--- title: "Connect Cliniko to Elastic Security - APIANT.ai" description: "When \"New or updated attendee\" fires in Cliniko, your agent runs \"Add case comment\" in Elastic Security." canonical: "https://apiant.ai/connect/cliniko-to-elastic-security" --- # Connect Cliniko to Elastic Security When **New or updated attendee** fires in [Cliniko](https://apiant.ai/connections/cliniko), your agent runs **Add case comment** in [Elastic Security](https://apiant.ai/connections/elastic-security). Describe the whole flow and it is built, tested on every scenario and kept running. Cliniko **17** triggers Cliniko **36** actions Elastic Security **10** actions What the catalog holds today. Ask for anything missing and your agent reads the API documentation and adds it. ## What do you want Cliniko and Elastic Security to do together? Give your AI client this address. `https://mcp.apiant.ai` One connection does both: ask your client to act in an app once, or have it build an automation that keeps running. Any client that takes a remote MCP server. Nothing to install. Create your free account, then sign in once in your browser. ### Set it up in your client ### Claude Code Run this in the directory you want to work in. `claude mcp add --transport http -s project apiant-ai https://mcp.apiant.ai` Start Claude Code there, approve the server, and sign in in the browser page it opens. [Claude Code guide (opens in a new tab)](https://apiant.ai/docs/mcp/claude-code) ### Claude, web and desktop Open Customize, then Connectors, then Add custom connector, and paste the address. On Team and Enterprise an owner adds it first. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Cursor Add the address to your MCP configuration as a server URL. Cursor signs you in in your browser. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Zed Open Settings, then AI, then MCP Servers, then Add Server, then Add Remote Server. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Codex and the ChatGPT desktop app Open Settings, then MCP servers, then Add server, and choose Streamable HTTP. From the terminal, Codex takes the address with its own add command and then signs you in. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) ### Any other MCP client Paste the address where the client asks for a remote MCP server URL, and name the server apiant-ai where it lets you. APIANT's skills reach the client over the same connection. [Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp) Example flows ## What Cliniko can start in Elastic Security - When **New or updated attendee** in Cliniko then **Add case comment** in Elastic Security - When **New or updated business** in Cliniko then **Add exception list item** in Elastic Security Starting points drawn from the triggers and actions in the catalog today. Describe the flow you need, at any depth, and your agent builds it and tests every scenario before it ships. Everything your agent can do with Cliniko and Elastic Security ## Triggers and actions 17 triggers · 46 actions - Trigger **Cancelled individual appointment** Triggered when an individual appointment is cancelled. - Trigger **New cancelled attendee** Triggered when an attendee is cancelled. - Trigger **New or updated attendee** Triggered when an attendee is created or updated. - Trigger **New or updated business** Triggered when a business is created or updated. - Trigger **New or updated communication** Triggered when a communication is created or updated. - Trigger **New or updated contact** Triggered when a contact is created or updated. - Trigger **New or updated daily availability** Triggered when a daily availability is created or updated. - Trigger **New or updated group appointment** Triggered when a group appointment is created or updated. - Trigger **New or updated individual appointment** Triggered when an individual appointment is created or updated. - Trigger **New or updated invoice** Triggered when an invoice is created or updated. - Trigger **New or updated patient** Triggered when a patient is created or updated. - Trigger **New or updated patient case** Triggered when a patient case is created or updated. - Trigger **New or updated practitioner** Triggered when a practitioner is created or updated. - Trigger **New or updated treatment notes** Triggered when treatment notes is created or updated. - Trigger **Patient added or removed for group appointment in date range** Triggered when a patient is added or removed for a group appointment within the specified date range. - Trigger **Two-way sync new or updated contacts** A trigger for two-way syncing new and updated contacts, with enhanced on-the-fly mapping. Can only be used with enhanced two-way sync actions that support on-the-fly mapping. - Trigger **Two-way sync new or updated patients** A trigger for two-way syncing new and updated patients, with enhanced on-the-fly mapping. Can only be used with enhanced two-way sync actions that support on-the-fly mapping. - Action **Archive patient** Archives a patient. An error will occur if the patient is not found. - Action **Create contact** Creates a new contact. - Action **Create patient** Creates a new patient. - Action **Find Appointment by Patient Id** Returns appointment details for the specified patient if the Patient ID exists. - Action **Find cancelled appointment** Searches for a cancelled appointment. If no matching appointment is found, an error occurs. - Action **Find contact by email** Returns details of the contact having the specified email address. An error occurs if zero or multiple are found. - Action **Find patient by email** Returns details of the patient having the specified email address. An error occurs if zero or multiple are found. - Action **Find Patient by Email and Date of Birth** Finds the single active patient whose email and date of birth both match, returning the patient ID and the match count. - Action **Get appointment** Returns details of the specified appointment. - Action **Get appointments by practitioner ID** Returns appointment details by practitioner ID. - Action **Get appointment type** Returns details of the specified appointment type. - Action **Get appointment type billable item** Returns details for a billable item. - Action **Get billable item** Returns details of the specified billable item. - Action **Get business** Returns details of the specified business. - Action **Get cancelled appointment** Returns details of the specified cancelled appointment. - Action **Get contact** Returns details of the specified contact. - Action **Get group appointment** Returns details of the specified group appointment. - Action **Get group appointment attendees** Returns attendee information for the specified group appointment. - Action **Get individual appointment attendees** Returns attendee information for the specified individual appointment. - Action **Get invoice** Returns details of the specified invoice. - Action **Get patient** Returns details of the specified patient. - Action **Get patient attachment** Returns a patient attachment from Cliniko, including its filename, file type and description. - Action **Get patient case** Returns details of the specified patient case. - Action **Get patient referral source** Returns the referral source for the specified patient. - Action **Get practitioner** Returns details of the specified practitioner. An error occurs if not found. - Action **Get practitioner availabilities** Returns availability information for the specified practitioner. - Action **List Appointments in Date Range** Returns every individual appointment that starts within a given time window, with the total count. - Action **List invoices for patient case** Emits all invoice IDs for the specified patient case. - Action **List Patients** Returns Cliniko patients, optionally filtered (e.g. updated after a date) and sorted, with the total count. - Action **Two-way sync add or update a contact** An action for two-way syncing new and updated contacts, with enhanced on-the-fly mapping using contact email addresses for matching. Can only be used with enhanced two-way sync triggers that support on-the-fly mapping. - Action **Two-way sync add or update a patient** An action for two-way syncing new and updated patients, with enhanced on-the-fly mapping using patient email addresses for matching. Can only be used with enhanced two-way sync triggers that support on-the-fly mapping. - Action **Update contact** Updates a contact. - Action **Update patient** Updates a patient. - Action **Update patient custom field** Updates the value of the specified custom field for the specified patient. - Action **Update patient referral** Sets or changes a patient's referral source. Choose the referral source type; supply a Referrer ID only for types that take one (e.g. Patient or Contact). - Action **Upload patient attachment** Uploads a file, such as a PDF, to a patient's record in Cliniko as an attachment. - Action **Add case comment** Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case. - Action **Add detection rule** Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning). - Action **Add exception list item** Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts. - Action **Delete detection rule** Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule. - Action **Find cases** Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date. - Action **Find detection rules** Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state. - Action **Get detection rule** Returns a detection rule's full details, looked up by its internal id or its stable rule_id. - Action **Get exception list item** Returns one exception list item, looked up by its id or its human-readable item ID. - Action **Update case** Updates an existing case's title, description, status, severity, tags, assignees and other fields. - Action **Update detection rule** Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule. ## Each app on its own - [ **Cliniko** Cliniko is a practice management platform — manage patients, appointments, invoices, contacts, and...](https://apiant.ai/connections/cliniko) - [ **Elastic Security** SIEM and XDR platform for detecting, investigating, and automating response to security threats across...](https://apiant.ai/connections/elastic-security) Reviews ## What our customers say ## More from Cliniko - [ **Cliniko to JIRA** Atlassian JIRA Cloud — issue tracking and project management.](https://apiant.ai/connect/cliniko-to-jira) - [ **Cliniko to Zoom** Zoom unifies cloud video conferencing, simple online meetings, group messaging, and a software-based...](https://apiant.ai/connect/cliniko-to-zoom) - [ **Cliniko to SendGrid** SendGrid by Twilio — email delivery and marketing platform.](https://apiant.ai/connect/cliniko-to-sendgrid) - [ **Cliniko to Intercom** Intercom is a customer communications platform for support, engagement, and marketing.](https://apiant.ai/connect/cliniko-to-intercom) - [ **Cliniko to Freshdesk** Freshdesk is a cloud-based customer support and helpdesk platform.](https://apiant.ai/connect/cliniko-to-freshdesk) - [ **Cliniko to Klaviyo** Klaviyo is a marketing automation platform for email and SMS.](https://apiant.ai/connect/cliniko-to-klaviyo) ## More into Elastic Security - [ **HubSpot to Elastic Security** HubSpot is your all-in-one stop for all of your marketing software needs.](https://apiant.ai/connect/hubspot-to-elastic-security) - [ **Salesforce to Elastic Security** Salesforce is a leading enterprise customer relationship management (CRM) platform.](https://apiant.ai/connect/salesforce-to-elastic-security) - [ **Slack to Elastic Security** Slack is a messaging platform for teams. Post messages, manage channels, users, reminders, and react to...](https://apiant.ai/connect/slack-to-elastic-security) - [ **Google Sheets to Elastic Security** Google Sheets](https://apiant.ai/connect/google-sheets-to-elastic-security) - [ **Gmail to Elastic Security** Gmail is Google’s email service, featuring spam protection, search functions, and seamless integration with...](https://apiant.ai/connect/gmail-to-elastic-security) - [ **Google Calendar to Elastic Security** Google Calendar is a time management tool providing scheduling features, event reminders, and integration...](https://apiant.ai/connect/google-calendar-to-elastic-security) Questions ## Cliniko and Elastic Security, answered ### ### What can start an automation from Cliniko? Any of Cliniko's 17 triggers in the catalog, including New cancelled attendee, New or updated attendee, New or updated business and New or updated communication. Describe the moment in plain language and your agent picks the right one. ### ### What can your agent do in Elastic Security when something happens in Cliniko? Any of Elastic Security's 10 actions, including Update case, Update detection rule, Add case comment and Add detection rule. Your agent maps the data both ways and tests every scenario before it ships. ### ### Can it also run from Elastic Security to Cliniko? Elastic Security has no triggers in the catalog today, so automations start in Cliniko. If you need the other direction, ask: your agent reads Elastic Security's API documentation and adds it. ### ### Do I have to build a connector for Cliniko or Elastic Security? No. Both are in the catalog with their triggers and actions. You describe the automation; your agent builds it, tests every scenario and keeps it running. ### ### Can my AI client use Cliniko and Elastic Security without building an automation? Yes. With your AI client connected to APIANT, ask it to do something in either app once and it runs that action on the spot. Ask for an automation and your agent builds it, tests every scenario and keeps it running. One connection covers both. ### ### What happens when something fails? Your agent works that out for you. It plans the failure paths along with the happy path, then tests every scenario before it ships. ### ### Is there a free plan? Yes. Every plan includes the agent, including free, and building from your own AI client spends no assistant credits.