Connectors · Identity & security
Descope MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Descope and the rest of your systems. It gives your agent 443 Descope actions (149 reads, 202 writes and 92 that wait for a confirmation) and holds the Descope credential itself, so the agent never does. It paces Descope's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "descope.groups.load_groups", intent: "check which Descope account is connected"}# Load All External Groups for a Tenant · read · 1 upstream call- 443actionsin one signed file
- 149readlook, never change
- 202writecreate and update
- 92wait for a yesdestructive, confirmed first
Set up
Connect Descope in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Descope.
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
project_idDescope Project ID (Project Settings in the Descope console, starts with P)management_keyDescope Management Key (Company > Management Keys)hostWhere your Descope lives: your host
account { op: "connections.requirements", service: "descope" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "descope.groups.load_groups" }# load all external groups for a tenant · read · 1 upstream callcheck { action: "descope.users.create_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Descope at a glance
- Sign-in
- API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
project_idmanagement_key- Setup fields
host- Limits we pace to
- 100 calls a minute, per connection
- API covered
- Descope API 0.0.1 (OpenAPI 3.0.3)
api.descope.com - Built from
- Descope's documentation, read 23 October 2026docs.descope.comdocs.descope.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 113 of 149 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Descope up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Descope.
443 actions in 45 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 149readlook, never change
- 202writecreate and update
- 92destructivewait for a confirmation
Users
6112 read · 34 write · 15 destructive
Create User · Search Users · Load User · Update User
SSO
379 read · 21 write · 7 destructive
Add a named SSO application secret · Create SSO application custom attribute definitions · Create SSO application permission · Create SSO application role
Outbound apps
258 read · 13 write · 4 destructive
Batch Upload Outbound App Tenant OAuth Tokens · Batch Upload Outbound App User OAuth Tokens · Create Outbound App · Create outbound application according to existing dcr preset
Tenants
237 read · 11 write · 5 destructive
Create Tenant · Create Tenants Batch · Generate SSO Admin Link (v2) · Generate Tenant Admin SSO Link (Deprecated)
Fga
2113 read · 5 write · 3 destructive
Create FGA Backup · Get FGA Relations · Save FGA Schema · List FGA Backups
Third party apps
196 read · 7 write · 6 destructive
Add a named third party application secret · Create third party application · Create third party application (v2) (v2) · Load All third party applications
Authz
188 read · 4 write · 6 destructive
Create a list of authz relations · Return the list of targets and resources changed since the given date · Load an authz schema · Delete an authz namespace
Projects
187 read · 9 write · 2 destructive
Clone Project · Clone Project (Async) · Create Project · Import Project
37 more areas · 221 actions
- Auth access 16
- Access keys 15
- Lists 14
- MCP servers 14
- Families 13
- Resources 13
- Flows 12
- JWT 10
- Agentic identities 8
- Policies 8
- Roles 8
- Permissions 7
- Engines 6
- Descopers 5
- Management keys 5
- Oauth 5
- Scim 5
- Auth settings 4
- Connectors 4
- Localization 4
- Otp 4
- Password 4
- Templates 4
- Widgets 4
- Groups 3
- Impersonation 3
- Scope claim mappings 3
- Test users 3
- Admin portal 2
- Audit 2
- Embedded links 2
- Enchanted links 2
- Magic links 2
- Passkeys 2
- Themes 2
- Totp 2
- Analytics 1
Top actions
The Descope API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 15 of Descope's 15 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
descope.groups.load_groupsLoad All External Groups for a Tenant | Load All External Groups for a Tenant. | read | identity.group.list262 connectors |
descope.roles.load_all_rolesLoad All Roles | Load All Roles. | read | identity.role.list184 connectors |
descope.users.create_userCreate User | Create User. | write | identity.user.create262 connectors |
descope.users.search_usersSearch Users | Search Users. | read | identity.user.search40 connectors |
descope.roles.create_roleCreate Role | Create Role. | write | identity.role.create105 connectors |
descope.users.delete_userDelete User | Delete User. | destructive | identity.user.delete253 connectors |
descope.access_keys.create_access_keyCreate Access Key | Create Access Key. | write | identity.api_key.create100 connectors |
descope.permissions.load_all_permissionsLoad All Permission | Load All Permission. | read | identity.permission.list33 connectors |
descope.access_keys.load_access_keyLoad An Access Key | Load An Access Key. | read | identity.api_key.get66 connectors |
descope.audit.search_auditSearch Audit | Search Audit. | read | identity.audit_event.search7 connectors |
descope.flows.list_flowsList/Search Flows | List/Search Flows. | read | this connector |
descope.flows.import_flowImport Flow (v2) | Import Flow (v2). | write | this connector |
Try it
Prompts to paste into Claude.
Each one names the Descope actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Descope? List every user and their role.
calls
descope.users.search_users - Writewrite
Create User in Descope. Show me exactly what you will send before you save it.
calls
descope.users.create_user
Governance for Descope
Destructive actions wait for a yes.
92 Descope actions are destructive. The first 10:
- Delete User
descope.users.delete_user - Delete Role
descope.roles.delete_role - Delete Access Key
descope.access_keys.delete_access_key - Clear List
descope.lists.clear_list - Delete flow
descope.flows.delete_flow - Delete List
descope.lists.delete_list - Delete Flow
descope.flows.delete_flows - Batch Delete Roles
descope.roles.delete_roles - Batch Delete Users
descope.users.delete_users - Delete an authz schema
descope.authz.delete_schema
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete User?
intent: the user asked me to delete User
account { op: "keys.create", name: "descope-agent", allowed_actions: ["descope.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "descope.users.delete_user", approver: "[email protected]" }, { match: "descope.roles.delete_role", approver: "[email protected]" }, { match: "descope.access_keys.delete_access_key", approver: "[email protected]" } ]}Cost
What Descope costs on actionlake.
Every Descope action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Descope refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 443 Descope actions
- 443actions pageeach page of a long list is one call
- 113reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Descope action.
443 actions by area: the id your agent calls, what it does, and its effect.
Users61
descope.users.create_userCreate Userwritedescope.users.load_userLoad Userreaddescope.users.search_usersSearch Usersreaddescope.users.update_userUpdate Userwritedescope.users.create_test_userCreate Test Userwritedescope.users.create_user_custom_attributeCreate a Custom Attributeswrite- and 55 more in this area
SSO37
descope.sso.add_sso_application_secretAdd a named SSO application secretwritedescope.sso.create_sso_application_custom_attributeCreate SSO application custom attribute definitionswritedescope.sso.create_sso_application_permissionCreate SSO application permissionwritedescope.sso.create_sso_application_roleCreate SSO application rolewritedescope.sso.configure_ss_oauth_typeEnable or disable an SSO configurationwritedescope.sso.configure_sso_redirect_urlConfigure SSO Redirect URLwrite- and 31 more in this area
Outbound apps25
descope.outbound_apps.batch_upload_outbound_app_tenant_oauth_tokensBatch Upload Outbound App Tenant OAuth Tokenswritedescope.outbound_apps.batch_upload_outbound_app_user_oauth_tokensBatch Upload Outbound App User OAuth Tokenswritedescope.outbound_apps.create_outbound_appCreate Outbound Appwritedescope.outbound_apps.create_outbound_app_by_dcr_presetCreate outbound application according to existing dcr presetwritedescope.outbound_apps.create_outbound_app_by_templateCreate outbound application by existing templatewritedescope.outbound_apps.create_outbound_scim_configurationCreate outbound SCIM configurationwrite- and 19 more in this area
Tenants23
descope.tenants.create_tenantCreate Tenantwritedescope.tenants.create_tenants_batchCreate Tenants Batchwritedescope.tenants.generate_tenant_admin_link_ssoGenerate SSO Admin Link (v2)writedescope.tenants.generate_tenant_admin_link_sso_deprecatedGenerate Tenant Admin SSO Link (Deprecated)writedescope.tenants.configure_tenant_settingsUpdate Tenant Session Settingswritedescope.tenants.delete_tenantDelete Tenantdestructive- and 17 more in this area
Fga21
descope.fga.create_fga_backupCreate FGA Backupwritedescope.fga.create_fga_relationsGet FGA Relationswritedescope.fga.create_fga_schemaSave FGA Schemawritedescope.fga.list_fga_backupsList FGA Backupsreaddescope.fga.auth_zen_action_searchAuthZEN Action Searchreaddescope.fga.auth_zen_evaluationAuthZEN Access Evaluationread- and 15 more in this area
Third party apps19
descope.third_party_apps.add_third_party_application_secretAdd a named third party application secretwritedescope.third_party_apps.create_third_party_applicationCreate third party applicationwritedescope.third_party_apps.create_third_party_application_v2Create third party application (v2) (v2)writedescope.third_party_apps.load_all_third_party_applicationsLoad All third party applicationsreaddescope.third_party_apps.delete_third_party_applicationDelete third party applicationdestructivedescope.third_party_apps.delete_third_party_application_consentsDelete third party application consentsdestructive- and 13 more in this area
Authz18
descope.authz.create_relationsCreate a list of authz relationswritedescope.authz.delete_namespaceDelete an authz namespacedestructivedescope.authz.get_modifiedReturn the list of targets and resources changed since the given datereaddescope.authz.load_schemaLoad an authz schemareaddescope.authz.delete_relation_definitionDelete an authz relation definitiondestructivedescope.authz.delete_relationsDelete a list of authz relationsdestructive- and 12 more in this area
Projects18
descope.projects.clone_projectClone Projectwritedescope.projects.clone_project_asyncClone Project (Async)writedescope.projects.create_projectCreate Projectwritedescope.projects.import_projectImport Projectwritedescope.projects.delete_projectDelete Projectdestructivedescope.projects.delete_project_postDelete Projectdestructive- and 12 more in this area
Auth access16
descope.auth_access.create_auth_access_ruleCreate auth access policy rulewritedescope.auth_access.create_tenant_auth_access_ruleCreate tenant auth access policy rulewritedescope.auth_access.load_all_auth_access_rulesLoad all auth access policy rulesreaddescope.auth_access.load_all_tenant_auth_access_rulesLoad all tenant auth access policy rulesreaddescope.auth_access.delete_auth_access_ruleDelete auth access policy ruledestructivedescope.auth_access.delete_tenant_auth_access_ruleDelete tenant auth access policy ruledestructive- and 10 more in this area
Access keys15
descope.access_keys.create_access_keyCreate Access Keywritedescope.access_keys.delete_access_keyDelete Access Keydestructivedescope.access_keys.import_access_keysImport Access Keywritedescope.access_keys.load_access_keyLoad An Access Keyreaddescope.access_keys.activate_access_keyActivate Access Keywritedescope.access_keys.activate_access_keysBatch Activate Access Keyswrite- and 9 more in this area
Lists14
descope.lists.add_ips_to_listAdd IPs to Listwritedescope.lists.add_texts_to_listAdd Texts to Listwritedescope.lists.create_listCreate Listwritedescope.lists.get_all_listsGet All Listsreaddescope.lists.check_ip_in_listCheck IP in Listreaddescope.lists.check_text_in_listCheck Text in Listread- and 8 more in this area
MCP servers14
descope.mcp_servers.create_mcp_serverCreate MCP Serverwritedescope.mcp_servers.create_mcp_server_clientCreate MCP Server Clientwritedescope.mcp_servers.load_all_mcp_serversLoad All MCP Serversreaddescope.mcp_servers.search_mcp_server_clientsSearch MCP Server Clientsreaddescope.mcp_servers.delete_mcp_serverDelete MCP Serverdestructivedescope.mcp_servers.delete_mcp_server_clientDelete MCP Server Clientdestructive- and 8 more in this area
Families13
descope.families.create_familyCreate Familywritedescope.families.create_family_custom_attributeCreate Family Custom Attributewritedescope.families.create_family_dependentCreate Family Dependentwritedescope.families.impersonate_family_dependentImpersonate Family Dependentwritedescope.families.delete_familyDelete Familydestructivedescope.families.delete_family_custom_attributeDelete Family Custom Attributedestructive- and 7 more in this area
Resources13
descope.resources.create_dynamic_registration_templateCreate dynamic registration templatewritedescope.resources.create_resourceCreate resourcewritedescope.resources.load_all_dynamic_registration_templatesLoad all dynamic registration templatesreaddescope.resources.load_all_resourcesLoad all resourcesreaddescope.resources.delete_dynamic_registration_templateDelete dynamic registration templatedestructivedescope.resources.delete_dynamic_registration_templatesDelete dynamic registration templatesdestructive- and 7 more in this area
Flows12
descope.flows.import_flowImport Flow (v2)writedescope.flows.list_flow_templatesList Flow Templatesreaddescope.flows.list_flowsList/Search Flowsreaddescope.flows.run_management_flowRun Management Flowwritedescope.flows.complete_external_auth_flowComplete External Authenticationwritedescope.flows.delete_flowDelete flowdestructive- and 6 more in this area
JWT10
descope.jwt.apply_jwt_template_from_libraryApply JWT Template From Librarywritedescope.jwt.create_jwt_templateCreate JWT Templatewritedescope.jwt.list_jwt_template_libraryList JWT Template Libraryreaddescope.jwt.list_jwt_templatesList JWT Templatesreaddescope.jwt.delete_jwt_templateDelete JWT Templatedestructivedescope.jwt.load_jwt_templateLoad JWT Templateread- and 4 more in this area
Agentic identities8
descope.agentic_identities.create_governance_access_requestCreate governance access requestwritedescope.agentic_identities.get_governance_access_requestGet governance access requestreaddescope.agentic_identities.search_agentic_identitiesSearch agentic identitiesreaddescope.agentic_identities.search_governance_access_requestsSearch governance access requestsreaddescope.agentic_identities.get_governance_settingsGet governance settingsreaddescope.agentic_identities.resolve_governance_access_requestResolve governance access requestwrite- and 2 more in this area
Policies8
descope.policies.create_policy_ruleCreate policy rulewritedescope.policies.load_policy_ruleLoad policy rulereaddescope.policies.load_policy_rule_settingsLoad policy rule settingsreaddescope.policies.search_policy_rulesSearch policy rulesreaddescope.policies.delete_policy_ruleDelete policy ruledestructivedescope.policies.reorder_policy_ruleReorder a policy rulewrite- and 2 more in this area
Roles8
descope.roles.create_roleCreate Rolewritedescope.roles.delete_roleDelete Roledestructivedescope.roles.load_all_rolesLoad All Rolesreaddescope.roles.update_roleUpdate Rolewritedescope.roles.create_rolesBulk Create Roleswritedescope.roles.delete_rolesBatch Delete Rolesdestructive- and 2 more in this area
Permissions7
descope.permissions.create_permissionCreate Permissionwritedescope.permissions.create_permissionsBulk Create Permissionswritedescope.permissions.load_all_permissionsLoad All Permissionreaddescope.permissions.update_permissionUpdate Permissionwritedescope.permissions.delete_permissionDelete Permissiondestructivedescope.permissions.delete_permissionsBulk Delete Permissionsdestructive- and 1 more in this area
Engines6
descope.engines.create_engineCreate enginewritedescope.engines.load_engineLoad engine by IDreaddescope.engines.load_enginesLoad all enginesreaddescope.engines.update_engineUpdate enginewritedescope.engines.delete_engineDelete enginedestructivedescope.engines.rotate_engine_secretRotate engine secretdestructive
Descopers5
descope.descopers.create_descopersCreate Descoperwritedescope.descopers.get_descoperGet Descoperreaddescope.descopers.list_descopersList Descopersreaddescope.descopers.update_descoperUpdate Descoperwritedescope.descopers.delete_descoperDelete Descoperdestructive
Management keys5
descope.management_keys.create_management_keyCreate Management Keywritedescope.management_keys.get_management_keyGet Management Keyreaddescope.management_keys.search_management_keysSearch Management Keysreaddescope.management_keys.update_management_keyUpdate Management Keywritedescope.management_keys.delete_management_keysDelete Management Keydestructive
Oauth5
descope.oauth.get_oauth_providerGet OAuth providerreaddescope.oauth.get_oauth_settingsGet OAuth settingsreaddescope.oauth.set_oauth_providerSet OAuth providerwritedescope.oauth.set_oauth_settingsSet OAuth settingswritedescope.oauth.delete_oauth_providerDelete OAuth providerdestructive
Scim5
descope.scim.activate_scim_access_keysActivate SCIM Access Keyswritedescope.scim.create_scim_access_keyCreate SCIM Access Keywritedescope.scim.load_scim_access_keysLoad SCIM Access Keysreaddescope.scim.revoke_scim_access_keysRevoke SCIM Access Keysdestructivedescope.scim.rotate_scim_access_keyRotate SCIM Access Keydestructive
Auth settings4
descope.auth_settings.anonymousAnonymous Userwritedescope.auth_settings.generate_jwt_sign_inGenerate JWT for Sign-Inwritedescope.auth_settings.generate_jwt_sign_upGenerate JWT for Sign-Upwritedescope.auth_settings.generate_jwt_sign_up_or_inGenerate JWT for Sign-Up or Sign-Inwrite
Connectors4
descope.connectors.create_connectorCreate connectorwritedescope.connectors.delete_connectorDelete connectordestructivedescope.connectors.get_connectorGet connectorreaddescope.connectors.update_connectorUpdate connectorwrite
Localization4
descope.localization.export_flow_localizationExport Flow Localizationreaddescope.localization.export_messaging_template_localizationExport Messaging Localizationreaddescope.localization.import_flow_localizationImport Flow Localizationwritedescope.localization.import_messaging_localizationImport Messaging Localizationwrite
Otp4
descope.otp.get_otp_settingsGet OTP settingsreaddescope.otp.get_tenant_otp_settingsGet OTP Settings for a tenantreaddescope.otp.set_otp_settingsSet OTP settingswritedescope.otp.set_tenant_otp_settingsSet OTP Settings for a tenantwrite
Password4
descope.password.configure_password_settingsUpdate Tenant Password Settingswritedescope.password.get_password_settingsGet Tenant Password Settingsreaddescope.password.get_password_settings_v2Get password settings (v2)readdescope.password.set_password_settings_v2Set password settings (v2)write
Templates4
descope.templates.create_messaging_templateCreate templatewritedescope.templates.delete_messaging_templateDelete templatedestructivedescope.templates.get_messaging_templateGet templatereaddescope.templates.update_messaging_templateUpdate templatewrite
Widgets4
descope.widgets.delete_widgetDelete widgetdestructivedescope.widgets.get_widgetGet widgetreaddescope.widgets.list_widgetsList all widgetsreaddescope.widgets.set_widgetSet widgetwrite
Groups3
descope.groups.load_group_membersLoad All Members of a specific External Groupreaddescope.groups.load_groupsLoad All External Groups for a Tenantreaddescope.groups.load_member_groupsLoad All External Groups for Specific Membersread
Impersonation3
descope.impersonation.impersonateImpersonate Userwritedescope.impersonation.impersonate_stepupImpersonate Stepupwritedescope.impersonation.stop_impersonationStop Impersonationdestructive
Scope claim mappings3
descope.scope_claim_mappings.delete_scope_claim_mappingDelete Scope Claim Mappingdestructivedescope.scope_claim_mappings.get_scope_claim_mappingGet Scope Claim Mappingreaddescope.scope_claim_mappings.set_scope_claim_mappingSet Scope Claim Mappingwrite
Test users3
descope.test_users.generate_enchanted_link_for_test_userGenerate Enchanted Linkwritedescope.test_users.generate_magic_link_for_test_userGenerate Magic Linkwritedescope.test_users.generate_otp_for_test_userGenerate OTPwrite
Admin portal2
descope.admin_portal.get_admin_portal_settingsGet admin portal settingsreaddescope.admin_portal.set_admin_portal_settingsSet admin portal settingswrite
Audit2
descope.audit.create_audit_eventCreate Audit Eventwritedescope.audit.search_auditSearch Auditread
Embedded links2
descope.embedded_links.get_embedded_link_settingsGet embedded link settingsreaddescope.embedded_links.set_embedded_link_settingsSet embedded link settingswrite
Enchanted links2
descope.enchanted_links.get_enchanted_link_settingsGet enchanted link settingsreaddescope.enchanted_links.set_enchanted_link_settingsSet enchanted link settingswrite
Magic links2
descope.magic_links.get_magic_link_settingsGet magic link settingsreaddescope.magic_links.set_magic_link_settingsSet magic link settingswrite
Passkeys2
descope.passkeys.get_passkey_settingsGet passkey settingsreaddescope.passkeys.set_passkey_settingsSet passkey settingswrite
Themes2
descope.themes.export_themeExport Theme (v2)readdescope.themes.import_themeImport Theme (v2)write
Totp2
descope.totp.get_totp_settingsGet TOTP settingsreaddescope.totp.set_totp_settingsSet TOTP settingswrite
Analytics1
descope.analytics.search_analyticsSearch Analyticsread
This index shows a sample of each area. All 443 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Descope MCP server, answered.
Is there a Descope MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 443 Descope actions across users, SSO, outbound apps and tenants, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Descope.
What do I need to connect Descope?
Descope Project ID (Project Settings in the Descope console, starts with P) and Descope Management Key (Company > Management Keys). Plus your host. The free call account { op: "connections.requirements", service: "descope" } lists exactly what to paste.
Can an AI agent delete or change things in Descope?
Only if its key allows it, and only with an explicit confirmation. 92 Descope actions are destructive, including delete User, delete Role and delete Access Key. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Descope API limit?
actionlake paces every call to the limits in the Descope service file: 100 calls a minute per connection. Repeated reads are answered from cache (113 Descope actions can be), which never reaches Descope.
What does a Descope action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (443 Descope actions page). Cache hits, searches, dry runs and calls Descope refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Descope API does it cover?
The Descope API 0.0.1 (OpenAPI 3.0.3) at api.descope.com by default, or the base URL set when you connect. It is built from Descope's documentation as read on 23 October 2026. 443 actions in 45 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Descope data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Descope credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Descope today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
