Skip to main content
The free Insights report reads a sample of your recent tickets, classifies them, and shows you what your service desk could automate. It needs far less access than a full Neo Agent connection: one read-only permission, nothing else.

​
What Neo reads — and what it never does

For the report, Neo makes only these read-only calls:
  • /api/Tickets — the list of recent tickets (summary, status, dates, client name)
  • /api/Actions — the ticket notes, for better summaries
  • Ticket lookups — statuses, priorities, ticket types and categories, so IDs render as names
Neo does not read your client list, users, agents, assets, SLAs or invoicing data, and it does not write anything — no webhooks, no actions, no ticket changes. When your report is ready (or if the run fails), the credentials are automatically purged from our vault and the temporary workspace is disabled. If you later start a trial, you will set up a separate connection with its own credentials.

​
Creating the read-only API application

1

Create a new API application

Go to Configuration → Integrations → HaloPSA API, click View Applications, then New.
  • Application Name: Neo Free Report
  • Active: checked
  • Authentication Method: Client ID and Secret (Services)
2

Pick the agent to log in as

HaloPSA limits an API application to what its login agent can see. Pick an agent with access to all teams and ticket areas (an administrator-level agent is easiest) — otherwise the report only samples the tickets that agent can see, and the numbers come out low.
3

Grant only the read:tickets permission

Open the Permissions tab and tick read:tickets. Leave every other permission — including all, all:standard and admin — unticked.
4

Enter the details in the report form

Copy the Client ID and Client Secret, then back in the report form enter:
  • HaloPSA URL — the web address of your instance, for example https://yourcompany.halopsa.com
  • Client ID and Client secret — from the application you just created
Neo checks the connection immediately and tells you on the spot if anything is missing.
Prefer to deactivate the application yourself afterwards? That works too — the report needs the credentials only for the few minutes the analysis runs.