# Cotool Documentation ## Docs - [Context Documents](https://docs.cotool.ai/agents/context-documents.md): Providing agents with context from Google Docs and Notion - [Creating Agents](https://docs.cotool.ai/agents/creating-agents.md): Step-by-step guide to creating your first agent - [Planning Modes](https://docs.cotool.ai/agents/planning-modes.md): Understanding agent planning strategies - [Skills](https://docs.cotool.ai/agents/skills.md): Reusable instructions and resources you can attach across agents - [Agent Outputs](https://docs.cotool.ai/agents/structured-outputs.md): Define structured JSON schemas for consistent agent output - [Triggering Agents](https://docs.cotool.ai/agents/triggering-agents.md): Understanding all trigger types and when to use them - [Create system prompt](https://docs.cotool.ai/api-reference/agent-system-prompts/create-system-prompt.md): Create a new system prompt version for an agent - [List system prompts](https://docs.cotool.ai/api-reference/agent-system-prompts/list-system-prompts.md): List all system prompt versions for an agent - [Delete trigger](https://docs.cotool.ai/api-reference/agent-triggers/delete-trigger.md): Delete an existing trigger from an agent. - [Email webhook](https://docs.cotool.ai/api-reference/agent-triggers/email-webhook.md): Receives email events forwarded from Cloudflare Email Worker with env-var HMAC auth. - [Get webhook fields](https://docs.cotool.ai/api-reference/agent-triggers/get-webhook-fields.md): Generate a webhook URL, secret, and any additional fields required to configure an external webhook for a trigger. - [List agent triggers](https://docs.cotool.ai/api-reference/agent-triggers/list-agent-triggers.md): Retrieve all triggers configured for a specific agent. - [Save trigger definition](https://docs.cotool.ai/api-reference/agent-triggers/save-trigger-definition.md): Create and save a new trigger definition for Jira, Slack, Linear, Cron, or generic Webhook sources. - [Update trigger definition](https://docs.cotool.ai/api-reference/agent-triggers/update-trigger-definition.md): Modify metadata or configuration of an existing trigger. - [Update trigger status](https://docs.cotool.ai/api-reference/agent-triggers/update-trigger-status.md): Enable or disable a trigger for the specified agent. - [Webhook trigger](https://docs.cotool.ai/api-reference/agent-triggers/webhook-trigger.md): Invoke an agent trigger via incoming webhook. External services post to this endpoint. - [Get feedback summary for an agent run](https://docs.cotool.ai/api-reference/agentruns/get-feedback-summary-for-an-agent-run.md): Retrieves aggregated feedback statistics (up/down counts, total, average score) for a specific agent run - [Submit feedback for an agent run](https://docs.cotool.ai/api-reference/agentruns/submit-feedback-for-an-agent-run.md): Submits user feedback (thumbs up/down) for a specific agent run, optionally including a comment and chat event reference - [Submit feedback for multiple agent runs](https://docs.cotool.ai/api-reference/agentruns/submit-feedback-for-multiple-agent-runs.md): Submits user feedback (thumbs up/down) for multiple agent runs in a single batch operation - [Create a new agent](https://docs.cotool.ai/api-reference/agents/create-a-new-agent.md): Create a new AI agent with specified configuration including system prompt, tools, and model settings - [Create agent tag](https://docs.cotool.ai/api-reference/agents/create-agent-tag.md): Create a new tag in the organization. - [Delete agent](https://docs.cotool.ai/api-reference/agents/delete-agent.md): Remove an agent from the system. - [Delete agent tag](https://docs.cotool.ai/api-reference/agents/delete-agent-tag.md): Delete a tag from the organization. Requires setting.tags.manage permission. Will fail if the tag is still assigned to any agents. - [Get agent](https://docs.cotool.ai/api-reference/agents/get-agent.md): Retrieve detailed information about a specific agent by ID. - [Get async run result](https://docs.cotool.ai/api-reference/agents/get-async-run-result.md): Retrieve the completed result of an asynchronous agent run. Use the status endpoint first and call this endpoint once the run status is `done`. - [Get async run status](https://docs.cotool.ai/api-reference/agents/get-async-run-status.md): > ⚠️ **Deprecated** > Updated our Chat Schema > **Use instead:** `/api/agents/:agentId/run-async/:runId/status` - [Get async run status](https://docs.cotool.ai/api-reference/agents/get-async-run-status-1.md): Retrieve streaming status or error information for an asynchronous agent run. Once the returned status is `done`, call `/api/agents/:agentId/run-async/:runId/result` for the completed payload. - [Get detailed feedback metrics for an agent](https://docs.cotool.ai/api-reference/agents/get-detailed-feedback-metrics-for-an-agent.md): Retrieves comprehensive feedback metrics for a single agent including time-series data, per-prompt breakdown (optional), and all-time statistics - [Get feedback metrics for multiple agents](https://docs.cotool.ai/api-reference/agents/get-feedback-metrics-for-multiple-agents.md): Retrieves feedback metrics (average score, up rate, totals) for multiple agents over 7-day and 30-day periods - [Get LLM evaluation metrics](https://docs.cotool.ai/api-reference/agents/get-llm-evaluation-metrics.md): Retrieve system LLM evaluation metrics for an agent (default evaluator: llm-judge). - [Get LLM evaluation metrics for multiple agents](https://docs.cotool.ai/api-reference/agents/get-llm-evaluation-metrics-for-multiple-agents.md): Retrieve system LLM evaluation metrics (llm-judge) for multiple agents in batch. - [List agent runs](https://docs.cotool.ai/api-reference/agents/list-agent-runs.md): Retrieve a paginated list of historical agent execution runs with optional filters. - [List agent runs/chats](https://docs.cotool.ai/api-reference/agents/list-agent-runschats.md): Retrieve a paginated list of runs/chats associated with a specific agent. - [List agent tags](https://docs.cotool.ai/api-reference/agents/list-agent-tags.md): Retrieve all tags available in the organization with their usage counts. - [List agent templates](https://docs.cotool.ai/api-reference/agents/list-agent-templates.md): Retrieve all available agent templates for the current organization. - [List all agents](https://docs.cotool.ai/api-reference/agents/list-all-agents.md): Retrieve a list of all AI agents available in the organization - [List trigger sources](https://docs.cotool.ai/api-reference/agents/list-trigger-sources.md): Retrieve all distinct trigger sources used across agent runs in this organization. - [Rename agent tag](https://docs.cotool.ai/api-reference/agents/rename-agent-tag.md): Rename a tag in the organization. Requires setting.tags.manage permission. - [Run agent asynchronously](https://docs.cotool.ai/api-reference/agents/run-agent-asynchronously.md): Start an asynchronous agent run and return a runId that can be polled for status updates. Once the run status is `done`, call `/api/agents/:agentId/run-async/:runId/result` to retrieve the same final payload shape returned by the synchronous run endpoint. - [Run agent synchronously](https://docs.cotool.ai/api-reference/agents/run-agent-synchronously.md): Execute an agent run in a blocking manner and return the complete result once finished. - [Update agent](https://docs.cotool.ai/api-reference/agents/update-agent.md): Modify an agent's configuration, such as tools, prompts, or model settings. - [Generate JSON Schema](https://docs.cotool.ai/api-reference/agentschemas/generate-json-schema.md): Generate a JSON schema for agent structured output based on system prompt and description using an LLM. - [Get artifact](https://docs.cotool.ai/api-reference/artifacts/get-artifact.md): Fetch the content and metadata of a stored artifact by its ID for a given chat. - [Count audit logs](https://docs.cotool.ai/api-reference/audit-logs/count-audit-logs.md): Return the total number of audit-log records that match a set of optional filters. - [Get audit event types](https://docs.cotool.ai/api-reference/audit-logs/get-audit-event-types.md): Retrieve the distinct list of audit-log event types recorded for the organization. - [Get audit log entry](https://docs.cotool.ai/api-reference/audit-logs/get-audit-log-entry.md): Retrieve a single audit-log record by its unique identifier. - [List audit logs](https://docs.cotool.ai/api-reference/audit-logs/list-audit-logs.md): Return a paginated list of audit logs filtered by query parameters such as userId, event type, date range, etc. - [Answer a waiting prompt](https://docs.cotool.ai/api-reference/chat/answer-a-waiting-prompt.md): Submit a response to a waiting user prompt (e.g., from a Slack button prompt). This allows answering from the UI instead of Slack. - [Cancel a waiting prompt](https://docs.cotool.ai/api-reference/chat/cancel-a-waiting-prompt.md): Cancel a waiting user response prompt (e.g., from a Slack button prompt). This ends the agent run gracefully. - [Delete chat](https://docs.cotool.ai/api-reference/chat/delete-chat.md): Delete a chat conversation by its unique identifier. - [Get chat history](https://docs.cotool.ai/api-reference/chat/get-chat-history.md): Retrieve all events and chat metadata for the specified chat conversation. If the chat has a structured output schema, the generated structured output is returned in `chat.result`. - [Interrupt chat](https://docs.cotool.ai/api-reference/chat/interrupt-chat.md): Send an interrupt signal to stop an ongoing chat stream. - [List chats](https://docs.cotool.ai/api-reference/chat/list-chats.md): Retrieve a paginated list of chats for the current user or agent. - [Override a timed wait](https://docs.cotool.ai/api-reference/chat/override-a-timed-wait.md): Cancel a pending native wait timer and resume execution immediately. - [Submit thumbs feedback for a chat](https://docs.cotool.ai/api-reference/chat/submit-thumbs-feedback-for-a-chat.md): Records a thumbs up/down for a chat if the user has access to it. - [Disconnect CLI](https://docs.cotool.ai/api-reference/clis/disconnect-cli.md): Remove stored credentials for a CLI integration. - [List CLI integrations](https://docs.cotool.ai/api-reference/clis/list-cli-integrations.md): Return a grouped list of CLI integrations available to the organization. - [Create custom RSS feed](https://docs.cotool.ai/api-reference/create-custom-rss-feed.md): Creates a new custom RSS feed for the organization - [Delete custom RSS feed](https://docs.cotool.ai/api-reference/delete-custom-rss-feed.md): Deletes a custom RSS feed and its associated intel items - [Create a detection authoring draft](https://docs.cotool.ai/api-reference/detection-authoring/create-a-detection-authoring-draft.md): Creates a new per-chat draft for detection authoring. If proposalId is provided, copies fields from the proposal. Otherwise creates a blank draft for the given platform. - [Get a detection authoring draft](https://docs.cotool.ai/api-reference/detection-authoring/get-a-detection-authoring-draft.md): Retrieves an existing draft by chat ID. - [Smart deploy a draft detection to a SIEM platform](https://docs.cotool.ai/api-reference/detection-authoring/smart-deploy-a-draft-detection-to-a-siem-platform.md): Uses an AI agent to deploy a draft detection directly to the native SIEM (no source proposal required). - [Smart publish a draft detection to GitHub](https://docs.cotool.ai/api-reference/detection-authoring/smart-publish-a-draft-detection-to-github.md): Uses an AI agent to create a GitHub PR for a draft detection (no source proposal required). - [Update a detection authoring draft](https://docs.cotool.ai/api-reference/detection-authoring/update-a-detection-authoring-draft.md): Updates an existing draft with new field values. - [Dismiss a detection rule proposal](https://docs.cotool.ai/api-reference/detection-rules/dismiss-a-detection-rule-proposal.md): Mark a proposal as dismissed so it won't be shown again. - [Execute a detection query](https://docs.cotool.ai/api-reference/detection-rules/execute-a-detection-query.md): Execute an ad-hoc detection query against a connected SIEM platform. Returns sample results. - [Get a detection rule proposal](https://docs.cotool.ai/api-reference/detection-rules/get-a-detection-rule-proposal.md): Retrieve a specific detection rule proposal by ID. - [Get publishing options for a platform](https://docs.cotool.ai/api-reference/detection-rules/get-publishing-options-for-a-platform.md): Returns the available publishing methods for a given SIEM platform. - [List available GitHub repositories](https://docs.cotool.ai/api-reference/detection-rules/list-available-github-repositories.md): List GitHub repositories accessible for creating detection PRs. - [List detection rule proposals](https://docs.cotool.ai/api-reference/detection-rules/list-detection-rule-proposals.md): Retrieve all detection rule proposals for the organization. - [Restore a dismissed detection rule proposal](https://docs.cotool.ai/api-reference/detection-rules/restore-a-dismissed-detection-rule-proposal.md): Restore a previously dismissed proposal back to proposed status. - [Smart deploy detection to native platform (SSE)](https://docs.cotool.ai/api-reference/detection-rules/smart-deploy-detection-to-native-platform-sse.md): Uses an AI agent to deploy a detection directly to the SIEM platform with appropriate parameters. Streams progress via SSE. Optionally pass a draft to deploy instead of the original proposal. - [Smart publish detection to GitHub (SSE)](https://docs.cotool.ai/api-reference/detection-rules/smart-publish-detection-to-github-sse.md): Uses an AI agent to find the best repo, adapt the detection format, and create a PR. Streams progress via SSE. Optionally pass a draft to publish instead of the original proposal. - [Test a detection query](https://docs.cotool.ai/api-reference/detection-rules/test-a-detection-query.md): Execute a detection query and return sample results. Uses limited time range and row count. - [Accept detection suggestion](https://docs.cotool.ai/api-reference/detections/accept-detection-suggestion.md): Accept a detection suggestion, converting it to a regular detection. - [Create detection](https://docs.cotool.ai/api-reference/detections/create-detection.md): Create a new detection. - [Create output destination](https://docs.cotool.ai/api-reference/detections/create-output-destination.md): Create a new output destination (webhook, Teams, Slack, or PagerDuty) for the organization. - [Create output destination](https://docs.cotool.ai/api-reference/detections/create-output-destination-1.md): Create a new output destination (webhook, Teams, Slack, or PagerDuty) for the organization. - [Delete detection](https://docs.cotool.ai/api-reference/detections/delete-detection.md): Delete a detection (soft delete). - [Generate a detection system prompt](https://docs.cotool.ai/api-reference/detections/generate-a-detection-system-prompt.md): Generates a system prompt for a detection based on category and user objective (without generating a query) - [Generate a SIEM query asynchronously](https://docs.cotool.ai/api-reference/detections/generate-a-siem-query-asynchronously.md): Starts detection query generation in a background job and returns a job ID for polling. - [Generate a SIEM query using AI](https://docs.cotool.ai/api-reference/detections/generate-a-siem-query-using-ai.md): Generates a SIEM query based on a natural language prompt using AI - [Generate investigation plan](https://docs.cotool.ai/api-reference/detections/generate-investigation-plan.md): Generate an investigation plan and system prompt from a detection intent. - [Generate investigation plan asynchronously](https://docs.cotool.ai/api-reference/detections/generate-investigation-plan-asynchronously.md): Start investigation plan generation in a background job and return a job ID for streaming and polling. - [Get async investigation plan generation status](https://docs.cotool.ai/api-reference/detections/get-async-investigation-plan-generation-status.md): Return the current status of a background investigation plan generation job. - [Get async SIEM query generation status](https://docs.cotool.ai/api-reference/detections/get-async-siem-query-generation-status.md): Returns the current status of a background detection query generation job. - [Get detection](https://docs.cotool.ai/api-reference/detections/get-detection.md): Retrieve a specific detection by ID. - [Get detection output configuration](https://docs.cotool.ai/api-reference/detections/get-detection-output-configuration.md): Retrieve output settings and available destinations for a detection. - [List all output destinations](https://docs.cotool.ai/api-reference/detections/list-all-output-destinations.md): List all output destinations for the organization. - [List detection categories](https://docs.cotool.ai/api-reference/detections/list-detection-categories.md): Retrieve all available detection categories with their metadata. - [List detection hits](https://docs.cotool.ai/api-reference/detections/list-detection-hits.md): Retrieve a flattened hit feed across all detections in the current organization. Uses a single batch query instead of N concurrent queries per detection. - [List detection runs](https://docs.cotool.ai/api-reference/detections/list-detection-runs.md): Retrieve all runs for a specific detection. - [List detection suggestions](https://docs.cotool.ai/api-reference/detections/list-detection-suggestions.md): Retrieve all detection suggestions for the current organization. - [List detections](https://docs.cotool.ai/api-reference/detections/list-detections.md): Retrieve all detections for the current organization. - [List dismissed detection suggestions](https://docs.cotool.ai/api-reference/detections/list-dismissed-detection-suggestions.md): Retrieve all dismissed (soft-deleted) detection suggestions for the current organization. - [Restore dismissed detection suggestion](https://docs.cotool.ai/api-reference/detections/restore-dismissed-detection-suggestion.md): Restore a previously dismissed detection suggestion. - [Run detection](https://docs.cotool.ai/api-reference/detections/run-detection.md): Execute a detection ad-hoc. - [Toggle detection enabled status](https://docs.cotool.ai/api-reference/detections/toggle-detection-enabled-status.md): Enable or disable a detection's scheduled execution. - [Update detection](https://docs.cotool.ai/api-reference/detections/update-detection.md): Update an existing detection. - [Update detection output configuration](https://docs.cotool.ai/api-reference/detections/update-detection-output-configuration.md): Update output settings for a detection (enable/disable, set destinations, set send mode). - [Update output destination](https://docs.cotool.ai/api-reference/detections/update-output-destination.md): Update an existing output destination (webhook, Teams, Slack, or PagerDuty). - [Generate detection context](https://docs.cotool.ai/api-reference/generate-detection-context.md): Generates structured detection context and chat URL for authoring security detections based on a threat intelligence item - [Get custom RSS feed](https://docs.cotool.ai/api-reference/get-custom-rss-feed.md): Gets a specific custom RSS feed by ID - [Get intel feed statistics](https://docs.cotool.ai/api-reference/get-intel-feed-statistics.md): Retrieves aggregated statistics for the threat intelligence feed including severity breakdown, platform breakdown, and recent items - [Get specific intel item](https://docs.cotool.ai/api-reference/get-specific-intel-item.md): Retrieves detailed information for a specific threat intelligence item by its ID - [List custom RSS feeds](https://docs.cotool.ai/api-reference/list-custom-rss-feeds.md): Lists all custom RSS feeds configured for the current organization - [List threat intelligence items](https://docs.cotool.ai/api-reference/list-threat-intelligence-items.md): Retrieves a paginated list of threat intelligence items with support for filtering by severity, platform, status, source, and text search - [Get organization-level activity metrics](https://docs.cotool.ai/api-reference/metrics/get-organization-level-activity-metrics.md): Returns summary counts and timeseries for agent runs, chats, and GitHub PR actions for the authenticated organization. - [Get MITRE ATT&CK matrix with detection coverage](https://docs.cotool.ai/api-reference/mitre-classification/get-mitre-att&ck-matrix-with-detection-coverage.md): Retrieve the MITRE ATT&CK framework matrix showing detection rule coverage as a heatmap - [Get MITRE technique details](https://docs.cotool.ai/api-reference/mitre-classification/get-mitre-technique-details.md): Retrieve detailed information about a specific MITRE ATT&CK technique including detection rules - [Get alert group details](https://docs.cotool.ai/api-reference/orca-alerts/get-alert-group-details.md): Retrieve detailed information about a specific Orca Security alert group - [Get Orca configuration](https://docs.cotool.ai/api-reference/orca-alerts/get-orca-configuration.md): Retrieve the base URL configuration for the Orca Security integration - [List Orca alert groups](https://docs.cotool.ai/api-reference/orca-alerts/list-orca-alert-groups.md): Retrieve a list of grouped Orca Security alerts sorted by relevance score (severity weight × alert count) - [List user organizations](https://docs.cotool.ai/api-reference/organizations/list-user-organizations.md): Retrieve all organizations that the current user has access to. - [Apply permission diff to a role](https://docs.cotool.ai/api-reference/roles/apply-permission-diff-to-a-role.md): Apply a permission diff to a specific role - [Create a role](https://docs.cotool.ai/api-reference/roles/create-a-role.md): Create a new role for the current organization - [Delete a role](https://docs.cotool.ai/api-reference/roles/delete-a-role.md): Delete an existing role for the current organization - [Get permissions for a role](https://docs.cotool.ai/api-reference/roles/get-permissions-for-a-role.md): Get the permissions for a specific role - [Get role by id](https://docs.cotool.ai/api-reference/roles/get-role-by-id.md): Get a specific role by its ID - [List roles for the current organization](https://docs.cotool.ai/api-reference/roles/list-roles-for-the-current-organization.md): List all roles for the current organization - [Update a role](https://docs.cotool.ai/api-reference/roles/update-a-role.md): Update an existing role for the current organization - [Create skill](https://docs.cotool.ai/api-reference/skills/create-skill.md): Create a reusable skill in the organization. - [Delete skill](https://docs.cotool.ai/api-reference/skills/delete-skill.md): Soft delete a skill. - [Export skill](https://docs.cotool.ai/api-reference/skills/export-skill.md): Export a skill payload including current detail and version metadata. - [Get skill](https://docs.cotool.ai/api-reference/skills/get-skill.md): Get one active skill by ID. - [Get skill version](https://docs.cotool.ai/api-reference/skills/get-skill-version.md): Get one specific skill version with references. - [Import skill](https://docs.cotool.ai/api-reference/skills/import-skill.md): Import a skill package payload and create the skill. - [List agents using skill](https://docs.cotool.ai/api-reference/skills/list-agents-using-skill.md): List all agents currently using this skill. - [List skill versions](https://docs.cotool.ai/api-reference/skills/list-skill-versions.md): List all versions for a skill in descending order. - [List skills](https://docs.cotool.ai/api-reference/skills/list-skills.md): List all active skills in the organization. - [Update skill](https://docs.cotool.ai/api-reference/skills/update-skill.md): Update an existing skill. - [Get threat model](https://docs.cotool.ai/api-reference/threatmodel/get-threat-model.md): Get the current threat model for the organization. - [Get threat model version](https://docs.cotool.ai/api-reference/threatmodel/get-threat-model-version.md): Get one threat model version from the organization history by ID. - [Get threat model version attributions](https://docs.cotool.ai/api-reference/threatmodel/get-threat-model-version-attributions.md): List every Auto Detect (orchestrator) agent grounded in a specific threat model version. Powers the TM page's in-document citation markers. - [List threat model version history](https://docs.cotool.ai/api-reference/threatmodel/list-threat-model-version-history.md): List the full threat model version history for the organization. - [Regenerate threat model](https://docs.cotool.ai/api-reference/threatmodel/regenerate-threat-model.md): Enqueue a threat model regeneration job using current environment data. - [Update threat model](https://docs.cotool.ai/api-reference/threatmodel/update-threat-model.md): Save a user-edited threat model as a new version in the organization history. - [Disconnect tool](https://docs.cotool.ai/api-reference/tools/disconnect-tool.md): Remove stored credentials for a given tool type, disconnecting it from the organization. - [Get raw tool output](https://docs.cotool.ai/api-reference/tools/get-raw-tool-output.md): Fetch raw data captured for a previous tool invocation specified by uuid. - [List MCP server resources](https://docs.cotool.ai/api-reference/tools/list-mcp-server-resources.md): Return a list of resources available on the specified MCP server. - [List tools](https://docs.cotool.ai/api-reference/tools/list-tools.md): Return a grouped list of tools available to the organization. - [Trigger RSS feed sync](https://docs.cotool.ai/api-reference/trigger-rss-feed-sync.md): Enqueues an immediate sync job for a custom RSS feed - [Update custom RSS feed](https://docs.cotool.ai/api-reference/update-custom-rss-feed.md): Updates a custom RSS feed - [Delete user](https://docs.cotool.ai/api-reference/users/delete-user.md): Delete a user by ID within your organization. - [Get current user](https://docs.cotool.ai/api-reference/users/get-current-user.md): Return the authenticated user's profile information. - [Get current user permissions and all available permissions](https://docs.cotool.ai/api-reference/users/get-current-user-permissions-and-all-available-permissions.md): Returns the current user's effective permissions and the list of all permission definitions available in the system. - [List users](https://docs.cotool.ai/api-reference/users/list-users.md): Retrieve all users within the current organization. - [Search users](https://docs.cotool.ai/api-reference/users/search-users.md): Search for users within the organization by email address. - [Update user](https://docs.cotool.ai/api-reference/users/update-user.md): Update user fields, including group assignment - [Cotool Release Notes](https://docs.cotool.ai/changelog.md): Product updates and release history - [Creating Agents from Chat](https://docs.cotool.ai/chat/creating-agents-from-chat.md): Convert successful chat conversations into reusable agents - [File Attachments](https://docs.cotool.ai/chat/file-attachments.md): Attach images, PDFs, and documents to your chat messages - [Generating Reports](https://docs.cotool.ai/chat/generating-reports.md): Create formatted reports from chat conversations - [Using Chat](https://docs.cotool.ai/chat/using-chat.md): Interactive chat interface for ad-hoc investigations - [System Prompts](https://docs.cotool.ai/core-concepts/system-prompts.md): Writing effective prompts for your agents - [Tools and Integrations](https://docs.cotool.ai/core-concepts/tools-and-integrations.md): How tools power your AI agents - [What is an Agent?](https://docs.cotool.ai/core-concepts/what-is-an-agent.md): Understanding AI agents in Cotool - [Cotool Detection Authoring](https://docs.cotool.ai/detections/detection-authoring.md): Iteratively craft production-ready detections with Cotool assistance - [MITRE Coverage Mapping](https://docs.cotool.ai/detections/mitre-mapping.md): Unified detection coverage across your entire security stack - [Detections Overview](https://docs.cotool.ai/detections/overview.md): Comprehensive detection management across your security stack - [Pattern-Based Detection with Agents](https://docs.cotool.ai/detections/pattern-based-detection.md): Detect threats using behavioral analysis beyond rigid rule-based logic - [Getting Started](https://docs.cotool.ai/getting-started.md): Get up and running with Cotool in under 15 minutes - [Acceptance Criteria](https://docs.cotool.ai/improving-agents/acceptance-criteria.md): Define pass/fail conditions that are checked on every agent run - [AI-Suggested Improvements](https://docs.cotool.ai/improving-agents/ai-suggested-improvements.md): Automatic prompt improvements based on evaluation results - [Automatic Evaluations](https://docs.cotool.ai/improving-agents/evaluations.md): Every agent run is automatically scored to identify improvement opportunities - [Manual Feedback](https://docs.cotool.ai/improving-agents/feedback-system.md): Supplement automatic evaluations with manual user feedback - [Agent Versioning](https://docs.cotool.ai/improving-agents/system-prompt-versioning.md): Track prompt changes and restore previous versions - [Introduction](https://docs.cotool.ai/index.md) - [Audit Logs](https://docs.cotool.ai/settings/audit-logs.md): Track all activity with comprehensive audit logging - [Managing Roles & Users](https://docs.cotool.ai/settings/managing-roles.md): How to create custom roles, assign permissions, and manage user access - [Roles & Permissions Overview](https://docs.cotool.ai/settings/roles-permissions-overview.md): Understanding role-based access control in Cotool - [SSO](https://docs.cotool.ai/settings/sso.md): Single Sign-On configuration for enterprise authentication ## OpenAPI Specs - [openapi](https://app.cotool.ai/api/docs/openapi.json) ## Optional - [Blog](https://cotool.ai/blog)