> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Read-Only Access for the Free Insights Report

> Create a minimal HaloPSA API application for the free Neo Insights report — the read:tickets permission only, no writes

The [free Insights report](https://www.neoagent.io/free-report) reads a sample of your recent tickets, classifies them, and shows you what your service desk could automate. It needs far less access than a full Neo Agent connection: **one read-only permission**, nothing else.

## What Neo reads — and what it never does

For the report, Neo makes only these read-only calls:

* `/api/Tickets` — the list of recent tickets (summary, status, dates, client name)
* `/api/Actions` — the ticket notes, for better summaries
* Ticket lookups — statuses, priorities, ticket types and categories, so IDs render as names

Neo does **not** read your client list, users, agents, assets, SLAs or invoicing data, and it does **not** write anything — no webhooks, no actions, no ticket changes.

When your report is ready (or if the run fails), the credentials are **automatically purged** from our vault and the temporary workspace is disabled. If you later start a trial, you will set up a separate connection with its own credentials.

## Creating the read-only API application

<Steps>
  <Step title="Create a new API application">
    Go to **Configuration → Integrations → HaloPSA API**, click **View Applications**, then **New**.

    * **Application Name**: `Neo Free Report`
    * **Active**: checked
    * **Authentication Method**: **Client ID and Secret (Services)**
  </Step>

  <Step title="Pick the agent to log in as">
    HaloPSA limits an API application to what its **login agent** can see. Pick an agent with access to **all teams and ticket areas** (an administrator-level agent is easiest) — otherwise the report only samples the tickets that agent can see, and the numbers come out low.
  </Step>

  <Step title="Grant only the read:tickets permission">
    Open the **Permissions** tab and tick **read:tickets**. Leave every other permission — including **all**, **all:standard** and **admin** — unticked.
  </Step>

  <Step title="Enter the details in the report form">
    Copy the **Client ID** and **Client Secret**, then back in the [report form](https://www.neoagent.io/free-report) enter:

    * **HaloPSA URL** — the web address of your instance, for example `https://yourcompany.halopsa.com`
    * **Client ID** and **Client secret** — from the application you just created

    Neo checks the connection immediately and tells you on the spot if anything is missing.
  </Step>
</Steps>

<Tip>
  Prefer to deactivate the application yourself afterwards? That works too — the report needs the credentials only for the few minutes the analysis runs.
</Tip>