Skip to content

Connectors · Identity & security

ProjectDiscovery Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to ProjectDiscovery Cloud and the rest of your systems. It gives your agent 120 ProjectDiscovery Cloud actions (62 reads, 37 writes and 21 that wait for a confirmation) and holds the ProjectDiscovery Cloud credential itself, so the agent never does. It paces ProjectDiscovery Cloud's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "projectdiscovery_cloud.asset_policies.list",  intent: "check which ProjectDiscovery Cloud account is connected"}# List asset policies · read · 1 upstream call
  • 120actionsin one signed file
  • 62readlook, never change
  • 37writecreate and update
  • 21wait for a yesdestructive, confirmed first

Set up

Connect ProjectDiscovery Cloud in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect ProjectDiscovery Cloud.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyProjectDiscovery Cloud API key: cloud.projectdiscovery.io > Settings > API Key
    account { op: "connections.requirements", service: "projectdiscovery_cloud" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "projectdiscovery_cloud.asset_policies.list" }# list asset policies · read · 1 upstream callcheck { action: "projectdiscovery_cloud.asset_policies.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

ProjectDiscovery Cloud at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Limits we pace to
300 calls a minute, per connection
API covered
PDCP API 1.0 (OpenAPI 3.1, api.projectdiscovery.io)api.projectdiscovery.io
Built from
ProjectDiscovery Cloud's documentation, read 23 October 2026docs.projectdiscovery.iodocs.projectdiscovery.io
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
55 of 62 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line ProjectDiscovery Cloud up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in ProjectDiscovery Cloud.

120 actions in 22 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 62readlook, never change
  • 37writecreate and update
  • 21destructivewait for a confirmation
  1. Enumerations

    15

    9 read · 4 write · 2 destructive

    Create Enumeration · Get Enumeration List · Get All Enumeration Contents · Get Enumeration Contents

  2. Scans

    14

    7 read · 4 write · 3 destructive

    Get Scan List · Create Scan · Get Scan · Update Scan

  3. Scan results

    11

    7 read · 3 write · 1 destructive

    Get All Results · Get Scan Vulnerability · Get all Vulnerability Changelogs · Get Vulnerability Changelogs

  4. Templates

    11

    7 read · 3 write · 1 destructive

    Create Template · Generate AI Template · Get Template List · Get Early Template List

  5. Asset policies

    7

    4 read · 2 write · 1 destructive

    List asset policies · Create asset policy · Get asset policy · Update asset policy

  6. Configs

    6

    3 read · 2 write · 1 destructive

    Add Config · Get Configs List · Get Config · Update Config

  7. Leaks

    6

    5 read · 1 write · 0 destructive

    Get all leaked credentials · Get leak statistics for a domain (Public) · Get leak statistics for an email (Public) · Update leak status

  8. Assets

    5

    1 read · 3 write · 1 destructive

    Add labels to an asset · Get Asset Changelogs for a given asset_id · Modify labels of an asset · Update Asset Labels

14 more areas · 45 actions
  • Template shares 5
  • API key 4
  • Severity mappings 4
  • Team members 4
  • Teams 4
  • Vulnerability DB 4
  • Asset groups 3
  • Default team members 3
  • Enumeration schedules 3
  • Exclusions 3
  • Scan schedules 3
  • Audit logs 2
  • Scan history 2
  • Domains 1

Top actions

The ProjectDiscovery Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 21 of ProjectDiscovery Cloud's 21 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
projectdiscovery_cloud.asset_policies.listList asset policiesList asset policies.readsecurity.policy.list36 connectors
projectdiscovery_cloud.teams.listGet TeamGet Team.readwork.workspace.list50 connectors
projectdiscovery_cloud.team_members.listGet Team MembersGet Team Members.readwork.workspace_member.list26 connectors
projectdiscovery_cloud.asset_policies.createCreate asset policyCreate asset policy.writesecurity.policy.create25 connectors
projectdiscovery_cloud.teams.createCreate WorkspaceCreate Workspace.writework.workspace.create36 connectors
projectdiscovery_cloud.audit_logs.listGet audit logs for teamGet audit logs for team.readsecurity.audit_log.list69 connectors
projectdiscovery_cloud.asset_policies.deleteDelete asset policyDelete asset policy.destructivesecurity.policy.delete21 connectors
projectdiscovery_cloud.team_members.updateUpdate Team MemberUpdate Team Member.writework.workspace_member.update16 connectors
projectdiscovery_cloud.scan_results.listGet All ResultsGet All Results.readsecurity.vulnerability.list14 connectors
projectdiscovery_cloud.audit_logs.searchSmart search across audit logsSmart search across audit logs.readsecurity.audit_log.search9 connectors
projectdiscovery_cloud.scans.listGet Scan ListGet Scan List.readsecurity.vulnerability_scan.list6 connectors
projectdiscovery_cloud.scans.createCreate ScanCreate Scan.writesecurity.vulnerability_scan.create4 connectors

Try it

Prompts to paste into Claude.

Each one names the ProjectDiscovery Cloud actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List asset policies in ProjectDiscovery Cloud and tell me what stands out.

    callsprojectdiscovery_cloud.asset_policies.list

  2. Writewrite

    Create asset policy in ProjectDiscovery Cloud. Show me exactly what you will send before you save it.

    callsprojectdiscovery_cloud.asset_policies.create

Governance for ProjectDiscovery Cloud

Destructive actions wait for a yes.

21 ProjectDiscovery Cloud actions are destructive. These are all of them:

  • Delete asset policyprojectdiscovery_cloud.asset_policies.delete
  • Delete Teamprojectdiscovery_cloud.teams.delete
  • Delete Scanprojectdiscovery_cloud.scans.delete
  • Stop Scanprojectdiscovery_cloud.scans.stop
  • Delete API Keyprojectdiscovery_cloud.api_key.delete
  • Rotate API Keyprojectdiscovery_cloud.api_key.rotate
  • Delete Configprojectdiscovery_cloud.configs.delete
  • Delete Templateprojectdiscovery_cloud.templates.delete
  • Delete excluded templates or targets by idsprojectdiscovery_cloud.exclusions.delete
  • Delete Scan in bulkprojectdiscovery_cloud.scans.bulk_delete
  • Delete an asset groupprojectdiscovery_cloud.asset_groups.delete
  • Delete Enumerationprojectdiscovery_cloud.enumerations.delete
  • Delete Team Memberprojectdiscovery_cloud.team_members.remove
  • Delete labels of an assetprojectdiscovery_cloud.assets.delete_labels
  • Delete Scan Scheduleprojectdiscovery_cloud.scan_schedules.delete
  • Unshare/Delete templateprojectdiscovery_cloud.template_shares.delete
  • Delete Assets in bulkprojectdiscovery_cloud.enumerations.bulk_delete
  • Delete Scan Vulnerabilityprojectdiscovery_cloud.scan_results.bulk_delete
  • Delete custom severity mappingprojectdiscovery_cloud.severity_mappings.delete
  • Delete Default Team Membersprojectdiscovery_cloud.default_team_members.delete
  • Delete Enumeration Scheduleprojectdiscovery_cloud.enumeration_schedules.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doprojectdiscovery_cloud.asset_policies.deleteconfirm_policy: human

Delete asset policy?

intent: the user asked me to delete asset policy

run suspended · waiting for a named person · key projectdiscovery-cloud-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "projectdiscovery-cloud-agent",  allowed_actions: ["projectdiscovery_cloud.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "projectdiscovery_cloud.asset_policies.delete", approver: "[email protected]" },    { match: "projectdiscovery_cloud.teams.delete", approver: "[email protected]" },    { match: "projectdiscovery_cloud.scans.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to ProjectDiscovery Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What ProjectDiscovery Cloud costs on actionlake.

Every ProjectDiscovery Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call ProjectDiscovery Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 120 ProjectDiscovery Cloud actions
  • 120actions pageeach page of a long list is one call
  • 55reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every ProjectDiscovery Cloud action.

120 actions by area: the id your agent calls, what it does, and its effect.

Enumerations15
  • projectdiscovery_cloud.enumerations.bulk_deleteDelete Assets in bulkdestructive
  • projectdiscovery_cloud.enumerations.createCreate Enumerationwrite
  • projectdiscovery_cloud.enumerations.deleteDelete Enumerationdestructive
  • projectdiscovery_cloud.enumerations.exportExport Enumerationread
  • projectdiscovery_cloud.enumerations.export_allExport Enumeration of userread
  • projectdiscovery_cloud.enumerations.getGet Enumerationread
  • projectdiscovery_cloud.enumerations.get_configGet enumeration configread
  • projectdiscovery_cloud.enumerations.listGet Enumeration Listread
  • projectdiscovery_cloud.enumerations.list_all_contentsGet All Enumeration Contentsread
  • projectdiscovery_cloud.enumerations.list_contentsGet Enumeration Contentsread
  • projectdiscovery_cloud.enumerations.list_historyGet asset enumeration history dataread
  • projectdiscovery_cloud.enumerations.list_misconfigurationsList Misconfiguration Findingsread
  • projectdiscovery_cloud.enumerations.rescanRescan Enumerationwrite
  • projectdiscovery_cloud.enumerations.updateUpdate Enumerationwrite
  • projectdiscovery_cloud.enumerations.update_configUpdate enumeration configwrite
Scans14
  • projectdiscovery_cloud.scans.bulk_deleteDelete Scan in bulkdestructive
  • projectdiscovery_cloud.scans.createCreate Scanwrite
  • projectdiscovery_cloud.scans.deleteDelete Scandestructive
  • projectdiscovery_cloud.scans.exportExport Scanread
  • projectdiscovery_cloud.scans.export_filteredExport Filtered Scanread
  • projectdiscovery_cloud.scans.export_scan_logExport scan log of given scan idread
  • projectdiscovery_cloud.scans.getGet Scanread
  • projectdiscovery_cloud.scans.get_configGet Scan Configread
  • projectdiscovery_cloud.scans.listGet Scan Listread
  • projectdiscovery_cloud.scans.list_scan_ipsGet Scan IPsread
  • projectdiscovery_cloud.scans.rescanRescan scanwrite
  • projectdiscovery_cloud.scans.stopStop Scandestructive
  • projectdiscovery_cloud.scans.updateUpdate Scanwrite
  • projectdiscovery_cloud.scans.update_configUpdate Scan Configwrite
Scan results11
  • projectdiscovery_cloud.scan_results.bulk_deleteDelete Scan Vulnerabilitydestructive
  • projectdiscovery_cloud.scan_results.exportExport filtered Scan resultsread
  • projectdiscovery_cloud.scan_results.getGet Scan Vulnerabilityread
  • projectdiscovery_cloud.scan_results.get_historyGet scan log stats of given scan idread
  • projectdiscovery_cloud.scan_results.get_retestGet Retest Vulnerabilityread
  • projectdiscovery_cloud.scan_results.listGet All Resultsread
  • projectdiscovery_cloud.scan_results.list_all_changelogsGet all Vulnerability Changelogsread
  • projectdiscovery_cloud.scan_results.list_changelogsGet Vulnerability Changelogsread
  • projectdiscovery_cloud.scan_results.retestRetest vulnerabilitywrite
  • projectdiscovery_cloud.scan_results.update_labelsUpdate Vulnerability Labelswrite
  • projectdiscovery_cloud.scan_results.update_statusUpdate Vulnerability Statuswrite
Templates11
  • projectdiscovery_cloud.templates.createCreate Templatewrite
  • projectdiscovery_cloud.templates.deleteDelete Templatedestructive
  • projectdiscovery_cloud.templates.generate_aiGenerate AI Templatewrite
  • projectdiscovery_cloud.templates.getGet Templateread
  • projectdiscovery_cloud.templates.get_earlyGet Early Templateread
  • projectdiscovery_cloud.templates.get_publicGet Public Templateread
  • projectdiscovery_cloud.templates.listGet Template Listread
  • projectdiscovery_cloud.templates.list_earlyGet Early Template Listread
  • projectdiscovery_cloud.templates.list_publicGet Public Template Listread
  • projectdiscovery_cloud.templates.searchSearch Templatesread
  • projectdiscovery_cloud.templates.updateUpdate Templatewrite
Asset policies7
  • projectdiscovery_cloud.asset_policies.createCreate asset policywrite
  • projectdiscovery_cloud.asset_policies.deleteDelete asset policydestructive
  • projectdiscovery_cloud.asset_policies.getGet asset policyread
  • projectdiscovery_cloud.asset_policies.listList asset policiesread
  • projectdiscovery_cloud.asset_policies.list_eventsGet asset policy eventsread
  • projectdiscovery_cloud.asset_policies.list_suggestionsGet asset policy suggestionsread
  • projectdiscovery_cloud.asset_policies.updateUpdate asset policywrite
Configs6
  • projectdiscovery_cloud.configs.createAdd Configwrite
  • projectdiscovery_cloud.configs.deleteDelete Configdestructive
  • projectdiscovery_cloud.configs.getGet Configread
  • projectdiscovery_cloud.configs.listGet Configs Listread
  • projectdiscovery_cloud.configs.updateUpdate Configwrite
  • projectdiscovery_cloud.configs.verifyVerify Configread
Leaks6
  • projectdiscovery_cloud.leaks.exportExport leaked credentialsread
  • projectdiscovery_cloud.leaks.get_domain_statsGet leak statistics for a domain (Public)read
  • projectdiscovery_cloud.leaks.get_email_statsGet leak statistics for an email (Public)read
  • projectdiscovery_cloud.leaks.get_infoGet leak information by IDread
  • projectdiscovery_cloud.leaks.listGet all leaked credentialsread
  • projectdiscovery_cloud.leaks.update_statusUpdate leak statuswrite
Assets5
  • projectdiscovery_cloud.assets.add_labelsAdd labels to an assetwrite
  • projectdiscovery_cloud.assets.delete_labelsDelete labels of an assetdestructive
  • projectdiscovery_cloud.assets.list_changelogsGet Asset Changelogs for a given asset_idread
  • projectdiscovery_cloud.assets.update_labelsModify labels of an assetwrite
  • projectdiscovery_cloud.assets.update_labels_bulkUpdate Asset Labelswrite
Template shares5
  • projectdiscovery_cloud.template_shares.createShare Templatewrite
  • projectdiscovery_cloud.template_shares.deleteUnshare/Delete templatedestructive
  • projectdiscovery_cloud.template_shares.getGet Shared Templateread
  • projectdiscovery_cloud.template_shares.listGet Shared Template Listread
  • projectdiscovery_cloud.template_shares.updateUpdate Shared Templatewrite
API key4
  • projectdiscovery_cloud.api_key.createCreate API Keywrite
  • projectdiscovery_cloud.api_key.deleteDelete API Keydestructive
  • projectdiscovery_cloud.api_key.getGet API Keyread
  • projectdiscovery_cloud.api_key.rotateRotate API Keydestructive
Severity mappings4
  • projectdiscovery_cloud.severity_mappings.createAdd custom severity mappingwrite
  • projectdiscovery_cloud.severity_mappings.deleteDelete custom severity mappingdestructive
  • projectdiscovery_cloud.severity_mappings.listGet custom severity mappingsread
  • projectdiscovery_cloud.severity_mappings.updateModify custom severity mappingwrite
Team members4
  • projectdiscovery_cloud.team_members.inviteAdd Team Memberwrite
  • projectdiscovery_cloud.team_members.listGet Team Membersread
  • projectdiscovery_cloud.team_members.removeDelete Team Memberdestructive
  • projectdiscovery_cloud.team_members.updateUpdate Team Memberwrite
Teams4
  • projectdiscovery_cloud.teams.createCreate Workspacewrite
  • projectdiscovery_cloud.teams.deleteDelete Teamdestructive
  • projectdiscovery_cloud.teams.listGet Teamread
  • projectdiscovery_cloud.teams.updateUpdate Teamwrite
Vulnerability DB4
  • projectdiscovery_cloud.vulnerability_db.getGet Vulnerability by IDread
  • projectdiscovery_cloud.vulnerability_db.get_timelineGet Vulnerability Timelineread
  • projectdiscovery_cloud.vulnerability_db.list_filtersGet All Filters for Vulnerabilitiesread
  • projectdiscovery_cloud.vulnerability_db.searchFull Text Searchread
Asset groups3
  • projectdiscovery_cloud.asset_groups.createCreate an asset groupwrite
  • projectdiscovery_cloud.asset_groups.deleteDelete an asset groupdestructive
  • projectdiscovery_cloud.asset_groups.updateUpdate an asset groupwrite
Default team members3
  • projectdiscovery_cloud.default_team_members.deleteDelete Default Team Membersdestructive
  • projectdiscovery_cloud.default_team_members.listGet Default Team Membersread
  • projectdiscovery_cloud.default_team_members.setSet Default Team Memberswrite
Enumeration schedules3
  • projectdiscovery_cloud.enumeration_schedules.deleteDelete Enumeration Scheduledestructive
  • projectdiscovery_cloud.enumeration_schedules.listGet Enumeration Schedulesread
  • projectdiscovery_cloud.enumeration_schedules.setSet Enumeration Schedulewrite
Exclusions3
  • projectdiscovery_cloud.exclusions.createAdd excluded templates and targetswrite
  • projectdiscovery_cloud.exclusions.deleteDelete excluded templates or targets by idsdestructive
  • projectdiscovery_cloud.exclusions.listGet excluded templatesread
Scan schedules3
  • projectdiscovery_cloud.scan_schedules.deleteDelete Scan Scheduledestructive
  • projectdiscovery_cloud.scan_schedules.listGet Scan Schedulesread
  • projectdiscovery_cloud.scan_schedules.setSet Scan Schedulewrite
Audit logs2
  • projectdiscovery_cloud.audit_logs.listGet audit logs for teamread
  • projectdiscovery_cloud.audit_logs.searchSmart search across audit logsread
Scan history2
  • projectdiscovery_cloud.scan_history.listGet All Scans Historyread
  • projectdiscovery_cloud.scan_history.list_for_scanGet Scan Historyread
Domains1
  • projectdiscovery_cloud.domains.list_associatedGet Associated Domainsread

Questions

The ProjectDiscovery Cloud MCP server, answered.

Is there a ProjectDiscovery Cloud MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 120 ProjectDiscovery Cloud actions across enumerations, scans, scan results and templates, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by ProjectDiscovery Cloud.

What do I need to connect ProjectDiscovery Cloud?

ProjectDiscovery Cloud API key: cloud.projectdiscovery.io > Settings > API Key. The free call account { op: "connections.requirements", service: "projectdiscovery_cloud" } lists exactly what to paste.

Can an AI agent delete or change things in ProjectDiscovery Cloud?

Only if its key allows it, and only with an explicit confirmation. 21 ProjectDiscovery Cloud actions are destructive, including delete asset policy, delete Team and delete Scan. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my ProjectDiscovery Cloud API limit?

actionlake paces every call to the limits in the ProjectDiscovery Cloud service file: 300 calls a minute per connection. Repeated reads are answered from cache (55 ProjectDiscovery Cloud actions can be), which never reaches ProjectDiscovery Cloud.

What does a ProjectDiscovery Cloud action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (120 ProjectDiscovery Cloud actions page). Cache hits, searches, dry runs and calls ProjectDiscovery Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which ProjectDiscovery Cloud API does it cover?

The PDCP API 1.0 (OpenAPI 3.1, api.projectdiscovery.io) at api.projectdiscovery.io. It is built from ProjectDiscovery Cloud's documentation as read on 23 October 2026. 120 actions in 22 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my ProjectDiscovery Cloud data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your ProjectDiscovery Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent ProjectDiscovery Cloud today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.