Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Detectify (BYOK) — connector documentation

  • MCP endpoint: https://byok-detectify.connectorbay.com/mcp
  • REST API: POST https://byok-detectify.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-detectify.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Detectify Detectify API v3 key, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-detectify.connectorbay.com/health · Tool schemas: https://byok-detectify.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-detectify · agent@connectorbay.com

What Detectify (BYOK) is for

Detectify (BYOK) lets an AI assistant read your own Detectify data through the Detectify API with a key you supply (Detectify API v3 key). Read-only: 7 tools (list_ip_addresses, list_technologies, list_ports, list_breaches, list_domain_monitoring_settings, list_connectors, get_connector). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.detectify.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Detectify. Detectify and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which new IP addresses appeared on our attack surface this month?"
  • "Which nginx versions does Detectify see on our domains?"
  • "Which ports are open on our attack surface besides 80 and 443?"
  • "Which policy breaches are new on our assets?"
  • "Is subdomain takeover monitoring enabled on our domains?"
  • "Did the Detectify cloud connectors run successfully?"

What it does

  • list_ip_addresses: List IP addresses discovered on your attack surface with the domain, first-seen and disappeared times, ASN and country. Filter by when they appeared or vanished.
  • list_technologies: List web technologies (server software, frameworks, with versions and categories) detected on your attack surface.
  • list_ports: List ports found on your attack surface with the IP address, domain and open/closed status; filter by status or port numbers.
  • list_breaches: List policy breaches detected on your assets with policy name, severity, status and timing.
  • list_domain_monitoring_settings: List the surface monitoring settings of each monitored domain asset (which scans are enabled, port scanning options, inheritance from the root domain).
  • list_connectors: List cloud and DNS connectors that feed asset discovery (provider, last run status and time); credentials are never returned.
  • get_connector: Get one discovery connector by id with provider and last run status.

BYOK key

You bring your own Detectify Detectify API v3 key (https://developer.detectify.com/). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.detectify.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Detectify API (api.detectify.com) with a BYOK key; documentation: https://developer.detectify.com/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Detectify. Detectify and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Detectify account.

Built for: Worldwide. Languages: English.