Connectors · MSP & PSA

Microsoft 365 Lighthouse and GDAP MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft 365 Lighthouse and GDAP and the rest of your systems. It gives your agent 155 Microsoft 365 Lighthouse and GDAP actions (127 reads, 23 writes and 5 that wait for a confirmation) and holds the Microsoft 365 Lighthouse and GDAP credential itself, so the agent never does. It paces Microsoft 365 Lighthouse and GDAP's limits and records every call. Connecting Microsoft 365 Lighthouse and GDAP needs your own Microsoft 365 Lighthouse and GDAP OAuth app and one admin sign-in.

Connect Microsoft 365 Lighthouse and GDAP free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

155actionsin one signed file
127readlook, never change
23writecreate and update
5wait for a yesdestructive, confirmed first

Set up

Connect Microsoft 365 Lighthouse and GDAP in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Microsoft 365 Lighthouse and GDAP.
OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Microsoft 365 Lighthouse and GDAP, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. actionlake stores what you paste write-only, sealed under your tenant's key.
Before the first sign-in, Microsoft 365 Lighthouse and GDAP needs an OAuth app of your own, registered in its developer portal. actionlake has no Microsoft 365 Lighthouse and GDAP app to lend you.
- access_tokenAccess token from one sign-in with your own OAuth app
- refresh_tokenRefresh token from the same sign-in; the access token is renewed from it
- client_idEntra application (client) id, registered in the partner tenant with delegated Graph permissions…
- client_secretEntra client secret
- tenant_idYour Microsoft 365 Lighthouse and GDAP tenant id
```
account { op: "connections.requirements", service: "m365_graph_lighthouse" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "m365_graph_lighthouse.alerts.list" }# list lighthouse alerts · read · 1 upstream callcheck { action: "m365_graph_lighthouse.tenant_tags.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Microsoft 365 Lighthouse and GDAP at a glance

Sign-in: OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Microsoft 365 Lighthouse and GDAP, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on.
You provide: access_tokenrefresh_tokenclient_idclient_secret
Setup fields: tenant_id
Limits we pace to: 10,000 calls per 10 minutes, per connection
API covered: Microsoft 365 Lighthouse and GDAP (Microsoft Graph tenant relationships) API Microsoft Graph v1.0 (GDAP, multitenant organization) and beta (Lighthouse managedTenants)graph.microsoft.com
Built from: Microsoft 365 Lighthouse and GDAP's documentation, read 22 October 2026OpenAPI spec (GitHub)OpenAPI spec (GitHub)learn.microsoft.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 126 of 127 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 5, so ask can line Microsoft 365 Lighthouse and GDAP up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Microsoft 365 Lighthouse and GDAP.

155 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest.

127readlook, never change
23writecreate and update
5destructivewait for a confirmation

Tenant management
155
127 read · 23 write · 5 destructive
List Lighthouse alerts · List managed device compliance records · Get the signed-in user · Get one of the Lighthouse alerts

Top actions

The Microsoft 365 Lighthouse and GDAP API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 11 of Microsoft 365 Lighthouse and GDAP's 11 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`m365_graph_lighthouse.alerts.list`List Lighthouse alerts	Get managedTenantAlerts from tenantRelationships	read	`monitoring.alert.list`51 connectors
`m365_graph_lighthouse.managed_device_compliances.list`List managed device compliance records	List managedDeviceCompliances	read	`device.endpoint.list`65 connectors
`m365_graph_lighthouse.me.get`Get the signed-in user	The signed-in partner user behind this connection; a cheap check that the connection works.	read	`identity.current_user.get`307 connectors
`m365_graph_lighthouse.alerts.get`Get one of the Lighthouse alerts	Get managedTenantAlerts from tenantRelationships	read	`monitoring.alert.get`33 connectors
`m365_graph_lighthouse.tenants.list`List managed tenants	List tenants	read	`platform.tenant.list`70 connectors
`m365_graph_lighthouse.gdap_customers.list`List GDAP customers	List delegatedAdminCustomers	read	this connector
`m365_graph_lighthouse.tenants.get`Get one of the managed tenants	Get tenant	read	`platform.tenant.get`86 connectors
`m365_graph_lighthouse.tenant_tags.list`List tenant tags	List tenantTags	read	`platform.tag.list`13 connectors
`m365_graph_lighthouse.tenant_tags.create`Create a tenant tag	Create a Lighthouse tenant tag, optionally assigned to tenants straight away.	write	`platform.tag.create`12 connectors
`m365_graph_lighthouse.mto_tenants.create`Add a tenant to the multitenant organization	Add a tenant (by tenant id) to the multitenant organization; it must then join.	write	this connector
`m365_graph_lighthouse.gdap_relationships.create`Create a GDAP relationship	Create a granular delegated admin relationship (status `created`); then lock it for approval with `gdap_relationship_requests.create`.	write	this connector
`m365_graph_lighthouse.tenant_tags.delete`Delete a tenant tag	Delete a Lighthouse tenant tag.	destructive	`platform.tag.delete`11 connectors

Try it

Prompts to paste into Claude.

Each one names the Microsoft 365 Lighthouse and GDAP actions it will call, so you know what it reads and what it changes before you send it.

Readread
Which Microsoft 365 Lighthouse and GDAP alerts are open right now? Group them by service.
callsm365_graph_lighthouse.alerts.list
Writewrite
Create a tenant tag in Microsoft 365 Lighthouse and GDAP. Show me exactly what you will send before you save it.
callsm365_graph_lighthouse.tenant_tags.create
Across systemsread
Which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each?
callsm365_graph_lighthouse.tenants.listnetsuite.views.invoices

Across your systems

Microsoft 365 Lighthouse and GDAP, joined to the rest of your business.

One ask fetches from Microsoft 365 Lighthouse and GDAP and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

Which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each?
m365_graph_lighthouse.tenants.list + netsuite.views.invoices, on crm.company · NetSuite
Which Microsoft 365 Lighthouse and GDAP companies have tickets in HubSpot CRM, and how many each?
m365_graph_lighthouse.tenants.list + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorscrm.company 227identity.current_user 142device.endpoint 69platform.tenant 67monitoring.alert 56

ask

ask {  intent: "which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each",  steps: [    { action: "m365_graph_lighthouse.tenants.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}

Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Microsoft 365 Lighthouse and GDAP

Destructive actions wait for a yes.

5 Microsoft 365 Lighthouse and GDAP actions are destructive. These are all of them:

Delete a tenant tagm365_graph_lighthouse.tenant_tags.delete
Remove a tenant from the multitenant organizationm365_graph_lighthouse.mto_tenants.delete
Delete a GDAP relationshipm365_graph_lighthouse.gdap_relationships.delete
Delete a GDAP access assignmentm365_graph_lighthouse.gdap_access_assignments.delete
Offboard a managed tenantm365_graph_lighthouse.tenants.offboard

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dom365_graph_lighthouse.tenant_tags.deleteconfirm_policy: human

Delete a tenant tag?

intent: the user asked me to delete a tenant tag

run suspended · waiting for a named person · key m365-graph-lighthouse-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "m365-graph-lighthouse-agent",  allowed_actions: ["m365_graph_lighthouse.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "m365_graph_lighthouse.tenant_tags.delete", approver: "[email protected]" },    { match: "m365_graph_lighthouse.mto_tenants.delete", approver: "[email protected]" },    { match: "m365_graph_lighthouse.gdap_relationships.delete", approver: "[email protected]" }  ]}

Illustrative. Scoped to Microsoft 365 Lighthouse and GDAP only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Microsoft 365 Lighthouse and GDAP costs on actionlake.

Every Microsoft 365 Lighthouse and GDAP action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Microsoft 365 Lighthouse and GDAP refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 155 Microsoft 365 Lighthouse and GDAP actions
55actions pageeach page of a long list is one call
126reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Microsoft 365 Lighthouse and GDAP action.

155 actions by area: the id your agent calls, what it does, and its effect.

Tenant management155

m365_graph_lighthouse.aggregated_policy_compliances.getGet one of the aggregated device compliance policy resultsread
m365_graph_lighthouse.aggregated_policy_compliances.listList aggregated device compliance policy resultsread
m365_graph_lighthouse.alert_logs.getGet one of the Lighthouse alert logsread
m365_graph_lighthouse.alert_logs.get_alertGet the alert of one of the Lighthouse alert logsread
m365_graph_lighthouse.alert_logs.get_for_alertGet one of an alert's Lighthouse alert logsread
m365_graph_lighthouse.alert_logs.listList Lighthouse alert logsread
m365_graph_lighthouse.alert_logs.list_for_alertList Lighthouse alert logs for an alertread
m365_graph_lighthouse.alert_rule_definitions.getGet one of the Lighthouse alert rule definitionsread
m365_graph_lighthouse.alert_rule_definitions.listList Lighthouse alert rule definitionsread
m365_graph_lighthouse.alert_rules.getGet one of the Lighthouse alert rulesread
m365_graph_lighthouse.alert_rules.get_for_alert_rule_definitionGet one of an alert rule definition's Lighthouse alert rulesread
m365_graph_lighthouse.alert_rules.get_rule_definitionGet the rule definition of one of the Lighthouse alert rulesread
m365_graph_lighthouse.alert_rules.listList Lighthouse alert rulesread
m365_graph_lighthouse.alert_rules.list_for_alert_rule_definitionList Lighthouse alert rules for an alert rule definitionread
m365_graph_lighthouse.alerts.add_user_input_logAdd a log entry to a Lighthouse alertwrite
m365_graph_lighthouse.alerts.getGet one of the Lighthouse alertsread
m365_graph_lighthouse.alerts.get_alert_ruleGet the alert rule of one of the Lighthouse alertsread
m365_graph_lighthouse.alerts.get_for_alert_ruleGet one of an alert rule's Lighthouse alertsread
m365_graph_lighthouse.alerts.listList Lighthouse alertsread
m365_graph_lighthouse.alerts.list_for_alert_ruleList Lighthouse alerts for an alert ruleread
m365_graph_lighthouse.api_notifications.getGet one of the Lighthouse alert API notificationsread
m365_graph_lighthouse.api_notifications.get_alertGet the alert of one of the Lighthouse alert API notificationsread
m365_graph_lighthouse.api_notifications.get_for_alertGet one of an alert's Lighthouse alert API notificationsread
m365_graph_lighthouse.api_notifications.listList Lighthouse alert API notificationsread
m365_graph_lighthouse.api_notifications.list_for_alertList Lighthouse alert API notifications for an alertread
m365_graph_lighthouse.app_performances.getGet one of the app performance recordsread
m365_graph_lighthouse.app_performances.listList app performance recordsread
m365_graph_lighthouse.audit_events.getGet one of the Lighthouse audit eventsread
m365_graph_lighthouse.audit_events.listList Lighthouse audit eventsread
m365_graph_lighthouse.cloud_pc_connections.getGet one of the Cloud PC connectionsread
m365_graph_lighthouse.cloud_pc_connections.listList Cloud PC connectionsread
m365_graph_lighthouse.cloud_pc_devices.getGet one of the Cloud PC devicesread
m365_graph_lighthouse.cloud_pc_devices.listList Cloud PC devicesread
m365_graph_lighthouse.cloud_pcs_overview.getGet one of the Cloud PC overviewsread
m365_graph_lighthouse.cloud_pcs_overview.listList Cloud PC overviewsread
m365_graph_lighthouse.conditional_access_policy_coverages.getGet one of the conditional access policy coverage recordsread
m365_graph_lighthouse.conditional_access_policy_coverages.listList conditional access policy coverage recordsread
m365_graph_lighthouse.credential_user_registrations_summaries.getGet one of the MFA and SSPR registration summariesread
m365_graph_lighthouse.credential_user_registrations_summaries.listList MFA and SSPR registration summariesread
m365_graph_lighthouse.device_app_performances.getGet one of the device app performance recordsread
m365_graph_lighthouse.device_app_performances.listList device app performance recordsread
m365_graph_lighthouse.device_compliance_policy_setting_state_summaries.getGet one of the device compliance policy setting state summariesread
m365_graph_lighthouse.device_compliance_policy_setting_state_summaries.listList device compliance policy setting state summariesread
m365_graph_lighthouse.device_health_statuses.getGet one of the device health statusesread
m365_graph_lighthouse.device_health_statuses.listList device health statusesread
m365_graph_lighthouse.email_notifications.getGet one of the Lighthouse alert email notificationsread
m365_graph_lighthouse.email_notifications.get_alertGet the alert of one of the Lighthouse alert email notificationsread
m365_graph_lighthouse.email_notifications.get_for_alertGet one of an alert's Lighthouse alert email notificationsread
m365_graph_lighthouse.email_notifications.listList Lighthouse alert email notificationsread
m365_graph_lighthouse.email_notifications.list_for_alertList Lighthouse alert email notifications for an alertread
m365_graph_lighthouse.gdap_access_assignments.createCreate a GDAP access assignmentwrite
m365_graph_lighthouse.gdap_access_assignments.deleteDelete a GDAP access assignmentdestructive
m365_graph_lighthouse.gdap_access_assignments.getGet one of the GDAP access assignmentsread
m365_graph_lighthouse.gdap_access_assignments.listList GDAP access assignmentsread
m365_graph_lighthouse.gdap_access_assignments.updateUpdate a GDAP access assignmentwrite
m365_graph_lighthouse.gdap_customers.getGet one of the GDAP customersread
m365_graph_lighthouse.gdap_customers.listList GDAP customersread
m365_graph_lighthouse.gdap_relationship_operations.getGet one of the GDAP relationship operationsread
m365_graph_lighthouse.gdap_relationship_operations.listList GDAP relationship operationsread
m365_graph_lighthouse.gdap_relationship_requests.createCreate a GDAP relationship requestwrite
m365_graph_lighthouse.gdap_relationship_requests.getGet one of the GDAP relationship requestsread
m365_graph_lighthouse.gdap_relationship_requests.listList GDAP relationship requestsread
m365_graph_lighthouse.gdap_relationships.createCreate a GDAP relationshipwrite
m365_graph_lighthouse.gdap_relationships.deleteDelete a GDAP relationshipdestructive
m365_graph_lighthouse.gdap_relationships.getGet one of the GDAP relationshipsread
m365_graph_lighthouse.gdap_relationships.listList GDAP relationshipsread
m365_graph_lighthouse.gdap_relationships.updateUpdate a GDAP relationshipwrite
m365_graph_lighthouse.gdap_service_management_details.getGet one of the GDAP customer service management detailsread
m365_graph_lighthouse.gdap_service_management_details.listList GDAP customer service management detailsread
m365_graph_lighthouse.managed_device_compliance_trends.getGet one of the managed device compliance trendsread
m365_graph_lighthouse.managed_device_compliance_trends.listList managed device compliance trendsread
m365_graph_lighthouse.managed_device_compliances.getGet one of the managed device compliance recordsread
m365_graph_lighthouse.managed_device_compliances.listList managed device compliance recordsread
m365_graph_lighthouse.management_action_tenant_deployment_statuses.change_deployment_statusChange a management action's deployment statuswrite
m365_graph_lighthouse.management_action_tenant_deployment_statuses.getGet one of the management action deployment statuses per tenantread
m365_graph_lighthouse.management_action_tenant_deployment_statuses.listList management action deployment statuses per tenantread
m365_graph_lighthouse.management_actions.applyApply a management actionwrite
m365_graph_lighthouse.management_actions.getGet one of the baseline management actionsread
m365_graph_lighthouse.management_actions.listList baseline management actionsread
m365_graph_lighthouse.management_intents.getGet one of the baseline management intentsread
m365_graph_lighthouse.management_intents.listList baseline management intentsread
m365_graph_lighthouse.management_template_collection_tenant_summaries.getGet one of the management template collection summaries per tenantread
m365_graph_lighthouse.management_template_collection_tenant_summaries.listList management template collection summaries per tenantread
m365_graph_lighthouse.management_template_collections.getGet one of the management template collectionsread
m365_graph_lighthouse.management_template_collections.get_for_management_templateGet one of a management template's management template collectionsread
m365_graph_lighthouse.management_template_collections.listList management template collectionsread
m365_graph_lighthouse.management_template_collections.list_for_management_templateList management template collections for a management templateread
m365_graph_lighthouse.management_template_step_deployments.getGet one of the management template step deploymentsread
m365_graph_lighthouse.management_template_step_deployments.get_template_step_versionGet the template step version of one of the management template step deploymentsread
m365_graph_lighthouse.management_template_step_deployments.listList management template step deploymentsread
m365_graph_lighthouse.management_template_step_tenant_summaries.getGet one of the management template step summaries per tenantread
m365_graph_lighthouse.management_template_step_tenant_summaries.listList management template step summaries per tenantread
m365_graph_lighthouse.management_template_step_versions.getGet one of the management template step versionsread
m365_graph_lighthouse.management_template_step_versions.get_accepted_forGet the accepted for of one of the management template step versionsread
m365_graph_lighthouse.management_template_step_versions.get_for_management_template_stepGet one of a management template step's management template step versionsread
m365_graph_lighthouse.management_template_step_versions.get_template_stepGet the template step of one of the management template step versionsread
m365_graph_lighthouse.management_template_step_versions.listList management template step versionsread
m365_graph_lighthouse.management_template_step_versions.list_for_management_template_stepList management template step versions for a management template stepread
m365_graph_lighthouse.management_template_steps.getGet one of the management template stepsread
m365_graph_lighthouse.management_template_steps.get_accepted_versionGet the accepted version of one of the management template stepsread
m365_graph_lighthouse.management_template_steps.get_for_management_templateGet one of a management template's management template stepsread
m365_graph_lighthouse.management_template_steps.get_management_templateGet the management template of one of the management template stepsread
m365_graph_lighthouse.management_template_steps.listList management template stepsread
m365_graph_lighthouse.management_template_steps.list_for_management_templateList management template steps for a management templateread
m365_graph_lighthouse.management_templates.getGet one of the baseline management templatesread
m365_graph_lighthouse.management_templates.get_for_management_template_collectionGet one of a management template collection's baseline management templatesread
m365_graph_lighthouse.management_templates.listList baseline management templatesread
m365_graph_lighthouse.management_templates.list_for_management_template_collectionList baseline management templates for a management template collectionread
m365_graph_lighthouse.me.getGet the signed-in userread
m365_graph_lighthouse.mto_identity_sync_policy_template.getGet the multitenant organization identity synchronization policy templateread
m365_graph_lighthouse.mto_identity_sync_policy_template.resetReset the MTO identity synchronization templatewrite
m365_graph_lighthouse.mto_identity_sync_policy_template.updateUpdate the MTO identity synchronization templatewrite
m365_graph_lighthouse.mto_join_request.getGet one of the mto join requestread
m365_graph_lighthouse.mto_join_request.updateJoin a multitenant organizationwrite
m365_graph_lighthouse.mto_partner_configuration_template.getGet the multitenant organization partner configuration templateread
m365_graph_lighthouse.mto_partner_configuration_template.resetReset the MTO partner configuration templatewrite
m365_graph_lighthouse.mto_partner_configuration_template.updateUpdate the MTO partner configuration templatewrite
m365_graph_lighthouse.mto_tenants.createAdd a tenant to the multitenant organizationwrite
m365_graph_lighthouse.mto_tenants.deleteRemove a tenant from the multitenant organizationdestructive
m365_graph_lighthouse.mto_tenants.getGet one of the multitenant organization member tenantsread
m365_graph_lighthouse.mto_tenants.listList multitenant organization member tenantsread
m365_graph_lighthouse.mto_tenants.updateUpdate a multitenant organization memberwrite
m365_graph_lighthouse.multi_tenant_organization.createCreate a multitenant organizationwrite
m365_graph_lighthouse.multi_tenant_organization.getGet one of the multi tenant organizationread
m365_graph_lighthouse.multi_tenant_organization.updateUpdate the multitenant organizationwrite
m365_graph_lighthouse.my_roles.getGet one of the my roles in managed tenantsread
m365_graph_lighthouse.my_roles.listList my roles in managed tenantsread
m365_graph_lighthouse.tenant_groups.getGet one of the tenant groupsread
m365_graph_lighthouse.tenant_groups.listList tenant groupsread
m365_graph_lighthouse.tenant_groups.tenant_searchFind tenant groups containing a tenantread
m365_graph_lighthouse.tenant_information.find_by_domain_nameFind tenant information by domain nameread
m365_graph_lighthouse.tenant_information.find_by_tenant_idFind tenant information by tenant idread
m365_graph_lighthouse.tenant_tags.assignAssign a tenant tagwrite
m365_graph_lighthouse.tenant_tags.createCreate a tenant tagwrite
m365_graph_lighthouse.tenant_tags.deleteDelete a tenant tagdestructive
m365_graph_lighthouse.tenant_tags.getGet one of the tenant tagsread
m365_graph_lighthouse.tenant_tags.listList tenant tagsread
m365_graph_lighthouse.tenant_tags.unassignUnassign a tenant tagwrite
m365_graph_lighthouse.tenant_tags.updateUpdate a tenant tagwrite
m365_graph_lighthouse.tenant_usage.listList tenant usageread
m365_graph_lighthouse.tenants.getGet one of the managed tenantsread
m365_graph_lighthouse.tenants.listList managed tenantsread
m365_graph_lighthouse.tenants.offboardOffboard a managed tenantdestructive
m365_graph_lighthouse.tenants.reset_onboarding_statusReset a tenant's onboarding statuswrite
m365_graph_lighthouse.tenants_customized_information.getGet one of the tenant customized information recordsread
m365_graph_lighthouse.tenants_customized_information.listList tenant customized information recordsread
m365_graph_lighthouse.tenants_customized_information.updateUpdate tenant customized informationwrite
m365_graph_lighthouse.tenants_detailed_information.getGet one of the tenant detailed information recordsread
m365_graph_lighthouse.tenants_detailed_information.listList tenant detailed information recordsread
m365_graph_lighthouse.ticketing_endpoints.getGet one of the Lighthouse ticketing endpointsread
m365_graph_lighthouse.ticketing_endpoints.listList Lighthouse ticketing endpointsread
m365_graph_lighthouse.windows_device_malware_states.getGet one of the Windows device malware statesread
m365_graph_lighthouse.windows_device_malware_states.listList Windows device malware statesread
m365_graph_lighthouse.windows_protection_states.getGet one of the Windows protection statesread
m365_graph_lighthouse.windows_protection_states.listList Windows protection statesread

Questions

The Microsoft 365 Lighthouse and GDAP MCP server, answered.

Is there a Microsoft 365 Lighthouse and GDAP MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 155 Microsoft 365 Lighthouse and GDAP actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft 365 Lighthouse and GDAP.

What do I need to connect Microsoft 365 Lighthouse and GDAP?

Your own Microsoft 365 Lighthouse and GDAP OAuth app, registered with Microsoft 365 Lighthouse and GDAP (its client id and client secret), and the access and refresh tokens from one admin sign-in. actionlake has no Microsoft 365 Lighthouse and GDAP app of its own, so this is not a one-step consent. actionlake renews the access token as it expires. Plus your tenant id. The free call account { op: "connections.requirements", service: "m365_graph_lighthouse" } lists exactly what to paste.

Can an AI agent delete or change things in Microsoft 365 Lighthouse and GDAP?

Only if its key allows it, and only with an explicit confirmation. 5 Microsoft 365 Lighthouse and GDAP actions are destructive, including delete a tenant tag, remove a tenant from the multitenant organization and delete a GDAP relationship. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Microsoft 365 Lighthouse and GDAP API limit?

actionlake paces every call to the limits in the Microsoft 365 Lighthouse and GDAP service file: 10,000 calls per 10 minutes per connection. Repeated reads are answered from cache (126 Microsoft 365 Lighthouse and GDAP actions can be), which never reaches Microsoft 365 Lighthouse and GDAP.

What does a Microsoft 365 Lighthouse and GDAP action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (55 Microsoft 365 Lighthouse and GDAP actions page). Cache hits, searches, dry runs and calls Microsoft 365 Lighthouse and GDAP refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Microsoft 365 Lighthouse and GDAP API does it cover?

The Microsoft 365 Lighthouse and GDAP (Microsoft Graph tenant relationships) API Microsoft Graph v1.0 (GDAP, multitenant organization) and beta (Lighthouse managedTenants) at graph.microsoft.com. It is built from Microsoft 365 Lighthouse and GDAP's documentation as read on 22 October 2026. 155 actions in 1 area, each one in the signed service file (version 1.0.0).

Can I combine Microsoft 365 Lighthouse and GDAP with my other systems?

Yes. ask joins Microsoft 365 Lighthouse and GDAP to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Microsoft 365 Lighthouse and GDAP maps crm.company, which 227 other connectors also map.

Does actionlake keep my Microsoft 365 Lighthouse and GDAP data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft 365 Lighthouse and GDAP credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Microsoft 365 Lighthouse and GDAP today.