Review Buildkite token scopes after an access escalation
Give access escalations a focused token review while context is available.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Current Access Token
Tool to retrieve the authenticated api access token details. use when you need to confirm the validity and scopes of the current api token.
Why this helps
Escalations become risky when reviewers must reconstruct which token and policy were involved.
- Preserves escalation context
- Compares scopes with your stated policy
- Speeds reviewer handoff
Setup
Build it in a few focused steps.
- 1Connect 21risk and Buildkite in Notis once.
- 2Create the automation and add a clear prompt.
- 3Tell Notis to retrieve Buildkite token details, compare scopes with the policy in the 21risk payload, and summarize any mismatch.
- 4Choose a notis_webhook trigger.
- 5Select a report channel and test with one escalation alert.
Questions about this workflow
Does Notis decide whether access is approved?
No. It compares returned details with the policy you provide and presents findings for review.
Can the workflow read the alert context?
Yes, if the sending system includes it in the webhook request.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Buildkite. A trigger fires from one place; an action lands in another.
21risk triggers
Buildkite actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Get Current Access Token
Tool to retrieve the authenticated api access token details. use when you need to confirm the validity and scopes of the current api token.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Meta
Tool to retrieve metadata about the buildkite api. use when you need to fetch webhook ip addresses for firewall or security configurations.
List Pipeline Agents
Tool to list connected agents for an organization. use after confirming the organization slug. supports optional filtering and pagination.
Connect any two apps with Notis in the middle.
21risk and Buildkite, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Buildkite.