Integrations
Works with the tools you already use
Connect Averil to your code, cloud, identity and deploy platforms. Each one has a published list of exactly what I can read and change. Here is what it can access.
AVAILABLE NOW
SlackRotating OAuth tokenLIVEGet one thread per case, act on it with a click, and see which apps and members are in your workspace.
GitHubGitHub App, short-lived tokensLIVEReview every pull request, run nightly code reviews, and work your secret scanning, code scanning and audit log alerts.
AWSIAM role with ExternalIdLIVEInvestigate GuardDuty and Security Hub findings with CloudTrail, and check IAM and account configuration.
RailwayWorkspace tokenLIVESee every project, service and variable, so a provider incident maps to your keys in minutes.
SupabaseManagement OAuthLIVEFind exposed databases and the project settings that decide whether your data is public.
Google WorkspaceDomain-wide delegationLIVEReview people, OAuth grants and admin activity, including former employees who still have access.
SlackRotating OAuth tokenLIVEinventoryauditactions5 reads · 1 write
GitHubGitHub App, short-lived tokensLIVEinventoryfindingsauditposturecodeactions15 reads · 2 writes
AWSIAM role with ExternalIdLIVEinventoryfindingsauditpostureactions14 reads · 3 writes
RailwayWorkspace tokenLIVEinventoryposture3 reads · no writes yet
SupabaseManagement OAuthLIVEinventorypostureactions4 reads · 2 writes
Google WorkspaceDomain-wide delegationLIVEinventoryauditpostureactions3 reads · 2 writes
IN YOUR AI TOOLS · MCP · EARLY ACCESS
Ask me from Claude Code, Cursor or VS Code
My MCP server gives your AI tools the same answers I give in Slack. You sign in as yourself, so a tool only sees the cases your account can see. The tools look things up; changes happen in Slack. Secrets are removed from every answer.
- security_briefWhat opened, what was fixed and what is waiting on people, like the morning brief.
- list_casesOpen cases, the ones waiting on you, or everything, with severity and owner.
- get_caseOne case with its investigation summary, evidence and proposed fixes.
- case_timelineEverything that happened on a case, in order.
- resolution_metricsHow many cases were fixed and verified, and how long that took.
CLAUDE CODE · AVERIL CONNECTED
Anything I should know before I touch the billing service?
averil · list_cases(status: "open")
Averil has one open case on billing-api: order search builds SQL from the email parameter. It is high severity and has been waiting on a person for 2 days. The fix is PR #14, proven by a failing test.
COMING NEXT
Google CloudWorkload identity federation
AzureFederated credential
OktaIdentity events
VercelProjects and env variablesRequest an integration
Google CloudWorkload identity federationAzureFederated credentialOktaIdentity eventsVercelProjects and env variablesSIEMSIEM and EDRWebhooks into cases
MSMicrosoft TeamsFor teams not on Slack