---
title: "Rkvst integration for LuumenAI"
url: "https://www.luumen.ai/integrations/rkvst/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Rkvst integration for LuumenAI

Read asset provenance in Rkvst, and change app registrations with approval

## What LuumenAI can do with Rkvst

LuumenAI connects to Rkvst with an API token and exposes 24 tools (22 read-only · 2 write). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 24 tools (22 read-only · 2 write)
- Plan: available on all plans
- Category: Identity & security

## About Rkvst with LuumenAI

Rkvst holds the chain of custody for your supply chain data. Luumen reads it in place: asset records, event histories, attachments, app registrations, and tenancy details. Ask who registered an integration or what happened to an asset last week, and get the answer from the ledger. Changes to app registrations and member roles are previewed first and go out as approved steps.

## Example tools

Read-only (22 in total):

- `RKVST_DOWNLOAD_EVENT_ATTACHMENT` — Download an attachment from a specified Event on an Asset.
- `RKVST_GET_APP_REGISTRATION` — Retrieve details for a given App Registration ID.
- `RKVST_GET_ASSET` — Retrieve details for a given Asset.
- `RKVST_GET_BLOB` — Retrieve details of a Blob by ID.
- `RKVST_GET_EVENT` — Retrieve details of a specified Event.
- `RKVST_GET_IAM_SUBJECT` — Retrieve IAM subject details.
- `RKVST_GET_MEMBER` — Retrieve details for a given Member ID.
- `RKVST_GET_PUBLIC_ASSET` — Retrieve details for a public asset.

Write and destructive (2 in total, approval required by default):

- `RKVST_PROMOTE_MEMBER` — Promote a tenant member to OWNER role.
- `RKVST_UPDATE_APP_REGISTRATION` — Update an application's display name or custom claims.

## Frequently asked questions

### How does LuumenAI connect to Rkvst?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Rkvst on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default. Administrators configure that per tool.

### Is there an audit trail?

Every call to Rkvst — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/rkvst/