> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Mavenlink (Kantata)

<Note>
  This integration is in Beta. Contact your Lumos team to have it enabled for your domain.
</Note>

## After this article

You'll be able to connect Mavenlink, now Kantata OX, to Lumos for visibility and Access Reviews.

## Capabilities

This integration is read-only today.

* **List accounts.** Lumos reads the users in your Kantata account.
* **List resources.** Lumos reads projects as resources.
* **List entitlements.** Lumos reads the entitlement types Kantata exposes: roles, user groups, access groups, projects, and project roles.
* **Find entitlement associations.** Lumos maps which users hold which of those grants.
* **Get last activity.** Lumos reads each user's last activity for inactivity reviews.

Write actions such as create, deactivate, and delete account exist in the connector code but are turned off, so provisioning is not available yet.

## Required plan and roles

* **Kantata access:** a paid Kantata OX account with administrator access. API Access is also required.
* **OAuth application:** register an OAuth 2.0 application in Kantata to get a client ID and client secret, then generate an access token for the connection.
* **Account ID:** the parent account ID in Kantata. Lumos runs all reads under this account.

## Read-only access vs provisioning

**Is read-only possible?** Yes, and it's the only mode available today. Every connection to Mavenlink (Kantata) is read-only, since this integration is for visibility and Access Reviews only.

## Instructions

**Phase 1: Connect in Lumos**

1. Find the Mavenlink (Kantata) card in your Lumos integrations.
2. Enter the OAuth credentials and your account ID shown on the connection card.
3. Click **Connect**.

## Troubleshooting

**Connection fails.** Confirm the access token is still valid and the account ID matches your Kantata parent account, then reconnect. Kantata access tokens can expire, so you may need to generate a new one.