> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# ITGlue API

> Read and write IT Glue resources — documents, configurations, flexible assets, contacts, passwords, and more

The ITGlue API tool gives Neo agents direct access to the full IT Glue REST API — read, create, update, and delete any IT Glue resource during ticket resolution.

<Info>
  Automatically enabled when you configure ITGlue permissions in your agent workflow. No manual toggle needed.
</Info>

<Tip>
  Neo resolves each IT Glue organization to its PSA company ahead of time, so agents read organizations by **ID** rather than an unreliable name search (IT Glue's `filter[name]` can't match punctuated names like "Tool Supply, Inc."). See [Company Mapping](/product/company-mapping) to view and correct those mappings.
</Tip>

## What It Does

* Look up organizations, contacts, configurations, and documentation
* Create and update documents based on ticket resolutions
* Manage flexible assets and their custom fields
* Retrieve passwords (with technician approval)
* Update configuration items and interfaces
* Access any IT Glue API endpoint with permission-group-based access control

## Permission Groups

| Permission Group         | What It Covers                                                |
| ------------------------ | ------------------------------------------------------------- |
| **Organizations**        | Organizations, locations, domains, related items              |
| **Contacts**             | Contacts and contact types                                    |
| **Documents**            | Documents, folders, sections, images, checklists, attachments |
| **Flexible Assets**      | Flexible asset records                                        |
| **Flexible Asset Types** | Asset type schemas and field definitions                      |
| **Configurations**       | Configuration items, types, statuses, interfaces              |
| **Passwords**            | Passwords, folders, and categories                            |

Each group has an access level: **Disabled**, **Read Only**, or **Read/Write**.

## Access Profiles

<AccordionGroup>
  <Accordion title="Read Only">
    All groups Read Only. Agent can look up any resource but cannot modify.
  </Accordion>

  <Accordion title="Documentation Manager">
    Documents, Flexible Assets, and Contacts at Read/Write. Everything else Read Only.
  </Accordion>

  <Accordion title="Full Access">
    All groups Read/Write with delete enabled. Password writes still require technician approval.
  </Accordion>
</AccordionGroup>

## Safety Controls

| Control                    | Behavior                                                            |
| -------------------------- | ------------------------------------------------------------------- |
| **Technician-in-the-Loop** | Require human approval for writes — configurable per group          |
| **Password protection**    | All password writes always require approval, regardless of settings |
| **Organization safety**    | Agents can never delete organizations                               |
| **Delete control**         | Delete permissions off by default, must be explicitly enabled       |

## How to Configure

<Steps>
  <Step title="Connect IT Glue">
    [Connect your IT Glue API key](/integrations/documentation/itglue-api) in the Neo Dashboard.
  </Step>

  <Step title="Configure permissions">
    In your agent workflow's **Integrations** tab, choose an access profile or customize each permission group.
  </Step>

  <Step title="Set approval requirements">
    Decide which permission groups require technician approval for writes.
  </Step>
</Steps>

<Tip>
  Start with **Read Only** and gradually expand permissions. Enable Technician-in-the-Loop for writes until you're confident in the agent's behavior.
</Tip>