> ## Documentation Index
> Fetch the complete documentation index at: https://docs.clarion.cantina.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Envoy

> Workplace context — office locations, employees, and who is signed in on site — for physical-world corroboration during triage.

Envoy is a workplace platform. Connecting it gives agents a read-only view of your office locations, employee directory, and visitor and employee sign-in entries.

<Note>
  **Estimated time:** 3 minutes. You will need admin access to your Envoy account.
</Note>

## Prerequisites

* An **Envoy** account with admin access
* A Client API key

## Step 1 — Create a Client API Key in Envoy

1. In Envoy, go to **Settings → Integrations → API keys**.
2. Create a **Client API Key**.
3. Copy the key.

## Step 2 — Connect in Clarion

1. In Clarion, open **Integrations** and find **Envoy**.
2. Paste the key and click **Connect**.

The key is stored encrypted and never enters the agent sandbox.

## What agents can do

| Tool                              | What it returns                             |
| --------------------------------- | ------------------------------------------- |
| `get_company`                     | Your Envoy company record                   |
| `list_locations`                  | Office locations                            |
| `list_employees` / `get_employee` | Employee directory lookups                  |
| `list_entries` / `get_entry`      | Sign-in entries — who was on site, and when |

## Why a security agent wants this

Envoy answers a question the rest of the stack cannot: **was this person physically there?**

An impossible-travel alert reads very differently when the badge record puts the employee in the London office at the time of the London login. A suspicious out-of-hours access from a corporate network is more interesting when nobody was in the building. Envoy turns those from assumptions into evidence.

## Disconnect

Click **Disconnect** on the integration page. The stored key is deleted.