Skip to content
actionlake
Start free

Connectors · Email & messaging

Knock MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Knock and the rest of your systems. It gives your agent 118 Knock actions (39 reads, 58 writes and 21 that wait for a confirmation) and holds the Knock credential itself, so the agent never does. It paces Knock's limits and records every call.

Connect Knock freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "knock.users.list_users",  intent: "check which Knock account is connected"}# List users · read · 1 upstream call
  • 118actionsin one signed file
  • 39readlook, never change
  • 58writecreate and update
  • 21wait for a yesdestructive, confirmed first

Set up

Connect Knock in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Knock.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • secret_keyKnock secret API key (sk_...)
    account { op: "connections.requirements", service: "knock" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "knock.users.list_users" }# list users · read · 1 upstream callcheck { action: "knock.schedules.create_schedules", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Knock at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
secret_key
Limits we pace to
60 calls a second, per connection
API covered
Knock API v1 (OpenAPI 3, api.knock.app)api.knock.app
Built from
Knock's documentation, read 23 October 2026docs.knock.appdocs.knock.app
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
29 of 39 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Knock up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Knock.

118 actions in 12 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 39readlook, never change
  • 58writecreate and update
  • 21destructivewait for a confirmation

  1. Users

    37

    12 read · 20 write · 5 destructive

    List users · Get user · Delete user · Merge users

  2. Objects

    26

    8 read · 12 write · 6 destructive

    Add subscriptions · Bulk add subscriptions · List messages · List preference sets

  3. Messages

    25

    7 read · 18 write · 0 destructive

    List messages · List delivery logs · Get message · Batch get message contents

  4. Tenants

    6

    2 read · 2 write · 2 destructive

    List tenants · Get a tenant · Delete a tenant · Bulk delete tenants

  5. Schedules

    5

    1 read · 3 write · 1 destructive

    List schedules · Create schedules · Update schedules · Delete schedules

  6. MS teams

    4

    3 read · 0 write · 1 destructive

    Microsoft Teams: List channels · Microsoft Teams: List teams · Microsoft Teams: Check auth · Microsoft Teams: Revoke access

  7. Workflows

    4

    0 read · 0 write · 4 destructive

    Cancel workflow · Trigger workflow · Trigger workflow · Cancel workflow

  8. Audiences

    3

    1 read · 1 write · 1 destructive

    List members · Add members · Remove members

4 more areas · 8 actions
  • Slack 3
  • Integrations 2
  • Workflow recipient runs 2
  • Bulk operations 1

Top actions

The Knock API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 20 of Knock's 20 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
knock.users.list_usersList usersList users.readidentity.user.list474 connectors
knock.users.get_userGet userGet user.readidentity.user.get399 connectors
knock.messages.list_messagesList messagesList messages.readcomm.message.list42 connectors
knock.audiences.list_audience_membersList membersList members.readcomm.audience_member.list23 connectors
knock.messages.list_message_delivery_logsList delivery logsList delivery logs.readcomm.delivery_event.list16 connectors
knock.messages.get_messageGet messageGet message.readcomm.message.get33 connectors
knock.schedules.list_schedulesList schedulesList schedules.readautomation.schedule.list18 connectors
knock.tenants.list_tenantsList tenantsList tenants.readplatform.tenant.list70 connectors
knock.schedules.create_schedulesCreate schedulesCreate schedules.writeautomation.schedule.create16 connectors
knock.audiences.add_audience_membersAdd membersAdd members.writecomm.audience_member.add18 connectors
knock.schedules.update_schedulesUpdate schedulesUpdate schedules.writeautomation.schedule.update16 connectors
knock.workflows.cancel_workflowCancel workflowCancel workflow.destructiveautomation.workflow_run.cancel16 connectors

Try it

Prompts to paste into Claude.

Each one names the Knock actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Knock? List every user and their role.

    callsknock.users.list_users

  2. Writewrite

    Create schedules in Knock. Show me exactly what you will send before you save it.

    callsknock.schedules.create_schedules

Governance for Knock

Destructive actions wait for a yes.

21 Knock actions are destructive. These are all of them:

  • Delete userknock.users.delete_user
  • Remove membersknock.audiences.remove_audience_members
  • Delete schedulesknock.schedules.delete_schedules
  • Merge usersknock.users.merge_user
  • Cancel workflowknock.workflows.cancel_workflow
  • Delete a tenantknock.tenants.delete_tenant
  • Slack: Revoke accessknock.slack.revoke_access
  • Delete an objectknock.objects.delete_object
  • Microsoft Teams: Revoke accessknock.ms_teams.revoke_access
  • Bulk delete usersknock.users.bulk_delete_users
  • Trigger workflowknock.workflows.trigger_workflow
  • Bulk delete objectsknock.objects.bulk_delete_objects
  • Bulk delete tenantsknock.tenants.bulk_delete_tenants
  • Unset channel dataknock.users.unset_user_channel_data
  • Delete user preference setknock.users.delete_user_preference_set
  • Bulk delete subscriptionsknock.objects.bulk_delete_subscriptions
  • Unset channel dataknock.objects.unset_object_channel_data
  • Trigger workflowknock.workflows.trigger_workflow_by_name
  • Delete object preference setknock.objects.delete_object_preference_set
  • Delete subscriptionsknock.objects.delete_subscriptions_for_object
  • Cancel workflowknock.workflows.cancel_workflow_by_name

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doknock.users.delete_userconfirm_policy: human

Delete user?

intent: the user asked me to delete user

run suspended · waiting for a named person · key knock-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "knock-agent",  allowed_actions: ["knock.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "knock.users.delete_user", approver: "[email protected]" },    { match: "knock.audiences.remove_audience_members", approver: "[email protected]" },    { match: "knock.schedules.delete_schedules", approver: "[email protected]" }  ]}
Illustrative. Scoped to Knock only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Knock costs on actionlake.

Every Knock action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Knock refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 118 Knock actions
  • 118actions pageeach page of a long list is one call
  • 29reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Knock action.

118 actions by area: the id your agent calls, what it does, and its effect.

Users37
  • knock.users.bulk_delete_usersBulk delete usersdestructive
  • knock.users.bulk_identify_usersBulk identify userswrite
  • knock.users.bulk_set_user_preferencesBulk set preferenceswrite
  • knock.users.delete_userDelete userdestructive
  • knock.users.delete_user_preference_setDelete user preference setdestructive
  • knock.users.generate_preference_center_signed_urlCreate preference center signed URLwrite
  • knock.users.get_preference_center_configGet preference center configread
  • knock.users.get_userGet userread
  • knock.users.get_user_channel_dataGet channel dataread
  • knock.users.get_user_in_app_feed_settingsGet feed settingsread
  • knock.users.get_user_preference_setGet user preference setread
  • knock.users.identify_userIdentify userwrite
  • knock.users.list_guidesList guidesread
  • knock.users.list_messages_for_userList user messagesread
  • knock.users.list_subscriptions_for_userList user subscriptionsread
  • knock.users.list_user_in_app_feed_itemsList feed itemsread
  • knock.users.list_user_preference_setsList user preference setsread
  • knock.users.list_user_schedulesList user schedulesread
  • knock.users.list_usersList usersread
  • knock.users.mark_guide_archivedMark guide as archivedwrite
  • knock.users.mark_guide_interactedMark guide as interactedwrite
  • knock.users.mark_guide_message_archivedMark guide as archivedwrite
  • knock.users.mark_guide_message_interactedMark guide as interactedwrite
  • knock.users.mark_guide_message_seenMark guide as seenwrite
  • knock.users.mark_guide_seenMark guide as seenwrite
  • knock.users.mark_guide_unarchivedMark guide as unarchivedwrite
  • knock.users.merge_userMerge usersdestructive
  • knock.users.reset_guide_engagementReset guide engagementwrite
  • knock.users.set_user_channel_dataSet channel datawrite
  • knock.users.unset_user_channel_dataUnset channel datadestructive
  • knock.users.update_user_preference_categoriesUpdate categories in user preference setwrite
  • knock.users.update_user_preference_categoryUpdate category in user preference setwrite
  • knock.users.update_user_preference_channel_typeUpdate channel type in preference setwrite
  • knock.users.update_user_preference_channel_typesUpdate channel types in preference setwrite
  • knock.users.update_user_preference_setUpdate user preference setwrite
  • knock.users.update_user_preference_workflowUpdate workflow in user preference setwrite
  • knock.users.update_user_preference_workflowsUpdate workflows in preference setwrite
Objects26
  • knock.objects.add_subscriptions_for_objectAdd subscriptionswrite
  • knock.objects.bulk_add_subscriptionsBulk add subscriptionswrite
  • knock.objects.bulk_delete_objectsBulk delete objectsdestructive
  • knock.objects.bulk_delete_subscriptionsBulk delete subscriptionsdestructive
  • knock.objects.bulk_set_objectsBulk set objectswrite
  • knock.objects.delete_objectDelete an objectdestructive
  • knock.objects.delete_object_preference_setDelete object preference setdestructive
  • knock.objects.delete_subscriptions_for_objectDelete subscriptionsdestructive
  • knock.objects.get_objectGet an objectread
  • knock.objects.get_object_channel_dataGet channel dataread
  • knock.objects.get_object_preference_setGet object preference setread
  • knock.objects.list_messages_for_objectList messagesread
  • knock.objects.list_object_preference_setsList preference setsread
  • knock.objects.list_object_schedulesList object schedulesread
  • knock.objects.list_objectsList objects in a collectionread
  • knock.objects.list_subscriptions_for_objectList subscriptionsread
  • knock.objects.set_objectSet an objectwrite
  • knock.objects.set_object_channel_dataSet channel datawrite
  • knock.objects.unset_object_channel_dataUnset channel datadestructive
  • knock.objects.update_object_preference_categoriesUpdate categories in preference setwrite
  • knock.objects.update_object_preference_categoryUpdate a category preferencewrite
  • knock.objects.update_object_preference_channel_typeUpdate a channel type preferencewrite
  • knock.objects.update_object_preference_channel_typesUpdate channel types in preference setwrite
  • knock.objects.update_object_preference_setUpdate a preference setwrite
  • knock.objects.update_object_preference_workflowUpdate a workflow preferencewrite
  • knock.objects.update_object_preference_workflowsUpdate workflows in preference setwrite
Messages25
  • knock.messages.archive_messageArchive messagewrite
  • knock.messages.batch_get_message_contentsBatch get message contentsread
  • knock.messages.batch_mark_messages_as_archivedMark messages as archivedwrite
  • knock.messages.batch_mark_messages_as_interactedMark messages as interactedwrite
  • knock.messages.batch_mark_messages_as_readMark messages as readwrite
  • knock.messages.batch_mark_messages_as_seenMark messages as seenwrite
  • knock.messages.batch_mark_messages_as_unarchivedMark messages as unarchivedwrite
  • knock.messages.batch_mark_messages_as_unreadMark messages as unreadwrite
  • knock.messages.batch_mark_messages_as_unseenMark messages as unseenwrite
  • knock.messages.bulk_update_messages_for_channelBulk update message statuses for channelwrite
  • knock.messages.get_messageGet messageread
  • knock.messages.get_message_contentsGet message contentread
  • knock.messages.list_message_activitiesList activitiesread
  • knock.messages.list_message_delivery_logsList delivery logsread
  • knock.messages.list_message_eventsList eventsread
  • knock.messages.list_messagesList messagesread
  • knock.messages.mark_message_interactedMark message as interactedwrite
  • knock.messages.mark_message_readMark message as readwrite
  • knock.messages.mark_message_seenMark message as seenwrite
  • knock.messages.mark_message_unreadMark message as unreadwrite
  • knock.messages.mark_message_unread_altMark message as unreadwrite
  • knock.messages.mark_message_unseenMark message as unseenwrite
  • knock.messages.mark_message_unseen_altMark message as unseenwrite
  • knock.messages.unarchive_messageUnarchive messagewrite
  • knock.messages.unarchive_message_altUnarchive messagewrite
Tenants6
  • knock.tenants.bulk_delete_tenantsBulk delete tenantsdestructive
  • knock.tenants.bulk_set_tenantsBulk set tenantswrite
  • knock.tenants.delete_tenantDelete a tenantdestructive
  • knock.tenants.get_tenantGet a tenantread
  • knock.tenants.list_tenantsList tenantsread
  • knock.tenants.set_tenantSet a tenantwrite
Schedules5
  • knock.schedules.bulk_create_schedulesCreate schedules in bulkwrite
  • knock.schedules.create_schedulesCreate scheduleswrite
  • knock.schedules.delete_schedulesDelete schedulesdestructive
  • knock.schedules.list_schedulesList schedulesread
  • knock.schedules.update_schedulesUpdate scheduleswrite
MS teams4
  • knock.ms_teams.auth_checkMicrosoft Teams: Check authread
  • knock.ms_teams.list_channelsMicrosoft Teams: List channelsread
  • knock.ms_teams.list_teamsMicrosoft Teams: List teamsread
  • knock.ms_teams.revoke_accessMicrosoft Teams: Revoke accessdestructive
Workflows4
  • knock.workflows.cancel_workflowCancel workflowdestructive
  • knock.workflows.cancel_workflow_by_nameCancel workflowdestructive
  • knock.workflows.trigger_workflowTrigger workflowdestructive
  • knock.workflows.trigger_workflow_by_nameTrigger workflowdestructive
Audiences3
  • knock.audiences.add_audience_membersAdd memberswrite
  • knock.audiences.list_audience_membersList membersread
  • knock.audiences.remove_audience_membersRemove membersdestructive
Slack3
  • knock.slack.auth_checkSlack: Check authread
  • knock.slack.list_channelsSlack: List channelsread
  • knock.slack.revoke_accessSlack: Revoke accessdestructive
Integrations2
  • knock.integrations.census_rpcProcess a Census RPC requestwrite
  • knock.integrations.hightouch_rpcProcess a Hightouch RPC requestwrite
Workflow recipient runs2
  • knock.workflow_recipient_runs.get_workflow_recipient_runGet a workflow recipient runread
  • knock.workflow_recipient_runs.list_workflow_recipient_runsList workflow recipient runsread
Bulk operations1
  • knock.bulk_operations.get_bulk_operationGet bulk operationread

Questions

The Knock MCP server, answered.

Is there a Knock MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 118 Knock actions across users, objects, messages and tenants, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Knock.

What do I need to connect Knock?

Knock secret API key (sk_...). The free call account { op: "connections.requirements", service: "knock" } lists exactly what to paste.

Can an AI agent delete or change things in Knock?

Only if its key allows it, and only with an explicit confirmation. 21 Knock actions are destructive, including delete user, remove members and delete schedules. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Knock API limit?

actionlake paces every call to the limits in the Knock service file: 60 calls a second per connection. Repeated reads are answered from cache (29 Knock actions can be), which never reaches Knock.

What does a Knock action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (118 Knock actions page). Cache hits, searches, dry runs and calls Knock refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Knock API does it cover?

The Knock API v1 (OpenAPI 3, api.knock.app) at api.knock.app. It is built from Knock's documentation as read on 23 October 2026. 118 actions in 12 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Knock data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Knock credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Knock

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Knock; the name is the vendor's own. Counts are from the Knock service file, version 1.0.0.

Give your agent Knock today.

Connect Knock freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.