🎉 VSEC Test v4.0.1 is now live! Release Notes ↗
Intelligence

Intelligence

Workspace Intelligence is VSEC’s AI layer that powers Asset Manager features — asset generation and per-asset context analysis, as well as Risk Manager’s AI curation and Suggested actions. The intelligence layer also powers Beacon’s analysis of Monitor signals. It is configured once at the workspace level and applies to all VSEC operations.

Navigate to Settings → Intelligence to manage providers.

Enterprise / workspace administrators can also configure intelligence providers and manage API token integrations from the BH Core admin center (Integrations → Intelligence and Integrations → Tokens). Changes made in either place are reflected in both. AI model providers (Deep Harbor, Claude, Gemini) are intentionally separated from third-party BH Core integrations — they appear only under the Intelligence section.

Providers

Three built-in AI providers are listed. Deep Harbor is temporarily unavailable this release; Claude and Gemini can be activated. Only one built-in provider can be active at a time — activating one automatically deactivates the others.

Deep Harbor

Deep Harbor is Block Harbor’s hosted AI provider. It is temporarily unavailable in this release: its row appears under Settings → Intelligence marked “Temporarily unavailable” with the toggle disabled, and it cannot be selected as the active provider. No API key or external account is involved.

Claude (Bring Your Own Key)

The Claude provider connects your workspace to Anthropic’s Claude API using your own key. The key is stored server-side and is write-only — it is never returned to the browser after saving.

CapabilitySupported
Asset Generation
Context Tab (per-asset analysis)
Risk Context & Suggested actions

Setting Up Claude

  1. Navigate to Settings → Intelligence
  2. Under Claude, click Configure
  3. Enter your Anthropic API key
  4. Optionally specify a model (defaults to claude-opus-4-8 if left blank)
  5. Click Save & enable

Saving activates Claude immediately as the active provider — any previously active provider is deactivated (its saved key is preserved).

To update the key later, click Update key and repeat the steps above.

Gemini (Bring Your Own Key)

The Gemini provider connects your workspace to Google’s Gemini API using your own key. Like Claude, the key is stored server-side and is write-only — it is never returned to the browser after saving.

CapabilitySupported
Asset Generation
Context Tab (per-asset analysis)
Risk Context & Suggested actions

Setting Up Gemini

  1. Navigate to Settings → Intelligence
  2. Under Gemini, click Configure
  3. Enter your Google Gemini API key
  4. Optionally specify a model (defaults to gemini-2.5-pro if left blank)
  5. Click Save & enable

Saving activates Gemini immediately as the active provider — any previously active provider is deactivated (its saved key is preserved).

To update the key later, click Update key and repeat the steps above.

API Token Integrations

API tokens let external systems authenticate against the VSEC APIs — for example to push enrichment data into Asset Manager programmatically. There is no Custom Providers section on the Intelligence page: tokens are created under Dashboard → Settings → Integrations, in the Build your own integration card. See Integrations & API Tokens for the full reference.

Creating a Token

  1. Navigate to Settings → Integrations
  2. In the Build your own integration card, click Generate token
  3. Give the integration a name — VSEC generates an API token immediately
The API token is shown only once. Copy it immediately and store it securely. Only the first 8 characters (the token prefix) are displayed afterward for identification purposes.

Using a Provider Token

External systems pass the token as Authorization: Bearer <token> or in the x-api-key header. Provider tokens authorize the asset enrichment/import surface used by external integrations — contact Block Harbor for integration specifics.

The read-only external endpoints:

GET /api/ext/v1/asset-manager/asset
GET /api/ext/v1/asset-manager/property
GET /api/ext/v1/asset-manager/type

use normal session authentication — provider tokens do not work on them.

Token Management

ActionResult
Regenerate tokenOld token immediately invalidated; new one issued
RemoveIntegration deleted; token immediately invalidated
Last updated on