---
title: "Delinea Secret Server MCP server for AI agents - actionlake"
description: "Give Claude 1,237 Delinea Secret Server actions through one MCP server: configuration. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/delinea-secret-server
updated: 2026-10-23
---

Connectors · MSP & PSA

# Delinea Secret Server MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Delinea Secret Server and the rest of your systems. It gives your agent 1,237 Delinea Secret Server actions (636 reads, 488 writes and 113 that wait for a confirmation) and holds the Delinea Secret Server credential itself, so the agent never does. It paces Delinea Secret Server's limits and records every call.

[Connect Delinea Secret Server free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "delinea_secret_server.users.search_users",
  intent: "check which Delinea Secret Server account is connected"
}
# Search Users · read · 1 upstream call
```

- 1,237 actions in one signed file
- 636 read look, never change
- 488 write create and update
- 113 wait for a yes destructive, confirmed first

Set up

## Connect Delinea Secret Server in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Delinea Secret Server.
   Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `username` Secret Server user name (a local user, DOMAIN\user, or an application account) with the roles the actions you call need
   - `password` Password of that Secret Server user
   - `app_path` Your Delinea Secret Server app path
   - `host` Where your Delinea Secret Server lives: your host
   ```
   account { op: "connections.requirements", service: "delinea_secret_server" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "delinea_secret_server.users.search_users" }
   # search users · read · 1 upstream call
   check { action: "delinea_secret_server.users.create_user", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Delinea Secret Server at a glance

**Sign-in**

Session login. actionlake opens the session and renews it when it expires.

**You provide**

`username` `password`

**Setup fields**

`app_path` `host`

**Limits we pace to**

10 calls a second, per connection

**API covered**

Secret Server REST API (Swagger 2.0, 11.4.0), at your Delinea Secret Server instance's API base URL, which you enter when connecting

**Built from**

Delinea Secret Server's documentation, read 23 October 2026[updates.thycotic.net](https://updates.thycotic.net/secretserver/restapiguide/TokenAuth/swagger.json) [docs.delinea.com](https://docs.delinea.com/online-help/secret-server/api-scripting/rest-api/index.htm)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

355 of 636 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

5, so ask can line Delinea Secret Server up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Delinea Secret Server.

1,237 actions in 110 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **636** read look, never change
- **488** write create and update
- **113** destructive wait for a confirmation

1. ### Configuration
   101
   42 read · 53 write · 6 destructive
   Create Configuration Email Message Header · Create SAML IDP certificate · Decrypt using DPAPI · Encrypt using DPAPI
2. ### Discovery
   87
   49 read · 33 write · 5 destructive
   Add Scanner to discovery source · Create a discovery account rule · Create a new active directory discovery source · Create command set
3. ### Secrets
   78
   36 read · 39 write · 3 destructive
   Search Secrets · Create Secret · Get Secret · Update Secret
4. ### Users
   50
   21 read · 19 write · 10 destructive
   Search Users · Current User · Create User · Get User
5. ### Secret templates
   40
   21 read · 15 write · 4 destructive
   Copy Secret Template · Create Secret Template Field For Template · Create a Secret Template Extended Mapping · Create a Secret Template Launcher
6. ### Reports
   39
   21 read · 12 write · 6 destructive
   Create Report · Create Report Category · Create Report Schedule · Download Historical Report
7. ### Bulk secret operations
   35
   0 read · 27 write · 8 destructive
   Activate · Add share · Assign Jumpbox Route · Assign Secret Policy
8. ### Distributed engine
   29
   15 read · 14 write · 0 destructive
   Create Site · Create Site Connector · Get Engine Audits for Site · Get Server Capabilities

**102 more areas · 778 actions**

- External vaults **25**
- Inbox **24**
- Proxy **23**
- Groups **22**
- Bulk user operations **21**
- Remote password changing **21**
- Event pipeline policy **20**
- Platform **20**
- Platform migration **20**
- Categorized lists **18**
- Dashboard services **18**
- Diagnostics **17**
- Directory services **17**
- Install **17**
- Ip address restrictions **17**
- Folders **16**
- Inbox rules **16**
- Teams **16**
- Launcher agents **14**
- Secret dependencies **14**
- Metadata **13**
- Ticket systems **13**
- Script **12**
- Roles **11**
- Secret hooks **11**
- Secret permissions **11**
- Disaster recovery **10**
- Jumpbox route **10**
- Launchers **10**
- Platform data integration **10**
- Secret access requests **10**
- Secret access requests V2 **10**
- Secret sessions **10**
- Dual controls **9**
- Event pipeline **9**
- Key management **9**
- Pba configuration **9**
- Secret erase requests **8**
- Workflow templates **8**
- Dependency changer **7**
- Domain name index **7**
- SDK client accounts **7**
- SDK client rules **7**
- Secret policy **7**
- SSH command menu **7**
- Dev ops secrets vault tenant **6**
- Event subscriptions **6**
- Folder permissions **6**
- Password requirements **6**
- Secret extensions **6**
- Secret server settings **6**
- Server nodes **6**
- SSH cipher suite **6**
- SSH command blocklist **6**
- Workflow step templates **6**
- App clients **5**
- Bulk operations **5**
- Character sets **5**
- Cloud diagnostics **5**
- Dev ops secrets vault sync **5**
- Event pipeline settings **5**
- Secret template permissions **5**
- Slack **5**
- SSH command **5**
- Advanced config settings **4**
- Application request **4**
- Directory services V2 **4**
- Schedule **4**
- Event pipeline trigger **3**
- O auth expiration **3**
- SQL replication **3**
- Audits **2**
- Bulk password changer operations **2**
- Enterprise **2**
- Feature flag **2**
- Mdi integration **2**
- Secret launchers **2**
- Activations **1**
- Active directory **1**
- API token **1**
- App state **1**
- Application accounts **1**
- Bundle **1**
- Connection manager settings **1**
- Diagnostics V2 **1**
- Event pipeline audit **1**
- Extended fields **1**
- Health check **1**
- HSM configuration **1**
- License **1**
- Mobile **1**
- One time password code **1**
- Rest API docs **1**
- Role audit **1**
- Role permissions **1**
- SDK client audits **1**
- Secret health **1**
- Security audit logs **1**
- Sites **1**
- Subscriptions **1**
- Version **1**
- Workflow instances **1**

Top actions

## The Delinea Secret Server API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 27 of Delinea Secret Server's 27 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `delinea_secret_server.users.search_users` Search Users | Search Users. | read | `identity.user.list` 474 connectors |
| `delinea_secret_server.groups.search` Search Groups | Search Groups. | read | `identity.group.list` 262 connectors |
| `delinea_secret_server.roles.get_all` Search Roles | Search Roles. | read | `identity.role.list` 184 connectors |
| `delinea_secret_server.users.get_current_user` Current User | Current User. | read | `identity.current_user.get` 307 connectors |
| `delinea_secret_server.groups.get_group_membership` Get Group Membership | Get Group Membership. | read | `identity.group_member.list` 103 connectors |
| `delinea_secret_server.users.create_user` Create User | Create User. | write | `identity.user.create` 262 connectors |
| `delinea_secret_server.groups.create` Create Group | Create Group. | write | `identity.group.create` 205 connectors |
| `delinea_secret_server.roles.create` Create Role | Create Role. | write | `identity.role.create` 105 connectors |
| `delinea_secret_server.users.delete` Delete User | Delete User. | destructive | `identity.user.delete` 253 connectors |
| `delinea_secret_server.groups.add_user_to_group` Add User To Group | Add User To Group. | write | `identity.group_member.add` 72 connectors |
| `delinea_secret_server.secrets.create_secret` Create Secret | Create Secret. | write | `security.secret.create` 19 connectors |
| `delinea_secret_server.folders.create` Create Folder | Create Folder. | write | `work.folder.create` 9 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Delinea Secret Server actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in Delinea Secret Server? List every user and their role.
   calls `delinea_secret_server.users.search_users`
2. Write write
   Create User in Delinea Secret Server. Show me exactly what you will send before you save it.
   calls `delinea_secret_server.users.create_user`

Governance for Delinea Secret Server

## Destructive actions wait for a yes.

113 Delinea Secret Server actions are destructive. The first 10:

- Delete User `delinea_secret_server.users.delete`
- Delete Group `delinea_secret_server.groups.delete`
- Deactivate a Secret `delinea_secret_server.secrets.delete`
- Delete Folder `delinea_secret_server.folders.delete`
- Delete Report `delinea_secret_server.reports.delete`
- Expire Secret `delinea_secret_server.secrets.expire`
- Delete Report `delinea_secret_server.reports.delete_v2`
- TOTP Verify Setup `delinea_secret_server.users.totp_verify`
- Delete Dual Control `delinea_secret_server.dual_controls.delete`
- Unpin Folder `delinea_secret_server.folders.unpin_folder`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do delinea_secret_server.users.delete confirm_policy: **human**

Delete User?

**intent:** the user asked me to delete User

run suspended · waiting for a named person · key _delinea-secret-server-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "delinea-secret-server-agent",
  allowed_actions: ["delinea_secret_server.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "delinea_secret_server.users.delete", approver: "lead@example.com" },
    { match: "delinea_secret_server.groups.delete", approver: "lead@example.com" },
    { match: "delinea_secret_server.secrets.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Delinea Secret Server only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Delinea Secret Server costs on actionlake.

Every Delinea Secret Server action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Delinea Secret Server refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 1,237 Delinea Secret Server actions
- 1,237 actions page each page of a long list is one call
- 355 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Delinea Secret Server action.

1,237 actions by area: the id your agent calls, what it does, and its effect.

**Configuration 101**

- `delinea_secret_server.configuration.create_email_message_header` Create Configuration Email Message Header write
- `delinea_secret_server.configuration.create_saml_idp_certificate` Create SAML IDP certificate write
- `delinea_secret_server.configuration.dpapi_decrypt` Decrypt using DPAPI write
- `delinea_secret_server.configuration.dpapi_encrypt` Encrypt using DPAPI write
- `delinea_secret_server.configuration.cancel_rotate_secret_keys` Cancel Rotate Secret Keys destructive
- `delinea_secret_server.configuration.clear_ad_credentials` Clear AD Credentials destructive
- and 95 more in this area

**Discovery 87**

- `delinea_secret_server.discovery.add_discovery_source_scanner` Add Scanner to discovery source write
- `delinea_secret_server.discovery.create_account_rule` Create a discovery account rule write
- `delinea_secret_server.discovery.create_active_directory_discovery_source` Create a new active directory discovery source write
- `delinea_secret_server.discovery.create_command_set` Create command set write
- `delinea_secret_server.discovery.create_dependency_rule` Create a discovery dependency rule write
- `delinea_secret_server.discovery.create_dependency_template_async` Create a Dependency Template write
- and 81 more in this area

**Secrets 78**

- `delinea_secret_server.secrets.create_secret` Create Secret write
- `delinea_secret_server.secrets.get_secret_v2` Get Secret read
- `delinea_secret_server.secrets.search_v2` Search Secrets read
- `delinea_secret_server.secrets.update_secret` Update Secret write
- `delinea_secret_server.secrets.approve_force_checkout_request` Approve force checkout write
- `delinea_secret_server.secrets.change_password` Change Secret Password write
- and 72 more in this area

**Users 50**

- `delinea_secret_server.users.create_user` Create User write
- `delinea_secret_server.users.get` Get User read
- `delinea_secret_server.users.get_current_user` Current User read
- `delinea_secret_server.users.search_users` Search Users read
- `delinea_secret_server.users.add_user_owner` Add User Owner write
- `delinea_secret_server.users.add_user_to_groups` Add groups to existing user write
- and 44 more in this area

**Secret templates 40**

- `delinea_secret_server.secret_templates.copy` Copy Secret Template write
- `delinea_secret_server.secret_templates.create_field` Create Secret Template Field For Template write
- `delinea_secret_server.secret_templates.create_secret_template_extended_mapping` Create a Secret Template Extended Mapping write
- `delinea_secret_server.secret_templates.create_secret_template_launcher` Create a Secret Template Launcher write
- `delinea_secret_server.secret_templates.create_template` Create Secret Template write
- `delinea_secret_server.secret_templates.create_template_field` Create Secret Template Field write
- and 34 more in this area

**Reports 39**

- `delinea_secret_server.reports.create_report` Create Report write
- `delinea_secret_server.reports.create_report_category` Create Report Category write
- `delinea_secret_server.reports.create_report_schedule` Create Report Schedule write
- `delinea_secret_server.reports.download_historical_report` Download Historical Report read
- `delinea_secret_server.reports.delete` Delete Report destructive
- `delinea_secret_server.reports.delete_report_category` Delete Report Category destructive
- and 33 more in this area

**Bulk secret operations 35**

- `delinea_secret_server.bulk_secret_operations.activate_secrets` Activate write
- `delinea_secret_server.bulk_secret_operations.add_share_permissions_to_secrets` Add share write
- `delinea_secret_server.bulk_secret_operations.assign_secrets_to_jumpbox_route` Assign Jumpbox Route write
- `delinea_secret_server.bulk_secret_operations.assign_secrets_to_secret_policy` Assign Secret Policy write
- `delinea_secret_server.bulk_secret_operations.assign_secrets_to_site` Assign site write
- `delinea_secret_server.bulk_secret_operations.change_secrets_passwords_remotely` Change Password Remotely write
- and 29 more in this area

**Distributed engine 29**

- `delinea_secret_server.distributed_engine.create_site` Create Site write
- `delinea_secret_server.distributed_engine.create_site_connector` Create Site Connector write
- `delinea_secret_server.distributed_engine.get_engine_audits_for_site` Get Engine Audits for Site read
- `delinea_secret_server.distributed_engine.get_server_capabilities` Get Server Capabilities read
- `delinea_secret_server.distributed_engine.get_distributed_engine_configuration` Distributed Engine Configuration read
- `delinea_secret_server.distributed_engine.get_engine_settings` Get Engine Settings read
- and 23 more in this area

**External vaults 25**

- `delinea_secret_server.external_vaults.bulk_create_external_vaults` Create multiple external vault links. write
- `delinea_secret_server.external_vaults.create_external_vault_link` Create external vault link write
- `delinea_secret_server.external_vaults.create_external_vault_secret` Create external vault secret write
- `delinea_secret_server.external_vaults.get_vault_permission_history` Get external vault permission history read
- `delinea_secret_server.external_vaults.bulk_update_external_vault_secrets` Update external vault secrets write
- `delinea_secret_server.external_vaults.bulk_update_external_vaults` Updates multiple external vaults write
- and 19 more in this area

**Inbox 24**

- `delinea_secret_server.inbox.copy_inbox_template` Copy an inbox template write
- `delinea_secret_server.inbox.create_inbox_template` Create inbox template write
- `delinea_secret_server.inbox.create_inbox_template_locale` Create inbox template locale write
- `delinea_secret_server.inbox.get_inbox_message_data_names` Inbox Message Type Data Names read
- `delinea_secret_server.inbox.clear_new_message_status` Clear New Message Status destructive
- `delinea_secret_server.inbox.delete_resource` Delete inbox resource destructive
- and 18 more in this area

**Proxy 23**

- `delinea_secret_server.proxy.create_terminal_client_overrides` Creates SSH Terminal client overrides write
- `delinea_secret_server.proxy.generate_rdp_proxy_certificate` Generate RDP server certificate write
- `delinea_secret_server.proxy.generate_ssh_host_key` Generate SSH Host Key write
- `delinea_secret_server.proxy.get_audits` Get the Proxy Audit List read
- `delinea_secret_server.proxy.delete_terminal_client_overrides` Deletes SSH Terminal client overrides destructive
- `delinea_secret_server.proxy.get_endpoint_notification` Get endpoint warnings read
- and 17 more in this area

**Groups 22**

- `delinea_secret_server.groups.create` Create Group write
- `delinea_secret_server.groups.get` Get Group read
- `delinea_secret_server.groups.get_group_membership` Get Group Membership read
- `delinea_secret_server.groups.search` Search Groups read
- `delinea_secret_server.groups.add_user_to_group` Add User To Group write
- `delinea_secret_server.groups.create_user_roles` Add roles to existing group write
- and 16 more in this area

**Bulk user operations 21**

- `delinea_secret_server.bulk_user_operations.add_users_to_group` Add To Group write
- `delinea_secret_server.bulk_user_operations.add_users_to_team` Add To Team write
- `delinea_secret_server.bulk_user_operations.enable_users` Enable Users write
- `delinea_secret_server.bulk_user_operations.force_logout_for_users` Force Logout write
- `delinea_secret_server.bulk_user_operations.disable_duo_auth_for_users` Disable Duo Auth destructive
- `delinea_secret_server.bulk_user_operations.disable_email_two_factor_for_users` Disable Email Two Factor destructive
- and 15 more in this area

**Remote password changing 21**

- `delinea_secret_server.remote_password_changing.batch_save_custom_commands` Batch Save Custom Commands write
- `delinea_secret_server.remote_password_changing.create_custom_command` Create Custom Command write
- `delinea_secret_server.remote_password_changing.create_password_type` Create Password Type write
- `delinea_secret_server.remote_password_changing.create_password_type_auth` Create Password Type Auth write
- `delinea_secret_server.remote_password_changing.delete_custom_command` Delete Custom Command destructive
- `delinea_secret_server.remote_password_changing.delete_password_type` Delete Password Type destructive
- and 15 more in this area

**Event pipeline policy 20**

- `delinea_secret_server.event_pipeline_policy.add_pipeline_to_event_pipeline_policy` Add Pipeline To Event Pipeline Policy write
- `delinea_secret_server.event_pipeline_policy.create_event_pipeline_policy` Create Pipeline Policy write
- `delinea_secret_server.event_pipeline_policy.duplicate_event_pipeline_policy` Duplicate Event Pipeline Policy write
- `delinea_secret_server.event_pipeline_policy.get_child_folder_data_for_pipeline_policy_folder` Get Child Folder Data For Pipeline Policy Folder read
- `delinea_secret_server.event_pipeline_policy.activate_event_pipeline_policy` Activate Event Pipeline Policy write
- `delinea_secret_server.event_pipeline_policy.export_event_pipeline_policy` Export Event Pipeline Policy read
- and 14 more in this area

**Platform 20**

- `delinea_secret_server.platform.create_platform_users_and_groups` Create Platform users and groups write
- `delinea_secret_server.platform.get_platform_directories` Get Platform Directories read
- `delinea_secret_server.platform.get_platform_users` Platform Users read
- `delinea_secret_server.platform.link_platform_group` Link a group from Platform write
- `delinea_secret_server.platform.get_directory_group_members` Search in platform for members of a group read
- `delinea_secret_server.platform.get_platform_compatibility_level` Get platform on-premise integration compatibility level read
- and 14 more in this area

**Platform migration 20**

- `delinea_secret_server.platform_migration.enable_unified_mode` Enable Unified Mode write
- `delinea_secret_server.platform_migration.get_groups` Groups to Migrate read
- `delinea_secret_server.platform_migration.get_migration_logs` Get Logs of Migrations read
- `delinea_secret_server.platform_migration.get_migrations` Get Migrations read
- `delinea_secret_server.platform_migration.get_data_pre_check_summary` Get Data Pre-Check Summary read
- `delinea_secret_server.platform_migration.get_data_summary` Get Data Totals read
- and 14 more in this area

**Categorized lists 18**

- `delinea_secret_server.categorized_lists.add_item_to_list` Adds an option to a list write
- `delinea_secret_server.categorized_lists.add_items_to_list` Adds options to a list write
- `delinea_secret_server.categorized_lists.add_items_to_list_from_file` Upload a file of list options write
- `delinea_secret_server.categorized_lists.add_items_to_list_with_category` Adds options to the list with the specified category write
- `delinea_secret_server.categorized_lists.create_list` Create a list write
- `delinea_secret_server.categorized_lists.delete_list` Delete List destructive
- and 12 more in this area

**Dashboard services 18**

- `delinea_secret_server.dashboard_services.add_widget_to_tab` Add Widget To Tab write
- `delinea_secret_server.dashboard_services.create_new_tab` Create Tab write
- `delinea_secret_server.dashboard_services.get_active_reports` Get Active Reports read
- `delinea_secret_server.dashboard_services.get_pinned_tabs` Get Pinned Tabs read
- `delinea_secret_server.dashboard_services.get_dashboard_info` Get Dashboard Info read
- `delinea_secret_server.dashboard_services.get_last_selected_dashboard_tab` Get Last Selected Tab read
- and 12 more in this area

**Diagnostics 17**

- `delinea_secret_server.diagnostics.collect_log_collections` Collect log collections write
- `delinea_secret_server.diagnostics.get_app_settings_v2` Get App Settings read
- `delinea_secret_server.diagnostics.get_quartz_jobs` Get Quartz Jobs read
- `delinea_secret_server.diagnostics.test_event_log` Test Event Log write
- `delinea_secret_server.diagnostics.clear_cache` Clear cache destructive
- `delinea_secret_server.diagnostics.clear_log_collections` Clear log collections destructive
- and 11 more in this area

**Directory services 17**

- `delinea_secret_server.directory_services.create_domain` Create Domain write
- `delinea_secret_server.directory_services.get_configuration_audits` Get Directory Services Configuration Audits read
- `delinea_secret_server.directory_services.get_synchronization_log` Get Synchronization Log read
- `delinea_secret_server.directory_services.link_domain_group` Link a group from the directory write
- `delinea_secret_server.directory_services.get_directory_group_members` Search in the directory for members of a group read
- `delinea_secret_server.directory_services.get_directory_services_configuration` Directory Services Configuration read
- and 11 more in this area

**Install 17**

- `delinea_secret_server.install.create_initial_user` Create initial user write
- `delinea_secret_server.install.download_upgrade` Download upgrade write
- `delinea_secret_server.install.generate_application_zip` Generate application ZIP write
- `delinea_secret_server.install.generate_sql_script` Generate SQL script write
- `delinea_secret_server.install.cancel_manual_upgrade` Cancel manual upgrade destructive
- `delinea_secret_server.install.get_initial_user_settings` Get settings for the initial user read
- and 11 more in this area

**Ip address restrictions 17**

- `delinea_secret_server.ip_address_restrictions.create` Create IP Address restriction write
- `delinea_secret_server.ip_address_restrictions.create_group_ip_restriction` Create Group IP Address restriction write
- `delinea_secret_server.ip_address_restrictions.create_user_ip_restriction` Create User IP Address restriction write
- `delinea_secret_server.ip_address_restrictions.get_all_by_group` Search IP Address restrictions assigned to a group read
- `delinea_secret_server.ip_address_restrictions.delete` Delete IP Address restriction destructive
- `delinea_secret_server.ip_address_restrictions.delete_group_ip_restriction` Delete Group IP Address restriction destructive
- and 11 more in this area

**Folders 16**

- `delinea_secret_server.folders.create` Create Folder write
- `delinea_secret_server.folders.get` Get Folder read
- `delinea_secret_server.folders.search` Search Folders read
- `delinea_secret_server.folders.update` Update Folder write
- `delinea_secret_server.folders.associate_template_to_folder` Associate Template to Folder write
- `delinea_secret_server.folders.delete` Delete Folder destructive
- and 10 more in this area

**Inbox rules 16**

- `delinea_secret_server.inbox_rules.copy_inbox_rule` Copy Inbox Rule write
- `delinea_secret_server.inbox_rules.create_inbox_rule` Create Inbox Rule write
- `delinea_secret_server.inbox_rules.create_inbox_rule_condition` Create Inbox Rule Condition write
- `delinea_secret_server.inbox_rules.search_inbox_rules` Search inbox rules read
- `delinea_secret_server.inbox_rules.get_inbox_rule` Get Inbox Rule read
- `delinea_secret_server.inbox_rules.get_inbox_rule_condition` Get Inbox Rule Condition read
- and 10 more in this area

**Teams 16**

- `delinea_secret_server.teams.add_lists_to_team` Update Team Lists write
- `delinea_secret_server.teams.add_members` Add Team Members write
- `delinea_secret_server.teams.add_team_member` Update Team Members write
- `delinea_secret_server.teams.add_team_site` Update Team Sites write
- `delinea_secret_server.teams.create_team` Create Team write
- `delinea_secret_server.teams.get` Get Team read
- and 10 more in this area

**Launcher agents 14**

- `delinea_secret_server.launcher_agents.create_collection` Create Launcher Agent Collection write
- `delinea_secret_server.launcher_agents.get_audits` Get Launcher Agent Audits read
- `delinea_secret_server.launcher_agents.get_audits_by_agent_id` Get Launcher Agent Audits by agent ID read
- `delinea_secret_server.launcher_agents.get_collection_audit` Get collection audit read
- `delinea_secret_server.launcher_agents.get` Get Launcher Agent read
- `delinea_secret_server.launcher_agents.get_by_collection_id` Get Launcher Agent Collection read
- and 8 more in this area

**Secret dependencies 14**

- `delinea_secret_server.secret_dependencies.create_dependency` Create Secret Dependency write
- `delinea_secret_server.secret_dependencies.create_dependency_group` Create Secret Dependency Group write
- `delinea_secret_server.secret_dependencies.execute` Run Dependencies write
- `delinea_secret_server.secret_dependencies.search_dependency_summary` Search Secret Dependencies read
- `delinea_secret_server.secret_dependencies.delete` Delete Secret Dependency destructive
- `delinea_secret_server.secret_dependencies.delete_secret_dependency_group` Delete a Secret Dependency Group destructive
- and 8 more in this area

**Metadata 13**

- `delinea_secret_server.metadata.create_metadata` Create Metadata write
- `delinea_secret_server.metadata.create_metadata_field` Create metadata field write
- `delinea_secret_server.metadata.create_metadata_field_section` Create metadata field section write
- `delinea_secret_server.metadata.get_field_sections` Get metadata field sections read
- `delinea_secret_server.metadata.delete_metadata` Delete Metadata destructive
- `delinea_secret_server.metadata.delete_metadata_field` Disable metadata field destructive
- and 7 more in this area

**Ticket systems 13**

- `delinea_secret_server.ticket_systems.create_ticket_override_request` Creates ticket number override request write
- `delinea_secret_server.ticket_systems.create_ticket_system` Creates a Ticket System write
- `delinea_secret_server.ticket_systems.get_ticket_systems` Gets all ticket systems read
- `delinea_secret_server.ticket_systems.get_ticket_systems_v2` Gets all ticket systems read
- `delinea_secret_server.ticket_systems.get_ticket_systems_v3` Gets all ticket systems read
- `delinea_secret_server.ticket_systems.get_ticket_override` Get ticket system override read
- and 7 more in this area

Script **12** Roles **11** Secret hooks **11** Secret permissions **11** Disaster recovery **10** Jumpbox route **10** Launchers **10** Platform data integration **10** Secret access requests **10** Secret access requests V2 **10** Secret sessions **10** Dual controls **9** Event pipeline **9** Key management **9** Pba configuration **9** Secret erase requests **8** Workflow templates **8** Dependency changer **7** Domain name index **7** SDK client accounts **7** SDK client rules **7** Secret policy **7** SSH command menu **7** Dev ops secrets vault tenant **6** Event subscriptions **6** Folder permissions **6** Password requirements **6** Secret extensions **6** Secret server settings **6** Server nodes **6** SSH cipher suite **6** SSH command blocklist **6** Workflow step templates **6** App clients **5** Bulk operations **5** Character sets **5** Cloud diagnostics **5** Dev ops secrets vault sync **5** Event pipeline settings **5** Secret template permissions **5** Slack **5** SSH command **5** Advanced config settings **4** Application request **4** Directory services V2 **4** Schedule **4** Event pipeline trigger **3** O auth expiration **3** SQL replication **3** Audits **2** Bulk password changer operations **2** Enterprise **2** Feature flag **2** Mdi integration **2** Secret launchers **2** Activations **1** Active directory **1** API token **1** App state **1** Application accounts **1** Bundle **1** Connection manager settings **1** Diagnostics V2 **1** Event pipeline audit **1** Extended fields **1** Health check **1** HSM configuration **1** License **1** Mobile **1** One time password code **1** Rest API docs **1** Role audit **1** Role permissions **1** SDK client audits **1** Secret health **1** Security audit logs **1** Sites **1** Subscriptions **1** Version **1** Workflow instances **1**

This index shows a sample of each area. All 1,237 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The Delinea Secret Server MCP server, answered.

**Is there a Delinea Secret Server MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,237 Delinea Secret Server actions across configuration, discovery, secrets and users, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Delinea Secret Server.

**What do I need to connect Delinea Secret Server?**

Secret Server user name (a local user, DOMAIN\user, or an application account) with the roles the actions you call need and Password of that Secret Server user. Plus your app path and your host. The free call account { op: "connections.requirements", service: "delinea_secret_server" } lists exactly what to paste.

**Can an AI agent delete or change things in Delinea Secret Server?**

Only if its key allows it, and only with an explicit confirmation. 113 Delinea Secret Server actions are destructive, including delete User, delete Group and deactivate a Secret. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Delinea Secret Server API limit?**

actionlake paces every call to the limits in the Delinea Secret Server service file: 10 calls a second per connection. Repeated reads are answered from cache (355 Delinea Secret Server actions can be), which never reaches Delinea Secret Server.

**What does a Delinea Secret Server action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,237 Delinea Secret Server actions page). Cache hits, searches, dry runs and calls Delinea Secret Server refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Delinea Secret Server API does it cover?**

The Secret Server REST API (Swagger 2.0, 11.4.0) at your Delinea Secret Server instance's API base URL, which you enter when connecting. It is built from Delinea Secret Server's documentation as read on 23 October 2026. 1,237 actions in 110 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Delinea Secret Server data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Delinea Secret Server credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Delinea Secret Server

Shares the most action names with

- [Commvault Cloud 14](https://actionlake.com/connectors/commvault-cloud)
- [Domotz 13](https://actionlake.com/connectors/domotz)
- [Cato Networks SASE 11](https://actionlake.com/connectors/cato-networks-sase)
- [3CX 10](https://actionlake.com/connectors/3cx)
- [Site24x7 10](https://actionlake.com/connectors/site24x7)
- [Action1 9](https://actionlake.com/connectors/action1)

Joins with, on shared entities

- [Rubrik Security Cloud 4](https://actionlake.com/connectors/rubrik-security-cloud)
- [Cloudflare 4](https://actionlake.com/connectors/cloudflare)
- [Docebo 4](https://actionlake.com/connectors/docebo)
- [Canvas LMS 4](https://actionlake.com/connectors/canvas-lms)
- [D2L Brightspace 4](https://actionlake.com/connectors/d2l-brightspace)
- [Spacelift 4](https://actionlake.com/connectors/spacelift)

Browse

- [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Delinea Secret Server; the name is the vendor's own. Counts are from the Delinea Secret Server service file, version 1.0.0.

## Give your agent Delinea Secret Server today.

[Connect Delinea Secret Server free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/delinea-secret-server
More: https://actionlake.com/llms.txt