Huntress icon

Huntress

Work with the Huntress API

Actions11

Overview

This node integrates with the Huntress API to retrieve detailed information about a specific Agent by its unique identifier. It is useful in scenarios where you need to fetch data about an individual agent within your security environment, such as for monitoring, auditing, or incident investigation purposes.

For example, you might use this node to:

  • Retrieve the current status and details of a particular agent installed on an endpoint.
  • Pull agent metadata to correlate with other security events.
  • Automate reporting workflows that require agent-specific information.

Properties

Name Meaning
Agent ID The unique numeric identifier of the agent to retrieve information for.

Output

The node outputs JSON data representing the detailed information of the specified agent. This typically includes fields such as agent status, version, last check-in time, and other metadata provided by the Huntress API about that agent.

No binary data output is produced by this operation.

Dependencies

  • Requires an active connection to the Huntress API.
  • Needs an API authentication token credential configured in n8n to authorize requests.
  • The base URL for API requests is https://api.huntress.io/v1.

Troubleshooting

  • Common issues:

    • Invalid or missing Agent ID will result in errors or empty responses.
    • Authentication failures due to incorrect or expired API tokens.
    • Network connectivity problems preventing access to the Huntress API.
  • Error messages:

    • Errors returned from the API will include HTTP status codes and messages, e.g., (404) Not Found if the agent does not exist.
    • Authentication errors may return (401) Unauthorized. Ensure the API key credential is valid and has necessary permissions.
  • Resolution tips:

    • Verify the Agent ID is correct and exists in your Huntress account.
    • Check and update the API authentication token in the node credentials.
    • Confirm network access to api.huntress.io is allowed from your n8n instance.

Links and References

Discussion