---
title: "SailPoint Identity Security Cloud MCP server - actionlake"
description: "Give Claude 776 SailPoint Identity Security Cloud actions through one MCP server: sources. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/sailpoint-identity-security-cloud
updated: 2026-10-23
---

Connectors · Identity & security

# SailPoint Identity Security Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SailPoint Identity Security Cloud and the rest of your systems. It gives your agent 776 SailPoint Identity Security Cloud actions (372 reads, 295 writes and 109 that wait for a confirmation) and holds the SailPoint Identity Security Cloud credential itself, so the agent never does. It paces SailPoint Identity Security Cloud's limits and records every call.

[Connect SailPoint Identity Security Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "sailpoint_identity_security_cloud.identities.list",
  intent: "check which SailPoint Identity Security Cloud account is connected"
}
# List identities · read · 1 upstream call
```

- 776 actions in one signed file
- 372 read look, never change
- 295 write create and update
- 109 wait for a yes destructive, confirmed first

Set up

## Connect SailPoint Identity Security Cloud in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect SailPoint Identity Security Cloud.
   OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `client_id` Client ID of a SailPoint personal access token (Preferences > Personal Access Tokens) or of an API management OAuth…
   - `client_secret` Secret of that personal access token or OAuth client (shown once, at creation)
   - `host` Where your SailPoint Identity Security Cloud lives: your host
   ```
   account { op: "connections.requirements", service: "sailpoint_identity_security_cloud" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "sailpoint_identity_security_cloud.identities.list" }
   # list identities · read · 1 upstream call
   check { action: "sailpoint_identity_security_cloud.governance_groups.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

SailPoint Identity Security Cloud at a glance

**Sign-in**

OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.

**You provide**

`client_id` `client_secret`

**Setup fields**

`host`

**Limits we pace to**

100 calls per 10 seconds, per connection

**API covered**

SailPoint Identity Security Cloud V2025 API (identities, accounts, access requests, certifications, roles, sources, workflows) API Identity Security Cloud V2025 (OpenAPI 3.0.1), at your SailPoint Identity Security Cloud instance's API base URL, which you enter when connecting (path /v2025)

**Built from**

SailPoint Identity Security Cloud's documentation, read 22 October 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/sailpoint-oss/api-specs/main/dereferenced/deref-sailpoint-api.v2025.yaml) [developer.sailpoint.com](https://developer.sailpoint.com/docs/api/v2025/)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

364 of 372 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

4, so ask can line SailPoint Identity Security Cloud up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in SailPoint Identity Security Cloud.

776 actions in 102 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **372** read look, never change
- **295** write create and update
- **109** destructive wait for a confirmation

1. ### Sources
   44
   17 read · 21 write · 6 destructive
   List sources · Create source · Get source by id · Delete source by id
2. ### Non employee lifecycle management
   29
   13 read · 10 write · 6 destructive
   Approve a non-employee request · Create non-employee record · Create non-employee request · Create non-employee source
3. ### Iai role mining
   23
   16 read · 7 write · 0 destructive
   Create request to provision a potential role into an actual role. · Create a role mining session · Asynchronously export details for a potential role in a role mining session and upload to S3 · Retrieves all potential role summaries
4. ### Certification campaigns
   22
   7 read · 12 write · 3 destructive
   List campaigns · Create a campaign · Get campaign · Complete a campaign
5. ### Data access security
   21
   9 read · 8 write · 4 destructive
   Assign owner to application resource. · Create application · Create a new schedule. · Search applications in DAS.
6. ### Configuration hub
   19
   8 read · 6 write · 5 destructive
   Create a deploy · Creates an object mapping · Bulk creates object mappings · Create scheduled action
7. ### Workflows
   19
   10 read · 4 write · 5 destructive
   Create workflow · List workflows · List complete workflow library · Get workflow execution history
8. ### Custom forms
   17
   10 read · 6 write · 1 destructive
   Creates a form definition. · Generate json schema dynamically. · Creates a form instance. · List form definitions by tenant.

**94 more areas · 582 actions**

- Accounts **16**
- Roles **16**
- Notifications **15**
- Sod policies **15**
- Approvals **14**
- Apps **14**
- Multi host integration **14**
- Access model metadata **13**
- Work items **13**
- Identities **12**
- Access requests **11**
- Certifications **11**
- Entitlements **11**
- Identity history **11**
- Identity profiles **11**
- Governance groups **10**
- Iai access request recommendations **10**
- Service desk integration **10**
- Shared signals framework SSF **10**
- Triggers **10**
- Custom user levels **9**
- Global tenant security settings **9**
- Machine accounts **9**
- Work reassignment **9**
- Access profiles **8**
- Data segmentation **8**
- Dimensions **8**
- Iai outliers **8**
- Managed clusters **8**
- Parameter storage **8**
- Role insights **8**
- Tagged objects **8**
- Access request approvals **7**
- Machine identities **7**
- Managed clients **7**
- Mfa configuration **7**
- Sim integrations **7**
- Suggested entitlement description **7**
- Connector customizers **6**
- Connector rule management **6**
- Identity attributes **6**
- Launchers **6**
- Lifecycle states **6**
- Role propagation **6**
- Saved search **6**
- Scheduled search **6**
- SP config **6**
- Certification campaign filters **5**
- Connectors **5**
- Managed cluster types **5**
- O auth clients **5**
- Password policies **5**
- Password sync groups **5**
- Privilege criteria **5**
- Search attribute configuration **5**
- Segments **5**
- Transforms **5**
- Certification summaries **4**
- Machine account mappings **4**
- Password management **4**
- Personal access tokens **4**
- Search **4**
- Tags **4**
- Task management **4**
- Auth profile **3**
- Branding **3**
- Classify source **3**
- Custom password instructions **3**
- Iai common access **3**
- Iai recommendations **3**
- Machine classification config **3**
- Org config **3**
- Password configuration **3**
- Privilege criteria configuration **3**
- Reports data extraction **3**
- Account activities **2**
- API usage **2**
- Application discovery **2**
- Auth users **2**
- Public identities config **2**
- Sod violations **2**
- Source usages **2**
- Tenant context **2**
- UI metadata **2**
- Access request identity metrics **1**
- Account aggregations **1**
- Account usages **1**
- Declassify source **1**
- Iai peer group strategies **1**
- Icons **1**
- Machine account classify **1**
- Public identities **1**
- Requestable objects **1**
- Tenant **1**

Top actions

## The SailPoint Identity Security Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 24 of SailPoint Identity Security Cloud's 24 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `sailpoint_identity_security_cloud.identities.list` List identities | List identities. | read | `identity.user.list` 474 connectors |
| `sailpoint_identity_security_cloud.governance_groups.list` List governance groups | List governance groups. | read | `identity.group.list` 262 connectors |
| `sailpoint_identity_security_cloud.roles.list` List roles | List roles. | read | `identity.role.list` 184 connectors |
| `sailpoint_identity_security_cloud.sources.list` List sources | List sources. | read | `identity.application.list` 37 connectors |
| `sailpoint_identity_security_cloud.governance_groups.create` Create a new governance group. | Create a new governance group. | write | `identity.group.create` 205 connectors |
| `sailpoint_identity_security_cloud.identities.get` Identity details | Identity details. | read | `identity.user.get` 399 connectors |
| `sailpoint_identity_security_cloud.roles.create` Create a role | Create a role. | write | `identity.role.create` 105 connectors |
| `sailpoint_identity_security_cloud.identities.delete` Delete identity | Delete identity. | destructive | `identity.user.delete` 253 connectors |
| `sailpoint_identity_security_cloud.sources.create` Create source | Create source. | write | `identity.application.create` 27 connectors |
| `sailpoint_identity_security_cloud.access_requests.create` Submit access request | Submit access request. | write | `identity.access_request.create` 12 connectors |
| `sailpoint_identity_security_cloud.access_requests.list_status` Access request status | Access request status. | read | `identity.access_request.list` 10 connectors |
| `sailpoint_identity_security_cloud.certification_campaigns.create` Create a campaign | Create a campaign. | write | `identity.access_review.create` 4 connectors |

Try it

## Prompts to paste into Claude.

Each one names the SailPoint Identity Security Cloud actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in SailPoint Identity Security Cloud? List every user and their role.
   calls `sailpoint_identity_security_cloud.identities.list`
2. Write write
   Create a new governance group in SailPoint Identity Security Cloud. Show me exactly what you will send before you save it.
   calls `sailpoint_identity_security_cloud.governance_groups.create`

Governance for SailPoint Identity Security Cloud

## Destructive actions wait for a yes.

109 SailPoint Identity Security Cloud actions are destructive. The first 10:

- Delete identity `sailpoint_identity_security_cloud.identities.delete`
- Delete a governance group `sailpoint_identity_security_cloud.governance_groups.delete`
- Delete a role `sailpoint_identity_security_cloud.roles.delete`
- Delete source by id `sailpoint_identity_security_cloud.sources.delete`
- Delete an icon `sailpoint_identity_security_cloud.icons.delete`
- Delete account `sailpoint_identity_security_cloud.accounts.delete`
- Unlock account `sailpoint_identity_security_cloud.accounts.unlock`
- Delete a branding item `sailpoint_identity_security_cloud.branding.delete`
- Delete segment by id `sailpoint_identity_security_cloud.segments.delete`
- Disable account `sailpoint_identity_security_cloud.accounts.disable`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do sailpoint_identity_security_cloud.identities.delete confirm_policy: **human**

Delete identity?

**intent:** the user asked me to delete identity

run suspended · waiting for a named person · key _sailpoint-identity-security-cloud-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "sailpoint-identity-security-cloud-agent",
  allowed_actions: ["sailpoint_identity_security_cloud.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "sailpoint_identity_security_cloud.identities.delete", approver: "lead@example.com" },
    { match: "sailpoint_identity_security_cloud.governance_groups.delete", approver: "lead@example.com" },
    { match: "sailpoint_identity_security_cloud.roles.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to SailPoint Identity Security Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What SailPoint Identity Security Cloud costs on actionlake.

Every SailPoint Identity Security Cloud action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call SailPoint Identity Security Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 776 SailPoint Identity Security Cloud actions
- 776 actions page each page of a long list is one call
- 364 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every SailPoint Identity Security Cloud action.

776 actions by area: the id your agent calls, what it does, and its effect.

**Sources 44**

- `sailpoint_identity_security_cloud.sources.create` Create source write
- `sailpoint_identity_security_cloud.sources.delete` Delete source by id destructive
- `sailpoint_identity_security_cloud.sources.get` Get source by id read
- `sailpoint_identity_security_cloud.sources.list` List sources read
- `sailpoint_identity_security_cloud.sources.create_provisioning_policy` Create provisioning policy write
- `sailpoint_identity_security_cloud.sources.create_schedule` Create schedule on source write
- and 38 more in this area

**Non employee lifecycle management 29**

- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.approve_request` Approve a non-employee request write
- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.create_record` Create non-employee record write
- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.create_request` Create non-employee request write
- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.create_source` Create non-employee source write
- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.create_source_schema_attributes` Create a new schema attribute for non-employee source write
- `sailpoint_identity_security_cloud.non_employee_lifecycle_management.delete_record` Delete non-employee record destructive
- and 23 more in this area

**Iai role mining 23**

- `sailpoint_identity_security_cloud.iai_role_mining.create_potential_provision_request` Create request to provision a potential role into an actual role. write
- `sailpoint_identity_security_cloud.iai_role_mining.create_sessions` Create a role mining session write
- `sailpoint_identity_security_cloud.iai_role_mining.export_potential_async` Asynchronously export details for a potential role in a role mining session and upload to S3 write
- `sailpoint_identity_security_cloud.iai_role_mining.list_all_potential_summaries` Retrieves all potential role summaries read
- `sailpoint_identity_security_cloud.iai_role_mining.list_potential_summaries` Retrieves all potential role summaries read
- `sailpoint_identity_security_cloud.iai_role_mining.export_potential_status` Retrieve status of a potential role export job read
- and 17 more in this area

**Certification campaigns 22**

- `sailpoint_identity_security_cloud.certification_campaigns.complete` Complete a campaign write
- `sailpoint_identity_security_cloud.certification_campaigns.create` Create a campaign write
- `sailpoint_identity_security_cloud.certification_campaigns.get` Get campaign read
- `sailpoint_identity_security_cloud.certification_campaigns.list_active` List campaigns read
- `sailpoint_identity_security_cloud.certification_campaigns.create_template` Create a campaign template write
- `sailpoint_identity_security_cloud.certification_campaigns.delete` Delete campaigns destructive
- and 16 more in this area

**Data access security 21**

- `sailpoint_identity_security_cloud.data_access_security.assign_das_owners` Assign owner to application resource. write
- `sailpoint_identity_security_cloud.data_access_security.create_application` Create application write
- `sailpoint_identity_security_cloud.data_access_security.create_schedule` Create a new schedule. write
- `sailpoint_identity_security_cloud.data_access_security.list_applications` Search applications in DAS. read
- `sailpoint_identity_security_cloud.data_access_security.cancel_task` Cancel a DAS task. destructive
- `sailpoint_identity_security_cloud.data_access_security.delete_application` Delete an application by identifier. destructive
- and 15 more in this area

**Configuration hub 19**

- `sailpoint_identity_security_cloud.configuration_hub.create_deploy` Create a deploy write
- `sailpoint_identity_security_cloud.configuration_hub.create_object_mapping` Creates an object mapping write
- `sailpoint_identity_security_cloud.configuration_hub.create_object_mappings` Bulk creates object mappings write
- `sailpoint_identity_security_cloud.configuration_hub.create_scheduled_action` Create scheduled action write
- `sailpoint_identity_security_cloud.configuration_hub.delete_backup` Delete a backup destructive
- `sailpoint_identity_security_cloud.configuration_hub.delete_draft` Delete a draft destructive
- and 13 more in this area

**Workflows 19**

- `sailpoint_identity_security_cloud.workflows.create` Create workflow write
- `sailpoint_identity_security_cloud.workflows.list` List workflows read
- `sailpoint_identity_security_cloud.workflows.list_complete_library` List complete workflow library read
- `sailpoint_identity_security_cloud.workflows.list_execution_history` Get workflow execution history read
- `sailpoint_identity_security_cloud.workflows.cancel_execution` Cancel workflow execution by id destructive
- `sailpoint_identity_security_cloud.workflows.create_external_execute` Execute workflow via external trigger destructive
- and 13 more in this area

**Custom forms 17**

- `sailpoint_identity_security_cloud.custom_forms.create_definition` Creates a form definition. write
- `sailpoint_identity_security_cloud.custom_forms.create_definition_dynamic_schema` Generate json schema dynamically. write
- `sailpoint_identity_security_cloud.custom_forms.create_instance` Creates a form instance. write
- `sailpoint_identity_security_cloud.custom_forms.export_definitions_by_tenant` List form definitions by tenant. read
- `sailpoint_identity_security_cloud.custom_forms.delete_definition` Deletes a form definition. destructive
- `sailpoint_identity_security_cloud.custom_forms.get_definition_by_key` Return a form definition. read
- and 11 more in this area

**Accounts 16**

- `sailpoint_identity_security_cloud.accounts.create` Create account write
- `sailpoint_identity_security_cloud.accounts.enable` Enable account write
- `sailpoint_identity_security_cloud.accounts.enable_for_identities` Enable idn accounts for identities write
- `sailpoint_identity_security_cloud.accounts.enable_for_identity` Enable idn account for identity write
- `sailpoint_identity_security_cloud.accounts.delete` Delete account destructive
- `sailpoint_identity_security_cloud.accounts.delete_async` Remove account destructive
- and 10 more in this area

**Roles 16**

- `sailpoint_identity_security_cloud.roles.create` Create a role write
- `sailpoint_identity_security_cloud.roles.get` Get a role read
- `sailpoint_identity_security_cloud.roles.list` List roles read
- `sailpoint_identity_security_cloud.roles.update` Patch a specified role write
- `sailpoint_identity_security_cloud.roles.delete` Delete a role destructive
- `sailpoint_identity_security_cloud.roles.delete_bulk` Delete role(s) destructive
- and 10 more in this area

**Notifications 15**

- `sailpoint_identity_security_cloud.notifications.create_domain_dkim` Verify domain address via dkim write
- `sailpoint_identity_security_cloud.notifications.create_template` Create notification template write
- `sailpoint_identity_security_cloud.notifications.create_verified_from_address` Create verified from address write
- `sailpoint_identity_security_cloud.notifications.list_dkim_attributes` Get dkim attributes read
- `sailpoint_identity_security_cloud.notifications.delete_templates_in_bulk` Bulk delete notification templates destructive
- `sailpoint_identity_security_cloud.notifications.delete_verified_from_address` Delete verified from address destructive
- and 9 more in this area

**Sod policies 15**

- `sailpoint_identity_security_cloud.sod_policies.create` Create sod policy write
- `sailpoint_identity_security_cloud.sod_policies.list` List sod policies read
- `sailpoint_identity_security_cloud.sod_policies.start` Runs sod policy violation report write
- `sailpoint_identity_security_cloud.sod_policies.start_all_for_org` Runs all policies for org write
- `sailpoint_identity_security_cloud.sod_policies.delete` Delete sod policy by id destructive
- `sailpoint_identity_security_cloud.sod_policies.delete_schedule` Delete sod policy schedule destructive
- and 9 more in this area

**Approvals 14**

- `sailpoint_identity_security_cloud.approvals.approve` Post Approvals Approve write
- `sailpoint_identity_security_cloud.approvals.approve_in_bulk` Post Bulk Approve Approvals write
- `sailpoint_identity_security_cloud.approvals.list` Get approvals read
- `sailpoint_identity_security_cloud.approvals.move` Post Bulk Reassign Approvals write
- `sailpoint_identity_security_cloud.approvals.cancel` Post Bulk Cancel Approvals destructive
- `sailpoint_identity_security_cloud.approvals.delete_config_request` Delete Approval Configuration destructive
- and 8 more in this area

**Apps 14**

- `sailpoint_identity_security_cloud.apps.create_source` Create source app write
- `sailpoint_identity_security_cloud.apps.list_access_profiles_for_source` List access profiles for the specified source app read
- `sailpoint_identity_security_cloud.apps.list_all_source` List all source apps read
- `sailpoint_identity_security_cloud.apps.list_all_user` List all user apps read
- `sailpoint_identity_security_cloud.apps.delete_access_profiles_from_source_by_bulk` Bulk remove access profiles from the specified source app destructive
- `sailpoint_identity_security_cloud.apps.delete_source` Delete source app by id destructive
- and 8 more in this area

**Multi host integration 14**

- `sailpoint_identity_security_cloud.multi_host_integration.create` Create multi-host integration write
- `sailpoint_identity_security_cloud.multi_host_integration.create_sources_within` Create sources within multi-host integration write
- `sailpoint_identity_security_cloud.multi_host_integration.list` List all existing multi-host integrations read
- `sailpoint_identity_security_cloud.multi_host_integration.list_acct_aggregation_groups` List account-aggregation-groups by multi-host id read
- `sailpoint_identity_security_cloud.multi_host_integration.delete` Delete multi-host integration destructive
- `sailpoint_identity_security_cloud.multi_host_integration.delete_sources` Delete sources within multi-host integration destructive
- and 8 more in this area

**Access model metadata 13**

- `sailpoint_identity_security_cloud.access_model_metadata.create_attribute` Create access model metadata attribute write
- `sailpoint_identity_security_cloud.access_model_metadata.create_attribute_value` Create access model metadata value write
- `sailpoint_identity_security_cloud.access_model_metadata.list_attribute` List access model metadata attributes read
- `sailpoint_identity_security_cloud.access_model_metadata.list_attribute_value` List access model metadata values read
- `sailpoint_identity_security_cloud.access_model_metadata.delete_attribute` Delete access model metadata attribute destructive
- `sailpoint_identity_security_cloud.access_model_metadata.delete_attribute_value` Delete access model metadata value destructive
- and 7 more in this area

**Work items 13**

- `sailpoint_identity_security_cloud.work_items.approve_approval` Approve an approval item write
- `sailpoint_identity_security_cloud.work_items.approve_approval_in_bulk` Bulk approve approval items write
- `sailpoint_identity_security_cloud.work_items.forward` Forward a work item write
- `sailpoint_identity_security_cloud.work_items.list` List work items read
- `sailpoint_identity_security_cloud.work_items.complete` Complete a work item write
- `sailpoint_identity_security_cloud.work_items.get` Get a work item read
- and 7 more in this area

**Identities 12**

- `sailpoint_identity_security_cloud.identities.delete` Delete identity destructive
- `sailpoint_identity_security_cloud.identities.get` Identity details read
- `sailpoint_identity_security_cloud.identities.list` List identities read
- `sailpoint_identity_security_cloud.identities.list_entitlements_by` List of entitlements by identity. read
- `sailpoint_identity_security_cloud.identities.get_ownership_details` Get ownership details read
- `sailpoint_identity_security_cloud.identities.get_role_assignment` Role assignment details read
- and 6 more in this area

**Access requests 11**

- `sailpoint_identity_security_cloud.access_requests.approve_bulk` Bulk approve access request write
- `sailpoint_identity_security_cloud.access_requests.close` Close access request write
- `sailpoint_identity_security_cloud.access_requests.create` Submit access request write
- `sailpoint_identity_security_cloud.access_requests.list_status` Access request status read
- `sailpoint_identity_security_cloud.access_requests.cancel` Cancel access request destructive
- `sailpoint_identity_security_cloud.access_requests.cancel_in_bulk` Bulk cancel access request destructive
- and 5 more in this area

**Certifications 11**

- `sailpoint_identity_security_cloud.certifications.list_identity` List identity campaign certifications read
- `sailpoint_identity_security_cloud.certifications.list_identity_access_review_items` List of access review items read
- `sailpoint_identity_security_cloud.certifications.list_identity_item_permissions` Permissions for entitlement certification item read
- `sailpoint_identity_security_cloud.certifications.list_pending_tasks` List of pending certification tasks read
- `sailpoint_identity_security_cloud.certifications.get_identity` Identity certification by id read
- `sailpoint_identity_security_cloud.certifications.get_task` Certification task by id read
- and 5 more in this area

**Entitlements 11**

- `sailpoint_identity_security_cloud.entitlements.create_access_model_metadata_for` Add metadata to an entitlement. write
- `sailpoint_identity_security_cloud.entitlements.list` Gets a list of entitlements. read
- `sailpoint_identity_security_cloud.entitlements.list_children` List of entitlements children read
- `sailpoint_identity_security_cloud.entitlements.list_parents` List of entitlements parents read
- `sailpoint_identity_security_cloud.entitlements.delete_access_model_metadata_from` Remove metadata from an entitlement. destructive
- `sailpoint_identity_security_cloud.entitlements.get` Get an entitlement read
- and 5 more in this area

**Identity history 11**

- `sailpoint_identity_security_cloud.identity_history.compare_snapshots` Gets a difference of count for each access item types for the given identity between 2 snapshots read
- `sailpoint_identity_security_cloud.identity_history.compare_snapshots_access_type` Gets a list of differences of specific accesstype for the given identity between 2 snapshots read
- `sailpoint_identity_security_cloud.identity_history.list_access_items` List access items by identity read
- `sailpoint_identity_security_cloud.identity_history.list_historical` Lists all the identities read
- `sailpoint_identity_security_cloud.identity_history.get_historical` Get latest snapshot of identity read
- `sailpoint_identity_security_cloud.identity_history.get_snapshot` Gets an identity snapshot at a given date read
- and 5 more in this area

**Identity profiles 11**

- `sailpoint_identity_security_cloud.identity_profiles.create` Create identity profile write
- `sailpoint_identity_security_cloud.identity_profiles.export` Export identity profiles read
- `sailpoint_identity_security_cloud.identity_profiles.generate_preview` Generate identity profile preview read
- `sailpoint_identity_security_cloud.identity_profiles.import` Import identity profiles write
- `sailpoint_identity_security_cloud.identity_profiles.delete_identity_profile` Delete identity profile destructive
- `sailpoint_identity_security_cloud.identity_profiles.delete_identity_profiles` Delete identity profiles destructive
- and 5 more in this area

**Governance groups 10**

- `sailpoint_identity_security_cloud.governance_groups.create` Create a new governance group. write
- `sailpoint_identity_security_cloud.governance_groups.get` Get governance group by id read
- `sailpoint_identity_security_cloud.governance_groups.list` List governance groups read
- `sailpoint_identity_security_cloud.governance_groups.update` Patch a governance group write
- `sailpoint_identity_security_cloud.governance_groups.delete` Delete a governance group destructive
- `sailpoint_identity_security_cloud.governance_groups.delete_in_bulk` Delete governance group(s) destructive
- and 4 more in this area

**Iai access request recommendations 10**

- `sailpoint_identity_security_cloud.iai_access_request_recommendations.add_ignored_item` Ignore access request recommendation write
- `sailpoint_identity_security_cloud.iai_access_request_recommendations.add_requested_item` Accept access request recommendation write
- `sailpoint_identity_security_cloud.iai_access_request_recommendations.add_viewed_item` Mark viewed access request recommendations write
- `sailpoint_identity_security_cloud.iai_access_request_recommendations.add_viewed_items` Bulk mark viewed access request recommendations write
- `sailpoint_identity_security_cloud.iai_access_request_recommendations.get_config` Get access request recommendations config read
- `sailpoint_identity_security_cloud.iai_access_request_recommendations.list` Identity access request recommendations read
- and 4 more in this area

**Service desk integration 10**

- `sailpoint_identity_security_cloud.service_desk_integration.create` Create new service desk integration write
- `sailpoint_identity_security_cloud.service_desk_integration.get` Get a service desk integration read
- `sailpoint_identity_security_cloud.service_desk_integration.list` List existing service desk integrations read
- `sailpoint_identity_security_cloud.service_desk_integration.list_types` List service desk integration types read
- `sailpoint_identity_security_cloud.service_desk_integration.delete` Delete a service desk integration destructive
- `sailpoint_identity_security_cloud.service_desk_integration.get_status_check_details` Get the time check configuration read
- and 4 more in this area

**Shared signals framework SSF 10**

- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.create_stream` Create stream write
- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.get_configuration` Get SSF configuration read
- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.send_stream_verification` Verify stream write
- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.update_stream_status` Update stream status write
- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.delete_stream` Delete stream destructive
- `sailpoint_identity_security_cloud.shared_signals_framework_ssf.get_jwks_data` Get JWKS read
- and 4 more in this area

**Triggers 10**

- `sailpoint_identity_security_cloud.triggers.complete_invocation` Complete trigger invocation write
- `sailpoint_identity_security_cloud.triggers.create_subscription` Create a subscription write
- `sailpoint_identity_security_cloud.triggers.list` List triggers read
- `sailpoint_identity_security_cloud.triggers.list_invocation_status` List latest invocation statuses read
- `sailpoint_identity_security_cloud.triggers.delete_subscription` Delete a subscription destructive
- `sailpoint_identity_security_cloud.triggers.list_subscriptions` List subscriptions read
- and 4 more in this area

**Custom user levels 9**

- `sailpoint_identity_security_cloud.custom_user_levels.create` Create a custom user level write
- `sailpoint_identity_security_cloud.custom_user_levels.list` List user levels read
- `sailpoint_identity_security_cloud.custom_user_levels.list_all_authorization_right_sets` List all uiAssignable right sets read
- `sailpoint_identity_security_cloud.custom_user_levels.list_identities` List user level identities read
- `sailpoint_identity_security_cloud.custom_user_levels.delete` Delete a user level destructive
- `sailpoint_identity_security_cloud.custom_user_levels.get` Retrieve a user level read
- and 3 more in this area

**Global tenant security settings 9**

- `sailpoint_identity_security_cloud.global_tenant_security_settings.create_auth_org_network_config` Create security network configuration. write
- `sailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_lockout_config` Get auth org lockout configuration. read
- `sailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_network_config` Get security network configuration. read
- `sailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_service_provider_config` Get service provider configuration. read
- `sailpoint_identity_security_cloud.global_tenant_security_settings.get_auth_org_session_config` Get auth org session configuration. read
- `sailpoint_identity_security_cloud.global_tenant_security_settings.update_auth_org_lockout_config` Update auth org lockout configuration write
- and 3 more in this area

Machine accounts **9** Work reassignment **9** Access profiles **8** Data segmentation **8** Dimensions **8** Iai outliers **8** Managed clusters **8** Parameter storage **8** Role insights **8** Tagged objects **8** Access request approvals **7** Machine identities **7** Managed clients **7** Mfa configuration **7** Sim integrations **7** Suggested entitlement description **7** Connector customizers **6** Connector rule management **6** Identity attributes **6** Launchers **6** Lifecycle states **6** Role propagation **6** Saved search **6** Scheduled search **6** SP config **6** Certification campaign filters **5** Connectors **5** Managed cluster types **5** O auth clients **5** Password policies **5** Password sync groups **5** Privilege criteria **5** Search attribute configuration **5** Segments **5** Transforms **5** Certification summaries **4** Machine account mappings **4** Password management **4** Personal access tokens **4** Search **4** Tags **4** Task management **4** Auth profile **3** Branding **3** Classify source **3** Custom password instructions **3** Iai common access **3** Iai recommendations **3** Machine classification config **3** Org config **3** Password configuration **3** Privilege criteria configuration **3** Reports data extraction **3** Account activities **2** API usage **2** Application discovery **2** Auth users **2** Public identities config **2** Sod violations **2** Source usages **2** Tenant context **2** UI metadata **2** Access request identity metrics **1** Account aggregations **1** Account usages **1** Declassify source **1** Iai peer group strategies **1** Icons **1** Machine account classify **1** Public identities **1** Requestable objects **1** Tenant **1**

This index shows a sample of each area. All 776 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The SailPoint Identity Security Cloud MCP server, answered.

**Is there a SailPoint Identity Security Cloud MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 776 SailPoint Identity Security Cloud actions across sources, non employee lifecycle management, iai role mining and certification campaigns, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SailPoint Identity Security Cloud.

**What do I need to connect SailPoint Identity Security Cloud?**

Client ID of a SailPoint personal access token (Preferences > Personal Access Tokens) or of an API management OAuth… and Secret of that personal access token or OAuth client (shown once, at creation). Plus your host. The free call account { op: "connections.requirements", service: "sailpoint_identity_security_cloud" } lists exactly what to paste.

**Can an AI agent delete or change things in SailPoint Identity Security Cloud?**

Only if its key allows it, and only with an explicit confirmation. 109 SailPoint Identity Security Cloud actions are destructive, including delete identity, delete a governance group and delete a role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my SailPoint Identity Security Cloud API limit?**

actionlake paces every call to the limits in the SailPoint Identity Security Cloud service file: 100 calls per 10 seconds per connection. Repeated reads are answered from cache (364 SailPoint Identity Security Cloud actions can be), which never reaches SailPoint Identity Security Cloud.

**What does a SailPoint Identity Security Cloud action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (776 SailPoint Identity Security Cloud actions page). Cache hits, searches, dry runs and calls SailPoint Identity Security Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which SailPoint Identity Security Cloud API does it cover?**

The SailPoint Identity Security Cloud V2025 API (identities, accounts, access requests, certifications, roles, sources, workflows) API Identity Security Cloud V2025 (OpenAPI 3.0.1) at your SailPoint Identity Security Cloud instance's API base URL, which you enter when connecting (path /v2025). It is built from SailPoint Identity Security Cloud's documentation as read on 22 October 2026. 776 actions in 102 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my SailPoint Identity Security Cloud data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SailPoint Identity Security Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like SailPoint Identity Security Cloud

Shares the most action names with

- [Keycloak Admin REST API 17](https://actionlake.com/connectors/keycloak-admin-rest-api)
- [OneLogin 17](https://actionlake.com/connectors/onelogin)
- [Auth0 Management API 15](https://actionlake.com/connectors/auth0-management-api)
- [Opal Security 14](https://actionlake.com/connectors/opal-security)
- [Doppler 12](https://actionlake.com/connectors/doppler)
- [Cloudflare 11](https://actionlake.com/connectors/cloudflare)

Joins with, on shared entities

- [authentik 4](https://actionlake.com/connectors/authentik)
- [Material Security 4](https://actionlake.com/connectors/material-security)
- [HaloPSA 3](https://actionlake.com/connectors/halopsa)
- [Fortinet FortiGate 3](https://actionlake.com/connectors/fortinet-fortigate)
- [Genesys Cloud CX 3](https://actionlake.com/connectors/genesys-cloud-cx)
- [Commvault Cloud 3](https://actionlake.com/connectors/commvault-cloud)

Browse

- [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by SailPoint Identity Security Cloud; the name is the vendor's own. Counts are from the SailPoint Identity Security Cloud service file, version 1.0.0.

## Give your agent SailPoint Identity Security Cloud today.

[Connect SailPoint Identity Security Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/sailpoint-identity-security-cloud
More: https://actionlake.com/llms.txt