microsoft-defender-gcc-high`
Microsoft Defender XDR (GCC High, Application)	`microsoft-graph-security-gcc-high-application`
Microsoft eDiscovery (Application)	`microsoft-ediscovery-application`
Microsoft eDiscovery (GCC High)	`microsoft-ediscovery-gcc-high`
Microsoft eDiscovery (GCC High, Application)	`microsoft-ediscovery-gcc-high-application`
Microsoft Entra ID (Application)	`microsoft-entra-id-application`
Microsoft Entra ID (GCC High)	`microsoft-entra-id-gcc-high`
Microsoft Entra ID (GCC High, Application)	`microsoft-entra-id-gcc-high-application`
Microsoft Entra ID Governance (GCC High)	`entra-id-governance-gcc-high`
Microsoft Excel (GCC High)	`microsoft-excel-gcc-high`
Microsoft Graph Security (GCC High)	`microsoft-graph-security-gcc-high`
Microsoft Intune	`microsoft-intune`
Microsoft Intune (Application)	`microsoft-intune-application`
Microsoft Intune (GCC High)	`microsoft-intune-gcc-high`
Microsoft Intune (GCC High, Application)	`microsoft-intune-gcc-high-application`
Microsoft Outlook (GCC High)	`outlook-gcc-high`
Microsoft Outlook (GCC High, Application)	`outlook-gcc-high-application`
Microsoft Outlook Calendar	`microsoft-outlook-calendar`
Microsoft Outlook Calendar (GCC High)	`microsoft-outlook-calendar-gcc-high`
Microsoft Purview Compliance (GCC High)	`microsoft-purview-compliance-gcc-high`
Microsoft Purview Compliance (GCC High, Application)	`microsoft-purview-compliance-gcc-high-application`
Microsoft Purview Data Governance	`microsoft-purview`
Microsoft Purview Data Governance (Government)	`microsoft-purview-government`
Microsoft Sentinel (Management)	`microsoft-sentinel-management`
Microsoft Sentinel (Management, Government)	`microsoft-sentinel-management-government`
Microsoft Teams (GCC High)	`microsoft-teams-gcc-high`
MITRE ATT&CK	`mitre-attack`
Nagios XI	`nagios-xi`
OneDrive (GCC High)	`one-drive-gcc-high`
Oracle Fusion ERP	`oracle-fusion`
Oracle HCM	`oracle-hcm`
Palo Alto Cortex XDR	`palo-alto-cortex-xdr`
Proofpoint Email Protection	`proofpoint`
Rapid7 InsightAppSec	`rapid7-insightappsec`
Rapid7 InsightCloudSec	`rapid7-insightcloudsec`
Rapid7 InsightVM	`rapid7-insightvm`
Rapid7 InsightVM Cloud	`rapid7-insightvm-cloud`
SailPoint IdentityIQ	`sailpoint-iiq`
Salesforce Agentforce	`salesforce-agentforce`
Saviynt Enterprise Identity Cloud	`saviynt`
Secureframe	`secureframe`
SharePoint Online (GCC High)	`sharepoint-online-gcc-high`
Sift	`sift`
Smartsheet Gov	`smartsheet-gov`
Snyk	`snyk`
Splunk SOAR	`splunk-soar`
SQL Database	`sql-database`
Supabase	`supabase-mcp-proxy`
Trellix Endpoint Security (HX)	`trellix-hx`
Vanta	`vanta`
VirusTotal	`virustotal`
Wazuh	`wazuh`
Workday Financial Management	`workday-financial-management`
Yardi Revolve	`yardi-revolve`
Zabbix	`zabbix`
Zscaler	`zscaler`