Moody's CreditLens

Moody's CreditLens is a commercial lending and credit risk platform that helps financial institutions manage the full credit lifecycle. This adapter fetches user account data from the platform.

Use Cases the Adapter Solves

• Review user access: Identify user accounts, roles, and portfolio assignments for access reviews.
• Monitor account status: Find inactive or locked accounts and review recent login activity.

Asset Types Fetched

• Users

Data Retrieved through the Adapter

Users - fields such as: User ID, Email, Last Login, Role

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

The adapter supports these authentication methods:

• Basic Authentication
• JWT-Based Authentication

APIs

Axonius uses the Moody's CreditLens API. The following endpoints are called:

• POST /api/security/authenticate - Authenticates users of the Basic Authentication method and retrieves a token.
• POST /api/reports/downloadReports - Downloads the User Audit Report and User Access Report in CSV format.

Required Permissions

Moody's CreditLens API documentation is not publicly available - verify exact permission names in the official Moody's CreditLens documentation.

API User Requirements

The Axonius connection requires a dedicated, non-interactive CreditLens user account. This account:

• Must be a pre-created CreditLens user ID that is not used for interactive (human) login.
• Must have IAM privileges granting read access to Users, Roles, and security/configuration settings so the report endpoints return data.
• Must not be the default admin account.

Recommended Role: Security Administrator

Based on the CreditLens Administration Guide, the Security Administrator role is the most appropriate for the API user, as it provides:

• Access to create and manage users and IAM policies.
• Read access to user data, roles, and organizational settings required for the User Audit Report and User Access Report endpoints.

Note: CreditLens uses an attribute-based access control (ABAC) model. Permissions are not controlled by role alone — they are determined by administrator-defined attributes assigned to the user. A Security Administrator in your environment must confirm that the API user's attributes grant read access to the following:

IP Allowlisting

The CreditLens server may require the Axonius IP address to be allowlisted. A 403 response from the API indicates that the source IP is not allowlisted. Contact your CreditLens administrator to add the Axonius IP to the allowed sources.

Verify with Your Administrator

Because CreditLens API documentation requires customer login, verify the exact attribute assignments and IAM policy configuration with your CreditLens Security Administrator before connecting.

Supported From Version

Supported from Axonius version 9.0.7

Connecting the Adapter in Axonius

1. Navigate to the Adapter Catalog, search for Moody's CreditLens, and select the adapter.
2. Click Add Connection.
3. Provide the following parameters.

Required Parameters

1. Host Name or IP Address - Enter the base domain for the API, including the http:// or https:// prefix and without a specific API endpoint. Example: https://creditlens.example.com
2. Authentication Method - Select Basic Authentication or JWT-Based Authentication.
3. User Audit Report ID - Enter the report ID for the User Audit Info report.
4. User Audit Report Filename - Enter the fileNameInStorage value sent with the User Audit Info report request.
5. User Access Report ID - Enter the report ID for the User Access report.
6. User Access Report Filename - Enter the fileNameInStorage value sent with the User Access report request.
7. User Name and Password - If you select Basic Authentication, enter the credentials used to retrieve a token.
8. JWT Token - If you select JWT-Based Authentication, enter the JWT token linked to a CreditLens user ID.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings (/docs/certificate-settings#ssl-trust-ca-settings).
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.