Connect Kindo

Sift reaches Kindo through one API key that an admin stores in the console. With it, Sift reads your sources, starts agent runs, reads their verdicts, and makes its own model calls on a model you choose. This page connects the key and chooses the model, the first two steps of Get Sift running. You need the admin role.

Before you start

Sign in as an admin, with the default password already changed (Install Sift).
Have a Kindo API key for the tenant whose agents and integrations Sift will use. Sift uses the key to:
- list and read agents, and create the agents it generates for filters;
- start agent runs and read their results;
- read your connected integrations, which is how it reads every source;
- call a model through Kindo, for its assistant and gold-set proposals.
Sift holds one key at a time, so it works with one Kindo tenant.
Know your Kindo API’s address if it is not https://api.kindo.ai.

Connect the key

Open the Kindo connection page: press Connect Kindo on the dashboard, or the gear icon (Administration) at the top right, then Kindo connection.

A panel headed Connect to Kindo shows four steps: Key, Connect, Model, Checks.
In Label, name the connection, for example “Production tenant”. The label is how the console and the audit log refer to it.
Paste the key into API key.
Leave Base URL at https://api.kindo.ai, or enter your Kindo API’s address.
Press Connect.

Sift tries the key against Kindo and reads the list of models the key may use. This takes a second or two. The key field is cleared once Sift accepts the key.

Choose the model

The step headed Choose the model lists the models this key offers, under Suggested (families Sift has been tested with) and Other models. Sift uses this model for its own work: the assistant that helps you build a filter, the analysis of an existing agent’s runs, and the proposals in a gold set. It is not the model your agents run on.

Select a model. Type in the box above the list to narrow it by name or id.
Press Confirm model.

The step headed Checking the new key shows two checks, each Waiting, Running, Passed, Warning or Failed.

Check	What Sift does
Tenant	Sends a request with the key and reads one page of your agents.
Model	Asks the chosen model for a JSON answer and for a tool call, the two things Sift’s own calls need.

When both pass, the connection goes live and the panel reads Connected. You can leave the page while the checks run; the connection goes live without you.

What you should see

The Kindo connection page now shows the connection: its Model, Base URL, Auth header, Key (only the last four characters), Created and Verified, with a Verified badge. Under it, Recent calls counts Sift’s calls to Kindo.

To confirm the key reaches what you expect, press Check reachability under What Sift can reach. It lists the agents and models the key can see.

On the dashboard, the first two steps of Get Sift running are ticked, and the next is Create your first filter.

If a check fails

What you see	What it means	What to do
Kindo refused the staged key., back on the key step	The tenant check failed: Kindo rejected the key, or the base URL is wrong. The model is not tested.	Check the key and base URL, and press Connect again with the right ones.
“model failed the test. Choose another model.”	The model did not return a JSON answer or a tool call.	Choose another model and press Confirm model. A model that failed cannot be chosen again for this key.
This key’s catalog lists no models.	Kindo offers this key no models.	Use another key, or ask your Kindo administrator which models the key may use.
The key you staged expired.	A key that has not finished connecting is kept for one hour.	Connect again.
A check that never finishes	The check stopped before it finished. After ten minutes the check is marked failed.	Run it again. If it fails the same way, see Troubleshooting.

You can press Cancel at any step before the connection goes live; nothing is stored.

Later changes

All of these are on the Kindo connection page, under the connection’s details.

Button	What it does
Verify	Runs the checks again on the stored key: Tenant, Model, and Paired agents, which reads every agent a filter sends events to.
Change model	Lists the key’s models again. Sift tests the one you confirm and switches to it only if the test passes.
Replace key	Runs the same steps for a new key beside the current one, including the Paired agents check, then asks you to Replace connection. The current key stays in use until you confirm.
Disconnect	Removes the key after a confirmation. Sift then has no Kindo connection: nothing is read and no agent runs. Use Replace key to rotate a key without a gap.

Replacing or disconnecting a key in Sift does not revoke it in Kindo. Revoke the old key there.

See The Kindo connection for everything on this page.

Your first filter, as an operator or admin.