Connectors · Identity & security
SailPoint Identity Security Cloud MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SailPoint Identity Security Cloud and the rest of your systems. It gives your agent 776 SailPoint Identity Security Cloud actions (372 reads, 295 writes and 109 that wait for a confirmation) and holds the SailPoint Identity Security Cloud credential itself, so the agent never does. It paces SailPoint Identity Security Cloud's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "sailpoint_identity_security_cloud.identities.list", intent: "check which SailPoint Identity Security Cloud account is connected"}# List identities · read · 1 upstream call- 776actionsin one signed file
- 372readlook, never change
- 295writecreate and update
- 109wait for a yesdestructive, confirmed first
Set up
Connect SailPoint Identity Security Cloud in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect SailPoint Identity Security Cloud.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idClient ID of a SailPoint personal access token (Preferences > Personal Access Tokens) or of an API management OAuth…client_secretSecret of that personal access token or OAuth client (shown once, at creation)hostWhere your SailPoint Identity Security Cloud lives: your host
account { op: "connections.requirements", service: "sailpoint_identity_security_cloud" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "sailpoint_identity_security_cloud.identities.list" }# list identities · read · 1 upstream callcheck { action: "sailpoint_identity_security_cloud.governance_groups.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
SailPoint Identity Security Cloud at a glance
- Sign-in
- OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
- You provide
client_idclient_secret- Setup fields
host- Limits we pace to
- 100 calls per 10 seconds, per connection
- API covered
- SailPoint Identity Security Cloud V2025 API (identities, accounts, access requests, certifications, roles, sources, workflows) API Identity Security Cloud V2025 (OpenAPI 3.0.1), at your SailPoint Identity Security Cloud instance's API base URL, which you enter when connecting (path /v2025)
- Built from
- SailPoint Identity Security Cloud's documentation, read 22 October 2026OpenAPI spec (GitHub)developer.sailpoint.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 364 of 372 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 4, so ask can line SailPoint Identity Security Cloud up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in SailPoint Identity Security Cloud.
776 actions in 102 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 372readlook, never change
- 295writecreate and update
- 109destructivewait for a confirmation
Sources
4417 read · 21 write · 6 destructive
List sources · Create source · Get source by id · Delete source by id
Non employee lifecycle management
2913 read · 10 write · 6 destructive
Approve a non-employee request · Create non-employee record · Create non-employee request · Create non-employee source
Iai role mining
2316 read · 7 write · 0 destructive
Create request to provision a potential role into an actual role. · Create a role mining session · Asynchronously export details for a potential role in a role mining session and upload to S3 · Retrieves all potential role summaries
Certification campaigns
227 read · 12 write · 3 destructive
List campaigns · Create a campaign · Get campaign · Complete a campaign
Data access security
219 read · 8 write · 4 destructive
Assign owner to application resource. · Create application · Create a new schedule. · Search applications in DAS.
Configuration hub
198 read · 6 write · 5 destructive
Create a deploy · Creates an object mapping · Bulk creates object mappings · Create scheduled action
Workflows
1910 read · 4 write · 5 destructive
Create workflow · List workflows · List complete workflow library · Get workflow execution history
Custom forms
1710 read · 6 write · 1 destructive
Creates a form definition. · Generate json schema dynamically. · Creates a form instance. · List form definitions by tenant.
94 more areas · 582 actions
- Accounts 16
- Roles 16
- Notifications 15
- Sod policies 15
- Approvals 14
- Apps 14
- Multi host integration 14
- Access model metadata 13
- Work items 13
- Identities 12
- Access requests 11
- Certifications 11
- Entitlements 11
- Identity history 11
- Identity profiles 11
- Governance groups 10
- Iai access request recommendations 10
- Service desk integration 10
- Shared signals framework SSF 10
- Triggers 10
- Custom user levels 9
- Global tenant security settings 9
- Machine accounts 9
- Work reassignment 9
- Access profiles 8
- Data segmentation 8
- Dimensions 8
- Iai outliers 8
- Managed clusters 8
- Parameter storage 8
- Role insights 8
- Tagged objects 8
- Access request approvals 7
- Machine identities 7
- Managed clients 7
- Mfa configuration 7
- Sim integrations 7
- Suggested entitlement description 7
- Connector customizers 6
- Connector rule management 6
- Identity attributes 6
- Launchers 6
- Lifecycle states 6
- Role propagation 6
- Saved search 6
- Scheduled search 6
- SP config 6
- Certification campaign filters 5
- Connectors 5
- Managed cluster types 5
- O auth clients 5
- Password policies 5
- Password sync groups 5
- Privilege criteria 5
- Search attribute configuration 5
- Segments 5
- Transforms 5
- Certification summaries 4
- Machine account mappings 4
- Password management 4
- Personal access tokens 4
- Search 4
- Tags 4
- Task management 4
- Auth profile 3
- Branding 3
- Classify source 3
- Custom password instructions 3
- Iai common access 3
- Iai recommendations 3
- Machine classification config 3
- Org config 3
- Password configuration 3
- Privilege criteria configuration 3
- Reports data extraction 3
- Account activities 2
- API usage 2
- Application discovery 2
- Auth users 2
- Public identities config 2
- Sod violations 2
- Source usages 2
- Tenant context 2
- UI metadata 2
- Access request identity metrics 1
- Account aggregations 1
- Account usages 1
- Declassify source 1
- Iai peer group strategies 1
- Icons 1
- Machine account classify 1
- Public identities 1
- Requestable objects 1
- Tenant 1
Top actions
The SailPoint Identity Security Cloud API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 24 of SailPoint Identity Security Cloud's 24 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
sailpoint_identity_security_cloud.identities.listList identities | List identities. | read | identity.user.list474 connectors |
sailpoint_identity_security_cloud.governance_groups.listList governance groups | List governance groups. | read | identity.group.list262 connectors |
sailpoint_identity_security_cloud.roles.listList roles | List roles. | read | identity.role.list184 connectors |
sailpoint_identity_security_cloud.sources.listList sources | List sources. | read | identity.application.list37 connectors |
sailpoint_identity_security_cloud.governance_groups.createCreate a new governance group. | Create a new governance group. | write | identity.group.create205 connectors |
sailpoint_identity_security_cloud.identities.getIdentity details | Identity details. | read | identity.user.get399 connectors |
sailpoint_identity_security_cloud.roles.createCreate a role | Create a role. | write | identity.role.create105 connectors |
sailpoint_identity_security_cloud.identities.deleteDelete identity | Delete identity. | destructive | identity.user.delete253 connectors |
sailpoint_identity_security_cloud.sources.createCreate source | Create source. | write | identity.application.create27 connectors |
sailpoint_identity_security_cloud.access_requests.createSubmit access request | Submit access request. | write | identity.access_request.create12 connectors |
sailpoint_identity_security_cloud.access_requests.list_statusAccess request status | Access request status. | read | identity.access_request.list10 connectors |
sailpoint_identity_security_cloud.certification_campaigns.createCreate a campaign | Create a campaign. | write | identity.access_review.create4 connectors |
Try it
Prompts to paste into Claude.
Each one names the SailPoint Identity Security Cloud actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in SailPoint Identity Security Cloud? List every user and their role.
calls
sailpoint_identity_security_cloud.identities.list - Writewrite
Create a new governance group in SailPoint Identity Security Cloud. Show me exactly what you will send before you save it.
calls
sailpoint_identity_security_cloud.governance_groups.create
Governance for SailPoint Identity Security Cloud
Destructive actions wait for a yes.
109 SailPoint Identity Security Cloud actions are destructive. The first 10:
- Delete identity
sailpoint_identity_security_cloud.identities.delete - Delete a governance group
sailpoint_identity_security_cloud.governance_groups.delete - Delete a role
sailpoint_identity_security_cloud.roles.delete - Delete source by id
sailpoint_identity_security_cloud.sources.delete - Delete an icon
sailpoint_identity_security_cloud.icons.delete - Delete account
sailpoint_identity_security_cloud.accounts.delete - Unlock account
sailpoint_identity_security_cloud.accounts.unlock - Delete a branding item
sailpoint_identity_security_cloud.branding.delete - Delete segment by id
sailpoint_identity_security_cloud.segments.delete - Disable account
sailpoint_identity_security_cloud.accounts.disable
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete identity?
intent: the user asked me to delete identity
account { op: "keys.create", name: "sailpoint-identity-security-cloud-agent", allowed_actions: ["sailpoint_identity_security_cloud.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "sailpoint_identity_security_cloud.identities.delete", approver: "[email protected]" }, { match: "sailpoint_identity_security_cloud.governance_groups.delete", approver: "[email protected]" }, { match: "sailpoint_identity_security_cloud.roles.delete", approver: "[email protected]" } ]}Cost
What SailPoint Identity Security Cloud costs on actionlake.
Every SailPoint Identity Security Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call SailPoint Identity Security Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 776 SailPoint Identity Security Cloud actions
- 776actions pageeach page of a long list is one call
- 364reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every SailPoint Identity Security Cloud action.
776 actions by area: the id your agent calls, what it does, and its effect.
Sources44
sailpoint_identity_security_cloud.sources.createCreate sourcewritesailpoint_identity_security_cloud.sources.deleteDelete source by iddestructivesailpoint_identity_security_cloud.sources.getGet source by idreadsailpoint_identity_security_cloud.sources.listList sourcesreadsailpoint_identity_security_cloud.sources.create_provisioning_policyCreate provisioning policywritesailpoint_identity_security_cloud.sources.create_scheduleCreate schedule on sourcewrite- and 38 more in this area
Non employee lifecycle management29
sailpoint_identity_security_cloud.non_employee_lifecycle_management.approve_requestApprove a non-employee requestwritesailpoint_identity_security_cloud.non_employee_lifecycle_management.create_recordCreate non-employee recordwritesailpoint_identity_security_cloud.non_employee_lifecycle_management.create_requestCreate non-employee requestwritesailpoint_identity_security_cloud.non_employee_lifecycle_management.create_sourceCreate non-employee sourcewritesailpoint_identity_security_cloud.non_employee_lifecycle_management.create_source_schema_attributesCreate a new schema attribute for non-employee sourcewritesailpoint_identity_security_cloud.non_employee_lifecycle_management.delete_recordDelete non-employee recorddestructive- and 23 more in this area
Iai role mining23
sailpoint_identity_security_cloud.iai_role_mining.create_potential_provision_requestCreate request to provision a potential role into an actual role.writesailpoint_identity_security_cloud.iai_role_mining.create_sessionsCreate a role mining sessionwritesailpoint_identity_security_cloud.iai_role_mining.export_potential_asyncAsynchronously export details for a potential role in a role mining session and upload to S3writesailpoint_identity_security_cloud.iai_role_mining.list_all_potential_summariesRetrieves all potential role summariesreadsailpoint_identity_security_cloud.iai_role_mining.list_potential_summariesRetrieves all potential role summariesreadsailpoint_identity_security_cloud.iai_role_mining.export_potential_statusRetrieve status of a potential role export jobread- and 17 more in this area
Certification campaigns22
sailpoint_identity_security_cloud.certification_campaigns.completeComplete a campaignwritesailpoint_identity_security_cloud.certification_campaigns.createCreate a campaignwritesailpoint_identity_security_cloud.certification_campaigns.getGet campaignreadsailpoint_identity_security_cloud.certification_campaigns.list_activeList campaignsreadsailpoint_identity_security_cloud.certification_campaigns.create_templateCreate a campaign templatewritesailpoint_identity_security_cloud.certification_campaigns.deleteDelete campaignsdestructive- and 16 more in this area
Data access security21
sailpoint_identity_security_cloud.data_access_security.assign_das_ownersAssign owner to application resource.writesailpoint_identity_security_cloud.data_access_security.create_applicationCreate applicationwritesailpoint_identity_security_cloud.data_access_security.create_scheduleCreate a new schedule.writesailpoint_identity_security_cloud.data_access_security.list_applicationsSearch applications in DAS.readsailpoint_identity_security_cloud.data_access_security.cancel_taskCancel a DAS task.destructivesailpoint_identity_security_cloud.data_access_security.delete_applicationDelete an application by identifier.destructive- and 15 more in this area
Configuration hub19
sailpoint_identity_security_cloud.configuration_hub.create_deployCreate a deploywritesailpoint_identity_security_cloud.configuration_hub.create_object_mappingCreates an object mappingwritesailpoint_identity_security_cloud.configuration_hub.create_object_mappingsBulk creates object mappingswritesailpoint_identity_security_cloud.configuration_hub.create_scheduled_actionCreate scheduled actionwritesailpoint_identity_security_cloud.configuration_hub.delete_backupDelete a backupdestructivesailpoint_identity_security_cloud.configuration_hub.delete_draftDelete a draftdestructive- and 13 more in this area
Workflows19
sailpoint_identity_security_cloud.workflows.createCreate workflowwritesailpoint_identity_security_cloud.workflows.listList workflowsreadsailpoint_identity_security_cloud.workflows.list_complete_libraryList complete workflow libraryreadsailpoint_identity_security_cloud.workflows.list_execution_historyGet workflow execution historyreadsailpoint_identity_security_cloud.workflows.cancel_executionCancel workflow execution by iddestructivesailpoint_identity_security_cloud.workflows.create_external_executeExecute workflow via external triggerdestructive- and 13 more in this area
Custom forms17
sailpoint_identity_security_cloud.custom_forms.create_definitionCreates a form definition.writesailpoint_identity_security_cloud.custom_forms.create_definition_dynamic_schemaGenerate json schema dynamically.writesailpoint_identity_security_cloud.custom_forms.create_instanceCreates a form instance.writesailpoint_identity_security_cloud.custom_forms.export_definitions_by_tenantList form definitions by tenant.readsailpoint_identity_security_cloud.custom_forms.delete_definitionDeletes a form definition.destructivesailpoint_identity_security_cloud.custom_forms.get_definition_by_keyReturn a form definition.read- and 11 more in this area
Accounts16
sailpoint_identity_security_cloud.accounts.createCreate accountwritesailpoint_identity_security_cloud.accounts.enableEnable accountwritesailpoint_identity_security_cloud.accounts.enable_for_identitiesEnable idn accounts for identitieswritesailpoint_identity_security_cloud.accounts.enable_for_identityEnable idn account for identitywritesailpoint_identity_security_cloud.accounts.deleteDelete accountdestructivesailpoint_identity_security_cloud.accounts.delete_asyncRemove accountdestructive- and 10 more in this area
Roles16
sailpoint_identity_security_cloud.roles.createCreate a rolewritesailpoint_identity_security_cloud.roles.getGet a rolereadsailpoint_identity_security_cloud.roles.listList rolesreadsailpoint_identity_security_cloud.roles.updatePatch a specified rolewritesailpoint_identity_security_cloud.roles.deleteDelete a roledestructivesailpoint_identity_security_cloud.roles.delete_bulkDelete role(s)destructive- and 10 more in this area
Notifications15
sailpoint_identity_security_cloud.notifications.create_domain_dkimVerify domain address via dkimwritesailpoint_identity_security_cloud.notifications.create_templateCreate notification templatewritesailpoint_identity_security_cloud.notifications.create_verified_from_addressCreate verified from addresswritesailpoint_identity_security_cloud.notifications.list_dkim_attributesGet dkim attributesreadsailpoint_identity_security_cloud.notifications.delete_templates_in_bulkBulk delete notification templatesdestructivesailpoint_identity_security_cloud.notifications.delete_verified_from_addressDelete verified from addressdestructive- and 9 more in this area
Sod policies15
sailpoint_identity_security_cloud.sod_policies.createCreate sod policywritesailpoint_identity_security_cloud.sod_policies.listList sod policiesreadsailpoint_identity_security_cloud.sod_policies.startRuns sod policy violation reportwritesailpoint_identity_security_cloud.sod_policies.start_all_for_orgRuns all policies for orgwritesailpoint_identity_security_cloud.sod_policies.deleteDelete sod policy by iddestructivesailpoint_identity_security_cloud.sod_policies.delete_scheduleDelete sod policy scheduledestructive- and 9 more in this area
Approvals14
sailpoint_identity_security_cloud.approvals.approvePost Approvals Approvewritesailpoint_identity_security_cloud.approvals.approve_in_bulkPost Bulk Approve Approvalswritesailpoint_identity_security_cloud.approvals.listGet approvalsreadsailpoint_identity_security_cloud.approvals.movePost Bulk Reassign Approvalswritesailpoint_identity_security_cloud.approvals.cancelPost Bulk Cancel Approvalsdestructivesailpoint_identity_security_cloud.approvals.delete_config_requestDelete Approval Configurationdestructive- and 8 more in this area
Apps14
sailpoint_identity_security_cloud.apps.create_sourceCreate source appwritesailpoint_identity_security_cloud.apps.list_access_profiles_for_sourceList access profiles for the specified source appreadsailpoint_identity_security_cloud.apps.list_all_sourceList all source appsreadsailpoint_identity_security_cloud.apps.list_all_userList all user appsreadsailpoint_identity_security_cloud.apps.delete_access_profiles_from_source_by_bulkBulk remove access profiles from the specified source appdestructivesailpoint_identity_security_cloud.apps.delete_sourceDelete source app by iddestructive- and 8 more in this area
Multi host integration14
sailpoint_identity_security_cloud.multi_host_integration.createCreate multi-host integrationwritesailpoint_identity_security_cloud.multi_host_integration.create_sources_withinCreate sources within multi-host integrationwritesailpoint_identity_security_cloud.multi_host_integration.listList all existing multi-host integrationsreadsailpoint_identity_security_cloud.multi_host_integration.list_acct_aggregation_groupsList account-aggregation-groups by multi-host idreadsailpoint_identity_security_cloud.multi_host_integration.deleteDelete multi-host integrationdestructivesailpoint_identity_security_cloud.multi_host_integration.delete_sourcesDelete sources within multi-host integrationdestructive- and 8 more in this area
Access model metadata13
sailpoint_identity_security_cloud.access_model_metadata.create_attributeCreate access model metadata attributewritesailpoint_identity_security_cloud.access_model_metadata.create_attribute_valueCreate access model metadata valuewritesailpoint_identity_security_cloud.access_model_metadata.list_attributeList access model metadata attributesreadsailpoint_identity_security_cloud.access_model_metadata.list_attribute_valueList access model metadata valuesreadsailpoint_identity_security_cloud.access_model_metadata.delete_attributeDelete access model metadata attributedestructivesailpoint_identity_security_cloud.access_model_metadata.delete_attribute_valueDelete access model metadata valuedestructive- and 7 more in this area
Work items13
sailpoint_identity_security_cloud.work_items.approve_approvalApprove an approval itemwritesailpoint_identity_security_cloud.work_items.approve_approval_in_bulkBulk approve approval itemswritesailpoint_identity_security_cloud.work_items.forwardForward a work itemwritesailpoint_identity_security_cloud.work_items.listList work itemsreadsailpoint_identity_security_cloud.work_items.completeComplete a work itemwritesailpoint_identity_security_cloud.work_items.getGet a work itemread- and 7 more in this area
Identities12
sailpoint_identity_security_cloud.identities.deleteDelete identitydestructivesailpoint_identity_security_cloud.identities.getIdentity detailsreadsailpoint_identity_security_cloud.identities.listList identitiesreadsailpoint_identity_security_cloud.identities.list_entitlements_byList of entitlements by identity.readsailpoint_identity_security_cloud.identities.get_ownership_detailsGet ownership detailsreadsailpoint_identity_security_cloud.identities.get_role_assignmentRole assignment detailsread- and 6 more in this area
Access requests11
sailpoint_identity_security_cloud.access_requests.approve_bulkBulk approve access requestwritesailpoint_identity_security_cloud.access_requests.closeClose access requestwritesailpoint_identity_security_cloud.access_requests.createSubmit access requestwritesailpoint_identity_security_cloud.access_requests.list_statusAccess request statusreadsailpoint_identity_security_cloud.access_requests.cancelCancel access requestdestructivesailpoint_identity_security_cloud.access_requests.cancel_in_bulkBulk cancel access requestdestructive- and 5 more in this area
Certifications11
sailpoint_identity_security_cloud.certifications.list_identityList identity campaign certificationsreadsailpoint_identity_security_cloud.certifications.list_identity_access_review_itemsList of access review itemsreadsailpoint_identity_security_cloud.certifications.list_identity_item_permissionsPermissions for entitlement certification itemreadsailpoint_identity_security_cloud.certifications.list_pending_tasksList of pending certification tasksreadsailpoint_identity_security_cloud.certifications.get_identityIdentity certification by idreadsailpoint_identity_security_cloud.certifications.get_taskCertification task by idread- and 5 more in this area
Entitlements11
sailpoint_identity_security_cloud.entitlements.create_access_model_metadata_forAdd metadata to an entitlement.writesailpoint_identity_security_cloud.entitlements.listGets a list of entitlements.readsailpoint_identity_security_cloud.entitlements.list_childrenList of entitlements childrenreadsailpoint_identity_security_cloud.entitlements.list_parentsList of entitlements parentsreadsailpoint_identity_security_cloud.entitlements.delete_access_model_metadata_fromRemove metadata from an entitlement.destructivesailpoint_identity_security_cloud.entitlements.getGet an entitlementread- and 5 more in this area
Identity history11
sailpoint_identity_security_cloud.identity_history.compare_snapshotsGets a difference of count for each access item types for the given identity between 2 snapshotsreadsailpoint_identity_security_cloud.identity_history.compare_snapshots_access_typeGets a list of differences of specific accesstype for the given identity between 2 snapshotsreadsailpoint_identity_security_cloud.identity_history.list_access_itemsList access items by identityreadsailpoint_identity_security_cloud.identity_history.list_historicalLists all the identitiesreadsailpoint_identity_security_cloud.identity_history.get_historicalGet latest snapshot of identityreadsailpoint_identity_security_cloud.identity_history.get_snapshotGets an identity snapshot at a given dateread- and 5 more in this area
Identity profiles11
sailpoint_identity_security_cloud.identity_profiles.createCreate identity profilewritesailpoint_identity_security_cloud.identity_profiles.exportExport identity profilesreadsailpoint_identity_security_cloud.identity_profiles.generate_previewGenerate identity profile previewreadsailpoint_identity_security_cloud.identity_profiles.importImport identity profileswritesailpoint_identity_security_cloud.identity_profiles.delete_identity_profileDelete identity profiledestructivesailpoint_identity_security_cloud.identity_profiles.delete_identity_profilesDelete identity profilesdestructive- and 5 more in this area
Governance groups10
sailpoint_identity_security_cloud.governance_groups.createCreate a new governance group.writesailpoint_identity_security_cloud.governance_groups.getGet governance group by idreadsailpoint_identity_security_cloud.governance_groups.listList governance groupsreadsailpoint_identity_security_cloud.governance_groups.updatePatch a governance groupwritesailpoint_identity_security_cloud.governance_groups.deleteDelete a governance groupdestructivesailpoint_identity_security_cloud.governance_groups.delete_in_bulkDelete governance group(s)destructive- and 4 more in this area
Iai access request recommendations10
sailpoint_identity_security_cloud.iai_access_request_recommendations.add_ignored_itemIgnore access request recommendationwritesailpoint_identity_security_cloud.iai_access_request_recommendations.add_requested_itemAccept access request recommendationwritesailpoint_identity_security_cloud.iai_access_request_recommendations.add_viewed_itemMark viewed access request recommendationswritesailpoint_identity_security_cloud.iai_access_request_recommendations.add_viewed_itemsBulk mark viewed access request recommendationswritesailpoint_identity_security_cloud.iai_access_request_recommendations.get_configGet access request recommendations configreadsailpoint_identity_security_cloud.iai_access_request_recommendations.listIdentity access request recommendationsread- and 4 more in this area
Service desk integration10
sailpoint_identity_security_cloud.service_desk_integration.createCreate new service desk integrationwritesailpoint_identity_security_cloud.service_desk_integration.getGet a service desk integrationreadsailpoint_identity_security_cloud.service_desk_integration.listList existing service desk integrationsreadsailpoint_identity_security_cloud.service_desk_integration.list_typesList service desk integration typesreadsailpoint_identity_security_cloud.service_desk_integration.deleteDelete a service desk integrationdestructivesailpoint_identity_security_cloud.service_desk_integration.get_status_check_detailsGet the time check configurationread- and 4 more in this area
Shared signals framework SSF10
sailpoint_identity_security_cloud.shared_signals_framework_ssf.create_streamCreate streamwritesailpoint_identity_security_cloud.shared_signals_framework_ssf.get_configurationGet SSF configurationreadsailpoint_identity_security_cloud.shared_signals_framework_ssf.send_stream_verificationVerify streamwritesailpoint_identity_security_cloud.shared_signals_framework_ssf.update_stream_statusUpdate stream statuswritesailpoint_identity_security_cloud.shared_signals_framework_ssf.delete_streamDelete streamdestructivesailpoint_identity_security_cloud.shared_signals_framework_ssf.get_jwks_dataGet JWKSread- and 4 more in this area
Triggers10
sailpoint_identity_security_cloud.triggers.complete_invocationComplete trigger invocationwritesailpoint_identity_security_cloud.triggers.create_subscriptionCreate a subscriptionwritesailpoint_identity_security_cloud.triggers.listList triggersreadsailpoint_identity_security_cloud.triggers.list_invocation_statusList latest invocation statusesreadsailpoint_identity_security_cloud.triggers.delete_subscriptionDelete a subscriptiondestructivesailpoint_identity_security_cloud.triggers.list_subscriptionsList subscriptionsread- and 4 more in this area
Custom user levels9
sailpoint_identity_security_cloud.custom_user_levels.createCreate a custom user levelwritesailpoint_identity_security_cloud.custom_user_levels.listList user levelsreadsailpoint_identity_security_cloud.custom_user_levels.list_all_authorization_right_setsList all uiAssignable right setsreadsailpoint_identity_security_cloud.custom_user_levels.list_identitiesList user level identitiesreadsailpoint_identity_security_cloud.custom_user_levels.deleteDelete a user leveldestructivesailpoint_identity_security_cloud.custom_user_levels.getRetrieve a user levelread- and 3 more in this area
Global tenant security settings9
sailpoint_identity_security_cloud.global_tenant_security_settings.create_auth_org_network_configCreate security network configuration.writesailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_lockout_configGet auth org lockout configuration.readsailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_network_configGet security network configuration.readsailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_service_provider_configGet service provider configuration.readsailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_session_configGet auth org session configuration.readsailpoint_identity_security_cloud.global_tenant_security_settings.update_auth_org_lockout_configUpdate auth org lockout configurationwrite- and 3 more in this area
Machine accounts 9Work reassignment 9Access profiles 8Data segmentation 8Dimensions 8Iai outliers 8Managed clusters 8Parameter storage 8Role insights 8Tagged objects 8Access request approvals 7Machine identities 7Managed clients 7Mfa configuration 7Sim integrations 7Suggested entitlement description 7Connector customizers 6Connector rule management 6Identity attributes 6Launchers 6Lifecycle states 6Role propagation 6Saved search 6Scheduled search 6SP config 6Certification campaign filters 5Connectors 5Managed cluster types 5O auth clients 5Password policies 5Password sync groups 5Privilege criteria 5Search attribute configuration 5Segments 5Transforms 5Certification summaries 4Machine account mappings 4Password management 4Personal access tokens 4Search 4Tags 4Task management 4Auth profile 3Branding 3Classify source 3Custom password instructions 3Iai common access 3Iai recommendations 3Machine classification config 3Org config 3Password configuration 3Privilege criteria configuration 3Reports data extraction 3Account activities 2API usage 2Application discovery 2Auth users 2Public identities config 2Sod violations 2Source usages 2Tenant context 2UI metadata 2Access request identity metrics 1Account aggregations 1Account usages 1Declassify source 1Iai peer group strategies 1Icons 1Machine account classify 1Public identities 1Requestable objects 1Tenant 1
This index shows a sample of each area. All 776 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The SailPoint Identity Security Cloud MCP server, answered.
Is there a SailPoint Identity Security Cloud MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 776 SailPoint Identity Security Cloud actions across sources, non employee lifecycle management, iai role mining and certification campaigns, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SailPoint Identity Security Cloud.
What do I need to connect SailPoint Identity Security Cloud?
Client ID of a SailPoint personal access token (Preferences > Personal Access Tokens) or of an API management OAuth… and Secret of that personal access token or OAuth client (shown once, at creation). Plus your host. The free call account { op: "connections.requirements", service: "sailpoint_identity_security_cloud" } lists exactly what to paste.
Can an AI agent delete or change things in SailPoint Identity Security Cloud?
Only if its key allows it, and only with an explicit confirmation. 109 SailPoint Identity Security Cloud actions are destructive, including delete identity, delete a governance group and delete a role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my SailPoint Identity Security Cloud API limit?
actionlake paces every call to the limits in the SailPoint Identity Security Cloud service file: 100 calls per 10 seconds per connection. Repeated reads are answered from cache (364 SailPoint Identity Security Cloud actions can be), which never reaches SailPoint Identity Security Cloud.
What does a SailPoint Identity Security Cloud action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (776 SailPoint Identity Security Cloud actions page). Cache hits, searches, dry runs and calls SailPoint Identity Security Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which SailPoint Identity Security Cloud API does it cover?
The SailPoint Identity Security Cloud V2025 API (identities, accounts, access requests, certifications, roles, sources, workflows) API Identity Security Cloud V2025 (OpenAPI 3.0.1) at your SailPoint Identity Security Cloud instance's API base URL, which you enter when connecting (path /v2025). It is built from SailPoint Identity Security Cloud's documentation as read on 22 October 2026. 776 actions in 102 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my SailPoint Identity Security Cloud data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SailPoint Identity Security Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent SailPoint Identity Security Cloud today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
