Skip to main content
Book a demo

Connect Spacelift to Glean

Give Glean governed access to Spacelift’s 7 tools through Runlayer, with identity, policy, scanning, and audit on every call.

Book a demo Glean setup guide

Set up

Add Spacelift to Glean in four steps

Admins approve the server once. Everyone in Glean then gets it through the same governed connection.

  1. 1

    Add Spacelift to Runlayer

    Spacelift isn’t in the Runlayer catalog yet, so an admin adds it by its MCP server URL.

    Adding a connector manually
  2. 2

    Connect Glean to Runlayer

    Users add the Runlayer Plugin to Glean by following Runlayer’s setup guide. Glean reaches Spacelift’s 7 tools through the Runlayer Plugin’s search and execute tools instead of listing each one.

    Glean setup guide
  3. 3

    Sign in to Spacelift

    Sign in the way Spacelift requires. Runlayer holds the credentials so they stay out of the client’s configuration.

  4. 4

    Use Spacelift from Glean

    Spacelift’s approved tools appear in Glean. Every call is checked against policy and recorded.

Tools

7 Spacelift tools in Glean

Runlayer policy decides which of these Glean users can call.

  • Discover

    Browse the Spacelift API schema.

  • Intent

    Manage infrastructure resources through their lifecycle.

  • Mutate

    Execute a Spacelift mutation.

  • Policy input schema

    Return a policy type's input structure, expected rule outputs and description.

  • Policy simulate

    Evaluate a draft policy body and return the decision.

  • Provider

    Discover infrastructure providers and inspect their resource/data source schemas.

  • Query

    Execute a read-only Spacelift query.

Control

What Runlayer can see and stop in Glean

Some controls apply to every client at the gateway. Others depend on what Glean exposes to Runlayer.

  • Gateway policy (available)

    Every Spacelift call from Glean passes through Runlayer, where your policies can allow, alert, mask, or block it.

  • Audit trail (available)

    Each call is recorded with the user, Glean as the client, the tool, and the policy and scanner decisions.

  • OTLP telemetry (available)

    Glean can send supported OpenTelemetry events to Runlayer for observe-only session visibility.

  • Native enforcement adapter (not available)

    Runlayer has no device-side adapter for Glean yet, so control happens at the gateway.

In Glean

  • Runlayer sees Glean activity through OpenTelemetry traces for monitoring only; enforcement happens at the gateway.

Frequently asked questions

Connect more

Find another combination