--- title: "Action1 MCP server for AI agents - actionlake" description: "Give Claude 135 Action1 actions through one MCP server: automations, packages, endpoints. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/action1 updated: 2026-10-23 --- Connectors · MSP & PSA # Action1 MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Action1 and the rest of your systems. It gives your agent 135 Action1 actions (70 reads, 44 writes and 21 that wait for a confirmation) and holds the Action1 credential itself, so the agent never does. It paces Action1's limits and records every call. [Connect Action1 free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "action1.organizations.list", intent: "check which Action1 account is connected" } # List organizations · read · 1 upstream call ``` - 135 actions in one signed file - 70 read look, never change - 44 write create and update - 21 wait for a yes destructive, confirmed first Set up ## Connect Action1 in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Action1. Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Action1 API Client ID (Configuration > API Credentials in the Action1 console) - `client_secret` Action1 API Client Secret, shown once when the API credential is created - `host` Where your Action1 lives: your host ``` account { op: "connections.requirements", service: "action1" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "action1.organizations.list" } # list organizations · read · 1 upstream call check { action: "action1.users.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Action1 at a glance **Sign-in** Session login. actionlake opens the session and renews it when it expires. **You provide** `client_id` `client_secret` **Setup fields** `host` **Limits we pace to** 300 calls a minute, per connection **API covered** Action1 API 3.0 (OpenAPI 3.1.0), at your Action1 instance's API base URL, which you enter when connecting (path /api/3.0) **Built from** Action1's documentation, read 23 October 2026[app.action1.com](https://app.action1.com/apidocs/) [action1.com](https://www.action1.com/api-documentation/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 70 of 70 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line Action1 up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Action1. 135 actions in 27 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **70** read look, never change - **44** write create and update - **21** destructive wait for a confirmation 1. ### Automations 13 7 read · 3 write · 3 destructive Run an automation now · List automation instances · Create a scheduled automation · List scheduled automations 2. ### Packages 13 5 read · 5 write · 3 destructive Clone a software repository package · Create a software repository package · List software repository packages · List package match conflicts 3. ### Endpoints 11 6 read · 4 write · 1 destructive List managed endpoints · Get a managed endpoint · Update a managed endpoint · Delete a managed endpoint 4. ### Roles 9 3 read · 4 write · 2 destructive List roles · Create a role · Get a role · Update a role 5. ### Endpoint groups 7 3 read · 3 write · 1 destructive Create an endpoint group · List endpoint groups · List endpoints in a group · Get an endpoint group 6. ### Vulnerabilities 7 4 read · 2 write · 1 destructive List vulnerabilities · List endpoints affected by a CVE · Create a CVE remediation · List a CVE's remediations 7. ### Me 6 2 read · 3 write · 1 destructive Create a report subscription · List my report subscriptions · Get the current API user · Update the current user's profile 8. ### Subscription 6 4 read · 2 write · 0 destructive Request a subscription quote · Request an enterprise trial · Get the enterprise subscription · List license usage per organization **19 more areas · 63 actions** - Users **6** - Data sources **5** - Installed software **5** - Reports **5** - Scripts **5** - Settings **5** - Deployers **4** - Enterprise **4** - Organizations **4** - Report data **4** - Updates **4** - Action templates **2** - Agent deployment **2** - Audit events **2** - Setting templates **2** - Cve descriptions **1** - Logs **1** - Permissions **1** - Search **1** Top actions ## The Action1 API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 15 of Action1's 15 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `action1.users.list` List users | Listing users. | read | `identity.user.list` 474 connectors | | `action1.endpoints.list` List managed endpoints | Listing all endpoints. | read | `device.endpoint.list` 65 connectors | | `action1.organizations.list` List organizations | Listing organizations. | read | `crm.company.list` 162 connectors | | `action1.users.create` Create a user | Create new user. | write | `identity.user.create` 262 connectors | | `action1.users.delete` Delete a user | Delete user. | destructive | `identity.user.delete` 253 connectors | | `action1.endpoints.get` Get a managed endpoint | Getting a specific endpoint. | read | `device.endpoint.get` 57 connectors | | `action1.roles.list` List roles | Listing roles. | read | `identity.role.list` 184 connectors | | `action1.roles.create` Create a role | Creating a role. | write | `identity.role.create` 105 connectors | | `action1.updates.get` List missing update versions for a package | Listing updates for a package. | read | this connector | | `action1.updates.list` List missing updates | Listing missing updates. | read | this connector | | `action1.organizations.create` Create an organization | Create an organization. | write | this connector | | `action1.vulnerabilities.list` List vulnerabilities | List of all vulnerable software within the organization. | read | this connector | Try it ## Prompts to paste into Claude. Each one names the Action1 actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Action1 devices have not checked in for a week? calls `action1.endpoints.list` 2. Write write Create a user in Action1. Show me exactly what you will send before you save it. calls `action1.users.create` 3. Across systems read Which Action1 companies have invoices in NetSuite, and how many each? calls `action1.organizations.list` `netsuite.views.invoices` Across your systems ## Action1, joined to the rest of your business. One `ask` fetches from Action1 and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which Action1 companies have invoices in NetSuite, and how many each? `action1.organizations.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) - Which Action1 companies have tickets in HubSpot CRM, and how many each? `action1.organizations.list` + `hubspot_crm.tickets.list`, on `crm.company` · [HubSpot CRM](https://actionlake.com/connectors/hubspot-crm) Also mapped by other connectors `identity.user` **517** `crm.company` **227** `device.endpoint` **69** ask ``` ask { intent: "which Action1 companies have invoices in NetSuite, and how many each", steps: [ { action: "action1.organizations.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. Governance for Action1 ## Destructive actions wait for a yes. 21 Action1 actions are destructive. These are all of them: - Delete a user `action1.users.delete` - Delete a managed endpoint `action1.endpoints.delete` - Delete a role `action1.roles.delete` - Delete an organization `action1.organizations.delete` - Delete a scheduled automation `action1.automations.schedules.delete` - Delete a report subscription `action1.me.report_subscriptions.delete` - Delete a CVE remediation `action1.vulnerabilities.remediations.delete` - Stop a running automation instance `action1.automations.instances.stop` - Remove an action from a scheduled automation `action1.automations.schedules.actions.delete` - Delete a library script `action1.scripts.delete` - Delete a software repository package `action1.packages.delete` - Delete a setting `action1.settings.delete` - Delete an agent deployer `action1.deployers.delete` - Delete a data source `action1.data_sources.delete` - Delete an endpoint group `action1.endpoint_groups.delete` - Request enterprise account closure `action1.enterprise.request_closure` - Revoke an enterprise closure request `action1.enterprise.revoke_closure` - Remove a role from a user `action1.roles.users.delete` - Delete a custom report `action1.reports.custom.delete` - Delete a package version `action1.packages.versions.delete` - Delete a package version's additional action `action1.packages.versions.additional_actions.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do action1.users.delete confirm_policy: **human** Delete a user? **intent:** the user asked me to delete a user run suspended · waiting for a named person · key _action1-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "action1-agent", allowed_actions: ["action1.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "action1.users.delete", approver: "lead@example.com" }, { match: "action1.endpoints.delete", approver: "lead@example.com" }, { match: "action1.roles.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Action1 only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Action1 costs on actionlake. Every Action1 action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Action1 refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 135 Action1 actions - 135 actions page each page of a long list is one call - 70 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Action1 action. 135 actions by area: the id your agent calls, what it does, and its effect. **Automations 13** - `action1.automations.instances.create` Run an automation now write - `action1.automations.instances.endpoint_results.details` Get endpoint result details for an automation instance read - `action1.automations.instances.endpoint_results.list` List an automation instance's endpoint results read - `action1.automations.instances.get` Get an automation instance read - `action1.automations.instances.list` List automation instances read - `action1.automations.instances.stop` Stop a running automation instance destructive - `action1.automations.schedules.actions.delete` Remove an action from a scheduled automation destructive - `action1.automations.schedules.create` Create a scheduled automation write - `action1.automations.schedules.delete` Delete a scheduled automation destructive - `action1.automations.schedules.deployment_statuses.list` List a scheduled automation's deployment statuses read - `action1.automations.schedules.get` Get a scheduled automation read - `action1.automations.schedules.list` List scheduled automations read - `action1.automations.schedules.update` Update a scheduled automation write **Packages 13** - `action1.packages.clone` Clone a software repository package write - `action1.packages.create` Create a software repository package write - `action1.packages.delete` Delete a software repository package destructive - `action1.packages.get` Get a software repository package read - `action1.packages.list` List software repository packages read - `action1.packages.match_conflicts.get` Get a package's match conflicts read - `action1.packages.match_conflicts.list` List package match conflicts read - `action1.packages.update` Update a software repository package write - `action1.packages.versions.additional_actions.delete` Delete a package version's additional action destructive - `action1.packages.versions.create` Create a package version write - `action1.packages.versions.delete` Delete a package version destructive - `action1.packages.versions.get` Get a package version read - `action1.packages.versions.update` Update a package version write **Endpoints 11** - `action1.endpoints.agent_installation.get` Get agent installation link read - `action1.endpoints.delete` Delete a managed endpoint destructive - `action1.endpoints.get` Get a managed endpoint read - `action1.endpoints.list` List managed endpoints read - `action1.endpoints.missing_updates.list` List an endpoint's missing updates read - `action1.endpoints.move` Move an endpoint to another organization write - `action1.endpoints.remote_sessions.create` Start a remote session write - `action1.endpoints.remote_sessions.get` Get a remote session read - `action1.endpoints.remote_sessions.update` Update a remote session write - `action1.endpoints.status.get` Get endpoint status summary read - `action1.endpoints.update` Update a managed endpoint write **Roles 9** - `action1.roles.clone` Clone a role write - `action1.roles.create` Create a role write - `action1.roles.delete` Delete a role destructive - `action1.roles.get` Get a role read - `action1.roles.list` List roles read - `action1.roles.update` Update a role write - `action1.roles.users.create` Assign a role to a user write - `action1.roles.users.delete` Remove a role from a user destructive - `action1.roles.users.list` List users assigned a role read **Endpoint groups 7** - `action1.endpoint_groups.contents.list` List endpoints in a group read - `action1.endpoint_groups.contents.update` Add or remove endpoints in a group write - `action1.endpoint_groups.create` Create an endpoint group write - `action1.endpoint_groups.delete` Delete an endpoint group destructive - `action1.endpoint_groups.get` Get an endpoint group read - `action1.endpoint_groups.list` List endpoint groups read - `action1.endpoint_groups.update` Update an endpoint group write **Vulnerabilities 7** - `action1.vulnerabilities.endpoints.list` List endpoints affected by a CVE read - `action1.vulnerabilities.get` Get a vulnerability read - `action1.vulnerabilities.list` List vulnerabilities read - `action1.vulnerabilities.remediations.create` Create a CVE remediation write - `action1.vulnerabilities.remediations.delete` Delete a CVE remediation destructive - `action1.vulnerabilities.remediations.list` List a CVE's remediations read - `action1.vulnerabilities.remediations.update` Update a CVE remediation write **Me 6** - `action1.me.get` Get the current API user read - `action1.me.report_subscriptions.create` Create a report subscription write - `action1.me.report_subscriptions.delete` Delete a report subscription destructive - `action1.me.report_subscriptions.list` List my report subscriptions read - `action1.me.report_subscriptions.update` Update a report subscription write - `action1.me.update` Update the current user's profile write **Subscription 6** - `action1.subscription.get` Get the enterprise subscription read - `action1.subscription.quote.create` Request a subscription quote write - `action1.subscription.trial.create` Request an enterprise trial write - `action1.subscription.usage.get` Get enterprise license usage read - `action1.subscription.usage.organizations.get` Get an organization's license usage read - `action1.subscription.usage.organizations.list` List license usage per organization read **Users 6** - `action1.users.create` Create a user write - `action1.users.delete` Delete a user destructive - `action1.users.get` Get a user read - `action1.users.list` List users read - `action1.users.roles.list` List a user's roles read - `action1.users.update` Update a user write **Data sources 5** - `action1.data_sources.create` Create a data source write - `action1.data_sources.delete` Delete a data source destructive - `action1.data_sources.get` Get a data source read - `action1.data_sources.list` List data sources read - `action1.data_sources.update` Update a data source write **Installed software 5** - `action1.installed_software.endpoint.list` List installed software on an endpoint read - `action1.installed_software.endpoint.requery` Re-query installed software on an endpoint write - `action1.installed_software.errors.list` List installed software collection errors read - `action1.installed_software.list` List installed software read - `action1.installed_software.requery` Re-query installed software write **Reports 5** - `action1.reports.custom.create` Create a custom report write - `action1.reports.custom.delete` Delete a custom report destructive - `action1.reports.custom.update` Update a custom report write - `action1.reports.get` Get a report or report category read - `action1.reports.list` List reports and report categories read **Scripts 5** - `action1.scripts.create` Create a library script write - `action1.scripts.delete` Delete a library script destructive - `action1.scripts.get` Get a library script read - `action1.scripts.list` List library scripts read - `action1.scripts.update` Update a library script write **Settings 5** - `action1.settings.create` Create a setting write - `action1.settings.delete` Delete a setting destructive - `action1.settings.get` Get a setting read - `action1.settings.list` List settings read - `action1.settings.update` Update a setting write **Deployers 4** - `action1.deployers.delete` Delete an agent deployer destructive - `action1.deployers.get` Get an agent deployer read - `action1.deployers.installation.get` Get deployer installation link read - `action1.deployers.list` List agent deployers read **Enterprise 4** - `action1.enterprise.get` Get the enterprise read - `action1.enterprise.request_closure` Request enterprise account closure destructive - `action1.enterprise.revoke_closure` Revoke an enterprise closure request destructive - `action1.enterprise.update` Update the enterprise write **Organizations 4** - `action1.organizations.create` Create an organization write - `action1.organizations.delete` Delete an organization destructive - `action1.organizations.list` List organizations read - `action1.organizations.update` Update an organization write **Report data 4** - `action1.report_data.drilldown.list` Drill down into a report row read - `action1.report_data.errors.list` List report data collection errors read - `action1.report_data.list` List report data rows read - `action1.report_data.requery` Re-query report data write **Updates 4** - `action1.updates.approvals.update` Approve or decline updates write - `action1.updates.endpoints.list` List endpoints missing an update version read - `action1.updates.get` List missing update versions for a package read - `action1.updates.list` List missing updates read **Action templates 2** - `action1.action_templates.get` Get an automation action template read - `action1.action_templates.list` List automation action templates read **Agent deployment 2** - `action1.agent_deployment.get` Get agent deployment settings read - `action1.agent_deployment.update` Update agent deployment settings write **Audit events 2** - `action1.audit_events.get` Get an audit trail event read - `action1.audit_events.list` List audit trail events read **Setting templates 2** - `action1.setting_templates.get` Get a setting template read - `action1.setting_templates.list` List setting templates read **Cve descriptions 1** - `action1.cve_descriptions.get` Get a CVE description read **Logs 1** - `action1.logs.list` List agent and system logs read **Permissions 1** - `action1.permissions.list` List permission templates read **Search 1** - `action1.search.query` Search endpoints, apps, updates and other objects read Questions ## The Action1 MCP server, answered. **Is there an Action1 MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 135 Action1 actions across automations, packages, endpoints and roles, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Action1. **What do I need to connect Action1?** Action1 API Client ID (Configuration > API Credentials in the Action1 console) and Action1 API Client Secret, shown once when the API credential is created. Plus your host. The free call account { op: "connections.requirements", service: "action1" } lists exactly what to paste. **Can an AI agent delete or change things in Action1?** Only if its key allows it, and only with an explicit confirmation. 21 Action1 actions are destructive, including delete a user, delete a managed endpoint and delete a role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Action1 API limit?** actionlake paces every call to the limits in the Action1 service file: 300 calls a minute per connection. Repeated reads are answered from cache (70 Action1 actions can be), which never reaches Action1. **What does an Action1 action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (135 Action1 actions page). Cache hits, searches, dry runs and calls Action1 refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Action1 API does it cover?** The Action1 API 3.0 (OpenAPI 3.1.0) at your Action1 instance's API base URL, which you enter when connecting (path /api/3.0). It is built from Action1's documentation as read on 23 October 2026. 135 actions in 27 areas, each one in the signed service file (version 1.0.0). **Can I combine Action1 with my other systems?** Yes. ask joins Action1 to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Action1 maps crm.company, which 227 other connectors also map. **Does actionlake keep my Action1 data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Action1 credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Action1 Shares the most action names with - [Tactical RMM 15](https://actionlake.com/connectors/tactical-rmm) - [Jamf Pro 14](https://actionlake.com/connectors/jamf-pro) - [TP-Link Omada Open API 12](https://actionlake.com/connectors/tp-link-omada-open-api) - [Wazuh 10](https://actionlake.com/connectors/wazuh) - [ThreatDown OneView 8](https://actionlake.com/connectors/threatdown-oneview) - [ThreatDown Nebula 7](https://actionlake.com/connectors/threatdown-nebula) Joins with, on shared entities - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [Salesforce Sales Cloud 2](https://actionlake.com/connectors/salesforce-sales-cloud) - [Xero 2](https://actionlake.com/connectors/xero) - [ServiceNow 2](https://actionlake.com/connectors/servicenow) - [Genesys Cloud CX 2](https://actionlake.com/connectors/genesys-cloud-cx) - [Procore 2](https://actionlake.com/connectors/procore) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Action1; the name is the vendor's own. Counts are from the Action1 service file, version 1.0.0. ## Give your agent Action1 today. [Connect Action1 free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/action1 More: https://actionlake.com/llms.txt