Skip to main content
Connect your Rapid7 InsightIDR tenant so Myrmex can review investigations, run log searches, and enrich entities. Myrmex reaches the InsightIDR API (api.insight.rapid7.com) and Log Search (rest.logs.insight.rapid7.com) over HTTPS through a Collector on your network. Every request runs live, on demand — Myrmex returns only what you ask for and copies or stores nothing from Rapid7 on its side. Credentials are resolved on your side and never pass through the model.

​
What Myrmex Can Do

Review investigations

List and inspect InsightIDR investigations to see what has already been detected.

Run Log Search

Query logs live with LEQL against the Log Search API and return only the matching results.

Read detections & alerts

Pull detections and alerts to support triage.

Enrich entities

Look up assets, users, and indicators on demand — nothing is retained on the Myrmex side.

​
Before You Start

  • A Collector with outbound HTTPS (port 443) to your region’s InsightIDR API and Log Search hosts. See Collector mode.
  • A Rapid7 platform API key — you create this in Step 1.
  • Your data region (us, eu, ca, au, ap), which sets the API hosts.

​
Step 1 — Create the Credential in Rapid7

1

Open API Keys in the Insight platform

Sign in to the Rapid7 Insight platform and go to Platform Administration → API Keys (or your user menu → Manage API Keys).
2

Create an organization or user key

Create a new API key. An organization key tied to a least-privilege member works well for automated access. Copy the value once — it is shown only at creation.
3

Confirm your region

Note your data region. It sets both hosts, e.g. us.api.insight.rapid7.com and us.rest.logs.insight.rapid7.com.
Scope the API key to the least privilege that still lets Myrmex read investigations and run the searches you need.

​
Step 2 — Add the Integration in Myrmex

From the Directory, choose Add Integration → Rapid7 InsightIDR. Myrmex talks to two Rapid7 endpoints — the Insight API and Log Search — using the same platform API key for both. Insight API Log Search

​
Connect

Click Connect to validate both endpoints and finish. Rapid7 InsightIDR then appears under Environment → Integrations, and you can ask about it in the Workspace or through the Integration Specialist agent.
Both hosts must match your data region. If searches work but investigations do not (or vice versa), re-check the region on the host that fails.