> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Cassandra

> Connect an Apache Cassandra cluster to Myrmex — create a read-only audit role and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Apache Cassandra** cluster so Myrmex can audit its hardening and compliance, check its operational health, explore its keyspaces, and — with approval — run CQL for you. Myrmex reaches the cluster over the native CQL protocol through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network. Operations run live and on demand through the [Integration Specialist](/documentation/multi-agent-system/integration-specialist-agent) agent — Myrmex reads only what you ask for and keeps none of your data on the Myrmex side.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Compliance audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit and map findings to CIS, ISO 27001, NIST CSF, and BACEN [frameworks](/documentation/security-posture/frameworks).
  </Card>

  <Card title="Health checks" icon="heart-pulse">
    Review node status, keyspace and table statistics, and latency signals.
  </Card>

  <Card title="Explore tables" icon="table">
    List keyspaces and tables so you can see what the cluster holds.
  </Card>

  <Card title="Describe structure" icon="sitemap">
    Inspect a table's columns, keys, and options.
  </Card>

  <Card title="Sensitive-data scan" icon="user-secret">
    Scan tables and columns for personal or sensitive data that needs protection.
  </Card>

  <Card title="Run CQL" icon="terminal">
    Execute read CQL any time; write CQL (DDL/DML) requires your confirmation.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** on a network that can reach a Cassandra contact point on its native transport port (default `9042`). See [Collector mode](/documentation/agent-endpoint-security/collector-mode).
* Authentication enabled on the cluster (`PasswordAuthenticator`) and a **dedicated role** for Myrmex (create it in Step 1).

## Step 1 — Create the Credential in Cassandra

Create a dedicated, least-privilege role for auditing with read access to the system keyspaces the audit inspects.

```sql theme={null}
-- Requires PasswordAuthenticator enabled in cassandra.yaml
CREATE ROLE myrmex_audit WITH LOGIN = true AND PASSWORD = 'a-strong-password';

-- Read access to the system keyspaces the audit relies on
GRANT SELECT ON KEYSPACE system TO myrmex_audit;
GRANT SELECT ON KEYSPACE system_schema TO myrmex_audit;
GRANT SELECT ON KEYSPACE system_auth TO myrmex_audit;

-- Add any application keyspace you want inspected:
-- GRANT SELECT ON KEYSPACE your_keyspace TO myrmex_audit;
```

<Tip>
  Keep the role read-only for auditing. Grant `MODIFY` on a keyspace only if you want the agents to run write CQL through **Run CQL**.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Cassandra**, then fill in:

| Field           | Description                                                                                            |
| --------------- | ------------------------------------------------------------------------------------------------------ |
| **Name**        | A unique name for this cluster.                                                                        |
| **Description** | Optional note to identify the instance.                                                                |
| **Host**        | Cassandra contact point hostname or IP.                                                                |
| **Port**        | Cassandra native transport port (default `9042`).                                                      |
| **Username**    | Cassandra username.                                                                                    |
| **Password**    | Cassandra password (stored encrypted).                                                                 |
| **Keyspace**    | Keyspace to inspect (optional).                                                                        |
| **Collectors**  | The [Collector(s)](/documentation/agent-endpoint-security/collector-mode) that can reach this cluster. |

## Connect

Click **Connect** to validate the login. The cluster then appears under **Environment → Integrations** alongside your other [integrations](/documentation/integrations/overview), and you can start asking the AI about it in the Workspace.

## Notes

* **Read-only by default.** Auditing, health, exploration, and sensitive-data scans only need the `SELECT` grants above. Grant `MODIFY` only if you want confirmation-gated **Run CQL** writes.
* **Nothing is stored.** Every operation runs in real time through the Collector; results return to your Workspace and no cluster data is retained on the Myrmex side.
* **Encryption in transit** follows your cluster's configuration; the posture audit flags an unencrypted listener.