Skip to content
actionlake
Start free

Connectors · Identity & security

Bitsight MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Bitsight and the rest of your systems. It gives your agent 224 Bitsight actions (164 reads, 47 writes and 13 that wait for a confirmation) and holds the Bitsight credential itself, so the agent never does. It paces Bitsight's limits and records every call.

Connect Bitsight freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "bitsight.users.list",  intent: "check which Bitsight account is connected"}# Users · read · 1 upstream call
  • 224actionsin one signed file
  • 164readlook, never change
  • 47writecreate and update
  • 13wait for a yesdestructive, confirmed first

Set up

Connect Bitsight in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Bitsight.

    Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_tokenBitsight API token (Settings > Account > User Preferences > API Token, or a Company API token an admin generates)
    account { op: "connections.requirements", service: "bitsight" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "bitsight.users.list" }# users · read · 1 upstream callcheck { action: "bitsight.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Bitsight at a glance

Sign-in
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_token
Limits we pace to
5,000 calls per 5 minutes, per connection
API covered
Bitsight Ratings API v1/v2 (help-center reference, fetched 2026-10-23)api.bitsighttech.com
Built from
Bitsight's documentation, read 23 October 2026help.bitsighttech.comhelp.bitsighttech.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
160 of 164 reads, for up to 5 minutes; a write clears what it affects
Shared entities
4, so ask can line Bitsight up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Bitsight.

224 actions in 111 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 164readlook, never change
  • 47writecreate and update
  • 13destructivewait for a confirmation

  1. Companies

    11

    10 read · 1 write · 0 destructive

    Company Details · Company Search · Trending Companies · NIST CSF Report

  2. Users

    10

    4 read · 3 write · 3 destructive

    Users · Create a New User · User Details · Edit a User

  3. Folders

    7

    4 read · 2 write · 1 destructive

    Folder Details · Create a Folder · Edit a Folder · Get a folder

  4. Portfolio

    6

    6 read · 0 write · 0 destructive

    Portfolio Details · Portfolio Unique Identifiers · Portfolio Risk Vector Grades · Portfolio API Filters

  5. Access groups

    5

    2 read · 2 write · 1 destructive

    Create an Access Control Group · Access Control Groups · Details of an Access Control Group · Edit Access Control Group

  6. Risk remediation plan settings

    5

    2 read · 2 write · 1 destructive

    Create RRP Setting · List RRP Settings · Get RRP Setting · Update RRP Setting

  7. Subscriptions

    5

    2 read · 2 write · 1 destructive

    Add or modify subscriptions · Expired Subscriptions · Bulk subscribe or unsubscribe · Subscription Information

  8. Underwriting guidelines

    5

    2 read · 2 write · 1 destructive

    Create an underwriting guideline · Underwriting Guidelines · Default Underwriting Guidelines · Edit an Underwriting Guideline

103 more areas · 170 actions
  • Access requests 4
  • Alerts 4
  • Client access links 4
  • Company assets 4
  • Company findings 4
  • Company infrastructure 4
  • Company provided assets 4
  • Company requests 4
  • Company threat attestations 4
  • Remediations 4
  • Tiers 4
  • Access requests received 3
  • API tokens 3
  • Company requests V1 3
  • Industries 3
  • Portfolio contacts 3
  • Portfolio custom ids 3
  • Risk remediation plans 3
  • Subsidiaries 3
  • Threat attestations 3
  • Threats 3
  • WFH bulk requests 3
  • Alerts V1 2
  • Company diligence 2
  • Company life cycles 2
  • Company observations 2
  • Company products 2
  • Company tags 2
  • Current ratings 2
  • Portfolio ratings 2
  • Probable infrastructure requests 2
  • Probable infrastructure responses 2
  • Risk remediation plan selections 2
  • Users V1 2
  • Access group companies 1
  • Alert affected companies 1
  • API 1
  • Assessment reports 1
  • Assessment templates 1
  • Breach news 1
  • Company countries 1
  • Company domain products 1
  • Company domain providers 1
  • Company industry statistics 1
  • Company infrastructure changes 1
  • Company life cycle types 1
  • Company peer group 1
  • Company product domains 1
  • Company provider domains 1
  • Company providers 1
  • Company relationships 1
  • Company tree product companies 1
  • Company tree product types 1
  • Company tree products 1
  • Company tree provider companies 1
  • Company tree provider products 1
  • Company tree providers 1
  • Defaults 1
  • Domain squatting 1
  • Exposed credential companies 1
  • Exposed credential leaks 1
  • Fast ratings 1
  • Finding comments 1
  • Folder companies 1
  • Folder product companies 1
  • Folder product types 1
  • Folder products 1
  • Folder provider companies 1
  • Folder provider products 1
  • Folder providers 1
  • Insights 1
  • Peer analytics 1
  • Peer groups 1
  • Portfolio breaches 1
  • Portfolio countries 1
  • Portfolio monitored assets 1
  • Portfolio product companies 1
  • Portfolio product types 1
  • Portfolio products 1
  • Portfolio provider companies 1
  • Portfolio provider products 1
  • Portfolio providers 1
  • Portfolio V1 1
  • Products 1
  • Providers 1
  • Rating changes 1
  • Risk remediation plan forecasts 1
  • Sovereign company kpis 1
  • Sovereign kpis 1
  • Sovereign network resources 1
  • Sovereign observation counts 1
  • Sovereign observations 1
  • Territories 1
  • Threat companies 1
  • Threat evidence 1
  • Tier companies 1
  • Tier product companies 1
  • Tier product types 1
  • Tier provider companies 1
  • Tier provider products 1
  • Tier providers 1
  • Tier thresholds 1
  • WFH findings 1

Top actions

The Bitsight API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 14 of Bitsight's 14 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
bitsight.users.listUsersGet the users within your Bitsight account.readidentity.user.list474 connectors
bitsight.folders.listFolder Detailshttps://api.bitsighttech.com/ratings/v1/folders.readcontent.folder.list62 connectors
bitsight.users.createCreate a New UserCreate a new user. See user roles.writeidentity.user.create262 connectors
bitsight.portfolio.listPortfolio DetailsGet information about the companies in your portfolio.readcrm.company.list162 connectors
bitsight.folders.createCreate a FolderCreate a new folder. Folders can be used to organize your portfolio to better understand the security performance of certain groups of companies, such as IT…writecontent.folder.create62 connectors
bitsight.users.updateEdit a UserEdit an existing user.writeidentity.user.update280 connectors
bitsight.alerts.listAlertsSee your existing alerts and their details.readmonitoring.alert.list51 connectors
bitsight.users.deleteDelete a UserDelete an existing user.destructiveidentity.user.delete253 connectors
bitsight.companies.getCompany DetailsGet a company’s details, including:.readcrm.company.get162 connectors
bitsight.alerts.latestLatest AlertsGet alerts generated during the most recent daily platform update.readthis connector
bitsight.portfolio.guidsPortfolio Unique IdentifiersReturns a simple list of company or country unique identifiers in your portfolio.readthis connector
bitsight.companies.trendingTrending CompaniesSee 20 companies that have been actively searched and viewed by other Bitsight users during the past week, as presented in the Trending Vendors card in the…readthis connector

Try it

Prompts to paste into Claude.

Each one names the Bitsight actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which Bitsight alerts are open right now? Group them by service.

    callsbitsight.alerts.list

  2. Writewrite

    Create a New User in Bitsight. Show me exactly what you will send before you save it.

    callsbitsight.users.create

  3. Across systemsread

    Which Bitsight companies have invoices in ConnectWise PSA, and how many each?

    callsbitsight.portfolio.listconnectwise_manage.invoices.list

Across your systems

Bitsight, joined to the rest of your business.

One ask fetches from Bitsight and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which Bitsight companies have invoices in ConnectWise PSA, and how many each?

    bitsight.portfolio.list + connectwise_manage.invoices.list, on crm.company · ConnectWise PSA

  • Which Bitsight companies have invoices in NetSuite, and how many each?

    bitsight.portfolio.list + netsuite.views.invoices, on crm.company · NetSuite

Also mapped by other connectorsidentity.user 517crm.company 227monitoring.alert 56content.folder 38
ask
ask {  intent: "which Bitsight companies have invoices in ConnectWise PSA, and how many each",  steps: [    { action: "bitsight.portfolio.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "connectwise_manage.invoices.list", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Bitsight

Destructive actions wait for a yes.

13 Bitsight actions are destructive. These are all of them:

  • Delete a Userbitsight.users.delete
  • Delete a Folderbitsight.folders.delete
  • Reset 2FA for a userbitsight.users.reset_mfa
  • Require a user to set up 2FAbitsight.users.require_mfa
  • Revoke Company API Tokensbitsight.api_tokens.delete
  • Delete an Access Control Groupbitsight.access_groups.delete
  • Unsubscribebitsight.subscriptions.delete
  • Cancel a Company Requestbitsight.company_requests.delete
  • Remove a Bulk Work From Home Requestbitsight.wfh_bulk_requests.delete
  • Delete a Collaboration Registration Formbitsight.client_access_links.delete
  • Delete an Underwriting Guidelinebitsight.underwriting_guidelines.delete
  • Delete RRP Settingbitsight.risk_remediation_plan_settings.delete
  • Delete Custom Infrastructure in Bulkbitsight.company_infrastructure.bulk_delete_custom

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dobitsight.users.deleteconfirm_policy: human

Delete a User?

intent: the user asked me to delete a User

run suspended · waiting for a named person · key bitsight-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "bitsight-agent",  allowed_actions: ["bitsight.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "bitsight.users.delete", approver: "[email protected]" },    { match: "bitsight.folders.delete", approver: "[email protected]" },    { match: "bitsight.users.reset_mfa", approver: "[email protected]" }  ]}
Illustrative. Scoped to Bitsight only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Bitsight costs on actionlake.

Every Bitsight action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Bitsight refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 224 Bitsight actions
  • 224actions pageeach page of a long list is one call
  • 160reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Bitsight action.

224 actions by area: the id your agent calls, what it does, and its effect.

Companies11
  • bitsight.companies.getCompany Detailsread
  • bitsight.companies.nist_report_getNIST CSF Reportread
  • bitsight.companies.preview_report_getGet a company preview reportread
  • bitsight.companies.rating_distributionRating Distribution by Rating Categoryread
  • bitsight.companies.searchCompany Searchread
  • bitsight.companies.tier_recommendation_getTiering Recommendationread
  • bitsight.companies.tree_getRatings Treeread
  • bitsight.companies.trendingTrending Companiesread
  • bitsight.companies.underwriting_comparison_getCompare Client to the Underwriting Guidelinesread
  • bitsight.companies.updateHighlight Primary or Assign Custom IDwrite
  • bitsight.companies.user_behavior_statisticsUser Behavior Statisticsread
Users10
  • bitsight.users.company_viewsYour Company Views [v1]read
  • bitsight.users.createCreate a New Userwrite
  • bitsight.users.deleteDelete a Userdestructive
  • bitsight.users.getUser Detailsread
  • bitsight.users.listUsersread
  • bitsight.users.quotaUser Quotaread
  • bitsight.users.require_mfaRequire a user to set up 2FAdestructive
  • bitsight.users.resend_activation_emailResend User Activation Emailwrite
  • bitsight.users.reset_mfaReset 2FA for a userdestructive
  • bitsight.users.updateEdit a Userwrite
Folders7
  • bitsight.folders.createCreate a Folderwrite
  • bitsight.folders.deleteDelete a Folderdestructive
  • bitsight.folders.findings_summaryFindings in a Folderread
  • bitsight.folders.getGet a folderread
  • bitsight.folders.graph_dataRatings Graph Data of a Folderread
  • bitsight.folders.listFolder Detailsread
  • bitsight.folders.updateEdit a Folderwrite
Portfolio6
  • bitsight.portfolio.filtersPortfolio API Filtersread
  • bitsight.portfolio.guidsPortfolio Unique Identifiersread
  • bitsight.portfolio.listPortfolio Detailsread
  • bitsight.portfolio.risk_vector_gradesPortfolio Risk Vector Gradesread
  • bitsight.portfolio.statisticsPortfolio Statisticsread
  • bitsight.portfolio.summaryPortfolio Summaryread
Access groups5
  • bitsight.access_groups.createCreate an Access Control Groupwrite
  • bitsight.access_groups.deleteDelete an Access Control Groupdestructive
  • bitsight.access_groups.getDetails of an Access Control Groupread
  • bitsight.access_groups.listAccess Control Groupsread
  • bitsight.access_groups.updateEdit Access Control Groupwrite
Risk remediation plan settings5
  • bitsight.risk_remediation_plan_settings.createCreate RRP Settingwrite
  • bitsight.risk_remediation_plan_settings.deleteDelete RRP Settingdestructive
  • bitsight.risk_remediation_plan_settings.getGet RRP Settingread
  • bitsight.risk_remediation_plan_settings.listList RRP Settingsread
  • bitsight.risk_remediation_plan_settings.updateUpdate RRP Settingwrite
Subscriptions5
  • bitsight.subscriptions.bulk_updateBulk subscribe or unsubscribewrite
  • bitsight.subscriptions.createAdd or modify subscriptionswrite
  • bitsight.subscriptions.deleteUnsubscribedestructive
  • bitsight.subscriptions.expired_listExpired Subscriptionsread
  • bitsight.subscriptions.getSubscription Informationread
Underwriting guidelines5
  • bitsight.underwriting_guidelines.createCreate an underwriting guidelinewrite
  • bitsight.underwriting_guidelines.defaultsDefault Underwriting Guidelinesread
  • bitsight.underwriting_guidelines.deleteDelete an Underwriting Guidelinedestructive
  • bitsight.underwriting_guidelines.listUnderwriting Guidelinesread
  • bitsight.underwriting_guidelines.updateEdit an Underwriting Guidelinewrite
Access requests4
  • bitsight.access_requests.bulk_updateBulk Edit Collaboration Statuswrite
  • bitsight.access_requests.createInvite a Company to Collaborate via the Client/Vendor Access Programwrite
  • bitsight.access_requests.listCollaboration Outboxread
  • bitsight.access_requests.summaryCollaboration Outbox Summaryread
Alerts4
  • bitsight.alerts.latestLatest Alertsread
  • bitsight.alerts.listAlertsread
  • bitsight.alerts.percent_change_getPercent Change Alert Detailsread
  • bitsight.alerts.vulnerability_getVulnerability Alert Detailsread
Client access links4
  • bitsight.client_access_links.createCreate a Collaboration Registration Formwrite
  • bitsight.client_access_links.deleteDelete a Collaboration Registration Formdestructive
  • bitsight.client_access_links.listCollaboration Registration Formsread
  • bitsight.client_access_links.updateUpdate a Collaboration Registration Formwrite
Company assets4
  • bitsight.company_assets.listAssetsread
  • bitsight.company_assets.statisticsAsset Risk Matrixread
  • bitsight.company_assets.summariesAsset Summariesread
  • bitsight.company_assets.tagTag Assetwrite
Company findings4
  • bitsight.company_findings.listList a company's findingsread
  • bitsight.company_findings.statisticsFindings Statisticsread
  • bitsight.company_findings.summariesFindings Summariesread
  • bitsight.company_findings.summaryFindings Summary of a Companyread
Company infrastructure4
  • bitsight.company_infrastructure.bulk_delete_customDelete Custom Infrastructure in Bulkdestructive
  • bitsight.company_infrastructure.listMy Infrastructure Reportread
  • bitsight.company_infrastructure.reasonsInfrastructure Attribution Reasonsread
  • bitsight.company_infrastructure.tagTag Infrastructurewrite
Company provided assets4
  • bitsight.company_provided_assets.bulk_updateAdd Assets in Bulkwrite
  • bitsight.company_provided_assets.listCompany-Provided Assetsread
  • bitsight.company_provided_assets.set_end_dateSet an End Date for Company-Provided Assetswrite
  • bitsight.company_provided_assets.summariesCompany Requests Summaryread
Company requests4
  • bitsight.company_requests.createRequest to Add a Company to the Bitsight Inventorywrite
  • bitsight.company_requests.deleteCancel a Company Requestdestructive
  • bitsight.company_requests.getCompany Request Detailsread
  • bitsight.company_requests.listCompany Requestsread
Company threat attestations4
  • bitsight.company_threat_attestations.bulk_createCompany Threat Attestations Bulkwrite
  • bitsight.company_threat_attestations.listCompany Threat Attestationsread
  • bitsight.company_threat_attestations.queryCompany Threat Attestations Queryread
  • bitsight.company_threat_attestations.summariesCompany Threat Attestations Summariesread
Remediations4
  • bitsight.remediations.createTrack the Remediation of a Findingwrite
  • bitsight.remediations.listRemediation Trackingread
  • bitsight.remediations.updateUpdate the status or assignee of findingswrite
  • bitsight.remediations.update_singleUpdate the status or assignee of a single findingwrite
Tiers4
  • bitsight.tiers.listTiersread
  • bitsight.tiers.summaryTier Summariesread
  • bitsight.tiers.updateEdit Tierswrite
  • bitsight.tiers.vendor_action_planTiered Company GUID by Action Planread
Access requests received3
  • bitsight.access_requests_received.getCollaboration Invitation Detailsread
  • bitsight.access_requests_received.listCollaboration Inboxread
  • bitsight.access_requests_received.mark_all_readMark Collaboration Invitations as ‘Read’write
API tokens3
  • bitsight.api_tokens.createGenerate a New Company API Tokenwrite
  • bitsight.api_tokens.deleteRevoke Company API Tokensdestructive
  • bitsight.api_tokens.listCompany API Tokensread
Company requests V13
  • bitsight.company_requests_v1.createRequest a company report (v1)write
  • bitsight.company_requests_v1.getGet company request status (v1)read
  • bitsight.company_requests_v1.listList company requests (v1)read
Industries3
  • bitsight.industries.by_countryRatings of Industries Within a Countryread
  • bitsight.industries.history_getSecurity Ratings History of an Industryread
  • bitsight.industries.listIndustriesread
Portfolio contacts3
  • bitsight.portfolio_contacts.createAssign Point of Contactwrite
  • bitsight.portfolio_contacts.listPortfolio Contactsread
  • bitsight.portfolio_contacts.updateEdit Portfolio Contactswrite
Portfolio custom ids3
  • bitsight.portfolio_custom_ids.bulk_updateCustom ID in Bulkwrite
  • bitsight.portfolio_custom_ids.createCustomize a Company's IDwrite
  • bitsight.portfolio_custom_ids.listCustom Company Identifiersread
Risk remediation plans3
  • bitsight.risk_remediation_plans.createCreate Risk Remediation Planwrite
  • bitsight.risk_remediation_plans.getGet Risk Remediation Planread
  • bitsight.risk_remediation_plans.listList Risk Remediation Plansread
Subsidiaries3
  • bitsight.subsidiaries.listMy Subsidiariesread
  • bitsight.subsidiaries.recommendationsEnterprise Analyticsread
  • bitsight.subsidiaries.statisticsSubsidiary Statisticsread
Threat attestations3
  • bitsight.threat_attestations.listThreat Attestationsread
  • bitsight.threat_attestations.queryThreat Attestations Queryread
  • bitsight.threat_attestations.summariesThreat Attestations Summariesread
Threats3
  • bitsight.threats.catalogList cataloged threatsread
  • bitsight.threats.listPortfolio Threats [v2]read
  • bitsight.threats.summariesThreat Statistics [v2]read
WFH bulk requests3
  • bitsight.wfh_bulk_requests.deleteRemove a Bulk Work From Home Requestdestructive
  • bitsight.wfh_bulk_requests.listBulk Work From Home Requestsread
  • bitsight.wfh_bulk_requests.rescanRescan a Bulk Work From Home Requestwrite
Alerts V12
  • bitsight.alerts_v1.latestGet latest alerts (v1, deprecated)read
  • bitsight.alerts_v1.listList alerts (v1, deprecated)read
Company diligence2
  • bitsight.company_diligence.historical_statisticsDiligence Finding Counts of a Companyread
  • bitsight.company_diligence.statisticsDiligence Statisticsread
Company life cycles2
  • bitsight.company_life_cycles.listLife Cycle Detailsread
  • bitsight.company_life_cycles.updateUpdate the Life Cycle Stage of a Companywrite
Company observations2
  • bitsight.company_observations.listDetailed Company Observationsread
  • bitsight.company_observations.statisticsStatisticsread
Company products2
  • bitsight.company_products.listProducts of a Companyread
  • bitsight.company_products.searchGet Products of a Companyread
Company tags2
  • bitsight.company_tags.bulk_modifyModify Infrastructure Tagswrite
  • bitsight.company_tags.listInfrastructure Tagsread
Current ratings2
  • bitsight.current_ratings.listCurrent Ratingsread
  • bitsight.current_ratings.use_licenseUse Current Ratings Licensewrite
Portfolio ratings2
  • bitsight.portfolio_ratings.listSecurity Rating Details of Companies in Your Portfolioread
  • bitsight.portfolio_ratings.queryGet security rating details for selected portfolio companiesread
Probable infrastructure requests2
  • bitsight.probable_infrastructure_requests.createProbable Infrastructure Requestswrite
  • bitsight.probable_infrastructure_requests.listProbable Infrastructure Requestsread
Probable infrastructure responses2
  • bitsight.probable_infrastructure_responses.bulk_updateProbable Infrastructure Requests Response Bulkwrite
  • bitsight.probable_infrastructure_responses.listProbable Infrastructure Requests Responseread
Risk remediation plan selections2
  • bitsight.risk_remediation_plan_selections.getPlan Selectionread
  • bitsight.risk_remediation_plan_selections.updateUpdate Plan Selectionwrite
Users V12
  • bitsight.users_v1.getGet user details (v1)read
  • bitsight.users_v1.listList users (v1)read
Access group companies1
  • bitsight.access_group_companies.addAdd Companies to Access Control Groupswrite
Alert affected companies1
  • bitsight.alert_affected_companies.list4th Party Public Disclosure Affected Companiesread
API1
  • bitsight.api.resourcesList API resourcesread
Assessment reports1
  • bitsight.assessment_reports.getAssessment Report Dataread
Assessment templates1
  • bitsight.assessment_templates.listAssessment Report Templateread
Breach news1
  • bitsight.breach_news.listBreach Newsread
Company countries1
  • bitsight.company_countries.listIP Addresses by Countryread
Company domain products1
  • bitsight.company_domain_products.listEnterprise Products Used by a Single Domainread
Company domain providers1
  • bitsight.company_domain_providers.listService Providers for a Specific Domainread
Company industry statistics1
  • bitsight.company_industry_statistics.getIndustry Statisticsread
Company infrastructure changes1
  • bitsight.company_infrastructure_changes.listInfrastructure Changesread
Company life cycle types1
  • bitsight.company_life_cycle_types.listBitsight Life Cycle Stages Overviewread
Company peer group1
  • bitsight.company_peer_group.getPeer Comparison Group Detailsread
Company product domains1
  • bitsight.company_product_domains.listDomains of a Company Using a Specific Productread
Company provider domains1
  • bitsight.company_provider_domains.listShared Service Provider Domainsread
Company providers1
  • bitsight.company_providers.listService Providers of a Specific Companyread
Company relationships1
  • bitsight.company_relationships.listCompany Relationship Detailsread
Company tree product companies1
  • bitsight.company_tree_product_companies.listProduct Usage of Companies in a Ratings Treeread
Company tree product types1
  • bitsight.company_tree_product_types.listProduct Types in a Ratings Treeread
Company tree products1
  • bitsight.company_tree_products.listProducts in a Ratings Treeread
Company tree provider companies1
  • bitsight.company_tree_provider_companies.listDependency on a Specific Service Provider in a Ratings Treeread
Company tree provider products1
  • bitsight.company_tree_provider_products.listProducts of a Specific Service Provider in a Ratings Treeread
Company tree providers1
  • bitsight.company_tree_providers.listService Providers of a Third Partyread
Defaults1
  • bitsight.defaults.getStatic Dataread
Domain squatting1
  • bitsight.domain_squatting.getDomain Squatting Detailsread
Exposed credential companies1
  • bitsight.exposed_credential_companies.listCompanies with Exposed Credentials in Your Portfolioread
Exposed credential leaks1
  • bitsight.exposed_credential_leaks.listCredentials Leaks Affecting Your Portfolioread
Fast ratings1
  • bitsight.fast_ratings.createRapid Underwriting Assessmentswrite
Finding comments1
  • bitsight.finding_comments.listFinding Commentsread
Folder companies1
  • bitsight.folder_companies.updateAdd or remove companies in a folderwrite
Folder product companies1
  • bitsight.folder_product_companies.listProduct Usage of Companies in a Folderread
Folder product types1
  • bitsight.folder_product_types.listProduct Types in a Folderread
Folder products1
  • bitsight.folder_products.listProducts in a Folderread
Folder provider companies1
  • bitsight.folder_provider_companies.listCompanies in a Folder that Depends on a Specific Service Providerread
Folder provider products1
  • bitsight.folder_provider_products.listProducts in a Specific Folderread
Folder providers1
  • bitsight.folder_providers.listService Providers in a Folderread
Insights1
  • bitsight.insights.listInsightsread
Peer analytics1
  • bitsight.peer_analytics.config_getCompanies in Peer Comparison Groupread
Peer groups1
  • bitsight.peer_groups.listPeer Comparison Group Configuration Detailsread
Portfolio breaches1
  • bitsight.portfolio_breaches.listPublic Disclosures in Portfolioread
Portfolio countries1
  • bitsight.portfolio_countries.listGeographic IP Address Spaceread
Portfolio monitored assets1
  • bitsight.portfolio_monitored_assets.summariesMonitored Assets Summariesread
Portfolio product companies1
  • bitsight.portfolio_product_companies.listProduct Usage of Companies in Your Portfolioread
Portfolio product types1
  • bitsight.portfolio_product_types.listProduct Types in Your Portfolioread
Portfolio products1
  • bitsight.portfolio_products.listPortfolio Productsread
Portfolio provider companies1
  • bitsight.portfolio_provider_companies.listPortfolio Companies Dependent on a Specific Service Providerread
Portfolio provider products1
  • bitsight.portfolio_provider_products.listService Provider Products in Your Portfolioread
Portfolio providers1
  • bitsight.portfolio_providers.listService Providersread
Portfolio V11
  • bitsight.portfolio_v1.getGet portfolio details (v1)read
Products1
  • bitsight.products.getProduct Detailsread
Providers1
  • bitsight.providers.getService Provider Detailsread
Rating changes1
  • bitsight.rating_changes.listRating Change Explanationsread
Risk remediation plan forecasts1
  • bitsight.risk_remediation_plan_forecasts.generateGenerate risk remediation forecast timelinesread
Sovereign company kpis1
  • bitsight.sovereign_company_kpis.listNational Cybersecurity Companies KPIread
Sovereign kpis1
  • bitsight.sovereign_kpis.getKPI for National Cybersecurity Observationsread
Sovereign network resources1
  • bitsight.sovereign_network_resources.getNational Cybersecurity Network Resourcesread
Sovereign observation counts1
  • bitsight.sovereign_observation_counts.getNational Cybersecurity Observation Countsread
Sovereign observations1
  • bitsight.sovereign_observations.listNational Cybersecurity Observationsread
Territories1
  • bitsight.territories.industry_gradesGrades by Country-Industryread
Threat companies1
  • bitsight.threat_companies.listThreat Impact [v2]read
Threat evidence1
  • bitsight.threat_evidence.listThreat Evidence [v2]read
Tier companies1
  • bitsight.tier_companies.updateAdd or remove companies in a tierwrite
Tier product companies1
  • bitsight.tier_product_companies.listProduct Usage of Companies in a Tierread
Tier product types1
  • bitsight.tier_product_types.listProduct Types in a Tierread
Tier provider companies1
  • bitsight.tier_provider_companies.listTiered Companies Dependent on a Specific Service Providerread
Tier provider products1
  • bitsight.tier_provider_products.listService Provider Products in a Tierread
Tier providers1
  • bitsight.tier_providers.listService Providers in a Tierread
Tier thresholds1
  • bitsight.tier_thresholds.listTier Threshold Alertsread
WFH findings1
  • bitsight.wfh_findings.listWork From Home Findingsread

Questions

The Bitsight MCP server, answered.

Is there a Bitsight MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 224 Bitsight actions across companies, users, folders and portfolio, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Bitsight.

What do I need to connect Bitsight?

Bitsight API token (Settings > Account > User Preferences > API Token, or a Company API token an admin generates). The free call account { op: "connections.requirements", service: "bitsight" } lists exactly what to paste.

Can an AI agent delete or change things in Bitsight?

Only if its key allows it, and only with an explicit confirmation. 13 Bitsight actions are destructive, including delete a User, delete a Folder and reset 2FA for a user. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Bitsight API limit?

actionlake paces every call to the limits in the Bitsight service file: 5,000 calls per 5 minutes per connection. Repeated reads are answered from cache (160 Bitsight actions can be), which never reaches Bitsight.

What does a Bitsight action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (224 Bitsight actions page). Cache hits, searches, dry runs and calls Bitsight refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Bitsight API does it cover?

The Bitsight Ratings API v1/v2 (help-center reference, fetched 2026-10-23) at api.bitsighttech.com. It is built from Bitsight's documentation as read on 23 October 2026. 224 actions in 111 areas, each one in the signed service file (version 1.0.0).

Can I combine Bitsight with my other systems?

Yes. ask joins Bitsight to ConnectWise PSA or NetSuite on the same customer and returns the answer rather than every row. Bitsight maps crm.company, which 227 other connectors also map.

Does actionlake keep my Bitsight data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Bitsight credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Bitsight

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Bitsight; the name is the vendor's own. Counts are from the Bitsight service file, version 1.0.0.

Give your agent Bitsight today.

Connect Bitsight freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.