---
title: "Connect Recurly to Elastic Security - APIANT.ai"
description: "When \"Prerenewal of subscription\" fires in Recurly, your agent runs \"Add case comment\" in Elastic Security."
canonical: "https://apiant.ai/connect/recurly-to-elastic-security"
---

# Connect Recurly to Elastic Security

When **Prerenewal of subscription** fires in [Recurly](https://apiant.ai/connections/recurly), your agent runs **Add case comment** in [Elastic Security](https://apiant.ai/connections/elastic-security). Describe the whole flow and it is built, tested on every scenario and kept running.

Recurly **1** trigger Recurly **80** actions Elastic Security **10** actions

What the catalog holds today. Ask for anything missing and your agent reads the API documentation and adds it.

## What do you want Recurly and Elastic Security to do together?

Give your AI client this address.

`https://mcp.apiant.ai`

One connection does both: ask your client to act in an app once, or have it build an automation that keeps running. Any client that takes a remote MCP server. Nothing to install. Create your free account, then sign in once in your browser.

### Set it up in your client

### Claude Code

Run this in the directory you want to work in.

`claude mcp add --transport http -s project apiant-ai https://mcp.apiant.ai`

Start Claude Code there, approve the server, and sign in in the browser page it opens.

[Claude Code guide (opens in a new tab)](https://apiant.ai/docs/mcp/claude-code)

### Claude, web and desktop

Open Customize, then Connectors, then Add custom connector, and paste the address. On Team and Enterprise an owner adds it first.

[Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp)

### Cursor

Add the address to your MCP configuration as a server URL. Cursor signs you in in your browser.

[Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp)

### Zed

Open Settings, then AI, then MCP Servers, then Add Server, then Add Remote Server.

[Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp)

### Codex and the ChatGPT desktop app

Open Settings, then MCP servers, then Add server, and choose Streamable HTTP. From the terminal, Codex takes the address with its own add command and then signs you in.

[Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp)

### Any other MCP client

Paste the address where the client asks for a remote MCP server URL, and name the server apiant-ai where it lets you. APIANT's skills reach the client over the same connection.

[Setup guide (opens in a new tab)](https://apiant.ai/docs/mcp)

Example flows

## What Recurly can start in Elastic Security

- When **Prerenewal of subscription** in Recurly then **Add case comment** in Elastic Security
- When **Prerenewal of subscription** in Recurly then **Add exception list item** in Elastic Security

Starting points drawn from the triggers and actions in the catalog today. Describe the flow you need, at any depth, and your agent builds it and tests every scenario before it ships.

Everything your agent can do with Recurly and Elastic Security

## Triggers and actions 1 trigger · 90 actions

- Trigger

**Prerenewal of subscription**

Instant trigger: fires before a Recurly subscription renews (webhook).

- Action

**Add add-on to subscription**

Adds an add-on to an existing subscription. An error occurs if the subscription already has the add-on.

- Action

**Add coupon**

Create a new discount coupon.

- Action

**Add coupon redemption**

Apply a coupon to an account or subscription.

- Action

**Add gift card**

Create a new gift card.

- Action

**Add invoice**

Create an invoice for an account's pending line items.

- Action

**Add item**

Create a new catalog item.

- Action

**Add plan**

Create a new subscription plan.

- Action

**Add plan add-on**

Create a new add-on for a subscription plan.

- Action

**Add shipping address**

Create a new shipping address for an account.

- Action

**Add subscription change**

Schedule a pending change to a subscription (e.g. plan or quantity change at renewal).

- Action

**Adjust add-on quantity**

Increases or decreases the quantity of the specified add-on. NOTE: this action assumes the subscription only has a single add-on! Do not use if the subscription has multiple add-ons, otherwise all add-ons other than the specified one will be deleted if the computed quantity is zero!

- Action

**Cancel subscription**

Cancels a subscription so it remains active until the end of the current bill cycle, then expires.

- Action

**Convert trial subscription**

Immediately converts a trial subscription to a fully active paid subscription, creating and collecting an invoice for auto-collecting subscriptions. If the invoice cannot be collected, the subscription will remain in trial. The subscription must be in a trial; active, paused, expired, cancelled, or failed subscriptions cannot be converted.

- Action

**Create account**

Creates a new account. An error occurs if the account code already exists.

- Action

**Create line item**

Creates a one-time charge or credit on the specified account. type is charge or credit.

- Action

**Create purchase - add subscription**

Adds a subscription to the specified purchase. Must be passed a Purchase ID emitted by 'Create purchase - initialize'.

- Action

**Create purchase - add subscription add-on**

Adds an add-on to the specified subscription within a staged purchase. The subscription (by plan code) must have already been added to the purchase.

- Action

**Create purchase - initialize**

Initializes a new purchase. Emits a Purchase ID that must be passed into other create purchase actions to add items to the purchase and finalize.

- Action

**Create purchase - submit**

Submits the assembled purchase to Recurly.

- Action

**Create subscription**

Creates a new subscription for an account on a plan. Pass account_code, plan_code, and currency.

- Action

**Deactivate account**

Deactivates (deletes) the specified account.

- Action

**Delete account billing info**

Remove an account's stored billing information.

- Action

**Delete coupon**

Expire a coupon so it can no longer be redeemed.

- Action

**Delete coupon redemption**

Remove an active coupon redemption from an account or subscription.

- Action

**Delete item**

Deactivate an item so it cannot be bought again. Existing line items are unaffected.

- Action

**Delete line item**

Delete an uninvoiced line item.

- Action

**Delete plan**

Remove a subscription plan.

- Action

**Delete plan add-on**

Remove an add-on from a plan.

- Action

**Delete shipping address**

Remove an account's shipping address.

- Action

**Delete subscription change**

Cancel a subscription's pending scheduled change.

- Action

**Delete usage record**

Deletes a usage record from a subscription add-on.

- Action

**Get account**

Returns all fields for the specified account. The account ID may be a Recurly UUID or a code-prefixed account code.

- Action

**Get account balance**

Fetch an account's current balance and past-due status.

- Action

**Get account billing info**

Returns the billing information for the specified account.

- Action

**Get add-on**

Fetch a single add-on by ID.

- Action

**Get all subscriptions**

Returns all subscriptions for the account.

- Action

**Get coupon**

Fetch a coupon by its code.

- Action

**Get gift card**

Fetch a gift card by ID.

- Action

**Get invoice**

Returns the specified invoice. ID may be a Recurly UUID or the invoice number.

- Action

**Get item**

Fetch a catalog item by ID.

- Action

**Get line item**

Fetch a single line item by ID.

- Action

**Get plan**

Returns the specified plan. The ID may be a Recurly UUID or a code-prefixed plan code.

- Action

**Get shipping address**

Fetch an account's shipping address.

- Action

**Get subscription**

Returns all fields for the specified subscription. The ID may be a Recurly UUID or a uuid-prefixed value.

- Action

**Get subscription add-ons**

Returns all add-ons for the specified subscription.

- Action

**Get subscription change**

Fetch a subscription's pending scheduled change.

- Action

**Get transaction**

Fetch a single payment transaction by ID.

- Action

**List account invoices**

Returns the invoices for the specified account.

- Action

**List account line items**

Returns the line items (charges and credits) for the specified account.

- Action

**List account notes**

List the notes on an account.

- Action

**List accounts**

Returns a list of accounts. Supports limit, order, sort, and state filters.

- Action

**List account subscriptions**

Returns the subscriptions for the specified account.

- Action

**List active coupon redemptions**

Read the coupon currently applied to an account. Fails with a not-found error when the account has no coupon on it.

- Action

**List a subscription add-on's usage records**

Lists all usage records for a subscription add-on for the specified subscription.

- Action

**List coupons**

Returns a list of coupons for the site.

- Action

**List credit payments**

List credit payments issued across the site.

- Action

**List gift cards**

List gift cards issued on the site.

- Action

**List invoices**

Returns a list of all invoices on the site. Supports limit and state filters.

- Action

**List items**

List a site's catalog items.

- Action

**List plans**

Returns a list of plans for the site.

- Action

**List shipping addresses**

List an account's shipping addresses.

- Action

**List subscriptions**

Returns a list of all subscriptions. Supports limit and state filters.

- Action

**List transactions**

List payment transactions across the site.

- Action

**Log a usage record on subscription add-on**

Logs a usage record on the specified subscription add-on.

- Action

**Pause subscription**

Pauses a subscription for the given number of remaining billing cycles.

- Action

**Reactivate account**

Reactivate an inactive Recurly account.

- Action

**Reactivate subscription**

Reactivates a canceled subscription so it renews at the end of the current bill cycle.

- Action

**Redeem gift card**

Redeem a gift card's redemption code onto an account.

- Action

**Refund invoice**

Issue a refund against an invoice.

- Action

**Remove add-on from subscription**

Removes an add-on from a subscription.

- Action

**Terminate subscription**

Immediately terminates a subscription. refund may be none, partial, or full.

- Action

**Update account**

Updates the specified account.

- Action

**Update account billing info**

Set or replace an account's credit card / payment billing information.

- Action

**Update coupon**

Update an active coupon's details.

- Action

**Update item**

Update an existing catalog item.

- Action

**Update plan**

Update an existing subscription plan.

- Action

**Update plan add-on**

Update an existing plan add-on.

- Action

**Update shipping address**

Update an account's shipping address.

- Action

**Update subscription renewal date**

For an active subscription, this will change the next renewal date. For a subscription in a trial period, modifying the renewal date will change when the trial expires.

- Action

**Void invoice**

Void a credit invoice.

- Action

**Add case comment**

Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

- Action

**Add detection rule**

Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

- Action

**Add exception list item**

Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

- Action

**Delete detection rule**

Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

- Action

**Find cases**

Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

- Action

**Find detection rules**

Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

- Action

**Get detection rule**

Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

- Action

**Get exception list item**

Returns one exception list item, looked up by its id or its human-readable item ID.

- Action

**Update case**

Updates an existing case's title, description, status, severity, tags, assignees and other fields.

- Action

**Update detection rule**

Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

## Each app on its own

- [ **Recurly** Recurly is a subscription management and recurring billing platform.](https://apiant.ai/connections/recurly)
- [ **Elastic Security** SIEM and XDR platform for detecting, investigating, and automating response to security threats across...](https://apiant.ai/connections/elastic-security)

Reviews

## What our customers say

## More from Recurly

- [ **Recurly to Salesforce** Salesforce is a leading enterprise customer relationship management (CRM) platform.](https://apiant.ai/connect/recurly-to-salesforce)
- [ **Recurly to Slack** Slack is a messaging platform for teams. Post messages, manage channels, users, reminders, and react to...](https://apiant.ai/connect/recurly-to-slack)
- [ **Recurly to Shopify** Shopify is a commerce platform for online stores and retail point-of-sale.](https://apiant.ai/connect/recurly-to-shopify)
- [ **Recurly to QuickBooks Online** QuickBooks Online accounting — manage customers, invoices, bills, payments, vendors, expenses, and more via...](https://apiant.ai/connect/recurly-to-quickbooks-online)
- [ **Recurly to Trello** Trello is a visual collaboration tool that organizes projects into boards, lists, and cards.](https://apiant.ai/connect/recurly-to-trello)
- [ **Recurly to Zoom** Zoom unifies cloud video conferencing, simple online meetings, group messaging, and a software-based...](https://apiant.ai/connect/recurly-to-zoom)

## More into Elastic Security

- [ **HubSpot to Elastic Security** HubSpot is your all-in-one stop for all of your marketing software needs.](https://apiant.ai/connect/hubspot-to-elastic-security)
- [ **Salesforce to Elastic Security** Salesforce is a leading enterprise customer relationship management (CRM) platform.](https://apiant.ai/connect/salesforce-to-elastic-security)
- [ **Slack to Elastic Security** Slack is a messaging platform for teams. Post messages, manage channels, users, reminders, and react to...](https://apiant.ai/connect/slack-to-elastic-security)
- [ **Google Sheets to Elastic Security** Google Sheets](https://apiant.ai/connect/google-sheets-to-elastic-security)
- [ **Gmail to Elastic Security** Gmail is Google’s email service, featuring spam protection, search functions, and seamless integration with...](https://apiant.ai/connect/gmail-to-elastic-security)
- [ **Google Calendar to Elastic Security** Google Calendar is a time management tool providing scheduling features, event reminders, and integration...](https://apiant.ai/connect/google-calendar-to-elastic-security)

Questions

## Recurly and Elastic Security, answered

###

### What can start an automation from Recurly?

Any of Recurly's 1 trigger in the catalog, including Prerenewal of subscription. Describe the moment in plain language and your agent picks the right one.

###

### What can your agent do in Elastic Security when something happens in Recurly?

Any of Elastic Security's 10 actions, including Update case, Update detection rule, Add case comment and Add detection rule. Your agent maps the data both ways and tests every scenario before it ships.

###

### Can it also run from Elastic Security to Recurly?

Elastic Security has no triggers in the catalog today, so automations start in Recurly. If you need the other direction, ask: your agent reads Elastic Security's API documentation and adds it.

###

### Do I have to build a connector for Recurly or Elastic Security?

No. Both are in the catalog with their triggers and actions. You describe the automation; your agent builds it, tests every scenario and keeps it running.

###

### Can my AI client use Recurly and Elastic Security without building an automation?

Yes. With your AI client connected to APIANT, ask it to do something in either app once and it runs that action on the spot. Ask for an automation and your agent builds it, tests every scenario and keeps it running. One connection covers both.

###

### What happens when something fails?

Your agent works that out for you. It plans the failure paths along with the happy path, then tests every scenario before it ships.

###

### Is there a free plan?

Yes. Every plan includes the agent, including free, and building from your own AI client spends no assistant credits.
