Connect an AI agent

An AI agent can read your account and explain it: sessions, what action gates and code gates stopped, action gate false positives, project risk, the agent inventory and Sensitive data. It reads the numbers the dashboard shows and changes nothing.

Settings > API holds two kinds of key:

  • Devices: each computer where Asondy is installed sends its sessions with its own device key, which reads nothing.
  • API keys: an AI assistant or a script reads your dashboard with an API key, which is read-only.

Create a key under Settings > API > API keys, keep it in the ASONDY_API_KEY environment variable, then add the MCP server to your agent. In Claude Code:

claude mcp add --transport http asondy https://asondy.com/mcp \
  --header "Authorization: Bearer $ASONDY_API_KEY"

Other agents take the same address and header:

  • Cursor: in mcp.json, a server with "url": "https://asondy.com/mcp" and the header "Authorization": "Bearer ${env:ASONDY_API_KEY}".
  • Codex CLI: codex mcp add asondy --url https://asondy.com/mcp --bearer-token-env-var ASONDY_API_KEY
  • OpenCode: a remote server in opencode.json with the header "Authorization": "Bearer {env:ASONDY_API_KEY}".
  • Claude Desktop: in claude_desktop_config.json, a server that runs npx -y mcp-remote https://asondy.com/mcp --header Authorization:${AUTH_HEADER}, with AUTH_HEADER in its env set to Bearer, a space and your key.

Start with the asondy_overview tool, or ask the agent to run the asondy_review prompt. Scripts can fetch the whole account as one JSON document from https://asondy.com/v1/agent/snapshot?period=7d with the same header. period takes 24h, 7d, 30d or 90d.

Answers never include conversation text, and Sensitive data comes back as counts and detector names, never the values Data gate matched. Revoke a key in the same Settings list; its next call is refused.

Continue readingWebhooks