> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Expel

> Expel is a Managed Detection and Response (MDR) security services provider that offer continuous monitoring, threat detection, and incident response services to help organizations protect themselves from cyber threats.

## Creating an Expel connection

## Using API Token

To create the connection you need:

* A Token

### Obtaining the credentials

1. Log in to [Workbench](https://workbench.expel.io/auth/login?orig=%2F).

2. In the side menu, navigate to **Organization Settings** > **Service Accounts**. If you have multiple organizations, you must select the appropriate organization name from the list.

3. Select **Add Service Account**.

4. **Name** the Service account.

5. Select the appropriate **role** for this service account.

<Note>
  **Admins** can access all API calls, while **analysts** can perform non-administrative actions like completing investigations or sending remediation actions but cannot perform administrative tasks like adding context or users.
</Note>

6. To enable **read-only** API access for the service account, select the **Read-only** Access checkbox.

7. In the new service account, select **Generate API Key**.

<Note>
  Only users with API access can view this page and generate API keys.
</Note>

8. Enter a **name** for the **API key**, then select **Next**.

9. **Copy** the API key and **save** it to a safe place (this is the only time you can view your API key), then select **Done**.

### Creating your connection

1. In the Blink platform, navigate to the **Connections** page > **Add connection**. A New Connection dialog box opens displaying icons of external service providers available.
2. Select the **Expel** icon. A dialog box with name of the connection and connection methods appear.
3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
4. Select **API Token** as the method to create the connection.
5. Fill in the parameters:
   * The Token
6. (Optional) Click **Test Connection** to test it.
7. Click **Create connection**. The new connection appears on the **Connections** page.