> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting IRONSCALES to Neo

> Copy your IRONSCALES partner's Company Token, save it in Neo, and turn IRONSCALES on per agent

You connect IRONSCALES once at the MSP level. Your partner account's token reaches every company under it.

## 1. Copy the Company Token

**1. Sign in as the partner**

Sign in to the IRONSCALES console with an Owner or Admin of your partner account, and stay on the partner itself, not one of its companies.

**2. Open the token**

Open **Settings**, then **General**, and find the **Company Token** (also called the APP API token).

**3. Copy it**

Copy the token. If the token is missing, API access may be off for your account: ask IRONSCALES support to turn on the API feature for the partner.

## 2. Add the token in Neo

**1. Open Integrations**

In the Neo Dashboard, open **Integrations** and find the IRONSCALES card, under Email Security.

**2. Save the token**

Paste the **Company Token** and click **Save**. Neo signs in to IRONSCALES with it before saving, so a wrong token, or API access that is off, is reported straight away.

Neo then lists your companies and maps them to your PSA companies on the **Organization Mapping** tab. A token of a single company, not the partner, signs in but cannot list companies; the mapping then shows **Permission denied**.

## 3. Turn IRONSCALES on per agent

Open the agent, go to the **Tools & Settings** tab, and configure the IRONSCALES block under **Tools & Integrations**. Pick a profile, or set each area:

| Area | Access levels you can pick | Notes |
| - | - | - |
| **Incidents and Release Requests** | Disabled, Read Only, Read/Write | Needed to find, check and release a blocked email. Helpdesk asks a technician before it classifies. |
| **Remediation History and Statistics** | Disabled, Read Only | What was removed from each mailbox, and the company's statistics. |
| **Allow List** | Disabled, Read Only, Read/Write | IT Admin asks a technician before a change. |
| **Mailboxes** | Disabled, Read Only, Read/Write | Turning protection off for a mailbox always asks. |
| **Account Takeover and Deepfake** | Disabled, Read Only, Read/Write | Signing a user out or disabling the account. |
| **Awareness Training** | Disabled, Read Only, Read/Write | Campaigns and training records. |
| **Alert Recipients** | Disabled, Read Only, Read/Write | IT Admin asks a technician before a change. |
| **Companies and Licenses** | Disabled, Read Only, Read/Write | Disabling a company, changing its features or removing a licensed domain always asks. |
| **Email Platform Connection** | Disabled, Read Only, Read/Write | Disconnecting Microsoft 365 or Google Workspace always asks. |

See [IRONSCALES API](https://docs.neoagent.io/agents/tools/security/ironscales-api.md) for what the agent can do.

## Set up an agent

Ask your Neo Support Agent for the agent you need, for example: "Set up a triggered agent for tickets where a user reports a blocked or quarantined email. It finds the email in IRONSCALES, checks the sender, links and attachments, releases it when it is safe, classifying as [soc@yourmsp.com](mailto:soc@yourmsp.com), and notes on the ticket what it found and did."


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.