Skip to content

Connectors · Identity & security

Aikido Security MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Aikido Security and the rest of your systems. It gives your agent 211 Aikido Security actions (102 reads, 87 writes and 22 that wait for a confirmation) and holds the Aikido Security credential itself, so the agent never does. It paces Aikido Security's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "aikido_security.users.list_users",  intent: "check which Aikido Security account is connected"}# List users · read · 1 upstream call
  • 211actionsin one signed file
  • 102readlook, never change
  • 87writecreate and update
  • 22wait for a yesdestructive, confirmed first

Set up

Connect Aikido Security in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Aikido Security.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idAikido REST API client ID
    • client_secretAikido REST API client secret (shown once when the client credentials are created)
    • tenant_hostWhere your Aikido Security lives: your tenant host
    account { op: "connections.requirements", service: "aikido_security" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "aikido_security.users.list_users" }# list users · read · 1 upstream callcheck { action: "aikido_security.teams.create_team", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Aikido Security at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Setup fields
tenant_host
Limits we pace to
20 calls a minute, per connection
API covered
Aikido public REST API v1 (OpenAPI 3.1.0)app.aikido.dev/api/public/v1
Built from
Aikido Security's documentation, read 23 October 2026apidocs.aikido.devapidocs.aikido.dev
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
102 of 102 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line Aikido Security up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Aikido Security.

211 actions in 28 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 102readlook, never change
  • 87writecreate and update
  • 22destructivewait for a confirmation
  1. Containers

    25

    6 read · 15 write · 4 destructive

    Export SBOM · Export Raw SBOM · List container runners · List containers

  2. Issues

    22

    10 read · 12 write · 0 destructive

    List open issue groups · Get issue detail · List notes for issue group · Export all issues

  3. Code repositories

    20

    4 read · 12 write · 4 destructive

    List code repositories · Get code repository detail · Delete code repo · Export SBOM

  4. Zen

    17

    7 read · 8 write · 2 destructive

    List apps · List users · Get app · Get bot lists

  5. Autofix

    13

    8 read · 5 write · 0 destructive

    List Aikido images · List autofix history · List issues addressed by a task · List hardened image requests

  6. Domains apis

    10

    2 read · 6 write · 2 destructive

    List domains · List Subdomains · Add Subdomain · Create domain

  7. Compliance

    9

    9 read · 0 write · 0 destructive

    CIS AWS compliance · CIS compliance · DORA compliance · FedRAMP DAST report (OSCAL)

  8. Teams

    9

    1 read · 5 write · 3 destructive

    List teams · Create team · Update team · Delete team

20 more areas · 86 actions
  • Clouds 8
  • Endpoint protection 8
  • Pull merge requests 8
  • Task tracking 8
  • Users 7
  • Research 6
  • Custom sast rules 5
  • Pentesting AI code analysis 5
  • Reports 5
  • Workspace 5
  • Broker 3
  • Code quality 3
  • Licenses sbom 3
  • Webhooks 3
  • Code coverage 2
  • Request inbox 2
  • Virtual machines 2
  • Bug bounty 1
  • Local scanning 1
  • Scanning access tokens 1

Top actions

The Aikido Security API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 15 of Aikido Security's 17 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
aikido_security.users.list_usersList usersReturns a list of all the users.readidentity.user.list474 connectors
aikido_security.teams.list_teamsList teamsReturns a list of all the teams in your account.readidentity.group.list262 connectors
aikido_security.users.get_userGet userReturns the specified user details.readidentity.user.get399 connectors
aikido_security.teams.create_teamCreate teamCreate a new team.writeidentity.group.create205 connectors
aikido_security.teams.update_teamUpdate teamUpdate an existing team.writeidentity.group.update189 connectors
aikido_security.code_repositories.list_code_reposList code repositoriesReturns a list of all the active code repositories in your account.readdevops.repository.list28 connectors
aikido_security.reports.list_activity_logList activity logReturns the activity log items.readsecurity.audit_log.list69 connectors
aikido_security.code_repositories.detail_code_repoGet code repository detailReturns the details of a code repository.readdevops.repository.get26 connectors
aikido_security.issues.list_open_issue_groupsList open issue groupsReturns a list of all the open issue groups in your account, as seen in the feed.readsecurity.vulnerability.list14 connectors
aikido_security.teams.add_user_to_teamAdd user to teamAdd user to team.writeidentity.group_member.add72 connectors
aikido_security.teams.remove_user_from_teamRemove user from teamRemove user from team.destructiveidentity.group_member.remove69 connectors
aikido_security.issues.get_issue_detailGet issue detailReturns the details of a single issue.readsecurity.vulnerability.get11 connectors

Try it

Prompts to paste into Claude.

Each one names the Aikido Security actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List our Aikido Security repositories with their visibility and default branch.

    callsaikido_security.code_repositories.list_code_repos

  2. Writewrite

    Create team in Aikido Security. Show me exactly what you will send before you save it.

    callsaikido_security.teams.create_team

Governance for Aikido Security

Destructive actions wait for a yes.

22 Aikido Security actions are destructive. These are all of them:

  • Delete teamaikido_security.teams.delete_team
  • Remove user from teamaikido_security.teams.remove_user_from_team
  • Delete code repoaikido_security.code_repositories.delete_code_repo
  • Delete appaikido_security.zen.delete_app
  • Disable useraikido_security.users.disable_user
  • Remove cloudaikido_security.clouds.remove_cloud
  • Rotate app tokenaikido_security.zen.rotate_app_token
  • Remove webhookaikido_security.webhooks.remove_webhook
  • Remove domainaikido_security.domains_apis.remove_domain
  • Delete containeraikido_security.containers.delete_container
  • Remove Subdomainaikido_security.domains_apis.remove_subdomain
  • Deactivate containeraikido_security.containers.deactivate_container
  • Unlink resource from teamaikido_security.teams.unlink_resource_from_team
  • Delete a broker resource URLaikido_security.broker.delete_broker_resource_url
  • Remove container labelaikido_security.containers.remove_container_label
  • Remove custom ruleaikido_security.custom_sast_rules.remove_custom_rule
  • Deactivate code repoaikido_security.code_repositories.deactivate_code_repo
  • Remove code repo labelaikido_security.code_repositories.remove_code_repo_label
  • Unlink code repository from containeraikido_security.containers.unlink_code_repo_to_container
  • Remove an exclude path from a code repoaikido_security.code_repositories.remove_code_repo_exclude_path
  • Remove an endpoint deviceaikido_security.endpoint_protection.remove_endpoint_protection_device
  • Remove an endpoint exceptionaikido_security.endpoint_protection.remove_endpoint_protection_exception

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doaikido_security.teams.delete_teamconfirm_policy: human

Delete team?

intent: the user asked me to delete team

run suspended · waiting for a named person · key aikido-security-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "aikido-security-agent",  allowed_actions: ["aikido_security.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "aikido_security.teams.delete_team", approver: "[email protected]" },    { match: "aikido_security.teams.remove_user_from_team", approver: "[email protected]" },    { match: "aikido_security.code_repositories.delete_code_repo", approver: "[email protected]" }  ]}
Illustrative. Scoped to Aikido Security only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Aikido Security costs on actionlake.

Every Aikido Security action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Aikido Security refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 211 Aikido Security actions
  • 211actions pageeach page of a long list is one call
  • 102reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Aikido Security action.

211 actions by area: the id your agent calls, what it does, and its effect.

Containers25
  • aikido_security.containers.activate_containerActivate containerwrite
  • aikido_security.containers.add_azure_container_registryAdd Azure container registrywrite
  • aikido_security.containers.add_container_labelAdd container labelwrite
  • aikido_security.containers.add_gcp_artifact_registryAdd GCP Artifact Registrywrite
  • aikido_security.containers.add_gitlab_self_managed_container_registryAdd GitLab Self-Managed container registrywrite
  • aikido_security.containers.add_public_containerAdd public containerwrite
  • aikido_security.containers.clone_containerClone containerwrite
  • aikido_security.containers.deactivate_containerDeactivate containerdestructive
  • aikido_security.containers.delete_containerDelete containerdestructive
  • aikido_security.containers.export_container_repo_licensesExport SBOMread
  • aikido_security.containers.export_raw_container_sbomExport Raw SBOMread
  • aikido_security.containers.generate_container_sbomGenerate bulk SBOMwrite
  • aikido_security.containers.get_container_registryGet container registryread
  • aikido_security.containers.get_container_repoGet containerread
  • aikido_security.containers.link_code_repo_to_containerLink code repository to containerwrite
  • aikido_security.containers.list_container_repo_runnersList container runnersread
  • aikido_security.containers.list_container_reposList containersread
  • aikido_security.containers.remove_container_labelRemove container labeldestructive
  • aikido_security.containers.scan_containerScan containerwrite
  • aikido_security.containers.unlink_code_repo_to_containerUnlink code repository from containerdestructive
  • aikido_security.containers.update_container_internet_connectionUpdate connectivitywrite
  • aikido_security.containers.update_container_labelUpdate container labelwrite
  • aikido_security.containers.update_container_sensitivityUpdate sensitivitywrite
  • aikido_security.containers.update_tag_filterUpdate container tag filterwrite
  • aikido_security.containers.upload_container_sbomUpload container SBOMwrite
Issues22
  • aikido_security.issues.add_note_to_issue_groupAdd note to issue groupwrite
  • aikido_security.issues.adjust_group_severityAdjust severity of an issue groupwrite
  • aikido_security.issues.adjust_severityAdjust severity of an issuewrite
  • aikido_security.issues.export_issuesExport all issuesread
  • aikido_security.issues.get_issue_countsGet issue countsread
  • aikido_security.issues.get_issue_cve_exploitabilityGet issue CVE exploitabilityread
  • aikido_security.issues.get_issue_cve_exploitability_bulkGet issue CVE exploitability bulkread
  • aikido_security.issues.get_issue_detailGet issue detailread
  • aikido_security.issues.get_issue_details_bulkGet issue details bulkread
  • aikido_security.issues.get_issue_group_detailsGet issue group detailread
  • aikido_security.issues.get_issue_reachabilityGet issue reachabilityread
  • aikido_security.issues.ignore_issueIgnore an issuewrite
  • aikido_security.issues.ignore_issue_groupIgnore an issue groupwrite
  • aikido_security.issues.list_notes_for_issue_groupList notes for issue groupread
  • aikido_security.issues.list_open_issue_groupsList open issue groupsread
  • aikido_security.issues.snooze_issueSnooze an issuewrite
  • aikido_security.issues.snooze_issue_groupSnooze an issue groupwrite
  • aikido_security.issues.solve_issueSolve an issuewrite
  • aikido_security.issues.unignore_issueUnignore an issuewrite
  • aikido_security.issues.unignore_issue_groupUnignore an issue groupwrite
  • aikido_security.issues.unsnooze_issueUnsnooze an issuewrite
  • aikido_security.issues.unsnooze_issue_groupUnsnooze an issue groupwrite
Code repositories20
  • aikido_security.code_repositories.activate_code_repoActivate code repowrite
  • aikido_security.code_repositories.add_code_repo_exclude_pathAdd an exclude path to a code repowrite
  • aikido_security.code_repositories.add_code_repo_labelAdd code repo labelwrite
  • aikido_security.code_repositories.add_private_registryManage private registrywrite
  • aikido_security.code_repositories.clone_code_repoClone code repowrite
  • aikido_security.code_repositories.deactivate_code_repoDeactivate code repodestructive
  • aikido_security.code_repositories.delete_code_repoDelete code repodestructive
  • aikido_security.code_repositories.detail_code_repoGet code repository detailread
  • aikido_security.code_repositories.export_code_repo_licensesExport SBOMread
  • aikido_security.code_repositories.export_code_repo_licenses_for_teamExport SBOM For Teamread
  • aikido_security.code_repositories.import_new_code_repositoriesTrigger repositories syncwrite
  • aikido_security.code_repositories.list_code_reposList code repositoriesread
  • aikido_security.code_repositories.remove_code_repo_exclude_pathRemove an exclude path from a code repodestructive
  • aikido_security.code_repositories.remove_code_repo_labelRemove code repo labeldestructive
  • aikido_security.code_repositories.scan_code_repoScan code repowrite
  • aikido_security.code_repositories.set_environment_variablesSet environment variableswrite
  • aikido_security.code_repositories.update_code_repo_connectivityUpdate connectivitywrite
  • aikido_security.code_repositories.update_code_repo_dev_dep_scanManage dev dep scanningwrite
  • aikido_security.code_repositories.update_code_repo_labelUpdate code repo labelwrite
  • aikido_security.code_repositories.update_code_repo_sensitivityUpdate sensitivitywrite
Zen17
  • aikido_security.zen.create_appCreate appwrite
  • aikido_security.zen.delete_appDelete appdestructive
  • aikido_security.zen.get_appGet appread
  • aikido_security.zen.get_bot_listsGet bot listsread
  • aikido_security.zen.get_countriesGet countriesread
  • aikido_security.zen.get_eventGet eventread
  • aikido_security.zen.get_ip_listsGet threat listsread
  • aikido_security.zen.list_appsList appsread
  • aikido_security.zen.list_zen_usersList usersread
  • aikido_security.zen.rotate_app_tokenRotate app tokendestructive
  • aikido_security.zen.update_appUpdate appwrite
  • aikido_security.zen.update_blockingUpdate blocking modewrite
  • aikido_security.zen.update_bot_listsUpdate bot listswrite
  • aikido_security.zen.update_countriesUpdate countrieswrite
  • aikido_security.zen.update_ip_blocklistUpdate IP blocklistwrite
  • aikido_security.zen.update_ip_listsUpdate threat listswrite
  • aikido_security.zen.update_userUpdate userwrite
Autofix13
  • aikido_security.autofix.get_container_autofix_settingsGet container AutoFix PR creation settingsread
  • aikido_security.autofix.get_dependency_autofix_settingsGet dependency AutoFix PR creation settingsread
  • aikido_security.autofix.get_pentest_autofix_settingsGet Pentest AutoFix PR creation settingsread
  • aikido_security.autofix.get_sast_autofix_settingsGet SAST & IaC AutoFix PR creation settingsread
  • aikido_security.autofix.list_aikido_imagesList Aikido imagesread
  • aikido_security.autofix.list_autofix_historyList autofix historyread
  • aikido_security.autofix.list_autofix_task_issuesList issues addressed by a taskread
  • aikido_security.autofix.list_image_requestsList hardened image requestsread
  • aikido_security.autofix.request_container_imageRequest a hardened imagewrite
  • aikido_security.autofix.update_container_autofix_settingsUpdate container AutoFix PR creation settingswrite
  • aikido_security.autofix.update_dependency_autofix_settingsUpdate dependency AutoFix PR creation settingswrite
  • aikido_security.autofix.update_pentest_autofix_settingsUpdate Pentest AutoFix PR creation settingswrite
  • aikido_security.autofix.update_sast_autofix_settingsUpdate SAST & IaC AutoFix PR creation settingswrite
Domains apis10
  • aikido_security.domains_apis.add_subdomainAdd Subdomainwrite
  • aikido_security.domains_apis.create_domainCreate domainwrite
  • aikido_security.domains_apis.list_domainsList domainsread
  • aikido_security.domains_apis.list_subdomainsList Subdomainsread
  • aikido_security.domains_apis.remove_domainRemove domaindestructive
  • aikido_security.domains_apis.remove_subdomainRemove Subdomaindestructive
  • aikido_security.domains_apis.start_domain_scanStart scan for a domainwrite
  • aikido_security.domains_apis.update_domain_authentication_headersUpdate Auth Headerswrite
  • aikido_security.domains_apis.update_domain_custom_scan_headersUpdate Custom Scan Headerswrite
  • aikido_security.domains_apis.update_domain_open_api_specUpdate OpenAPI specwrite
Compliance9
  • aikido_security.compliance.get_cis_aws_compliance_overviewCIS AWS complianceread
  • aikido_security.compliance.get_cis_compliance_overviewCIS complianceread
  • aikido_security.compliance.get_dora_compliance_overviewDORA complianceread
  • aikido_security.compliance.get_fedramp_dast_reportFedRAMP DAST report (OSCAL)read
  • aikido_security.compliance.get_gdpr_compliance_overviewGDPR complianceread
  • aikido_security.compliance.get_iso_compliance_overviewISO 27001 complianceread
  • aikido_security.compliance.get_nis2_compliance_overviewNIS2 complianceread
  • aikido_security.compliance.get_pci_compliance_overviewPCI complianceread
  • aikido_security.compliance.get_soc2_compliance_overviewSOC2 complianceread
Teams9
  • aikido_security.teams.add_user_to_teamAdd user to teamwrite
  • aikido_security.teams.create_teamCreate teamwrite
  • aikido_security.teams.delete_teamDelete teamdestructive
  • aikido_security.teams.link_resource_to_teamLink resource to teamwrite
  • aikido_security.teams.list_teamsList teamsread
  • aikido_security.teams.remove_user_from_teamRemove user from teamdestructive
  • aikido_security.teams.unlink_resource_from_teamUnlink resource from teamdestructive
  • aikido_security.teams.update_teamUpdate teamwrite
  • aikido_security.teams.update_team_repo_path_limitationUpdate repository path limitation for a teamwrite
Clouds8
  • aikido_security.clouds.connect_aws_cloudConnect AWS cloudwrite
  • aikido_security.clouds.connect_azure_cloudConnect Azure cloudwrite
  • aikido_security.clouds.connect_gcp_cloudConnect GCP cloudwrite
  • aikido_security.clouds.create_kubernetes_cloudCreate Kubernetes cloudwrite
  • aikido_security.clouds.get_cloud_assetsGet cloud assetsread
  • aikido_security.clouds.list_cloudsList connected cloudsread
  • aikido_security.clouds.remove_cloudRemove clouddestructive
  • aikido_security.clouds.update_azure_cloud_credentialsUpdate Azure cloudwrite
Endpoint protection8
  • aikido_security.endpoint_protection.add_endpoint_protection_exceptionAdd an endpoint exceptionwrite
  • aikido_security.endpoint_protection.list_endpoint_protection_activity_logsList endpoint activity logsread
  • aikido_security.endpoint_protection.list_endpoint_protection_devicesList endpoint devicesread
  • aikido_security.endpoint_protection.list_endpoint_protection_exceptionsList endpoint exceptionsread
  • aikido_security.endpoint_protection.list_endpoint_protection_installed_packagesList installed packagesread
  • aikido_security.endpoint_protection.list_endpoint_protection_permission_groupsList endpoint permission groupsread
  • aikido_security.endpoint_protection.remove_endpoint_protection_deviceRemove an endpoint devicedestructive
  • aikido_security.endpoint_protection.remove_endpoint_protection_exceptionRemove an endpoint exceptiondestructive
Pull merge requests8
  • aikido_security.pull_merge_requests.get_ci_scan_detailGet PR Check detailread
  • aikido_security.pull_merge_requests.get_default_pr_checks_configurationGet default PR Checks configurationread
  • aikido_security.pull_merge_requests.list_ci_scan_issue_actionsList PR Check Manual Actionsread
  • aikido_security.pull_merge_requests.list_ci_scansList PR Checksread
  • aikido_security.pull_merge_requests.list_pr_checks_configurationsList PR Checks configurationsread
  • aikido_security.pull_merge_requests.save_default_pr_checks_configurationConfigure default PR Checkswrite
  • aikido_security.pull_merge_requests.save_pr_checks_configurationConfigure PR Checkswrite
  • aikido_security.pull_merge_requests.save_pr_checks_configuration_for_all_reposConfigure PR Checks for all reposwrite
Task tracking8
  • aikido_security.task_tracking.get_issue_group_tasksGet issue group tasksread
  • aikido_security.task_tracking.get_project_mappingGet project mappingread
  • aikido_security.task_tracking.get_projectsList task tracking projectsread
  • aikido_security.task_tracking.get_tasksList tasks from projectread
  • aikido_security.task_tracking.link_task_to_issue_groupLink existing task to issuewrite
  • aikido_security.task_tracking.list_task_tracking_integrationsList task tracking integrationsread
  • aikido_security.task_tracking.map_repos_to_projectMap code repo to task tracking projectswrite
  • aikido_security.task_tracking.map_teams_to_projectMap teams to task tracking projectswrite
Users7
  • aikido_security.users.disable_userDisable userdestructive
  • aikido_security.users.get_userGet userread
  • aikido_security.users.list_ide_adoptionList IDE adoptionread
  • aikido_security.users.list_pending_invitesList pending invitesread
  • aikido_security.users.list_user_login_historyList user login historyread
  • aikido_security.users.list_usersList usersread
  • aikido_security.users.update_user_rightsUpdate user rightswrite
Research6
  • aikido_security.research.get_changelog_summaryGet changelog summaryread
  • aikido_security.research.get_cve_detailsGet CVE detailsread
  • aikido_security.research.get_malware_packagesGet malware packagesread
  • aikido_security.research.get_package_health_bulkGet package health scoresread
  • aikido_security.research.list_cwe_descriptionsList CWE descriptionsread
  • aikido_security.research.list_eol_runtimesList end-of-life runtimesread
Custom sast rules5
  • aikido_security.custom_sast_rules.create_custom_ruleCreate custom rulewrite
  • aikido_security.custom_sast_rules.edit_custom_ruleEdit custom rulewrite
  • aikido_security.custom_sast_rules.get_custom_ruleGet a custom ruleread
  • aikido_security.custom_sast_rules.list_custom_rulesList custom rulesread
  • aikido_security.custom_sast_rules.remove_custom_ruleRemove custom ruledestructive
Pentesting AI code analysis5
  • aikido_security.pentesting_ai_code_analysis.create_pentest_draft_assessmentCreate pentest draftwrite
  • aikido_security.pentesting_ai_code_analysis.get_attack_analysisGet attack analysisread
  • aikido_security.pentesting_ai_code_analysis.get_pentest_assessment_detailGet pentest assessmentread
  • aikido_security.pentesting_ai_code_analysis.list_code_auditsList AI Code Analysis assessmentsread
  • aikido_security.pentesting_ai_code_analysis.list_pentest_assessmentsList pentest assessmentsread
Reports5
  • aikido_security.reports.list_activity_logList activity logread
  • aikido_security.reports.list_cloud_rulesList cloud rulesread
  • aikido_security.reports.list_iac_rulesList IaC rulesread
  • aikido_security.reports.list_mobile_rulesList Mobile rulesread
  • aikido_security.reports.list_sast_rulesList SAST rulesread
Workspace5
  • aikido_security.workspace.get_open_api_specGet OpenAPI specread
  • aikido_security.workspace.get_sla_settingsGet SLA settingsread
  • aikido_security.workspace.get_wallet_balanceGet wallet balanceread
  • aikido_security.workspace.get_workspace_configuration_errorsGet workspace configuration errorsread
  • aikido_security.workspace.get_workspace_infoGet workspace inforead
Broker3
  • aikido_security.broker.add_broker_resource_urlAdd a broker resource URLwrite
  • aikido_security.broker.delete_broker_resource_urlDelete a broker resource URLdestructive
  • aikido_security.broker.list_broker_appsList broker appsread
Code quality3
  • aikido_security.code_quality.ignore_code_quality_repo_findingIgnore a code quality findingwrite
  • aikido_security.code_quality.list_code_quality_findings_for_pull_requestList code quality findings for a pull requestread
  • aikido_security.code_quality.list_code_quality_full_repo_findingsList code quality findings for a repositoryread
Licenses sbom3
  • aikido_security.licenses_sbom.list_licensesList & Search SBOMread
  • aikido_security.licenses_sbom.mark_license_as_internal_for_packageMark License As Internalwrite
  • aikido_security.licenses_sbom.overwrite_license_for_packageOverwrite Licensewrite
Webhooks3
  • aikido_security.webhooks.add_webhookAdd webhookwrite
  • aikido_security.webhooks.list_webhooksList webhooksread
  • aikido_security.webhooks.remove_webhookRemove webhookdestructive
Code coverage2
  • aikido_security.code_coverage.get_code_coverage_for_repositoryGet code coverage for a repositoryread
  • aikido_security.code_coverage.list_all_code_coverage_repositoriesList all code coverage repositoriesread
Request inbox2
  • aikido_security.request_inbox.list_user_requestsList user requestsread
  • aikido_security.request_inbox.review_user_requestReview a user requestwrite
Virtual machines2
  • aikido_security.virtual_machines.export_virtual_machine_sbomExport SBOMread
  • aikido_security.virtual_machines.list_virtual_machinesList virtual machinesread
Bug bounty1
  • aikido_security.bug_bounty.add_bug_bounty_reportValidate Bug Bounty Reportwrite
Local scanning1
  • aikido_security.local_scanning.get_latest_local_scan_infoGet latest local scanner versionread
Scanning access tokens1
  • aikido_security.scanning_access_tokens.set_code_scanning_access_tokenUpdate Code Scanning Access Tokenwrite

Questions

The Aikido Security MCP server, answered.

Is there an Aikido Security MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 211 Aikido Security actions across containers, issues, code repositories and zen, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Aikido Security.

What do I need to connect Aikido Security?

Aikido REST API client ID and Aikido REST API client secret (shown once when the client credentials are created). Plus your tenant host. The free call account { op: "connections.requirements", service: "aikido_security" } lists exactly what to paste.

Can an AI agent delete or change things in Aikido Security?

Only if its key allows it, and only with an explicit confirmation. 22 Aikido Security actions are destructive, including delete team, remove user from team and delete code repo. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Aikido Security API limit?

actionlake paces every call to the limits in the Aikido Security service file: 20 calls a minute per connection. Repeated reads are answered from cache (102 Aikido Security actions can be), which never reaches Aikido Security.

What does an Aikido Security action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (211 Aikido Security actions page). Cache hits, searches, dry runs and calls Aikido Security refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Aikido Security API does it cover?

The Aikido public REST API v1 (OpenAPI 3.1.0) at app.aikido.dev/api/public/v1 by default, or the base URL set when you connect. It is built from Aikido Security's documentation as read on 23 October 2026. 211 actions in 28 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Aikido Security data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Aikido Security credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Aikido Security today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.