Aduana Digital de Defensa Argentina
Create ADDA access
← Back to ADDA

Integrations

Explains how to connect signals, checks, and evidence to your system.

For teams integrating ADDA through a clear, shared reference.

ADDA activation

Request integration or activation

View manual

We collect enough context to open the right path: if you operate as an individual, we guide you from the initial assessment; if you represent a business, organization, institution, or provider, we prepare an orderly and traceable institutional activation within ADDA.

What do you want to cover first?

Available connections

Each integration shows where to start and how to connect ADDA to your systems.

  • Next.js Middleware

    Reference ready for integration and validation.

  • Webhook ingest

    Reference ready for integration and validation.

  • Evidence seal

    Reference ready for integration and validation.

  • Threat feeds

    Reference ready for integration and validation.

  • Badges publicos

    Reference ready for integration and validation.

  • Embed widgets

    Reference ready for integration and validation.

  • Access agent heartbeat

    Reference ready for integration and validation.

  • Release manifest

    Reference ready for integration and validation.

Package functions

  • createAddaClient()
  • scoreRequest()
  • scoreTrust()
  • protectRoute()
  • verifyCivicTrust()
  • submitEvent()
  • getDomainRisk()
  • sealEvidence()
  • verifyEvidence()
  • verifyCertificate()
  • checkDnsRisk()
  • checkHeaders()
  • checkTls()
  • scanExposure()
  • getStatus()
  • getAccessStatus()
  • listBlueprints()
  • listKits()
  • getReleaseManifest()
  • evaluateWafPolicy()
  • evaluateAccessPolicy()
  • consumeFeed()
  • verifyFeed()
  • createCanaryToken()
  • reportThreatObservation()
  • createAbuseReport()
  • getBadgeScript()
  • verifyBadge()
  • getEmbedWidget()
  • recordAccessAgentHeartbeat()
  • recordAccessPeerTelemetry()

Available commands

  • adda init
  • adda sensor install
  • adda agent install --profile access-watch
  • adda agent install --profile botradar
  • adda agent install --profile dns-watch
  • adda status
  • adda score --ip 203.0.113.10
  • adda score --domain ejemplo.com.ar
  • adda feed pull threats
  • adda certificate verify cert-capacero-001
  • adda evidence verify <evidence_id>
  • adda dns check ejemplo.com.ar
  • adda exposure scan ejemplo.com.ar
  • adda headers check --raw 'Strict-Transport-Security: max-age=31536000'
  • adda tls check ejemplo.com.ar
  • adda waf test --path /login
  • adda access status
  • adda access evaluate --device-id access-device-001 --trust-score 72
  • adda access heartbeat --hostname access-agent-01 --device-id access-device-001
  • adda access peer --peer-label peer-sur --endpoint vpn.adda.capacero.ar:51820
  • adda blueprints list
  • adda kits list
  • adda release manifest
  • adda badge verify ejemplo.com.ar
  • adda widget script status-mini-card --domain ejemplo.com.ar
  • adda canary create
  • adda intel report --title 'Campana coordinada'
  • adda abuse report --domain ejemplo.com.ar --summary 'Phishing observado' --category phishing

Available agents

BotRadar AgentDNS Watch AgentWAF Policy AgentAccess Watch AgentPayment Shield AgentForms Shield AgentFeed Publisher AgentEvidence Sealer AgentNarrativeWatch AgentCertificate AgentIncident AgentManual Writer AgentGovernance AgentIntel AgentWatchlist AgentThreat Graph AgentTrust Graph AgentEarly Warning AgentCanary AgentHoneypot AgentTakedown Pack AgentMail Shield AgentBrand Shield AgentDomain Watch AgentSOC AgentAutopilot Agent

For teams integrating ADDA through a clear, shared reference.

ADDA Agents26 agents26 running0 partial

Operational automation blueprint

ADDA agents read signals, propose actions, seal evidence, update watchlists, publish feeds, escalate incidents, and feed knowledge back into the manual, governance, and intelligence layers.

signalBotRadar Agentrunning

Analyzes requests, sessions, and endpoint pressure to raise BotScore and reason codes.

Reads

adda_eventsadda_risk_scoresadda_endpoint_pressure

Actions

risk_scoredaction_appliedopen_incident

Outputs

BotScoreSessionRiskScorereason codes

Installation: adda agent install --profile botradar

CLI: adda agent install --profile botradar

Docs: manual/botradar

policyDNS Watch Agentrunning

Correlates DNS queries, new domains, and phishing signals to recommend blocking or a warning.

Reads

adda_dns_queriesadda_watchlist_itemsadda_feeds

Actions

apply_dns_policypublish_alertupdate_feed

Outputs

DNSRiskScoredomain reputationfeed dns-risk

Installation: adda agent install --profile dns-watch

CLI: adda agent install --profile dns-watch

Docs: manual/dns

policyWAF Policy Agentrunning

Adjusts challenges, rate limits, and blocking based on route pressure, SQLi, and evasion.

Reads

adda_waf_eventsadda_rulesadda_incidents

Actions

apply_waf_ruleprotect_endpointescalate

Outputs

WAFRiskScorematched rulesendpoint protection state

Installation: adda agent install --profile waf-policy

CLI: adda agent install --profile waf-policy

Docs: manual/waf

policyAccess Watch Agentrunning

Monitors heartbeats, peers, sessions, and Access trust to limit operational risk and sustain the private network.

Reads

adda_access_agent_heartbeatsadda_access_peer_telemetryadda_access_sessionsadda_access_logs

Actions

limit_access_sessionrotate_tunnel_keyopen_incidentnotify

Outputs

AccessTrustScorepeer telemetryagent heartbeat health

Installation: adda agent install --profile access-watch

CLI: adda agent install --profile access-watch

Docs: manual/access

policyPayment Shield Agentrunning

Evaluates Switch payment attempts with Payment Shield, evidence, and risk links.

Reads

adda_payment_shield_eventsadda_evidencerisk_entity_links

Actions

evaluate_paymentseal_evidenceattach_risk

Outputs

Payment Shield scoreevidence linkSwitch risk entity link

Installation: adda agent install --profile payment-shield

CLI: adda score --domain switch.capacero.ar

Docs: manual/payment-shield

policyForms Shield Agentrunning

Protects Negocios intake and forms with Forms Shield and CivicProof.

Reads

adda_form_shield_eventsnegocios_intake_submissions

Actions

evaluate_formpublish_alertcreate_task

Outputs

Forms Shield scoreCivicProof hintlead confidence

Installation: adda agent install --profile forms-shield

Docs: manual/forms-shield

intelligenceFeed Publisher Agentrunning

Publishes governed entries to public feeds and traces incidents, watchlists, and versions.

Reads

adda_feed_versionsadda_feed_entriesadda_incidents

Actions

publish_feedlink_traceabilitycreate_task

Outputs

feed entryfeed versiontrace tags

Installation: adda agent install --profile feed-publisher

CLI: adda feed pull threats

Docs: manual/feeds

evidenceEvidence Sealer Agentrunning

Turns critical signals and incidents into signed, verifiable evidence.

Reads

adda_eventsadda_intel_reportsadda_incidents

Actions

seal_evidenceissue_certificate

Outputs

evidence_hashsignatureverification_url

Installation: adda agent install --profile evidence-sealer

CLI: adda evidence verify <evidence_id>

Docs: manual/evidence

intelligenceNarrativeWatch Agentrunning

Detects coordinated narratives, disinformation, and reputation campaigns targeting the brand.

Reads

adda_narrative_eventsadda_osint_observationsadda_feeds

Actions

publish_alertcreate_early_warningopen_incident

Outputs

narrative riskcampaign correlationearly warning

Installation: adda agent install --profile narrativewatch

CLI: adda intel report --title 'Narrativa coordinada'

Docs: manual/narrativewatch

governanceCertificate Agentrunning

Issues, renews, and verifies ADDA certificates with policy and protocol traceability.

Reads

adda_certificatesadda_policy_versionsadda_domains

Actions

issue_certificateverify_certificatenotify

Outputs

certificate statuspublic verification url

Installation: adda agent install --profile certificate

CLI: adda certificate verify cert-capacero-001

Docs: manual/certificates

responseIncident Agentrunning

Orchestrates the opening, timeline, tasks, and playbooks for operational incidents.

Reads

adda_incidentsadda_playbooksadda_tasks

Actions

open_incidentrun_playbookcreate_tasknotify

Outputs

incident timelineplaybook runSOC tasks

Installation: adda agent install --profile incident

CLI: adda status

Docs: manual/incidents

manualManual Writer Agentrunning

Turns recurring errors and resolved incidents into articles, feedback, and editorial candidates.

Reads

adda_manual_feedbackadda_manual_candidatesadda_incidents

Actions

create_manual_candidatemanual_article_updated

Outputs

manual candidateplaybook suggestionreview queue

Installation: adda agent install --profile manual-writer

CLI: adda blueprints list

Docs: manual/manual

governanceGovernance Agentrunning

Summarizes active model, policy, feed, and evidence versions for institutional decisions.

Reads

adda_model_versionsadda_policy_versionsadda_feed_versionsadda_audit_logs

Actions

publish_alertnotifyescalate

Outputs

governance summaryreview decisionprotocol delta

Installation: adda agent install --profile governance

CLI: adda release manifest

Docs: manual/governance

intelligenceIntel Agentrunning

Combines OSINT, watchlists, reports, canaries, and honeypots to open early warnings.

Reads

adda_osint_observationsadda_watchlistsadda_canary_tokensadda_honeypots

Actions

create_watchlist_itempublish_alertgenerate_takedown_pack

Outputs

intel reportearly warningcampaign correlation

Installation: adda agent install --profile intel

CLI: adda intel report --title 'Campana coordinada'

Docs: manual/intel

intelligenceWatchlist Agentrunning

Maintains domain, IP, token, and campaign watchlists with feed traceability.

Reads

adda_watchlistsadda_watchlist_itemsadda_feed_entries

Actions

create_watchlist_itemupdate_watchlistlink_feed

Outputs

watchlist itemmatch eventsintel correlation

Installation: adda agent install --profile watchlist

CLI: adda feed pull threats

Docs: manual/intel

intelligenceThreat Graph Agentrunning

Correlates indicators, campaigns, and threat nodes for a cross-ecosystem view.

Reads

adda_threat_graphadda_intel_reportsadda_feed_entries

Actions

link_indicatorpublish_alertcreate_task

Outputs

threat graph edgecampaign clusterintel summary

Installation: adda agent install --profile threat-graph

Docs: manual/intel

signalTrust Graph Agentrunning

Models trust among domains, sessions, peers, and certificates to raise or reduce friction.

Reads

adda_trust_graphadda_risk_scoresadda_certificates

Actions

risk_scoredupdate_trust_edgenotify

Outputs

TrustScoretrust edgereputation delta

Installation: adda agent install --profile trust-graph

CLI: adda score --domain ejemplo.com.ar

Docs: manual/trust

intelligenceEarly Warning Agentrunning

Issues early warnings when a pattern is not yet an incident but is already repeatable.

Reads

adda_early_warningsadda_feed_entriesadda_watchlists

Actions

create_early_warningpublish_alertnotify

Outputs

early warningcampaign hintSOC alert

Installation: adda agent install --profile early-warning

Docs: manual/intel

signalCanary Agentrunning

Manages decoy tokens and triggers signals when a sensitive asset is touched.

Reads

adda_canary_tokensadda_eventsadda_incidents

Actions

create_canarycanary_triggeredopen_incident

Outputs

canary tripincident linkevidence candidate

Installation: adda agent install --profile canary

CLI: adda canary create

Docs: manual/canary

signalHoneypot Agentrunning

Exposes controlled decoys to capture probing, bots, and active reconnaissance.

Reads

adda_honeypotsadda_eventsadda_waf_events

Actions

honeypot_triggeredpublish_alertseal_evidence

Outputs

honeypot tripattacker fingerprintfeed candidate

Installation: adda agent install --profile honeypot

Docs: manual/honeypot

responseTakedown Pack Agentrunning

Prepares institutional response packages with indicators, jurisdiction, and attached evidence.

Reads

adda_takedown_packsadda_evidenceadda_intel_reports

Actions

generate_takedown_packlink_evidencecreate_task

Outputs

takedown packindicator bundleresponse checklist

Installation: adda agent install --profile takedown-pack

Docs: manual/intel

policyMail Shield Agentrunning

Analyzes spoofing, DMARC/SPF/DKIM, and malicious links to raise email risk.

Reads

adda_mail_reportsadda_dns_queriesadda_feeds

Actions

run_mail_analysispublish_alertopen_incident

Outputs

MailRiskScorespoofing indicatorsphishing feed

Installation: adda agent install --profile mail-shield

Docs: manual/mail

policyBrand Shield Agentrunning

Detects brand cloning, lookalike domains, and reputation diversion.

Reads

adda_brand_findingsadda_watchlistsadda_osint_observations

Actions

review_brandcreate_takedownpublish_feed

Outputs

brand findingreputation signaltakedown candidate

Installation: adda agent install --profile brand-shield

Docs: manual/brand

policyDomain Watch Agentrunning

Monitors subdomains, DNS changes, and service exposure to anticipate the attack surface.

Reads

adda_subdomain_watch_itemsadda_watch_eventsadda_exposure_scans

Actions

publish_alertcreate_taskupdate_feed

Outputs

subdomain mapdns changeexposure finding

Installation: adda agent install --profile domain-watch

CLI: adda exposure scan ejemplo.com.ar

Docs: manual/subdomain-watch

responseSOC Agentrunning

Coordinates tasks, notifications, and human escalation for critical incidents and feeds.

Reads

adda_tasksadda_incidentsadda_notifications

Actions

create_tasknotifyescalaterun_playbook

Outputs

SOC taskoperator queueescalation trail

Installation: adda agent install --profile soc

Docs: manual/soc

governanceAutopilot Agentrunning

Proposes safe automations from recurring patterns, copilot insights, and governance.

Reads

adda_autopilot_runsadda_governance_ledgeradda_copilot_insights

Actions

propose_automationgenerate_manual_candidatedispatch_webhook

Outputs

automation proposalmanual candidategovernance note

Installation: adda agent install --profile autopilot

Docs: manual/autopilot

SDK surface

  • createAddaClient()
  • scoreRequest()
  • scoreTrust()
  • protectRoute()
  • verifyCivicTrust()
  • submitEvent()
  • getDomainRisk()
  • sealEvidence()
  • verifyEvidence()
  • verifyCertificate()
  • checkDnsRisk()
  • checkHeaders()
  • checkTls()
  • scanExposure()
  • getStatus()
  • getAccessStatus()
  • listBlueprints()
  • listKits()
  • getReleaseManifest()
  • evaluateWafPolicy()
  • evaluateAccessPolicy()
  • consumeFeed()
  • verifyFeed()
  • createCanaryToken()
  • reportThreatObservation()
  • createAbuseReport()
  • getBadgeScript()
  • verifyBadge()
  • getEmbedWidget()
  • recordAccessAgentHeartbeat()
  • recordAccessPeerTelemetry()

CLI draft

  • adda init
  • adda sensor install
  • adda agent install --profile access-watch
  • adda agent install --profile botradar
  • adda agent install --profile dns-watch
  • adda status
  • adda score --ip 203.0.113.10
  • adda score --domain ejemplo.com.ar
  • adda feed pull threats
  • adda certificate verify cert-capacero-001
  • adda evidence verify <evidence_id>
  • adda dns check ejemplo.com.ar
  • adda exposure scan ejemplo.com.ar
  • adda headers check --raw 'Strict-Transport-Security: max-age=31536000'
  • adda tls check ejemplo.com.ar
  • adda waf test --path /login
  • adda access status
  • adda access evaluate --device-id access-device-001 --trust-score 72
  • adda access heartbeat --hostname access-agent-01 --device-id access-device-001
  • adda access peer --peer-label peer-sur --endpoint vpn.adda.capacero.ar:51820
  • adda blueprints list
  • adda kits list
  • adda release manifest
  • adda badge verify ejemplo.com.ar
  • adda widget script status-mini-card --domain ejemplo.com.ar
  • adda canary create
  • adda intel report --title 'Campana coordinada'
  • adda abuse report --domain ejemplo.com.ar --summary 'Phishing observado' --category phishing
Integrations | ADDA