--- title: "Cato Networks SASE MCP server for AI agents - actionlake" description: "Give Claude 606 Cato Networks SASE actions through one MCP server: policy, site. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/cato-networks-sase updated: 2026-10-23 --- Connectors · MSP & PSA # Cato Networks SASE MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Cato Networks SASE and the rest of your systems. It gives your agent 606 Cato Networks SASE actions (185 reads, 300 writes and 121 that wait for a confirmation) and holds the Cato Networks SASE credential itself, so the agent never does. It paces Cato Networks SASE's limits and records every call. [Connect Cato Networks SASE free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "cato_networks.user.list", intent: "check which Cato Networks SASE account is connected" } # List user · read · 1 upstream call ``` - 606 actions in one signed file - 185 read look, never change - 300 write create and update - 121 wait for a yes destructive, confirmed first Set up ## Connect Cato Networks SASE in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Cato Networks SASE. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` Cato API key - `account_id` Your Cato Networks SASE account id - `host` Where your Cato Networks SASE lives: your host ``` account { op: "connections.requirements", service: "cato_networks" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "cato_networks.user.list" } # list user · read · 1 upstream call check { action: "cato_networks.user.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Cato Networks SASE at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Setup fields** `account_id` `host` **Limits we pace to** 100 calls a minute, per connection **API covered** Cato API GraphQL (api/v1/graphql2), schema introspected 2026-10-23`api.catonetworks.com` **Built from** Cato Networks SASE's documentation, read 23 October 2026[api.catonetworks.com](https://api.catonetworks.com/documentation/) [api.catonetworks.com](https://api.catonetworks.com/api/v1/graphql2) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 175 of 185 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Cato Networks SASE up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Cato Networks SASE. 606 actions in 47 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **185** read look, never change - **300** write create and update - **121** destructive wait for a confirmation 1. ### Policy 269 39 read · 171 write · 59 destructive Get policy internet firewall · Get policy wan firewall · Create policy anti malware file hash revision · List policy anti malware file hash revision 2. ### Site 89 28 read · 42 write · 19 destructive List site network range · List site available version · Add site bgp peer · List site bgp peer 3. ### NetworkConfig 37 13 read · 18 write · 6 destructive Create network config dhcp option · List network config dhcp option · Create network config dhcp relay group · List network config dhcp relay group 4. ### Container 24 9 read · 12 write · 3 destructive List container · Create from list container fqdn · Create from url container fqdn · Search container fqdn 5. ### Notification 19 9 read · 7 write · 3 destructive List notification integration reference body template · Create notification integration webhook · List notification integration webhook · Test notification integration webhook 6. ### Posture 18 9 read · 9 write · 0 destructive List posture account summary · List posture category · Add posture check comment · List posture check result 7. ### ZtnaAppConnector 13 4 read · 6 write · 3 destructive Add ztna app connector · List ztna app connector · Add ztna app connector connectors configuration · List ztna app connector group 8. ### Devices 10 10 read · 0 write · 0 destructive List device · Csv export device · Csv export status device · Get device attribute category **39 more areas · 127 actions** - User **9** - BusinessPlatform **8** - Licensing **8** - Admin **7** - ExternalAccess **6** - Groups **6** - PopLocationMutations **6** - Rbac **6** - XDR **6** - AccountManagement **5** - CustomAppData **5** - EnterpriseDirectory **5** - Object **5** - PrivateApplication **5** - AiSecurity **4** - PopLocations **4** - Catalogs **3** - ConnectivitySnapshots **3** - Hardware **3** - Sandbox **3** - HardwareManagement **2** - AccountBySubdomain **1** - AccountMetrics **1** - AccountRoles **1** - AccountSnapshot **1** - Admins **1** - AppStats **1** - AppStatsTimeSeries **1** - AuditFeed **1** - EntityLookup **1** - Events **1** - EventsFeed **1** - EventsTimeSeries **1** - RateLimit **1** - RateLimitEstimate **1** - ServicePrincipalAdmin **1** - SocketPortMetrics **1** - SocketPortMetricsTimeSeries **1** - SubDomains **1** Top actions ## The Cato Networks SASE API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 12 of Cato Networks SASE's 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `cato_networks.user.list` List user | The userList query retrieves a paginated list of the users. Filtering and sorting can be applied. | read | `identity.user.list` 474 connectors | | `cato_networks.group.list` List group | Get a list of groups, with optional filters and sorting. This query only returns basic information for each group (e.g. name, ID). To view full configuration… | read | `identity.group.list` 262 connectors | | `cato_networks.user.create` Create user | Creates a new manual user. | write | `identity.user.create` 262 connectors | | `cato_networks.group.create` Create group | Create a new group | write | `identity.group.create` 205 connectors | | `cato_networks.user.update` Update user | Updates an existing manual user. | write | `identity.user.update` 280 connectors | | `cato_networks.user.delete` Delete user | Deletes one or more users from the account. If unable to delete a user in the request, no users are deleted. | destructive | `identity.user.delete` 253 connectors | | `cato_networks.rbac_role.list` List rbac role | List the predefined roles and account-owned custom roles available to the account. | read | `identity.role.list` 184 connectors | | `cato_networks.device.list` List device | List device. | read | `device.endpoint.list` 65 connectors | | `cato_networks.rbac_role.get` Get rbac role | Fetch a single role by its unique identifier. Returns null when no role with that id exists in the account's scope. | read | `identity.role.get` 127 connectors | | `cato_networks.admin.list` List admin | List admin. | read | this connector | | `cato_networks.entity.lookup` Lookup entity | Lookup entities with a specific type, potentially filtered and paged | read | this connector | | `cato_networks.xdr_story.list` List xdr story | Define the paging, sort, and filter arguments to define the XDR stories that are returned in the query | read | this connector | Try it ## Prompts to paste into Claude. Each one names the Cato Networks SASE actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Cato Networks SASE? List every user and their role. calls `cato_networks.user.list` 2. Write write Create user in Cato Networks SASE. Show me exactly what you will send before you save it. calls `cato_networks.user.create` Governance for Cato Networks SASE ## Destructive actions wait for a yes. 121 Cato Networks SASE actions are destructive. The first 10: - Delete user `cato_networks.user.delete` - Delete group `cato_networks.group.delete` - Add admin `cato_networks.admin.add` - Remove site `cato_networks.site.remove` - Remove admin `cato_networks.admin.remove` - Update admin `cato_networks.admin.update` - Disable user `cato_networks.user.disable` - Remove account `cato_networks.account.remove` - Update site ha `cato_networks.site_ha.update` - Disable account `cato_networks.account.disable` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do cato_networks.user.delete confirm_policy: **human** Delete user? **intent:** the user asked me to delete user run suspended · waiting for a named person · key _cato-networks-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "cato-networks-agent", allowed_actions: ["cato_networks.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "cato_networks.user.delete", approver: "lead@example.com" }, { match: "cato_networks.group.delete", approver: "lead@example.com" }, { match: "cato_networks.admin.add", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Cato Networks SASE only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Cato Networks SASE costs on actionlake. Every Cato Networks SASE action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Cato Networks SASE refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 606 Cato Networks SASE actions - 606 actions page each page of a long list is one call - 175 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Cato Networks SASE action. 606 actions by area: the id your agent calls, what it does, and its effect. **Policy 269** - `cato_networks.policy_anti_malware_file_hash_revision.create` Create policy anti malware file hash revision write - `cato_networks.policy_anti_malware_file_hash_revision.list` List policy anti malware file hash revision read - `cato_networks.policy_internet_firewall.get` Get policy internet firewall read - `cato_networks.policy_wan_firewall.get` Get policy wan firewall read - `cato_networks.policy_anti_malware_file_hash.get` Get policy anti malware file hash read - `cato_networks.policy_anti_malware_file_hash.update` Update policy anti malware file hash write - and 263 more in this area **Site 89** - `cato_networks.site_available_version.list` List site available version read - `cato_networks.site_bgp_peer.add` Add site bgp peer write - `cato_networks.site_bgp_peer.list` List site bgp peer read - `cato_networks.site_network_range.list` List site network range read - `cato_networks.site.remove` Remove site destructive - `cato_networks.site_backhauling.get` Get site backhauling read - and 83 more in this area **NetworkConfig 37** - `cato_networks.network_config_dhcp_option.create` Create network config dhcp option write - `cato_networks.network_config_dhcp_option.list` List network config dhcp option read - `cato_networks.network_config_dhcp_relay_group.create` Create network config dhcp relay group write - `cato_networks.network_config_dhcp_relay_group.list` List network config dhcp relay group read - `cato_networks.network_config_dhcp_option.delete` Delete network config dhcp option destructive - `cato_networks.network_config_dhcp_option.get` Get network config dhcp option read - and 31 more in this area **Container 24** - `cato_networks.container.list` List container read - `cato_networks.container_fqdn.create_from_list` Create from list container fqdn write - `cato_networks.container_fqdn.create_from_url` Create from url container fqdn write - `cato_networks.container_fqdn.search` Search container fqdn read - `cato_networks.container.delete` Delete container destructive - `cato_networks.container_fqdn.download_file` Download file container fqdn read - and 18 more in this area **Notification 19** - `cato_networks.notification_integration_reference_body_template.list` List notification integration reference body template read - `cato_networks.notification_integration_webhook.create` Create notification integration webhook write - `cato_networks.notification_integration_webhook.list` List notification integration webhook read - `cato_networks.notification_integration_webhook.test` Test notification integration webhook write - `cato_networks.notification_integration_reference_body_template.get` Get notification integration reference body template read - `cato_networks.notification_integration_webhook.delete` Delete notification integration webhook destructive - and 13 more in this area **Posture 18** - `cato_networks.posture_account_summary.list` List posture account summary read - `cato_networks.posture_category.list` List posture category read - `cato_networks.posture_check_comment.add` Add posture check comment write - `cato_networks.posture_check_result.list` List posture check result read - `cato_networks.posture_check.mute` Mute posture check write - `cato_networks.posture_check.reevaluate` Reevaluate posture check write - and 12 more in this area **ZtnaAppConnector 13** - `cato_networks.ztna_app_connector.add` Add ztna app connector write - `cato_networks.ztna_app_connector.list` List ztna app connector read - `cato_networks.ztna_app_connector_connectors_configuration.add` Add ztna app connector connectors configuration write - `cato_networks.ztna_app_connector_group.list` List ztna app connector group read - `cato_networks.ztna_app_connector.get` Get ztna app connector read - `cato_networks.ztna_app_connector.remove` Remove ztna app connector destructive - and 7 more in this area **Devices 10** - `cato_networks.device.csv_export` Csv export device read - `cato_networks.device.csv_export_status` Csv export status device read - `cato_networks.device.list` List device read - `cato_networks.device_attribute_category.get` Get device attribute category read - `cato_networks.device_attribute_compliance.get` Get device attribute compliance read - `cato_networks.device_attribute_manufacturer.get` Get device attribute manufacturer read - and 4 more in this area **User 9** - `cato_networks.user.create` Create user write - `cato_networks.user.delete` Delete user destructive - `cato_networks.user.list` List user read - `cato_networks.user.update` Update user write - `cato_networks.user.disable` Disable user destructive - `cato_networks.user.enable` Enable user write - and 3 more in this area **BusinessPlatform 8** - `cato_networks.business_platform_account.count_by_plan` Count by plan business platform account read - `cato_networks.business_platform_account.list` List business platform account read - `cato_networks.business_platform_partner.list` List business platform partner read - `cato_networks.business_platform_trial_account.create` Create business platform trial account write - `cato_networks.business_platform_account.overview` Overview business platform account read - `cato_networks.business_platform_settings.get` Get business platform settings read - and 2 more in this area **Licensing 8** - `cato_networks.licensing.get` Get licensing read - `cato_networks.licensing_commercial_license.update` Update licensing commercial license write - `cato_networks.licensing_managed_account_license.add` Add licensing managed account license write - `cato_networks.licensing_managed_account_license.update` Update licensing managed account license write - `cato_networks.licensing_managed_account_license.remove` Remove licensing managed account license destructive - `cato_networks.licensing_managed_account_service.disable` Disable licensing managed account service destructive - and 2 more in this area **Admin 7** - `cato_networks.admin.add` Add admin destructive - `cato_networks.admin.get` Get admin read - `cato_networks.admin.remove` Remove admin destructive - `cato_networks.admin.update` Update admin destructive - `cato_networks.service_principal_admin.add` Add service principal admin destructive - `cato_networks.service_principal_admin.remove` Remove service principal admin destructive - and 1 more in this area **ExternalAccess 6** - `cato_networks.external_access_incoming_access_request.list` List external access incoming access request read - `cato_networks.external_access_incoming_access_request.resolve` Resolve external access incoming access request destructive - `cato_networks.external_access_partner_access.revoke` Revoke external access partner access destructive - `cato_networks.external_access_partner_access_request.list` List external access partner access request read - `cato_networks.external_access_partner_access.cancel` Cancel external access partner access destructive - `cato_networks.external_access_partner_access_request.add` Add external access partner access request destructive **Groups 6** - `cato_networks.group.create` Create group write - `cato_networks.group.get` Get group read - `cato_networks.group.list` List group read - `cato_networks.group.update` Update group write - `cato_networks.group.delete` Delete group destructive - `cato_networks.group.where_used` Where used group read **PopLocationMutations 6** - `cato_networks.pop_location_allocated_ip.add` Add pop location allocated ip write - `cato_networks.pop_location_allocated_ip.update_description` Update description pop location allocated ip write - `cato_networks.pop_location_bgp_profile.add` Add pop location bgp profile write - `cato_networks.pop_location_bgp_profile.update` Update pop location bgp profile write - `cato_networks.pop_location_allocated_ip.remove` Remove pop location allocated ip destructive - `cato_networks.pop_location_bgp_profile.remove` Remove pop location bgp profile destructive **Rbac 6** - `cato_networks.rbac_permission_catalog.get` Get rbac permission catalog read - `cato_networks.rbac_role.create` Create rbac role destructive - `cato_networks.rbac_role.get` Get rbac role read - `cato_networks.rbac_role.list` List rbac role read - `cato_networks.rbac_role.delete` Delete rbac role destructive - `cato_networks.rbac_role.update` Update rbac role destructive **XDR 6** - `cato_networks.xdr_story.analyst_feedback` Analyst feedback xdr story write - `cato_networks.xdr_story.get` Get xdr story read - `cato_networks.xdr_story.list` List xdr story read - `cato_networks.xdr_story_comment.add` Add xdr story comment write - `cato_networks.xdr_story.update_investigation_details` Update investigation details xdr story write - `cato_networks.xdr_story_comment.delete` Delete xdr story comment destructive **AccountManagement 5** - `cato_networks.account.add` Add account write - `cato_networks.account.disable` Disable account destructive - `cato_networks.account.get` Get account read - `cato_networks.account.update` Update account write - `cato_networks.account.remove` Remove account destructive **CustomAppData 5** - `cato_networks.custom_application.add` Add custom application write - `cato_networks.custom_application.get` Get custom application read - `cato_networks.custom_application.list` List custom application read - `cato_networks.custom_application.update` Update custom application write - `cato_networks.custom_application.delete` Delete custom application destructive **EnterpriseDirectory 5** - `cato_networks.enterprise_directory_location.archive` Archive enterprise directory location write - `cato_networks.enterprise_directory_location.create` Create enterprise directory location write - `cato_networks.enterprise_directory_location.list` List enterprise directory location read - `cato_networks.enterprise_directory_location.restore` Restore enterprise directory location write - `cato_networks.enterprise_directory_location.update` Update enterprise directory location write **Object 5** - `cato_networks.object_global_ip_range.get` Get object global ip range read - `cato_networks.object_global_ip_range.list` List object global ip range read - `cato_networks.object_global_ip_range_bulk.create` Create object global ip range bulk write - `cato_networks.object_global_ip_range_bulk.update` Update object global ip range bulk write - `cato_networks.object_global_ip_range_bulk.delete` Delete object global ip range bulk destructive **PrivateApplication 5** - `cato_networks.private_application.create` Create private application write - `cato_networks.private_application.get` Get private application read - `cato_networks.private_application.list` List private application read - `cato_networks.private_application.update` Update private application write - `cato_networks.private_application.delete` Delete private application destructive **AiSecurity 4** - `cato_networks.ai_security_agent_event.get` Get ai security agent event read - `cato_networks.ai_security_agent_session.get` Get ai security agent session read - `cato_networks.ai_security_app_invocation.get` Get ai security app invocation read - `cato_networks.ai_security_end_user_session_conversation.get` Get ai security end user session conversation read **PopLocations 4** - `cato_networks.pop_location.list` List pop location read - `cato_networks.pop_location_allocated_ip.list` List pop location allocated ip read - `cato_networks.pop_location_bgp_profile.get` Get pop location bgp profile read - `cato_networks.pop_location_bgp_profile.list` List pop location bgp profile read **Catalogs 3** - `cato_networks.catalog_application.get` Get catalog application read - `cato_networks.catalog_application.list` List catalog application read - `cato_networks.catalog_content_type_group.list` List catalog content type group read **ConnectivitySnapshots 3** - `cato_networks.connectivity_snapshot_ztna_app_connector.summary` Summary connectivity snapshot ztna app connector read - `cato_networks.connectivity_snapshot_ztna_app_connector_group_snapshot.get` Get connectivity snapshot ztna app connector group snapshot read - `cato_networks.connectivity_snapshot_ztna_app_connector_snapshot.get` Get connectivity snapshot ztna app connector snapshot read **Hardware 3** - `cato_networks.hardware.count_by_status` Count by status hardware read - `cato_networks.hardware.list` List hardware read - `cato_networks.hardware_shipping.update` Update hardware shipping write **Sandbox 3** - `cato_networks.sandbox_file.upload` Upload sandbox file write - `cato_networks.sandbox_report.delete` Delete sandbox report destructive - `cato_networks.sandbox_report.list` List sandbox report read **HardwareManagement 2** - `cato_networks.hardware_management_socket_inventory.distribution` Distribution hardware management socket inventory read - `cato_networks.hardware_management_socket_inventory.list` List hardware management socket inventory read **AccountBySubdomain 1** - `cato_networks.account.get_by_subdomain` Get by subdomain account read **AccountMetrics 1** - `cato_networks.account_metric.get` Get account metric read **AccountRoles 1** - `cato_networks.account_role.list` List account role read **AccountSnapshot 1** - `cato_networks.account_snapshot.get` Get account snapshot read **Admins 1** - `cato_networks.admin.list` List admin read **AppStats 1** - `cato_networks.app_stat.query` Query app stat read **AppStatsTimeSeries 1** - `cato_networks.app_stat.time_series` Time series app stat read **AuditFeed 1** - `cato_networks.audit_feed.get` Get audit feed read **EntityLookup 1** - `cato_networks.entity.lookup` Lookup entity read **Events 1** - `cato_networks.event.query` Query event read **EventsFeed 1** - `cato_networks.event_feed.get` Get event feed read **EventsTimeSeries 1** - `cato_networks.event.time_series` Time series event read **RateLimit 1** - `cato_networks.rate_limit.get` Get rate limit read **RateLimitEstimate 1** - `cato_networks.rate_limit.estimate` Estimate rate limit read **ServicePrincipalAdmin 1** - `cato_networks.service_principal_admin.get` Get service principal admin read **SocketPortMetrics 1** - `cato_networks.socket_port_metric.query` Query socket port metric read **SocketPortMetricsTimeSeries 1** - `cato_networks.socket_port_metric.time_series` Time series socket port metric read **SubDomains 1** - `cato_networks.sub_domain.list` List sub domain read This index shows a sample of each area. All 606 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Cato Networks SASE MCP server, answered. **Is there a Cato Networks SASE MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 606 Cato Networks SASE actions across policy, site, networkConfig and container, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Cato Networks SASE. **What do I need to connect Cato Networks SASE?** Cato API key. Plus your account id and your host. The free call account { op: "connections.requirements", service: "cato_networks" } lists exactly what to paste. **Can an AI agent delete or change things in Cato Networks SASE?** Only if its key allows it, and only with an explicit confirmation. 121 Cato Networks SASE actions are destructive, including delete user, delete group and add admin. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Cato Networks SASE API limit?** actionlake paces every call to the limits in the Cato Networks SASE service file: 100 calls a minute per connection. Repeated reads are answered from cache (175 Cato Networks SASE actions can be), which never reaches Cato Networks SASE. **What does a Cato Networks SASE action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (606 Cato Networks SASE actions page). Cache hits, searches, dry runs and calls Cato Networks SASE refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Cato Networks SASE API does it cover?** The Cato API GraphQL (api/v1/graphql2), schema introspected 2026-10-23 at api.catonetworks.com by default, or the base URL set when you connect. It is built from Cato Networks SASE's documentation as read on 23 October 2026. 606 actions in 47 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Cato Networks SASE data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Cato Networks SASE credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Cato Networks SASE Shares the most action names with - [Domotz 12](https://actionlake.com/connectors/domotz) - [Commvault Cloud 11](https://actionlake.com/connectors/commvault-cloud) - [Delinea Secret Server 11](https://actionlake.com/connectors/delinea-secret-server) - [3CX 9](https://actionlake.com/connectors/3cx) - [Site24x7 9](https://actionlake.com/connectors/site24x7) - [Action1 7](https://actionlake.com/connectors/action1) Joins with, on shared entities - [Slack 2](https://actionlake.com/connectors/slack) - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [ServiceNow 2](https://actionlake.com/connectors/servicenow) - [Genesys Cloud CX 2](https://actionlake.com/connectors/genesys-cloud-cx) - [Rubrik Security Cloud 2](https://actionlake.com/connectors/rubrik-security-cloud) - [Cloudflare 2](https://actionlake.com/connectors/cloudflare) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Cato Networks SASE; the name is the vendor's own. Counts are from the Cato Networks SASE service file, version 1.0.0. ## Give your agent Cato Networks SASE today. [Connect Cato Networks SASE free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/cato-networks-sase More: https://actionlake.com/llms.txt