--- title: "Aikido Security MCP server for AI agents - actionlake" description: "Give Claude 211 Aikido Security actions through one MCP server: containers, issues. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/aikido-security updated: 2026-10-23 --- Connectors · Identity & security # Aikido Security MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Aikido Security and the rest of your systems. It gives your agent 211 Aikido Security actions (102 reads, 87 writes and 22 that wait for a confirmation) and holds the Aikido Security credential itself, so the agent never does. It paces Aikido Security's limits and records every call. [Connect Aikido Security free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "aikido_security.users.list_users", intent: "check which Aikido Security account is connected" } # List users · read · 1 upstream call ``` - 211 actions in one signed file - 102 read look, never change - 87 write create and update - 22 wait for a yes destructive, confirmed first Set up ## Connect Aikido Security in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Aikido Security. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Aikido REST API client ID - `client_secret` Aikido REST API client secret (shown once when the client credentials are created) - `tenant_host` Where your Aikido Security lives: your tenant host ``` account { op: "connections.requirements", service: "aikido_security" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "aikido_security.users.list_users" } # list users · read · 1 upstream call check { action: "aikido_security.teams.create_team", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Aikido Security at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_host` **Limits we pace to** 20 calls a minute, per connection **API covered** Aikido public REST API v1 (OpenAPI 3.1.0)`app.aikido.dev/api/public/v1` **Built from** Aikido Security's documentation, read 23 October 2026[apidocs.aikido.dev](https://apidocs.aikido.dev/reference) [apidocs.aikido.dev](https://apidocs.aikido.dev/llms.txt) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 102 of 102 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line Aikido Security up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Aikido Security. 211 actions in 28 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **102** read look, never change - **87** write create and update - **22** destructive wait for a confirmation 1. ### Containers 25 6 read · 15 write · 4 destructive Export SBOM · Export Raw SBOM · List container runners · List containers 2. ### Issues 22 10 read · 12 write · 0 destructive List open issue groups · Get issue detail · List notes for issue group · Export all issues 3. ### Code repositories 20 4 read · 12 write · 4 destructive List code repositories · Get code repository detail · Delete code repo · Export SBOM 4. ### Zen 17 7 read · 8 write · 2 destructive List apps · List users · Get app · Get bot lists 5. ### Autofix 13 8 read · 5 write · 0 destructive List Aikido images · List autofix history · List issues addressed by a task · List hardened image requests 6. ### Domains apis 10 2 read · 6 write · 2 destructive List domains · List Subdomains · Add Subdomain · Create domain 7. ### Compliance 9 9 read · 0 write · 0 destructive CIS AWS compliance · CIS compliance · DORA compliance · FedRAMP DAST report (OSCAL) 8. ### Teams 9 1 read · 5 write · 3 destructive List teams · Create team · Update team · Delete team **20 more areas · 86 actions** - Clouds **8** - Endpoint protection **8** - Pull merge requests **8** - Task tracking **8** - Users **7** - Research **6** - Custom sast rules **5** - Pentesting AI code analysis **5** - Reports **5** - Workspace **5** - Broker **3** - Code quality **3** - Licenses sbom **3** - Webhooks **3** - Code coverage **2** - Request inbox **2** - Virtual machines **2** - Bug bounty **1** - Local scanning **1** - Scanning access tokens **1** Top actions ## The Aikido Security API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 15 of Aikido Security's 17 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `aikido_security.users.list_users` List users | Returns a list of all the users. | read | `identity.user.list` 474 connectors | | `aikido_security.teams.list_teams` List teams | Returns a list of all the teams in your account. | read | `identity.group.list` 262 connectors | | `aikido_security.users.get_user` Get user | Returns the specified user details. | read | `identity.user.get` 399 connectors | | `aikido_security.teams.create_team` Create team | Create a new team. | write | `identity.group.create` 205 connectors | | `aikido_security.teams.update_team` Update team | Update an existing team. | write | `identity.group.update` 189 connectors | | `aikido_security.code_repositories.list_code_repos` List code repositories | Returns a list of all the active code repositories in your account. | read | `devops.repository.list` 28 connectors | | `aikido_security.reports.list_activity_log` List activity log | Returns the activity log items. | read | `security.audit_log.list` 69 connectors | | `aikido_security.code_repositories.detail_code_repo` Get code repository detail | Returns the details of a code repository. | read | `devops.repository.get` 26 connectors | | `aikido_security.issues.list_open_issue_groups` List open issue groups | Returns a list of all the open issue groups in your account, as seen in the feed. | read | `security.vulnerability.list` 14 connectors | | `aikido_security.teams.add_user_to_team` Add user to team | Add user to team. | write | `identity.group_member.add` 72 connectors | | `aikido_security.teams.remove_user_from_team` Remove user from team | Remove user from team. | destructive | `identity.group_member.remove` 69 connectors | | `aikido_security.issues.get_issue_detail` Get issue detail | Returns the details of a single issue. | read | `security.vulnerability.get` 11 connectors | Try it ## Prompts to paste into Claude. Each one names the Aikido Security actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List our Aikido Security repositories with their visibility and default branch. calls `aikido_security.code_repositories.list_code_repos` 2. Write write Create team in Aikido Security. Show me exactly what you will send before you save it. calls `aikido_security.teams.create_team` Governance for Aikido Security ## Destructive actions wait for a yes. 22 Aikido Security actions are destructive. These are all of them: - Delete team `aikido_security.teams.delete_team` - Remove user from team `aikido_security.teams.remove_user_from_team` - Delete code repo `aikido_security.code_repositories.delete_code_repo` - Delete app `aikido_security.zen.delete_app` - Disable user `aikido_security.users.disable_user` - Remove cloud `aikido_security.clouds.remove_cloud` - Rotate app token `aikido_security.zen.rotate_app_token` - Remove webhook `aikido_security.webhooks.remove_webhook` - Remove domain `aikido_security.domains_apis.remove_domain` - Delete container `aikido_security.containers.delete_container` - Remove Subdomain `aikido_security.domains_apis.remove_subdomain` - Deactivate container `aikido_security.containers.deactivate_container` - Unlink resource from team `aikido_security.teams.unlink_resource_from_team` - Delete a broker resource URL `aikido_security.broker.delete_broker_resource_url` - Remove container label `aikido_security.containers.remove_container_label` - Remove custom rule `aikido_security.custom_sast_rules.remove_custom_rule` - Deactivate code repo `aikido_security.code_repositories.deactivate_code_repo` - Remove code repo label `aikido_security.code_repositories.remove_code_repo_label` - Unlink code repository from container `aikido_security.containers.unlink_code_repo_to_container` - Remove an exclude path from a code repo `aikido_security.code_repositories.remove_code_repo_exclude_path` - Remove an endpoint device `aikido_security.endpoint_protection.remove_endpoint_protection_device` - Remove an endpoint exception `aikido_security.endpoint_protection.remove_endpoint_protection_exception` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do aikido_security.teams.delete_team confirm_policy: **human** Delete team? **intent:** the user asked me to delete team run suspended · waiting for a named person · key _aikido-security-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "aikido-security-agent", allowed_actions: ["aikido_security.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "aikido_security.teams.delete_team", approver: "lead@example.com" }, { match: "aikido_security.teams.remove_user_from_team", approver: "lead@example.com" }, { match: "aikido_security.code_repositories.delete_code_repo", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Aikido Security only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Aikido Security costs on actionlake. Every Aikido Security action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Aikido Security refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 211 Aikido Security actions - 211 actions page each page of a long list is one call - 102 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Aikido Security action. 211 actions by area: the id your agent calls, what it does, and its effect. **Containers 25** - `aikido_security.containers.activate_container` Activate container write - `aikido_security.containers.add_azure_container_registry` Add Azure container registry write - `aikido_security.containers.add_container_label` Add container label write - `aikido_security.containers.add_gcp_artifact_registry` Add GCP Artifact Registry write - `aikido_security.containers.add_gitlab_self_managed_container_registry` Add GitLab Self-Managed container registry write - `aikido_security.containers.add_public_container` Add public container write - `aikido_security.containers.clone_container` Clone container write - `aikido_security.containers.deactivate_container` Deactivate container destructive - `aikido_security.containers.delete_container` Delete container destructive - `aikido_security.containers.export_container_repo_licenses` Export SBOM read - `aikido_security.containers.export_raw_container_sbom` Export Raw SBOM read - `aikido_security.containers.generate_container_sbom` Generate bulk SBOM write - `aikido_security.containers.get_container_registry` Get container registry read - `aikido_security.containers.get_container_repo` Get container read - `aikido_security.containers.link_code_repo_to_container` Link code repository to container write - `aikido_security.containers.list_container_repo_runners` List container runners read - `aikido_security.containers.list_container_repos` List containers read - `aikido_security.containers.remove_container_label` Remove container label destructive - `aikido_security.containers.scan_container` Scan container write - `aikido_security.containers.unlink_code_repo_to_container` Unlink code repository from container destructive - `aikido_security.containers.update_container_internet_connection` Update connectivity write - `aikido_security.containers.update_container_label` Update container label write - `aikido_security.containers.update_container_sensitivity` Update sensitivity write - `aikido_security.containers.update_tag_filter` Update container tag filter write - `aikido_security.containers.upload_container_sbom` Upload container SBOM write **Issues 22** - `aikido_security.issues.add_note_to_issue_group` Add note to issue group write - `aikido_security.issues.adjust_group_severity` Adjust severity of an issue group write - `aikido_security.issues.adjust_severity` Adjust severity of an issue write - `aikido_security.issues.export_issues` Export all issues read - `aikido_security.issues.get_issue_counts` Get issue counts read - `aikido_security.issues.get_issue_cve_exploitability` Get issue CVE exploitability read - `aikido_security.issues.get_issue_cve_exploitability_bulk` Get issue CVE exploitability bulk read - `aikido_security.issues.get_issue_detail` Get issue detail read - `aikido_security.issues.get_issue_details_bulk` Get issue details bulk read - `aikido_security.issues.get_issue_group_details` Get issue group detail read - `aikido_security.issues.get_issue_reachability` Get issue reachability read - `aikido_security.issues.ignore_issue` Ignore an issue write - `aikido_security.issues.ignore_issue_group` Ignore an issue group write - `aikido_security.issues.list_notes_for_issue_group` List notes for issue group read - `aikido_security.issues.list_open_issue_groups` List open issue groups read - `aikido_security.issues.snooze_issue` Snooze an issue write - `aikido_security.issues.snooze_issue_group` Snooze an issue group write - `aikido_security.issues.solve_issue` Solve an issue write - `aikido_security.issues.unignore_issue` Unignore an issue write - `aikido_security.issues.unignore_issue_group` Unignore an issue group write - `aikido_security.issues.unsnooze_issue` Unsnooze an issue write - `aikido_security.issues.unsnooze_issue_group` Unsnooze an issue group write **Code repositories 20** - `aikido_security.code_repositories.activate_code_repo` Activate code repo write - `aikido_security.code_repositories.add_code_repo_exclude_path` Add an exclude path to a code repo write - `aikido_security.code_repositories.add_code_repo_label` Add code repo label write - `aikido_security.code_repositories.add_private_registry` Manage private registry write - `aikido_security.code_repositories.clone_code_repo` Clone code repo write - `aikido_security.code_repositories.deactivate_code_repo` Deactivate code repo destructive - `aikido_security.code_repositories.delete_code_repo` Delete code repo destructive - `aikido_security.code_repositories.detail_code_repo` Get code repository detail read - `aikido_security.code_repositories.export_code_repo_licenses` Export SBOM read - `aikido_security.code_repositories.export_code_repo_licenses_for_team` Export SBOM For Team read - `aikido_security.code_repositories.import_new_code_repositories` Trigger repositories sync write - `aikido_security.code_repositories.list_code_repos` List code repositories read - `aikido_security.code_repositories.remove_code_repo_exclude_path` Remove an exclude path from a code repo destructive - `aikido_security.code_repositories.remove_code_repo_label` Remove code repo label destructive - `aikido_security.code_repositories.scan_code_repo` Scan code repo write - `aikido_security.code_repositories.set_environment_variables` Set environment variables write - `aikido_security.code_repositories.update_code_repo_connectivity` Update connectivity write - `aikido_security.code_repositories.update_code_repo_dev_dep_scan` Manage dev dep scanning write - `aikido_security.code_repositories.update_code_repo_label` Update code repo label write - `aikido_security.code_repositories.update_code_repo_sensitivity` Update sensitivity write **Zen 17** - `aikido_security.zen.create_app` Create app write - `aikido_security.zen.delete_app` Delete app destructive - `aikido_security.zen.get_app` Get app read - `aikido_security.zen.get_bot_lists` Get bot lists read - `aikido_security.zen.get_countries` Get countries read - `aikido_security.zen.get_event` Get event read - `aikido_security.zen.get_ip_lists` Get threat lists read - `aikido_security.zen.list_apps` List apps read - `aikido_security.zen.list_zen_users` List users read - `aikido_security.zen.rotate_app_token` Rotate app token destructive - `aikido_security.zen.update_app` Update app write - `aikido_security.zen.update_blocking` Update blocking mode write - `aikido_security.zen.update_bot_lists` Update bot lists write - `aikido_security.zen.update_countries` Update countries write - `aikido_security.zen.update_ip_blocklist` Update IP blocklist write - `aikido_security.zen.update_ip_lists` Update threat lists write - `aikido_security.zen.update_user` Update user write **Autofix 13** - `aikido_security.autofix.get_container_autofix_settings` Get container AutoFix PR creation settings read - `aikido_security.autofix.get_dependency_autofix_settings` Get dependency AutoFix PR creation settings read - `aikido_security.autofix.get_pentest_autofix_settings` Get Pentest AutoFix PR creation settings read - `aikido_security.autofix.get_sast_autofix_settings` Get SAST & IaC AutoFix PR creation settings read - `aikido_security.autofix.list_aikido_images` List Aikido images read - `aikido_security.autofix.list_autofix_history` List autofix history read - `aikido_security.autofix.list_autofix_task_issues` List issues addressed by a task read - `aikido_security.autofix.list_image_requests` List hardened image requests read - `aikido_security.autofix.request_container_image` Request a hardened image write - `aikido_security.autofix.update_container_autofix_settings` Update container AutoFix PR creation settings write - `aikido_security.autofix.update_dependency_autofix_settings` Update dependency AutoFix PR creation settings write - `aikido_security.autofix.update_pentest_autofix_settings` Update Pentest AutoFix PR creation settings write - `aikido_security.autofix.update_sast_autofix_settings` Update SAST & IaC AutoFix PR creation settings write **Domains apis 10** - `aikido_security.domains_apis.add_subdomain` Add Subdomain write - `aikido_security.domains_apis.create_domain` Create domain write - `aikido_security.domains_apis.list_domains` List domains read - `aikido_security.domains_apis.list_subdomains` List Subdomains read - `aikido_security.domains_apis.remove_domain` Remove domain destructive - `aikido_security.domains_apis.remove_subdomain` Remove Subdomain destructive - `aikido_security.domains_apis.start_domain_scan` Start scan for a domain write - `aikido_security.domains_apis.update_domain_authentication_headers` Update Auth Headers write - `aikido_security.domains_apis.update_domain_custom_scan_headers` Update Custom Scan Headers write - `aikido_security.domains_apis.update_domain_open_api_spec` Update OpenAPI spec write **Compliance 9** - `aikido_security.compliance.get_cis_aws_compliance_overview` CIS AWS compliance read - `aikido_security.compliance.get_cis_compliance_overview` CIS compliance read - `aikido_security.compliance.get_dora_compliance_overview` DORA compliance read - `aikido_security.compliance.get_fedramp_dast_report` FedRAMP DAST report (OSCAL) read - `aikido_security.compliance.get_gdpr_compliance_overview` GDPR compliance read - `aikido_security.compliance.get_iso_compliance_overview` ISO 27001 compliance read - `aikido_security.compliance.get_nis2_compliance_overview` NIS2 compliance read - `aikido_security.compliance.get_pci_compliance_overview` PCI compliance read - `aikido_security.compliance.get_soc2_compliance_overview` SOC2 compliance read **Teams 9** - `aikido_security.teams.add_user_to_team` Add user to team write - `aikido_security.teams.create_team` Create team write - `aikido_security.teams.delete_team` Delete team destructive - `aikido_security.teams.link_resource_to_team` Link resource to team write - `aikido_security.teams.list_teams` List teams read - `aikido_security.teams.remove_user_from_team` Remove user from team destructive - `aikido_security.teams.unlink_resource_from_team` Unlink resource from team destructive - `aikido_security.teams.update_team` Update team write - `aikido_security.teams.update_team_repo_path_limitation` Update repository path limitation for a team write **Clouds 8** - `aikido_security.clouds.connect_aws_cloud` Connect AWS cloud write - `aikido_security.clouds.connect_azure_cloud` Connect Azure cloud write - `aikido_security.clouds.connect_gcp_cloud` Connect GCP cloud write - `aikido_security.clouds.create_kubernetes_cloud` Create Kubernetes cloud write - `aikido_security.clouds.get_cloud_assets` Get cloud assets read - `aikido_security.clouds.list_clouds` List connected clouds read - `aikido_security.clouds.remove_cloud` Remove cloud destructive - `aikido_security.clouds.update_azure_cloud_credentials` Update Azure cloud write **Endpoint protection 8** - `aikido_security.endpoint_protection.add_endpoint_protection_exception` Add an endpoint exception write - `aikido_security.endpoint_protection.list_endpoint_protection_activity_logs` List endpoint activity logs read - `aikido_security.endpoint_protection.list_endpoint_protection_devices` List endpoint devices read - `aikido_security.endpoint_protection.list_endpoint_protection_exceptions` List endpoint exceptions read - `aikido_security.endpoint_protection.list_endpoint_protection_installed_packages` List installed packages read - `aikido_security.endpoint_protection.list_endpoint_protection_permission_groups` List endpoint permission groups read - `aikido_security.endpoint_protection.remove_endpoint_protection_device` Remove an endpoint device destructive - `aikido_security.endpoint_protection.remove_endpoint_protection_exception` Remove an endpoint exception destructive **Pull merge requests 8** - `aikido_security.pull_merge_requests.get_ci_scan_detail` Get PR Check detail read - `aikido_security.pull_merge_requests.get_default_pr_checks_configuration` Get default PR Checks configuration read - `aikido_security.pull_merge_requests.list_ci_scan_issue_actions` List PR Check Manual Actions read - `aikido_security.pull_merge_requests.list_ci_scans` List PR Checks read - `aikido_security.pull_merge_requests.list_pr_checks_configurations` List PR Checks configurations read - `aikido_security.pull_merge_requests.save_default_pr_checks_configuration` Configure default PR Checks write - `aikido_security.pull_merge_requests.save_pr_checks_configuration` Configure PR Checks write - `aikido_security.pull_merge_requests.save_pr_checks_configuration_for_all_repos` Configure PR Checks for all repos write **Task tracking 8** - `aikido_security.task_tracking.get_issue_group_tasks` Get issue group tasks read - `aikido_security.task_tracking.get_project_mapping` Get project mapping read - `aikido_security.task_tracking.get_projects` List task tracking projects read - `aikido_security.task_tracking.get_tasks` List tasks from project read - `aikido_security.task_tracking.link_task_to_issue_group` Link existing task to issue write - `aikido_security.task_tracking.list_task_tracking_integrations` List task tracking integrations read - `aikido_security.task_tracking.map_repos_to_project` Map code repo to task tracking projects write - `aikido_security.task_tracking.map_teams_to_project` Map teams to task tracking projects write **Users 7** - `aikido_security.users.disable_user` Disable user destructive - `aikido_security.users.get_user` Get user read - `aikido_security.users.list_ide_adoption` List IDE adoption read - `aikido_security.users.list_pending_invites` List pending invites read - `aikido_security.users.list_user_login_history` List user login history read - `aikido_security.users.list_users` List users read - `aikido_security.users.update_user_rights` Update user rights write **Research 6** - `aikido_security.research.get_changelog_summary` Get changelog summary read - `aikido_security.research.get_cve_details` Get CVE details read - `aikido_security.research.get_malware_packages` Get malware packages read - `aikido_security.research.get_package_health_bulk` Get package health scores read - `aikido_security.research.list_cwe_descriptions` List CWE descriptions read - `aikido_security.research.list_eol_runtimes` List end-of-life runtimes read **Custom sast rules 5** - `aikido_security.custom_sast_rules.create_custom_rule` Create custom rule write - `aikido_security.custom_sast_rules.edit_custom_rule` Edit custom rule write - `aikido_security.custom_sast_rules.get_custom_rule` Get a custom rule read - `aikido_security.custom_sast_rules.list_custom_rules` List custom rules read - `aikido_security.custom_sast_rules.remove_custom_rule` Remove custom rule destructive **Pentesting AI code analysis 5** - `aikido_security.pentesting_ai_code_analysis.create_pentest_draft_assessment` Create pentest draft write - `aikido_security.pentesting_ai_code_analysis.get_attack_analysis` Get attack analysis read - `aikido_security.pentesting_ai_code_analysis.get_pentest_assessment_detail` Get pentest assessment read - `aikido_security.pentesting_ai_code_analysis.list_code_audits` List AI Code Analysis assessments read - `aikido_security.pentesting_ai_code_analysis.list_pentest_assessments` List pentest assessments read **Reports 5** - `aikido_security.reports.list_activity_log` List activity log read - `aikido_security.reports.list_cloud_rules` List cloud rules read - `aikido_security.reports.list_iac_rules` List IaC rules read - `aikido_security.reports.list_mobile_rules` List Mobile rules read - `aikido_security.reports.list_sast_rules` List SAST rules read **Workspace 5** - `aikido_security.workspace.get_open_api_spec` Get OpenAPI spec read - `aikido_security.workspace.get_sla_settings` Get SLA settings read - `aikido_security.workspace.get_wallet_balance` Get wallet balance read - `aikido_security.workspace.get_workspace_configuration_errors` Get workspace configuration errors read - `aikido_security.workspace.get_workspace_info` Get workspace info read **Broker 3** - `aikido_security.broker.add_broker_resource_url` Add a broker resource URL write - `aikido_security.broker.delete_broker_resource_url` Delete a broker resource URL destructive - `aikido_security.broker.list_broker_apps` List broker apps read **Code quality 3** - `aikido_security.code_quality.ignore_code_quality_repo_finding` Ignore a code quality finding write - `aikido_security.code_quality.list_code_quality_findings_for_pull_request` List code quality findings for a pull request read - `aikido_security.code_quality.list_code_quality_full_repo_findings` List code quality findings for a repository read **Licenses sbom 3** - `aikido_security.licenses_sbom.list_licenses` List & Search SBOM read - `aikido_security.licenses_sbom.mark_license_as_internal_for_package` Mark License As Internal write - `aikido_security.licenses_sbom.overwrite_license_for_package` Overwrite License write **Webhooks 3** - `aikido_security.webhooks.add_webhook` Add webhook write - `aikido_security.webhooks.list_webhooks` List webhooks read - `aikido_security.webhooks.remove_webhook` Remove webhook destructive **Code coverage 2** - `aikido_security.code_coverage.get_code_coverage_for_repository` Get code coverage for a repository read - `aikido_security.code_coverage.list_all_code_coverage_repositories` List all code coverage repositories read **Request inbox 2** - `aikido_security.request_inbox.list_user_requests` List user requests read - `aikido_security.request_inbox.review_user_request` Review a user request write **Virtual machines 2** - `aikido_security.virtual_machines.export_virtual_machine_sbom` Export SBOM read - `aikido_security.virtual_machines.list_virtual_machines` List virtual machines read **Bug bounty 1** - `aikido_security.bug_bounty.add_bug_bounty_report` Validate Bug Bounty Report write **Local scanning 1** - `aikido_security.local_scanning.get_latest_local_scan_info` Get latest local scanner version read **Scanning access tokens 1** - `aikido_security.scanning_access_tokens.set_code_scanning_access_token` Update Code Scanning Access Token write Questions ## The Aikido Security MCP server, answered. **Is there an Aikido Security MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 211 Aikido Security actions across containers, issues, code repositories and zen, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Aikido Security. **What do I need to connect Aikido Security?** Aikido REST API client ID and Aikido REST API client secret (shown once when the client credentials are created). Plus your tenant host. The free call account { op: "connections.requirements", service: "aikido_security" } lists exactly what to paste. **Can an AI agent delete or change things in Aikido Security?** Only if its key allows it, and only with an explicit confirmation. 22 Aikido Security actions are destructive, including delete team, remove user from team and delete code repo. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Aikido Security API limit?** actionlake paces every call to the limits in the Aikido Security service file: 20 calls a minute per connection. Repeated reads are answered from cache (102 Aikido Security actions can be), which never reaches Aikido Security. **What does an Aikido Security action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (211 Aikido Security actions page). Cache hits, searches, dry runs and calls Aikido Security refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Aikido Security API does it cover?** The Aikido public REST API v1 (OpenAPI 3.1.0) at app.aikido.dev/api/public/v1 by default, or the base URL set when you connect. It is built from Aikido Security's documentation as read on 23 October 2026. 211 actions in 28 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Aikido Security data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Aikido Security credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Aikido Security Shares the most action names with - [GitGuardian 9](https://actionlake.com/connectors/gitguardian) - [HackerOne 8](https://actionlake.com/connectors/hackerone) - [Doppler 8](https://actionlake.com/connectors/doppler) - [SonarQube Cloud 7](https://actionlake.com/connectors/sonarqube-cloud) - [Bitwarden 7](https://actionlake.com/connectors/bitwarden) - [Cloudflare 6](https://actionlake.com/connectors/cloudflare) Joins with, on shared entities - [GitLab 3](https://actionlake.com/connectors/gitlab) - [Azure DevOps Services 3](https://actionlake.com/connectors/azure-devops-services) - [GitHub 3](https://actionlake.com/connectors/github) - [Gitea 3](https://actionlake.com/connectors/gitea) - [Forgejo 3](https://actionlake.com/connectors/forgejo) - [Sourcegraph 3](https://actionlake.com/connectors/sourcegraph) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Aikido Security; the name is the vendor's own. Counts are from the Aikido Security service file, version 1.0.0. ## Give your agent Aikido Security today. [Connect Aikido Security free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/aikido-security More: https://actionlake.com/llms.txt