Connectors · Identity & security
Censys Platform MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Censys Platform and the rest of your systems. It gives your agent 106 Censys Platform actions (74 reads, 19 writes and 13 that wait for a confirmation) and holds the Censys Platform credential itself, so the agent never does. It paces Censys Platform's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "censys_platform.tags.list", intent: "check which Censys Platform account is connected"}# List tags · read · 1 upstream call- 106actionsin one signed file
- 74readlook, never change
- 19writecreate and update
- 13wait for a yesdestructive, confirmed first
Set up
Connect Censys Platform in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Censys Platform.
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
access_tokenCensys Platform personal access token: accounts.censys.io > Account Settings > Personal Access Tokensorganization_idYour Censys Platform organization id
account { op: "connections.requirements", service: "censys_platform" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "censys_platform.tags.list" }# list tags · read · 1 upstream callcheck { action: "censys_platform.tags.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Censys Platform at a glance
- Sign-in
- Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
access_token- Setup fields
organization_id- Limits we pace to
- 25 calls a second, at most 1 at a time, per connection
- API covered
- Censys Platform API 1.0.154 (OpenAPI 3.1.0)
api.platform.censys.io - Built from
- Censys Platform's documentation, read 23 October 2026api.platform.censys.iodocs.censys.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 74 of 74 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Censys Platform up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Censys Platform.
106 actions in 42 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 74readlook, never change
- 19writecreate and update
- 13destructivewait for a confirmation
Collections
74 read · 2 write · 1 destructive
Create a collection · List collections · Run a search query within a collection · Get a collection
Attack surfaces
64 read · 1 write · 1 destructive
List attack surfaces · Search attack surface assets · Get an attack surface · Aggregate attack surface assets
Certificates
55 read · 0 write · 0 destructive
Get a certificate · Retrieve multiple certificates · Retrieve multiple certificates · Retrieve multiple certificates in PEM format
Hosts
55 read · 0 write · 0 destructive
Get a host · Retrieve multiple hosts · Retrieve multiple hosts · Get host enrichment
Tag assignments
51 read · 2 write · 2 destructive
Bulk create tag assignments · Create a tag assignment · List tag assignments · Bulk delete tag assignments
Tags
52 read · 2 write · 1 destructive
List tags · Create a tag · Update a tag · Get a tag
Censeye jobs
43 read · 1 write · 0 destructive
CensEye: Create a pivot analysis job · CensEye: List jobs · CensEye: Get job results · CensEye: Get job status
Comments
41 read · 2 write · 1 destructive
List comments · Create a comment · Update a comment · Delete a comment
34 more areas · 65 actions
- DNS resolutions 4
- Organization members 4
- Supply chain suppliers 4
- Supply chains 4
- Web properties 4
- Attack surface assets 3
- Attack surface exclusions 3
- Global search 3
- Investigation jobs 3
- Tag operations 3
- Organization credits 2
- Organization member modules 2
- Scans 2
- Supply chain risk instances 2
- Threat hunting scans 2
- User credits 2
- Attack surface risk events 1
- Audit log events 1
- Certificate host observations 1
- Collection events 1
- Host endpoint observations 1
- Host fingerprint observations 1
- Host services 1
- Host threat observations 1
- Investigation files 1
- Investigation usage 1
- Organization invitations 1
- Organizations 1
- Suppliers 1
- Supply chain risk events 1
- Supply chain risks 1
- Threat hunting 1
- Threats 1
- Web property threat observations 1
Top actions
The Censys Platform API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 14 of Censys Platform's 14 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
censys_platform.tags.listList tags | List tags. | read | crm.tag.list65 connectors |
censys_platform.organization_members.listList organization users | List organization users. | read | identity.user.list474 connectors |
censys_platform.supply_chain_suppliers.listList suppliers | List suppliers. | read | asset.supplier.list41 connectors |
censys_platform.tags.createCreate a tag | Create a tag. | write | crm.tag.create49 connectors |
censys_platform.tags.updateUpdate a tag | Update a tag. | write | crm.tag.update40 connectors |
censys_platform.tags.deleteDelete a tag | Delete a tag. | destructive | crm.tag.delete44 connectors |
censys_platform.supply_chain_suppliers.getGet supplier | Get supplier. | read | asset.supplier.get34 connectors |
censys_platform.global_search.searchRun a search query | Run a search query. | read | platform.search_result.search18 connectors |
censys_platform.audit_log_events.listList audit log events | List audit log events. | read | platform.activity_entry.list43 connectors |
censys_platform.collections.listList collections | List collections. | read | this connector |
censys_platform.collections.createCreate a collection | Create a collection. | write | this connector |
censys_platform.supply_chains.listList supply chains | List supply chains. | read | this connector |
Try it
Prompts to paste into Claude.
Each one names the Censys Platform actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Censys Platform? List every user and their role.
calls
censys_platform.organization_members.list - Writewrite
Create a tag in Censys Platform. Show me exactly what you will send before you save it.
calls
censys_platform.tags.create
Governance for Censys Platform
Destructive actions wait for a yes.
13 Censys Platform actions are destructive. These are all of them:
- Delete a tag
censys_platform.tags.delete - Delete a collection
censys_platform.collections.delete - Delete an attack surface
censys_platform.attack_surfaces.delete - Delete a tag assignment
censys_platform.tag_assignments.delete - Remove user from organization
censys_platform.organization_members.remove - Bulk delete tag assignments
censys_platform.tag_assignments.bulk_delete - Remove an asset from an attack surface
censys_platform.attack_surface_assets.remove - Remove a supplier from your supply chain
censys_platform.supply_chain_suppliers.remove - Remove an exclusion from an attack surface
censys_platform.attack_surface_exclusions.remove - Remove a user's module access
censys_platform.organization_member_modules.remove - Set a user's module role
censys_platform.organization_member_modules.set_role - Cancel a tag operation
censys_platform.tag_operations.cancel - Delete a comment
censys_platform.comments.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete a tag?
intent: the user asked me to delete a tag
account { op: "keys.create", name: "censys-platform-agent", allowed_actions: ["censys_platform.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "censys_platform.tags.delete", approver: "[email protected]" }, { match: "censys_platform.collections.delete", approver: "[email protected]" }, { match: "censys_platform.attack_surfaces.delete", approver: "[email protected]" } ]}Cost
What Censys Platform costs on actionlake.
Every Censys Platform action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Censys Platform refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 106 Censys Platform actions
- 106actions pageeach page of a long list is one call
- 74reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Censys Platform action.
106 actions by area: the id your agent calls, what it does, and its effect.
Collections7
censys_platform.collections.aggregateAggregate results for a search query within a collectionreadcensys_platform.collections.createCreate a collectionwritecensys_platform.collections.deleteDelete a collectiondestructivecensys_platform.collections.getGet a collectionreadcensys_platform.collections.listList collectionsreadcensys_platform.collections.searchRun a search query within a collectionreadcensys_platform.collections.updateUpdate a collectionwrite
Attack surfaces6
censys_platform.attack_surfaces.aggregate_assetsAggregate attack surface assetsreadcensys_platform.attack_surfaces.createCreate an attack surfacewritecensys_platform.attack_surfaces.deleteDelete an attack surfacedestructivecensys_platform.attack_surfaces.getGet an attack surfacereadcensys_platform.attack_surfaces.listList attack surfacesreadcensys_platform.attack_surfaces.search_assetsSearch attack surface assetsread
Certificates5
censys_platform.certificates.getGet a certificatereadcensys_platform.certificates.get_manyRetrieve multiple certificatesreadcensys_platform.certificates.get_many_by_postRetrieve multiple certificatesreadcensys_platform.certificates.get_many_rawRetrieve multiple certificates in PEM formatreadcensys_platform.certificates.get_many_raw_by_postRetrieve multiple certificates in PEM formatread
Hosts5
censys_platform.hosts.getGet a hostreadcensys_platform.hosts.get_enrichmentGet host enrichmentreadcensys_platform.hosts.get_manyRetrieve multiple hostsreadcensys_platform.hosts.get_many_by_postRetrieve multiple hostsreadcensys_platform.hosts.timelineGet host event historyread
Tag assignments5
censys_platform.tag_assignments.bulk_createBulk create tag assignmentswritecensys_platform.tag_assignments.bulk_deleteBulk delete tag assignmentsdestructivecensys_platform.tag_assignments.createCreate a tag assignmentwritecensys_platform.tag_assignments.deleteDelete a tag assignmentdestructivecensys_platform.tag_assignments.listList tag assignmentsread
Tags5
censys_platform.tags.createCreate a tagwritecensys_platform.tags.deleteDelete a tagdestructivecensys_platform.tags.getGet a tagreadcensys_platform.tags.listList tagsreadcensys_platform.tags.updateUpdate a tagwrite
Censeye jobs4
censys_platform.censeye_jobs.createCensEye: Create a pivot analysis jobwritecensys_platform.censeye_jobs.getCensEye: Get job statusreadcensys_platform.censeye_jobs.listCensEye: List jobsreadcensys_platform.censeye_jobs.resultsCensEye: Get job resultsread
Comments4
censys_platform.comments.createCreate a commentwritecensys_platform.comments.deleteDelete a commentdestructivecensys_platform.comments.listList commentsreadcensys_platform.comments.updateUpdate a commentwrite
DNS resolutions4
censys_platform.dns_resolutions.ip_boundsGet DNS names that resolved to an IP (aggregated bounds)readcensys_platform.dns_resolutions.ip_rangesGet DNS names that resolved to an IP (ranges)readcensys_platform.dns_resolutions.name_boundsGet DNS resolution records for a name (aggregated bounds)readcensys_platform.dns_resolutions.name_rangesGet DNS resolution records for a name (ranges)read
Organization members4
censys_platform.organization_members.credits_usageGet organization user credit usagereadcensys_platform.organization_members.listList organization usersreadcensys_platform.organization_members.removeRemove user from organizationdestructivecensys_platform.organization_members.updateUpdate a user's Platform-wide roles in an organizationwrite
Supply chain suppliers4
censys_platform.supply_chain_suppliers.addAdd suppliers to a supply chainwritecensys_platform.supply_chain_suppliers.getGet supplierreadcensys_platform.supply_chain_suppliers.listList suppliersreadcensys_platform.supply_chain_suppliers.removeRemove a supplier from your supply chaindestructive
Supply chains4
censys_platform.supply_chains.aggregate_assetsAggregate supply chain assetsreadcensys_platform.supply_chains.getGet supply chainreadcensys_platform.supply_chains.listList supply chainsreadcensys_platform.supply_chains.search_assetsSearch supply chain assetsread
Web properties4
censys_platform.web_properties.getGet a web propertyreadcensys_platform.web_properties.get_manyRetrieve multiple web propertiesreadcensys_platform.web_properties.get_many_by_postRetrieve multiple web propertiesreadcensys_platform.web_properties.timelineGet web property event historyread
Attack surface assets3
censys_platform.attack_surface_assets.addAdd assets to an attack surfacewritecensys_platform.attack_surface_assets.listList the assets of an attack surfacereadcensys_platform.attack_surface_assets.removeRemove an asset from an attack surfacedestructive
Attack surface exclusions3
censys_platform.attack_surface_exclusions.addExclude assets from an attack surfacewritecensys_platform.attack_surface_exclusions.listList the exclusions of an attack surfacereadcensys_platform.attack_surface_exclusions.removeRemove an exclusion from an attack surfacedestructive
Global search3
censys_platform.global_search.aggregateAggregate results for a search queryreadcensys_platform.global_search.convert_queriesConvert Legacy Search queries to Platform queriesreadcensys_platform.global_search.searchRun a search queryread
Investigation jobs3
censys_platform.investigation_jobs.createInvestigations: Create jobwritecensys_platform.investigation_jobs.getInvestigations: Get job statusreadcensys_platform.investigation_jobs.listInvestigations: List jobsread
Tag operations3
censys_platform.tag_operations.cancelCancel a tag operationdestructivecensys_platform.tag_operations.getGet a tag operationreadcensys_platform.tag_operations.listList tag operationsread
Organization credits2
censys_platform.organization_credits.getGet organization credit balancereadcensys_platform.organization_credits.usageGet organization credit usageread
Organization member modules2
censys_platform.organization_member_modules.removeRemove a user's module accessdestructivecensys_platform.organization_member_modules.set_roleSet a user's module roledestructive
Scans2
censys_platform.scans.getGet scan statusreadcensys_platform.scans.rescanLive Rescan: Initiate a new rescanwrite
Supply chain risk instances2
censys_platform.supply_chain_risk_instances.getGet risk instancereadcensys_platform.supply_chain_risk_instances.listList risk instancesread
Threat hunting scans2
censys_platform.threat_hunting_scans.discoveryLive Discovery: Initiate a new scanwritecensys_platform.threat_hunting_scans.getGet scan statusread
User credits2
censys_platform.user_credits.getGet Free user credit balancereadcensys_platform.user_credits.usageGet Free user credit usageread
Attack surface risk events1
censys_platform.attack_surface_risk_events.listList attack surface risk eventsread
Audit log events1
censys_platform.audit_log_events.listList audit log eventsread
Certificate host observations1
censys_platform.certificate_host_observations.listGet host history for a certificateread
Collection events1
censys_platform.collection_events.listGet a collection's eventsread
Host endpoint observations1
censys_platform.host_endpoint_observations.listGet endpoint observation history for a hostread
Host fingerprint observations1
censys_platform.host_fingerprint_observations.listGet fingerprint observation history for a hostread
Host services1
censys_platform.host_services.listGet service history for a hostread
Host threat observations1
censys_platform.host_threat_observations.listGet threat history for a hostread
Investigation files1
censys_platform.investigation_files.createInvestigations: Create file uploadwrite
Investigation usage1
censys_platform.investigation_usage.getInvestigations: Get usageread
Organization invitations1
censys_platform.organization_invitations.createInvite user to organizationwrite
Organizations1
censys_platform.organizations.getGet organization detailsread
Suppliers1
censys_platform.suppliers.searchSearch suppliersread
Supply chain risk events1
censys_platform.supply_chain_risk_events.listList risk eventsread
Supply chain risks1
censys_platform.supply_chain_risks.listList risksread
Threat hunting1
censys_platform.threat_hunting.value_countsCensEye: Retrieve value counts to discover pivotsread
Threats1
censys_platform.threats.listList active threatsread
Web property threat observations1
censys_platform.web_property_threat_observations.listGet threat history for a web propertyread
Questions
The Censys Platform MCP server, answered.
Is there a Censys Platform MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 106 Censys Platform actions across collections, attack surfaces, certificates and hosts, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Censys Platform.
What do I need to connect Censys Platform?
Censys Platform personal access token: accounts.censys.io > Account Settings > Personal Access Tokens. Plus your organization id. The free call account { op: "connections.requirements", service: "censys_platform" } lists exactly what to paste.
Can an AI agent delete or change things in Censys Platform?
Only if its key allows it, and only with an explicit confirmation. 13 Censys Platform actions are destructive, including delete a tag, delete a collection and delete an attack surface. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Censys Platform API limit?
actionlake paces every call to the limits in the Censys Platform service file: 25 calls a second, at most 1 at a time per connection. Repeated reads are answered from cache (74 Censys Platform actions can be), which never reaches Censys Platform.
What does a Censys Platform action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (106 Censys Platform actions page). Cache hits, searches, dry runs and calls Censys Platform refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Censys Platform API does it cover?
The Censys Platform API 1.0.154 (OpenAPI 3.1.0) at api.platform.censys.io. It is built from Censys Platform's documentation as read on 23 October 2026. 106 actions in 42 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Censys Platform data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Censys Platform credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Censys Platform today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
