Connectors · MSP & PSA

IRONSCALES MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to IRONSCALES and the rest of your systems. It gives your agent 71 IRONSCALES actions (43 reads, 21 writes and 7 that wait for a confirmation) and holds the IRONSCALES credential itself, so the agent never does. It paces IRONSCALES's limits and records every call.

Connect IRONSCALES free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

71actionsin one signed file
43readlook, never change
21writecreate and update
7wait for a yesdestructive, confirmed first

Set up

Connect IRONSCALES in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect IRONSCALES.
Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key.
- api_keyIRONSCALES API key: the company token (Settings > General > Company Token) or a partner API key
- regionYour IRONSCALES region
- scopesYour IRONSCALES scopes
```
account { op: "connections.requirements", service: "ironscales" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "ironscales.campaigns.list_details" }# get campaigns details · read · 1 upstream callcheck { action: "ironscales.mailboxes.add", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

IRONSCALES at a glance

Sign-in: Session login. actionlake opens the session and renews it when it expires.
You provide: api_key
Setup fields: regionscopes
Limits we pace to: 120 calls a minute, per connection
API covered: IRONSCALES Management API v1 (Swagger 2.0), at your region's ironscales.com address, set when you connect
Built from: IRONSCALES's documentation, read 23 October 2026members.ironscales.com members.ironscales.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 43 of 43 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 3, so ask can line IRONSCALES up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in IRONSCALES.

71 actions in 24 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

43readlook, never change
21writecreate and update
7destructivewait for a confirmation

Sat campaigns
10
4 read · 4 write · 2 destructive
Get Campaigns List · Create Draft Campaign · Get Campaign Details · Delete Campaign
Incidents
7
4 read · 3 write · 0 destructive
Get list of Incidents · Get details of specific incident · Get IDs list of unclassified incidents · Get list of Scanback Incidents
Mailboxes
5
3 read · 2 write · 0 destructive
List of a company mailboxes · Add company mailboxes · Get user campaign performance · Get compliance report
Mitigation stats
5
5 read · 0 write · 0 destructive
Get emails stats · Get a company mitigation statistics · Get a company mitigation statistics V2 · Most targeted departments
Allow list
4
1 read · 2 write · 1 destructive
Get allow list settings · Create allow list settings · Update allow list entry · Delete allow list entries
Challenged alert settings
4
1 read · 2 write · 1 destructive
Create challenged notification settings · Append challenged notification settings · Get challenged notification settings · Delete challenged notification settings
Incident alert settings
4
1 read · 2 write · 1 destructive
Create company notification settings · Append to company notification settings · Get company notification settings · Delete company notification settings
Sat ignore ip rules
4
1 read · 2 write · 1 destructive
Create ignore IP rule · List ignore IP rules · Update ignore IP rule · Delete ignore IP rules

16 more areas · 28 actions

Sat participants 3
Sat templates 3
Sat trainings 3
Account takeover incidents 2
Account takeover settings 2
Campaign participants 2
Impersonation incidents 2
Mitigations 2
Sat report recipients 2
Campaigns 1
Deepfake events 1
Escalated emails 1
Incident stats 1
Sat call to action pages 1
Sat landing pages 1
Sat setup 1

Top actions

The IRONSCALES API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 9 of IRONSCALES's 9 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`ironscales.mailboxes.list`List of a company mailboxes	List of a company mailboxes.	read	`comm.mailbox.list`18 connectors
`ironscales.incidents.list`Get list of Incidents	Get list of Incidents.	read	`security.incident.list`17 connectors
`ironscales.mailboxes.add`Add company mailboxes	Add company mailboxes.	write	`comm.mailbox.create`15 connectors
`ironscales.incidents.get`Get details of specific incident	Get details of specific incident.	read	`security.incident.get`17 connectors
`ironscales.allow_list.list`Get allow list settings	Get allow list settings.	read	`security.allowlist_entry.list`6 connectors
`ironscales.sat_campaigns.list`Get Campaigns List	Get Campaigns List.	read	`security.phishing_simulation.list`4 connectors
`ironscales.sat_campaigns.create`Create Draft Campaign	Create Draft Campaign.	write	`security.phishing_simulation.create`2 connectors
`ironscales.sat_campaigns.delete`Delete Campaign	Delete Campaign.	destructive	`security.phishing_simulation.delete`2 connectors
`ironscales.allow_list.create`Create allow list settings	Create allow list settings.	write	this connector
`ironscales.sat_templates.list`Get Templates List	Get Templates List.	read	this connector
`ironscales.sat_trainings.list`Get Trainings List	Get Trainings List.	read	this connector
`ironscales.deepfake_events.list`Get list of Deepfake SIEM events	Get list of Deepfake SIEM events.	read	this connector

Try it

Prompts to paste into Claude.

Each one names the IRONSCALES actions it will call, so you know what it reads and what it changes before you send it.

Readread
Which IRONSCALES incidents are open, and how long has each been open?
callsironscales.incidents.list
Writewrite
Add company mailboxes in IRONSCALES. Show me exactly what you will send before you save it.
callsironscales.mailboxes.add

Governance for IRONSCALES

Destructive actions wait for a yes.

7 IRONSCALES actions are destructive. These are all of them:

Delete Campaignironscales.sat_campaigns.delete
Delete allow list entriesironscales.allow_list.delete_many
Remove campaign report recipientironscales.sat_report_recipients.delete
Delete company notification settingsironscales.incident_alert_settings.delete
Delete ignore IP rulesironscales.sat_ignore_ip_rules.delete_many
Delete challenged notification settingsironscales.challenged_alert_settings.delete
Stop Campaignironscales.sat_campaigns.stop

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doironscales.sat_campaigns.deleteconfirm_policy: human

Delete Campaign?

intent: the user asked me to delete Campaign

run suspended · waiting for a named person · key ironscales-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "ironscales-agent",  allowed_actions: ["ironscales.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "ironscales.sat_campaigns.delete", approver: "[email protected]" },    { match: "ironscales.allow_list.delete_many", approver: "[email protected]" },    { match: "ironscales.sat_report_recipients.delete", approver: "[email protected]" }  ]}

Illustrative. Scoped to IRONSCALES only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What IRONSCALES costs on actionlake.

Every IRONSCALES action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call IRONSCALES refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 71 IRONSCALES actions
71actions pageeach page of a long list is one call
43reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every IRONSCALES action.

71 actions by area: the id your agent calls, what it does, and its effect.

Sat campaigns10

ironscales.sat_campaigns.approveApprove Campaignwrite
ironscales.sat_campaigns.createCreate Draft Campaignwrite
ironscales.sat_campaigns.deleteDelete Campaigndestructive
ironscales.sat_campaigns.getGet Campaign Detailsread
ironscales.sat_campaigns.listGet Campaigns Listread
ironscales.sat_campaigns.lookupGet Campaigns Lookupread
ironscales.sat_campaigns.statsGet Campaign Statsread
ironscales.sat_campaigns.stopStop Campaigndestructive
ironscales.sat_campaigns.test_send_simulationTest Send Simulation Campaignwrite
ironscales.sat_campaigns.test_send_trainingTest Send Training Campaignwrite

Incidents7

ironscales.incidents.classifyClassify specific incidentwrite
ironscales.incidents.getGet details of specific incidentread
ironscales.incidents.listGet list of Incidentsread
ironscales.incidents.list_ids_by_statusGet IDs list of unclassified incidentsread
ironscales.incidents.list_scanbackGet list of Scanback Incidentsread
ironscales.incidents.reclusterRecluster incidentwrite
ironscales.incidents.unclusterUncluster incidentwrite

Mailboxes5

ironscales.mailboxes.addAdd company mailboxeswrite
ironscales.mailboxes.bulk_updateBulk edit of a company mailboxeswrite
ironscales.mailboxes.campaign_performanceGet user campaign performanceread
ironscales.mailboxes.compliance_reportGet compliance reportread
ironscales.mailboxes.listList of a company mailboxesread

Mitigation stats5

ironscales.mitigation_stats.emailsGet emails statsread
ironscales.mitigation_stats.getGet a company mitigation statisticsread
ironscales.mitigation_stats.get_v2Get a company mitigation statistics V2read
ironscales.mitigation_stats.most_targeted_departmentsMost targeted departmentsread
ironscales.mitigation_stats.most_targeted_employeesMost targeted employeesread

Allow list4

ironscales.allow_list.createCreate allow list settingswrite
ironscales.allow_list.delete_manyDelete allow list entriesdestructive
ironscales.allow_list.listGet allow list settingsread
ironscales.allow_list.updateUpdate allow list entrywrite

Challenged alert settings4

ironscales.challenged_alert_settings.appendAppend challenged notification settingswrite
ironscales.challenged_alert_settings.createCreate challenged notification settingswrite
ironscales.challenged_alert_settings.deleteDelete challenged notification settingsdestructive
ironscales.challenged_alert_settings.getGet challenged notification settingsread

Incident alert settings4

ironscales.incident_alert_settings.appendAppend to company notification settingswrite
ironscales.incident_alert_settings.createCreate company notification settingswrite
ironscales.incident_alert_settings.deleteDelete company notification settingsdestructive
ironscales.incident_alert_settings.getGet company notification settingsread

Sat ignore ip rules4

ironscales.sat_ignore_ip_rules.createCreate ignore IP rulewrite
ironscales.sat_ignore_ip_rules.delete_manyDelete ignore IP rulesdestructive
ironscales.sat_ignore_ip_rules.listList ignore IP rulesread
ironscales.sat_ignore_ip_rules.updateUpdate ignore IP rulewrite

Sat participants3

ironscales.sat_participants.calculateCalculate Participantsread
ironscales.sat_participants.optionsGet Participants Listread
ironscales.sat_participants.searchSearch Participantsread

Sat templates3

ironscales.sat_templates.listGet Templates Listread
ironscales.sat_templates.list_categoriesGet Template Categoriesread
ironscales.sat_templates.test_sendTest Send Templatewrite

Sat trainings3

ironscales.sat_trainings.listGet Trainings Listread
ironscales.sat_trainings.list_providersGet Training Providersread
ironscales.sat_trainings.previewGet Training Preview URLread

Account takeover incidents2

ironscales.account_takeover_incidents.getGet Account Takeover incident detailsread
ironscales.account_takeover_incidents.remediateCreate Account Takeover remediationwrite

Account takeover settings2

ironscales.account_takeover_settings.getGet account takeover sensitivity settingsread
ironscales.account_takeover_settings.updateUpdate account takeover sensitivity settingswrite

Campaign participants2

ironscales.campaign_participants.listGet campaign participants detailsread
ironscales.campaign_participants.perform_actionPerform participants actionwrite

Impersonation incidents2

ironscales.impersonation_incidents.listGet the latest company impersonation incidentsread
ironscales.impersonation_incidents.queryGet the latest company impersonation paginated incidentsread

Mitigations2

ironscales.mitigations.details_by_incidentGet details of mitigations per mailboxread
ironscales.mitigations.list_incidentsGet a company mitigation detailsread

Sat report recipients2

ironscales.sat_report_recipients.deleteRemove campaign report recipientdestructive
ironscales.sat_report_recipients.listList campaign report recipientsread

Campaigns1

ironscales.campaigns.list_detailsGet campaigns detailsread

Deepfake events1

ironscales.deepfake_events.listGet list of Deepfake SIEM eventsread

Escalated emails1

ironscales.escalated_emails.listList of escalated emailsread

Incident stats1

ironscales.incident_stats.remediation_statusesRemediation statuses statsread

Sat call to action pages1

ironscales.sat_call_to_action_pages.listGet call for action pagesread

Sat landing pages1

ironscales.sat_landing_pages.listGet landing pagesread

Sat setup1

ironscales.sat_setup.getGet Campaign Setupread

Questions

The IRONSCALES MCP server, answered.

Is there an IRONSCALES MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 71 IRONSCALES actions across sat campaigns, incidents, mailboxes and mitigation stats, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by IRONSCALES.

What do I need to connect IRONSCALES?

IRONSCALES API key: the company token (Settings > General > Company Token) or a partner API key. Plus your region and your scopes. The free call account { op: "connections.requirements", service: "ironscales" } lists exactly what to paste.

Can an AI agent delete or change things in IRONSCALES?

Only if its key allows it, and only with an explicit confirmation. 7 IRONSCALES actions are destructive, including delete Campaign, delete allow list entries and remove campaign report recipient. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my IRONSCALES API limit?

actionlake paces every call to the limits in the IRONSCALES service file: 120 calls a minute per connection. Repeated reads are answered from cache (43 IRONSCALES actions can be), which never reaches IRONSCALES.

What does an IRONSCALES action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (71 IRONSCALES actions page). Cache hits, searches, dry runs and calls IRONSCALES refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which IRONSCALES API does it cover?

The IRONSCALES Management API v1 (Swagger 2.0) at your region's ironscales.com address, set when you connect. It is built from IRONSCALES's documentation as read on 23 October 2026. 71 actions in 24 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my IRONSCALES data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your IRONSCALES credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent IRONSCALES today.

Connect IRONSCALES free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

IRONSCALES MCP server for AI agents.

Connect IRONSCALES in three steps.

Add actionlake to Claude.

Connect IRONSCALES.

Make the first call. Check before a write.

What an AI agent can do in IRONSCALES.

Sat campaigns

Incidents

Mailboxes

Mitigation stats

Allow list

Challenged alert settings

Incident alert settings

Sat ignore ip rules