Connections

What the platform is allowed to read, and what it is allowed to reach.

In plain terms: nothing else in the product works until these are set up correctly.

The modules in this section

Registering and verifying links to AWS, Azure, GCP, and OCI. The prerequisite for everything.

Slack, Teams, Jira, Linear, GitHub, Kubernetes ingestion, and execution windows.

Direct connections to LLM vendors, so AI spend outside the cloud bill is included.

Identity & SSO

Enterprise identity federation — OIDC and SAML 2.0 single sign-on, and SCIM 2.0 automated user and group provisioning.

Cloud Accounts

Registering and verifying credentialed links to AWS, Azure, GCP, and OCI — with separated read and execution roles and precise permission preflight.