Integration

Shuffle SOAR integration

Shuffle security orchestration and automation API: list, read, create, update and delete workflows, execute a workflow with an argument and follow its execution to the result, abort a run, manage the schedules and webhooks that trigger workflows, browse the app catalogue and its stored authentications, read the runtime environments, list the files a workflow can use and read the notifications and execution statistics of the organisation. The instance host is part of the credential, so the same integration serves the hosted service and a self hosted deployment.

Connect Shuffle SOAR How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Shuffle SOAR.Built from the 19 Shuffle SOAR tools below, on the connection you add once.

Common Shuffle SOAR use cases

launching a triage playbook when an alert arrives
reading a workflow definition before modifying it
checking which files a workflow has available to it
auditing which playbooks run on a timer and how often
running an intelligence ingestion playbook every hour
stopping a scheduled playbook that is no longer needed
removing a playbook that was superseded by a new version
retiring the entry point of a decommissioned integration
adding an action to an existing playbook programmatically
choosing the environment a scheduled workflow should run in

What you can do with Shuffle SOAR

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Workflow, 5 operations

create_workflowCreate workflowPOSTCreates a new Shuffle workflow shell to be filled in afterwards.
delete_workflowDelete workflowDELETEDeletes a Shuffle workflow and the triggers attached to it.
get_workflowGet workflowGETReturns one Shuffle workflow definition in full.
list_workflowsList workflowsGETLists the Shuffle workflows the API key can see.
update_workflowUpdate workflowPUTWrites a complete Shuffle workflow definition over the existing one.

Execution, 4 operations

abort_executionAbort executionGETAborts a running Shuffle workflow execution.
execute_workflowExecute workflowPOSTStarts a Shuffle workflow run and returns the execution identifier to follow.
get_execution_resultGet execution resultPOSTPolls a Shuffle execution and returns its status and per action results.
list_workflow_executionsList workflow executionsGETLists the recent runs of a Shuffle workflow with their status.

Schedule, 3 operations

create_scheduleCreate schedulePOSTCreates a Shuffle schedule that runs a workflow repeatedly.
delete_scheduleDelete scheduleDELETERemoves a Shuffle schedule so the workflow stops running on a timer.
list_schedulesList schedulesGETLists the Shuffle schedules that start workflows on a timer.

App, 2 operations

list_appsList appsGETLists the Shuffle apps whose actions workflows can use.
search_appsSearch appsPOSTSearches the Shuffle app catalogue instead of listing every app.

Webhook, 2 operations

create_webhookCreate webhookPOSTCreates a Shuffle webhook that starts a workflow when an external system calls it.
delete_webhookDelete webhookDELETERemoves a Shuffle webhook so its URL no longer starts a workflow.

App authentication, 1 operation

list_app_authenticationsList app authenticationsGETLists the credentials Shuffle has stored for its apps.

Environment, 1 operation

list_environmentsList environmentsGETLists the Shuffle environments a workflow or schedule can be pinned to.

File, 1 operation

list_filesList filesGETLists the file metadata Shuffle holds for workflows to use.

Use Shuffle SOAR from Claude Code, Cursor or Codex

Connect Shuffle SOAR in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Shuffle SOAR operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Shuffle SOAR

Create your workspace
Sign up free. Nothing to install.
Connect Shuffle SOAR once
Add your Shuffle SOAR connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Shuffle SOAR integration FAQ

What can you do with the Shuffle SOAR integration?

LiveContext exposes 19 operations on Shuffle SOAR, covering workflow, execution, schedule and app. Common uses include launching a triage playbook when an alert arrives, reading a workflow definition before modifying it and checking which files a workflow has available to it.