Leina 
Wanta 
Review Security Cases
List cases and inspect a selected case record.
/oo TheHive: List TheHive cases, read the case matching [case ID or topic], and summarize its returned description and status.
Connect TheHive to Your AI Agent
Ask your AI assistant to work with TheHive: review security cases and create alerts.
6 tools API key
Try a TheHive Task
Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.
oo Skill TheHive
Create a Security Alert
Record a structured alert with its source reference.
/oo TheHive: Create a TheHive alert with type [type], source [source], sourceRef [source reference], title [title], and description [description].
Start Working with TheHive
-
Install OOMOL
Set up oo CLI and the oo Skill in your agent.
Install OOMOL → -
Connect TheHive
Connect with a TheHive API key and publicly reachable TheHive 4 instance URL.
Connect TheHive → -
Give Your Agent a Task
Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →
Choose Your Agent
- An account with access to the TheHive resources used in your task.
TheHive Tools
TheHive 4 connects security alerts and cases from your own publicly reachable instance to AI triage workflows.
Review Security Cases
List cases and inspect a selected case record.
Create a Security Alert
Record a structured alert with its source reference.
6 tools
Create Alert
Create a JSON alert in a TheHive 4 instance.
thehive.create_alert Get Alert
Retrieve one TheHive 4 alert by ID.
thehive.get_alert List Alerts
List alerts visible to the connected TheHive 4 user.
thehive.list_alerts Create Case
Create a case in a TheHive 4 instance.
thehive.create_case Get Case
Retrieve one TheHive 4 case by ID or numeric reference.
thehive.get_case List Cases
List cases visible to the connected TheHive 4 user.
thehive.list_cases No matching tools.
Frequently Asked Questions
Which TheHive version is supported?
These actions target a TheHive 4 instance.
Can I create a case directly?
Provide a title and description to create a case.
Can a private instance be used?
Supply the publicly reachable root instance URL for the connector to access.