> For the complete documentation index, see [llms.txt](https://docs.octoxlabs.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.octoxlabs.com/adapters/adapters/trend-micro-cloud-app-security.md).

# Trend Micro Cloud App Security

## Connection Requirements

### 1 - Domain

The regional service URL host of your Cloud App Security tenant, without a scheme. The host differs per region (US, EU, AU, JP, IN, SG, UK). Enter the host shown in your CAS management console.

{% hint style="info" %}
**Default:** api.tmcas.trendmicro.com
{% endhint %}

{% hint style="info" %}
To find the service URL for your region, see [Understanding the Service URL](https://docs.trendmicro.com/en-us/documentation/article/cloud-app-security-integration-api-online-help-understanding-the-ur).
{% endhint %}

### 2 - API Token

The authentication token generated on the Cloud App Security management console. It must include the **Log Retrieval** API type so it can read security event logs.

{% hint style="info" %}
**You can follow the steps below.**
{% endhint %}

1. Log on to the Cloud App Security management console.
2. Go to **Administration** > **Automation and Integration APIs**.
3. Click **Add**, then select the target to create the token for.
4. Specify a name and, optionally, a description for the token.
5. Select at least one API type. The **Log Retrieval** API is required to fetch security event logs.
6. Click **Create Token**. The generated token is displayed on the Automation and Integration APIs screen.

{% hint style="info" %}
A token is valid for 365 days after it is generated. When it expires, delete it and add a new one, or select it and click **Refresh** on the console; a maximum of 20 tokens is supported.
{% endhint %}

### 3 - Start Time

Optional. The beginning of the time window to query, in ISO 8601 format (for example 2026-06-01T00:00:00Z). Leave it empty to let the service apply its own default window (the last 72 hours). When set, both Start Time and End Time must be provided and the range cannot exceed 72 hours.

### 4 - End Time

Optional. The end of the time window to query, in ISO 8601 format (for example 2026-06-04T00:00:00Z). Leave it empty together with Start Time to use the default window.

### 5 - Proxy

Proxy url. (optional)

### 6 - Timeout

The amount of time (in seconds) to wait for API responses. (default: 30)

{% hint style="danger" %}
**Attention**

Please perform a connection test to ensure there is a valid connection to the Trend Micro Cloud App Security host. When the discovery operation is finalized you will be able to see the details on Assets page.
{% endhint %}