Security integrations on Metorial

Klazify

Classify websites, domains, IP addresses, and emails into structured business data. Retrieve company profiles, revenue estimates, headquarters, technologies, social profiles, competitors, and domain registration data. Download brand logos, inspect IAB labels and category taxonomies, and discover domains by category, technology, headquarters country, company size, or traffic rank.

Labs 64 Netlicensing

Manage software licensing for products using a Licensing-as-a-Service platform. Create and configure products, product modules, and license templates with various licensing models (subscription, try-and-buy, pay-per-use, node-locked, floating, quota, and more). Create and manage licensees (customers) and their licenses. Validate licenses with a single API call to retrieve the complete licensing state for a customer across all product modules. Transfer licenses between licensees, create license bundles, and generate shop tokens for integrated online purchasing via PayPal or Stripe. Track transactions and manage API keys with role-based access control. Export product configurations for backup and generate usage reports in CSV format.

Lastpass

Manage LastPass Enterprise administrative users and group memberships, inspect user metadata and shared-folder permissions, and page audit events using the company ID and provisioning hash. Does not access vault contents or use early-access REST API keys.

Memberstack

Manage Memberstack members, authentication tokens, free membership plans, and data table records. Create, retrieve, update, and delete members; manage profile fields and metadata; assign or remove free plans; and verify member JWTs. Discover data tables and their field definitions, query or count records, and create, update, or delete records.

Mxtoolbox

Run DNS, email authentication, blacklist, and network diagnostics. List and retrieve infrastructure monitors and their tags, filter by command or target, and create or delete monitors. Track DNS and network API quotas separately.

Nango

Discover authorized Nango integrations, providers, connections and deployed functions. Inspect synced records and native sync state, manage exact integration and connection metadata, and invoke supported deployed actions or authenticated provider requests. Credentials and Connect session tokens are not delivered; session authorization requires a trusted Nango backend.

Neutrino

Validate emails and phone numbers, analyze IP and domain reputation, geocode addresses, verify SMS and voice security codes, look up card BINs and user agents, convert currencies and units, and generate downloadable QR codes, rendered documents, and resized images.

Ngrok

Manage ngrok cloud endpoints and traffic policies, reserved domains and TCP addresses, connected tunnels and agent sessions, IP policies, TLS certificates, SSH credentials and certificate authorities, API keys, authtokens, bot service accounts, vaults, secrets, and audit or traffic event delivery to supported cloud destinations.

Nextdns

Manage NextDNS filtering profiles, including creating, renaming, inspecting, and deleting profiles. Configure security, privacy, parental controls, allow and deny lists, DNS rewrites, logging, and performance. Retrieve paginated DNS query logs and analytics, including time series, and clear log history.

Onelogin

Read and manage OneLogin users, roles and SSO applications, inspect native groups and audit events, and enroll or verify supported MFA factors using tenant-bound API credentials. API scopes control access; administrative operations can retain audit, notification and provisioning effects.

Paradym

Issue, verify, and revoke verifiable credentials using SD-JWT VC, mDOC, and AnonCreds formats over OpenID4VC and DIDComm protocols. Create and manage credential templates with typed attributes, branding, and revocability settings. Define presentation templates to request and verify credentials from holders. Manage trusted entities (X.509 certificates and DIDs) to restrict accepted issuers during verification. Configure attribute providers to dynamically populate credentials from external systems. Establish and manage DIDComm connections for secure messaging and credential exchange. Manage projects and team members for multi-tenant environments.

Persona

Verify identities and manage compliance workflows for individuals and businesses. Create and manage inquiries for end-to-end identity verification flows using government IDs, selfies, and documents. Run database verifications, generate risk reports (watchlist, adverse media, PEP, address, email, phone), and screen against sanctions lists. Manage accounts representing verified individuals, consolidate or redact personal data for GDPR/CCPA compliance. Create and manage cases for manual review workflows. Maintain screening lists (blocklists/allowlists) with custom list items. Trigger automated workflows based on verification results. Analyze relationships between accounts via graph connections. Monitor events via webhooks for inquiries, verifications, reports, transactions, and cases.

Plate Recognizer

Recognize license plates and vehicle attributes in still images. Extract VINs, trailer IDs, odometers, shipping container markings, USDOT numbers, and boat registration numbers. Blur plates and faces, download processed images, and inspect usage and account licenses.

Proxiedmail

Create and manage proxy email aliases that forward incoming messages to real email addresses. List, update, and configure proxy emails with forwarding rules, webhook callbacks, and browsable settings. Browse and read received emails including subject, body, sender, headers, and attachments. Attach custom domains for creating proxy addresses on your own domain. Send messages and initiate conversations from proxy email addresses. Set up webhook receivers to get notified on incoming emails and poll for webhook payloads.

Pulumi

Manage Pulumi Cloud stacks, deployment operations, ESC environments, personal access tokens and webhooks. Discover account identity and organizations, inspect update history and deployment logs, search cloud resources, and read policy packs, organization members and audit logs.

Radar

Track user locations and manage geofences, trips, and location-based events. Create circle, polygon, or isochrone geofences with tags, metadata, and operating hours. Track trips from origin to destination with live ETAs, approaching/arrived status updates, and delay detection. Detect user visits to known places and chain locations. Detect region crossings for countries, states, DMAs, and postal codes. Identify location fraud including GPS spoofing, proxy/VPN usage, and device tampering. Perform forward, reverse, and IP geocoding. Search for places, addresses, and geofences near a location with autocomplete support. Calculate routing distances and travel durations by car, truck, foot, or bike. Validate and standardize postal addresses. Render interactive and static maps. Create location-based campaigns and audience segments.

Realphonevalidation

Validate US phone numbers and email addresses in real-time using live telco data. Check phone connection status (connected/disconnected), identify phone type (mobile, landline, VoIP), retrieve carrier and subscriber information, and look up Do Not Call list status including national, state, and DMA lists. Score phone numbers for fraud risk, detect reassigned numbers since a given consent date, and identify TCPA litigators. Verify email addresses with legacy validity checks or REV Lightning reachability, catch-all, disposable, free-service, ISP, and caution flags. Supports full validation (Turbo), budget-friendly list scrubbing (Scrub), basic active number checks, and wireless/phone type identification for TCPA compliance.

Resistant Ai

Analyze original PDF and image documents for fraud with Resistant Documents. Submit files, retrieve complete fraud analysis results, and delete submissions using regional client credentials. Existing StackGo IdentityCheck verification, AML, and KYB tools remain available with a separate legacy IdentityCheck API key.

Rippling

Manage employee data, company information, and organizational structures in Rippling's unified workforce platform. Retrieve active and terminated employee details including roles, departments, and work locations. Access company information such as addresses, work locations, and contact details. Create and manage employee groups across departments and teams. Automate user provisioning and deprovisioning for third-party applications. Push ATS candidates into the Rippling onboarding flow. Approve or decline leave requests. Retrieve SAML SSO metadata for app integrations.

Retool

Programmatically manage a Retool organization's users, groups, apps, permissions, and infrastructure. Create, list, update, and delete users and permission groups. Manage app lifecycle including creating, organizing, and deleting apps and folders. Configure SSO, data source resources, environments, and source control settings. Control access permissions for apps and folders. Monitor workflow executions and retrieve run details. Manage Spaces for multi-tenant setups, custom component libraries, app themes, observability providers, API access tokens, and usage analytics.

Securitytrails

Query current and historical DNS, WHOIS, IP, and domain intelligence data. Look up domain details including DNS records, hosting providers, and subdomains. Retrieve current and historical WHOIS registration data. Search for domains and IPs using a powerful DSL query interface. Discover associated domains, explore IP neighbors, fetch IP WHOIS and user agent data, and access SSL certificate information. All operations are read-only data queries.

Signpath

Submit artifact or hash signing requests, approve or deny requests, resubmit completed requests, poll progress, and download signed artifacts. Discover projects, signing policies, and certificate details; read audit logs and inspect the authenticated user.

Skyfire

Enable autonomous AI agent payments and identity verification through Skyfire's token-based protocol. Create PAY tokens to authorize payments to seller services, generate KYA (Know Your Agent) tokens for identity verification, and combine both in KYA+PAY tokens. Browse and search a marketplace of agent-consumable services, filter by tags and categories, and retrieve seller service IDs. Manage agent wallets including checking balances, funding via cards or ACH, and withdrawing earnings. Charge buyer tokens as a seller to collect payments. Register and manage seller services for discovery by buyer agents. Audit transactions by listing tokens with date and status filters, and reconcile authorized versus charged amounts.

Softr

Manage native Softr databases, tables, fields, records and table views. Request app-user creation, deletion, synchronization, activation or deactivation with truthful acceptance state; preserve sensitive magic-link and explicit JWT validation workflows. Read native pages and optionally prepare bounded JSON downloads.

Terraform Cloud

Manage HCP Terraform workspaces, runs, variables, projects, teams, workspace grants, policy sets, variable sets, state metadata and public outputs. Discover the connected account and organizations, configure disabled or enabled workspace notifications, and manage workspace dependency run triggers. Sensitive values and destination credentials are hidden.

Tooljet

Manage users, workspaces, and applications on a ToolJet low-code platform instance. List, create, and update users with workspace assignments and group memberships. Retrieve workspace information and manage user-workspace relationships. Export and import applications between workspaces or instances, including pages, queries, data sources, and ToolJet Database data. Trigger workflow automations via webhooks with custom parameters.

Truvera

Issue, verify, manage, and revoke W3C-compliant verifiable credentials using decentralized identifiers (DIDs). Create and manage DIDs on the cheqd blockchain, define credential schemas, build verification proof templates, and manage on-chain revocation registries. Supports zero-knowledge proofs (BBS+), OpenID4VCI/VP credential issuance and presentation flows, DIDComm holder messaging, ecosystem trust registries for governing networks of issuers and verifiers, credential monetization via KVAC, and sub-account management. Provides webhooks for credential, DID, registry, schema, and proof events.

Turbot Pipes

Manage cloud intelligence workspaces, connections, and automation on Turbot Pipes. Create and configure workspaces with hosted Steampipe databases that expose cloud APIs as SQL-queryable Postgres tables. Execute SQL queries against cloud infrastructure data via REST API with results in JSON or CSV. Manage connections to AWS, Azure, GCP, GitHub, GitLab, and Slack, including auto-importing organizational hierarchies. Create and manage organizations, members, roles, and invitations. Run Flowpipe pipelines and triggers for workflow automation, and manage Powerpipe dashboards, compliance benchmarks, and scheduled snapshots. Configure datatanks for accelerated query caching with periodic refresh. Set up notifiers to route notifications to Slack, email, or Microsoft Teams. Monitor asynchronous processes and pipeline executions. Manage user profiles, identities, and tenant-level settings including SAML and custom domains.

Twocaptcha

Submit CAPTCHA and image recognition tasks, retrieve asynchronous solutions, report accuracy, and check the account balance using the 2Captcha API v2. Supports guided reCAPTCHA V2/V3, Arkose Labs, GeeTest, Turnstile, image and text tasks, plus complete documented task objects for additional types.

Aws Cognito

Manage user authentication and authorization for web and mobile apps. Create and configure user pools as user directories with password policies, MFA, and account recovery. Create, update, disable, and delete users and their attributes. Manage groups for role-based access control. Configure federated sign-in with SAML 2.0, OIDC, and social identity providers (Google, Facebook, Apple, Amazon). Set up app clients with OAuth scopes, callback URLs, and token settings. Create identity pools to issue temporary AWS credentials for authenticated or anonymous users. Migrate users via batch CSV import or just-in-time Lambda triggers. Customize ID and access tokens with pre-token generation triggers. Configure machine-to-machine authorization using OAuth client credentials flow with resource servers and custom scopes. Enable advanced security features for risk-based adaptive authentication. Respond to authentication lifecycle events including sign-up, authentication, token generation, and user migration via Lambda triggers.

Bitwarden

Manage organization members, groups, collections, and policies in Bitwarden. Invite, update, and remove members, assign roles and group memberships, and configure collection access permissions. Enforce organization-wide security policies such as two-step login and master password requirements. Query and export event logs to track user actions and organization activity. Store, retrieve, create, update, and delete developer secrets (API keys, database credentials) organized into projects with granular access control. Supports SCIM provisioning for automatic user and group syncing from identity providers.

Egnyte

Manage Egnyte files, folders, sharing links, permissions, users and custom groups. Upload small files, prepare downloads, search content, read and set custom metadata, recover exact trash items, work with review/approval workflows and retrieve audit reports. Identify the connected user and discover metadata namespaces and workflows.

Epic Games

Authenticate players via Epic Games accounts or external identity providers (Steam, PlayStation, Xbox, Nintendo) using OAuth 2.0. Manage cross-platform player identities, friends lists, and presence status. Track and record player stats, unlock achievements, and manage leaderboards. Create and manage game lobbies, sessions, and matchmaking. Store and retrieve player-specific cloud save data and game-level title storage. Verify game and DLC ownership, enumerate entitlements, and validate ownership tokens. Submit and query player reports, define and manage player sanctions (bans/suspensions). Access game analytics including player retention and online player counts.

Mocean

Send and receive SMS, WhatsApp, and voice messages globally across 190+ countries. Perform phone number verification (OTP/2FA) via SMS or Telegram. Look up mobile number details including carrier, porting status, and reachability. Make programmable voice calls with text-to-speech, DTMF input collection, and call recording. Manage WhatsApp message templates and send rich media, interactive messages, and template-based notifications. Query account balance and messaging pricing.

Sslmate Cert Spotter API

Monitor Certificate Transparency logs to detect SSL/TLS certificates issued for your domains. Search for certificates by domain name, including subdomains, with deduplication and incremental querying. Manage monitored domains by adding, removing, enabling, or disabling them. Authorize known certificates and public keys to reduce alert noise from legitimate renewals.

Virustotal

Scan and analyze files, URLs, domains, and IP addresses for malware and security threats using 70+ antivirus engines and sandboxes. Retrieve threat reports by file hash, look up domain and IP reputation with passive DNS and WHOIS data, and explore IoC relationships to map threat infrastructure. Manage YARA Livehunt rulesets to monitor incoming submissions and run Retrohunt jobs against historical file collections. Add comments and votes to indicators, create visual relationship graphs of IoCs, search VirusTotal's dataset with advanced queries, and consume threat feeds. Download file samples and network traffic captures for offline analysis.

Callerapi

Look up phone number intelligence and caller identification data. Retrieve comprehensive phone info aggregated from multiple caller ID providers (Truecaller, Hiya, CallApp, etc.), including caller name, business details, carrier info, and spam reputation scores. Detect spam and fraud risk with complaint histories and scoring. Check number porting status and retrieve full porting history. Assess port-out fraud risk. Retrieve caller profile pictures. Check online presence across platforms like WhatsApp, Telegram, Instagram, LinkedIn, and more. Validate carriers via HLR lookup. Manage account credits and usage.