Ask your AI assistant about your security awareness program

Hook now has a brand new API, multi-client API keys, and an MCP connection, so Claude, Cursor, VS Code, Codex or Gemini CLI can answer questions from your live phishing and training data.

Most questions about a security awareness program are simple to ask and tedious to answer. Who clicked last week? Who still hasn't finished the course? Which client needs attention before the quarterly review? The answers are in Hook, spread across a campaign page, a report and a training list.

We've added a way to ask those questions directly. An admin creates an API key in Hook, connects it to an AI assistant, and then asks in plain words. The assistant reads your Hook data and answers. If you'd rather work in your own tools, the same data is available over a REST API.

This is available to organizations and MSPs on the new Hook platform. It's currently included in all paid plans.

What's new

• API keys in Settings. Admins create keys under Settings > API keys. Each key has a name, is shown once when you create it, and can be revoked at any time.
• Organization and MSP keys. An organization key reads that organization's data only. An MSP key reads the MSP and every client under it, including clients you add later.
• AI assistant connection (MCP). MCP is a standard way for AI assistants to read data from other tools. Hook's connection works with Claude, Cursor, VS Code, Codex and Gemini CLI, and with any assistant that supports remote MCP servers over HTTP.
• REST API v1. Read-only endpoints for organizations, campaigns, per-person campaign results, training enrollments and billable users, with paging and filters. There's an OpenAPI document, a reference page and an explorer for trying calls.
• A setup guide. The Connect your AI assistant page has the steps for each assistant.

It can only read

The assistant can read your campaigns, results and training. It can't change anything in Hook, and it only sees the organizations your key covers. Campaign and training numbers match Hook's own reports for the same organization and period, so the answer you get in a chat is the one you'd get from the report.

We'd suggest one key per person, so you can revoke one without affecting anyone else. And paste the key only into your assistant's setup, never into a chat.

What you can ask: Organizations

• "Who clicked in our last campaign and still hasn't finished their training?" The assistant checks the campaign's results against training status and gives you a short list to follow up with, with each person's course status and due date.
• "Who is overdue on training?" A list you can act on before the due-date chase starts.
• "Who reported the simulation?" The people doing the right thing. Worth a thank-you.
• "Summarize our last three campaigns for the leadership meeting." Click rates, reports and training progress as a draft you edit, instead of a screenshot of a dashboard.

What you can ask: MSPs

• "Which of my clients had the highest click rate this quarter?" One question across every client, instead of opening each one.
• "Draft a QBR summary for Northstar Logistics." Campaigns, click rates, reports and overdue training for one client, as a starting point for the review.
• "Which clients have people overdue on training?" A shortlist for this week's check-ins.
• "How many billable users did each client have last month?" Billable users per month, from October 2026 onward.

Connect your assistant

First, create a key. Go to Settings > API keys in Hook takes you to the right page for your account), name the key and copy it. It is shown once.

Then add Hook to your assistant.


VS Code, Codex (including the ChatGPT desktop app, which shares Codex's settings), Gemini CLI and Claude chat each have their own short steps in the setup guide. To check it worked, start a new conversation and ask: "Use the Hook tools: who am I, and which organizations can I see?"

Or call the REST API

If you want the data in a spreadsheet, a BI tool or your own scripts, use REST v1 with the same key. Every endpoint is a read. For example, to list the people who clicked in a campaign:

curl "<https://api.hooksecurity.co/v1/campaigns/CAMPAIGN_ID/results?outcome=clicked>" \
-H "Authorization: Bearer YOUR_KEY"


Lists come back in pages; pass next_cursor from one response as cursor on the next call. The API reference covers every endpoint and filter, the explorer lets you try calls, and the OpenAPI document is there if you want to generate a client.

Where to find it

• Create a key: Settings > API keys in Hook.
• Connect an assistant: Connect your AI assistant.
• Call the API: API reference and explorer.