Settings & Integrations

Settings & integrations

Runtime integration registry for local case backends and protected PlatPhorm handoffs.

Data mode
authorized_local

Derived from the active runtime and persistence backend.

Live integrations
29

Configured local backend or explicitly enabled platform handoff.

Missing config
7

No hidden execution: blocked actions record protected intents.

Access control

State-changing API actions are gated server-side by PLATPHORM_API_KEY. The production migration is designed to sit behind firewall / IP allowlisting. Keys are never exposed client-side, and discovery routes for case data are disallowed in robots.txt.

Platform handoffs require CLOAK_ENABLE_PLATFORM_HANDOFFS. Without that flag, report publish/export/upload routes persist blocked intents and show a degraded operator result.

Server-side capability inventory

These are environment-backed capabilities only. Secret values stay server-side and are never rendered in the browser.

7/12 configured

PlatPhorm protected actions

Server-side authorization for protected operator actions and cross-site handoffs.

configured
Required env
PLATPHORM_API_KEY

PlatPhorm handoff switch

Kill switch for protected Docs, Sheets, Files, BrowserOps, Sandbox, Trace, and Pentest handoffs.

configured
Required env
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS

Persistent case database

Durable client, evidence, findings, Kanban, report, workflow, and protected intent storage.

configured
Required env
DATABASE_URL or POSTGRES_URL

Neon project metadata

Vercel/Neon project identity and direct database environment for production diagnostics.

configured
Required env
NEON_PROJECT_IDDATABASE_URL or POSTGRES_URL

Vercel Blob evidence storage

Server-side private artifact storage for OSINT run packets, reports, screenshots, exports, and redacted bundles.

configured
Required env
BLOB_READ_WRITE_TOKEN

Vercel Sandbox diagnostics

Optional isolated diagnostics for OSINT run packets without exposing secrets to untrusted code.

missing-env
Required env
CLOAK_ENABLE_VERCEL_SANDBOX

Signed webhook delivery

Protected case lifecycle event emission with HMAC signing and Postgres delivery ledger.

missing-env
Required env
PLATPHORM_WEBHOOK_SECRETCLOAK_WEBHOOK_TARGET_URL

AWS evidence vault credentials

Server-side object storage credential set for evidence vault operations.

configured
Required env
AWS_ACCESS_IDAWS_ACCESS_SECRET

Vercel AI Gateway

Redacted case guidance and draft generation through Vercel-managed model routing.

configured
Required env
AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN

Direct AI provider fallbacks

Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

missing-env
Required env
OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY

Wayback source evidence

Authorized public archive checks and historical source evidence collection.

missing-env
Required env
WAYBACK_API_KEY

Twilio secure communications

Approved client notifications and phone verification workflows from server-side routes.

missing-env
Required env
TWILIO_API_KEY

OSINT connector suite

Authorized-source adapters for ACE correlation mapping, Sherlock, SpiderFoot, Epieos, IntelTechniques, Hunchly, Overpass Turbo, and public filings. Local and bounded adapters can persist findings, evidence, and kanban tasks; provider/manual adapters create human-review work with source links.

Select client first

Runnable

3

Human review

2

Needs config

3

ACE correlation map

correlation-analysis · local-analysis

Runnable

Local graph-aware correlation risk model over the authorized client identifier set. It recommends human-approved exposure reduction, not automated metadata poisoning.

full_namephoneemailaddresshandlebusiness_entitydomainalias
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Sherlock Project

identity-correlation · local-cli

Needs config

Username correlation across public sites when a local Sherlock CLI is installed.

handlealias
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
SHERLOCK_BIN

SpiderFoot

identity-correlation · local-cli

Needs config

Local SpiderFoot CLI/service bridge for approved identifiers. The route records a task unless a local command is configured.

domainemailbusiness_entityfull_name
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
SPIDERFOOT_BIN

Epieos

identity-correlation · human-review

Human review

Email and phone OSINT provider. Treated as human-review unless an approved server API contract is added.

emailphone
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
EPIEOS_API_KEY

IntelTechniques automation

checklist · local-analysis

Runnable

Backend source-playbook automation inspired by public OSINT workflows. Cloak owns the query generation, evidence linking, and human approval tasks.

full_namephoneemailaddresshandlebusiness_entitydomain
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Hunchly

capture · local-export

Needs config

Local Hunchly export ingestion. Uses HUNCHLY_EXPORT_DIR when a desktop capture export is available.

evidence_export
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
HUNCHLY_EXPORT_DIR

Overpass Turbo

geo · bounded-http

Runnable

Bounded OpenStreetMap address-surface review for authorized address identifiers.

address
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Public filings / PACER

public-records · human-review

Human review

Business/entity public-records review queue with SEC EDGAR and PACER source links.

business_entitydomainfull_name
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None
Vercel Connect
Project dashboard

Running inside Vercel.

Connector metadata
UID
github/cloak-apricot-castle
App slug
cloak-apricot-castle
Project
platphorm-cloak
Production URL
cloak.platphormnews.com

preview environment.

Workflow runtime
Vercel Workflow ready

Durable handoff steps are represented in the protected intent ledger; WDK package is installed for the next route-level workflow promotion.

Persistence

Postgres case backend

Live

Durable principal, evidence, findings, Kanban, report and intent storage.

setup
Required config
DATABASE_URL or POSTGRES_URL
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "postgres",
  "endpoint": null,
  "actions": [
    "setup"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Case Management

Case Kanban

Live

Local case task creation and lane movement backed by the active case-state store.

createmove
Required config
DATABASE_URL or POSTGRES_URL
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "kanban",
  "endpoint": null,
  "actions": [
    "create",
    "move"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Case calendar

Live

Case cadence derived from persisted remediation tasks.

create
Required config
DATABASE_URL or POSTGRES_URL
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "calendar",
  "endpoint": null,
  "actions": [
    "create"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Reporting / Handoff

Executive reports

Live

Case-derived report generation and human-review intents persisted locally.

generatereview
Required config
DATABASE_URL or POSTGRES_URL
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "reports",
  "endpoint": null,
  "actions": [
    "generate",
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Docs

Live

Publish approved case-derived executive reports to the PlatPhorm Docs service.

publish
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "docs",
  "endpoint": "https://docs.platphormnews.com/api/mcp",
  "actions": [
    "publish"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sheets

Live

Export approved findings, risk scores and task matrices to PlatPhorm Sheets.

export
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "sheets",
  "endpoint": "https://sheets.platphormnews.com/api/mcp",
  "actions": [
    "export"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Files

Live

Upload approved report and evidence bundles to the PlatPhorm Files service.

upload
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "files",
  "endpoint": "https://files.platphormnews.com/api/mcp",
  "actions": [
    "upload"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Auditability

Trace

Live

Link case workflow intents and route checks into the PlatPhorm trace layer.

link
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "trace",
  "endpoint": "https://trace.platphormnews.com/api/v1/spans",
  "actions": [
    "link"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Monitor

Live

Availability and recurrence monitoring for the public-safe Cloak Harbor surface.

check
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "monitor",
  "endpoint": "https://monitor.platphormnews.com/api/v1/checks",
  "actions": [
    "check"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Exposure Discovery

BrowserOps

Live

Run browser journeys, screenshots and public-safe capture workflows for authorized cases.

capturerun
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "browserops",
  "endpoint": "https://browserops.platphormnews.com/api/mcp",
  "actions": [
    "capture",
    "run"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

SearchOps

Live

Bounded exposure discovery and recurrence monitoring for authorized identifiers.

discover
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "searchops",
  "endpoint": "https://cloak.platphormnews.com/api/v1/workloads/self-case",
  "actions": [
    "discover"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Wayback evidence

Missing env

Server-side archive checks for authorized public evidence and historical source links.

lookupcapture
Required config
WAYBACK_API_KEY
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "wayback",
  "endpoint": null,
  "actions": [
    "lookup",
    "capture"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "WAYBACK_API_KEY"
  ],
  "missingEnv": [
    "WAYBACK_API_KEY"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

ACE correlation map

Live

Local graph-aware correlation scoring over authorized client identifiers with explainable remediation planning.

scoreplan
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "ace-correlation-map",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "score",
    "plan"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sherlock Project

Missing env

Local Sherlock CLI adapter for authorized username and alias correlation checks.

run
Required config
SHERLOCK_BIN
Integration evidence
{
  "key": "sherlock",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "run"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "SHERLOCK_BIN"
  ],
  "missingEnv": [
    "SHERLOCK_BIN"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

SpiderFoot

Missing env

Local SpiderFoot command adapter for authorized domain, email, and entity pivots.

run
Required config
SPIDERFOOT_BIN
Integration evidence
{
  "key": "spiderfoot",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "run"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "SPIDERFOOT_BIN"
  ],
  "missingEnv": [
    "SPIDERFOOT_BIN"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Epieos

Live

Human-review queue for authorized email and phone checks until an approved server API contract is added.

review
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "epieos",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

IntelTechniques

Live

Cloak-owned source playbook automation inspired by public OSINT workflows; generates evidence links and approval tasks for authorized identifiers.

generatechecklist
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "inteltechniques",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "generate",
    "checklist"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Overpass Turbo

Live

Bounded OpenStreetMap address-surface review for authorized address identifiers.

query
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "overpass",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "query"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evidence Validation

TrustOps

Live

Evidence confidence, false-positive review and trusted-domain validation.

validate
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "trustops",
  "endpoint": "https://trace.platphormnews.com/api/v1/validation",
  "actions": [
    "validate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Spec

Live

Local schema and contract validation for findings, evidence and action packets.

validate
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "spec",
  "endpoint": null,
  "actions": [
    "validate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evals

Live

Score risk-rubric consistency, release readiness and action-packet quality.

score
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "evals",
  "endpoint": "https://evals.platphormnews.com/api/v1/runs",
  "actions": [
    "score"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Public filings / PACER

Live

SEC EDGAR and PACER-style source-link queue for authorized entity, domain, and name review.

review
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "public-filings",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Agent-Safe Operations

Claws

Live

Agentic remediation requests that remain protected and human-gated.

remediate
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "claws",
  "endpoint": "https://claws.platphormnews.com/api/v1/workflows",
  "actions": [
    "remediate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sandbox

Live

Safe replay and dry-run execution for action packets.

replayrun
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "sandbox",
  "endpoint": "https://sandbox.platphormnews.com/api/mcp",
  "actions": [
    "replay",
    "run"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

WebhookLab

Live

Webhook simulation and delivery testing for protected events.

test
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "webhooklab",
  "endpoint": "https://webhooklab.platphormnews.com/api/v1/events",
  "actions": [
    "test"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Webhooks

Live

Protected local event emission, HMAC signing, optional delivery target, and Postgres delivery ledger for case lifecycle events.

emitdelivertest
Required config
DATABASE_URL or POSTGRES_URL
Integration evidence
{
  "key": "webhooks",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/webhooks/test",
  "actions": [
    "emit",
    "deliver",
    "test"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "DATABASE_URL or POSTGRES_URL"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

AgentUI

Live

Agent-facing workflow validation and human-machine handoff review surfaces.

validatehandoff
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "agentui",
  "endpoint": "https://agentui.platphormnews.com/api/mcp",
  "actions": [
    "validate",
    "handoff"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Vercel Sandbox diagnostics

Missing env

Optional isolated diagnostics for redacted OSINT run packets using deny-all network policy.

diagnose
Required config
CLOAK_ENABLE_VERCEL_SANDBOX
Integration evidence
{
  "key": "vercel-sandbox",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "diagnose"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "CLOAK_ENABLE_VERCEL_SANDBOX"
  ],
  "missingEnv": [
    "CLOAK_ENABLE_VERCEL_SANDBOX"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Vercel AI Gateway

Planned

Model routing for AI-assisted drafts. Template fallback remains available when missing.

draft
Required config
AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "ai-gateway",
  "endpoint": null,
  "actions": [
    "draft"
  ],
  "state": "planned",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN"
  ],
  "missingEnv": [],
  "protectedActionReady": false,
  "externalActionTaken": false
}

AI provider fallbacks

Missing env

Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

draftclassify
Required config
OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "ai-provider-fallbacks",
  "endpoint": null,
  "actions": [
    "draft",
    "classify"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY"
  ],
  "missingEnv": [
    "OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Pentest

Live

Authorized OSINT and surface-assessment handoff through the JC PenTest Harness MCP.

scope-previewdry-runreal-runreport
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "pentest",
  "endpoint": "https://pentest.platphormnews.com/api/mcp",
  "actions": [
    "scope-preview",
    "dry-run",
    "real-run",
    "report"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Topology

Atlas

Live

Cross-site topology and relationship context for Cloak Harbor workflows.

sync
Required config
PLATPHORM_API_KEYCLOAK_ENABLE_PLATFORM_HANDOFFS
Integration evidence
{
  "key": "atlas",
  "endpoint": "https://atlas.platphormnews.com/api/v1/topology",
  "actions": [
    "sync"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "PLATPHORM_API_KEY",
    "CLOAK_ENABLE_PLATFORM_HANDOFFS"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Deployment

Vercel runtime

Live

Production request/runtime metadata and deployment environment awareness.

inspect
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "vercel",
  "endpoint": null,
  "actions": [
    "inspect"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evidence Storage

Vercel Blob evidence storage

Live

Server-side private artifact storage for OSINT run packets, redacted evidence bundles, exports, and screenshots.

storeretrieve
Required config
BLOB_READ_WRITE_TOKEN
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "vercel-blob",
  "endpoint": null,
  "actions": [
    "store",
    "retrieve"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "BLOB_READ_WRITE_TOKEN"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

AWS evidence vault

Live

Server-side AWS object-store credentials for evidence vault workflows.

storearchive
Required config
AWS_ACCESS_IDAWS_ACCESS_SECRET
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "aws-evidence-vault",
  "endpoint": null,
  "actions": [
    "store",
    "archive"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "AWS_ACCESS_ID",
    "AWS_ACCESS_SECRET"
  ],
  "missingEnv": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Hunchly

Missing env

Local Hunchly export indexer for protected evidence review when a desktop export directory is configured.

index
Required config
HUNCHLY_EXPORT_DIR
Integration evidence
{
  "key": "hunchly",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "index"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "HUNCHLY_EXPORT_DIR"
  ],
  "missingEnv": [
    "HUNCHLY_EXPORT_DIR"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Communications

Twilio communications

Missing env

Approved phone verification and client-notification workflows from server-side routes.

verifynotify
Required config
TWILIO_API_KEY
Target: local backend (vercel_postgres)
Integration evidence
{
  "key": "twilio",
  "endpoint": null,
  "actions": [
    "verify",
    "notify"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredEnv": [
    "TWILIO_API_KEY"
  ],
  "missingEnv": [
    "TWILIO_API_KEY"
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}
Cloak Harbor Personal Exposure DefenseProduction pilotHuman approval requiredPassive OSINT onlyNo external sendingResponsible-use policy