NetBird Full API Reference + Read-Only MCP Prototype
POST/api/integrations/edr/huntress

Create an EDR Huntress integration

Creates a new EDR Huntress integration configuration for the account. Supply the Huntress API credentials, applicable groups, device sync interval, and match_attributes used to approve agents.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

7 body fields

EDR Huntress integration configuration. api_key, api_secret, groups, last_synced_interval, and match_attributes are required.

api_keystringrequired
Huntress API key
api_secretstringrequired
Huntress API secret
enabledbooleanoptional
Indicates whether the integration is enabled
Default:true
groupsarray<string>required
The Groups this integrations applies to
last_synced_intervalintegerrequired
The devices last sync requirement interval in hours. Minimum value is 24 hours
match_attributesobjectrequired
Attribute conditions to match when approving agents
sync_intervalintegeroptional
How often devices are synced from the integration, in minutes. Minimum value is 1 minute, maximum is 1440 minutes.

4 status codes
200Returns the created EDR Huntress integration, including its identifier, account and creator identifiers, sync configuration, groups, match attributes, enabled state, and timestamps.
account_idstringrequired
The identifier of the account this integration belongs to.
created_atstringrequired
Timestamp of when the integration was created.
created_bystringrequired
The user id that created the integration
enabledbooleanrequired
Indicates whether the integration is enabled
Default:true
groupsarray<object>required
List of groups
idintegerrequired
The unique numeric identifier for the integration.
last_synced_atstringrequired
Timestamp of when the integration was last synced.
last_synced_intervalintegerrequired
The devices last sync requirement interval in hours.
match_attributesobjectrequired
Attribute conditions to match when approving agents
sync_intervalintegerrequired
How often devices are synced from the integration, in minutes.
updated_atstringrequired
Timestamp of when the integration was last updated.
400Returned when the request contains invalid JSON, omits required fields, or fails validation.
messagestringoptional
A human-readable error message.
401Returned when the request has a missing or invalid authentication token.
messagestringoptional
A human-readable error message.
500Returned when an internal server error occurs.
messagestringoptional
A human-readable error message.

Error handling

A 400 is returned for malformed JSON, missing required fields, or validation failures; a 401 for missing or invalid authentication; and a 500 for an internal server error. The body must include api_key, api_secret, groups, last_synced_interval, and match_attributes; last_synced_interval must be at least 24 hours, and sync_interval must be between 1 and 1440 minutes when supplied.