TheHive integration
The TheHive package (Robomotion.TheHive, v1.1.0) adds 25 nodes to Robomotion flows, including Create Alert, Get Alert and Update Alert.
It runs on Windows, macOS and Linux robots. For AI agents, 24 of its nodes work as tools, and its Toolkit node exposes 22 tools at once.
What the TheHive package does
Connect to TheHive Security Incident Response Platform to manage alerts, cases, tasks, observables, and comments
TheHive Security Incident Response Platform integration for managing alerts, cases, tasks, observables, and comments. Provides connection management, alert operations (create, get, search, update, delete), case management (create, get, search, update, delete), task operations (create, get, search, update, delete), observable management (create, get, search), and comment operations (create, search, update, delete). Authenticates via TheHive server URL and API key. Supports both explicit Connect/Disconnect lifecycle and implicit per-node credential-based connections.
- Namespace
Robomotion.TheHive- Latest version
- 1.1.0 (3 versions published)
- Written in
- Go
- Categories
- Security
TheHive nodes (25)
These are the node IDs an agentic flow or an RPA bot uses, exactly as they appear in the Flow Designer and in flow code. An agent tool node can also be called by an AI agent on its own. The Toolkit node hands an agent several of the package operations at once.
| Node | Node ID | Type |
|---|---|---|
| Connect | Robomotion.TheHive.Connect | Agent tool |
| Disconnect | Robomotion.TheHive.Disconnect | Agent tool |
| Create Alert | Robomotion.TheHive.Alerts.CreateAlert | Agent tool |
| Get Alert | Robomotion.TheHive.Alerts.GetAlert | Agent tool |
| Update Alert | Robomotion.TheHive.Alerts.UpdateAlert | Agent tool |
| Delete Alert | Robomotion.TheHive.Alerts.DeleteAlert | Agent tool |
| Search Alerts | Robomotion.TheHive.Alerts.SearchAlerts | Agent tool |
| Create Case | Robomotion.TheHive.Cases.CreateCase | Agent tool |
| Get Case | Robomotion.TheHive.Cases.GetCase | Agent tool |
| Update Case | Robomotion.TheHive.Cases.UpdateCase | Agent tool |
| Delete Case | Robomotion.TheHive.Cases.DeleteCase | Agent tool |
| Search Cases | Robomotion.TheHive.Cases.SearchCases | Agent tool |
| Create Task | Robomotion.TheHive.Tasks.CreateTask | Agent tool |
| Get Task | Robomotion.TheHive.Tasks.GetTask | Agent tool |
| Update Task | Robomotion.TheHive.Tasks.UpdateTask | Agent tool |
| Delete Task | Robomotion.TheHive.Tasks.DeleteTask | Agent tool |
| Search Tasks | Robomotion.TheHive.Tasks.SearchTasks | Agent tool |
| Create Observable | Robomotion.TheHive.Observables.CreateObservable | Agent tool |
| Get Observable | Robomotion.TheHive.Observables.GetObservable | Agent tool |
| Search Observables | Robomotion.TheHive.Observables.SearchObservables | Agent tool |
| Create Comment | Robomotion.TheHive.Comments.CreateComment | Agent tool |
| Update Comment | Robomotion.TheHive.Comments.UpdateComment | Agent tool |
| Delete Comment | Robomotion.TheHive.Comments.DeleteComment | Agent tool |
| Search Comments | Robomotion.TheHive.Comments.SearchComments | Agent tool |
| Toolkit | Robomotion.TheHive.Agents.Toolkit | Toolkit · 22 tools |
Platforms
The TheHive package runs on Windows, macOS and Linux robots. Any Robomotion robot on these operating systems can run a flow that uses it.
How to install the TheHive package
- Open Packages in the Robomotion Flow Designer.
- Search for TheHive or
Robomotion.TheHive, then click Install on its card. - The TheHive nodes appear in the node palette for everyone in the workspace, because installation is per workspace.
From a terminal, the Robomotion CLI installs the same package:
robomotion install Robomotion.TheHiveRelated integrations
Packages that share a category or keywords with TheHive. It is filed under Security.
2FAUsed for creating 2FA Time-based One-Time Password (OTP) code generation and registration.
CloudflareManage Cloudflare zones, DNS records, cache, and security settings
CryptographyCryptography package offers a comprehensive suite of tools designed to facilitate various cryptographic operations within a flow.
Email ValidatorVerify email via Regex, DNS, SMTP and even more
InternxtManage files, folders, and trash on Internxt encrypted cloud storage
PushoverSend real-time push notifications to Android, iOS, and desktop devices using Pushover
Package data from the Robomotion package index, synced October 31, 2026.