Connectors · MSP & PSA

Proofpoint Essentials MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Proofpoint Essentials and the rest of your systems. It gives your agent 77 Proofpoint Essentials actions (33 reads, 30 writes and 14 that wait for a confirmation) and holds the Proofpoint Essentials credential itself, so the agent never does. It paces Proofpoint Essentials's limits and records every call.

Connect Proofpoint Essentials free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

the first call

do {  action: "proofpoint_essentials.me.get",  intent: "check which Proofpoint Essentials account is connected"}# Read metadata about the currently logged in User · read · 1 upstream call

77actionsin one signed file
33readlook, never change
30writecreate and update
14wait for a yesdestructive, confirmed first

Set up

Connect Proofpoint Essentials in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Proofpoint Essentials.
Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
- usernameProofpoint Essentials admin user (the email address you sign in with)
- passwordThat admin user's Proofpoint Essentials password (sent as the X-Password header)
- hostWhere your Proofpoint Essentials lives: your host
```
account { op: "connections.requirements", service: "proofpoint_essentials" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "proofpoint_essentials.me.get" }# read metadata about the currently logged in user · read · 1 upstream callcheck { action: "proofpoint_essentials.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Proofpoint Essentials at a glance

Sign-in: Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide: usernamepassword
Setup fields: host
Limits we pace to: 5 calls a second, per connection
API covered: Proofpoint Essentials Interface API v1 (OpenAPI 3.0.0), at your Proofpoint Essentials instance's API base URL, which you enter when connecting
Built from: Proofpoint Essentials's documentation, read 23 October 2026us1.proofpointessentials.com us1.proofpointessentials.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 33 of 33 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 3, so ask can line Proofpoint Essentials up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Proofpoint Essentials.

77 actions in 22 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

33readlook, never change
30writecreate and update
14destructivewait for a confirmation

Users
9
3 read · 4 write · 2 destructive
Read all Users belonging to an Organization · Create a new User. Batch POST supported with list of User objects · Read a User belonging to an Organization · Update a User belonging to an Organization
Domains
8
4 read · 3 write · 1 destructive
Create a new Domain. Batch POST supported with list of Domain objects · Read all domains associated with an Organization · Read a single Domain associated with an Organization · Update a Domain associated with an Organization
Dkim
6
2 read · 2 write · 2 destructive
Create a DKIM keypair · Read DKIM Signing data for all keypairs associated with this domain · Read DKIM Signing data for a single keypair by selector name · Delete a DKIM keypair by selector name
Email tagging
6
2 read · 3 write · 1 destructive
Create Email Tagging Exempt Senders for an Organization · Retrieve Email Tagging Exempt Senders · Read email tagging settings for an Organization · Update email tagging settings for an Organization
Idps
5
2 read · 2 write · 1 destructive
Read a list of all Identity Providers (IDPs) for the target Organization · Create a new Identity Provider (IDP) · Read a single Identity Provider (IDP) · Update an Identity Provider (IDP)
Orgs
5
2 read · 2 write · 1 destructive
Read an Organization and its child Organizations · Create a new Organization. Batch POST supported with list of Organization objects · Read an Organization · Update an Organization
Products
5
2 read · 2 write · 1 destructive
Read a list of Products applicable to an Organization. Includes both available and purchased products · Used to purchase a Product · Read a single Product by Label · Update a Product
Azure sync exemptions
4
1 read · 1 write · 2 destructive
List of Sync Exemptions for an organization · Add to organizations Sync Exemptions · Delete one Sync Exemption belonging to organization · Delete all organizations Sync Exemptions

14 more areas · 29 actions

Groups 4
Sender lists 4
Azure settings 3
Billing 2
Features 2
Licensing 2
Login settings 2
Mfa settings 2
Reporting 2
Stats 2
Endpoints 1
Me 1
Package 1
Tokens 1

Top actions

The Proofpoint Essentials API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 21 of Proofpoint Essentials's 21 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`proofpoint_essentials.users.list`Read all Users belonging to an Organization	Read all Users belonging to an Organization.	read	`identity.user.list`474 connectors
`proofpoint_essentials.me.get`Read metadata about the currently logged in User	Read metadata about the currently logged in User.	read	`identity.current_user.get`307 connectors
`proofpoint_essentials.users.create`Create a new User. Batch POST supported with list of User objects	Create a new User. Batch POST supported with list of User objects.	write	`identity.user.create`262 connectors
`proofpoint_essentials.orgs.children.list`Read an Organization and its child Organizations	Read an Organization and its child Organizations.	read	`crm.company.list`162 connectors
`proofpoint_essentials.users.delete`Delete a User	Delete a User.	destructive	`identity.user.delete`253 connectors
`proofpoint_essentials.orgs.create`Create a new Organization. Batch POST supported with list of Organization objects	Create a new Organization. Batch POST supported with list of Organization objects.	write	`crm.company.create`142 connectors
`proofpoint_essentials.idps.list`Read a list of all Identity Providers (IDPs) for the target Organization	Read a list of all Identity Providers (IDPs) for the target Organization.	read	`identity.identity_provider.list`22 connectors
`proofpoint_essentials.idps.create`Create a new Identity Provider (IDP)	Create a new Identity Provider (IDP).	write	`identity.identity_provider.create`15 connectors
`proofpoint_essentials.products.list`Read a list of Products applicable to an Organization. Includes both available and purchased products	Read a list of Products applicable to an Organization. Includes both available and purchased products.	read	`finance.subscription.list`37 connectors
`proofpoint_essentials.products.create`Used to purchase a Product	Used to purchase a Product.	write	`finance.subscription.create`27 connectors
`proofpoint_essentials.dkim.list`Read DKIM Signing data for all keypairs associated with this domain	Read DKIM Signing data for all keypairs associated with this domain.	read	this connector
`proofpoint_essentials.dkim.create`Create a DKIM keypair	Create a DKIM keypair.	write	this connector

Try it

Prompts to paste into Claude.

Each one names the Proofpoint Essentials actions it will call, so you know what it reads and what it changes before you send it.

Readread
List the companies in Proofpoint Essentials and flag likely duplicates by name or domain.
callsproofpoint_essentials.orgs.children.list
Writewrite
Create a new User. Batch POST supported with list of User objects in Proofpoint Essentials. Show me exactly what you will send before you save it.
callsproofpoint_essentials.users.create

Governance for Proofpoint Essentials

Destructive actions wait for a yes.

14 Proofpoint Essentials actions are destructive. These are all of them:

Delete a Userproofpoint_essentials.users.delete
Delete an Organizationproofpoint_essentials.orgs.delete
Delete an Identity Provider (IDP)proofpoint_essentials.idps.delete
Delete a Product subscription. NOTE this will not normally be available to customers depending on the Productproofpoint_essentials.products.delete
Delete a DKIM keypair by selector nameproofpoint_essentials.dkim.delete
Delete a Domainproofpoint_essentials.domains.delete
Delete sender lists for an Organizationproofpoint_essentials.sender_lists.delete
Clear and reset Azure Active Directory information for an Organizationproofpoint_essentials.azure_settings.delete
Delete one Sync Exemption belonging to organizationproofpoint_essentials.azure_sync_exemptions.delete
Delete all DKIM keypairs associated with a domainproofpoint_essentials.dkim.all.delete
Delete sender lists for a Userproofpoint_essentials.users.sender_lists.delete
Delete sender lists for a Groupproofpoint_essentials.groups.sender_lists.delete
Delete specified Email Tagging Exempt Senders for an Organizationproofpoint_essentials.email_tagging.exemptions.delete
Delete all organizations Sync Exemptionsproofpoint_essentials.azure_sync_exemptions.all.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doproofpoint_essentials.users.deleteconfirm_policy: human

Delete a User?

intent: the user asked me to delete a User

run suspended · waiting for a named person · key proofpoint-essentials-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "proofpoint-essentials-agent",  allowed_actions: ["proofpoint_essentials.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "proofpoint_essentials.users.delete", approver: "[email protected]" },    { match: "proofpoint_essentials.orgs.delete", approver: "[email protected]" },    { match: "proofpoint_essentials.idps.delete", approver: "[email protected]" }  ]}

Illustrative. Scoped to Proofpoint Essentials only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Proofpoint Essentials costs on actionlake.

Every Proofpoint Essentials action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Proofpoint Essentials refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 77 Proofpoint Essentials actions
77actions pageeach page of a long list is one call
33reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Proofpoint Essentials action.

77 actions by area: the id your agent calls, what it does, and its effect.

Users9

proofpoint_essentials.users.createCreate a new User. Batch POST supported with list of User objectswrite
proofpoint_essentials.users.deleteDelete a Userdestructive
proofpoint_essentials.users.getRead a User belonging to an Organizationread
proofpoint_essentials.users.listRead all Users belonging to an Organizationread
proofpoint_essentials.users.sender_lists.deleteDelete sender lists for a Userdestructive
proofpoint_essentials.users.sender_lists.getRead sender lists for a Userread
proofpoint_essentials.users.sender_lists.patchUpdate sender lists for a Userwrite
proofpoint_essentials.users.sender_lists.updateUpdate sender lists for a Userwrite
proofpoint_essentials.users.updateUpdate a User belonging to an Organizationwrite

Domains8

proofpoint_essentials.domains.createCreate a new Domain. Batch POST supported with list of Domain objectswrite
proofpoint_essentials.domains.deleteDelete a Domaindestructive
proofpoint_essentials.domains.getRead a single Domain associated with an Organizationread
proofpoint_essentials.domains.health.getRun a health check on the domainread
proofpoint_essentials.domains.listRead all domains associated with an Organizationread
proofpoint_essentials.domains.updateUpdate a Domain associated with an Organizationwrite
proofpoint_essentials.domains.verification.updateRun a verification check on the domain using the method specified. No Request data required, and result is shown via thewrite
proofpoint_essentials.domains.verification_code.getRead the verification code required to verify the domain. Use this for TXT or META verificationread

Dkim6

proofpoint_essentials.dkim.all.deleteDelete all DKIM keypairs associated with a domaindestructive
proofpoint_essentials.dkim.createCreate a DKIM keypairwrite
proofpoint_essentials.dkim.deleteDelete a DKIM keypair by selector namedestructive
proofpoint_essentials.dkim.getRead DKIM Signing data for a single keypair by selector nameread
proofpoint_essentials.dkim.listRead DKIM Signing data for all keypairs associated with this domainread
proofpoint_essentials.dkim.verification.updateVerify the DKIM keypair is valid by verifying the Public Key in DNSwrite

Email tagging6

proofpoint_essentials.email_tagging.exemptions.createCreate Email Tagging Exempt Senders for an Organizationwrite
proofpoint_essentials.email_tagging.exemptions.deleteDelete specified Email Tagging Exempt Senders for an Organizationdestructive
proofpoint_essentials.email_tagging.exemptions.listRetrieve Email Tagging Exempt Sendersread
proofpoint_essentials.email_tagging.getRead email tagging settings for an Organizationread
proofpoint_essentials.email_tagging.patchUpdate a specific email tagging setting for an Organizationwrite
proofpoint_essentials.email_tagging.updateUpdate email tagging settings for an Organizationwrite

Idps5

proofpoint_essentials.idps.createCreate a new Identity Provider (IDP)write
proofpoint_essentials.idps.deleteDelete an Identity Provider (IDP)destructive
proofpoint_essentials.idps.getRead a single Identity Provider (IDP)read
proofpoint_essentials.idps.listRead a list of all Identity Providers (IDPs) for the target Organizationread
proofpoint_essentials.idps.updateUpdate an Identity Provider (IDP)write

Orgs5

proofpoint_essentials.orgs.children.listRead an Organization and its child Organizationsread
proofpoint_essentials.orgs.createCreate a new Organization. Batch POST supported with list of Organization objectswrite
proofpoint_essentials.orgs.deleteDelete an Organizationdestructive
proofpoint_essentials.orgs.getRead an Organizationread
proofpoint_essentials.orgs.patchUpdate an Organizationwrite

Products5

proofpoint_essentials.products.createUsed to purchase a Productwrite
proofpoint_essentials.products.deleteDelete a Product subscription. NOTE this will not normally be available to customers depending on the Productdestructive
proofpoint_essentials.products.getRead a single Product by Labelread
proofpoint_essentials.products.listRead a list of Products applicable to an Organization. Includes both available and purchased productsread
proofpoint_essentials.products.patchUpdate a Productwrite

Azure sync exemptions4

proofpoint_essentials.azure_sync_exemptions.all.deleteDelete all organizations Sync Exemptionsdestructive
proofpoint_essentials.azure_sync_exemptions.deleteDelete one Sync Exemption belonging to organizationdestructive
proofpoint_essentials.azure_sync_exemptions.listList of Sync Exemptions for an organizationread
proofpoint_essentials.azure_sync_exemptions.updateAdd to organizations Sync Exemptionswrite

Groups4

proofpoint_essentials.groups.sender_lists.deleteDelete sender lists for a Groupdestructive
proofpoint_essentials.groups.sender_lists.getRead sender lists for a Groupread
proofpoint_essentials.groups.sender_lists.patchUpdate sender lists for a Groupwrite
proofpoint_essentials.groups.sender_lists.updateUpdate sender lists for a Groupwrite

Sender lists4

proofpoint_essentials.sender_lists.deleteDelete sender lists for an Organizationdestructive
proofpoint_essentials.sender_lists.getRead sender lists for an Organizationread
proofpoint_essentials.sender_lists.patchUpdate sender lists for an Organizationwrite
proofpoint_essentials.sender_lists.updateUpdate sender lists for an Organizationwrite

Azure settings3

proofpoint_essentials.azure_settings.deleteClear and reset Azure Active Directory information for an Organizationdestructive
proofpoint_essentials.azure_settings.getLoad Azure Active Directory information for an Organizationread
proofpoint_essentials.azure_settings.updateUpdate Azure Active Directory information for an Organizationwrite

Billing2

proofpoint_essentials.billing.getRead billing data for an Organizationread
proofpoint_essentials.billing.orgs.listRead billing data for an Organization and its childrenread

Features2

proofpoint_essentials.features.getRead all Features relevant to an Organization. Note that the items returned will be specific to the licensing packageread
proofpoint_essentials.features.updateUpdate an Organization's feature set. The feature set will differ for different types of licensing package so the applicwrite

Licensing2

proofpoint_essentials.licensing.getRead all Licensing data relevant to an Organizationread
proofpoint_essentials.licensing.updateUpdate an Organization's Licensing datawrite

proofpoint_essentials.login_settings.getRead Authentication login settings for the target Organizationread
proofpoint_essentials.login_settings.updateUpdate Login settings for the target Organizationwrite

Mfa settings2

proofpoint_essentials.mfa_settings.getRead MFA settings for the target Organizationread
proofpoint_essentials.mfa_settings.updateUpdate MFA settings for the target Organizationwrite

Reporting2

proofpoint_essentials.reporting.direction.getRead statistics data for an Organizationread
proofpoint_essentials.reporting.getRead statistics data for an Organizationread

Stats2

proofpoint_essentials.stats.partner.getRead statistics data for an Organization for the last 1/7/30/90 daysread
proofpoint_essentials.stats.partner_orgs.listRead statistics data for an Organization and its children for the last 1/7/30/90 daysread

Endpoints1

proofpoint_essentials.endpoints.getQuery which Proofpoint stack(s) a domain is active onread

Me1

proofpoint_essentials.me.getRead metadata about the currently logged in Userread

Package1

proofpoint_essentials.package.updateUpdate an Organization's Package datawrite

Tokens1

proofpoint_essentials.tokens.createCreate an Odin access token for the specified userwrite

Questions

The Proofpoint Essentials MCP server, answered.

Is there a Proofpoint Essentials MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 77 Proofpoint Essentials actions across users, domains, dkim and email tagging, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Proofpoint Essentials.

What do I need to connect Proofpoint Essentials?

Proofpoint Essentials admin user (the email address you sign in with) and That admin user's Proofpoint Essentials password (sent as the X-Password header). Plus your host. The free call account { op: "connections.requirements", service: "proofpoint_essentials" } lists exactly what to paste.

Can an AI agent delete or change things in Proofpoint Essentials?

Only if its key allows it, and only with an explicit confirmation. 14 Proofpoint Essentials actions are destructive, including delete a User, delete an Organization and delete an Identity Provider (IDP). Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Proofpoint Essentials API limit?

actionlake paces every call to the limits in the Proofpoint Essentials service file: 5 calls a second per connection. Repeated reads are answered from cache (33 Proofpoint Essentials actions can be), which never reaches Proofpoint Essentials.

What does a Proofpoint Essentials action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (77 Proofpoint Essentials actions page). Cache hits, searches, dry runs and calls Proofpoint Essentials refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Proofpoint Essentials API does it cover?

The Proofpoint Essentials Interface API v1 (OpenAPI 3.0.0) at your Proofpoint Essentials instance's API base URL, which you enter when connecting. It is built from Proofpoint Essentials's documentation as read on 23 October 2026. 77 actions in 22 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Proofpoint Essentials data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Proofpoint Essentials credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Proofpoint Essentials today.

Connect Proofpoint Essentials free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

Proofpoint Essentials MCP server for AI agents.

Connect Proofpoint Essentials in three steps.

Add actionlake to Claude.

Connect Proofpoint Essentials.

Make the first call. Check before a write.

What an AI agent can do in Proofpoint Essentials.

Users

Domains

Dkim

Email tagging

Idps

Orgs

Products

Azure sync exemptions