anodot

What this skill does

# Anodot

Anodot is an autonomous monitoring platform that uses machine learning to detect anomalies in time series data. It helps businesses in various industries, such as e-commerce, finance, and telecommunications, to identify and resolve critical issues in real-time. This allows them to minimize revenue loss and improve operational efficiency.

Official docs: https://developers.anodot.com/

## Anodot Overview

- **Metrics**
  - **Metric Group**
- **Dashboards**
- **Alerts**
- **Notebooks**
- **Anomaly Detection Segments**
- **Users**
- **Sources**
- **Tags**
- **Saved Views**
- **Integrations**
- **Data Enrichment Rules**
- **Budgets**
- **Cost Entities**
- **Cost Data Feeds**
- **AWS Accounts**
- **Azure Accounts**
- **GCP Accounts**
- **Snowflake Accounts**
- **BigQuery Accounts**
- **Redshift Accounts**
- **S3 Buckets**
- **Databricks Accounts**
- **Looker Accounts**
- **Tableau Accounts**
- **Sigma Accounts**
- **PowerBI Accounts**
- **Alibaba Cloud Accounts**
- **OCI Accounts**
- **Kubernetes Clusters**
- **VMware Accounts**
- **Dynatrace Accounts**
- **AppDynamics Accounts**
- **New Relic Accounts**
- **Prometheus Accounts**
- **Grafana Accounts**
- **Elasticsearch Accounts**
- **Splunk Accounts**
- **Sumo Logic Accounts**
- **Datadog Accounts**
- **CloudWatch Accounts**
- **Azure Monitor Accounts**
- **GCP Monitoring Accounts**
- **Pingdom Accounts**
- **ThousandEyes Accounts**
- **Catchpoint Accounts**
- **Statuscake Accounts**
- **UptimeRobot Accounts**
- **PagerDuty Accounts**
- **ServiceNow Accounts**
- **Jira Accounts**
- **Slack Accounts**
- **Microsoft Teams Accounts**
- **Google Chat Accounts**
- **Webhook Accounts**
- **Email Accounts**
- **SNMP Accounts**
- **Syslog Accounts**
- **Kafka Accounts**
- **RabbitMQ Accounts**
- **MQTT Accounts**
- **OPC UA Accounts**
- **Modbus Accounts**
- **BACnet Accounts**
- **OPC DA Accounts**
- **File Accounts**
- **Database Accounts**
- **Script Accounts**
- **Custom Accounts**
- **Generic Accounts**
- **Cloudflare Accounts**
- **Fastly Accounts**
- **Akamai Accounts**
- **Imperva Accounts**
- **Signal Sciences Accounts**
- **F5 Accounts**
- **Citrix Accounts**
- **Palo Alto Networks Accounts**
- **Fortinet Accounts**
- **Cisco Accounts**
- **Juniper Networks Accounts**
- **Arista Networks Accounts**
- **Extreme Networks Accounts**
- **HP Accounts**
- **Dell Accounts**
- **Lenovo Accounts**
- **IBM Accounts**
- **Oracle Accounts**
- **SAP Accounts**
- **Salesforce Accounts**
- **Workday Accounts**
- **Netskope Accounts**
- **Zscaler Accounts**
- **Proofpoint Accounts**
- **Mimecast Accounts**
- **CrowdStrike Accounts**
- **SentinelOne Accounts**
- **Microsoft Defender ATP Accounts**
- **Carbon Black Accounts**
- **FireEye Accounts**
- **RSA NetWitness Accounts**
- **QRadar Accounts**
- **ArcSight Accounts**
- **Splunk Enterprise Security Accounts**
- **Exabeam Accounts**
- **Securonix Accounts**
- **LogRhythm Accounts**
- **Darktrace Accounts**
- **Vectra Accounts**
- **ExtraHop Accounts**
- **Recorded Future Accounts**
- **Flashpoint Accounts**
- **DomainTools Accounts**
- **RiskIQ Accounts**
- **GreyNoise Accounts**
- **Shodan Accounts**
- **Censys Accounts**
- **ZoomEye Accounts**
- **BinaryEdge Accounts**
- **VirusTotal Accounts**
- **Hybrid Analysis Accounts**
- **Joe Sandbox Accounts**
- **Any Run Accounts**
- **Intezer Analyze Accounts**
- **ReversingLabs Accounts**
- **ThreatBook Accounts**
- **AlienVault OTX Accounts**
- **MISP Accounts**
- **TheHive Accounts**
- **Cortex Accounts**
- **Phantom Accounts**
- **Demisto Accounts**
- **Swimlane Accounts**
- **ServiceNow Security Operations Accounts**
- **Jira Service Management Accounts**
- **Splunk Phantom Accounts**
- **IBM Resilient Accounts**
- **Siemplify Accounts**
- **ThreatConnect Accounts**
- **Anomali ThreatStream Accounts**
- **LookingGlass ScoutPrime Accounts**
- **Digital Shadows SearchLight Accounts**
- **IntSights Threat Command Accounts**
- **Recorded Future Intelligence Cloud Accounts**
- **Flashpoint Intelligence Platform Accounts**
- **DomainTools Iris Accounts**
- **RiskIQ PassiveTotal Accounts**
- **GreyNoise Visualizer Accounts**
- **Shodan Monitor Accounts**
- **Censys Search Accounts**
- **ZoomEye Pro Accounts**
- **BinaryEdge Vision Accounts**
- **VirusTotal Intelligence Accounts**
- **Hybrid Analysis Falcon Sandbox Accounts**
- **Joe Sandbox Cloud Accounts**
- **Any Run Hunter Accounts**
- **Intezer Analyze Enterprise Accounts**
- **ReversingLabs Titanium Platform Accounts**
- **ThreatBook Threat Intelligence Platform Accounts**
- **AlienVault OTX Threat Intelligence Accounts**
- **MISP Threat Sharing Platform Accounts**
- **TheHive Project Security Incident Response Platform Accounts**
- **Cortex XSOAR Security Orchestration, Automation and Response Accounts**
- **Phantom Security Orchestration, Automation and Response Accounts**
- **Demisto Security Orchestration, Automation and Response Accounts**
- **Swimlane Security Orchestration, Automation and Response Accounts**
- **ServiceNow Security Operations Security Incident Response Accounts**
- **Jira Service Management Incident Management Accounts**
- **Splunk Phantom Security Orchestration, Automation and Response Accounts**
- **IBM Resilient Security Orchestration, Automation and Response Accounts**
- **Siemplify Security Orchestration, Automation and Response Accounts**
- **ThreatConnect Threat Intelligence Platform Accounts**
- **Anomali ThreatStream Threat Intelligence Platform Accounts**
- **LookingGlass ScoutPrime Threat Intelligence Platform Accounts**
- **Digital Shadows SearchLight Digital Risk Protection Accounts**
- **IntSights Threat Command Threat Intelligence Platform Accounts**

Use action names and parameters as needed.

## Working with Anodot

This skill uses the Membrane CLI to interact with Anodot. Membrane handles authentication and credentials refresh automatically — so you can focus on the integration logic rather than auth plumbing.

### Install the CLI

Install the Membrane CLI so you can run `membrane` from the terminal:

```bash
npm install -g @membranehq/cli@latest
```

### Authentication

```bash
membrane login --tenant --clientName=<agentType>
```

This will either open a browser for authentication or print an authorization URL to the console, depending on whether interactive mode is available.

**Headless environments:** The command will print an authorization URL. Ask the user to open it in a browser. When they see a code after completing login, finish with:

```bash
membrane login complete <code>
```

Add `--json` to any command for machine-readable JSON output.

**Agent Types** : claude, openclaw, codex, warp, windsurf, etc. Those will be used to adjust tooling to be used best with your harness

### Connecting to Anodot

Use `membrane connection ensure` to find or create a connection by app URL or domain:

```bash
membrane connection ensure "https://anodot.com" --json
```
The user completes authentication in the browser. The output contains the new connection id.

This is the fastest way to get a connection. The URL is normalized to a domain and matched against known apps. If no app is found, one is created and a connector is built automatically.

If the returned connection has `state: "READY"`, skip to **Step 2**.

#### 1b. Wait for the connection to be ready

If the connection is in `BUILDING` state, poll until it's ready:

```bash
npx @membranehq/cli connection get <id> --wait --json
```

The `--wait` flag long-polls (up to `--timeout` seconds, default 30) until the state changes. Keep polling until `state` is no longer `BUILDING`.

The resulting state tells you what to do next:

- **`READY`** — connection is fully set up. Skip to **Step 2**.
- **`CLIENT_ACTION_REQUIRED`** — the user or agent needs to do something. The `clientAction` object describes the required action:
  - `clientAction.type` — the kind of action needed:
    - `"connect"` — user needs to authenticate (OAuth, API key, etc.). This covers initial authenticat