# Huntress integration

{% hint style="info" %}
 If you’re new to integrations in Rewst, read through our introductory integration documentation [here](https://docs.rewst.help/documentation/integrations).
{% endhint %}

## What does the Huntress integration do?

Our Huntress integration enables the automation of threat detection and response. Use the Huntress API within Rewst to manage incident reports and billing, and access detailed data for organizations and agents. 

## Set up the Huntress integration

### Set up steps in Huntress

To Enable REST API Within your Huntress Account you may need to contact Huntress support.

1. Log in to your Huntress account
2. Click the menu in the top left corner of your dashboard.
3. Go to **API Credentials**.
4. Generate a new API token.
5. Copy both the private and public API keys and store them somewhere secure. You'll need this information for further steps in Rewst.

{% hint style="info" %}
You can find more about this process [here](https://support.huntress.io/hc/en-us/articles/4780697192851-Huntress-REST-API).
{% endhint %}

### Set up steps in Rewst

Follow the below steps to configure a new integration:

1. Navigate to **Marketplace > Integrations** in the left side menu of your Rewst platform.
2. Search for `Huntress` in the integrations page.
3. Click on the integration tile to launch the configuration setup page.\
   \
   ![](https://1835401289-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAQQ1EHVcEsGKBPVHmiav%2Fuploads%2FgfElOcvHEYJBZ2F1C2nQ%2FScreenshot%202025-05-05%20at%204.31.49%E2%80%AFPM.png?alt=media\&token=50dd9e3e-7d2c-4bbb-a56c-936ccd2a1461)
4. Under Parameters, enter the information copied from Huntress into its relevant fields:
   1. **Private API Key**
   2. **Public API Key**
5. Click **Save Configuration**. 
6. Rewst will do a quick validation of your input. Once completed, you'll see a new section beneath the configuration form for[ organization mapping](https://docs.rewst.help/documentation/integrations#what-is-organization-mapping). Complete your mapping as desired. 

{% hint style="success" %}
Got an idea for a new Integration? Rewst is constantly adding new integrations to our integrations page. Submit your idea or upvote existing ideas here in our [Canny feedback collector](https://rewst.canny.io/integrations).
{% endhint %}

## Actions and endpoints

{% hint style="info" %}
For more on how actions work in Rewst, check out our [introductory actions documentation here](https://docs.rewst.help/documentation/workflows/actions-in-rewst). 
{% endhint %}

| Description                                | Method | Endpoint                                                                       |
| ------------------------------------------ | ------ | ------------------------------------------------------------------------------ |
| List organizations                         | GET    | /v1/organizations                                                              |
| List agents                                | GET    | /v1/agents                                                                     |
| List billing reports                       | GET    | /v1/billing\_reports                                                           |
| List reports                               | GET    | /v1/reports                                                                    |
| List incident reports                      | GET    | /v1/incident\_reports                                                          |
| List memberships                           | GET    | /v1/memberships                                                                |
| Get a specific organization                | GET    | /v1/organizations/{id}                                                         |
| Get a specific agent                       | GET    | /v1/agents/{id}                                                                |
| Get a specific incident report             | GET    | /v1/incident\_reports/{id}                                                     |
| Get a specific report                      | GET    | /v1/reports/{id}                                                               |
| Get a specific billing report              | GET    | /v1/billing\_reports/{id}                                                      |
| Get current account info (test action)     | GET    | /v1/account                                                                    |
| Create a new account (reseller)            | POST   | /v1/accounts                                                                   |
| Create a new organization                  | POST   | /v1/organizations                                                              |
| Create org under a specific account        | POST   | /v1/accounts/{account\_id}/organizations                                       |
| Resolve an incident report                 | POST   | /v1/incident\_reports/{id}/resolution                                          |
| Resolve incident report (reseller)         | POST   | /v1/accounts/{account\_id}/incident\_reports/{id}/resolution                   |
| Bulk approve remediations                  | POST   | /v1/incident\_reports/{id}/remediations/bulk\_approval                         |
| Bulk approve remediations (reseller)       | POST   | /v1/accounts/{account\_id}/incident\_reports/{id}/remediations/bulk\_approval  |
| Bulk reject remediations                   | POST   | /v1/incident\_reports/{id}/remediations/bulk\_rejection                        |
| Bulk reject remediations (reseller)        | POST   | /v1/accounts/{account\_id}/incident\_reports/{id}/remediations/bulk\_rejection |
| Invite user to org/account                 | POST   | /v1/memberships                                                                |
| Invite user (reseller)                     | POST   | /v1/accounts/{account\_id}/memberships                                         |
| Resolve an escalation                      | POST   | /v1/escalations/{id}/resolution                                                |
| Permanently disable account (irreversible) | DELETE | /v1/accounts/{account\_id}                                                     |
| Delete organization & uninstall agents     | DELETE | /v1/organizations/{id}                                                         |
| Delete org (reseller)                      | DELETE | /v1/accounts/{account\_id}/organizations/{id}                                  |
| Delete a membership                        | DELETE | /v1/memberships/{id}                                                           |
| Delete membership (reseller)               | DELETE | /v1/accounts/{account\_id}/memberships/{id}                                    |
| Generic authenticated API request          | \*     | (any)                                                                          |

<br>

Reply…Also send to squad-ecosystem