Overview
Cork is a security and compliance platform that helps MSPs monitor their clients’ security posture. By integrating Cork with MSPortal.ai, you can:- View compliance events, vulnerabilities, and endpoints in a centralized dashboard
- Track security metrics across all your managed clients
- Add security findings to the Planner for remediation tracking
- Include security data in client reports
Prerequisites
- Active Cork account with API access
- MSPortal.ai account with integration management permissions
- Cork API key with read access
Part 1: Generate Cork API Key
Before connecting to MSPortal.ai, you need to create an API key in Cork.1
Log into Cork
Access your Cork dashboard at app.corkinc.com or your Cork instance URL.
2
Navigate to API Settings
Go to Settings > API Keys in the Cork dashboard.
3
Create API Key
Click Create API Key or Add New Key.Configure the following:
4
Copy API Key
After creating the key, copy it immediately.
Part 2: MSPortal Setup Wizard
MSPortal.ai provides a guided 3-step wizard to connect and configure your Cork integration.Starting the Wizard
1
Navigate to Integrations
In MSPortal.ai, go to Settings > Integrations.
2
Find Cork
Locate the Cork integration card in the list of available integrations.
3
Start Setup
Click Configure to launch the setup wizard.
Step 1: Connect
Enter your Cork API key to establish the connection.1
Enter API Key
Paste your Cork API key into the API Key field.
Your API key is stored securely using Supabase Vault encryption. It is never exposed in logs or API responses.
2
Test Connection
Click Test Connection to verify your credentials.You’ll see a green “Connection successful” message when the test passes.If the connection fails:
- Verify you copied the full API key without extra spaces
- Ensure the API key has not been revoked or expired
- Check that your Cork account has API access enabled
3
Create Integration
Once the connection test passes, click Create Integration to save your credentials and proceed.
Step 2: Map Clients
Map Cork clients (organizations) to your MSPortal companies. This determines which data syncs to which company.1
Sync Clients
If no clients appear, click Sync to fetch clients from your Cork account.
The initial sync runs in the background. Check back after a few minutes if clients don’t appear immediately.
2
Use Quick Match
Click Quick Match to automatically match Cork clients to MSPortal companies based on name similarity.Quick Match uses a 70% confidence threshold to find likely matches. Review the results and adjust as needed.
3
Manual Mapping
For clients that weren’t automatically matched:
- Find the client in the list
- Click the Select company dropdown in the “Mapped To” column
- Search for and select the correct MSPortal company
4
Create New Companies
If a Cork client doesn’t have a corresponding MSPortal company:
- Click the + button next to the client to create a new company
- Or click Create new company in the company dropdown to create and map one on the spot
5
Filter Clients
Click the summary cards above the list to filter the view:
- Total Items - Show all synced clients
- Mapped - Show only clients linked to companies
- Unmapped - Show clients that still need mapping
6
Proceed
Once you’ve mapped at least one client, click Next to continue.
Step 3: Import
Review the data that will sync from Cork and initiate the first sync.1
Review Data Types
The Import step shows what data types will be synced:
2
Start Initial Sync
Click Sync All Data to trigger the initial data sync.The sync runs in the background. Depending on your data volume, the initial sync may take several minutes.
3
Review Sync Stats
The page displays counts for each data type as they sync:
- Compliance Events
- Endpoints
- Inboxes
- Vulnerabilities
4
Complete Setup
Click Complete Setup to finish the wizard and return to the Integrations page.
What Gets Synced
Cork integration syncs the following data types to MSPortal:Compliance Events
Security compliance findings from Cork, including:- Event type and description
- Affected entity (device, inbox, or domain)
- At-risk status
- Resolution status
- Creation date
Endpoints
Device and endpoint information:- Device name and hostname
- Operating system type and version
- IP addresses
- Last seen timestamp
Inboxes
Email inbox data:- Inbox identifier
- Associated user
- Domain information
Vulnerabilities
Software vulnerability data:- CVE identifier
- Affected software product and version
- Vendor information
- CVSS score (severity rating 0.0-10.0)
- EPSS score (exploitation probability)
- Cork priority (Critical, Accelerated, Routine)
- Known exploited status
Synchronization Schedule
After initial setup, data syncs automatically:You can trigger a manual sync at any time by returning to the Cork integration settings and clicking Sync All Data.
Managing Your Integration
After setup, manage your integration from Settings > Integrations:Updating Your API Key
If you need to update your Cork API key:1
Open Integration Settings
Go to Settings > Integrations and click Configure on the Cork card.
2
Enter New API Key
On the Connect step, enter your new API key.
3
Test Connection
Click Test Connection to verify the new key works.
Adding More Client Mappings
As you onboard new clients in Cork:1
Open Integration Settings
Go to Settings > Integrations and click Configure on the Cork card.
2
Navigate to Map Step
Click on Step 2 (Map) in the wizard stepper.
3
Sync New Clients
Click Sync to fetch any new clients from Cork.
4
Map New Clients
Use Quick Match or manual mapping to connect new clients to companies.
Troubleshooting
Security & Privacy
- API Key Storage: Your Cork API key is encrypted using Supabase Vault and never exposed in logs or responses
- Data Isolation: All synced data is tenant-isolated and only visible to your organization
- Read-Only Access: MSPortal only requires read access to Cork data; it never modifies your Cork configuration
Next Steps
After setting up the Cork integration:View Security Data
Explore compliance events, vulnerabilities, and endpoints
Add to Planner
Convert findings into actionable work items
Build Reports
Include security metrics in client reports
Other Integrations
Explore additional integration options