--- title: "LimaCharlie MCP server for AI agents - actionlake" description: "Give Claude 306 LimaCharlie actions through one MCP server: cloud security, email security. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/limacharlie updated: 2026-10-23 --- Connectors · Identity & security # LimaCharlie MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to LimaCharlie and the rest of your systems. It gives your agent 306 LimaCharlie actions (208 reads, 70 writes and 28 that wait for a confirmation) and holds the LimaCharlie credential itself, so the agent never does. It paces LimaCharlie's limits and records every call. [Connect LimaCharlie free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "limacharlie.sensors.list", intent: "check which LimaCharlie account is connected" } # Get Sensor List · read · 1 upstream call ``` - 306 actions in one signed file - 208 read look, never change - 70 write create and update - 28 wait for a yes destructive, confirmed first Set up ## Connect LimaCharlie in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect LimaCharlie. Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` LimaCharlie API key: an Organization API key (Organization > Access Management > REST API) with the permissions this… - `oid` Your LimaCharlie oid - `uid` Your LimaCharlie uid ``` account { op: "connections.requirements", service: "limacharlie" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "limacharlie.sensors.list" } # get sensor list · read · 1 upstream call check { action: "limacharlie.sensor.delete", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` LimaCharlie at a glance **Sign-in** Session login. actionlake opens the session and renews it when it expires. **You provide** `api_key` **Setup fields** `oid` `uid` **Limits we pace to** 10 calls a second, per connection **API covered** LimaCharlie REST API v1 (OpenAPI 3.1.0, 1.0.0)`api.limacharlie.io/v1` **Built from** LimaCharlie's documentation, read 23 October 2026[api.limacharlie.io](https://api.limacharlie.io/openapi) [docs.limacharlie.io](https://docs.limacharlie.io/7-administration/access/api-keys/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 176 of 208 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line LimaCharlie up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in LimaCharlie. 306 actions in 27 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **208** read look, never change - **70** write create and update - **28** destructive wait for a confirmation 1. ### Cloud security 91 70 read · 20 write · 1 destructive Get CAASM Assets · Get CAASM Coverage Gaps · Open a Pull Request Fixing a Dependency Finding · Get Cloud Security Code Dependency Fixes 2. ### Email security 41 29 read · 10 write · 2 destructive Preview Email Security Warning Banner · Execute Bulk Email Security Action · Preview Bulk Email Security Action · Act On Email Security Campaign 3. ### Retention 25 23 read · 1 write · 1 destructive Get Audit Events · Get Detections · Get Detect by DetectID · Get Artifact List 4. ### Sensors 21 12 read · 5 write · 4 destructive Get Sensor List · Get Sensor Info · Delete Sensor · Get Online Statuses 5. ### Organizations 19 11 read · 3 write · 5 destructive Get Accessible Orgs · Request organization creation. · Create group · Get ACL Scope Resources 6. ### Extensions 12 5 read · 5 write · 2 destructive Create an extension · Create extension request · Create extension subscription · Get all public and owned extensions 7. ### Model request 12 9 read · 2 write · 1 destructive Query aggregate view · List model records · Batch model requests · List index records 8. ### Hive 11 6 read · 4 write · 1 destructive Validate Hive Record · Execute UI Action · Get Hive Record · Rename Hive Record **19 more areas · 74 actions** - Billing **10** - Groups **8** - Partners **8** - Users **7** - Outputs **5** - API keys **4** - General **4** - Installation keys **4** - Payload **4** - Resources **4** - Jobs **3** - Service **3** - Errors **2** - Rules **2** - Schema **2** - Exports **1** - Feedback **1** - Modules **1** - Usp **1** Top actions ## The LimaCharlie API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 6 of LimaCharlie's 6 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `limacharlie.sensors.list` Get Sensor List | Get Sensor List. | read | `device.endpoint.list` 65 connectors | | `limacharlie.sensor.get` Get Sensor Info | Get Sensor Info. | read | `device.endpoint.get` 57 connectors | | `limacharlie.sensor.delete` Delete Sensor | Delete Sensor. | destructive | `device.endpoint.delete` 35 connectors | | `limacharlie.audit_logs.list` Get Audit Events | Get Audit Events. | read | `security.audit_log.list` 69 connectors | | `limacharlie.detections.list` Get Detections | Get Detections. | read | `security.alert.list` 22 connectors | | `limacharlie.detection.get` Get Detect by DetectID | Get Detect by DetectID. | read | `security.alert.get` 21 connectors | | `limacharlie.user_orgs.list` Get Accessible Orgs | Get Accessible Orgs. | read | this connector | | `limacharlie.payload.add` Add Payload | Add Payload. | write | this connector | | `limacharlie.sensor.task` Task Sensor | Task Sensor. | write | this connector | | `limacharlie.user.invite` Invite user to limacharlie.io | Invite user to limacharlie.io. | write | this connector | | `limacharlie.group.create` Create group | Create group. | write | this connector | | `limacharlie.org_user.add` Add Org User | Add Org User. | write | this connector | Try it ## Prompts to paste into Claude. Each one names the LimaCharlie actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which LimaCharlie devices have not checked in for a week? calls `limacharlie.sensors.list` 2. Write write Add Payload in LimaCharlie. Show me exactly what you will send before you save it. calls `limacharlie.payload.add` 3. Across systems read Which LimaCharlie companies have invoices in ConnectWise PSA, and how many each? calls `limacharlie.user_orgs.list` `connectwise_manage.invoices.list` Across your systems ## LimaCharlie, joined to the rest of your business. One `ask` fetches from LimaCharlie and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which LimaCharlie companies have invoices in ConnectWise PSA, and how many each? `limacharlie.user_orgs.list` + `connectwise_manage.invoices.list`, on `crm.company` · [ConnectWise PSA](https://actionlake.com/connectors/connectwise-psa) - Which LimaCharlie companies have invoices in NetSuite, and how many each? `limacharlie.user_orgs.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) Also mapped by other connectors `crm.company` **227** `device.endpoint` **69** ask ``` ask { intent: "which LimaCharlie companies have invoices in ConnectWise PSA, and how many each", steps: [ { action: "limacharlie.user_orgs.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "connectwise_manage.invoices.list", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. Governance for LimaCharlie ## Destructive actions wait for a yes. 28 LimaCharlie actions are destructive. These are all of them: - Delete Sensor `limacharlie.sensor.delete` - Remove Job `limacharlie.job.remove` - Delete group `limacharlie.group.delete` - Dismiss Error `limacharlie.error.dismiss` - Remove Output `limacharlie.output.remove` - Rejoin Sensor `limacharlie.sensor.rejoin` - Unseal Sensor `limacharlie.sensor.unseal` - Remove Payload `limacharlie.payload.remove` - Remove Org User `limacharlie.org_user.remove` - Delete an existing Extension `limacharlie.extension.delete` - Reset Org Schemas `limacharlie.org_schemas.reset` - Untag Sensor `limacharlie.sensor_tag.remove` - Delete Hive Record `limacharlie.hive_record.delete` - Remove API Key `limacharlie.org_api_key.remove` - Delete model record `limacharlie.model_record.delete` - Complete Org Delete `limacharlie.org_delete.complete` - Remove Ingestion Key `limacharlie.ingestion_key.remove` - Remove partner admin `limacharlie.partner_admin.remove` - Delete All Email Security Data For An Organization `limacharlie.mailsec_tenant.delete` - Remove User Permission `limacharlie.user_permission.remove` - Remove org from group `limacharlie.group_member_org.remove` - Remove user from group owners `limacharlie.group_owner_user.remove` - Remove Installation Key `limacharlie.installation_key.remove` - Remove user from group as member `limacharlie.group_member_user.remove` - Withdraw Email Security Sample Submission `limacharlie.mailsec_submission.withdraw` - Unsubscribe Org to Resource `limacharlie.org_from_resource.unregister` - Delete extension subscription `limacharlie.extension_subscription.delete` - Cancel Code Security Remediation `limacharlie.cloudsec_remediation.cancel` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do limacharlie.sensor.delete confirm_policy: **human** Delete Sensor? **intent:** the user asked me to delete Sensor run suspended · waiting for a named person · key _limacharlie-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "limacharlie-agent", allowed_actions: ["limacharlie.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "limacharlie.sensor.delete", approver: "lead@example.com" }, { match: "limacharlie.job.remove", approver: "lead@example.com" }, { match: "limacharlie.group.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to LimaCharlie only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What LimaCharlie costs on actionlake. Every LimaCharlie action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call LimaCharlie refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 306 LimaCharlie actions - 306 actions page each page of a long list is one call - 176 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every LimaCharlie action. 306 actions by area: the id your agent calls, what it does, and its effect. **Cloud security 91** - `limacharlie.cloud_assets_to_sensors.resolve` Resolve Cloud Assets to Sensors read - `limacharlie.cloud_sensors_to_assets.resolve` Resolve Sensors to Cloud Assets read - `limacharlie.cloudsec_attack_paths.get` Get Cloud Security Attack Paths read - `limacharlie.cloudsec_azure_scope_hierarchy.get` Get Cloud Security Azure Scope Hierarchy read - `limacharlie.cloudsec_caasm_assets.get` Get CAASM Assets read - `limacharlie.cloudsec_caasm_coverage.get` Get CAASM Coverage Gaps read - `limacharlie.cloudsec_caasm_policy.get` Get CAASM Coverage Policy read - `limacharlie.cloudsec_caasm_policy.set` Set CAASM Coverage Policy write - `limacharlie.cloudsec_changes.get` Get Cloud Security Changes read - `limacharlie.cloudsec_chokepoint.dismiss` Dismiss Cloud Security Choke Point write - `limacharlie.cloudsec_chokepoint.restore` Restore Cloud Security Choke Point write - `limacharlie.cloudsec_chokepoints.get` Get Cloud Security Chokepoints read - `limacharlie.cloudsec_code_autofix.post` Open a Pull Request Fixing a Dependency Finding write - `limacharlie.cloudsec_code_capabilities.get` Get Cloud Security Code Connection Capabilities read - `limacharlie.cloudsec_code_coverage.get` Read Code Security Coverage read - `limacharlie.cloudsec_code_fixes.get` Get Cloud Security Code Dependency Fixes read - `limacharlie.cloudsec_code_image.get` Get Cloud Security Container Image read - `limacharlie.cloudsec_code_image_repo_facets.get` Get Cloud Security Image Repository Facets read - `limacharlie.cloudsec_code_image_repos.get` Get Cloud Security Image Repositories read - `limacharlie.cloudsec_code_images.get` Get Cloud Security Container Images read - `limacharlie.cloudsec_code_impact.get` Read the Live Consequence of Infrastructure Code read - `limacharlie.cloudsec_code_ingest.post` Ingest Code Scan Results write - `limacharlie.cloudsec_code_protection.get` Get Code Security Protection Coverage read - `limacharlie.cloudsec_code_provenance.get` Read Build Provenance read - `limacharlie.cloudsec_code_provenance.post` Push Build Provenance write - `limacharlie.cloudsec_code_pull_request.check` Check What a Pull Request Introduces read - `limacharlie.cloudsec_code_repo_sbom.get` Get Cloud Security Repository SBOM read - `limacharlie.cloudsec_code_repos.get` Get Cloud Security Code Repositories read - `limacharlie.cloudsec_code_scan.post` Rescan a Repository Now write - `limacharlie.cloudsec_code_status.get` Get Cloud Security Code Scan Status read - `limacharlie.cloudsec_code_webhook.post` Configure a Source-Control Connection's Webhook write - `limacharlie.cloudsec_compliance.get` Get Cloud Security Compliance read - `limacharlie.cloudsec_compliance_assignments.list` List Cloud Security Compliance Assignments read - `limacharlie.cloudsec_compliance_attestation.create` Create Cloud Security Compliance Attestation write - `limacharlie.cloudsec_compliance_attestations.list` List Cloud Security Compliance Attestations read - `limacharlie.cloudsec_compliance_events.list` List Cloud Security Compliance Events read - `limacharlie.cloudsec_compliance_frameworks.list` List Cloud Security Compliance Frameworks read - `limacharlie.cloudsec_compliance_run.create` Create Cloud Security Compliance Run write - `limacharlie.cloudsec_compliance_run.export` Export Cloud Security Compliance Run read - `limacharlie.cloudsec_compliance_runs.list` List Cloud Security Compliance Runs read - `limacharlie.cloudsec_compliance_schedule.upsert` Upsert Cloud Security Compliance Schedule write - `limacharlie.cloudsec_compliance_schedules.list` List Cloud Security Compliance Schedules read - `limacharlie.cloudsec_data_store_facets.get` Get Cloud Data Security Facets read - `limacharlie.cloudsec_data_stores.get` Get Cloud Data Security Stores read - `limacharlie.cloudsec_entities.resolve` Resolve Entities read - `limacharlie.cloudsec_entities.search` Search Entities read - `limacharlie.cloudsec_entity.get` Get Entity read - `limacharlie.cloudsec_entity_activity.get` Get Entity Activity read - `limacharlie.cloudsec_entity_sightings.get` Get Entity Sightings read - `limacharlie.cloudsec_finding.get` Get Cloud Security Finding read - `limacharlie.cloudsec_finding_causes.get` Get Cloud Security Shared-Fix Causes read - `limacharlie.cloudsec_finding_classes.get` Get Cloud Security Finding Classes read - `limacharlie.cloudsec_finding_evidence_chain.get` Read a Finding's Evidence Chain read - `limacharlie.cloudsec_finding_facets.get` Get Cloud Security Finding Facets read - `limacharlie.cloudsec_finding_match.simulate` Simulate Cloud Security Finding Matchers read - `limacharlie.cloudsec_finding_owner.set` Set Cloud Security Finding Owner write - `limacharlie.cloudsec_finding_remediation.request` Request Code Security Remediation write - `limacharlie.cloudsec_finding_runtime.check` Check Whether a Finding's Code Ran read - `limacharlie.cloudsec_finding_status.bulk_set` Bulk Set Cloud Security Finding Status write - `limacharlie.cloudsec_finding_status.set` Set Cloud Security Finding Status write - `limacharlie.cloudsec_finding_ticket.set` Set Cloud Security Finding Ticket write - `limacharlie.cloudsec_findings.get` Get Cloud Security Findings read - `limacharlie.cloudsec_fleet_overview.get` Get Cloud Security Fleet Overview read - `limacharlie.cloudsec_free_tier.get` Get Cloud Security Free-Tier Status read - `limacharlie.cloudsec_graph_neighbors.get` Get Cloud Security Graph Neighbors read - `limacharlie.cloudsec_iac_map.post` Push Sanitized IaC Identity Evidence write - `limacharlie.cloudsec_iac_map_status.get` Read Sanitized IaC Map Receipt read - `limacharlie.cloudsec_identity.get` Get Cloud Security Identity read - `limacharlie.cloudsec_identity_access_list.get` Get Cloud Security Identity Access List read - `limacharlie.cloudsec_identity_facets.get` Get Cloud Security Identity Facets read - `limacharlie.cloudsec_inventory.get` Get Cloud Inventory read - `limacharlie.cloudsec_inventory_facets.get` Get Cloud Inventory Facets read - `limacharlie.cloudsec_m365_certificate.mint` Generate a Microsoft 365 Connection Certificate write - `limacharlie.cloudsec_overview.get` Get Cloud Security Overview read - `limacharlie.cloudsec_policy_values.suggest` Suggest Cloud Security Policy Matcher Values read - `limacharlie.cloudsec_policy_vocabulary.get` Get Cloud Security Policy Vocabulary read - `limacharlie.cloudsec_provider.test` Test Cloud Security Provider Credentials read - `limacharlie.cloudsec_provider_manifests.get` Get Cloud Security Provider Manifests read - `limacharlie.cloudsec_public_access.get` Get Cloud Security Public Access read - `limacharlie.cloudsec_queries.get` List Cloud Security Queries read - `limacharlie.cloudsec_query.run` Run Cloud Security Query read - `limacharlie.cloudsec_remediation.approve` Approve Code Security Remediation write - `limacharlie.cloudsec_remediation.cancel` Cancel Code Security Remediation destructive - `limacharlie.cloudsec_remediation.get` Get Code Security Remediation read - `limacharlie.cloudsec_remediation.reject` Reject Code Security Remediation write - `limacharlie.cloudsec_remediations.get` List Code Security Remediations read - `limacharlie.cloudsec_resource.get` Get Cloud Security Resource read - `limacharlie.cloudsec_resource_match.simulate` Simulate Cloud Security Resource Matchers read - `limacharlie.cloudsec_risk_trend.get` Get Cloud Security Risk Trend read - `limacharlie.cloudsec_scan_status.get` Get Cloud Security Scan Status read - `limacharlie.cloudsec_topology.get` Get Cloud Security Topology read **Email security 41** - `limacharlie.mailsec_action.get` Get Email Security Action read - `limacharlie.mailsec_banner.preview` Preview Email Security Warning Banner read - `limacharlie.mailsec_bulk_action.execute` Execute Bulk Email Security Action write - `limacharlie.mailsec_bulk_action.get` Get Bulk Email Security Action Status read - `limacharlie.mailsec_bulk_action.preview` Preview Bulk Email Security Action read - `limacharlie.mailsec_bulk_disposition.set` Set Email Security Bulk Disposition write - `limacharlie.mailsec_campaign.act` Act On Email Security Campaign write - `limacharlie.mailsec_campaign.get` Get Email Security Campaign read - `limacharlie.mailsec_campaign_members.get` Get Email Security Campaign Members read - `limacharlie.mailsec_campaigns.get` Get Email Security Campaigns read - `limacharlie.mailsec_connection.test` Test Email Security Connection read - `limacharlie.mailsec_coverage.get` Get Email Security Coverage read - `limacharlie.mailsec_disposition.set` Set Email Security Disposition write - `limacharlie.mailsec_group.get` Get Email Security Message Group read - `limacharlie.mailsec_group_action.confirm` Confirm Email Security Group Action write - `limacharlie.mailsec_group_action.get` Get Email Security Group Action read - `limacharlie.mailsec_group_action.prepare` Prepare Email Security Group Action write - `limacharlie.mailsec_groups.get` Get Email Security Message Groups read - `limacharlie.mailsec_message.act` Act On Email Security Message write - `limacharlie.mailsec_message.analyze` Analyze Email Security Message read - `limacharlie.mailsec_message.get` Get Email Security Message read - `limacharlie.mailsec_message_eml.get` Download Email Security Raw Message read - `limacharlie.mailsec_message_revisions.get` Get Email Security Message Verdict Revisions read - `limacharlie.mailsec_message_verdict.revise` Revise Email Security Message Verdict write - `limacharlie.mailsec_messages.get` Get Email Security Messages read - `limacharlie.mailsec_onboarding.get` Get Email Security Onboarding Steps read - `limacharlie.mailsec_provider_quarantine.get` List Microsoft Provider Quarantine Observations read - `limacharlie.mailsec_release_requests.get` List Microsoft Quarantine Release Activity read - `limacharlie.mailsec_report.get` Get an Email Security User Report read - `limacharlie.mailsec_report.reopen` Reopen Email Security User Report write - `limacharlie.mailsec_report.resolve` Resolve Email Security User Report write - `limacharlie.mailsec_reports.get` Get Email Security User Reports read - `limacharlie.mailsec_rule.backtest` Backtest Email Security Rule read - `limacharlie.mailsec_rule.validate` Validate Email Security Rule read - `limacharlie.mailsec_sender_profile.get` Get Email Security Sender Profile read - `limacharlie.mailsec_similar_messages.get` Get Similar Email Security Messages read - `limacharlie.mailsec_submission.get` Get Email Security Sample Submission read - `limacharlie.mailsec_submission.withdraw` Withdraw Email Security Sample Submission destructive - `limacharlie.mailsec_submissions.get` List Email Security Sample Submissions read - `limacharlie.mailsec_tenant.delete` Delete All Email Security Data For An Organization destructive - `limacharlie.mailsec_tenant_purge_confirmation.get` Prepare Email Security Tenant Deletion read **Retention 25** - `limacharlie.artifact_list.get` Get Artifact List read - `limacharlie.audit_logs.list` Get Audit Events read - `limacharlie.children_of_atom.get` Get Children Of Atom read - `limacharlie.detection.get` Get Detect by DetectID read - `limacharlie.detection_breakdown.get` Get Detections Breakdown read - `limacharlie.detection_stats.get` Get Detection Stats read - `limacharlie.detections.list` Get Detections read - `limacharlie.entity_metrics.get` Get Entity Metrics read - `limacharlie.event_by_atom.get` Get Event by Atom read - `limacharlie.event_retained_count.get` Get Historical Events read - `limacharlie.historic_event_overview.get` Get Historical Overview read - `limacharlie.historic_events.get` Get Historical Events read - `limacharlie.ingestion_key.add` Add Ingestion Key write - `limacharlie.ingestion_key.remove` Remove Ingestion Key destructive - `limacharlie.ingestion_keys.get` Get Ingestion Keys read - `limacharlie.insight_status.get` Get Retention Status read - `limacharlie.object_information.get` Get Object Information read - `limacharlie.object_summary.get` Get Object Summary read - `limacharlie.online_stats.get` Get Online Stats read - `limacharlie.original_artifact.get` Get Original Artifact read - `limacharlie.readable_artifact.get` Get Readable Artifact read - `limacharlie.specific_objects.get` Get Specific Objects read - `limacharlie.specific_objects_fmt_output.get` Get Objects summarized by list of types read - `limacharlie.traffic_breakdown.get` Get Traffic Breakdown read - `limacharlie.traffic_stats.get` Get Traffic Stats read **Sensors 21** - `limacharlie.online_sensors.get` Get Online Count read - `limacharlie.online_sensors_in_list.get` Get Online Statuses read - `limacharlie.org_quota_usage.get` Get Sensor Quota Usage read - `limacharlie.org_tags.list` List All Sensor Tags read - `limacharlie.sensor.delete` Delete Sensor destructive - `limacharlie.sensor.get` Get Sensor Info read - `limacharlie.sensor.isolate` Isolate Sensor write - `limacharlie.sensor.rejoin` Rejoin Sensor destructive - `limacharlie.sensor.seal` Seal Sensor write - `limacharlie.sensor.task` Task Sensor write - `limacharlie.sensor.undelete` Undelete Sensor write - `limacharlie.sensor.unseal` Unseal Sensor destructive - `limacharlie.sensor_by_hostname.find` Get Sensors by Hostname read - `limacharlie.sensor_isolation.get` Get Isolation Status read - `limacharlie.sensor_seal.get` Get Seal Status read - `limacharlie.sensor_tag.add` Tag Sensor write - `limacharlie.sensor_tag.remove` Untag Sensor destructive - `limacharlie.sensor_tags.get` Get Sensor Tags read - `limacharlie.sensors.list` Get Sensor List read - `limacharlie.sensors_with_tag.find` Find Sensors by Tag read - `limacharlie.task.autocomplete` Autocomplete Task read **Organizations 19** - `limacharlie.acl_scope_resources.get` Get ACL Scope Resources read - `limacharlie.check_org_name.request` Check organization name availability. read - `limacharlie.create_org.request` Request organization creation. write - `limacharlie.group.create` Create group write - `limacharlie.group.delete` Delete group destructive - `limacharlie.group_member_org.remove` Remove org from group destructive - `limacharlie.group_member_user.remove` Remove user from group as member destructive - `limacharlie.group_owner_user.remove` Remove user from group owners destructive - `limacharlie.org.get` Get Org Info read - `limacharlie.org.rename` Org Rename write - `limacharlie.org_delete.complete` Complete Org Delete destructive - `limacharlie.org_delete.init` Start Delete Org read - `limacharlie.org_status.get` Get Org Status read - `limacharlie.org_urls.get` Get Org URLs read - `limacharlie.org_usage_stats.get` Get Usage Stats read - `limacharlie.stories.list` List Stories read - `limacharlie.story.get` Get Story read - `limacharlie.user_org_groups.get` Get user groups read - `limacharlie.user_orgs.list` Get Accessible Orgs read **Extensions 12** - `limacharlie.all_extension.get` Get all public and owned extensions read - `limacharlie.extension.create` Create an extension write - `limacharlie.extension.delete` Delete an existing Extension destructive - `limacharlie.extension.get` Get extension by extension name, extension must be public or owned by caller read - `limacharlie.extension.update` Update an existing Extension write - `limacharlie.extension_request.create` Create extension request write - `limacharlie.extension_schema.get` Get extension schema read - `limacharlie.extension_subscription.create` Create extension subscription write - `limacharlie.extension_subscription.delete` Delete extension subscription destructive - `limacharlie.extension_subscription.rekey` Re-key extension subscription write - `limacharlie.org_subscriptions.get` Get all org extension subscriptions read - `limacharlie.public_extensions.get` Get all public extensions - no auth required read **Model request 12** - `limacharlie.aggregate_view.query` Query aggregate view read - `limacharlie.index_records.list` List index records read - `limacharlie.index_records_by_key_prefix.list` List index records by key prefix read - `limacharlie.index_value_counts.get` Get unique index counts read - `limacharlie.model_record.create` Create model record write - `limacharlie.model_record.delete` Delete model record destructive - `limacharlie.model_record.get` Get model record read - `limacharlie.model_records.get` Get model records read - `limacharlie.model_records.list` List model records read - `limacharlie.model_requests.batch` Batch model requests write - `limacharlie.models.query` Query/traverse different models read - `limacharlie.search_models.substring` search substring for searchable indexes read **Hive 11** - `limacharlie.hive_record.delete` Delete Hive Record destructive - `limacharlie.hive_record.get` Get Hive Record read - `limacharlie.hive_record.rename` Rename Hive Record write - `limacharlie.hive_record.set` Set Hive Record write - `limacharlie.hive_record.validate` Validate Hive Record read - `limacharlie.hive_record_metadata.get` Get Hive Record Metadata read - `limacharlie.hive_record_metadata.set` Set Hive Record Metadata write - `limacharlie.hive_records.list` List Hive Records read - `limacharlie.hive_schema.get` Get Hive Schema read - `limacharlie.ui_action.execute` Execute UI Action write - `limacharlie.ui_actions.get` Get UI Actions read **Billing 10** - `limacharlie.domain_auth_requirements.get` Get Domain Auth Requirements read - `limacharlie.legacy_org_invoices.get` Get Legacy Org Invoices read - `limacharlie.org_billing_details.get` Get Org Billing Details read - `limacharlie.org_billing_quota.request` Request Org Billing Quota write - `limacharlie.org_billing_status.get` Get Org Billing Status read - `limacharlie.org_invoice_for_month.get` Get Org Invoice For Month read - `limacharlie.org_invoices_for_billing_period.get` Get Org Invoices For Billing Period read - `limacharlie.org_quota.set` Set Org Quota write - `limacharlie.org_sku_definitions.get` Get Org SKU Definitions read - `limacharlie.user_auth_requirements.get` Get User Auth Requirements read **Groups 8** - `limacharlie.group.get` Get group info read - `limacharlie.group_logs.get` Get group logs read - `limacharlie.group_member_org.add` Add org to group write - `limacharlie.group_member_user.add` Add user to group as member write - `limacharlie.group_owner_user.add` Add user to group as owner write - `limacharlie.group_permissions.set` Set group permissions write - `limacharlie.user.invite` Invite user to limacharlie.io write - `limacharlie.user_org_groups_concurrent.get` Get all owned group info read **Partners 8** - `limacharlie.partner.get` Get partner read - `limacharlie.partner_admin.remove` Remove partner admin destructive - `limacharlie.partner_admin.set` Set partner admin write - `limacharlie.partner_admins.list` List partner admins read - `limacharlie.partner_groups.list` List partner groups read - `limacharlie.partner_org.attach` Attach an organization to a Partner write - `limacharlie.partner_orgs.list` List partner orgs read - `limacharlie.user_partners.get` Get user partners read **Users 7** - `limacharlie.available_plans.get` Get Available Plans read - `limacharlie.org_user.add` Add Org User write - `limacharlie.org_user.remove` Remove Org User destructive - `limacharlie.org_users.get` Get Org Users read - `limacharlie.user_permission.add` Add User Permission write - `limacharlie.user_permission.remove` Remove User Permission destructive - `limacharlie.users_and_permissions.get` Get User Permissions read **Outputs 5** - `limacharlie.output.remove` Remove Output destructive - `limacharlie.output.set` Set Output write - `limacharlie.output_samples.get` Get Output Samples read - `limacharlie.outputs.get` Get Outputs read - `limacharlie.transform.test` Simulate a transform being apply to data read **API keys 4** - `limacharlie.org_api_key.add` Add API Key write - `limacharlie.org_api_key.remove` Remove API Key destructive - `limacharlie.org_api_keys.get` Get API Keys read - `limacharlie.org_create_status.get` Get org create status read **General 4** - `limacharlie.available_events.get` Get Possible Events read - `limacharlie.ontology.get` Get Ontology read - `limacharlie.runtime_mtd.get` Get Runtime Metadata read - `limacharlie.sites.get` Get Sites read **Installation keys 4** - `limacharlie.installation_key.add` Add Installation Key write - `limacharlie.installation_key.get` Get Installation Key read - `limacharlie.installation_key.remove` Remove Installation Key destructive - `limacharlie.installation_keys.get` Get Installation Keys read **Payload 4** - `limacharlie.payload.add` Add Payload write - `limacharlie.payload.get` Get Payload read - `limacharlie.payload.remove` Remove Payload destructive - `limacharlie.payloads.list` List Payloads read **Resources 4** - `limacharlie.org_addons.get` Get Org Addons read - `limacharlie.org_from_resource.unregister` Unsubscribe Org to Resource destructive - `limacharlie.org_resources.get` Get Org Resources read - `limacharlie.org_to_resource.register` Subscribe Org to Resource write **Jobs 3** - `limacharlie.job.remove` Remove Job destructive - `limacharlie.job_info.get` Get Job read - `limacharlie.jobs.get` Get Jobs read **Service 3** - `limacharlie.available_services.get` Get Available Services read - `limacharlie.service_request.make` Make Service Request write - `limacharlie.service_usage.get` Get Service Usage read **Errors 2** - `limacharlie.error.dismiss` Dismiss Error destructive - `limacharlie.error_log.get` Get Error Logs read **Rules 2** - `limacharlie.org_mitre_report.get` Get MITRE report read - `limacharlie.template.test` Simulate a template being apply to data read **Schema 2** - `limacharlie.org_schemas.get` Get Org Schemas read - `limacharlie.org_schemas.reset` Reset Org Schemas destructive **Exports 1** - `limacharlie.sensors.export` Export Sensors write **Feedback 1** - `limacharlie.feedback.submit` Submit user feedback write **Modules 1** - `limacharlie.org.upgrade` Update Sensors write **Usp 1** - `limacharlie.usp_mapping.validate` Validate USP Mapping read Questions ## The LimaCharlie MCP server, answered. **Is there a LimaCharlie MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 306 LimaCharlie actions across cloud security, email security, retention and sensors, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by LimaCharlie. **What do I need to connect LimaCharlie?** LimaCharlie API key: an Organization API key (Organization > Access Management > REST API) with the permissions this…. Plus your oid and your uid. The free call account { op: "connections.requirements", service: "limacharlie" } lists exactly what to paste. **Can an AI agent delete or change things in LimaCharlie?** Only if its key allows it, and only with an explicit confirmation. 28 LimaCharlie actions are destructive, including delete Sensor, remove Job and delete group. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my LimaCharlie API limit?** actionlake paces every call to the limits in the LimaCharlie service file: 10 calls a second per connection. Repeated reads are answered from cache (176 LimaCharlie actions can be), which never reaches LimaCharlie. **What does a LimaCharlie action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (306 LimaCharlie actions page). Cache hits, searches, dry runs and calls LimaCharlie refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which LimaCharlie API does it cover?** The LimaCharlie REST API v1 (OpenAPI 3.1.0, 1.0.0) at api.limacharlie.io/v1. It is built from LimaCharlie's documentation as read on 23 October 2026. 306 actions in 27 areas, each one in the signed service file (version 1.0.0). **Can I combine LimaCharlie with my other systems?** Yes. ask joins LimaCharlie to ConnectWise PSA or NetSuite on the same customer and returns the answer rather than every row. LimaCharlie maps crm.company, which 227 other connectors also map. **Does actionlake keep my LimaCharlie data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your LimaCharlie credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like LimaCharlie Shares the most action names with - [Trend Vision One 6](https://actionlake.com/connectors/trend-vision-one) - [Microsoft Defender for Endpoint 4](https://actionlake.com/connectors/microsoft-defender-for-endpoint) - [Palo Alto Networks Cortex XDR 4](https://actionlake.com/connectors/palo-alto-networks-cortex-xdr) - [Microsoft Graph Security (Defender XDR) 3](https://actionlake.com/connectors/microsoft-graph-security-defender-xdr) - [Microsoft Intune 2](https://actionlake.com/connectors/microsoft-intune) - [Qualys VMDR 2](https://actionlake.com/connectors/qualys-vmdr) Joins with, on shared entities - [NinjaOne 2](https://actionlake.com/connectors/ninjaone) - [TP-Link Omada Open API 2](https://actionlake.com/connectors/tp-link-omada-open-api) - [Commvault Cloud 2](https://actionlake.com/connectors/commvault-cloud) - [Cisco Meraki Dashboard API 2](https://actionlake.com/connectors/cisco-meraki-dashboard-api) - [Veeam Service Provider Console 2](https://actionlake.com/connectors/veeam-service-provider-console) - [CIPP 2](https://actionlake.com/connectors/cipp) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by LimaCharlie; the name is the vendor's own. Counts are from the LimaCharlie service file, version 1.0.0. ## Give your agent LimaCharlie today. [Connect LimaCharlie free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/limacharlie More: https://actionlake.com/llms.txt