Connectors · Identity & security
ConductorOne MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to ConductorOne and the rest of your systems. It gives your agent 833 ConductorOne actions (404 reads, 295 writes and 134 that wait for a confirmation) and holds the ConductorOne credential itself, so the agent never does. It paces ConductorOne's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "conductorone.user.list", intent: "check which ConductorOne account is connected"}# List (User) · read · 1 upstream call- 833actionsin one signed file
- 404readlook, never change
- 295writecreate and update
- 134wait for a yesdestructive, confirmed first
Set up
Connect ConductorOne in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect ConductorOne.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idClient ID of a ConductorOne service principal (Admin > Service principals > the principal > Credentials > Create…client_secretThe credential's client secret (secret-token:...), shown once when the credential is createdtenant_hostWhere your ConductorOne lives: your tenant host
account { op: "connections.requirements", service: "conductorone" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "conductorone.user.list" }# list (user) · read · 1 upstream callcheck { action: "conductorone.apps.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
ConductorOne at a glance
- Sign-in
- OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
- You provide
client_idclient_secret- Setup fields
tenant_host- Limits we pace to
- 20 calls a second, per connection
- API covered
- C1 API (OpenAPI 3.1.0, info.version 0.1.0-alpha), at your ConductorOne instance's API base URL, which you enter when connecting
- Built from
- ConductorOne's documentation, read 23 October 2026api.conductor.onec1.ai
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 378 of 404 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line ConductorOne up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in ConductorOne.
833 actions in 162 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 404readlook, never change
- 295writecreate and update
- 134destructivewait for a confirmation
Edge
3330 read · 2 write · 1 destructive
Create (Edge) · List (Edge) · List Audit Attestation Keys (Edge) · List Audit Attestation Manifests (Edge)
Request catalog management
248 read · 10 write · 6 destructive
Add Access Entitlements (Request Catalog Management) · Add App Entitlements (Request Catalog Management) · Create (Request Catalog Management) · Create Bundle Automation (Request Catalog Management)
Role mining management
1813 read · 5 write · 0 destructive
Count Entitlement Selection Filter Attribute Values (Role Mining Management) · Create Access Profile From Cohort (Role Mining Management) · Evaluate Entitlement Selection (Role Mining Management) · List Cohort Filter Attribute Values (Role Mining Management)
App entitlements
177 read · 6 write · 4 destructive
Add Automation Exclusion (App Entitlements) · Add Manually Managed Members (App Entitlements) · Create (App Entitlements) · Create Automation (App Entitlements)
Connector
175 read · 9 write · 3 destructive
Create (Connector) · Create Delegated (Connector) · List (Connector) · Validate HTTP Connector Config (Connector)
Session policy
158 read · 4 write · 3 destructive
Create (Session Policy) · List (Session Policy) · List Assignments (Session Policy) · List User Policies (Session Policy)
SSO application
156 read · 6 write · 3 destructive
Create (SSO Application) · Create Client (SSO Application) · List (SSO Application) · List Clients (SSO Application)
Functions
146 read · 7 write · 1 destructive
Create Final Commit (Functions) · Create Function (Functions) · Create Initial Commit (Functions) · Create Tag (Functions)
154 more areas · 680 actions
- MCP server 14
- Task actions 14
- Attributes 13
- Principal 13
- Workload federation 13
- Authzen server 10
- Paper secret 10
- App entitlement owners V2 9
- App owners V2 9
- App resource owners V2 9
- Connector owners V2 9
- Fund assignment 9
- MCP access profile 9
- Spend insights 9
- Tunnel credentials 9
- Access review setup entitlement 8
- Access review template setup entitlement 8
- Automation 8
- Classifier 8
- Fund policy 8
- My fund limits 8
- Reporting 8
- Step up provider 8
- Task 8
- Xaa access profile 8
- Xaa resource server 8
- App cap 7
- App entitlement search 7
- App user owners V2 7
- Finding 7
- Fund rule 7
- Go link 7
- Request schema 7
- SSF receiver stream 7
- Subject app limit 7
- User owners V2 7
- Xaa client audience mapping 7
- Xaa scope 7
- App entitlement owners 6
- App entitlement routing rule 6
- App owners 6
- App resource owners 6
- App user 6
- Artifact 6
- Credential inventory policy 6
- Decoy 6
- Export 6
- MCP access profile tool binding 6
- MCP tool 6
- Personal device 6
- Recovery policy 6
- Sign in policy 6
- User attribute management 6
- Webhooks 6
- A2 UI 5
- Access review 5
- App entitlement user binding 5
- App resource 5
- App resource type 5
- Apps 5
- Directory 5
- Finding routing rule 5
- Finding transformation rule 5
- Hooks 5
- Local directory config 5
- MCP resource 5
- Personal client 5
- Policies 5
- Tenant auth config 5
- Tenant email provider 5
- Tool gates 5
- User 5
- Virtual MCP server 5
- Access conflict 4
- Access review template 4
- AI governance settings 4
- Classifier template 4
- External o auth client 4
- Finding settings 4
- Local user invitation 4
- Model API key 4
- Paper secret admin 4
- Vault 4
- Xaa access profile scope binding 4
- App access requests defaults 3
- App entitlement monitor binding 3
- App entitlements proxy 3
- App managed state 3
- Functions invocation 3
- Gateway key 3
- Provider credential 3
- Roles 3
- Session settings 3
- SSO settings 3
- Virtual MCP tool binding 3
- Virtual MCP toolset binding 3
- Xaa settings 3
- Agent classifier 2
- App resource search 2
- App search 2
- App usage controls 2
- Automation execution 2
- Automation execution search 2
- Automation search 2
- Connector authoring activation 2
- Contacts 2
- Identity policy tenant defaults 2
- Onboarding settings 2
- Org domain 2
- Org notification settings 2
- Request catalog search 2
- Request settings 2
- Step up transaction 2
- User developer preferences 2
- User notification settings 2
- Access review actions 1
- Access review report 1
- Account provision policy test 1
- API key search 1
- App report 1
- App report action 1
- App secret admin 1
- App secret search 1
- Attribute search 1
- Auth 1
- Automation execution actions 1
- Aws external id settings 1
- Connector catalog 1
- Decoy search 1
- Exports search 1
- External client search 1
- Feedback 1
- Finding audit 1
- Finding search 1
- Functions invocation search 1
- Functions search 1
- Go link search 1
- Hooks search 1
- Personal client search 1
- Policy search 1
- Policy validate 1
- Role mining management search 1
- Shadow MCP occurrence 1
- SSF receiver event 1
- SSF receiver event search 1
- System log 1
- Task audit 1
- Task search 1
- Terraform export 1
- Tool gates search 1
- UI conversations 1
- User search 1
- Virtual MCP server my search 1
- Webhooks search 1
Top actions
The ConductorOne API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 7 of ConductorOne's 7 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
conductorone.user.listList (User) | List users. | read | identity.user.list474 connectors |
conductorone.roles.listList (Roles) | List all roles for the current user. | read | identity.role.list184 connectors |
conductorone.apps.listList (Apps) | List all apps. | read | identity.application.list37 connectors |
conductorone.user.getGet (User) | Get a user by ID. | read | identity.user.get399 connectors |
conductorone.roles.getGet (Roles) | Get a role by id. | read | identity.role.get127 connectors |
conductorone.apps.getGet (Apps) | Get an app by ID. | read | identity.application.get33 connectors |
conductorone.auth.introspectIntrospect (Auth) | Introspect returns the current user's principle_id, user_id and a list of roles, permissions, and enabled features. | read | identity.current_user.get307 connectors |
conductorone.edge.listList (Edge) | List retrieves Edges for an app. | read | this connector |
conductorone.apps.createCreate (Apps) | Create a new manual app without a connector. | write | this connector |
conductorone.edge.createCreate (Edge) | Create mints an Edge (and one entitlement per enabled_kinds entry) for an app. The Edge starts disabled. | write | this connector |
conductorone.decoy.createCreate (Decoy) | Create mints a decoy credential and returns the one-time vending material exactly once. The Decoy id is server-set; the credential's secret cannot be… | write | this connector |
conductorone.apps.deleteDelete (Apps) | Delete an app. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the ConductorOne actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in ConductorOne? List every user and their role.
calls
conductorone.user.list - Writewrite
Create (Apps) in ConductorOne. Show me exactly what you will send before you save it.
calls
conductorone.apps.create
Governance for ConductorOne
Destructive actions wait for a yes.
134 ConductorOne actions are destructive. The first 10:
- Delete (Apps)
conductorone.apps.delete - Delete (Edge)
conductorone.edge.delete - Delete (Decoy)
conductorone.decoy.delete - Rotate (Decoy)
conductorone.decoy.rotate - Delete (Hooks)
conductorone.hooks.delete - Delete (Vault)
conductorone.vault.delete - Delete (Export)
conductorone.export.delete - Delete (App Cap)
conductorone.app_cap.delete - Delete (Go Link)
conductorone.go_link.delete - Delete (Artifact)
conductorone.artifact.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete (Apps)?
intent: the user asked me to delete (Apps)
account { op: "keys.create", name: "conductorone-agent", allowed_actions: ["conductorone.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "conductorone.apps.delete", approver: "[email protected]" }, { match: "conductorone.edge.delete", approver: "[email protected]" }, { match: "conductorone.decoy.delete", approver: "[email protected]" } ]}Cost
What ConductorOne costs on actionlake.
Every ConductorOne action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call ConductorOne refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 833 ConductorOne actions
- 833actions pageeach page of a long list is one call
- 378reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every ConductorOne action.
833 actions by area: the id your agent calls, what it does, and its effect.
Edge33
conductorone.edge.createCreate (Edge)writeconductorone.edge.listList (Edge)read- and 31 more in this area
Request catalog management24
conductorone.request_catalog_management.add_access_entitlementsAdd Access Entitlements (Request Catalog Management)writeconductorone.request_catalog_management.add_app_entitlementsAdd App Entitlements (Request Catalog Management)write- and 22 more in this area
Role mining management18
conductorone.role_mining_management.count_entitlement_selection_filter_attribute_valuesCount Entitlement Selection Filter Attribute Values (Role Mining Management)readconductorone.role_mining_management.create_access_profile_from_cohortCreate Access Profile From Cohort (Role Mining Management)write- and 16 more in this area
App entitlements17
conductorone.app_entitlements.add_automation_exclusionAdd Automation Exclusion (App Entitlements)writeconductorone.app_entitlements.add_manually_managed_membersAdd Manually Managed Members (App Entitlements)write- and 15 more in this area
Connector17
conductorone.connector.createCreate (Connector)writeconductorone.connector.create_delegatedCreate Delegated (Connector)write- and 15 more in this area
Session policy15
conductorone.session_policy.createCreate (Session Policy)writeconductorone.session_policy.listList (Session Policy)read- and 13 more in this area
SSO application15
conductorone.sso_application.createCreate (SSO Application)writeconductorone.sso_application.create_clientCreate Client (SSO Application)write- and 13 more in this area
Functions14
conductorone.functions.create_final_commitCreate Final Commit (Functions)writeconductorone.functions.create_functionCreate Function (Functions)write- and 12 more in this area
MCP server14
conductorone.mcp_server.listList (MCP Server)readconductorone.mcp_server.list_catalogList Catalog (MCP Server)read- and 12 more in this area
Task actions14
conductorone.task_actions.approveApprove (Task Actions)writeconductorone.task_actions.approve_with_step_upApprove With Step Up (Task Actions)write- and 12 more in this area
Attributes13
conductorone.attributes.create_attribute_valueCreate Attribute Value (Attributes)writeconductorone.attributes.create_compliance_framework_attribute_valueCreate Compliance Framework Attribute Value (Attributes)write- and 11 more in this area
Principal13
conductorone.principal.add_bindingAdd Binding (Principal)writeconductorone.principal.createCreate (Principal)write- and 11 more in this area
Workload federation13
conductorone.workload_federation.create_providerCreate Provider (Workload Federation)writeconductorone.workload_federation.create_trustCreate Trust (Workload Federation)write- and 11 more in this area
Authzen server10
conductorone.authzen_server.createCreate (Authzen Server)writeconductorone.authzen_server.create_authzen_policyCreate Authzen Policy (Authzen Server)write- and 8 more in this area
Paper secret10
conductorone.paper_secret.create_externalCreate External (Paper Secret)writeconductorone.paper_secret.create_internalCreate Internal (Paper Secret)write- and 8 more in this area
App entitlement owners V29
conductorone.app_entitlement_owners_v2.create_entitlement_ownerCreate Entitlement Owner (App Entitlement Owners V2)writeconductorone.app_entitlement_owners_v2.create_user_ownerCreate User Owner (App Entitlement Owners V2)write- and 7 more in this area
App owners V29
conductorone.app_owners_v2.create_entitlement_ownerCreate Entitlement Owner (App Owners V2)writeconductorone.app_owners_v2.create_user_ownerCreate User Owner (App Owners V2)write- and 7 more in this area
App resource owners V29
conductorone.app_resource_owners_v2.create_entitlement_ownerCreate Entitlement Owner (App Resource Owners V2)writeconductorone.app_resource_owners_v2.create_user_ownerCreate User Owner (App Resource Owners V2)write- and 7 more in this area
Connector owners V29
conductorone.connector_owners_v2.create_entitlement_ownerCreate Entitlement Owner (Connector Owners V2)writeconductorone.connector_owners_v2.create_user_ownerCreate User Owner (Connector Owners V2)write- and 7 more in this area
Fund assignment9
conductorone.fund_assignment.getGet (Fund Assignment)readconductorone.fund_assignment.grant_extensionGrant Extension (Fund Assignment)write- and 7 more in this area
MCP access profile9
conductorone.mcp_access_profile.createCreate (MCP Access Profile)writeconductorone.mcp_access_profile.listList (MCP Access Profile)read- and 7 more in this area
Spend insights9
conductorone.spend_insights.get_attribution_rollupsGet Attribution Rollups (Spend Insights)readconductorone.spend_insights.get_denialGet Denial (Spend Insights)read- and 7 more in this area
Tunnel credentials9
conductorone.tunnel_credentials.create_bridgeCreate Bridge (Tunnel Credentials)writeconductorone.tunnel_credentials.create_bridge_credentialCreate Bridge Credential (Tunnel Credentials)write- and 7 more in this area
Access review setup entitlement8
conductorone.access_review_setup_entitlement.add_campaign_entitlementsAdd Campaign Entitlements (Access Review Setup Entitlement)writeconductorone.access_review_setup_entitlement.add_delete_excluded_entitlementsAdd Delete Excluded Entitlements (Access Review Setup Entitlement)write- and 6 more in this area
Access review template setup entitlement8
conductorone.access_review_template_setup_entitlement.add_delete_excluded_entitlementsAdd Delete Excluded Entitlements (Access Review Template Setup Entitlement)writeconductorone.access_review_template_setup_entitlement.add_template_entitlementsAdd Template Entitlements (Access Review Template Setup Entitlement)write- and 6 more in this area
Automation8
conductorone.automation.create_automationCreate Automation (Automation)writeconductorone.automation.get_automationGet Automation (Automation)read- and 6 more in this area
Classifier8
conductorone.classifier.create_classifierCreate Classifier (Classifier)writeconductorone.classifier.create_classifier_bindingCreate Classifier Binding (Classifier)write- and 6 more in this area
Fund policy8
conductorone.fund_policy.createCreate (Fund Policy)writeconductorone.fund_policy.freeze_tenantFreeze Tenant (Fund Policy)write- and 6 more in this area
My fund limits8
conductorone.my_fund_limits.listList (My Fund Limits)readconductorone.my_fund_limits.list_historyList History (My Fund Limits)read- and 6 more in this area
Reporting8
conductorone.reporting.getGet (Reporting)readconductorone.reporting.get_programGet Program (Reporting)read- and 6 more in this area
Step up provider 8Task 8Xaa access profile 8Xaa resource server 8App cap 7App entitlement search 7App user owners V2 7Finding 7Fund rule 7Go link 7Request schema 7SSF receiver stream 7Subject app limit 7User owners V2 7Xaa client audience mapping 7Xaa scope 7App entitlement owners 6App entitlement routing rule 6App owners 6App resource owners 6App user 6Artifact 6Credential inventory policy 6Decoy 6Export 6MCP access profile tool binding 6MCP tool 6Personal device 6Recovery policy 6Sign in policy 6User attribute management 6Webhooks 6A2 UI 5Access review 5App entitlement user binding 5App resource 5App resource type 5Apps 5Directory 5Finding routing rule 5Finding transformation rule 5Hooks 5Local directory config 5MCP resource 5Personal client 5Policies 5Tenant auth config 5Tenant email provider 5Tool gates 5User 5Virtual MCP server 5Access conflict 4Access review template 4AI governance settings 4Classifier template 4External o auth client 4Finding settings 4Local user invitation 4Model API key 4Paper secret admin 4Vault 4Xaa access profile scope binding 4App access requests defaults 3App entitlement monitor binding 3App entitlements proxy 3App managed state 3Functions invocation 3Gateway key 3Provider credential 3Roles 3Session settings 3SSO settings 3Virtual MCP tool binding 3Virtual MCP toolset binding 3Xaa settings 3Agent classifier 2App resource search 2App search 2App usage controls 2Automation execution 2Automation execution search 2Automation search 2Connector authoring activation 2Contacts 2Identity policy tenant defaults 2Onboarding settings 2Org domain 2Org notification settings 2Request catalog search 2Request settings 2Step up transaction 2User developer preferences 2User notification settings 2Access review actions 1Access review report 1Account provision policy test 1API key search 1App report 1App report action 1App secret admin 1App secret search 1Attribute search 1Auth 1Automation execution actions 1Aws external id settings 1Connector catalog 1Decoy search 1Exports search 1External client search 1Feedback 1Finding audit 1Finding search 1Functions invocation search 1Functions search 1Go link search 1Hooks search 1Personal client search 1Policy search 1Policy validate 1Role mining management search 1Shadow MCP occurrence 1SSF receiver event 1SSF receiver event search 1System log 1Task audit 1Task search 1Terraform export 1Tool gates search 1UI conversations 1User search 1Virtual MCP server my search 1Webhooks search 1
This index shows a sample of each area. All 833 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The ConductorOne MCP server, answered.
Is there a ConductorOne MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 833 ConductorOne actions across edge, request catalog management, role mining management and app entitlements, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by ConductorOne.
What do I need to connect ConductorOne?
Client ID of a ConductorOne service principal (Admin > Service principals > the principal > Credentials > Create… and The credential's client secret (secret-token:...), shown once when the credential is created. Plus your tenant host. The free call account { op: "connections.requirements", service: "conductorone" } lists exactly what to paste.
Can an AI agent delete or change things in ConductorOne?
Only if its key allows it, and only with an explicit confirmation. 134 ConductorOne actions are destructive, including delete (Apps), delete (Edge) and delete (Decoy). Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my ConductorOne API limit?
actionlake paces every call to the limits in the ConductorOne service file: 20 calls a second per connection. Repeated reads are answered from cache (378 ConductorOne actions can be), which never reaches ConductorOne.
What does a ConductorOne action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (833 ConductorOne actions page). Cache hits, searches, dry runs and calls ConductorOne refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which ConductorOne API does it cover?
The C1 API (OpenAPI 3.1.0, info.version 0.1.0-alpha) at your ConductorOne instance's API base URL, which you enter when connecting. It is built from ConductorOne's documentation as read on 23 October 2026. 833 actions in 162 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my ConductorOne data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your ConductorOne credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent ConductorOne today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
