Skip to main content
Ghostwriter integrates with BloodHound to pull data from the BloodHound graph and makes it available in your report templates. If the BloodHound API is enabled and configured, Ghostwriter pulls the BloodHound data when you generate a report.
Ghostwriter integrates with v8.4 and later of both BloodHound Community Edition and BloodHound Enterprise. There are some differences between the two. You can learn more here: Differences Between BHCE and BHE
To enable the BloodHound API, generate your access token, and configure the API in Ghostwriter, follow these steps:

​
Generating an Access Token

Generate your BloodHound access token by logging into your BloodHound instance and opening the Administration section from the sidebar menu. Click Manage Users and then click the hamburger menu next to the user you want to use for the API access. Select Generate/Revoke API Tokens.
Give your token a name and generate it. Take note of the Key and ID values in the modal window.

​
Configuring the BloodHound API in Ghostwriter

Take the ID and Token values and plug them into the BloodHound API Configuration in Ghostwriter. You will also need to add the URL of your BloodHound instance. The URL should be the base URL of your BloodHound instance, including the protocol and port (if needed). For example, http://bloodhound:8080.

​
Testing the Configuration

Once you have configured the BloodHound API in Ghostwriter, an admin can test the configuration by clicking the Test BloodHound button on the Review Configuration page. This will send a request to the /api/version endpoint of the BloodHound API and verify that the connection is successful.

​
Per-Project Instances

If you have multiple BloodHound instances — such as seperate servers for different clients — you can configure a BloodHound server for a project. Project members can manage their BloodHound instance under the BloodHound tab on the project dashboard.