openclaw-bms/SKILL.md

BMS Skill — Kaseya BMS Ticket Management

Python-based OpenClaw skill for Kaseya BMS ticket and note workflows.

Run

Preferred:

bms --help

Alternative:

python3 -m openclaw_bms --help

Configuration

export BMS_TENANT="your-tenant-name"
export BMS_USERNAME="user@example.com"
export BMS_PASSWORD="yourpassword"
export BMS_MFA_CODE="123456"
export BMS_API_BASE="https://api.bms.kaseya.com"
export BMS_TOKEN_FILE="$HOME/.bms_token.json"
export BMS_CACHE_FILE="$HOME/.cache/openclaw-bms/cache.json"

Key functionality

Accounts and Locations

Use CRM endpoints and respect account/location relationships:

bms accounts
bms locations --account 12345

Important:

• locations are account-scoped
• a location name under one account is not interchangeable with the same location name under another account
• accounts and per-account locations are cached for 24 hours

Tickets

bms tickets list --status Open --assignee "Jane Doe"
bms tickets get 12345
bms tickets create --title "test" --details "Test" --account-id 1 --location-id 2 --status-id 3 --priority-id 4 --type-id 5 --source-id 6 --queue-id 7 --open-date 2026-04-07T14:00:00+00:00
bms tickets create --template-id 9 --title "Override title" --account-id 1 --location-id 2 --queue-id 7
bms tickets patch 12345 /StatusId 6
bms tickets assign 12345 --details "Routing" --type-id 1 --status-id 6 --queue-id 7
bms tickets delete 12345

Notes

bms notes list 12345
bms notes add 12345 --message "Investigating" --note-date 2026-04-07T12:00:00+00:00
bms notes update 12345 999 --message "Corrected note" --note-date 2026-04-07T13:00:00+00:00
bms notes delete 12345 999

Lookups

bms lookup statuses
bms lookup priorities
bms lookup types
bms lookup sources

Templates

bms templates tickets list
bms templates tickets get 9
bms templates notes list
bms templates timelogs list

Templates are read-only.

Audit logging

Only write operations are audited. Read operations are intentionally not logged.

Audit path:

~/.bms-actions/YYYY-MM-DD.jsonl

Entry fields:

• timestamp
• command
• args_sanitized
• result or error
• status
• revert_info when available

Secrets are redacted before logging.

Endpoints used

Auth:

• POST /v2/security/authenticate
• POST /v2/security/refreshtoken

CRM lookup:

• GET /v2/crm/accounts/lookup
• GET /v2/crm/accounts/{accountId}/locations/lookup

Tickets:

• POST /v2/servicedesk/tickets/search
• GET /v2/servicedesk/tickets/{ticketId}
• POST /v2/servicedesk/tickets
• PATCH /v2/servicedesk/tickets/{ticketId}
• DELETE /v2/servicedesk/tickets/{ticketId}
• POST /v2/servicedesk/tickets/{ticketId}/assignticket

Notes:

• GET /v2/servicedesk/tickets/{ticketId}/notes
• GET /v2/servicedesk/tickets/{ticketId}/notes/{noteId}
• POST /v2/servicedesk/tickets/{ticketId}/notes
• PUT /v2/servicedesk/tickets/{ticketId}/notes/{noteId}
• DELETE /v2/servicedesk/tickets/{ticketId}/notes/{noteId}

Templates:

• GET /v2/servicedesk/templates/tickets/lookup
• GET /v2/servicedesk/templates/tickets/{templateId}
• GET /v2/servicedesk/templates/notes/lookup
• GET /v2/servicedesk/templates/timelogs/lookup