Integrations

CMDB integrates with multiple products in The One Stack. Each integration uses authenticated service-to-service APIs and the Bus event system.

RMM

Aspect	Details
What flows	RMM pushes device inventory to CMDB via auto-discovery; CMDB provides asset context back to RMM
Direction	Bidirectional
Setup	Enable RMM sync in Discovery settings
API	POST /api/integration/rmm-discovery (RMM → CMDB), POST /api/discovery/sync
Key feature	Password reveal from RMM device context — audit-logged with rmm_device_id

What breaks if misconfigured

• Discovery results won't appear if RMM sync is disabled
• Password reveals from RMM will fail if the integration key is invalid
• Devices won't match to CIs if rmm_device_id links are missing

Defend

Aspect	Details
What flows	CMDB sends criticality and PHI tags to Defend; Defend sends threat status back
Direction	Bidirectional
Setup	Automatic when both products are active — no manual configuration
Events	cmdb.config.updated triggers Defend to refresh its criticality cache
Key feature	Criticality-based alert escalation and PHI amplification

What breaks if misconfigured

• Defend alerts won't reflect CMDB criticality if integration keys are missing
• Security posture data won't display on CI detail pages if Defend API is unreachable

PSA

Aspect	Details
What flows	PSA queries CMDB for CI context when working tickets
Direction	CMDB → PSA (read-only)
Setup	Automatic when both products are active
API	GET /api/integration/ci-context (list CIs for company), GET /api/integration/ci-summary (single CI detail), GET /api/integration/ci-search (asset picker)
Key feature	Technicians see full asset details from within a PSA ticket

What breaks if misconfigured

• CI context won't load in PSA tickets if the integration key is invalid
• Asset search in PSA will return empty results

Portal

Aspect	Details
What flows	Published knowledge base articles are accessible to Portal users
Direction	CMDB → Portal (read-only)
Setup	Mark KB articles as public and published
Key feature	Client self-service — reduces ticket volume

What breaks if misconfigured

• Articles won't appear in Portal if they're not marked public
• Portal auth issues prevent article access if SSO is misconfigured

Hub

Aspect	Details
What flows	Authentication, user identity, roles, and permissions
Direction	Hub → CMDB
Setup	Automatic — CMDB uses Hub SSO for all authentication
Key feature	Single sign-on, centralized role management

What breaks if misconfigured

• Users can't log in if Hub SSO secret is missing or invalid
• Role-based access controls won't work without Hub integration

Cross-Product Search

CMDB participates in the Stack-wide search federation. When a user searches from Hub, CMDB results (CIs, documents, KB articles, passwords, subnets, flexible assets) appear alongside results from PSA, CRM, and other products.

Aspect	Details
API	GET /api/search with X-Integration-Key header
Searchable types	CIs, documents, KB articles, passwords (names only), subnets, flexible assets
Auth	Integration key for cross-product queries

ℹ️

Password search results return names only — never encrypted field values. The actual credential requires checkout and reveal from within CMDB.

Next Steps

• RMM Auto-Discovery — Configure RMM device sync
• Defend Integration — Criticality and PHI-based alert escalation
• Knowledge Base — Publish articles for Portal