--- title: "ConductorOne MCP server for AI agents - actionlake" description: "Give Claude 833 ConductorOne actions through one MCP server: edge, request catalog management, role mining management. 100,000 calls a month free, no card." canonical: https://actionlake.com/connectors/conductorone updated: 2026-10-23 --- Connectors · Identity & security # ConductorOne MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to ConductorOne and the rest of your systems. It gives your agent 833 ConductorOne actions (404 reads, 295 writes and 134 that wait for a confirmation) and holds the ConductorOne credential itself, so the agent never does. It paces ConductorOne's limits and records every call. [Connect ConductorOne free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "conductorone.user.list", intent: "check which ConductorOne account is connected" } # List (User) · read · 1 upstream call ``` - 833 actions in one signed file - 404 read look, never change - 295 write create and update - 134 wait for a yes destructive, confirmed first Set up ## Connect ConductorOne in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect ConductorOne. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Client ID of a ConductorOne service principal (Admin > Service principals > the principal > Credentials > Create… - `client_secret` The credential's client secret (secret-token:...), shown once when the credential is created - `tenant_host` Where your ConductorOne lives: your tenant host ``` account { op: "connections.requirements", service: "conductorone" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "conductorone.user.list" } # list (user) · read · 1 upstream call check { action: "conductorone.apps.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` ConductorOne at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_host` **Limits we pace to** 20 calls a second, per connection **API covered** C1 API (OpenAPI 3.1.0, info.version 0.1.0-alpha), at your ConductorOne instance's API base URL, which you enter when connecting **Built from** ConductorOne's documentation, read 23 October 2026[api.conductor.one](https://api.conductor.one/api/v1/openapi.json) [c1.ai](https://www.c1.ai/docs/product/admin/service-principals/client-credentials) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 378 of 404 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line ConductorOne up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in ConductorOne. 833 actions in 162 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **404** read look, never change - **295** write create and update - **134** destructive wait for a confirmation 1. ### Edge 33 30 read · 2 write · 1 destructive Create (Edge) · List (Edge) · List Audit Attestation Keys (Edge) · List Audit Attestation Manifests (Edge) 2. ### Request catalog management 24 8 read · 10 write · 6 destructive Add Access Entitlements (Request Catalog Management) · Add App Entitlements (Request Catalog Management) · Create (Request Catalog Management) · Create Bundle Automation (Request Catalog Management) 3. ### Role mining management 18 13 read · 5 write · 0 destructive Count Entitlement Selection Filter Attribute Values (Role Mining Management) · Create Access Profile From Cohort (Role Mining Management) · Evaluate Entitlement Selection (Role Mining Management) · List Cohort Filter Attribute Values (Role Mining Management) 4. ### App entitlements 17 7 read · 6 write · 4 destructive Add Automation Exclusion (App Entitlements) · Add Manually Managed Members (App Entitlements) · Create (App Entitlements) · Create Automation (App Entitlements) 5. ### Connector 17 5 read · 9 write · 3 destructive Create (Connector) · Create Delegated (Connector) · List (Connector) · Validate HTTP Connector Config (Connector) 6. ### Session policy 15 8 read · 4 write · 3 destructive Create (Session Policy) · List (Session Policy) · List Assignments (Session Policy) · List User Policies (Session Policy) 7. ### SSO application 15 6 read · 6 write · 3 destructive Create (SSO Application) · Create Client (SSO Application) · List (SSO Application) · List Clients (SSO Application) 8. ### Functions 14 6 read · 7 write · 1 destructive Create Final Commit (Functions) · Create Function (Functions) · Create Initial Commit (Functions) · Create Tag (Functions) **154 more areas · 680 actions** - MCP server **14** - Task actions **14** - Attributes **13** - Principal **13** - Workload federation **13** - Authzen server **10** - Paper secret **10** - App entitlement owners V2 **9** - App owners V2 **9** - App resource owners V2 **9** - Connector owners V2 **9** - Fund assignment **9** - MCP access profile **9** - Spend insights **9** - Tunnel credentials **9** - Access review setup entitlement **8** - Access review template setup entitlement **8** - Automation **8** - Classifier **8** - Fund policy **8** - My fund limits **8** - Reporting **8** - Step up provider **8** - Task **8** - Xaa access profile **8** - Xaa resource server **8** - App cap **7** - App entitlement search **7** - App user owners V2 **7** - Finding **7** - Fund rule **7** - Go link **7** - Request schema **7** - SSF receiver stream **7** - Subject app limit **7** - User owners V2 **7** - Xaa client audience mapping **7** - Xaa scope **7** - App entitlement owners **6** - App entitlement routing rule **6** - App owners **6** - App resource owners **6** - App user **6** - Artifact **6** - Credential inventory policy **6** - Decoy **6** - Export **6** - MCP access profile tool binding **6** - MCP tool **6** - Personal device **6** - Recovery policy **6** - Sign in policy **6** - User attribute management **6** - Webhooks **6** - A2 UI **5** - Access review **5** - App entitlement user binding **5** - App resource **5** - App resource type **5** - Apps **5** - Directory **5** - Finding routing rule **5** - Finding transformation rule **5** - Hooks **5** - Local directory config **5** - MCP resource **5** - Personal client **5** - Policies **5** - Tenant auth config **5** - Tenant email provider **5** - Tool gates **5** - User **5** - Virtual MCP server **5** - Access conflict **4** - Access review template **4** - AI governance settings **4** - Classifier template **4** - External o auth client **4** - Finding settings **4** - Local user invitation **4** - Model API key **4** - Paper secret admin **4** - Vault **4** - Xaa access profile scope binding **4** - App access requests defaults **3** - App entitlement monitor binding **3** - App entitlements proxy **3** - App managed state **3** - Functions invocation **3** - Gateway key **3** - Provider credential **3** - Roles **3** - Session settings **3** - SSO settings **3** - Virtual MCP tool binding **3** - Virtual MCP toolset binding **3** - Xaa settings **3** - Agent classifier **2** - App resource search **2** - App search **2** - App usage controls **2** - Automation execution **2** - Automation execution search **2** - Automation search **2** - Connector authoring activation **2** - Contacts **2** - Identity policy tenant defaults **2** - Onboarding settings **2** - Org domain **2** - Org notification settings **2** - Request catalog search **2** - Request settings **2** - Step up transaction **2** - User developer preferences **2** - User notification settings **2** - Access review actions **1** - Access review report **1** - Account provision policy test **1** - API key search **1** - App report **1** - App report action **1** - App secret admin **1** - App secret search **1** - Attribute search **1** - Auth **1** - Automation execution actions **1** - Aws external id settings **1** - Connector catalog **1** - Decoy search **1** - Exports search **1** - External client search **1** - Feedback **1** - Finding audit **1** - Finding search **1** - Functions invocation search **1** - Functions search **1** - Go link search **1** - Hooks search **1** - Personal client search **1** - Policy search **1** - Policy validate **1** - Role mining management search **1** - Shadow MCP occurrence **1** - SSF receiver event **1** - SSF receiver event search **1** - System log **1** - Task audit **1** - Task search **1** - Terraform export **1** - Tool gates search **1** - UI conversations **1** - User search **1** - Virtual MCP server my search **1** - Webhooks search **1** Top actions ## The ConductorOne API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 7 of ConductorOne's 7 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `conductorone.user.list` List (User) | List users. | read | `identity.user.list` 474 connectors | | `conductorone.roles.list` List (Roles) | List all roles for the current user. | read | `identity.role.list` 184 connectors | | `conductorone.apps.list` List (Apps) | List all apps. | read | `identity.application.list` 37 connectors | | `conductorone.user.get` Get (User) | Get a user by ID. | read | `identity.user.get` 399 connectors | | `conductorone.roles.get` Get (Roles) | Get a role by id. | read | `identity.role.get` 127 connectors | | `conductorone.apps.get` Get (Apps) | Get an app by ID. | read | `identity.application.get` 33 connectors | | `conductorone.auth.introspect` Introspect (Auth) | Introspect returns the current user's principle_id, user_id and a list of roles, permissions, and enabled features. | read | `identity.current_user.get` 307 connectors | | `conductorone.edge.list` List (Edge) | List retrieves Edges for an app. | read | this connector | | `conductorone.apps.create` Create (Apps) | Create a new manual app without a connector. | write | this connector | | `conductorone.edge.create` Create (Edge) | Create mints an Edge (and one entitlement per enabled_kinds entry) for an app. The Edge starts disabled. | write | this connector | | `conductorone.decoy.create` Create (Decoy) | Create mints a decoy credential and returns the one-time vending material exactly once. The Decoy id is server-set; the credential's secret cannot be… | write | this connector | | `conductorone.apps.delete` Delete (Apps) | Delete an app. | destructive | this connector | Try it ## Prompts to paste into Claude. Each one names the ConductorOne actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in ConductorOne? List every user and their role. calls `conductorone.user.list` 2. Write write Create (Apps) in ConductorOne. Show me exactly what you will send before you save it. calls `conductorone.apps.create` Governance for ConductorOne ## Destructive actions wait for a yes. 134 ConductorOne actions are destructive. The first 10: - Delete (Apps) `conductorone.apps.delete` - Delete (Edge) `conductorone.edge.delete` - Delete (Decoy) `conductorone.decoy.delete` - Rotate (Decoy) `conductorone.decoy.rotate` - Delete (Hooks) `conductorone.hooks.delete` - Delete (Vault) `conductorone.vault.delete` - Delete (Export) `conductorone.export.delete` - Delete (App Cap) `conductorone.app_cap.delete` - Delete (Go Link) `conductorone.go_link.delete` - Delete (Artifact) `conductorone.artifact.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do conductorone.apps.delete confirm_policy: **human** Delete (Apps)? **intent:** the user asked me to delete (Apps) run suspended · waiting for a named person · key _conductorone-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "conductorone-agent", allowed_actions: ["conductorone.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "conductorone.apps.delete", approver: "lead@example.com" }, { match: "conductorone.edge.delete", approver: "lead@example.com" }, { match: "conductorone.decoy.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to ConductorOne only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What ConductorOne costs on actionlake. Every ConductorOne action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call ConductorOne refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 833 ConductorOne actions - 833 actions page each page of a long list is one call - 378 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every ConductorOne action. 833 actions by area: the id your agent calls, what it does, and its effect. **Edge 33** - `conductorone.edge.create` Create (Edge) write - `conductorone.edge.list` List (Edge) read - and 31 more in this area **Request catalog management 24** - `conductorone.request_catalog_management.add_access_entitlements` Add Access Entitlements (Request Catalog Management) write - `conductorone.request_catalog_management.add_app_entitlements` Add App Entitlements (Request Catalog Management) write - and 22 more in this area **Role mining management 18** - `conductorone.role_mining_management.count_entitlement_selection_filter_attribute_values` Count Entitlement Selection Filter Attribute Values (Role Mining Management) read - `conductorone.role_mining_management.create_access_profile_from_cohort` Create Access Profile From Cohort (Role Mining Management) write - and 16 more in this area **App entitlements 17** - `conductorone.app_entitlements.add_automation_exclusion` Add Automation Exclusion (App Entitlements) write - `conductorone.app_entitlements.add_manually_managed_members` Add Manually Managed Members (App Entitlements) write - and 15 more in this area **Connector 17** - `conductorone.connector.create` Create (Connector) write - `conductorone.connector.create_delegated` Create Delegated (Connector) write - and 15 more in this area **Session policy 15** - `conductorone.session_policy.create` Create (Session Policy) write - `conductorone.session_policy.list` List (Session Policy) read - and 13 more in this area **SSO application 15** - `conductorone.sso_application.create` Create (SSO Application) write - `conductorone.sso_application.create_client` Create Client (SSO Application) write - and 13 more in this area **Functions 14** - `conductorone.functions.create_final_commit` Create Final Commit (Functions) write - `conductorone.functions.create_function` Create Function (Functions) write - and 12 more in this area **MCP server 14** - `conductorone.mcp_server.list` List (MCP Server) read - `conductorone.mcp_server.list_catalog` List Catalog (MCP Server) read - and 12 more in this area **Task actions 14** - `conductorone.task_actions.approve` Approve (Task Actions) write - `conductorone.task_actions.approve_with_step_up` Approve With Step Up (Task Actions) write - and 12 more in this area **Attributes 13** - `conductorone.attributes.create_attribute_value` Create Attribute Value (Attributes) write - `conductorone.attributes.create_compliance_framework_attribute_value` Create Compliance Framework Attribute Value (Attributes) write - and 11 more in this area **Principal 13** - `conductorone.principal.add_binding` Add Binding (Principal) write - `conductorone.principal.create` Create (Principal) write - and 11 more in this area **Workload federation 13** - `conductorone.workload_federation.create_provider` Create Provider (Workload Federation) write - `conductorone.workload_federation.create_trust` Create Trust (Workload Federation) write - and 11 more in this area **Authzen server 10** - `conductorone.authzen_server.create` Create (Authzen Server) write - `conductorone.authzen_server.create_authzen_policy` Create Authzen Policy (Authzen Server) write - and 8 more in this area **Paper secret 10** - `conductorone.paper_secret.create_external` Create External (Paper Secret) write - `conductorone.paper_secret.create_internal` Create Internal (Paper Secret) write - and 8 more in this area **App entitlement owners V2 9** - `conductorone.app_entitlement_owners_v2.create_entitlement_owner` Create Entitlement Owner (App Entitlement Owners V2) write - `conductorone.app_entitlement_owners_v2.create_user_owner` Create User Owner (App Entitlement Owners V2) write - and 7 more in this area **App owners V2 9** - `conductorone.app_owners_v2.create_entitlement_owner` Create Entitlement Owner (App Owners V2) write - `conductorone.app_owners_v2.create_user_owner` Create User Owner (App Owners V2) write - and 7 more in this area **App resource owners V2 9** - `conductorone.app_resource_owners_v2.create_entitlement_owner` Create Entitlement Owner (App Resource Owners V2) write - `conductorone.app_resource_owners_v2.create_user_owner` Create User Owner (App Resource Owners V2) write - and 7 more in this area **Connector owners V2 9** - `conductorone.connector_owners_v2.create_entitlement_owner` Create Entitlement Owner (Connector Owners V2) write - `conductorone.connector_owners_v2.create_user_owner` Create User Owner (Connector Owners V2) write - and 7 more in this area **Fund assignment 9** - `conductorone.fund_assignment.get` Get (Fund Assignment) read - `conductorone.fund_assignment.grant_extension` Grant Extension (Fund Assignment) write - and 7 more in this area **MCP access profile 9** - `conductorone.mcp_access_profile.create` Create (MCP Access Profile) write - `conductorone.mcp_access_profile.list` List (MCP Access Profile) read - and 7 more in this area **Spend insights 9** - `conductorone.spend_insights.get_attribution_rollups` Get Attribution Rollups (Spend Insights) read - `conductorone.spend_insights.get_denial` Get Denial (Spend Insights) read - and 7 more in this area **Tunnel credentials 9** - `conductorone.tunnel_credentials.create_bridge` Create Bridge (Tunnel Credentials) write - `conductorone.tunnel_credentials.create_bridge_credential` Create Bridge Credential (Tunnel Credentials) write - and 7 more in this area **Access review setup entitlement 8** - `conductorone.access_review_setup_entitlement.add_campaign_entitlements` Add Campaign Entitlements (Access Review Setup Entitlement) write - `conductorone.access_review_setup_entitlement.add_delete_excluded_entitlements` Add Delete Excluded Entitlements (Access Review Setup Entitlement) write - and 6 more in this area **Access review template setup entitlement 8** - `conductorone.access_review_template_setup_entitlement.add_delete_excluded_entitlements` Add Delete Excluded Entitlements (Access Review Template Setup Entitlement) write - `conductorone.access_review_template_setup_entitlement.add_template_entitlements` Add Template Entitlements (Access Review Template Setup Entitlement) write - and 6 more in this area **Automation 8** - `conductorone.automation.create_automation` Create Automation (Automation) write - `conductorone.automation.get_automation` Get Automation (Automation) read - and 6 more in this area **Classifier 8** - `conductorone.classifier.create_classifier` Create Classifier (Classifier) write - `conductorone.classifier.create_classifier_binding` Create Classifier Binding (Classifier) write - and 6 more in this area **Fund policy 8** - `conductorone.fund_policy.create` Create (Fund Policy) write - `conductorone.fund_policy.freeze_tenant` Freeze Tenant (Fund Policy) write - and 6 more in this area **My fund limits 8** - `conductorone.my_fund_limits.list` List (My Fund Limits) read - `conductorone.my_fund_limits.list_history` List History (My Fund Limits) read - and 6 more in this area **Reporting 8** - `conductorone.reporting.get` Get (Reporting) read - `conductorone.reporting.get_program` Get Program (Reporting) read - and 6 more in this area Step up provider **8** Task **8** Xaa access profile **8** Xaa resource server **8** App cap **7** App entitlement search **7** App user owners V2 **7** Finding **7** Fund rule **7** Go link **7** Request schema **7** SSF receiver stream **7** Subject app limit **7** User owners V2 **7** Xaa client audience mapping **7** Xaa scope **7** App entitlement owners **6** App entitlement routing rule **6** App owners **6** App resource owners **6** App user **6** Artifact **6** Credential inventory policy **6** Decoy **6** Export **6** MCP access profile tool binding **6** MCP tool **6** Personal device **6** Recovery policy **6** Sign in policy **6** User attribute management **6** Webhooks **6** A2 UI **5** Access review **5** App entitlement user binding **5** App resource **5** App resource type **5** Apps **5** Directory **5** Finding routing rule **5** Finding transformation rule **5** Hooks **5** Local directory config **5** MCP resource **5** Personal client **5** Policies **5** Tenant auth config **5** Tenant email provider **5** Tool gates **5** User **5** Virtual MCP server **5** Access conflict **4** Access review template **4** AI governance settings **4** Classifier template **4** External o auth client **4** Finding settings **4** Local user invitation **4** Model API key **4** Paper secret admin **4** Vault **4** Xaa access profile scope binding **4** App access requests defaults **3** App entitlement monitor binding **3** App entitlements proxy **3** App managed state **3** Functions invocation **3** Gateway key **3** Provider credential **3** Roles **3** Session settings **3** SSO settings **3** Virtual MCP tool binding **3** Virtual MCP toolset binding **3** Xaa settings **3** Agent classifier **2** App resource search **2** App search **2** App usage controls **2** Automation execution **2** Automation execution search **2** Automation search **2** Connector authoring activation **2** Contacts **2** Identity policy tenant defaults **2** Onboarding settings **2** Org domain **2** Org notification settings **2** Request catalog search **2** Request settings **2** Step up transaction **2** User developer preferences **2** User notification settings **2** Access review actions **1** Access review report **1** Account provision policy test **1** API key search **1** App report **1** App report action **1** App secret admin **1** App secret search **1** Attribute search **1** Auth **1** Automation execution actions **1** Aws external id settings **1** Connector catalog **1** Decoy search **1** Exports search **1** External client search **1** Feedback **1** Finding audit **1** Finding search **1** Functions invocation search **1** Functions search **1** Go link search **1** Hooks search **1** Personal client search **1** Policy search **1** Policy validate **1** Role mining management search **1** Shadow MCP occurrence **1** SSF receiver event **1** SSF receiver event search **1** System log **1** Task audit **1** Task search **1** Terraform export **1** Tool gates search **1** UI conversations **1** User search **1** Virtual MCP server my search **1** Webhooks search **1** This index shows a sample of each area. All 833 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The ConductorOne MCP server, answered. **Is there a ConductorOne MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 833 ConductorOne actions across edge, request catalog management, role mining management and app entitlements, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by ConductorOne. **What do I need to connect ConductorOne?** Client ID of a ConductorOne service principal (Admin > Service principals > the principal > Credentials > Create… and The credential's client secret (secret-token:...), shown once when the credential is created. Plus your tenant host. The free call account { op: "connections.requirements", service: "conductorone" } lists exactly what to paste. **Can an AI agent delete or change things in ConductorOne?** Only if its key allows it, and only with an explicit confirmation. 134 ConductorOne actions are destructive, including delete (Apps), delete (Edge) and delete (Decoy). Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my ConductorOne API limit?** actionlake paces every call to the limits in the ConductorOne service file: 20 calls a second per connection. Repeated reads are answered from cache (378 ConductorOne actions can be), which never reaches ConductorOne. **What does a ConductorOne action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (833 ConductorOne actions page). Cache hits, searches, dry runs and calls ConductorOne refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which ConductorOne API does it cover?** The C1 API (OpenAPI 3.1.0, info.version 0.1.0-alpha) at your ConductorOne instance's API base URL, which you enter when connecting. It is built from ConductorOne's documentation as read on 23 October 2026. 833 actions in 162 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my ConductorOne data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your ConductorOne credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like ConductorOne Shares the most action names with - [Cloudflare 7](https://actionlake.com/connectors/cloudflare) - [SailPoint Identity Security Cloud 6](https://actionlake.com/connectors/sailpoint-identity-security-cloud) - [Keycloak Admin REST API 6](https://actionlake.com/connectors/keycloak-admin-rest-api) - [Zscaler Internet Access (ZIA) 4](https://actionlake.com/connectors/zscaler-internet-access-zia) - [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud) - [BeyondTrust Password Safe 3](https://actionlake.com/connectors/beyondtrust-password-safe) Joins with, on shared entities - [authentik 3](https://actionlake.com/connectors/authentik) - [Kinde Management API 3](https://actionlake.com/connectors/kinde-management-api) - [Material Security 3](https://actionlake.com/connectors/material-security) - [HaloPSA 2](https://actionlake.com/connectors/halopsa) - [Fortinet FortiGate 2](https://actionlake.com/connectors/fortinet-fortigate) - [Genesys Cloud CX 2](https://actionlake.com/connectors/genesys-cloud-cx) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by ConductorOne; the name is the vendor's own. Counts are from the ConductorOne service file, version 1.0.0. ## Give your agent ConductorOne today. [Connect ConductorOne free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/conductorone More: https://actionlake.com/llms.txt