Settings & integrations

Runtime integration registry for local case backends and protected PlatPhorm handoffs.

Data mode

authorized_local

Derived from the active runtime and persistence backend.

Live integrations

Configured local backend or explicitly enabled platform handoff.

Missing config

No hidden execution: blocked actions record protected intents.

Access control

State-changing actions run through server-side operator authorization. The production migration is designed to sit behind firewall / IP allowlisting. Secrets are never exposed client-side, and discovery routes for case data are disallowed in robots.txt.

Platform handoffs require CLOAK_ENABLE_PLATFORM_HANDOFFS. Without that flag, report publish/export/upload routes persist blocked intents and show a degraded operator result.

Server-side capability inventory

These are environment-backed capabilities only. Secret values stay server-side and are never rendered in the browser.

12/16 configured

PlatPhorm protected actions

Server-side authorization for protected operator actions and cross-site handoffs.

configured

Required env

Server operator credential

PlatPhorm handoff switch

Kill switch for protected Docs, Sheets, Files, BrowserOps, Sandbox, Trace, and Pentest handoffs.

configured

Required env

Server operator credentialPlatform handoff flag

Cloak visibility policy

Controls authorized case data visibility across public, private, and redacted Cloak surfaces without exposing platform secrets.

configured

Required env

cloak visibility mode

Public media capture

Allows public-photo candidate manifests and approved media references to be stored through Files or object storage.

configured

Required env

cloak public media capture

Persistent case database

Durable client, evidence, findings, Kanban, report, workflow, and protected intent storage.

configured

Required env

database url or postgres url

Neon project metadata

Vercel/Neon project identity and direct database environment for production diagnostics.

configured

Required env

neon project iddatabase url or postgres url

Vercel Blob evidence storage

Server-side private artifact storage for OSINT run packets, reports, screenshots, exports, and redacted bundles.

configured

Required env

Server secret

Vercel Sandbox diagnostics

Optional isolated diagnostics for OSINT run packets without exposing secrets to untrusted code.

configured

Required env

cloak enable vercel sandbox

Signed webhook delivery

Protected case lifecycle event emission with HMAC signing and Postgres delivery ledger.

missing-env

Required env

Server secretcloak webhook target url

AWS evidence vault credentials

Server-side object storage credential set for evidence vault operations.

configured

Required env

aws access idServer secret

Vercel AI Gateway

Redacted case guidance and draft generation through Vercel-managed model routing.

configured

Required env

Server secret

Direct AI provider fallbacks

Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

missing-env

Required env

Server secret

Wayback source evidence

Authorized public archive checks and historical source evidence collection.

missing-env

Required env

Server secret

Twilio secure communications

Approved client notifications and phone verification workflows from server-side routes.

missing-env

Required env

Server secret

Numverify phone validation

Server-side validation of authorized onboarding phone identifiers, with visibility-policy evidence and task workflow output.

configured

Required env

Server secret

Recovery-answer exposure review

Defensive source-link workflow for human review of password-recovery clue exposure without storing actual answer values. AI Gateway is used only when available; deterministic fallback remains supported.

configured

Required env

OSINT connector suite

Authorized-source adapters for ACE correlation mapping, Sherlock, SpiderFoot, Epieos, IntelTechniques, Hunchly, Overpass Turbo, and public filings. Local and bounded adapters can persist findings, evidence, and kanban tasks; provider/manual adapters create human-review work with source links.

Select client first

Runnable

Human review

Needs config

Select a client to run adapters

ACE correlation map

correlation-analysis · local-analysis

Runnable

Local graph-aware correlation risk model over the authorized client identifier set. It recommends human-approved exposure reduction, not automated metadata poisoning.

full_namephoneemailaddresshandlebusiness_entitydomainalias

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: None

Sherlock Project

identity-correlation · local-cli

Needs config

Username correlation across public sites when a local Sherlock CLI is installed.

handlealias

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: SHERLOCK_BIN

SpiderFoot

identity-correlation · local-cli

Needs config

Local SpiderFoot CLI/service bridge for approved identifiers. The route records a task unless a local command is configured.

domainemailbusiness_entityfull_name

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: SPIDERFOOT_BIN

Epieos

identity-correlation · human-review

Human review

Email and phone OSINT provider. Treated as human-review unless an approved server API contract is added.

emailphone

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: EPIEOS_API_KEY

IntelTechniques automation

checklist · local-analysis

Runnable

Backend source-playbook automation inspired by public OSINT workflows. Cloak owns the query generation, evidence linking, and human approval tasks.

full_namephoneemailaddresshandlebusiness_entitydomain

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: None

Hunchly

capture · local-export

Runnable

Local Hunchly export ingestion. Uses HUNCHLY_EXPORT_DIR when a desktop capture export is available.

evidence_export

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: HUNCHLY_EXPORT_DIR

Overpass Turbo

geo · bounded-http

Runnable

Bounded OpenStreetMap address-surface review for authorized address identifiers.

address

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: None

Public filings / PACER

public-records · human-review

Human review

Business/entity public-records review queue with SEC EDGAR and PACER source links.

business_entitydomainfull_name

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: None

Recovery-answer exposure review

checklist · local-analysis

Runnable

LLM-assisted defensive review queue for public clues that may weaken account recovery questions. It generates review opportunities, not secret answers.

full_namephoneemailhandlealias

Project Evidence source

Runtime contract

Protected action: Runs only through allowlisted server routes with backend authorization.
External action taken: false
Required config: None

Platform trust artifacts

Public-safe source contracts used for WebhookLab, Sandbox, AgentOps, and TrustOps handoffs. These links are evidence sources for the platform boundary; protected actions still require server-side authorization.

Target: /api/v1/trust-artifacts

AgentOps

https://agentops.platphormnews.com

Health OpenAPI LLMS index

TrustOps

https://trustops.platphormnews.com

Health Docs Schema

WebhookLab

https://webhooks.platphormnews.com

Health OpenAPI Trust policy MCP manifest Capabilities

Sandbox

https://sandbox.platphormnews.com

Health OpenAPI Trust policy MCP manifest

Vercel Connect

Project dashboard

Running inside Vercel.

Connector metadata

UID: github/cloak-apricot-castle
App slug: cloak-apricot-castle
Project: platphorm-cloak

Production URL

cloak.platphormnews.com

preview environment.

Workflow runtime

Vercel Workflow ready

Durable handoff steps are represented in the protected intent ledger; WDK package is installed for the next route-level workflow promotion.

Persistence

Postgres case backend

Live

Durable principal, evidence, findings, Kanban, report and intent storage.

setup

Required config

database url or postgres url

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "postgres",
  "endpoint": null,
  "actions": [
    "setup"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Case Management

Case Kanban

Live

Local case task creation and lane movement backed by the active case-state store.

createmove

Required config

database url or postgres url

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "kanban",
  "endpoint": null,
  "actions": [
    "create",
    "move"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Case calendar

Live

Case cadence derived from persisted remediation tasks.

create

Required config

database url or postgres url

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "calendar",
  "endpoint": null,
  "actions": [
    "create"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Reporting / Handoff

Executive reports

Live

Case-derived report generation and human-review intents persisted locally.

generatereview

Required config

database url or postgres url

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "reports",
  "endpoint": null,
  "actions": [
    "generate",
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Docs

Live

Publish approved case-derived executive reports to the PlatPhorm Docs service.

publish

Required config

Server operator credentialPlatform handoff flag

Target: https://docs.platphormnews.com/api/mcp

Integration evidence

{
  "key": "docs",
  "endpoint": "https://docs.platphormnews.com/api/mcp",
  "actions": [
    "publish"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sheets

Live

Export approved findings, risk scores and task matrices to PlatPhorm Sheets.

export

Required config

Server operator credentialPlatform handoff flag

Target: https://sheets.platphormnews.com/api/mcp

Integration evidence

{
  "key": "sheets",
  "endpoint": "https://sheets.platphormnews.com/api/mcp",
  "actions": [
    "export"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Files

Live

Upload approved reports, evidence bundles, and public media candidate manifests to the PlatPhorm Files service.

uploadstore-media-manifest

Required config

Server operator credentialPlatform handoff flag

Target: https://files.platphormnews.com/api/mcp

Integration evidence

{
  "key": "files",
  "endpoint": "https://files.platphormnews.com/api/mcp",
  "actions": [
    "upload",
    "store-media-manifest"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Deployment

Visibility policy

Live

Runtime flag for redacted, private, or public authorized case data surfaces.

inspect

Required config

cloak visibility mode

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "visibility-policy",
  "endpoint": null,
  "actions": [
    "inspect"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "cloak visibility mode",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Vercel runtime

Live

Production request/runtime metadata and deployment environment awareness.

inspect

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "vercel",
  "endpoint": null,
  "actions": [
    "inspect"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evidence Storage

Public media capture

Live

Bounded public-photo candidate manifests stored through Files for authorized case review.

collectstore

Required config

cloak public media captureServer operator credentialPlatform handoff flag

Target: https://files.platphormnews.com/api/mcp

Integration evidence

{
  "key": "public-media-capture",
  "endpoint": "https://files.platphormnews.com/api/mcp",
  "actions": [
    "collect",
    "store"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "cloak public media capture",
      "configured": true
    },
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Vercel Blob evidence storage

Live

Server-side private artifact storage for OSINT run packets, evidence bundles, exports, and screenshots.

storeretrieve

Required config

Server secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "vercel-blob",
  "endpoint": null,
  "actions": [
    "store",
    "retrieve"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

AWS evidence vault

Live

Server-side AWS object-store credentials for evidence vault workflows.

storearchive

Required config

aws access idServer secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "aws-evidence-vault",
  "endpoint": null,
  "actions": [
    "store",
    "archive"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "aws access id",
      "configured": true
    },
    {
      "label": "Server secret",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Hunchly

Live

Local Hunchly export indexer for protected evidence review when a desktop export directory is configured.

index

Required config

hunchly export dir

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "hunchly",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "index"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "hunchly export dir",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Auditability

Trace

Live

Link case workflow intents and route checks into the PlatPhorm trace layer.

link

Required config

Server operator credentialPlatform handoff flag

Target: https://trace.platphormnews.com/api/v1/spans

Integration evidence

{
  "key": "trace",
  "endpoint": "https://trace.platphormnews.com/api/v1/spans",
  "actions": [
    "link"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Monitor

Live

Availability and recurrence monitoring for the public-safe Cloak Harbor surface.

check

Required config

Server operator credentialPlatform handoff flag

Target: https://monitor.platphormnews.com/api/v1/checks

Integration evidence

{
  "key": "monitor",
  "endpoint": "https://monitor.platphormnews.com/api/v1/checks",
  "actions": [
    "check"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Exposure Discovery

BrowserOps

Live

Run browser journeys, screenshots and public-safe capture workflows for authorized cases.

capturerun

Required config

Server operator credentialPlatform handoff flag

Target: https://browserops.platphormnews.com/api/mcp

Integration evidence

{
  "key": "browserops",
  "endpoint": "https://browserops.platphormnews.com/api/mcp",
  "actions": [
    "capture",
    "run"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

SearchOps

Live

Bounded exposure discovery and recurrence monitoring for authorized identifiers.

discover

Required config

Server operator credentialPlatform handoff flag

Target: https://cloak.platphormnews.com/api/v1/workloads/self-case

Integration evidence

{
  "key": "searchops",
  "endpoint": "https://cloak.platphormnews.com/api/v1/workloads/self-case",
  "actions": [
    "discover"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Wayback evidence

Missing env

Server-side archive checks for authorized public evidence and historical source links.

lookupcapture

Required config

Server secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "wayback",
  "endpoint": null,
  "actions": [
    "lookup",
    "capture"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": false
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Numverify phone validation

Live

Server-side APILayer Numverify validation for authorized onboarding phone identifiers, with evidence, Kanban, webhook, and Sandbox records.

queuevalidate

Required config

Server secret

Target: https://cloak.platphormnews.com/api/v1/operator/phone/numverify

Integration evidence

{
  "key": "numverify",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/phone/numverify",
  "actions": [
    "queue",
    "validate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

ACE correlation map

Live

Local graph-aware correlation scoring over authorized client identifiers with explainable remediation planning.

scoreplan

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "ace-correlation-map",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "score",
    "plan"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sherlock Project

Missing env

Local Sherlock CLI adapter for authorized username and alias correlation checks.

run

Required config

sherlock bin

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "sherlock",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "run"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "sherlock bin",
      "configured": false
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

SpiderFoot

Missing env

Local SpiderFoot command adapter for authorized domain, email, and entity pivots.

run

Required config

spiderfoot bin

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "spiderfoot",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "run"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "spiderfoot bin",
      "configured": false
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Epieos

Live

Human-review queue for authorized email and phone checks until an approved server API contract is added.

review

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "epieos",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

IntelTechniques

Live

Cloak-owned source playbook automation inspired by public OSINT workflows; generates evidence links and approval tasks for authorized identifiers.

generatechecklist

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "inteltechniques",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "generate",
    "checklist"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Recovery-answer exposure review

Live

Defensive LLM-assisted review queue for public clues that may weaken password recovery questions. It never stores actual answer values.

generatereview

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "recovery-answer-review",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "generate",
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Overpass Turbo

Live

Bounded OpenStreetMap address-surface review for authorized address identifiers.

query

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "overpass",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "query"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evidence Validation

TrustOps

Live

Evidence confidence, false-positive review and trusted-domain validation.

validate

Required config

Server operator credentialPlatform handoff flag

Target: https://trace.platphormnews.com/api/v1/validation

Integration evidence

{
  "key": "trustops",
  "endpoint": "https://trace.platphormnews.com/api/v1/validation",
  "actions": [
    "validate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Spec

Live

Local schema and contract validation for findings, evidence and action packets.

validate

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "spec",
  "endpoint": null,
  "actions": [
    "validate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Evals

Live

Score risk-rubric consistency, release readiness and action-packet quality.

score

Required config

Server operator credentialPlatform handoff flag

Target: https://evals.platphormnews.com/api/v1/runs

Integration evidence

{
  "key": "evals",
  "endpoint": "https://evals.platphormnews.com/api/v1/runs",
  "actions": [
    "score"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Public filings / PACER

Live

SEC EDGAR and PACER-style source-link queue for authorized entity, domain, and name review.

review

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "public-filings",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "review"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Agent-Safe Operations

Claws

Live

Agentic remediation requests that remain protected and human-gated.

remediate

Required config

Server operator credentialPlatform handoff flag

Target: https://claws.platphormnews.com/api/v1/workflows

Integration evidence

{
  "key": "claws",
  "endpoint": "https://claws.platphormnews.com/api/v1/workflows",
  "actions": [
    "remediate"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Sandbox

Live

Safe replay and dry-run execution for action packets.

replayrun

Required config

Server operator credentialPlatform handoff flag

Target: https://sandbox.platphormnews.com/api/mcp

Integration evidence

{
  "key": "sandbox",
  "endpoint": "https://sandbox.platphormnews.com/api/mcp",
  "actions": [
    "replay",
    "run"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

WebhookLab

Live

Webhook simulation and delivery testing for protected events.

test

Required config

Server operator credentialPlatform handoff flag

Target: https://webhooks.platphormnews.com/api/mcp

Integration evidence

{
  "key": "webhooklab",
  "endpoint": "https://webhooks.platphormnews.com/api/mcp",
  "actions": [
    "test"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Webhooks

Live

Protected local event emission, HMAC signing, optional delivery target, and Postgres delivery ledger for case lifecycle events.

emitdelivertest

Required config

database url or postgres url

Target: https://cloak.platphormnews.com/api/v1/operator/webhooks/test

Integration evidence

{
  "key": "webhooks",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/webhooks/test",
  "actions": [
    "emit",
    "deliver",
    "test"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "database url or postgres url",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

AgentUI

Live

Agent-facing workflow validation and human-machine handoff review surfaces.

validatehandoff

Required config

Server operator credentialPlatform handoff flag

Target: https://agentui.platphormnews.com/api/mcp

Integration evidence

{
  "key": "agentui",
  "endpoint": "https://agentui.platphormnews.com/api/mcp",
  "actions": [
    "validate",
    "handoff"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Vercel Sandbox diagnostics

Live

Optional isolated diagnostics for redacted OSINT run packets using deny-all network policy.

diagnose

Required config

cloak enable vercel sandbox

Target: https://cloak.platphormnews.com/api/v1/operator/osint/connectors

Integration evidence

{
  "key": "vercel-sandbox",
  "endpoint": "https://cloak.platphormnews.com/api/v1/operator/osint/connectors",
  "actions": [
    "diagnose"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "cloak enable vercel sandbox",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Vercel AI Gateway

Planned

Model routing for AI-assisted drafts. Template fallback remains available when missing.

draft

Required config

Server secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "ai-gateway",
  "endpoint": null,
  "actions": [
    "draft"
  ],
  "state": "planned",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": true
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

AI provider fallbacks

Missing env

Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

draftclassify

Required config

Server secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "ai-provider-fallbacks",
  "endpoint": null,
  "actions": [
    "draft",
    "classify"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": false
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}

Pentest

Live

Authorized OSINT and surface-assessment handoff through the JC PenTest Harness MCP.

scope-previewdry-runreal-runreport

Required config

Server operator credentialPlatform handoff flag

Target: https://pentest.platphormnews.com/api/mcp

Integration evidence

{
  "key": "pentest",
  "endpoint": "https://pentest.platphormnews.com/api/mcp",
  "actions": [
    "scope-preview",
    "dry-run",
    "real-run",
    "report"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Topology

Atlas

Live

Cross-site topology and relationship context for Cloak Harbor workflows.

sync

Required config

Server operator credentialPlatform handoff flag

Target: https://atlas.platphormnews.com/api/v1/topology

Integration evidence

{
  "key": "atlas",
  "endpoint": "https://atlas.platphormnews.com/api/v1/topology",
  "actions": [
    "sync"
  ],
  "state": "live",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server operator credential",
      "configured": true
    },
    {
      "label": "Platform handoff flag",
      "configured": true
    }
  ],
  "protectedActionReady": true,
  "externalActionTaken": false
}

Communications

Twilio communications

Missing env

Approved phone verification and client-notification workflows from server-side routes.

verifynotify

Required config

Server secret

Target: local backend (vercel_postgres)

Integration evidence

{
  "key": "twilio",
  "endpoint": null,
  "actions": [
    "verify",
    "notify"
  ],
  "state": "missing-env",
  "dataMode": "authorized_local",
  "requiredConfig": [
    {
      "label": "Server secret",
      "configured": false
    }
  ],
  "protectedActionReady": false,
  "externalActionTaken": false
}