Connectors · MSP & PSA
Peplink InControl 2 MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Peplink InControl 2 and the rest of your systems. It gives your agent 375 Peplink InControl 2 actions (255 reads, 99 writes and 21 that wait for a confirmation) and holds the Peplink InControl 2 credential itself, so the agent never does. It paces Peplink InControl 2's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "peplink_incontrol2.organizations.list", intent: "check which Peplink InControl 2 account is connected"}# Get accessible organization list · read · 1 upstream call- 375actionsin one signed file
- 255readlook, never change
- 99writecreate and update
- 21wait for a yesdestructive, confirmed first
Set up
Connect Peplink InControl 2 in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Peplink InControl 2.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idInControl 2 Client ID: in InControl click your email address (top right), scroll to Client Applications, New Client,…client_secretClient Secret of the same InControl 2 client application
account { op: "connections.requirements", service: "peplink_incontrol2" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "peplink_incontrol2.organizations.list" }# get accessible organization list · read · 1 upstream callcheck { action: "peplink_incontrol2.groups.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Peplink InControl 2 at a glance
- Sign-in
- OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
- You provide
client_idclient_secret- Limits we pace to
- 20 calls a second, per connection
- API covered
- InControl 2 REST API (api.ic.peplink.com/rest)
api.ic.peplink.com - Built from
- Peplink InControl 2's documentation, read 23 October 2026peplink.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 245 of 255 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Peplink InControl 2 up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Peplink InControl 2.
375 actions in 315 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 255readlook, never change
- 99writecreate and update
- 21destructivewait for a confirmation
Group docker scripts
41 read · 2 write · 1 destructive
Create docker scripts · Get docker scripts · Update docker scripts · Get docker scripts
Group firewall rule sets
41 read · 2 write · 1 destructive
Create firewall rule set · Get simple firewall rule settings · Update firewall rule set · Delete firewall rule settings
Group grouped mac
41 read · 2 write · 1 destructive
Create Grouped MAC Addresses · Get Grouped MAC Addresses · Update Group MAC Address · Delete Group MAC Addresses
Group settings admins
41 read · 1 write · 2 destructive
Get group admin users · Update group admin users · Add group admin users · Delete group admin users
Group sim pools
41 read · 2 write · 1 destructive
Create SIM pool profiles · Get SIM pool profiles · Update SIM pool profiles · Delete SIM pool profiles
Group starlink pools
41 read · 2 write · 1 destructive
Create Starlink pool profiles · Get Starlink pool profiles · Update SIM pool profiles · Delete Starlink pool profiles
Group vlan config
41 read · 2 write · 1 destructive
Create a VLAN network settings · Get VLAN network settings in a group · Update a VLAN network settings · Delete a VLAN network settings
Settings admins
41 read · 1 write · 2 destructive
Get organization admin users · Update organization admin users · Add organization admin users · Delete organization admin users
112 more areas · 343 actions
- Sim pools 4
- Starlink pools 4
- Group device tags 3
- Group ssid settings 3
- Delete devices 2
- Device client 2
- Device CP guest 2
- Device devapi 2
- Device loc 2
- Device oobm settings 2
- Device ssid profiles 2
- Device tags 2
- Esim pool devices 2
- Esim pool iccid 2
- Esim pool settings 2
- Group bulk config 2
- Group client 2
- Group CP guest 2
- Group CP guest by user id 2
- Group device ip settings 2
- Group docker scripts log 2
- Group grouped networks 2
- Group move devices 2
- Group SP default 2
- Group ssid profiles 2
- Group wifi management 2
- Grouped networks 2
- Groups 2
- Move devices 2
- SP default 2
- Ads survey 1
- Bandwidth per device 1
- Bandwidth per device CSV 1
- Device 1
- Device air monitor 1
- Device air monitor chutil 1
- Device air monitor dates 1
- Device air probe performance test 1
- Device air probe performance test list 1
- Device availability 1
- Device availability CSV 1
- Device bandwidth 1
- Device cellular tower scan profiles 1
- Device cellular tower scan result 1
- Device cellular tower scan results 1
- Device cellular tower scan results by report id 1
- Device cellular tower scan results dates 1
- Device cellular tower scan run 1
- Device client captive portal access logs 1
- Device client daily usages 1
- Device client daily vlan usages 1
- Device client hourly usages 1
- Device client hourly vlan usages 1
- Device client usage summary 1
- Device config backup 1
- Device config backup target convert 1
- Device conn test reports 1
- Device content blocking log 1
- Device content blocking log dates 1
- Device convert targets 1
- Device CP 1
- Device CP by CP id 1
- Device CP captive portal user 1
- Device CP client type 1
- Device CP guest session 1
- Device CP guest status 1
- Device CP import guest 1
- Device CP usage portal list 1
- Device CP usage report 1
- Device custom portals 1
- Device daily client count 1
- Device daily client list 1
- Device dpi daily 1
- Device dpi hourly 1
- Device event log 1
- Device event log archive list 1
- Device event log types 1
- Device external portal usages 1
- Device firewall log 1
- Device firewall log dates 1
- Device GPS availability 1
- Device hmi display 1
- Device hourly client count 1
- Device hourly client list 1
- Device info 1
- Device info by field 1
- Device iot port 1
- Device iot reports 1
- Device ipsec history 1
- Device ipsec history profile names 1
- Device mediafast usages 1
- Device name 1
- Device note 1
- Device online history 1
- Device oobm links 1
- Device oobm settings copy 1
- Device pepvpn connection availability monthly 1
- Device pepvpn status 1
- Device pepvpn status V2 1
- Device pepvpn tunnel stat 1
- Device pepvpn tunnel stat V2 1
- Device pepvpn usages 1
- Device pepvpn usages CSV 1
- Device poe usage daily 1
- Device poe usage daily CSV 1
- Device poe usage hourly 1
- Device poe usage hourly CSV 1
- Device poe usage monthly 1
- Device poe usage monthly CSV 1
- Device radio support 1
- Device reader log 1
- 196 smaller areas 196
Top actions
The Peplink InControl 2 API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 6 of Peplink InControl 2's 6 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
peplink_incontrol2.groups.listGet an organization's group list | Get an organization's group list. | read | crm.location.list48 connectors |
peplink_incontrol2.devices.listGet an organization's device list. | Get an organization's device list. | read | device.endpoint.list65 connectors |
peplink_incontrol2.group.getGet a group's information | Get a group's information. | read | crm.location.get42 connectors |
peplink_incontrol2.device.getGet a device's details. | Get a device's details. | read | device.endpoint.get57 connectors |
peplink_incontrol2.user_me.getGet your user information | Get your user information. | read | identity.current_user.get307 connectors |
peplink_incontrol2.organizations.listGet accessible organization list | Get accessible organization list. | read | platform.tenant.list70 connectors |
peplink_incontrol2.groups.createCreate a group | Create a group. | write | this connector |
peplink_incontrol2.group_devices.listGet a group's device list. | Get a group's device list. | read | this connector |
peplink_incontrol2.sn.getGet a device's details | Get a device's details. | read | this connector |
peplink_incontrol2.sim_pools.createCreate SIM pool profiles | Create SIM pool profiles. | write | this connector |
peplink_incontrol2.esim_topup.createTopup Devices | Topup Devices. | write | this connector |
peplink_incontrol2.sim_pools.deleteDelete SIM pool profiles | Delete SIM pool profiles. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the Peplink InControl 2 actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Which Peplink InControl 2 devices have not checked in for a week?
calls
peplink_incontrol2.devices.list - Writewrite
Create a group in Peplink InControl 2. Show me exactly what you will send before you save it.
calls
peplink_incontrol2.groups.create
Governance for Peplink InControl 2
Destructive actions wait for a yes.
21 Peplink InControl 2 actions are destructive. These are all of them:
- Delete SIM pool profiles
peplink_incontrol2.sim_pools.delete - Delete Device Tags
peplink_incontrol2.device_tags.delete - Add organization admin users
peplink_incontrol2.settings_admins.add - Delete devices from an organization
peplink_incontrol2.delete_devices.delete - Delete Starlink pool profiles
peplink_incontrol2.starlink_pools.delete - Delete SIM pool profiles
peplink_incontrol2.group_sim_pools.delete - Delete organization admin users
peplink_incontrol2.settings_admins.delete - Remove Devices
peplink_incontrol2.esim_pool_devices.delete - Delete Device Tags
peplink_incontrol2.group_device_tags.delete - Delete Group MAC Addresses
peplink_incontrol2.group_grouped_mac.delete - Delete a VLAN network settings
peplink_incontrol2.group_vlan_config.delete - Delete a master configuration
peplink_incontrol2.group_clone_config.delete - Add group admin users
peplink_incontrol2.group_settings_admins.add - Delete an SSID profile
peplink_incontrol2.group_ssid_settings.delete - Get docker scripts
peplink_incontrol2.group_docker_scripts.delete - Delete Starlink pool profiles
peplink_incontrol2.group_starlink_pools.delete - Delete group admin users
peplink_incontrol2.group_settings_admins.delete - Disconnect group captive portal guest user sessions (deletion is asynchronous)
peplink_incontrol2.group_cp_guest_session.delete - Disconnect device captive portal guest user sessions (deletion is asynchronous)
peplink_incontrol2.device_cp_guest_session.delete - Get docker scripts log
peplink_incontrol2.group_docker_scripts_log.delete - Delete firewall rule settings
peplink_incontrol2.group_firewall_rule_sets.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete SIM pool profiles?
intent: the user asked me to delete SIM pool profiles
account { op: "keys.create", name: "peplink-incontrol2-agent", allowed_actions: ["peplink_incontrol2.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "peplink_incontrol2.sim_pools.delete", approver: "[email protected]" }, { match: "peplink_incontrol2.device_tags.delete", approver: "[email protected]" }, { match: "peplink_incontrol2.settings_admins.add", approver: "[email protected]" } ]}Cost
What Peplink InControl 2 costs on actionlake.
Every Peplink InControl 2 action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Peplink InControl 2 refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 375 Peplink InControl 2 actions
- 375actions pageeach page of a long list is one call
- 245reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Peplink InControl 2 action.
375 actions by area: the id your agent calls, what it does, and its effect.
Group docker scripts4
peplink_incontrol2.group_docker_scripts.createCreate docker scriptswritepeplink_incontrol2.group_docker_scripts.deleteGet docker scriptsdestructive- and 2 more in this area
Group firewall rule sets4
peplink_incontrol2.group_firewall_rule_sets.createCreate firewall rule setwritepeplink_incontrol2.group_firewall_rule_sets.deleteDelete firewall rule settingsdestructive- and 2 more in this area
Group grouped mac4
peplink_incontrol2.group_grouped_mac.createCreate Grouped MAC Addresseswritepeplink_incontrol2.group_grouped_mac.deleteDelete Group MAC Addressesdestructive- and 2 more in this area
Group settings admins4
peplink_incontrol2.group_settings_admins.addAdd group admin usersdestructivepeplink_incontrol2.group_settings_admins.deleteDelete group admin usersdestructive- and 2 more in this area
Group sim pools4
peplink_incontrol2.group_sim_pools.createCreate SIM pool profileswritepeplink_incontrol2.group_sim_pools.deleteDelete SIM pool profilesdestructive- and 2 more in this area
Group starlink pools4
peplink_incontrol2.group_starlink_pools.createCreate Starlink pool profileswritepeplink_incontrol2.group_starlink_pools.deleteDelete Starlink pool profilesdestructive- and 2 more in this area
Group vlan config4
peplink_incontrol2.group_vlan_config.createCreate a VLAN network settingswritepeplink_incontrol2.group_vlan_config.deleteDelete a VLAN network settingsdestructive- and 2 more in this area
Settings admins4
peplink_incontrol2.settings_admins.addAdd organization admin usersdestructivepeplink_incontrol2.settings_admins.deleteDelete organization admin usersdestructive- and 2 more in this area
Sim pools4
peplink_incontrol2.sim_pools.createCreate SIM pool profileswritepeplink_incontrol2.sim_pools.deleteDelete SIM pool profilesdestructive- and 2 more in this area
Starlink pools4
peplink_incontrol2.starlink_pools.createCreate Starlink pool profileswritepeplink_incontrol2.starlink_pools.deleteDelete Starlink pool profilesdestructive- and 2 more in this area
Group device tags3
peplink_incontrol2.group_device_tags.createAdd Device Tagswritepeplink_incontrol2.group_device_tags.deleteDelete Device Tagsdestructive- and 1 more in this area
Group ssid settings3
peplink_incontrol2.group_ssid_settings.createCreate an SSID profile with a subset of settingswritepeplink_incontrol2.group_ssid_settings.deleteDelete an SSID profiledestructive- and 1 more in this area
Delete devices2
peplink_incontrol2.delete_devices.deleteDelete devices from an organizationdestructivepeplink_incontrol2.delete_devices.getGet status for delete devices from an organizationread
Device client2
peplink_incontrol2.device_client.getGet a client's information in device levelreadpeplink_incontrol2.device_client.listGet a device's live client listread
Device CP guest2
peplink_incontrol2.device_cp_guest.createInsert device captive portal guest user infowritepeplink_incontrol2.device_cp_guest.updateUpdate device captive portal guest user infowrite
Device devapi2
peplink_incontrol2.device_devapi.createExecute device API for POST request endpointwritepeplink_incontrol2.device_devapi.getExecute device API for GET request endpointread
Device loc2
peplink_incontrol2.device_loc.listGet a device's locationreadpeplink_incontrol2.device_loc.updateUpdate a device's GPS location.write
Device oobm settings2
peplink_incontrol2.device_oobm_settings.getGet device InTouch settings and profilesreadpeplink_incontrol2.device_oobm_settings.updateUpdate device InTouch settings and profileswrite
Device ssid profiles2
peplink_incontrol2.device_ssid_profiles.getGet a device's SSID profilesreadpeplink_incontrol2.device_ssid_profiles.updateEnable or disable a device level SSID profilewrite
Device tags2
peplink_incontrol2.device_tags.createAdd Device Tagswritepeplink_incontrol2.device_tags.deleteDelete Device Tagsdestructive
Esim pool devices2
peplink_incontrol2.esim_pool_devices.createAdd Deviceswritepeplink_incontrol2.esim_pool_devices.deleteRemove Devicesdestructive
Esim pool iccid2
peplink_incontrol2.esim_pool_iccid.createAdd ICCIDswritepeplink_incontrol2.esim_pool_iccid.getGet ICCIDs details from FSC redisread
Esim pool settings2
peplink_incontrol2.esim_pool_settings.getGet Pooled Plan Settingsreadpeplink_incontrol2.esim_pool_settings.updateUpdate Pooled Plan Settingswrite
Group bulk config2
peplink_incontrol2.group_bulk_config.createCreate a master configurationwritepeplink_incontrol2.group_bulk_config.updateUpdate a master configurationwrite
Group client2
peplink_incontrol2.group_client.getGet a client's information in group levelreadpeplink_incontrol2.group_client.listGet a group's live clients listread
Group CP guest2
peplink_incontrol2.group_cp_guest.createInsert group captive portal guest user infowritepeplink_incontrol2.group_cp_guest.updateUpdate group captive portal guest user infowrite
Group CP guest by user id2
peplink_incontrol2.group_cp_guest_by_user_id.createCreate a captive portal guest user with the given username (user_id)writepeplink_incontrol2.group_cp_guest_by_user_id.updateUpdate an existing captive portal guest user (user_id). Only the fields provided are changedwrite
Group device ip settings2
peplink_incontrol2.group_device_ip_settings.getGet device IP settingsreadpeplink_incontrol2.group_device_ip_settings.updateSave device IP settingswrite
Group docker scripts log2
peplink_incontrol2.group_docker_scripts_log.deleteGet docker scripts logdestructivepeplink_incontrol2.group_docker_scripts_log.getGet docker scripts logread
Group grouped networks2
peplink_incontrol2.group_grouped_networks.getGet grouped networksreadpeplink_incontrol2.group_grouped_networks.updateUpdate named networkswrite
Group move devices 2Group SP default 2Group ssid profiles 2Group wifi management 2Grouped networks 2Groups 2Move devices 2SP default 2Ads survey 1Bandwidth per device 1Bandwidth per device CSV 1Device 1Device air monitor 1Device air monitor chutil 1Device air monitor dates 1Device air probe performance test 1Device air probe performance test list 1Device availability 1Device availability CSV 1Device bandwidth 1Device cellular tower scan profiles 1Device cellular tower scan result 1Device cellular tower scan results 1Device cellular tower scan results by report id 1Device cellular tower scan results dates 1Device cellular tower scan run 1Device client captive portal access logs 1Device client daily usages 1Device client daily vlan usages 1Device client hourly usages 1Device client hourly vlan usages 1Device client usage summary 1Device config backup 1Device config backup target convert 1Device conn test reports 1Device content blocking log 1Device content blocking log dates 1Device convert targets 1Device CP 1Device CP by CP id 1Device CP captive portal user 1Device CP client type 1Device CP guest session 1Device CP guest status 1Device CP import guest 1Device CP usage portal list 1Device CP usage report 1Device custom portals 1Device daily client count 1Device daily client list 1Device dpi daily 1Device dpi hourly 1Device event log 1Device event log archive list 1Device event log types 1Device external portal usages 1Device firewall log 1Device firewall log dates 1Device GPS availability 1Device hmi display 1Device hourly client count 1Device hourly client list 1Device info 1Device info by field 1Device iot port 1Device iot reports 1Device ipsec history 1Device ipsec history profile names 1Device mediafast usages 1Device name 1Device note 1Device online history 1Device oobm links 1Device oobm settings copy 1Device pepvpn connection availability monthly 1Device pepvpn status 1Device pepvpn status V2 1Device pepvpn tunnel stat 1Device pepvpn tunnel stat V2 1Device pepvpn usages 1Device pepvpn usages CSV 1Device poe usage daily 1Device poe usage daily CSV 1Device poe usage hourly 1Device poe usage hourly CSV 1Device poe usage monthly 1Device poe usage monthly CSV 1Device radio support 1Device reader log 1196 smaller areas 196
This index shows a sample of each area. All 375 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Peplink InControl 2 MCP server, answered.
Is there a Peplink InControl 2 MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 375 Peplink InControl 2 actions across group docker scripts, group firewall rule sets, group grouped mac and group settings admins, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Peplink InControl 2.
What do I need to connect Peplink InControl 2?
InControl 2 Client ID: in InControl click your email address (top right), scroll to Client Applications, New Client,… and Client Secret of the same InControl 2 client application. The free call account { op: "connections.requirements", service: "peplink_incontrol2" } lists exactly what to paste.
Can an AI agent delete or change things in Peplink InControl 2?
Only if its key allows it, and only with an explicit confirmation. 21 Peplink InControl 2 actions are destructive, including delete SIM pool profiles, delete Device Tags and add organization admin users. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Peplink InControl 2 API limit?
actionlake paces every call to the limits in the Peplink InControl 2 service file: 20 calls a second per connection. Repeated reads are answered from cache (245 Peplink InControl 2 actions can be), which never reaches Peplink InControl 2.
What does a Peplink InControl 2 action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (375 Peplink InControl 2 actions page). Cache hits, searches, dry runs and calls Peplink InControl 2 refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Peplink InControl 2 API does it cover?
The InControl 2 REST API (api.ic.peplink.com/rest) at api.ic.peplink.com. It is built from Peplink InControl 2's documentation as read on 23 October 2026. 375 actions in 315 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Peplink InControl 2 data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Peplink InControl 2 credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Peplink InControl 2 today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.