Skip to main content

Artemis

Artemis Security's official MCP server lets agents work in your Artemis portal: investigate cases, search and hunt across your security logs, and author detectors. Each tenant has its own endpoint, https://<tenant>.portal.goartemis.ai/mcp.

Setting up​

  1. In Willow, go to MCP Servers → Add MCP Server and pick the Artemis card with the Official badge.

  2. Switch to Advanced, open Advanced settings, and under Server replace YOUR_TENANT in Server URL with your tenant name, the first part of your portal address (acme for https://acme.portal.goartemis.ai).

  3. Click Set up Artemis and sign in to Artemis when asked. Each person signs in with their own portal account, and their agents get exactly that account's portal permissions.

Willow registers its OAuth client with your portal automatically (dynamic client registration), so there's nothing to create in Artemis first.

note

This page covers agents working in Artemis. To send Willow's audit logs into Artemis instead, set up the Artemis log provider.

Troubleshooting​

Client ID not found at sign-in, after it worked before. Artemis rotated its OAuth signing key, which drops every existing client registration and token. Open the MCP server in Willow, go to the Setup tab, click Discover OAuth Settings to register a new client, and click Save Changes. Every user then has to reconnect.

Additional Resources​

On this page