Connect McTime to Elastic Security

Both apps 27McTime 17Elastic Security 10

• Trigger
  New Organization

  Triggered when a new organization is created in McTime.

• Action
  Add Assignment

  Adds a user to an organization with a role (or edits an existing assignment when an Assignment ID is given) in McTime.

• Action
  Add User

  Create (or edit, per vendor's add-or-edit semantics) a user.

• Action
  Create Client

  Creates a new client (an organization of type "client") in McTime.

• Action
  Create Organization

  Creates a new organization (project, client, branch, etc.) in McTime.

• Action
  Create Project

  Creates a new project in McTime. Projects are McTime organization units of type "project" that time entries can be booked against.

• Action
  Delete User

  Deletes a McTime user by ID. All of the user's time entries and payroll results are deleted too.

• Action
  Find Client

  Returns up to 50 McTime clients whose name contains the specified text.

• Action
  Find Organization

  Returns up to 50 organizations whose name contains the specified text.

• Action
  Find Project

  Returns up to 50 McTime projects whose name contains the specified text.

• Action
  Get Time Entry

  Retrieve a single McTime time entry by its ID.

• Action
  Get User

  Retrieves a single McTime user by id, including roles, address, export ids and employment details.

• Action
  List Assignments

  Lists a McTime user's assignments to organizations, grouped by role.

• Action
  List Time Entries

  Retrieve time entries within a date range, optionally filtered by user IDs.

• Action
  List Users

  Retrieves the users the authenticated McTime user is allowed to see, optionally filtered by user ids, organization, role and active status. Returns at most 20 users per page.

• Action
  Start Clocking

  Starts a running clock (stopwatch) for a McTime user. One user can have only one running clock at a time.

• Action
  Stop Clocking

  Stops the running McTime clock for a user, turning it into a normal time entry.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.