Pricing
Apps
Log in
Start trial
TheHive icon

TheHive

Open-source security incident response platform for SOC teams.

2 triggers18 searches52 actionsPollingAuth: API key

AI-assisted documentation25 min read

This documentation is compiled from our integration source code, internal specs for TheHive, its official API documentation and anonymized requests logs we collect from our support team[2].

Open TheHive on WEXTL →

Connecting TheHive takes an active account plus an API access token from your account settings — no other setup is required.[3]https://strangebee.com/thehive/

  • Server URLurlRequired

    The public address you open TheHive at, for example https://thehive.example.com. Leave off /api/v1. Private and local network addresses are blocked.

    [1]
  • API KeypasswordRequired

    In TheHive, open your user settings and create or reveal your API key. An admin can also create one for a service account.

    [1]
  • Organisationtext

    Only needed when your account belongs to several organisations. Enter the organisation name to act in, or admin for observable type changes.

    [1]
  1. Log in to your WEXTL account, add the TheHive node module to your workflow, and click Create new credential.
  2. Optional: In the Credential name field, enter a name for the credential.
  3. Enter the authentication credentials you copied from your TheHive account, or follow the on-screen instructions to create the credential.
  4. If prompted, authenticate your account and confirm access.
  5. If you want to make changes to your credential in the future, follow the steps in Manage credentials →

Notes

Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →

The list below is a reference of every TheHive node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.

Expand any TheHive node module below to see exactly what it takes in, what it returns, and what connection it needs.

Look for TheHive templates in the WEXTL template library.

Browse templates →
  1. Agenty[2]Cloud web scraping, crawling and change detection — create and run scraping, crawling and monitoring agents, feed them URLs or stored lists, start jobs on demand or on a schedule, pull the extracted rows and logs, and react when a job completes.
  2. ClerkAuthentication and user management with sign-in, sign-up, and MFA.
  3. AWS LambdaServerless compute that runs your code without managing servers.
  4. Bunny.netCDN control plane — manage pull zones, storage zones, DNS, video libraries, and cache purge.
  5. Azure StorageManage containers and blobs in Azure Blob Storage.
More apps in Developer Tools category →
  1. WEXTL® TheHive Source Code connector implementation.
  2. Our users use cases and automations.
  3. Official API Documentation for TheHive.
  4. WEXTL® visual workflow builder data.

Last updated: Sep 27, 2026 13:44

How we write our apps documentation

How we compile these docs — sources, AI's role, and how we verify.