--- title: Cakewalk API Integration on Truto slug: cakewalk category: Compliance canonical: "https://truto.one/integrations/detail/cakewalk/" --- # Cakewalk API Integration on Truto **Category:** Compliance **Status:** Beta ## MCP-ready AI tools Truto exposes 25 tools for Cakewalk that AI agents can call directly. - **list_all_cakewalk_users** — List Cakewalk users. Returns a paginated list of simplified user profiles including id, name, email, and statusName. - **cakewalk_users_deactivate** — Deactivate a specific Cakewalk user by id. Required: id. - **get_single_cakewalk_user_by_id** — Get detailed information about a specific Cakewalk user by id. Returns: id, name, email, roleName, statusName, lastLogin, and managerId. - **list_all_cakewalk_users_groups** — List all users groups in Cakewalk. Returns a paginated list of simplified group objects including id, name, description, isIdpGroup, and isReadOnly. - **get_single_cakewalk_users_group_by_id** — Get detailed information about a specific Cakewalk users group by id. Returns: id, name, description, isIdpGroup, isReadOnly, numberOfUsers, numberOfDefaultWorkApps, and numberOfHiddenWorkApps. Required: id. - **list_all_cakewalk_users_group_default_work_apps** — List default work apps associated with a users group in Cakewalk. Returns each entry's workApp (id, name, statusName) and optional permissionLevel (id, name, description). Required: users_group_id. - **list_all_cakewalk_users_group_hidden_work_apps** — List hidden work apps associated with a specific users group in cakewalk. Returns the collection of hidden work app records. Required: users_group_id. - **list_all_cakewalk_users_group_users** — List users belonging to a Cakewalk users group. Returns the collection of users in the group. Required: users_group_id. - **create_a_cakewalk_users_group_user** — Add one or more users to a Cakewalk users group. Returns a 201 Created response on success. Required: users_group_id, userIds, and triggeredByUserId. - **delete_a_cakewalk_users_group_user_by_id** — Remove a user from a Cakewalk users group. Returns an empty response on success. Required: users_group_id and id. - **list_all_cakewalk_work_apps** — List all available Work Apps in Cakewalk. Returns: id, name, statusName for each work app. - **get_single_cakewalk_work_app_by_id** — Get detailed information about a specific Cakewalk Work App by id. Returns: id, name, statusName, categoryName, url, imageUrl, tagLine, description, owner, numberOfAccounts, serverLocations, certifications, and aiRisk. Required: id. - **list_all_cakewalk_work_app_accesses** — List user accesses for a specific Cakewalk Work App. Returns: isOwner, user (id, name, email, roleName, statusName), permissionLevel, and lastAccessedAt per access entry. Required: work_app_id. - **cakewalk_work_app_accesses_bulk_create** — Create user access entries for one or more Cakewalk Work Apps in a single bulk request. Returns an empty 201 response on success. Required: data array where each entry requires workAppId and userId. - **list_all_cakewalk_work_app_permission_levels** — List permission levels for a specific Work App in Cakewalk. Returns the available permission level records associated with the given work app. Required: work_app_id. - **update_a_cakewalk_work_app_policy_by_id** — Update the policy assigned to a Cakewalk Work App for a specific request type. Returns an empty 204 response on success. Required: work_app_id (Work App identifier), id (request type: GrantAccessRequest, RemoveAccessRequest, ArchiveWorkAppRequest, ChangePermissionLevelRequest, or AddNewManagedWorkAppRequest), and policyId in the body. - **update_a_cakewalk_work_app_permission_level_policy_by_id** — Update the policy assigned to a specific permission level within a Cakewalk Work App for a given request type. Returns an empty 204 response on success. Required: work_app_id, permission_level_id, id (request type), and policyId. - **list_all_cakewalk_work_app_custom_fields** — List all custom fields for a specific Cakewalk Work App. Returns: id, name, type, required, value, guidValue. Required: work_app_id. - **update_a_cakewalk_work_app_custom_field_by_id** — Partially update custom fields for a specific Cakewalk Work App. Required: work_app_id. - **list_all_cakewalk_tasks** — List Cakewalk tasks for a specific user, optionally filtered by task status. Returns: id, type, status, createdAt, lastUpdatedAt, assignedUserId per task. Required: userId. - **get_single_cakewalk_task_by_id** — Get detailed information about a specific Cakewalk task by id. Returns: id, type, status, createdAt, lastUpdatedAt, assignedUser, claimers, executedByUser, request, and review metadata. Required: id. - **create_a_cakewalk_task_approval** — Approve a task in cakewalk by submitting an approval action against the specified task. Required: task_id. - **create_a_cakewalk_task_decline** — Decline a task in cakewalk. Required: task_id. - **list_all_cakewalk_policies** — List compatible policy templates for a specific request type in cakewalk (e.g., access or remove). Returns policy templates including their logic, conditions, and approval flow definitions. Required: id (the request type). - **create_a_cakewalk_access_review** — Create an access review campaign in cakewalk to audit and certify user access across specific apps or all apps. Defines the campaign scope, assignees (such as app owners, line managers, or a review owner), and completion deadline. ## How it works 1. **Link your customer's Cakewalk account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Cakewalk.** The Proxy API is a 1-to-1 mapping of the Cakewalk API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate compliance evidence collection from Cakewalk** — Compliance automation platforms can pull access review logs, deprovisioning timestamps, and policy data from Cakewalk to auto-generate SOC 2 and ISO 27001 audit evidence — eliminating manual screenshot uploads for end users. - **Enrich SaaS spend management with live access data** — Spend management tools can sync Cakewalk's application discovery and access data to compare active seats against purchased contracts, surfacing dormant licenses and redundant tools for finance teams to act on. - **Enable zero-touch provisioning from HRIS platforms** — HRIS and payroll platforms can push new hire identity data to Cakewalk so that IT provisioning workflows — email, Slack, role-based app access — kick off automatically before an employee's first day. - **Offer native Cakewalk-driven user lifecycle management** — Any B2B SaaS app can integrate with Cakewalk to accept provisioning and deprovisioning signals, so when an employee is approved or offboarded in Cakewalk, the app creates or removes the user account instantly without requiring custom SCIM configuration. - **Trigger just-in-time access grants for infrastructure platforms** — Cloud and DevOps platforms can listen for Cakewalk events to temporarily escalate infrastructure permissions and automatically revoke them when the window expires, supporting least-privilege security postures. ## What you can build - **Real-time Shadow IT discovery dashboard** — Sync Cakewalk's application and access data into your product to show customers a live inventory of every SaaS tool and AI agent in use across their organization, including unapproved ones. - **Automated offboarding revocation feed** — Consume Cakewalk leaver events to instantly trigger session revocation and account deletion workflows inside your platform when an employee departs. - **Dormant license alerting engine** — Pull access and activity data from Cakewalk to automatically flag inactive user accounts in your app and notify admins with cost-saving recommendations. - **One-click access request fulfillment** — Expose your app's provisioning endpoint to Cakewalk so that when an employee requests access via Slack or Cakewalk's UI, the user account is created and permissioned without manual IT intervention. - **Audit-ready access review reports** — Query Cakewalk's access and task data to generate downloadable, timestamped access review evidence that maps directly to SOC 2 and ISO 27001 control requirements. - **Role-based onboarding automation** — Push employee role and department data from your HRIS into Cakewalk so that new hires are automatically provisioned with the correct app stack based on their team and job function. ## FAQs ### Does Cakewalk provide an API for integration? Yes. Cakewalk offers an Open API with REST endpoints covering applications, accesses, identities, requests, and tasks, as well as a webhook system for event-driven workflows. ### Is the Cakewalk integration available as a pre-built Truto connector? The Cakewalk integration is currently built on request. Contact Truto to have it added — Truto handles auth, pagination, and API-specific quirks so you don't have to. ### What authentication methods does Cakewalk support? Cakewalk's API uses token-based authentication. Truto manages the full auth lifecycle on your behalf, so your end users can connect their Cakewalk accounts without your team handling credentials or token refresh logic. ### What data can I read from Cakewalk through this integration? Key data models include applications (discovered SaaS tools), accesses (which users hold which licenses and roles), identities (employee directory and group mappings), requests, and tasks (IT approval workflow statuses). ### Does Cakewalk support webhooks for real-time event notifications? Yes. Cakewalk fires webhooks for events like dormant account detection and employee offboarding, enabling your product to react in real time rather than relying solely on polling. ### Can I write data back to Cakewalk or is it read-only? Cakewalk's Open API supports bidirectional operations. You can push identity data, update request and task statuses, and trigger provisioning workflows — not just read data. ## Related reading - [Connect Cakewalk to Claude: Control App Permissions & Task Approvals](https://truto.one/blog/connect-cakewalk-to-claude-control-app-permissions-task-approvals/) — Learn how to generate a secure, managed MCP server to connect Cakewalk to Claude. Automate IT access reviews, app provisioning, and policy updates using AI. - [Connect Cakewalk to ChatGPT: Manage Access & App Policies via MCP](https://truto.one/blog/connect-cakewalk-to-chatgpt-manage-user-access-and-app-policies/) — Learn how to connect Cakewalk to ChatGPT using Truto's MCP server. We cover IAM tool calling, offboarding automation, and strict access controls. - [Connect Cakewalk to AI Agents: Automate Access Reviews & Governance](https://truto.one/blog/connect-cakewalk-to-ai-agents-automate-access-reviews-governance/) — Learn how to connect Cakewalk to AI agents using Truto's /tools endpoint. Automate access reviews, app policies, and IT governance workflows with LangChain.