# Huntress integration
{% hint style="info" %}
If you’re new to integrations in Rewst, read through our introductory integration documentation [here](https://docs.rewst.help/documentation/integrations).
{% endhint %}
## What does the Huntress integration do?
Our Huntress integration enables the automation of threat detection and response. Use the Huntress API within Rewst to manage incident reports and billing, and access detailed data for organizations and agents.
## Set up the Huntress integration
### Set up steps in Huntress
To Enable REST API Within your Huntress Account you may need to contact Huntress support.
1. Log in to your Huntress account
2. Click the menu in the top left corner of your dashboard.
3. Go to **API Credentials**.
4. Generate a new API token.
5. Copy both the private and public API keys and store them somewhere secure. You'll need this information for further steps in Rewst.
{% hint style="info" %}
You can find more about this process [here](https://support.huntress.io/hc/en-us/articles/4780697192851-Huntress-REST-API).
{% endhint %}
### Set up steps in Rewst
Follow the below steps to configure a new integration:
1. Navigate to **Marketplace > Integrations** in the left side menu of your Rewst platform.
2. Search for `Huntress` in the integrations page.
3. Click on the integration tile to launch the configuration setup page.\
\
4. Under Parameters, enter the information copied from Huntress into its relevant fields:
1. **Private API Key**
2. **Public API Key**
5. Click **Save Configuration**.
6. Rewst will do a quick validation of your input. Once completed, you'll see a new section beneath the configuration form for[ organization mapping](https://docs.rewst.help/documentation/integrations#what-is-organization-mapping). Complete your mapping as desired.
{% hint style="success" %}
Got an idea for a new Integration? Rewst is constantly adding new integrations to our integrations page. Submit your idea or upvote existing ideas here in our [Canny feedback collector](https://rewst.canny.io/integrations).
{% endhint %}
## Actions and endpoints
{% hint style="info" %}
For more on how actions work in Rewst, check out our [introductory actions documentation here](https://docs.rewst.help/documentation/workflows/actions-in-rewst).
{% endhint %}
| Description | Method | Endpoint |
| ------------------------------------------ | ------ | ------------------------------------------------------------------------------ |
| List organizations | GET | /v1/organizations |
| List agents | GET | /v1/agents |
| List billing reports | GET | /v1/billing\_reports |
| List reports | GET | /v1/reports |
| List incident reports | GET | /v1/incident\_reports |
| List memberships | GET | /v1/memberships |
| Get a specific organization | GET | /v1/organizations/{id} |
| Get a specific agent | GET | /v1/agents/{id} |
| Get a specific incident report | GET | /v1/incident\_reports/{id} |
| Get a specific report | GET | /v1/reports/{id} |
| Get a specific billing report | GET | /v1/billing\_reports/{id} |
| Get current account info (test action) | GET | /v1/account |
| Create a new account (reseller) | POST | /v1/accounts |
| Create a new organization | POST | /v1/organizations |
| Create org under a specific account | POST | /v1/accounts/{account\_id}/organizations |
| Resolve an incident report | POST | /v1/incident\_reports/{id}/resolution |
| Resolve incident report (reseller) | POST | /v1/accounts/{account\_id}/incident\_reports/{id}/resolution |
| Bulk approve remediations | POST | /v1/incident\_reports/{id}/remediations/bulk\_approval |
| Bulk approve remediations (reseller) | POST | /v1/accounts/{account\_id}/incident\_reports/{id}/remediations/bulk\_approval |
| Bulk reject remediations | POST | /v1/incident\_reports/{id}/remediations/bulk\_rejection |
| Bulk reject remediations (reseller) | POST | /v1/accounts/{account\_id}/incident\_reports/{id}/remediations/bulk\_rejection |
| Invite user to org/account | POST | /v1/memberships |
| Invite user (reseller) | POST | /v1/accounts/{account\_id}/memberships |
| Resolve an escalation | POST | /v1/escalations/{id}/resolution |
| Permanently disable account (irreversible) | DELETE | /v1/accounts/{account\_id} |
| Delete organization & uninstall agents | DELETE | /v1/organizations/{id} |
| Delete org (reseller) | DELETE | /v1/accounts/{account\_id}/organizations/{id} |
| Delete a membership | DELETE | /v1/memberships/{id} |
| Delete membership (reseller) | DELETE | /v1/accounts/{account\_id}/memberships/{id} |
| Generic authenticated API request | \* | (any) |
Reply…Also send to squad-ecosystem
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.rewst.help/documentation/integrations/integration-guides/huntress-integration-setup.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.