Check Catalog
| Category | Check | Description | Thresholds |
|---|---|---|---|
| Loading... | |||
My Customers
Customers you own appear here for reports, findings, and safe settings. Anyone can watch other monitored customers below.
Loading...
Compare findings
Watching
Latest completed healthcheck for customers you watch. Open the report to review; mute and acknowledge stay on owned customers above.
Loading...
Add to watchlist
Loading...
Monitored Accounts
Loading...
Add Account by ID
Search by Customer Name
Lookup by Service ID
Reports
| Customer | Status | Started | Duration | Actions | ||
|---|---|---|---|---|---|---|
| Loading... | ||||||
Connect with MCP
Pulse exposes a remote MCP at /mcp.
Editors and admins can call owned-lane tools (customers, scans, findings, suppressions)
as themselves. Viewers cannot use MCP.
Cursor (Okta OAuth)
When Web UI SSO is on, Cursor discovers OAuth from the MCP URL. Paste this into your MCP settings (Cursor Settings → MCP):
Claude Code
Claude Code needs an explicit HTTP transport. A URL-only entry is treated as stdio and skipped.
Add this to .mcp.json (project) or your user MCP config, then complete Okta via
Claude's /mcp browser flow. See
Claude Code MCP docs.
Or add via CLI:
For a static token instead of OAuth, create an MCP token below and set
headers.Authorization to Bearer ${PULSE_MCP_TOKEN}
(export the raw token as that env var).
Managed Agents
Aiven Managed Agents
custom MCP integrations need a static Bearer credential, not Okta OAuth.
Create a token in the section below, then point the Console custom integration at the same
/mcp URL. Full Console setup and smoke tests:
docs/managed-agents-pulse.md in the Pulse repo (also under README → Agent MCP).
What you can do
With MCP connected, an agent can list your customers, start and poll scans, read findings and summaries, compare runs, and manage acknowledgements or mutes within your owned lane. Use Aiven Admin tools for live service metrics and logs.
MCP tokens
Long-lived personal access tokens for Managed Agents, Claude Code static auth, and other
clients that cannot complete Okta OAuth. Create a token, then paste it as the Bearer
credential pointing at /mcp. The raw value is shown once.
| Label | Scopes | Created | Expires | Last used | |
|---|---|---|---|---|---|
| Loading... | |||||
Users
Okta decides who can open Pulse. Roles live here. A new sign-in starts as Viewer unless you add them first. Remove drops a role and keeps it from being seeded again. If that person can still sign in, they start over as Viewer.
| Loading... | |||||||
Analytics
Completed healthcheck results from PostgreSQL. Counts come from compact finding rows written with each report, not from scanning full payloads.
By day
Click a bar to zoom into that bucket. Stacked RED, YELLOW, GREEN, and UNKNOWN findings.
By check
Click a row to filter the explorer, or to list matching runs.
| Check | RED | YELLOW | GREEN | UNKNOWN |
|---|
By service type
| Service type | RED | YELLOW | GREEN | UNKNOWN |
|---|
By account
Click a row to filter the explorer, or to list matching runs.
| Account | RED | YELLOW | GREEN | UNKNOWN |
|---|
Persistent findings
RED and YELLOW on the latest run per account in this window, with age of the current failing streak.
| Account | Project | Service | Check | Severity | Age (days) | Streak | First seen | Last seen |
|---|
Checks TAMs silence
Active acknowledgements and mutes, grouped by check. Open a row to see the account and service. Service type is not on this table.
| Check | Acknowledged | Muted | Median age | Where |
|---|
Fleet changes
Next daily refresh is 06:00 UTC.
| When | Account | Change | Trigger | Type |
|---|---|---|---|---|
| Open this tab to load fleet changes. | ||||
Scale-up candidates
Accounts whose ARR meets the threshold below, fetched from BigQuery. Only platform accounts with powered services are proposed. Refresh previews adds and removes; confirm before the committed list changes. Exclude any account you want to skip; exclusions save automatically. Cron timing for expansion scans lives on the Schedules tab.
Candidate accounts 0 included
| Customer | Account ID | Region | ARR (USD) | Powered | Projects | |
|---|---|---|---|---|---|---|
| No candidates yet. Click "Refresh from BigQuery". | ||||||
Scheduled Scans
Configure when Pulse runs scans automatically (UTC). Use Run now to start immediately. Each account runs as its own row on the Healthchecks list. Manage scale-up candidates on the Scale-up tab.
Scale-up candidates
Expansion scans use the selected accounts from the Scale-up tab.
Manage candidatesFull healthchecks
Runs the full set of checks against every account on the Accounts page. Run notify scan now publishes summaries (Drive, BigQuery, Notion). Daily scheduled runs are data-only and stay in Postgres for trends.
In-app schedules
Cron expressions are 5-field and interpreted in UTC. If Pulse is down at fire time, that run is skipped unless, on the next startup, the next fire is more than three hours away, in which case Pulse starts it then. Last run and that catch-up check include cron, catch-up, and Run now / CI starts. Saving updates the next run time and does not start a scan.
Persists findings in Postgres only. No summary, Drive, BigQuery, or Notion.
Full check set plus distribution (summary, Drive, BigQuery, Notion).
Hot window kept in Postgres once ClickHouse is configured. Older runs stay readable from the archive. Minimum 7 days.
CI / API key triggers
Optional. Pulse runs enabled schedules itself. These endpoints remain
for CI when PULSE_SCHEDULE_API_KEY is set on the server
(X-Pulse-Schedule-Key header). Notify triggers run the
distribution pipeline.
BYOC Migration Tracker
Generate a BYOC migration tracker spreadsheet for an account.
BYOC Processes
| Customer | BYOC Cloud | Status | Started | Duration | Actions | ||
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Debug Checks
Run individual checks against a single service for debugging.