Skip to content
actionlake
Start free

Connectors · MSP & PSA

CIPP MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to CIPP and the rest of your systems. It gives your agent 710 CIPP actions (305 reads, 268 writes and 137 that wait for a confirmation) and holds the CIPP credential itself, so the agent never does. It paces CIPP's limits and records every call.

Connect CIPP freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "cipp.tenant.list_tenants",  intent: "check which CIPP account is connected"}# List Tenants · read · 1 upstream call
  • 710actionsin one signed file
  • 305readlook, never change
  • 268writecreate and update
  • 137wait for a yesdestructive, confirmed first

Set up

Connect CIPP in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect CIPP.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_secretAPI client secret (CIPP > Settings > Integrations > CIPP-API, the secret shown once when the client is created)
    • application_idYour CIPP application id
    • cipp_urlWhere your CIPP lives: your cipp url
    • tenant_idYour CIPP tenant id
    account { op: "connections.requirements", service: "cipp" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "cipp.tenant.list_tenants" }# list tenants · read · 1 upstream callcheck { action: "cipp.identity.add_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

CIPP at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_secret
Setup fields
application_idcipp_urltenant_id
Limits we pace to
100 calls per 10 seconds, per connection
API covered
CIPP-API 11.0.2 (OpenAPI 3.1, commit b5fd25b), at your CIPP instance's API base URL, which you enter when connecting (path /api)
Built from
CIPP's documentation, read 6 October 2026OpenAPI spec (GitHub)docs.cipp.app
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
302 of 305 reads, for up to an hour; a write clears what it affects
Shared entities
7, so ask can line CIPP up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in CIPP.

710 actions in 8 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 305readlook, never change
  • 268writecreate and update
  • 137destructivewait for a confirmation

  1. Tenant

    147

    71 read · 50 write · 26 destructive

    Add Domain · List Domains · List Conditional Access Policies · Add CA Policy

  2. Exchange

    133

    49 read · 61 write · 23 destructive

    Run Groups Delete · List Mailboxes · Add Shared Mailbox · List Mailbox Rules

  3. Platform

    126

    56 read · 50 write · 20 destructive

    List Scheduled Items · Add Scheduled Item · List Logs · Remove Scheduled Item

  4. Identity

    99

    41 read · 32 write · 26 destructive

    List Users · List Groups · Add User · Add Group

  5. Endpoint

    85

    33 read · 36 write · 16 destructive

    List Devices · List Device Details · List Apps · List Intune Policy

  6. Sharepoint

    54

    28 read · 15 write · 11 destructive

    List Sites · Add Site · Delete Sharepoint Site · Add Site Bulk

  7. Security

    49

    18 read · 21 write · 10 destructive

    Run Alerts List · Run Incidents List · Run Set Security Incident · Run Set Security Alert

  8. Tools

    17

    9 read · 3 write · 5 destructive

    List Custom Scripts · Add Custom Script · List Breaches Tenant · Remove Custom Script

Top actions

The CIPP API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 64 of CIPP's 66 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
cipp.identity.list_usersList UsersLists Entra ID users for a tenant with license and sign-in details, or retrieves a specific user by ID.readidentity.user.list474 connectors
cipp.identity.list_groupsList GroupsLists Entra ID groups for a tenant, including group members and owners.readidentity.group.list262 connectors
cipp.identity.add_userAdd UserCIPP's `AddUser` endpoint (Identity > Administration > Users).writeidentity.user.create262 connectors
cipp.identity.add_groupAdd GroupCIPP's `AddGroup` endpoint (Identity > Administration > Groups).writeidentity.group.create205 connectors
cipp.endpoint.list_devicesList DevicesLists Intune-managed devices for a tenant, including device compliance and configuration status.readdevice.endpoint.list65 connectors
cipp.identity.remove_userRemove UserCIPP's `RemoveUser` endpoint (Identity > Administration > Users).destructiveidentity.user.delete253 connectors
cipp.identity.list_rolesList RolesLists a tenant's Entra ID role definitions along with the active members of each, via the unified RBAC API.readidentity.role.list184 connectors
cipp.exchange.list_mailboxesList MailboxesLists Exchange Online mailboxes for a tenant.readcomm.mailbox.list18 connectors
cipp.endpoint.list_device_detailsList Device DetailsRetrieves detailed information about a specific Intune-managed device by ID, name, or serial number.readdevice.endpoint.get57 connectors
cipp.identity.add_guestAdd GuestCIPP's `AddGuest` endpoint (Identity > Administration > Users).writeidentity.invitation.create41 connectors
cipp.identity.list_role_assignmentsList Role AssignmentsReturns one row per principal, role and scope showing whether the assignment is Permanent (active with no end date), Active (time-bound),…readidentity.role_assignment.list41 connectors
cipp.tenant.add_domainAdd DomainCIPP's `AddDomain` endpoint (Tenant > Administration > Domains).writeidentity.domain.create17 connectors

Try it

Prompts to paste into Claude.

Each one names the CIPP actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which CIPP devices have not checked in for a week?

    callscipp.endpoint.list_devices

  2. Writewrite

    Add User in CIPP. Show me exactly what you will send before you save it.

    callscipp.identity.add_user

  3. Across systemsread

    Which CIPP companies have invoices in NetSuite, and how many each?

    callscipp.tenant.list_tenantsnetsuite.views.invoices

Across your systems

CIPP, joined to the rest of your business.

One ask fetches from CIPP and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which CIPP companies have invoices in NetSuite, and how many each?

    cipp.tenant.list_tenants + netsuite.views.invoices, on crm.company · NetSuite

  • Which CIPP companies have tickets in HubSpot CRM, and how many each?

    cipp.tenant.list_tenants + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorsidentity.user 517identity.group 239crm.company 227device.endpoint 69platform.tenant 67comm.mailbox 14content.site 10
ask
ask {  intent: "which CIPP companies have invoices in NetSuite, and how many each",  steps: [    { action: "cipp.tenant.list_tenants", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for CIPP

Destructive actions wait for a yes.

137 CIPP actions are destructive. The first 10:

  • Remove Usercipp.identity.remove_user
  • Run Groups Deletecipp.exchange.exec_groups_delete
  • Remove CA Policycipp.tenant.remove_ca_policy
  • Run Revoke Sessionscipp.identity.exec_revoke_sessions
  • Delete Sharepoint Sitecipp.sharepoint.delete_sharepoint_site
  • Remove Appcipp.endpoint.remove_app
  • Remove Policycipp.endpoint.remove_policy
  • Run Remove Mailbox Rulecipp.exchange.exec_remove_mailbox_rule
  • Remove AP Devicecipp.endpoint.remove_ap_device
  • Remove Scheduled Itemcipp.platform.remove_scheduled_item

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

docipp.identity.remove_userconfirm_policy: human

Remove User?

intent: the user asked me to remove User

run suspended · waiting for a named person · key cipp-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "cipp-agent",  allowed_actions: ["cipp.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "cipp.identity.remove_user", approver: "[email protected]" },    { match: "cipp.exchange.exec_groups_delete", approver: "[email protected]" },    { match: "cipp.tenant.remove_ca_policy", approver: "[email protected]" }  ]}
Illustrative. Scoped to CIPP only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What CIPP costs on actionlake.

Every CIPP action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call CIPP refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 710 CIPP actions
  • 710actions pageeach page of a long list is one call
  • 302reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every CIPP action.

710 actions by area: the id your agent calls, what it does, and its effect.

Tenant147
  • cipp.tenant.add_ca_policyAdd CA Policywrite
  • cipp.tenant.add_domainAdd Domainwrite
  • cipp.tenant.list_conditional_access_policiesList Conditional Access Policiesread
  • cipp.tenant.list_domainsList Domainsread
  • cipp.tenant.add_alertAdd Alertwrite
  • cipp.tenant.add_baselineAdd Baselinewrite
  • and 141 more in this area
Exchange133
  • cipp.exchange.add_shared_mailboxAdd Shared Mailboxwrite
  • cipp.exchange.exec_groups_deleteRun Groups Deletedestructive
  • cipp.exchange.list_mailbox_rulesList Mailbox Rulesread
  • cipp.exchange.list_mailboxesList Mailboxesread
  • cipp.exchange.add_connection_filterAdd Connection Filterwrite
  • cipp.exchange.add_connection_filter_templateAdd Connection Filter Templatewrite
  • and 127 more in this area
Platform126
  • cipp.platform.add_scheduled_itemAdd Scheduled Itemwrite
  • cipp.platform.list_logsList Logsread
  • cipp.platform.list_scheduled_itemsList Scheduled Itemsread
  • cipp.platform.remove_scheduled_itemRemove Scheduled Itemdestructive
  • cipp.platform.exec_access_checksRun Access Checkswrite
  • cipp.platform.exec_add_alertRun Add Alertwrite
  • and 120 more in this area
Identity99
  • cipp.identity.add_groupAdd Groupwrite
  • cipp.identity.add_userAdd Userwrite
  • cipp.identity.list_groupsList Groupsread
  • cipp.identity.list_usersList Usersread
  • cipp.identity.add_group_teamAdd Group Teamwrite
  • cipp.identity.add_group_templateAdd Group Templatewrite
  • and 93 more in this area
Endpoint85
  • cipp.endpoint.list_appsList Appsread
  • cipp.endpoint.list_device_detailsList Device Detailsread
  • cipp.endpoint.list_devicesList Devicesread
  • cipp.endpoint.list_intune_policyList Intune Policyread
  • cipp.endpoint.add_ap_deviceAdd AP Devicewrite
  • cipp.endpoint.add_app_templateAdd App Templatewrite
  • and 79 more in this area
Sharepoint54
  • cipp.sharepoint.add_siteAdd Sitewrite
  • cipp.sharepoint.add_site_bulkAdd Site Bulkwrite
  • cipp.sharepoint.delete_sharepoint_siteDelete Sharepoint Sitedestructive
  • cipp.sharepoint.list_sitesList Sitesread
  • cipp.sharepoint.add_teamAdd Teamwrite
  • cipp.sharepoint.exec_bulk_remove_sharing_linksRun Bulk Remove Sharing Linksdestructive
  • and 48 more in this area
Security49
  • cipp.security.exec_alerts_listRun Alerts Listread
  • cipp.security.exec_incidents_listRun Incidents Listread
  • cipp.security.exec_set_security_alertRun Set Security Alertwrite
  • cipp.security.exec_set_security_incidentRun Set Security Incidentwrite
  • cipp.security.add_dlp_compliance_policyAdd Dlp Compliance Policywrite
  • cipp.security.add_dlp_compliance_policy_templateAdd Dlp Compliance Policy Templatewrite
  • and 43 more in this area
Tools17
  • cipp.tools.add_custom_scriptAdd Custom Scriptwrite
  • cipp.tools.list_breaches_tenantList Breaches Tenantread
  • cipp.tools.list_custom_scriptsList Custom Scriptsread
  • cipp.tools.remove_custom_scriptRemove Custom Scriptdestructive
  • cipp.tools.exec_breach_searchRun Breach Searchwrite
  • cipp.tools.exec_community_repoRun Community Repodestructive
  • and 11 more in this area

This index shows a sample of each area. All 710 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The CIPP MCP server, answered.

Is there a CIPP MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 710 CIPP actions across tenant, exchange, platform and identity, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by CIPP.

What do I need to connect CIPP?

API client secret (CIPP > Settings > Integrations > CIPP-API, the secret shown once when the client is created). Plus your application id, your cipp url and your tenant id. The free call account { op: "connections.requirements", service: "cipp" } lists exactly what to paste.

Can an AI agent delete or change things in CIPP?

Only if its key allows it, and only with an explicit confirmation. 137 CIPP actions are destructive, including remove User, run Groups Delete and remove CA Policy. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my CIPP API limit?

actionlake paces every call to the limits in the CIPP service file: 100 calls per 10 seconds per connection. Repeated reads are answered from cache (302 CIPP actions can be), which never reaches CIPP.

What does a CIPP action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (710 CIPP actions page). Cache hits, searches, dry runs and calls CIPP refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which CIPP API does it cover?

The CIPP-API 11.0.2 (OpenAPI 3.1, commit b5fd25b) at your CIPP instance's API base URL, which you enter when connecting (path /api). It is built from CIPP's documentation as read on 6 October 2026. 710 actions in 8 areas, each one in the signed service file (version 1.0.0).

Can I combine CIPP with my other systems?

Yes. ask joins CIPP to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. CIPP maps crm.company, which 227 other connectors also map.

Does actionlake keep my CIPP data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your CIPP credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like CIPP

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by CIPP; the name is the vendor's own. Counts are from the CIPP service file, version 1.0.0.

Give your agent CIPP today.

Connect CIPP freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.