--- title: "Microsoft 365 Lighthouse and GDAP MCP server - actionlake" description: "Give Claude 155 Microsoft 365 Lighthouse and GDAP actions through one MCP server: alerts. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/microsoft-365-lighthouse-and-gdap updated: 2026-10-22 --- Connectors · MSP & PSA # Microsoft 365 Lighthouse and GDAP MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft 365 Lighthouse and GDAP and the rest of your systems. It gives your agent 155 Microsoft 365 Lighthouse and GDAP actions (127 reads, 23 writes and 5 that wait for a confirmation) and holds the Microsoft 365 Lighthouse and GDAP credential itself, so the agent never does. It paces Microsoft 365 Lighthouse and GDAP's limits and records every call. Connecting Microsoft 365 Lighthouse and GDAP needs your own Microsoft 365 Lighthouse and GDAP OAuth app and one admin sign-in. [Connect Microsoft 365 Lighthouse and GDAP free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "m365_graph_lighthouse.alerts.list", intent: "check which Microsoft 365 Lighthouse and GDAP account is connected" } # List Lighthouse alerts · read · 1 upstream call ``` - 155 actions in one signed file - 127 read look, never change - 23 write create and update - 5 wait for a yes destructive, confirmed first Set up ## Connect Microsoft 365 Lighthouse and GDAP in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Microsoft 365 Lighthouse and GDAP. OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Microsoft 365 Lighthouse and GDAP, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. actionlake stores what you paste write-only, sealed under your tenant's key. Before the first sign-in, Microsoft 365 Lighthouse and GDAP needs an OAuth app of your own, registered in its developer portal. actionlake has no Microsoft 365 Lighthouse and GDAP app to lend you. - `access_token` Access token from one sign-in with your own OAuth app - `refresh_token` Refresh token from the same sign-in; the access token is renewed from it - `client_id` Entra application (client) id, registered in the partner tenant with delegated Graph permissions… - `client_secret` Entra client secret - `tenant_id` Your Microsoft 365 Lighthouse and GDAP tenant id ``` account { op: "connections.requirements", service: "m365_graph_lighthouse" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "m365_graph_lighthouse.alerts.list" } # list lighthouse alerts · read · 1 upstream call check { action: "m365_graph_lighthouse.tenant_tags.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Microsoft 365 Lighthouse and GDAP at a glance **Sign-in** OAuth 2.0, authorization code with PKCE. You register your own OAuth app with Microsoft 365 Lighthouse and GDAP, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. **You provide** `access_token` `refresh_token` `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 10,000 calls per 10 minutes, per connection **API covered** Microsoft 365 Lighthouse and GDAP (Microsoft Graph tenant relationships) API Microsoft Graph v1.0 (GDAP, multitenant organization) and beta (Lighthouse managedTenants)`graph.microsoft.com` **Built from** Microsoft 365 Lighthouse and GDAP's documentation, read 22 October 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/microsoftgraph/msgraph-metadata/master/openapi/beta/openapi.yaml) [OpenAPI spec (GitHub)](https://raw.githubusercontent.com/microsoftgraph/msgraph-metadata/master/openapi/v1.0/openapi.yaml) [learn.microsoft.com](https://learn.microsoft.com/en-us/graph/api/resources/managedtenants-managedtenant?view=graph-rest-beta) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 126 of 127 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 5, so ask can line Microsoft 365 Lighthouse and GDAP up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Microsoft 365 Lighthouse and GDAP. 155 actions in 1 area. Every one carries its effect, so a key can allow the reads and hold the rest. - **127** read look, never change - **23** write create and update - **5** destructive wait for a confirmation 1. ### Tenant management 155 127 read · 23 write · 5 destructive List Lighthouse alerts · List managed device compliance records · Get the signed-in user · Get one of the Lighthouse alerts Top actions ## The Microsoft 365 Lighthouse and GDAP API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 11 of Microsoft 365 Lighthouse and GDAP's 11 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `m365_graph_lighthouse.alerts.list` List Lighthouse alerts | Get managedTenantAlerts from tenantRelationships | read | `monitoring.alert.list` 51 connectors | | `m365_graph_lighthouse.managed_device_compliances.list` List managed device compliance records | List managedDeviceCompliances | read | `device.endpoint.list` 65 connectors | | `m365_graph_lighthouse.me.get` Get the signed-in user | The signed-in partner user behind this connection; a cheap check that the connection works. | read | `identity.current_user.get` 307 connectors | | `m365_graph_lighthouse.alerts.get` Get one of the Lighthouse alerts | Get managedTenantAlerts from tenantRelationships | read | `monitoring.alert.get` 33 connectors | | `m365_graph_lighthouse.tenants.list` List managed tenants | List tenants | read | `platform.tenant.list` 70 connectors | | `m365_graph_lighthouse.gdap_customers.list` List GDAP customers | List delegatedAdminCustomers | read | this connector | | `m365_graph_lighthouse.tenants.get` Get one of the managed tenants | Get tenant | read | `platform.tenant.get` 86 connectors | | `m365_graph_lighthouse.tenant_tags.list` List tenant tags | List tenantTags | read | `platform.tag.list` 13 connectors | | `m365_graph_lighthouse.tenant_tags.create` Create a tenant tag | Create a Lighthouse tenant tag, optionally assigned to tenants straight away. | write | `platform.tag.create` 12 connectors | | `m365_graph_lighthouse.mto_tenants.create` Add a tenant to the multitenant organization | Add a tenant (by tenant id) to the multitenant organization; it must then join. | write | this connector | | `m365_graph_lighthouse.gdap_relationships.create` Create a GDAP relationship | Create a granular delegated admin relationship (status `created`); then lock it for approval with `gdap_relationship_requests.create`. | write | this connector | | `m365_graph_lighthouse.tenant_tags.delete` Delete a tenant tag | Delete a Lighthouse tenant tag. | destructive | `platform.tag.delete` 11 connectors | Try it ## Prompts to paste into Claude. Each one names the Microsoft 365 Lighthouse and GDAP actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Microsoft 365 Lighthouse and GDAP alerts are open right now? Group them by service. calls `m365_graph_lighthouse.alerts.list` 2. Write write Create a tenant tag in Microsoft 365 Lighthouse and GDAP. Show me exactly what you will send before you save it. calls `m365_graph_lighthouse.tenant_tags.create` 3. Across systems read Which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each? calls `m365_graph_lighthouse.tenants.list` `netsuite.views.invoices` Across your systems ## Microsoft 365 Lighthouse and GDAP, joined to the rest of your business. One `ask` fetches from Microsoft 365 Lighthouse and GDAP and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each? `m365_graph_lighthouse.tenants.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) - Which Microsoft 365 Lighthouse and GDAP companies have tickets in HubSpot CRM, and how many each? `m365_graph_lighthouse.tenants.list` + `hubspot_crm.tickets.list`, on `crm.company` · [HubSpot CRM](https://actionlake.com/connectors/hubspot-crm) Also mapped by other connectors `crm.company` **227** `identity.current_user` **142** `device.endpoint` **69** `platform.tenant` **67** `monitoring.alert` **56** ask ``` ask { intent: "which Microsoft 365 Lighthouse and GDAP companies have invoices in NetSuite, and how many each", steps: [ { action: "m365_graph_lighthouse.tenants.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. Governance for Microsoft 365 Lighthouse and GDAP ## Destructive actions wait for a yes. 5 Microsoft 365 Lighthouse and GDAP actions are destructive. These are all of them: - Delete a tenant tag `m365_graph_lighthouse.tenant_tags.delete` - Remove a tenant from the multitenant organization `m365_graph_lighthouse.mto_tenants.delete` - Delete a GDAP relationship `m365_graph_lighthouse.gdap_relationships.delete` - Delete a GDAP access assignment `m365_graph_lighthouse.gdap_access_assignments.delete` - Offboard a managed tenant `m365_graph_lighthouse.tenants.offboard` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do m365_graph_lighthouse.tenant_tags.delete confirm_policy: **human** Delete a tenant tag? **intent:** the user asked me to delete a tenant tag run suspended · waiting for a named person · key _m365-graph-lighthouse-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "m365-graph-lighthouse-agent", allowed_actions: ["m365_graph_lighthouse.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "m365_graph_lighthouse.tenant_tags.delete", approver: "lead@example.com" }, { match: "m365_graph_lighthouse.mto_tenants.delete", approver: "lead@example.com" }, { match: "m365_graph_lighthouse.gdap_relationships.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Microsoft 365 Lighthouse and GDAP only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Microsoft 365 Lighthouse and GDAP costs on actionlake. Every Microsoft 365 Lighthouse and GDAP action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Microsoft 365 Lighthouse and GDAP refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 155 Microsoft 365 Lighthouse and GDAP actions - 55 actions page each page of a long list is one call - 126 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Microsoft 365 Lighthouse and GDAP action. 155 actions by area: the id your agent calls, what it does, and its effect. **Tenant management 155** - `m365_graph_lighthouse.aggregated_policy_compliances.get` Get one of the aggregated device compliance policy results read - `m365_graph_lighthouse.aggregated_policy_compliances.list` List aggregated device compliance policy results read - `m365_graph_lighthouse.alert_logs.get` Get one of the Lighthouse alert logs read - `m365_graph_lighthouse.alert_logs.get_alert` Get the alert of one of the Lighthouse alert logs read - `m365_graph_lighthouse.alert_logs.get_for_alert` Get one of an alert's Lighthouse alert logs read - `m365_graph_lighthouse.alert_logs.list` List Lighthouse alert logs read - `m365_graph_lighthouse.alert_logs.list_for_alert` List Lighthouse alert logs for an alert read - `m365_graph_lighthouse.alert_rule_definitions.get` Get one of the Lighthouse alert rule definitions read - `m365_graph_lighthouse.alert_rule_definitions.list` List Lighthouse alert rule definitions read - `m365_graph_lighthouse.alert_rules.get` Get one of the Lighthouse alert rules read - `m365_graph_lighthouse.alert_rules.get_for_alert_rule_definition` Get one of an alert rule definition's Lighthouse alert rules read - `m365_graph_lighthouse.alert_rules.get_rule_definition` Get the rule definition of one of the Lighthouse alert rules read - `m365_graph_lighthouse.alert_rules.list` List Lighthouse alert rules read - `m365_graph_lighthouse.alert_rules.list_for_alert_rule_definition` List Lighthouse alert rules for an alert rule definition read - `m365_graph_lighthouse.alerts.add_user_input_log` Add a log entry to a Lighthouse alert write - `m365_graph_lighthouse.alerts.get` Get one of the Lighthouse alerts read - `m365_graph_lighthouse.alerts.get_alert_rule` Get the alert rule of one of the Lighthouse alerts read - `m365_graph_lighthouse.alerts.get_for_alert_rule` Get one of an alert rule's Lighthouse alerts read - `m365_graph_lighthouse.alerts.list` List Lighthouse alerts read - `m365_graph_lighthouse.alerts.list_for_alert_rule` List Lighthouse alerts for an alert rule read - `m365_graph_lighthouse.api_notifications.get` Get one of the Lighthouse alert API notifications read - `m365_graph_lighthouse.api_notifications.get_alert` Get the alert of one of the Lighthouse alert API notifications read - `m365_graph_lighthouse.api_notifications.get_for_alert` Get one of an alert's Lighthouse alert API notifications read - `m365_graph_lighthouse.api_notifications.list` List Lighthouse alert API notifications read - `m365_graph_lighthouse.api_notifications.list_for_alert` List Lighthouse alert API notifications for an alert read - `m365_graph_lighthouse.app_performances.get` Get one of the app performance records read - `m365_graph_lighthouse.app_performances.list` List app performance records read - `m365_graph_lighthouse.audit_events.get` Get one of the Lighthouse audit events read - `m365_graph_lighthouse.audit_events.list` List Lighthouse audit events read - `m365_graph_lighthouse.cloud_pc_connections.get` Get one of the Cloud PC connections read - `m365_graph_lighthouse.cloud_pc_connections.list` List Cloud PC connections read - `m365_graph_lighthouse.cloud_pc_devices.get` Get one of the Cloud PC devices read - `m365_graph_lighthouse.cloud_pc_devices.list` List Cloud PC devices read - `m365_graph_lighthouse.cloud_pcs_overview.get` Get one of the Cloud PC overviews read - `m365_graph_lighthouse.cloud_pcs_overview.list` List Cloud PC overviews read - `m365_graph_lighthouse.conditional_access_policy_coverages.get` Get one of the conditional access policy coverage records read - `m365_graph_lighthouse.conditional_access_policy_coverages.list` List conditional access policy coverage records read - `m365_graph_lighthouse.credential_user_registrations_summaries.get` Get one of the MFA and SSPR registration summaries read - `m365_graph_lighthouse.credential_user_registrations_summaries.list` List MFA and SSPR registration summaries read - `m365_graph_lighthouse.device_app_performances.get` Get one of the device app performance records read - `m365_graph_lighthouse.device_app_performances.list` List device app performance records read - `m365_graph_lighthouse.device_compliance_policy_setting_state_summaries.get` Get one of the device compliance policy setting state summaries read - `m365_graph_lighthouse.device_compliance_policy_setting_state_summaries.list` List device compliance policy setting state summaries read - `m365_graph_lighthouse.device_health_statuses.get` Get one of the device health statuses read - `m365_graph_lighthouse.device_health_statuses.list` List device health statuses read - `m365_graph_lighthouse.email_notifications.get` Get one of the Lighthouse alert email notifications read - `m365_graph_lighthouse.email_notifications.get_alert` Get the alert of one of the Lighthouse alert email notifications read - `m365_graph_lighthouse.email_notifications.get_for_alert` Get one of an alert's Lighthouse alert email notifications read - `m365_graph_lighthouse.email_notifications.list` List Lighthouse alert email notifications read - `m365_graph_lighthouse.email_notifications.list_for_alert` List Lighthouse alert email notifications for an alert read - `m365_graph_lighthouse.gdap_access_assignments.create` Create a GDAP access assignment write - `m365_graph_lighthouse.gdap_access_assignments.delete` Delete a GDAP access assignment destructive - `m365_graph_lighthouse.gdap_access_assignments.get` Get one of the GDAP access assignments read - `m365_graph_lighthouse.gdap_access_assignments.list` List GDAP access assignments read - `m365_graph_lighthouse.gdap_access_assignments.update` Update a GDAP access assignment write - `m365_graph_lighthouse.gdap_customers.get` Get one of the GDAP customers read - `m365_graph_lighthouse.gdap_customers.list` List GDAP customers read - `m365_graph_lighthouse.gdap_relationship_operations.get` Get one of the GDAP relationship operations read - `m365_graph_lighthouse.gdap_relationship_operations.list` List GDAP relationship operations read - `m365_graph_lighthouse.gdap_relationship_requests.create` Create a GDAP relationship request write - `m365_graph_lighthouse.gdap_relationship_requests.get` Get one of the GDAP relationship requests read - `m365_graph_lighthouse.gdap_relationship_requests.list` List GDAP relationship requests read - `m365_graph_lighthouse.gdap_relationships.create` Create a GDAP relationship write - `m365_graph_lighthouse.gdap_relationships.delete` Delete a GDAP relationship destructive - `m365_graph_lighthouse.gdap_relationships.get` Get one of the GDAP relationships read - `m365_graph_lighthouse.gdap_relationships.list` List GDAP relationships read - `m365_graph_lighthouse.gdap_relationships.update` Update a GDAP relationship write - `m365_graph_lighthouse.gdap_service_management_details.get` Get one of the GDAP customer service management details read - `m365_graph_lighthouse.gdap_service_management_details.list` List GDAP customer service management details read - `m365_graph_lighthouse.managed_device_compliance_trends.get` Get one of the managed device compliance trends read - `m365_graph_lighthouse.managed_device_compliance_trends.list` List managed device compliance trends read - `m365_graph_lighthouse.managed_device_compliances.get` Get one of the managed device compliance records read - `m365_graph_lighthouse.managed_device_compliances.list` List managed device compliance records read - `m365_graph_lighthouse.management_action_tenant_deployment_statuses.change_deployment_status` Change a management action's deployment status write - `m365_graph_lighthouse.management_action_tenant_deployment_statuses.get` Get one of the management action deployment statuses per tenant read - `m365_graph_lighthouse.management_action_tenant_deployment_statuses.list` List management action deployment statuses per tenant read - `m365_graph_lighthouse.management_actions.apply` Apply a management action write - `m365_graph_lighthouse.management_actions.get` Get one of the baseline management actions read - `m365_graph_lighthouse.management_actions.list` List baseline management actions read - `m365_graph_lighthouse.management_intents.get` Get one of the baseline management intents read - `m365_graph_lighthouse.management_intents.list` List baseline management intents read - `m365_graph_lighthouse.management_template_collection_tenant_summaries.get` Get one of the management template collection summaries per tenant read - `m365_graph_lighthouse.management_template_collection_tenant_summaries.list` List management template collection summaries per tenant read - `m365_graph_lighthouse.management_template_collections.get` Get one of the management template collections read - `m365_graph_lighthouse.management_template_collections.get_for_management_template` Get one of a management template's management template collections read - `m365_graph_lighthouse.management_template_collections.list` List management template collections read - `m365_graph_lighthouse.management_template_collections.list_for_management_template` List management template collections for a management template read - `m365_graph_lighthouse.management_template_step_deployments.get` Get one of the management template step deployments read - `m365_graph_lighthouse.management_template_step_deployments.get_template_step_version` Get the template step version of one of the management template step deployments read - `m365_graph_lighthouse.management_template_step_deployments.list` List management template step deployments read - `m365_graph_lighthouse.management_template_step_tenant_summaries.get` Get one of the management template step summaries per tenant read - `m365_graph_lighthouse.management_template_step_tenant_summaries.list` List management template step summaries per tenant read - `m365_graph_lighthouse.management_template_step_versions.get` Get one of the management template step versions read - `m365_graph_lighthouse.management_template_step_versions.get_accepted_for` Get the accepted for of one of the management template step versions read - `m365_graph_lighthouse.management_template_step_versions.get_for_management_template_step` Get one of a management template step's management template step versions read - `m365_graph_lighthouse.management_template_step_versions.get_template_step` Get the template step of one of the management template step versions read - `m365_graph_lighthouse.management_template_step_versions.list` List management template step versions read - `m365_graph_lighthouse.management_template_step_versions.list_for_management_template_step` List management template step versions for a management template step read - `m365_graph_lighthouse.management_template_steps.get` Get one of the management template steps read - `m365_graph_lighthouse.management_template_steps.get_accepted_version` Get the accepted version of one of the management template steps read - `m365_graph_lighthouse.management_template_steps.get_for_management_template` Get one of a management template's management template steps read - `m365_graph_lighthouse.management_template_steps.get_management_template` Get the management template of one of the management template steps read - `m365_graph_lighthouse.management_template_steps.list` List management template steps read - `m365_graph_lighthouse.management_template_steps.list_for_management_template` List management template steps for a management template read - `m365_graph_lighthouse.management_templates.get` Get one of the baseline management templates read - `m365_graph_lighthouse.management_templates.get_for_management_template_collection` Get one of a management template collection's baseline management templates read - `m365_graph_lighthouse.management_templates.list` List baseline management templates read - `m365_graph_lighthouse.management_templates.list_for_management_template_collection` List baseline management templates for a management template collection read - `m365_graph_lighthouse.me.get` Get the signed-in user read - `m365_graph_lighthouse.mto_identity_sync_policy_template.get` Get the multitenant organization identity synchronization policy template read - `m365_graph_lighthouse.mto_identity_sync_policy_template.reset` Reset the MTO identity synchronization template write - `m365_graph_lighthouse.mto_identity_sync_policy_template.update` Update the MTO identity synchronization template write - `m365_graph_lighthouse.mto_join_request.get` Get one of the mto join request read - `m365_graph_lighthouse.mto_join_request.update` Join a multitenant organization write - `m365_graph_lighthouse.mto_partner_configuration_template.get` Get the multitenant organization partner configuration template read - `m365_graph_lighthouse.mto_partner_configuration_template.reset` Reset the MTO partner configuration template write - `m365_graph_lighthouse.mto_partner_configuration_template.update` Update the MTO partner configuration template write - `m365_graph_lighthouse.mto_tenants.create` Add a tenant to the multitenant organization write - `m365_graph_lighthouse.mto_tenants.delete` Remove a tenant from the multitenant organization destructive - `m365_graph_lighthouse.mto_tenants.get` Get one of the multitenant organization member tenants read - `m365_graph_lighthouse.mto_tenants.list` List multitenant organization member tenants read - `m365_graph_lighthouse.mto_tenants.update` Update a multitenant organization member write - `m365_graph_lighthouse.multi_tenant_organization.create` Create a multitenant organization write - `m365_graph_lighthouse.multi_tenant_organization.get` Get one of the multi tenant organization read - `m365_graph_lighthouse.multi_tenant_organization.update` Update the multitenant organization write - `m365_graph_lighthouse.my_roles.get` Get one of the my roles in managed tenants read - `m365_graph_lighthouse.my_roles.list` List my roles in managed tenants read - `m365_graph_lighthouse.tenant_groups.get` Get one of the tenant groups read - `m365_graph_lighthouse.tenant_groups.list` List tenant groups read - `m365_graph_lighthouse.tenant_groups.tenant_search` Find tenant groups containing a tenant read - `m365_graph_lighthouse.tenant_information.find_by_domain_name` Find tenant information by domain name read - `m365_graph_lighthouse.tenant_information.find_by_tenant_id` Find tenant information by tenant id read - `m365_graph_lighthouse.tenant_tags.assign` Assign a tenant tag write - `m365_graph_lighthouse.tenant_tags.create` Create a tenant tag write - `m365_graph_lighthouse.tenant_tags.delete` Delete a tenant tag destructive - `m365_graph_lighthouse.tenant_tags.get` Get one of the tenant tags read - `m365_graph_lighthouse.tenant_tags.list` List tenant tags read - `m365_graph_lighthouse.tenant_tags.unassign` Unassign a tenant tag write - `m365_graph_lighthouse.tenant_tags.update` Update a tenant tag write - `m365_graph_lighthouse.tenant_usage.list` List tenant usage read - `m365_graph_lighthouse.tenants.get` Get one of the managed tenants read - `m365_graph_lighthouse.tenants.list` List managed tenants read - `m365_graph_lighthouse.tenants.offboard` Offboard a managed tenant destructive - `m365_graph_lighthouse.tenants.reset_onboarding_status` Reset a tenant's onboarding status write - `m365_graph_lighthouse.tenants_customized_information.get` Get one of the tenant customized information records read - `m365_graph_lighthouse.tenants_customized_information.list` List tenant customized information records read - `m365_graph_lighthouse.tenants_customized_information.update` Update tenant customized information write - `m365_graph_lighthouse.tenants_detailed_information.get` Get one of the tenant detailed information records read - `m365_graph_lighthouse.tenants_detailed_information.list` List tenant detailed information records read - `m365_graph_lighthouse.ticketing_endpoints.get` Get one of the Lighthouse ticketing endpoints read - `m365_graph_lighthouse.ticketing_endpoints.list` List Lighthouse ticketing endpoints read - `m365_graph_lighthouse.windows_device_malware_states.get` Get one of the Windows device malware states read - `m365_graph_lighthouse.windows_device_malware_states.list` List Windows device malware states read - `m365_graph_lighthouse.windows_protection_states.get` Get one of the Windows protection states read - `m365_graph_lighthouse.windows_protection_states.list` List Windows protection states read Questions ## The Microsoft 365 Lighthouse and GDAP MCP server, answered. **Is there a Microsoft 365 Lighthouse and GDAP MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 155 Microsoft 365 Lighthouse and GDAP actions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft 365 Lighthouse and GDAP. **What do I need to connect Microsoft 365 Lighthouse and GDAP?** Your own Microsoft 365 Lighthouse and GDAP OAuth app, registered with Microsoft 365 Lighthouse and GDAP (its client id and client secret), and the access and refresh tokens from one admin sign-in. actionlake has no Microsoft 365 Lighthouse and GDAP app of its own, so this is not a one-step consent. actionlake renews the access token as it expires. Plus your tenant id. The free call account { op: "connections.requirements", service: "m365_graph_lighthouse" } lists exactly what to paste. **Can an AI agent delete or change things in Microsoft 365 Lighthouse and GDAP?** Only if its key allows it, and only with an explicit confirmation. 5 Microsoft 365 Lighthouse and GDAP actions are destructive, including delete a tenant tag, remove a tenant from the multitenant organization and delete a GDAP relationship. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Microsoft 365 Lighthouse and GDAP API limit?** actionlake paces every call to the limits in the Microsoft 365 Lighthouse and GDAP service file: 10,000 calls per 10 minutes per connection. Repeated reads are answered from cache (126 Microsoft 365 Lighthouse and GDAP actions can be), which never reaches Microsoft 365 Lighthouse and GDAP. **What does a Microsoft 365 Lighthouse and GDAP action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (55 Microsoft 365 Lighthouse and GDAP actions page). Cache hits, searches, dry runs and calls Microsoft 365 Lighthouse and GDAP refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Microsoft 365 Lighthouse and GDAP API does it cover?** The Microsoft 365 Lighthouse and GDAP (Microsoft Graph tenant relationships) API Microsoft Graph v1.0 (GDAP, multitenant organization) and beta (Lighthouse managedTenants) at graph.microsoft.com. It is built from Microsoft 365 Lighthouse and GDAP's documentation as read on 22 October 2026. 155 actions in 1 area, each one in the signed service file (version 1.0.0). **Can I combine Microsoft 365 Lighthouse and GDAP with my other systems?** Yes. ask joins Microsoft 365 Lighthouse and GDAP to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Microsoft 365 Lighthouse and GDAP maps crm.company, which 227 other connectors also map. **Does actionlake keep my Microsoft 365 Lighthouse and GDAP data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft 365 Lighthouse and GDAP credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Microsoft 365 Lighthouse and GDAP Shares the most action names with - [Domotz 7](https://actionlake.com/connectors/domotz) - [Auvik 5](https://actionlake.com/connectors/auvik) - [WithSecure Elements 4](https://actionlake.com/connectors/withsecure-elements) - [Peplink InControl 2 3](https://actionlake.com/connectors/peplink-incontrol-2) - [Datto RMM 3](https://actionlake.com/connectors/datto-rmm) - [Google Workspace Alert Center 2](https://actionlake.com/connectors/google-workspace-alert-center) Joins with, on shared entities - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [Cloudflare 2](https://actionlake.com/connectors/cloudflare) - [CrowdStrike Falcon 2](https://actionlake.com/connectors/crowdstrike-falcon) - [Dynatrace 2](https://actionlake.com/connectors/dynatrace) - [Tripletex 2](https://actionlake.com/connectors/tripletex) - [Splunk Platform 2](https://actionlake.com/connectors/splunk-platform) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Microsoft 365 Lighthouse and GDAP; the name is the vendor's own. Counts are from the Microsoft 365 Lighthouse and GDAP service file, version 1.0.0. ## Give your agent Microsoft 365 Lighthouse and GDAP today. [Connect Microsoft 365 Lighthouse and GDAP free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/microsoft-365-lighthouse-and-gdap More: https://actionlake.com/llms.txt