STEP 1
Connect Agenty and TheHive
Save credentials in WEXTL once. We store them encrypted and reuse the authorization across every workflow [3]. No coding or API skills required.
Agenty and TheHive Integration
Keep Agenty and TheHive in sync by integrating their events and actions. When developer tools events happen in Agenty, update the TheHive automatically - without any line of code in visual workflow builder.
3-day trialCancel anytimeUp to 10 minutes quick set up
- GDPR
- Data Encryption
- 2FA
- Local Data Region
Learn about Agenty and TheHive
Detailed info you need to know about Agenty and TheHive integrations in WEXTL. Explore which modules apps support and how you connect them.
How to connect Agenty to TheHive
Set up your Agenty and TheHive integration in 3 simple steps [2] — no coding required. Up to 10 minutes setup.
STEP 2
Build a workflow
Paste selected Agenty and TheHive nodes onto the canvas [4], or describe what you want and WEXTL wires the flow together with AI Builder.
STEP 3
Map your data
Choose which fields need to sync between Agenty and TheHive. Use filters or leverage a JS custom code step in between — everything is on the canvas.
How does the integration between Agenty and TheHive work in WEXTL?
WEXTL exposes actions and triggers for Agenty and TheHive that help you connect apps and automate repetitive tasks [1]. A trigger is an event that happens, an action — a step that performs when the event has occurred.
Agenty triggersTheHive actions
Agenty modules
- Add Agents to a ProjectAdds one or more agents to a project.
- Add Rows to a ListAdds one or more rows to a stored list.
- Cancel a Running JobStops a job that is currently running.
- Change Agent Schedule StatusEnables or disables an agent's existing schedule.
- Change API Key StatusChanges whether an API key can authenticate requests.
- Change Workflow StatusEnables or disables an automation in your Agenty account.
- Copy an AgentCreates a copy of an existing agent.
- Create a ListCreates a new stored list.
- Create an AgentCreates a new scraping, crawling or monitoring agent.
- Create an API KeyCreates a new API key for the account.
- Create a ProjectCreates a new project.
- Create a WorkflowCreates an automation in your Agenty account that runs when a job completes.
- Delete a ConnectionRemoves a stored OAuth grant from the account.
- Delete Agents by IdPermanently deletes one or more agents by their ids.
- Delete Agent ScheduleRemoves the run schedule from an agent.
- Delete a ListPermanently deletes a stored list by its id.
- Delete a List RowPermanently deletes a single row from a stored list.
- Delete an AgentPermanently deletes a single agent by its id.
- Delete an API KeyPermanently deletes an API key from the account.
- Delete a WorkflowPermanently deletes an automation from your Agenty account.
- Delete Projects by IdPermanently deletes one or more projects by their ids.
- Delete Rows by IdDeletes selected rows from a list by their ids.
- Delete Users by IdPermanently deletes one or more team members by their ids.
- Download API Keys as CSVDownloads the account's API keys as a CSV file.
- Download Job ResultDownloads a job's extracted result as a file.
- Download Jobs as CSVDownloads the account's jobs as a CSV file.
- Download List Rows as CSVDownloads the rows of a list as a CSV file.
- Get Account Usage ReportReturns how many pages the account has used over a date range.
- Get Agent InputReturns the input source configured on an agent.
- Get Agent ScheduleReturns the schedule configured on an agent.
- Get a JobReturns a single job by its id.
- Get a ListReturns a single stored list by its id.
- Get a List RowReturns a single row from a stored list.
- Get an AgentReturns a single agent by its id.
- Get an API KeyReturns a single API key by id.
- Get a ProjectReturns a single project and its associated agents.
- Get a UserReturns a single team member by id.
- Get a WorkflowReturns a single automation from your Agenty account.
- Get Job Output FileReturns a named output file from a completed job.
- Get Job ResultRetrieves the extracted result rows for a job.
- Get Latest Agent ResultRetrieves the latest result rows for an agent.
- Get ListsRetrieves the stored lists in the account.
- Invite a UserInvites a new team member to the Agenty account.
- List AgentsRetrieves a list of scraping, crawling and monitoring agents in the account.
- List API KeysRetrieves the API keys in the account.
- List ConnectionsRetrieves the stored OAuth connections in the account.
- List Job LogsRetrieves the log lines recorded for a job.
- List JobsRetrieves a list of agent jobs in the account.
- List ProjectsRetrieves the projects in the account.
- List Rows in a ListRetrieves the rows stored in a list.
TheHive modules
- Analyze ObservableRuns a Cortex analyzer on an observable through TheHive.
- Create AlertCreates a new alert in TheHive.
- Create Alert ObservableAdds a text observable, such as an IP address, domain, or hash, to an alert.
- Create Alert Observable FileUploads a file as an observable on an alert.
- Create Alert ProcedureLinks a MITRE ATT&CK technique to an alert as a TTP.
- Create Alert ProceduresLinks several MITRE ATT&CK techniques to an alert in one call.
- Create CaseCreates a new case in TheHive.
- Create Case AccessSets who can see a case.
- Create Case Access in BulkSets who can see several cases at once.
- Create Case Custom EventAdds a custom event to a case timeline.
- Create Case from ImportCreates a case from an archive exported from TheHive.
- Create Case LinkLinks a case to another case with a link type.
- Create Case ObservableAdds a text observable, such as an IP address, domain, or hash, to a case.
- Create Case Observable FileUploads a file as an observable on a case.
- Create Case ProcedureLinks a MITRE ATT&CK technique to a case as a TTP.
- Create Case ProceduresLinks several MITRE ATT&CK techniques to a case in one call.
- Create Case ShareShares a case with one or more linked organisations.
- Create External Case LinkLinks a case to an external web page with a link type.
- Create Observable ShareShares an observable with organisations its case is already shared with.
- Create Observable TypeCreates a custom observable type.
- Delete AlertPermanently deletes an alert.
- Delete Alerts in BulkPermanently deletes several alerts at once.
- Delete CasePermanently deletes a case.
- Delete Case LinkRemoves the link between a case and another case.
- Delete Case ShareRemoves one share from a case.
- Delete Case SharesStops sharing a case with the given organisations.
- Delete Case Shares by IDRemoves the chosen case shares by their share IDs.
- Delete External Case LinkRemoves a link between a case and an external web page.
- Delete ObservablePermanently deletes an observable.
- Delete Observable SharesStops sharing an observable with the given organisations.
- Delete Observable TypeDeletes a custom observable type.
- Get AlertReturns a single alert by ID.
- Get CaseReturns a single case by ID or number.
- Get Case ExportExports a case as a password-protected archive file.
- Get Case TimelineReturns the timeline of events for a case.
- Get Cortex JobReturns the status and report of a Cortex analyzer job.
- Get ObservableReturns a single observable by ID.
- Get Observable TypeReturns a single observable type.
- Get Similar Alert ObservablesRetrieves the observables an alert shares with another alert or case.
- Get Similar Case ObservablesRetrieves the observables a case shares with another alert or case.
- Import Alert into CaseImports an alert's observables and TTPs into an existing case without changing the case description.
- List Alert ObservablesRetrieves the observables of an alert.
- List AlertsRetrieves a list of alerts, newest first.
- List Case LinksRetrieves the cases linked to a case with the observables they share.
- List Case Link TypesRetrieves the link types already used between cases.
- List Case ObservablesRetrieves the observables of a case.
- List CasesRetrieves a list of cases, newest first.
- List Case SharesRetrieves the organisations a case is shared with.
- List ObservablesRetrieves a list of observables from alerts and cases, newest first.
- List Observable SharesRetrieves the organisations an observable is shared with.
Frequently asked questions
Common questions about connecting Agenty and TheHive.
Connect your Agenty and TheHive accounts once, pick a trigger in one app and an action in the other, then map the fields so data flows automatically between them. [3]
Example: when Agenty's "Watch Agent Jobs" fires, WEXTL can "Analyze Observable" in TheHive. Agenty has 1 trigger (including Watch Agent Jobs); TheHive has 70 actions (including Analyze Observable, Create Alert, and Create Alert Observable). Add filters and transforms between steps when you need them. [1]
Yes — the integration works in both directions. Use each app's triggers to start a workflow and the other app's actions to update it. [2]
No. Agenty-to-TheHive automations are built visually on the canvas. You can optionally add custom JavaScript with Functions when you need advanced logic. [4]
Yes. Trigger-based automations start the moment Agenty (or TheHive) fires a new event — webhook-backed apps run within seconds, and polling-only apps re-check on a schedule you control. [7]
A first automation typically takes 5–10 minutes: connect each app's credential once, drop a trigger + action onto the canvas, map the fields, and turn the workflow on.
You can build your Agenty + TheHive automation on a 3-day trial with every feature unlocked. Cancel anytime. For your protection, a small deposit is charged to your card when your trial starts. It counts toward your first payment and is non-refundable. [8]
References
List of sources used to gather information about the Agenty and TheHive integration.
- Agenty and TheHive integration source code, module specs and credentials implementation.
- Our Agenty and TheHive integration documentation, structured input and output parameters, scopes, and authentication methods.
- Official vendor API documentation for Agenty and TheHive — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
- WEXTL® visual workflow builder, anonymized data from our technical support team.
- Agenty integration information
- TheHive integration information
- WEXTL® Scheduling
- WEXTL® Pricing and Trial
- WEXTL® Apps Library