Skip to content
actionlake
Start free

Connectors · MSP & PSA

Cato Networks SASE MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Cato Networks SASE and the rest of your systems. It gives your agent 606 Cato Networks SASE actions (185 reads, 300 writes and 121 that wait for a confirmation) and holds the Cato Networks SASE credential itself, so the agent never does. It paces Cato Networks SASE's limits and records every call.

Connect Cato Networks SASE freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "cato_networks.user.list",  intent: "check which Cato Networks SASE account is connected"}# List user · read · 1 upstream call
  • 606actionsin one signed file
  • 185readlook, never change
  • 300writecreate and update
  • 121wait for a yesdestructive, confirmed first

Set up

Connect Cato Networks SASE in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Cato Networks SASE.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyCato API key
    • account_idYour Cato Networks SASE account id
    • hostWhere your Cato Networks SASE lives: your host
    account { op: "connections.requirements", service: "cato_networks" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "cato_networks.user.list" }# list user · read · 1 upstream callcheck { action: "cato_networks.user.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Cato Networks SASE at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Setup fields
account_idhost
Limits we pace to
100 calls a minute, per connection
API covered
Cato API GraphQL (api/v1/graphql2), schema introspected 2026-10-23api.catonetworks.com
Built from
Cato Networks SASE's documentation, read 23 October 2026api.catonetworks.comapi.catonetworks.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
175 of 185 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Cato Networks SASE up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Cato Networks SASE.

606 actions in 47 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 185readlook, never change
  • 300writecreate and update
  • 121destructivewait for a confirmation

  1. Policy

    269

    39 read · 171 write · 59 destructive

    Get policy internet firewall · Get policy wan firewall · Create policy anti malware file hash revision · List policy anti malware file hash revision

  2. Site

    89

    28 read · 42 write · 19 destructive

    List site network range · List site available version · Add site bgp peer · List site bgp peer

  3. NetworkConfig

    37

    13 read · 18 write · 6 destructive

    Create network config dhcp option · List network config dhcp option · Create network config dhcp relay group · List network config dhcp relay group

  4. Container

    24

    9 read · 12 write · 3 destructive

    List container · Create from list container fqdn · Create from url container fqdn · Search container fqdn

  5. Notification

    19

    9 read · 7 write · 3 destructive

    List notification integration reference body template · Create notification integration webhook · List notification integration webhook · Test notification integration webhook

  6. Posture

    18

    9 read · 9 write · 0 destructive

    List posture account summary · List posture category · Add posture check comment · List posture check result

  7. ZtnaAppConnector

    13

    4 read · 6 write · 3 destructive

    Add ztna app connector · List ztna app connector · Add ztna app connector connectors configuration · List ztna app connector group

  8. Devices

    10

    10 read · 0 write · 0 destructive

    List device · Csv export device · Csv export status device · Get device attribute category

39 more areas · 127 actions
  • User 9
  • BusinessPlatform 8
  • Licensing 8
  • Admin 7
  • ExternalAccess 6
  • Groups 6
  • PopLocationMutations 6
  • Rbac 6
  • XDR 6
  • AccountManagement 5
  • CustomAppData 5
  • EnterpriseDirectory 5
  • Object 5
  • PrivateApplication 5
  • AiSecurity 4
  • PopLocations 4
  • Catalogs 3
  • ConnectivitySnapshots 3
  • Hardware 3
  • Sandbox 3
  • HardwareManagement 2
  • AccountBySubdomain 1
  • AccountMetrics 1
  • AccountRoles 1
  • AccountSnapshot 1
  • Admins 1
  • AppStats 1
  • AppStatsTimeSeries 1
  • AuditFeed 1
  • EntityLookup 1
  • Events 1
  • EventsFeed 1
  • EventsTimeSeries 1
  • RateLimit 1
  • RateLimitEstimate 1
  • ServicePrincipalAdmin 1
  • SocketPortMetrics 1
  • SocketPortMetricsTimeSeries 1
  • SubDomains 1

Top actions

The Cato Networks SASE API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 12 of Cato Networks SASE's 12 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
cato_networks.user.listList userThe userList query retrieves a paginated list of the users. Filtering and sorting can be applied.readidentity.user.list474 connectors
cato_networks.group.listList groupGet a list of groups, with optional filters and sorting. This query only returns basic information for each group (e.g. name, ID). To view full configuration…readidentity.group.list262 connectors
cato_networks.user.createCreate userCreates a new manual user.writeidentity.user.create262 connectors
cato_networks.group.createCreate groupCreate a new groupwriteidentity.group.create205 connectors
cato_networks.user.updateUpdate userUpdates an existing manual user.writeidentity.user.update280 connectors
cato_networks.user.deleteDelete userDeletes one or more users from the account. If unable to delete a user in the request, no users are deleted.destructiveidentity.user.delete253 connectors
cato_networks.rbac_role.listList rbac roleList the predefined roles and account-owned custom roles available to the account.readidentity.role.list184 connectors
cato_networks.device.listList deviceList device.readdevice.endpoint.list65 connectors
cato_networks.rbac_role.getGet rbac roleFetch a single role by its unique identifier. Returns null when no role with that id exists in the account's scope.readidentity.role.get127 connectors
cato_networks.admin.listList adminList admin.readthis connector
cato_networks.entity.lookupLookup entityLookup entities with a specific type, potentially filtered and pagedreadthis connector
cato_networks.xdr_story.listList xdr storyDefine the paging, sort, and filter arguments to define the XDR stories that are returned in the queryreadthis connector

Try it

Prompts to paste into Claude.

Each one names the Cato Networks SASE actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Cato Networks SASE? List every user and their role.

    callscato_networks.user.list

  2. Writewrite

    Create user in Cato Networks SASE. Show me exactly what you will send before you save it.

    callscato_networks.user.create

Governance for Cato Networks SASE

Destructive actions wait for a yes.

121 Cato Networks SASE actions are destructive. The first 10:

  • Delete usercato_networks.user.delete
  • Delete groupcato_networks.group.delete
  • Add admincato_networks.admin.add
  • Remove sitecato_networks.site.remove
  • Remove admincato_networks.admin.remove
  • Update admincato_networks.admin.update
  • Disable usercato_networks.user.disable
  • Remove accountcato_networks.account.remove
  • Update site hacato_networks.site_ha.update
  • Disable accountcato_networks.account.disable

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

docato_networks.user.deleteconfirm_policy: human

Delete user?

intent: the user asked me to delete user

run suspended · waiting for a named person · key cato-networks-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "cato-networks-agent",  allowed_actions: ["cato_networks.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "cato_networks.user.delete", approver: "[email protected]" },    { match: "cato_networks.group.delete", approver: "[email protected]" },    { match: "cato_networks.admin.add", approver: "[email protected]" }  ]}
Illustrative. Scoped to Cato Networks SASE only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Cato Networks SASE costs on actionlake.

Every Cato Networks SASE action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Cato Networks SASE refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 606 Cato Networks SASE actions
  • 606actions pageeach page of a long list is one call
  • 175reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Cato Networks SASE action.

606 actions by area: the id your agent calls, what it does, and its effect.

Policy269
  • cato_networks.policy_anti_malware_file_hash_revision.createCreate policy anti malware file hash revisionwrite
  • cato_networks.policy_anti_malware_file_hash_revision.listList policy anti malware file hash revisionread
  • cato_networks.policy_internet_firewall.getGet policy internet firewallread
  • cato_networks.policy_wan_firewall.getGet policy wan firewallread
  • cato_networks.policy_anti_malware_file_hash.getGet policy anti malware file hashread
  • cato_networks.policy_anti_malware_file_hash.updateUpdate policy anti malware file hashwrite
  • and 263 more in this area
Site89
  • cato_networks.site_available_version.listList site available versionread
  • cato_networks.site_bgp_peer.addAdd site bgp peerwrite
  • cato_networks.site_bgp_peer.listList site bgp peerread
  • cato_networks.site_network_range.listList site network rangeread
  • cato_networks.site.removeRemove sitedestructive
  • cato_networks.site_backhauling.getGet site backhaulingread
  • and 83 more in this area
NetworkConfig37
  • cato_networks.network_config_dhcp_option.createCreate network config dhcp optionwrite
  • cato_networks.network_config_dhcp_option.listList network config dhcp optionread
  • cato_networks.network_config_dhcp_relay_group.createCreate network config dhcp relay groupwrite
  • cato_networks.network_config_dhcp_relay_group.listList network config dhcp relay groupread
  • cato_networks.network_config_dhcp_option.deleteDelete network config dhcp optiondestructive
  • cato_networks.network_config_dhcp_option.getGet network config dhcp optionread
  • and 31 more in this area
Container24
  • cato_networks.container.listList containerread
  • cato_networks.container_fqdn.create_from_listCreate from list container fqdnwrite
  • cato_networks.container_fqdn.create_from_urlCreate from url container fqdnwrite
  • cato_networks.container_fqdn.searchSearch container fqdnread
  • cato_networks.container.deleteDelete containerdestructive
  • cato_networks.container_fqdn.download_fileDownload file container fqdnread
  • and 18 more in this area
Notification19
  • cato_networks.notification_integration_reference_body_template.listList notification integration reference body templateread
  • cato_networks.notification_integration_webhook.createCreate notification integration webhookwrite
  • cato_networks.notification_integration_webhook.listList notification integration webhookread
  • cato_networks.notification_integration_webhook.testTest notification integration webhookwrite
  • cato_networks.notification_integration_reference_body_template.getGet notification integration reference body templateread
  • cato_networks.notification_integration_webhook.deleteDelete notification integration webhookdestructive
  • and 13 more in this area
Posture18
  • cato_networks.posture_account_summary.listList posture account summaryread
  • cato_networks.posture_category.listList posture categoryread
  • cato_networks.posture_check_comment.addAdd posture check commentwrite
  • cato_networks.posture_check_result.listList posture check resultread
  • cato_networks.posture_check.muteMute posture checkwrite
  • cato_networks.posture_check.reevaluateReevaluate posture checkwrite
  • and 12 more in this area
ZtnaAppConnector13
  • cato_networks.ztna_app_connector.addAdd ztna app connectorwrite
  • cato_networks.ztna_app_connector.listList ztna app connectorread
  • cato_networks.ztna_app_connector_connectors_configuration.addAdd ztna app connector connectors configurationwrite
  • cato_networks.ztna_app_connector_group.listList ztna app connector groupread
  • cato_networks.ztna_app_connector.getGet ztna app connectorread
  • cato_networks.ztna_app_connector.removeRemove ztna app connectordestructive
  • and 7 more in this area
Devices10
  • cato_networks.device.csv_exportCsv export deviceread
  • cato_networks.device.csv_export_statusCsv export status deviceread
  • cato_networks.device.listList deviceread
  • cato_networks.device_attribute_category.getGet device attribute categoryread
  • cato_networks.device_attribute_compliance.getGet device attribute complianceread
  • cato_networks.device_attribute_manufacturer.getGet device attribute manufacturerread
  • and 4 more in this area
User9
  • cato_networks.user.createCreate userwrite
  • cato_networks.user.deleteDelete userdestructive
  • cato_networks.user.listList userread
  • cato_networks.user.updateUpdate userwrite
  • cato_networks.user.disableDisable userdestructive
  • cato_networks.user.enableEnable userwrite
  • and 3 more in this area
BusinessPlatform8
  • cato_networks.business_platform_account.count_by_planCount by plan business platform accountread
  • cato_networks.business_platform_account.listList business platform accountread
  • cato_networks.business_platform_partner.listList business platform partnerread
  • cato_networks.business_platform_trial_account.createCreate business platform trial accountwrite
  • cato_networks.business_platform_account.overviewOverview business platform accountread
  • cato_networks.business_platform_settings.getGet business platform settingsread
  • and 2 more in this area
Licensing8
  • cato_networks.licensing.getGet licensingread
  • cato_networks.licensing_commercial_license.updateUpdate licensing commercial licensewrite
  • cato_networks.licensing_managed_account_license.addAdd licensing managed account licensewrite
  • cato_networks.licensing_managed_account_license.updateUpdate licensing managed account licensewrite
  • cato_networks.licensing_managed_account_license.removeRemove licensing managed account licensedestructive
  • cato_networks.licensing_managed_account_service.disableDisable licensing managed account servicedestructive
  • and 2 more in this area
Admin7
  • cato_networks.admin.addAdd admindestructive
  • cato_networks.admin.getGet adminread
  • cato_networks.admin.removeRemove admindestructive
  • cato_networks.admin.updateUpdate admindestructive
  • cato_networks.service_principal_admin.addAdd service principal admindestructive
  • cato_networks.service_principal_admin.removeRemove service principal admindestructive
  • and 1 more in this area
ExternalAccess6
  • cato_networks.external_access_incoming_access_request.listList external access incoming access requestread
  • cato_networks.external_access_incoming_access_request.resolveResolve external access incoming access requestdestructive
  • cato_networks.external_access_partner_access.revokeRevoke external access partner accessdestructive
  • cato_networks.external_access_partner_access_request.listList external access partner access requestread
  • cato_networks.external_access_partner_access.cancelCancel external access partner accessdestructive
  • cato_networks.external_access_partner_access_request.addAdd external access partner access requestdestructive
Groups6
  • cato_networks.group.createCreate groupwrite
  • cato_networks.group.getGet groupread
  • cato_networks.group.listList groupread
  • cato_networks.group.updateUpdate groupwrite
  • cato_networks.group.deleteDelete groupdestructive
  • cato_networks.group.where_usedWhere used groupread
PopLocationMutations6
  • cato_networks.pop_location_allocated_ip.addAdd pop location allocated ipwrite
  • cato_networks.pop_location_allocated_ip.update_descriptionUpdate description pop location allocated ipwrite
  • cato_networks.pop_location_bgp_profile.addAdd pop location bgp profilewrite
  • cato_networks.pop_location_bgp_profile.updateUpdate pop location bgp profilewrite
  • cato_networks.pop_location_allocated_ip.removeRemove pop location allocated ipdestructive
  • cato_networks.pop_location_bgp_profile.removeRemove pop location bgp profiledestructive
Rbac6
  • cato_networks.rbac_permission_catalog.getGet rbac permission catalogread
  • cato_networks.rbac_role.createCreate rbac roledestructive
  • cato_networks.rbac_role.getGet rbac roleread
  • cato_networks.rbac_role.listList rbac roleread
  • cato_networks.rbac_role.deleteDelete rbac roledestructive
  • cato_networks.rbac_role.updateUpdate rbac roledestructive
XDR6
  • cato_networks.xdr_story.analyst_feedbackAnalyst feedback xdr storywrite
  • cato_networks.xdr_story.getGet xdr storyread
  • cato_networks.xdr_story.listList xdr storyread
  • cato_networks.xdr_story_comment.addAdd xdr story commentwrite
  • cato_networks.xdr_story.update_investigation_detailsUpdate investigation details xdr storywrite
  • cato_networks.xdr_story_comment.deleteDelete xdr story commentdestructive
AccountManagement5
  • cato_networks.account.addAdd accountwrite
  • cato_networks.account.disableDisable accountdestructive
  • cato_networks.account.getGet accountread
  • cato_networks.account.updateUpdate accountwrite
  • cato_networks.account.removeRemove accountdestructive
CustomAppData5
  • cato_networks.custom_application.addAdd custom applicationwrite
  • cato_networks.custom_application.getGet custom applicationread
  • cato_networks.custom_application.listList custom applicationread
  • cato_networks.custom_application.updateUpdate custom applicationwrite
  • cato_networks.custom_application.deleteDelete custom applicationdestructive
EnterpriseDirectory5
  • cato_networks.enterprise_directory_location.archiveArchive enterprise directory locationwrite
  • cato_networks.enterprise_directory_location.createCreate enterprise directory locationwrite
  • cato_networks.enterprise_directory_location.listList enterprise directory locationread
  • cato_networks.enterprise_directory_location.restoreRestore enterprise directory locationwrite
  • cato_networks.enterprise_directory_location.updateUpdate enterprise directory locationwrite
Object5
  • cato_networks.object_global_ip_range.getGet object global ip rangeread
  • cato_networks.object_global_ip_range.listList object global ip rangeread
  • cato_networks.object_global_ip_range_bulk.createCreate object global ip range bulkwrite
  • cato_networks.object_global_ip_range_bulk.updateUpdate object global ip range bulkwrite
  • cato_networks.object_global_ip_range_bulk.deleteDelete object global ip range bulkdestructive
PrivateApplication5
  • cato_networks.private_application.createCreate private applicationwrite
  • cato_networks.private_application.getGet private applicationread
  • cato_networks.private_application.listList private applicationread
  • cato_networks.private_application.updateUpdate private applicationwrite
  • cato_networks.private_application.deleteDelete private applicationdestructive
AiSecurity4
  • cato_networks.ai_security_agent_event.getGet ai security agent eventread
  • cato_networks.ai_security_agent_session.getGet ai security agent sessionread
  • cato_networks.ai_security_app_invocation.getGet ai security app invocationread
  • cato_networks.ai_security_end_user_session_conversation.getGet ai security end user session conversationread
PopLocations4
  • cato_networks.pop_location.listList pop locationread
  • cato_networks.pop_location_allocated_ip.listList pop location allocated ipread
  • cato_networks.pop_location_bgp_profile.getGet pop location bgp profileread
  • cato_networks.pop_location_bgp_profile.listList pop location bgp profileread
Catalogs3
  • cato_networks.catalog_application.getGet catalog applicationread
  • cato_networks.catalog_application.listList catalog applicationread
  • cato_networks.catalog_content_type_group.listList catalog content type groupread
ConnectivitySnapshots3
  • cato_networks.connectivity_snapshot_ztna_app_connector.summarySummary connectivity snapshot ztna app connectorread
  • cato_networks.connectivity_snapshot_ztna_app_connector_group_snapshot.getGet connectivity snapshot ztna app connector group snapshotread
  • cato_networks.connectivity_snapshot_ztna_app_connector_snapshot.getGet connectivity snapshot ztna app connector snapshotread
Hardware3
  • cato_networks.hardware.count_by_statusCount by status hardwareread
  • cato_networks.hardware.listList hardwareread
  • cato_networks.hardware_shipping.updateUpdate hardware shippingwrite
Sandbox3
  • cato_networks.sandbox_file.uploadUpload sandbox filewrite
  • cato_networks.sandbox_report.deleteDelete sandbox reportdestructive
  • cato_networks.sandbox_report.listList sandbox reportread
HardwareManagement2
  • cato_networks.hardware_management_socket_inventory.distributionDistribution hardware management socket inventoryread
  • cato_networks.hardware_management_socket_inventory.listList hardware management socket inventoryread
AccountBySubdomain1
  • cato_networks.account.get_by_subdomainGet by subdomain accountread
AccountMetrics1
  • cato_networks.account_metric.getGet account metricread
AccountRoles1
  • cato_networks.account_role.listList account roleread
AccountSnapshot1
  • cato_networks.account_snapshot.getGet account snapshotread
Admins1
  • cato_networks.admin.listList adminread
AppStats1
  • cato_networks.app_stat.queryQuery app statread
AppStatsTimeSeries1
  • cato_networks.app_stat.time_seriesTime series app statread
AuditFeed1
  • cato_networks.audit_feed.getGet audit feedread
EntityLookup1
  • cato_networks.entity.lookupLookup entityread
Events1
  • cato_networks.event.queryQuery eventread
EventsFeed1
  • cato_networks.event_feed.getGet event feedread
EventsTimeSeries1
  • cato_networks.event.time_seriesTime series eventread
RateLimit1
  • cato_networks.rate_limit.getGet rate limitread
RateLimitEstimate1
  • cato_networks.rate_limit.estimateEstimate rate limitread
ServicePrincipalAdmin1
  • cato_networks.service_principal_admin.getGet service principal adminread
SocketPortMetrics1
  • cato_networks.socket_port_metric.queryQuery socket port metricread
SocketPortMetricsTimeSeries1
  • cato_networks.socket_port_metric.time_seriesTime series socket port metricread
SubDomains1
  • cato_networks.sub_domain.listList sub domainread

This index shows a sample of each area. All 606 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Cato Networks SASE MCP server, answered.

Is there a Cato Networks SASE MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 606 Cato Networks SASE actions across policy, site, networkConfig and container, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Cato Networks SASE.

What do I need to connect Cato Networks SASE?

Cato API key. Plus your account id and your host. The free call account { op: "connections.requirements", service: "cato_networks" } lists exactly what to paste.

Can an AI agent delete or change things in Cato Networks SASE?

Only if its key allows it, and only with an explicit confirmation. 121 Cato Networks SASE actions are destructive, including delete user, delete group and add admin. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Cato Networks SASE API limit?

actionlake paces every call to the limits in the Cato Networks SASE service file: 100 calls a minute per connection. Repeated reads are answered from cache (175 Cato Networks SASE actions can be), which never reaches Cato Networks SASE.

What does a Cato Networks SASE action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (606 Cato Networks SASE actions page). Cache hits, searches, dry runs and calls Cato Networks SASE refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Cato Networks SASE API does it cover?

The Cato API GraphQL (api/v1/graphql2), schema introspected 2026-10-23 at api.catonetworks.com by default, or the base URL set when you connect. It is built from Cato Networks SASE's documentation as read on 23 October 2026. 606 actions in 47 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Cato Networks SASE data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Cato Networks SASE credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Cato Networks SASE

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Cato Networks SASE; the name is the vendor's own. Counts are from the Cato Networks SASE service file, version 1.0.0.

Give your agent Cato Networks SASE today.

Connect Cato Networks SASE freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.