--- title: "SecurityScorecard MCP server for AI agents - actionlake" description: "Give Claude 597 SecurityScorecard actions through one MCP server: reports. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/securityscorecard updated: 2026-10-23 --- Connectors · Identity & security # SecurityScorecard MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SecurityScorecard and the rest of your systems. It gives your agent 597 SecurityScorecard actions (494 reads, 73 writes and 30 that wait for a confirmation) and holds the SecurityScorecard credential itself, so the agent never does. It paces SecurityScorecard's limits and records every call. [Connect SecurityScorecard free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "securityscorecard.scorecard_tags.list", intent: "check which SecurityScorecard account is connected" } # Get all scorecard tags · read · 1 upstream call ``` - 597 actions in one signed file - 494 read look, never change - 73 write create and update - 30 wait for a yes destructive, confirmed first Set up ## Connect SecurityScorecard in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect SecurityScorecard. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_token` SecurityScorecard API token: platform.securityscorecard.io > My Settings > API (or Settings > API for a bot user) >… ``` account { op: "connections.requirements", service: "securityscorecard" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "securityscorecard.scorecard_tags.list" } # get all scorecard tags · read · 1 upstream call check { action: "securityscorecard.all_companies.update", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` SecurityScorecard at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_token` **Limits we pace to** 300 calls a minute, per connection **API covered** SecurityScorecard API 1.9 (OpenAPI 3.0)`api.securityscorecard.io` **Built from** SecurityScorecard's documentation, read 23 October 2026[securityscorecard.readme.io](https://securityscorecard.readme.io/reference) [platform-api.securityscorecard.io](https://platform-api.securityscorecard.io/public/api-docs.json) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 479 of 494 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line SecurityScorecard up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in SecurityScorecard. 597 actions in 489 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **494** read look, never change - **73** write create and update - **30** destructive wait for a confirmation 1. ### Reports 12 1 read · 11 write · 0 destructive Get reports you have generated recently · Generate a Company Detailed report · Generate a Company Events report · Generate a CSV containing Scorecard Domains 2. ### Ip domain tags groups 7 2 read · 3 write · 2 destructive Get all ip domain tag groups · Get an ip domain tag group · Add ip domain tag to an ip domain tag group · Create a new ip domain tag group 3. ### All companies 6 2 read · 2 write · 2 destructive Find followed companies · Get followed company by domain · Update followed company by domain · Delete followed company by domain 4. ### Ip domain tags 6 3 read · 2 write · 1 destructive Get all ip domain tags · Get all the domain tags of the parent domain · Get all the ip tags of the parent domain · Create an ip domain tag 5. ### Portfolios companies 6 2 read · 2 write · 2 destructive Get all companies in a portfolio · portfolios_companies.list_v2 · Add company to portfolio · Add companies in bulk to a portfolios 6. ### All companies custom fields 5 1 read · 3 write · 1 destructive all_companies_custom_fields.list · all_companies_custom_fields.create · all_companies_custom_fields.bulk_edit · all_companies_custom_fields.update 7. ### Plans 5 2 read · 2 write · 1 destructive Get plans list · Get list of managed action plans for managed customers vendors · Archive list of plans by ID · Unarchive list of plans by ID 8. ### Scorecard tags 5 1 read · 2 write · 2 destructive Get all scorecard tags · Create a scorecard tag · Update a scorecard tag · Delete a scorecard tag **112 more areas · 545 actions** - Scorecard tags groups **5** - Vendor detection **5** - Company issues **4** - Custom scorecards **4** - Max partner managed customers updates **4** - Multiscores **4** - Portfolios **4** - All companies custom field values **3** - Companies **3** - Max customer documents **3** - Max partner documents **3** - Max partner findings **3** - Max partner likelihood assessments **3** - Max partner managed customers **3** - Max partner managed customers vendor updates **3** - Max partner vendors **3** - Scorecard tags companies **3** - All companies monitoring level **2** - App jobs **2** - Asi **2** - Company events **2** - Company issue feedback **2** - Compliance frameworks **2** - Custom scorecards filters **2** - Custom scorecards sources **2** - Ip domain tags domains **2** - Ip domain tags ips **2** - Issue types **2** - Max partner breaches **2** - Max partner managed customers access **2** - Max partner reports **2** - Max partner vendor onboarding **2** - Plans factor score improvement **2** - Plans guests **2** - Plans issue resolution **2** - Plans overall score improvement **2** - Scorecard tags all companies **2** - Scorecard tags groups members **2** - All companies monitoring status **1** - Asi asset ports **1** - Asi assets **1** - Asi cves **1** - Asi details active infections **1** - Asi details cve **1** - Asi details ransomware **1** - Asi details threat actor **1** - Audit API logs **1** - Companies active issues **1** - Companies expanded risk **1** - Companies factors **1** - Companies summary factors **1** - Company breach events **1** - Company factor score history **1** - Company issue context **1** - Company issue events **1** - Company profiles **1** - Company score history **1** - Company score plans **1** - Company scores **1** - Factors **1** - Footprint attribution log **1** - Industry factor history **1** - Industry factors **1** - Industry score history **1** - Industry scores **1** - Invitations **1** - Issue events active cve exploitation attempted **1** - Issue events adware installation **1** - Issue events adware installation trail **1** - Issue events alleged breach incident **1** - Issue events attack detected **1** - Issue events attempted information leak **1** - Issue events browser logs contain debug message **1** - Issue events CDN hosting **1** - Issue events cobalt strike C2 detected **1** - Issue events cobalt strike C2 service **1** - Issue events communication server with expired cert **1** - Issue events communication with server certificate issued by blacklisted country **1** - Issue events compromised by information stealer **1** - Issue events compromised credentials found **1** - Issue events contact information detected **1** - Issue events cookie missing HTTP only **1** - Issue events cookie missing secure attribute **1** - Issue events CSP no policy V2 **1** - Issue events CSP too broad V2 **1** - Issue events CSP unsafe policy V2 **1** - Issue events cve in use by threat actor **1** - Issue events data leak detected **1** - Issue events dmarc contains none **1** - Issue events dmarc record missing **1** - Issue events domain missing https V2 **1** - Issue events dos attack attempt detected **1** - Issue events exploit attempt detected **1** - Issue events exploited product **1** - Issue events exposed cisco web UI **1** - Issue events exposed embedded iot web server **1** - Issue events exposed mac airport device **1** - Issue events exposed network attached storage device **1** - Issue events exposed personal information info **1** - Issue events exposed printer **1** - Issue events fail to load page components **1** - Issue events general scan detected **1** - Issue events historical compromised credentials found **1** - Issue events hosted on object storage V2 **1** - Issue events HSTS incorrect V2 **1** - Issue events industrial control device **1** - Issue events infected by targeted attack **1** - Issue events insecure FTP **1** - Issue events insecure https redirect pattern V2 **1** - Issue events insecure server certificate key size **1** - Issue events insecure telnet **1** - 370 smaller areas **370** Top actions ## The SecurityScorecard API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 12 of SecurityScorecard's 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `securityscorecard.all_companies.list` Find followed companies | Searches followed companies by any of the allowed fields. | read | `crm.company.list` 162 connectors | | `securityscorecard.scorecard_tags.list` Get all scorecard tags | Get all scorecard tags. | read | `crm.tag.list` 65 connectors | | `securityscorecard.all_companies.get` Get followed company by domain | Fetch a company by its domain. | read | `crm.company.get` 162 connectors | | `securityscorecard.all_companies.update` Update followed company by domain | Updates any of the followed company allowed fields. | write | `crm.company.update` 137 connectors | | `securityscorecard.scorecard_tags.create` Create a scorecard tag | Create a scorecard tag. | write | `crm.tag.create` 49 connectors | | `securityscorecard.all_companies.delete` Delete followed company by domain | Removes the company from portfolios and watchlists and deletes the associated data. | destructive | `crm.company.delete` 119 connectors | | `securityscorecard.scorecard_tags.update` Update a scorecard tag | Update a scorecard tag. | write | `crm.tag.update` 40 connectors | | `securityscorecard.audit_api_logs.list` audit_api_logs.list | Get API Logs. | read | `security.audit_log.list` 69 connectors | | `securityscorecard.compliance_frameworks.list` Get all available compliance frameworks | Get all available compliance frameworks. | read | `security.framework.list` 5 connectors | | `securityscorecard.company_breach_events.list` Get a company's historical breaches events | Get a company's historical breaches events. | read | `security.breach_record.list` 3 connectors | | `securityscorecard.compliance_frameworks.get` Get a compliance framework details | Get a compliance framework details. | read | `security.framework.get` 4 connectors | | `securityscorecard.asi.facets` Attack Surface Intelligence API Facets | Attack Surface Intelligence API Facets. | read | this connector | Try it ## Prompts to paste into Claude. Each one names the SecurityScorecard actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List the companies in SecurityScorecard and flag likely duplicates by name or domain. calls `securityscorecard.all_companies.list` 2. Write write Update followed company by domain in SecurityScorecard. Show me exactly what you will send before you save it. calls `securityscorecard.all_companies.update` Governance for SecurityScorecard ## Destructive actions wait for a yes. 30 SecurityScorecard actions are destructive. These are all of them: - Delete followed company by domain `securityscorecard.all_companies.delete` - Delete a scorecard tag `securityscorecard.scorecard_tags.delete` - Delete plan by ID `securityscorecard.plans.delete` - Delete a portfolio `securityscorecard.portfolios.delete` - scim_users.delete `securityscorecard.scim_users.delete` - Remove item from plan `securityscorecard.plans_items.remove` - Remove guests from plan by ID `securityscorecard.plans_guests.remove` - Delete an ip domain tag `securityscorecard.ip_domain_tags.delete` - Delete a custom scorecard `securityscorecard.custom_scorecards.delete` - Execute bulk delete operation on followed companies `securityscorecard.all_companies.bulk_delete` - Remove a tag from an ip `securityscorecard.ip_domain_tags_ips.remove` - max_partner_vendors.delete `securityscorecard.max_partner_vendors.delete` - Deletes a list of tags by the given ids in a singl `securityscorecard.scorecard_tags.bulk_delete` - Remove company from portfolio `securityscorecard.portfolios_companies.remove` - Delete an ip domain tag group `securityscorecard.ip_domain_tags_groups.delete` - Remove ip domain tag to an ip domain tag group `securityscorecard.ip_domain_tags_groups.remove` - max_partner_documents.delete `securityscorecard.max_partner_documents.delete` - Delete a scorecard tag group `securityscorecard.scorecard_tags_groups.delete` - Remove a tag from a domain `securityscorecard.ip_domain_tags_domains.remove` - max_partner_reports.bulk_delete `securityscorecard.max_partner_reports.bulk_delete` - Remove all companies from a portfolio `securityscorecard.portfolios_companies.remove_all` - Remove a scorecard tag from a company `securityscorecard.scorecard_tags_companies.remove` - Delete custom scorecard filters `securityscorecard.custom_scorecards_filters.remove` - Delete custom scorecard sources `securityscorecard.custom_scorecards_sources.remove` - all_companies_custom_fields.delete `securityscorecard.all_companies_custom_fields.delete` - Remove a managed customer and delete its managed portfolio `securityscorecard.max_partner_managed_customers.delete` - Remove scorecard tag from a scorecard tag group `securityscorecard.scorecard_tags_groups_members.remove` - Removes the given tags from the given companies `securityscorecard.scorecard_tags_all_companies.bulk_remove` - Delete updates for a managed customer `securityscorecard.max_partner_managed_customers_updates.delete` - Delete vendor updates for a managed customer `securityscorecard.max_partner_managed_customers_vendor_updates.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do securityscorecard.all_companies.delete confirm_policy: **human** Delete followed company by domain? **intent:** the user asked me to delete followed company by domain run suspended · waiting for a named person · key _securityscorecard-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "securityscorecard-agent", allowed_actions: ["securityscorecard.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "securityscorecard.all_companies.delete", approver: "lead@example.com" }, { match: "securityscorecard.scorecard_tags.delete", approver: "lead@example.com" }, { match: "securityscorecard.plans.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to SecurityScorecard only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What SecurityScorecard costs on actionlake. Every SecurityScorecard action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call SecurityScorecard refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 597 SecurityScorecard actions - 597 actions page each page of a long list is one call - 479 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every SecurityScorecard action. 597 actions by area: the id your agent calls, what it does, and its effect. **Reports 12** - `securityscorecard.reports.generate_detailed` Generate a Company Detailed report write - `securityscorecard.reports.generate_events_json` Generate a Company Events report write - and 10 more in this area **Ip domain tags groups 7** - `securityscorecard.ip_domain_tags_groups.add` Add ip domain tag to an ip domain tag group write - `securityscorecard.ip_domain_tags_groups.create` Create a new ip domain tag group write - and 5 more in this area **All companies 6** - `securityscorecard.all_companies.delete` Delete followed company by domain destructive - `securityscorecard.all_companies.get` Get followed company by domain read - and 4 more in this area **Ip domain tags 6** - `securityscorecard.ip_domain_tags.create` Create an ip domain tag write - `securityscorecard.ip_domain_tags.list` Get all ip domain tags read - and 4 more in this area **Portfolios companies 6** - `securityscorecard.portfolios_companies.add` Add company to portfolio write - `securityscorecard.portfolios_companies.bulk_add` Add companies in bulk to a portfolios write - and 4 more in this area **All companies custom fields 5** - `securityscorecard.all_companies_custom_fields.bulk_edit` all_companies_custom_fields.bulk_edit write - `securityscorecard.all_companies_custom_fields.create` all_companies_custom_fields.create write - and 3 more in this area **Plans 5** - `securityscorecard.plans.archive` Archive list of plans by ID write - `securityscorecard.plans.get` Get list of managed action plans for managed customers vendors read - and 3 more in this area **Scorecard tags 5** - `securityscorecard.scorecard_tags.create` Create a scorecard tag write - `securityscorecard.scorecard_tags.delete` Delete a scorecard tag destructive - and 3 more in this area **Scorecard tags groups 5** - `securityscorecard.scorecard_tags_groups.create` Create a new scorecard tag group write - `securityscorecard.scorecard_tags_groups.get` Get a scorecard tag group read - and 3 more in this area **Vendor detection 5** - `securityscorecard.vendor_detection.list_fourth_parties` Get fourth party vendors by domain read - `securityscorecard.vendor_detection.list_portfolio` Get third party vendors by portfolio ID read - and 3 more in this area **Company issues 4** - `securityscorecard.company_issues.list` company_issues.list read - `securityscorecard.company_issues.list_paginated` company_issues.list_paginated read - and 2 more in this area **Custom scorecards 4** - `securityscorecard.custom_scorecards.create` Create a custom scorecard write - `securityscorecard.custom_scorecards.delete` Delete a custom scorecard destructive - and 2 more in this area **Max partner managed customers updates 4** - `securityscorecard.max_partner_managed_customers_updates.create` max_partner_managed_customers_updates.create write - `securityscorecard.max_partner_managed_customers_updates.delete` Delete updates for a managed customer destructive - and 2 more in this area **Multiscores 4** - `securityscorecard.multiscores.batch` multiscores.batch read - `securityscorecard.multiscores.get` multiscores.get read - and 2 more in this area **Portfolios 4** - `securityscorecard.portfolios.create` Create a new portfolio write - `securityscorecard.portfolios.delete` Delete a portfolio destructive - and 2 more in this area **All companies custom field values 3** - `securityscorecard.all_companies_custom_field_values.bulk_set` all_companies_custom_field_values.bulk_set write - `securityscorecard.all_companies_custom_field_values.list` all_companies_custom_field_values.list read - and 1 more in this area **Companies 3** - `securityscorecard.companies.bulk_search` Search companies in bulk read - `securityscorecard.companies.create` companies.create write - and 1 more in this area **Max customer documents 3** - `securityscorecard.max_customer_documents.get` max_customer_documents.get read - `securityscorecard.max_customer_documents.list` max_customer_documents.list read - and 1 more in this area **Max partner documents 3** - `securityscorecard.max_partner_documents.delete` max_partner_documents.delete destructive - `securityscorecard.max_partner_documents.get` max_partner_documents.get read - and 1 more in this area **Max partner findings 3** - `securityscorecard.max_partner_findings.get_report` max_partner_findings.get_report read - `securityscorecard.max_partner_findings.list` max_partner_findings.list read - and 1 more in this area **Max partner likelihood assessments 3** - `securityscorecard.max_partner_likelihood_assessments.create` max_partner_likelihood_assessments.create write - `securityscorecard.max_partner_likelihood_assessments.get` max_partner_likelihood_assessments.get read - and 1 more in this area **Max partner managed customers 3** - `securityscorecard.max_partner_managed_customers.delete` Remove a managed customer and delete its managed portfolio destructive - `securityscorecard.max_partner_managed_customers.get` max_partner_managed_customers.get read - and 1 more in this area **Max partner managed customers vendor updates 3** - `securityscorecard.max_partner_managed_customers_vendor_updates.create` max_partner_managed_customers_vendor_updates.create write - `securityscorecard.max_partner_managed_customers_vendor_updates.delete` Delete vendor updates for a managed customer destructive - and 1 more in this area **Max partner vendors 3** - `securityscorecard.max_partner_vendors.delete` max_partner_vendors.delete destructive - `securityscorecard.max_partner_vendors.list` max_partner_vendors.list read - and 1 more in this area **Scorecard tags companies 3** - `securityscorecard.scorecard_tags_companies.add` Add a scorecard tag to a company write - `securityscorecard.scorecard_tags_companies.list` Get all companies associated with a scorecard tag read - and 1 more in this area **All companies monitoring level 2** - `securityscorecard.all_companies_monitoring_level.bulk_set` all_companies_monitoring_level.bulk_set write - `securityscorecard.all_companies_monitoring_level.set` all_companies_monitoring_level.set write **App jobs 2** - `securityscorecard.app_jobs.create` Creates an app job write - `securityscorecard.app_jobs.update` Update a job write **Asi 2** - `securityscorecard.asi.facets` Attack Surface Intelligence API Facets read - `securityscorecard.asi.search` Attack Surface Intelligence API Search read **Company events 2** - `securityscorecard.company_events.list` company_events.list read - `securityscorecard.company_events.list_v2` company_events.list_v2 read **Company issue feedback 2** - `securityscorecard.company_issue_feedback.create` Send new feedback on findings from a specific issue write - `securityscorecard.company_issue_feedback.request_validation` Send a new feedback validation request on findings write Compliance frameworks **2** Custom scorecards filters **2** Custom scorecards sources **2** Ip domain tags domains **2** Ip domain tags ips **2** Issue types **2** Max partner breaches **2** Max partner managed customers access **2** Max partner reports **2** Max partner vendor onboarding **2** Plans factor score improvement **2** Plans guests **2** Plans issue resolution **2** Plans overall score improvement **2** Scorecard tags all companies **2** Scorecard tags groups members **2** All companies monitoring status **1** Asi asset ports **1** Asi assets **1** Asi cves **1** Asi details active infections **1** Asi details cve **1** Asi details ransomware **1** Asi details threat actor **1** Audit API logs **1** Companies active issues **1** Companies expanded risk **1** Companies factors **1** Companies summary factors **1** Company breach events **1** Company factor score history **1** Company issue context **1** Company issue events **1** Company profiles **1** Company score history **1** Company score plans **1** Company scores **1** Factors **1** Footprint attribution log **1** Industry factor history **1** Industry factors **1** Industry score history **1** Industry scores **1** Invitations **1** Issue events active cve exploitation attempted **1** Issue events adware installation **1** Issue events adware installation trail **1** Issue events alleged breach incident **1** Issue events attack detected **1** Issue events attempted information leak **1** Issue events browser logs contain debug message **1** Issue events CDN hosting **1** Issue events cobalt strike C2 detected **1** Issue events cobalt strike C2 service **1** Issue events communication server with expired cert **1** Issue events communication with server certificate issued by blacklisted country **1** Issue events compromised by information stealer **1** Issue events compromised credentials found **1** Issue events contact information detected **1** Issue events cookie missing HTTP only **1** Issue events cookie missing secure attribute **1** Issue events CSP no policy V2 **1** Issue events CSP too broad V2 **1** Issue events CSP unsafe policy V2 **1** Issue events cve in use by threat actor **1** Issue events data leak detected **1** Issue events dmarc contains none **1** Issue events dmarc record missing **1** Issue events domain missing https V2 **1** Issue events dos attack attempt detected **1** Issue events exploit attempt detected **1** Issue events exploited product **1** Issue events exposed cisco web UI **1** Issue events exposed embedded iot web server **1** Issue events exposed mac airport device **1** Issue events exposed network attached storage device **1** Issue events exposed personal information info **1** Issue events exposed printer **1** Issue events fail to load page components **1** Issue events general scan detected **1** Issue events historical compromised credentials found **1** Issue events hosted on object storage V2 **1** Issue events HSTS incorrect V2 **1** Issue events industrial control device **1** Issue events infected by targeted attack **1** Issue events insecure FTP **1** Issue events insecure https redirect pattern V2 **1** Issue events insecure server certificate key size **1** Issue events insecure telnet **1** 370 smaller areas **370** This index shows a sample of each area. All 597 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The SecurityScorecard MCP server, answered. **Is there a SecurityScorecard MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 597 SecurityScorecard actions across reports, ip domain tags groups, all companies and ip domain tags, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SecurityScorecard. **What do I need to connect SecurityScorecard?** SecurityScorecard API token: platform.securityscorecard.io > My Settings > API (or Settings > API for a bot user) >…. The free call account { op: "connections.requirements", service: "securityscorecard" } lists exactly what to paste. **Can an AI agent delete or change things in SecurityScorecard?** Only if its key allows it, and only with an explicit confirmation. 30 SecurityScorecard actions are destructive, including delete followed company by domain, delete a scorecard tag and delete plan by ID. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my SecurityScorecard API limit?** actionlake paces every call to the limits in the SecurityScorecard service file: 300 calls a minute per connection. Repeated reads are answered from cache (479 SecurityScorecard actions can be), which never reaches SecurityScorecard. **What does a SecurityScorecard action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (597 SecurityScorecard actions page). Cache hits, searches, dry runs and calls SecurityScorecard refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which SecurityScorecard API does it cover?** The SecurityScorecard API 1.9 (OpenAPI 3.0) at api.securityscorecard.io. It is built from SecurityScorecard's documentation as read on 23 October 2026. 597 actions in 489 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my SecurityScorecard data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SecurityScorecard credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like SecurityScorecard Shares the most action names with - [Censys Platform 4](https://actionlake.com/connectors/censys-platform) - [StrangeBee TheHive 4](https://actionlake.com/connectors/strangebee-thehive) - [Vanta 3](https://actionlake.com/connectors/vanta) - [Bitsight 2](https://actionlake.com/connectors/bitsight) - [UpGuard 2](https://actionlake.com/connectors/upguard) - [1Password Events API 1](https://actionlake.com/connectors/1password-events-api) Joins with, on shared entities - [Odoo 2](https://actionlake.com/connectors/odoo) - [Infobip 2](https://actionlake.com/connectors/infobip) - [HighLevel (LeadConnector) 2](https://actionlake.com/connectors/highlevel-leadconnector) - [ActiveCampaign 2](https://actionlake.com/connectors/activecampaign) - [Zoho SalesIQ 2](https://actionlake.com/connectors/zoho-salesiq) - [Accelo 2](https://actionlake.com/connectors/accelo) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by SecurityScorecard; the name is the vendor's own. Counts are from the SecurityScorecard service file, version 1.0.0. ## Give your agent SecurityScorecard today. [Connect SecurityScorecard free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/securityscorecard More: https://actionlake.com/llms.txt