Automatically enabled when you configure permissions for any of the covered vendors in your
agent workflow. No manual toggle needed — and it never appears as a separate tool to configure.
The agent’s instructions list the vendors your permissions enable, with a line on what each one
covers. A vendor you enabled but have not connected is listed as not connected, so the agent
tells you it needs connecting instead of calling it. The endpoint tables, request shapes, and each vendor’s quirks live in that vendor’s
skill, which the agent must load before its first call to the vendor.
What It Does
- Calls the vendor’s REST API directly — reads and (where permitted) writes
- Routes each call through the vendor’s own permission groups, exactly as the former per-vendor tools did
- Applies the vendor’s approval rules. Some operations always wait on a technician, whatever the agent’s settings, such as deleting a core record (a company, site or organization), removing an endpoint’s protection (an uninstall, a deactivation, a mode or code that stops blocking), wiping or retiring a device, turning off a service’s automatic backups, sending as the customer, and a write Neo cannot classify. Each vendor’s own docs list them, under “Safety Controls” or “Changes that always ask a technician”. Every other write follows the permission group’s Require Technician Approval setting
Covered Vendors
| Vendor | vendor_id | Details |
|---|---|---|
| ScalePad | scalepad | Read/write asset-lifecycle, compliance, quoting and backup data across Core, Lifecycle Manager, ControlMap, Quoter, and Backup Radar — gated by your ScalePad permission groups |
| Huntress | huntress | See Huntress API |
| ThreatLocker | threatlocker | See ThreatLocker API |
| Ubiquiti UniFi | unifi | See UniFi API |
| AutoElevate | autoelevate | See AutoElevate API |
| Sherweb | sherweb | Sherweb customers and their platforms, catalogue and prices, subscriptions and cancellations, orders for a product a client does not hold yet, charges and usage. See Sherweb |
| Pax8 | pax8 | Pax8 companies and contacts, catalogue and prices, subscriptions, orders for a product a client does not hold yet, invoices and usage. See Pax8 |
| D&H | d_and_h | D&H Cloud Marketplace companies and portal users, products with their order fields and prices, subscriptions, orders for a product a client does not hold yet, invoices and reports. See D&H |
| Ingram Micro | ingram_micro | Ingram Micro Cloud Marketplace customers, catalogue, prices and plans, subscriptions, order estimates, orders for a product a client does not hold yet, renewals and cancellations, and billing reports. See Ingram Micro |
| TD SYNNEX ION | td_synnex | StreamOne ION customers, catalogue and prices, subscriptions, orders, carts and reports. See TD SYNNEX ION |
| TD SYNNEX Stellr | td_synnex_stellr | StreamOne Stellr customers, catalogue and prices, subscriptions, provisioning operations and invoices. See TD SYNNEX Stellr |
| Proofpoint Essentials | proofpoint_essentials | See Proofpoint Essentials API |
| Hornetsecurity 365 Total Protection | hornetsecurity | See Hornetsecurity API |
| Mimecast | mimecast | See Mimecast API |
| SentinelOne | sentinelone | See SentinelOne API |
| Wizer | wizer | See Wizer API |
| KnowBe4 | knowbe4 | Users, groups, training, phishing tests, user events and PhishER in a client’s KnowBe4 account; connected per client. See KnowBe4 API |
| usecure | usecure | Learners, groups, training, phishing simulation results, policies, breaches, admin users and client accounts in your usecure MSP account. See usecure API |
| Uniview Backup | uniview | Read-only. See Uniview API |
| Datto BCDR | datto_bcdr | See Datto BCDR API |
| Redstor | redstor | Backup and restore status per account, backup errors, and your RedApp clients, subscriptions and consumption. See Redstor API |
| Acronis | acronis | EDR incidents and response actions, alerts, backups and recovery points, protection plans, workloads and agents, tasks, and your customer tenants, users, services and usage. See Acronis API |
| Axcient | axcient | x360Recover clients, devices, backup jobs and their runs, AutoVerify tests, restore points, appliances and vaults; x360Cloud backup status; x360Sync activity and sharing; billing usage. See Axcient API |
| Slide | slide | Alerts and resolving them, backups and their errors, snapshots with boot, filesystem and service verification, protected systems, Slide Boxes, clients, file restores, virtual machines, image exports, disaster recovery networks, users, audit logs and billing. See Slide API |
| Veeam Service Provider Console | veeam_spc | Triggered alarms and resolving them, backup server, Veeam Agent and Microsoft 365 jobs with their last run, retrying and starting jobs, agents, backup servers and repositories, protected workloads, companies, Cloud Connect, licensing and the console’s settings. See Veeam Service Provider Console API |
| Keepit | keepit | Customer accounts and their connectors (Microsoft 365, Entra ID, Google Workspace, Salesforce and more): health and its reason, backup and restore jobs with their state and errors, starting a backup, restores, backed-up data search, share links, legal holds, the audit log, products, licences and usage, notifications, users and tokens. See Keepit API |
| Cove Data Protection | cove | Devices and their backup sessions (status, errors count, last successful backup per data source), customers, profiles and retention policies, notification rules, users and storage. See Cove Data Protection API |
| Datto Networking | datto_networking | Networks (client sites) and their access points, switches and power strips: status, last check-in, model, MAC, serial, firmware, subscription and end of life; reboots and port resets; devices, settings, WiFi clients, vouchers, network groups and portal users. See Datto Networking API |
| Liongard | liongard | Actionable Alerts, change detections, inspected systems and their data, metric values, asset inventory, launchpoints (run an inspection again) and agents per environment (client); environments, metrics, users and webhooks. See Liongard API |
| BeyondTrust EPM | beyondtrust_epm | See BeyondTrust EPM API |
| CIPP | cipp | Microsoft 365 tenants managed through your CIPP instance. See CIPP API |
| Domotz | domotz | See Domotz API |
| SaaS Alerts | saas_alerts | See SaaS Alerts API |
| AbuseIPDB | abuseipdb | IP reputation: check an IP or a network from an alert against AbuseIPDB’s abuse reports, read the reports and the blacklist, and report an attacking IP. See AbuseIPDB API |
| Auvik | auvik | See Auvik API |
| Cisco Meraki | meraki | Organizations, networks and devices: availability, uplinks, VPN, events, switch ports, Wi-Fi clients, live tools, licences and firmware, and configuration changes. See Connecting Cisco Meraki |
| ConnectWise CPQ | connectwise_cpq | Quotes with their lines, customer records and terms, templates and CPQ users; drafts a quote from a template. See ConnectWise CPQ API |
| Kaseya Quote Manager | kaseya_quote_manager | Read-only. See Kaseya Quote Manager API |
| myITprocess | myitprocess | Read-only. See myITprocess API |
| QuoteWerks | quotewerks | QuoteWerks Web quotes, orders and the other database tables, and saved reports. See QuoteWerks API |
| HubSpot | hubspot | Contacts, companies, deals, activities and the rest of your HubSpot CRM, kept in step with your PSA. See HubSpot API |
| HighLevel | highlevel | Contacts, businesses, opportunities and the rest of your HighLevel CRM, with each lead you mark as hot copied into your PSA. See HighLevel API |
| Datto EDR | datto_edr | Datto EDR and Datto AV. See Datto EDR API |
| Field Effect MDR | field_effect | AROs, comments and resolution, organizations, endpoints. See Field Effect API |
| Acronis Email Security | acronis_email_security | Scans of your clients’ email, links and files and their verdicts, quarantine release and verdict changes, investigation requests to the IR team, URL and file scans, sender, IP and URL allowlists and blocklists, admin users, client organizations and the audit log. See Acronis Email Security API |
| INKY | inky | INKY’s analysis of each message, reported mail and its review, allow and block lists, VIPs, console admins. See INKY API |
| Dark Web ID | dark_web_id | Live dark web searches, compromises and their status, organizations and monitored domains, users, alert and report settings. See Dark Web ID API |
| DNSFilter | dnsfilter | Threat and traffic reports per customer, query logs, policies with their allow and block lists, unblock requests, networks, roaming clients and customer organizations. See DNSFilter API |
| iboss | iboss | URL event logs and monthly reports, allow and block list entries, policies and their settings, policy groups, firewall, locations and private access, connectors, SSL decryption, DLP, proxy users and devices; connected per client. See iboss API |
| Petra Security | petra | Microsoft 365 compromise incidents, failed sign-in attacks, posture reports, tenants, usage and billable users (read only). See Petra Security API |
| Elevate | elevate | Your Elevate (Intermedia) partner account: customer accounts, users, the Voice Service with a pooled number and an extension, numbers, devices, locations and licences. See Elevate API |
| Nextiva | nextiva | Nextiva Voice call centers, queued calls and agents’ sign-in state, signing agents in or out, users’ call logs, live calls, call settings and voicemail. See Nextiva API |
| Call Harbor | call_harbor | Call history, call counts and call queue statistics per client domain, users, devices and phones, phone numbers and call routing, call queues and agents, voicemail, SMS and live calls. See Call Harbor API |
| Cisco Umbrella | cisco_umbrella | Allow and block lists, activity reports, Investigate, roaming computers and customer organizations. See Cisco Umbrella API |
| VirusTotal | virustotal | Verdicts on file hashes, URLs, domains and IP addresses from each security vendor and sandbox, file and URL submissions, comments and votes, private scanning, VT Intelligence and hunting. See VirusTotal API |
| GeoCerts | geocerts | Your SSL/TLS certificate orders in CertCommand: certificate names and SANs, status, CA, product and expiry dates. Read-only. See GeoCerts API |
| WatchGuard | watchguard | Firebox, access points, Endpoint Security and ThreatSync in WatchGuard Cloud. See WatchGuard API |
| SonicWall | sonicwall | Firewalls, licences, firmware and restarts, VPN and link status, rules and security data through Network Security Manager, per MySonicWall tenant. See SonicWall API |
| RoboShadow | roboshadow | Read-only. See RoboShadow API |
| Duo | duo | Duo MFA in your own account or a client subaccount. See Duo API |
| CyberQP | cyberqp | Customers and agent GUIDs, identity verification, just-in-time admin accounts, passwords, OTP codes and events. See CyberQP API |
| MSP Process | msp_process | End-user verification by code or push, verification history, secure links, contact update forms, alerts and on-call. See MSP Process API |
| FortiMail | fortimail | Protected domains, policies, access rules, security profiles, safelists and blocklists, the quarantine and logs on your own FortiMail email gateway. See FortiMail API |
| Sophos | sophos | Endpoints, alerts, allow and block lists, firewalls, email quarantine and mobile in Sophos Central, per tenant. See Sophos API |
| TP-Link Omada | omada | Customers, sites, devices, clients, WiFi, networks, firewall and vouchers on an Omada Cloud-Based Controller, or a Software or hardware controller through Omada cloud access. See TP-Link Omada API |
| ArrowSphere | arrowsphere | Arrow’s cloud marketplace: customers and their Microsoft tenants, licences with seats and renewal dates, scheduled licence changes, orders, quotes, statements, consumption and support cases. Seat counts change through Change License Seats. See ArrowSphere API |
| OpenText Secure Cloud | opentext | Secure Cloud (formerly AppRiver) customers, users and Microsoft 365 licences, subscriptions and charges, Webroot orders, sites and endpoints. See OpenText Secure Cloud API |
| Zabbix | zabbix | Hosts, problems, latest data and history on your own Zabbix server. See Zabbix API |
| VMware vSphere | vsphere | Virtual machines, templates and snapshots, hosts, datastores, networks, alarms and permissions on your own vCenter Server. See VMware vSphere API |
| Nutanix | nutanix | Virtual machines and what they use, CPU, memory and disk changes, clusters, storage, networks, alerts and SP Central tenants on your own Prism Central. See Nutanix API |
| ZOEY | zoey | Tekton Billing’s telecoms and IT billing platform on your own ZOEY site: accounts, contacts and sites, services with their network, supplier, tariff and bolt-ons, invoices and service charges, the product catalogue, and service changes. See ZOEY API |
| QuickBooks Online | quickbooks_online | Invoices, payments, customers, bills, items, time and reports in your own QuickBooks company. See QuickBooks Online API |
| CentralReach | centralreach | Employees, contact labels and custom fields, tasks, schedules, files, patient records, billing and payroll in a client’s CentralReach practice; connected per client. See CentralReach API |
| Okta | okta | Users and their lifecycle, passwords and MFA, groups, app assignments and licences, SSO apps, admin roles, policies, devices and the System Log in a client’s Okta org; connected per client. See Okta API |
| Adobe Admin Console | adobe | Users, product profiles and licences, seat counts, user groups and admin roles in a client’s Adobe organization; connected per client. See Adobe Admin Console API |
| Dayforce | dayforce | New hires and leavers, each employee’s job, department, location, manager and contacts, Dayforce sign-in and roles, the organization, and personal details, pay, time, talent and reports when you turn them on, in a client’s Dayforce; connected per client. See Dayforce API |
| WorkTime | worktime | Your own employee monitoring: each technician’s time online, active, idle and productive time per day, a league table of the team, employees, departments, time off and holiday sets. See WorkTime API |
| 3CX | threecx | Users and their extensions for new starters and leavers, departments and roles, desk phones, call routing, contacts, live calls, call history and reports, recordings, trunks, integrations and system settings on a client’s 3CX phone system; connected per client. See 3CX API |
| SIGNL4 | signl4 | Your on-call alerting: raise alerts that ring the technicians on duty, read when each was delivered and acknowledged and by whom, acknowledge, escalate and close them, duty status, schedules and shifts. See SIGNL4 API |
| Discord | discord | Your Discord server, as your own bot: send messages and approval requests to channels and direct messages, read messages, replies and reactions, and manage channels, members, roles, invites and events. See Discord API |
| Password Link | password_link | Secret links: send a new or reset password to an end user as a link that stops working at its view limit or expiry (Neo encrypts it), see when each link was opened, change or revoke links, folders, and secret requests an end user answers. See Password Link API |
| Avanan | avanan | Allow and block lists, messages and security events, quarantine and restore, engine exceptions, and your client tenants and licenses, per client tenant. See Avanan API |
| Notion | notion | Pages, databases and their rows, comments and file uploads in your Notion workspace; shared pages also sync into Find Documentation. See Notion API |
| Samsara | samsara | Your fleet: vehicle locations and GPS history, time on client sites, trips, drivers and assignments, addresses, routes, messages to drivers, inspections and hours of service. See Samsara API |
| Moovila | moovila | Projects with their RPAX risk score, tasks, budgets, time entries, users and resource types in your Moovila portfolio, and team capacity estimates from them; read-only. See Moovila API |
| Smartsheet | smartsheet | Sheets and their rows, project plans with phases, dates, assignees and % complete, reports, dashboards, workspaces, attachments, comments and sharing; syncs plans with Autotask projects. See Smartsheet API |
| OpenWeather | openweather | Weather for any place: government weather alerts, current weather, forecasts, the weather at a past time, air quality and fire danger, and geocoding of a site address; plus your account’s weather stations and solar locations. See OpenWeather API |
| Pia | pia | Your Pia automations: find the ones published for a client, run one on a PSA ticket or a client, and read its status and activity logs; plus Pia clients and tags, agents, extension automations, delegated consent and the automation source. See Pia API |
| Jotform | jotform | Your online forms: submissions with every answer (onboarding, offboarding and device requests a client filled in), forms and their questions, reports, webhooks, folders and labels. See Jotform API |
| Zoho Desk | zoho_desk | Ticket trends and reports, tickets with their conversations, contacts and accounts, and the rest of your Zoho Desk help desk. See Zoho Desk API |
