> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting Cork to Neo

> Generate a Cork API key and save it in Neo

You connect Cork once at the MSP level. One API key covers every client in your Cork account.

## 1. Generate the API key

**1. Open the Cork app**

Sign in to [portal.corkinc.com](https://portal.corkinc.com/login) as a partner admin.

**2. Generate the key**

Generate an API key for Neo, and copy it.

> [!WARNING]
>
> Revoking the key in Cork cuts Neo off at once. Save the new key here when you replace it.

## 2. Add the key in Neo

**1. Open Integrations**

In the Neo Dashboard, open **Integrations** and find the Cork card, under Vulnerability & Attack Surface.

**2. Save the key**

Paste the API key and click **Save settings**. Neo checks it against Cork before saving, so a wrong key is rejected straight away.

**3. Check the mapping**

Open the card's **Organization Mapping** tab and confirm each Cork client is matched to the right PSA company. A ticket run, and each ticket a scheduled agent opens, acts only for a mapped client.

## 3. Turn Cork on per agent

Open the agent, go to its **Tools & Settings** tab, click **Vulnerability & Attack Surface**, and expand the **Cork** block. Pick one of its **Presets**, or set each area yourself:

| Area | Access levels you can pick | Notes |
| - | - | - |
| **Clients and Cyber Scores** | Disabled, Read Only | Clients, warranty status and the full score history. Turn on for every Cork agent. |
| **Devices, Inboxes and Domains** | Disabled, Read Only | The assets Cork maps to each client, and the tools that see each device. |
| **Compliance Events** | Disabled, Read Only | Failed controls and risk events, with their evidence and cure periods. |
| **Software Vulnerabilities** | Disabled, Read Only | CVEs per client and device, with CVSS, EPSS and known-exploited status. |
| **Connected Integrations** | Disabled, Read Only, Read / Write | Your tools in Cork and the devices, users and tenants each reports; renaming, resyncing and deleting one. Turn on for user coverage checks. |
| **Software Installs** | Disabled, Read Only, Read / Write | Installing a package on one device through its RMM, and past installs. |
| **Warranties and Invoices** | Disabled, Read Only | Warranty packages and Cork's invoices. |
| **Distributor Partners** | Disabled, Read Only, Read / Write | For a distributor account: its partner accounts. |

| Preset | What runs on its own | What asks a technician |
| - | - | - |
| **Read Only** | Every read | No write is allowed |
| **Helpdesk** | Every read except distributor partners | Every software install; no other write is allowed |
| **IT Admin** | Every read, software installs, and renaming and resyncing an integration | Creating a distributor partner, and deleting an integration |
| **Full Automation** | Every read and write | Deleting an integration |

## 4. Set up the ticket agent

To have Neo open tickets for score drops, failed controls and coverage gaps, run a scheduled agent once a day with the Cork **Read Only** preset and your PSA's ticket permissions. Its instructions can set the score drop that opens a ticket (25 points by default), the queue, priority and status of each ticket, and the clients or tool types to skip.

See [Cork API](https://docs.neoagent.io/agents/tools/security/cork-api.md) for what the agent can read and change.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.