Skip to content

Connectors · MSP & PSA

Tactical RMM MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Tactical RMM and the rest of your systems. It gives your agent 236 Tactical RMM actions (87 reads, 95 writes and 54 that wait for a confirmation) and holds the Tactical RMM credential itself, so the agent never does. It paces Tactical RMM's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "tactical_rmm.clients.list",  intent: "check which Tactical RMM account is connected"}# List clients · read · 1 upstream call
  • 236actionsin one signed file
  • 87readlook, never change
  • 95writecreate and update
  • 54wait for a yesdestructive, confirmed first

Set up

Connect Tactical RMM in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Tactical RMM.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyTactical RMM API key
    • hostWhere your Tactical RMM lives: your host
    account { op: "connections.requirements", service: "tactical_rmm" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "tactical_rmm.clients.list" }# list clients · read · 1 upstream callcheck { action: "tactical_rmm.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Tactical RMM at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Setup fields
host
Limits we pace to
600 calls a minute, per connection
API covered
Tactical RMM v1.5.2 REST API (Django REST Framework; derived from the tagged source's urls.py and views.py), at your Tactical RMM instance's API base URL, which you enter when connecting
Built from
Tactical RMM's documentation, read 23 October 2026codeload.github.comdocs.tacticalrmm.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
76 of 87 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line Tactical RMM up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Tactical RMM.

236 actions in 40 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 87readlook, never change
  • 95writecreate and update
  • 54destructivewait for a confirmation
  1. Agents

    26

    9 read · 9 write · 8 destructive

    List agents · Get an agent · Update an agent's settings · Uninstall and remove an agent

  2. Checks

    13

    5 read · 5 write · 3 destructive

    Create a check on an agent or policy · List checks · List an agent's checks (including policy checks) · List a policy's checks

  3. Report templates

    13

    6 read · 6 write · 1 destructive

    Evaluate a report template's variables and dependencies · Create a report template · Run a report and email a link to it · Import an exported report template

  4. Users

    11

    2 read · 4 write · 5 destructive

    List users · Create a user · Get a user · Update a user

  5. Tasks

    10

    5 read · 2 write · 3 destructive

    Create an automated task on an agent or policy · List automated tasks · List an agent's automated tasks (including policy tasks) · List a policy's automated tasks

  6. Core

    9

    3 read · 5 write · 1 destructive

    Generate script code from a prompt with the configured OpenAI model · Send a test alert email · Send a test alert SMS · Check whether the server web terminal is enabled for the user

  7. Agent registry

    8

    1 read · 5 write · 2 destructive

    Browse an agent's Windows registry · Create a registry key on an agent · Create a registry value on an agent · Change a registry value's data on an agent

  8. Policies

    7

    4 read · 2 write · 1 destructive

    Create (or copy) an automation policy · List automation policies · Get the policy overview tree (clients, sites, policies) · Get an automation policy

32 more areas · 139 actions
  • Scripts 7
  • SSO providers 7
  • Agent notes 6
  • Alert templates 6
  • Alerts 6
  • Custom fields 6
  • Report data queries 6
  • Report schedules 6
  • Software 6
  • URL actions 6
  • Clients 5
  • Report assets 5
  • Report HTML templates 5
  • Roles 5
  • Script snippets 5
  • Sites 5
  • API keys 4
  • Code signing 4
  • Keystore 4
  • Patch policies 4
  • Schedules 4
  • Services 4
  • Windows updates 4
  • Deployments 3
  • Pending actions 3
  • Report history 3
  • Sessions 3
  • Agent history 2
  • Core settings 2
  • Audit logs 1
  • Debug logs 1
  • Script history 1

Top actions

The Tactical RMM API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 32 of Tactical RMM's 32 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
tactical_rmm.users.listList usersList users.readidentity.user.list474 connectors
tactical_rmm.clients.listList clientsList clients.readcrm.company.list162 connectors
tactical_rmm.users.createCreate a userCreate a user.writeidentity.user.create262 connectors
tactical_rmm.agents.listList agentsList agents.readdevice.endpoint.list65 connectors
tactical_rmm.users.deleteDelete a userDelete a user.destructiveidentity.user.delete253 connectors
tactical_rmm.clients.createCreate a client (with its first site)Create a client (with its first site).writecrm.company.create142 connectors
tactical_rmm.roles.listList rolesList roles.readidentity.role.list184 connectors
tactical_rmm.roles.createCreate a roleCreate a role.writeidentity.role.create105 connectors
tactical_rmm.api_keys.createCreate an API keyCreate an API key.writeidentity.api_key.create100 connectors
tactical_rmm.api_keys.listList API keysList API keys.readidentity.api_key.list96 connectors
tactical_rmm.agents.getGet an agentGet an agent.readdevice.endpoint.get57 connectors
tactical_rmm.scripts.createCreate a scriptCreate a script.writeautomation.script.create8 connectors

Try it

Prompts to paste into Claude.

Each one names the Tactical RMM actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which Tactical RMM devices have not checked in for a week?

    callstactical_rmm.agents.list

  2. Writewrite

    Create a user in Tactical RMM. Show me exactly what you will send before you save it.

    callstactical_rmm.users.create

  3. Across systemsread

    Which Tactical RMM companies have invoices in NetSuite, and how many each?

    callstactical_rmm.clients.listnetsuite.views.invoices

Across your systems

Tactical RMM, joined to the rest of your business.

One ask fetches from Tactical RMM and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which Tactical RMM companies have invoices in NetSuite, and how many each?

    tactical_rmm.clients.list + netsuite.views.invoices, on crm.company · NetSuite

  • Which Tactical RMM companies have tickets in HubSpot CRM, and how many each?

    tactical_rmm.clients.list + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorsidentity.user 517crm.company 227device.endpoint 69
ask
ask {  intent: "which Tactical RMM companies have invoices in NetSuite, and how many each",  steps: [    { action: "tactical_rmm.clients.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Tactical RMM

Destructive actions wait for a yes.

54 Tactical RMM actions are destructive. The first 10:

  • Delete a usertactical_rmm.users.delete
  • Delete a clienttactical_rmm.clients.delete
  • Uninstall and remove an agenttactical_rmm.agents.uninstall
  • Delete a roletactical_rmm.roles.delete
  • Delete an API keytactical_rmm.api_keys.delete
  • Delete a scripttactical_rmm.scripts.delete
  • Delete an alerttactical_rmm.alerts.delete
  • Run an automated task nowtactical_rmm.tasks.run
  • Test-run unsaved script code on an agenttactical_rmm.scripts.test
  • Delete a sitetactical_rmm.sites.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dotactical_rmm.users.deleteconfirm_policy: human

Delete a user?

intent: the user asked me to delete a user

run suspended · waiting for a named person · key tactical-rmm-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "tactical-rmm-agent",  allowed_actions: ["tactical_rmm.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "tactical_rmm.users.delete", approver: "[email protected]" },    { match: "tactical_rmm.clients.delete", approver: "[email protected]" },    { match: "tactical_rmm.agents.uninstall", approver: "[email protected]" }  ]}
Illustrative. Scoped to Tactical RMM only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Tactical RMM costs on actionlake.

Every Tactical RMM action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Tactical RMM refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 236 Tactical RMM actions
  • 236actions pageeach page of a long list is one call
  • 76reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Tactical RMM action.

236 actions by area: the id your agent calls, what it does, and its effect.

Agents26
  • tactical_rmm.agents.bulk_actionRun a command, script or patch action on many agentsdestructive
  • tactical_rmm.agents.generate_installerGenerate a manual or macOS agent install commandwrite
  • tactical_rmm.agents.getGet an agentread
  • tactical_rmm.agents.get_event_logRead an agent's Windows event logread
  • tactical_rmm.agents.get_meshcentral_urlsGet MeshCentral take-control, terminal and file URLs for an agentread
  • tactical_rmm.agents.get_terminal_defaultsGet an agent's web terminal defaultsread
  • tactical_rmm.agents.get_vnc_urlGet a MeshCentral web VNC URL for an agentread
  • tactical_rmm.agents.kill_processEnd a process on an agentdestructive
  • tactical_rmm.agents.listList agentsread
  • tactical_rmm.agents.list_processesList running processes on an agentread
  • tactical_rmm.agents.list_versionsList agent versions and the latest available versionread
  • tactical_rmm.agents.pingCheck whether an agent is onlineread
  • tactical_rmm.agents.rebootReboot an agent's machine nowdestructive
  • tactical_rmm.agents.recoverRecover (restart) the Tactical or Mesh agent servicewrite
  • tactical_rmm.agents.recover_allQueue recovery of every agent that needs itwrite
  • tactical_rmm.agents.recover_meshRepair the MeshCentral agent on a machinewrite
  • tactical_rmm.agents.refresh_inventoryRefresh an agent's system information (WMI)write
  • tactical_rmm.agents.run_commandRun a shell command on an agentdestructive
  • tactical_rmm.agents.run_scriptRun a saved script on an agentdestructive
  • tactical_rmm.agents.schedule_rebootSchedule a reboot of an agent's machinedestructive
  • tactical_rmm.agents.set_maintenance_mode_bulkTurn maintenance mode on or off for every agent in a client or sitewrite
  • tactical_rmm.agents.shutdownShut down an agent's machinedestructive
  • tactical_rmm.agents.uninstallUninstall and remove an agentdestructive
  • tactical_rmm.agents.updateUpdate an agent's settingswrite
  • tactical_rmm.agents.update_agent_softwareUpdate agents to the latest Tactical agent versionwrite
  • tactical_rmm.agents.wake_on_lanSend a Wake-on-LAN packet to an agent's machinewrite
Checks13
  • tactical_rmm.checks.createCreate a check on an agent or policywrite
  • tactical_rmm.checks.deleteDelete a checkdestructive
  • tactical_rmm.checks.getGet a checkread
  • tactical_rmm.checks.historyGet a check's result historywrite
  • tactical_rmm.checks.listList checksread
  • tactical_rmm.checks.list_for_agentList an agent's checks (including policy checks)read
  • tactical_rmm.checks.list_for_policyList a policy's checksread
  • tactical_rmm.checks.policy_statusGet a policy check's result on every agentread
  • tactical_rmm.checks.resetReset a failing check to passingwrite
  • tactical_rmm.checks.reset_all_for_agentReset every check on an agent to passingwrite
  • tactical_rmm.checks.run_bulkRun checks on every agent in a client or sitedestructive
  • tactical_rmm.checks.run_for_agentRun every check on an agent nowdestructive
  • tactical_rmm.checks.updateUpdate a checkwrite
Report templates13
  • tactical_rmm.report_templates.analyze_variablesEvaluate a report template's variables and dependenciesread
  • tactical_rmm.report_templates.createCreate a report templatewrite
  • tactical_rmm.report_templates.deleteDelete a report templatedestructive
  • tactical_rmm.report_templates.emailRun a report and email a link to itwrite
  • tactical_rmm.report_templates.exportExport a report template with its base template and assetsread
  • tactical_rmm.report_templates.getGet a report templateread
  • tactical_rmm.report_templates.importImport an exported report templatewrite
  • tactical_rmm.report_templates.import_sharedImport shared report templates from the community repositorywrite
  • tactical_rmm.report_templates.listList report templatesread
  • tactical_rmm.report_templates.list_sharedList shared report templates from the community repositoryread
  • tactical_rmm.report_templates.previewRender an unsaved report template (HTML or plain text)read
  • tactical_rmm.report_templates.runRun a report (HTML or plain text)write
  • tactical_rmm.report_templates.updateUpdate a report templatewrite
Users11
  • tactical_rmm.users.createCreate a userwrite
  • tactical_rmm.users.deleteDelete a userdestructive
  • tactical_rmm.users.getGet a userread
  • tactical_rmm.users.listList usersread
  • tactical_rmm.users.reset_2faReset a user's two-factor keydestructive
  • tactical_rmm.users.reset_own_2faReset the API key user's own two-factor keydestructive
  • tactical_rmm.users.reset_own_passwordSet the API key user's own passworddestructive
  • tactical_rmm.users.reset_passwordSet a user's passworddestructive
  • tactical_rmm.users.setup_own_totpGenerate a TOTP key for the API key's user if it has nonewrite
  • tactical_rmm.users.updateUpdate a userwrite
  • tactical_rmm.users.update_own_ui_preferencesUpdate the API key user's dashboard preferenceswrite
Tasks10
  • tactical_rmm.tasks.createCreate an automated task on an agent or policywrite
  • tactical_rmm.tasks.deleteDelete an automated taskdestructive
  • tactical_rmm.tasks.getGet an automated taskread
  • tactical_rmm.tasks.listList automated tasksread
  • tactical_rmm.tasks.list_for_agentList an agent's automated tasks (including policy tasks)read
  • tactical_rmm.tasks.list_for_policyList a policy's automated tasksread
  • tactical_rmm.tasks.policy_statusGet a policy task's result on every agentread
  • tactical_rmm.tasks.runRun an automated task nowdestructive
  • tactical_rmm.tasks.run_policy_taskRun a policy task on every agent it applies todestructive
  • tactical_rmm.tasks.updateUpdate an automated taskwrite
Core9
  • tactical_rmm.core.check_web_terminal_accessCheck whether the server web terminal is enabled for the userread
  • tactical_rmm.core.clear_cacheClear the server's cachewrite
  • tactical_rmm.core.dashboard_infoGet dashboard information for the API key's userread
  • tactical_rmm.core.generate_script_with_aiGenerate script code from a prompt with the configured OpenAI modelwrite
  • tactical_rmm.core.run_server_scriptRun a script on the Tactical RMM serverdestructive
  • tactical_rmm.core.send_test_emailSend a test alert emailwrite
  • tactical_rmm.core.send_test_smsSend a test alert SMSwrite
  • tactical_rmm.core.server_maintenanceRun a server maintenance actionwrite
  • tactical_rmm.core.versionGet the Tactical RMM server versionread
Agent registry8
  • tactical_rmm.agent_registry.browseBrowse an agent's Windows registryread
  • tactical_rmm.agent_registry.create_keyCreate a registry key on an agentwrite
  • tactical_rmm.agent_registry.create_valueCreate a registry value on an agentwrite
  • tactical_rmm.agent_registry.delete_keyDelete a registry key on an agentdestructive
  • tactical_rmm.agent_registry.delete_valueDelete a registry value on an agentdestructive
  • tactical_rmm.agent_registry.modify_valueChange a registry value's data on an agentwrite
  • tactical_rmm.agent_registry.rename_keyRename a registry key on an agentwrite
  • tactical_rmm.agent_registry.rename_valueRename a registry value on an agentwrite
Policies7
  • tactical_rmm.policies.createCreate (or copy) an automation policywrite
  • tactical_rmm.policies.deleteDelete an automation policydestructive
  • tactical_rmm.policies.getGet an automation policyread
  • tactical_rmm.policies.listList automation policiesread
  • tactical_rmm.policies.overviewGet the policy overview tree (clients, sites, policies)read
  • tactical_rmm.policies.relatedList the clients, sites and agents a policy applies toread
  • tactical_rmm.policies.updateUpdate an automation policywrite
Scripts7
  • tactical_rmm.scripts.createCreate a scriptwrite
  • tactical_rmm.scripts.deleteDelete a scriptdestructive
  • tactical_rmm.scripts.downloadGet a script's code and file nameread
  • tactical_rmm.scripts.getGet a scriptread
  • tactical_rmm.scripts.listList scriptsread
  • tactical_rmm.scripts.testTest-run unsaved script code on an agentdestructive
  • tactical_rmm.scripts.updateUpdate a scriptwrite
SSO providers7
  • tactical_rmm.sso_providers.createAdd an SSO (OpenID Connect) providerwrite
  • tactical_rmm.sso_providers.deleteDelete an SSO providerdestructive
  • tactical_rmm.sso_providers.disconnect_accountDisconnect a user's linked SSO accountdestructive
  • tactical_rmm.sso_providers.get_settingsGet SSO settingsread
  • tactical_rmm.sso_providers.listList SSO (OpenID Connect) providersread
  • tactical_rmm.sso_providers.updateUpdate an SSO providerwrite
  • tactical_rmm.sso_providers.update_settingsUpdate SSO settingswrite
Agent notes6
  • tactical_rmm.agent_notes.createAdd a note to an agentwrite
  • tactical_rmm.agent_notes.deleteDelete an agent notedestructive
  • tactical_rmm.agent_notes.getGet an agent noteread
  • tactical_rmm.agent_notes.listList agent notes (all agents)read
  • tactical_rmm.agent_notes.list_for_agentList an agent's notesread
  • tactical_rmm.agent_notes.updateUpdate an agent notewrite
Alert templates6
  • tactical_rmm.alert_templates.createCreate an alert templatewrite
  • tactical_rmm.alert_templates.deleteDelete an alert templatedestructive
  • tactical_rmm.alert_templates.getGet an alert templateread
  • tactical_rmm.alert_templates.listList alert templatesread
  • tactical_rmm.alert_templates.relatedList the policies, clients, sites and agents using an alert templateread
  • tactical_rmm.alert_templates.updateUpdate an alert templatewrite
Alerts6
  • tactical_rmm.alerts.bulk_updateResolve or snooze many alertswrite
  • tactical_rmm.alerts.createCreate an alertwrite
  • tactical_rmm.alerts.deleteDelete an alertdestructive
  • tactical_rmm.alerts.getGet an alertread
  • tactical_rmm.alerts.searchSearch alertswrite
  • tactical_rmm.alerts.updateResolve, snooze, unsnooze or edit an alertwrite
Custom fields6
  • tactical_rmm.custom_fields.createCreate a custom field definitionwrite
  • tactical_rmm.custom_fields.deleteDelete a custom field definitiondestructive
  • tactical_rmm.custom_fields.getGet a custom field definitionread
  • tactical_rmm.custom_fields.listList custom field definitionsread
  • tactical_rmm.custom_fields.list_by_modelList custom field definitions for one modelwrite
  • tactical_rmm.custom_fields.updateUpdate a custom field definitionwrite
Report data queries6
  • tactical_rmm.report_data_queries.createCreate a report data querywrite
  • tactical_rmm.report_data_queries.deleteDelete a report data querydestructive
  • tactical_rmm.report_data_queries.getGet a report data queryread
  • tactical_rmm.report_data_queries.listList report data queriesread
  • tactical_rmm.report_data_queries.schemaGet the JSON schema for report data queriesread
  • tactical_rmm.report_data_queries.updateUpdate a report data querywrite
Report schedules6
  • tactical_rmm.report_schedules.createCreate a report schedulewrite
  • tactical_rmm.report_schedules.deleteDelete a report scheduledestructive
  • tactical_rmm.report_schedules.getGet a report scheduleread
  • tactical_rmm.report_schedules.listList report schedulesread
  • tactical_rmm.report_schedules.runRun a scheduled report nowwrite
  • tactical_rmm.report_schedules.updateUpdate a report schedulewrite
Software6
  • tactical_rmm.software.installInstall a Chocolatey package on an agentdestructive
  • tactical_rmm.software.listList installed software (all agents)read
  • tactical_rmm.software.list_chocolatey_packagesList Chocolatey packages available to installread
  • tactical_rmm.software.list_for_agentList installed software on an agentread
  • tactical_rmm.software.refreshRefresh an agent's installed software listwrite
  • tactical_rmm.software.uninstallUninstall software from an agentdestructive
URL actions6
  • tactical_rmm.url_actions.createCreate a URL actionwrite
  • tactical_rmm.url_actions.deleteDelete a URL actiondestructive
  • tactical_rmm.url_actions.listList URL actionsread
  • tactical_rmm.url_actions.runRun a URL action against an agent, site or clientwrite
  • tactical_rmm.url_actions.testTest an REST URL action definitionwrite
  • tactical_rmm.url_actions.updateUpdate a URL actionwrite
Clients5
  • tactical_rmm.clients.createCreate a client (with its first site)write
  • tactical_rmm.clients.deleteDelete a clientdestructive
  • tactical_rmm.clients.getGet a clientread
  • tactical_rmm.clients.listList clientsread
  • tactical_rmm.clients.updateUpdate a clientwrite
Report assets5
  • tactical_rmm.report_assets.create_folderCreate a report asset folderwrite
  • tactical_rmm.report_assets.deleteDelete report assets or foldersdestructive
  • tactical_rmm.report_assets.listList report assets in a folderread
  • tactical_rmm.report_assets.list_allList every report asset (or folder) as a treeread
  • tactical_rmm.report_assets.renameRename a report asset or folderwrite
Report HTML templates5
  • tactical_rmm.report_html_templates.createCreate a report base HTML templatewrite
  • tactical_rmm.report_html_templates.deleteDelete a report base HTML templatedestructive
  • tactical_rmm.report_html_templates.getGet a report base HTML templateread
  • tactical_rmm.report_html_templates.listList report base HTML templatesread
  • tactical_rmm.report_html_templates.updateUpdate a report base HTML templatewrite
Roles5
  • tactical_rmm.roles.createCreate a rolewrite
  • tactical_rmm.roles.deleteDelete a roledestructive
  • tactical_rmm.roles.getGet a roleread
  • tactical_rmm.roles.listList rolesread
  • tactical_rmm.roles.updateUpdate a rolewrite
Script snippets5
  • tactical_rmm.script_snippets.createCreate a script snippetwrite
  • tactical_rmm.script_snippets.deleteDelete a script snippetdestructive
  • tactical_rmm.script_snippets.getGet a script snippetread
  • tactical_rmm.script_snippets.listList script snippetsread
  • tactical_rmm.script_snippets.updateUpdate a script snippetwrite
Sites5
  • tactical_rmm.sites.createCreate a sitewrite
  • tactical_rmm.sites.deleteDelete a sitedestructive
  • tactical_rmm.sites.getGet a siteread
  • tactical_rmm.sites.listList sitesread
  • tactical_rmm.sites.updateUpdate a sitewrite
API keys4
  • tactical_rmm.api_keys.createCreate an API keywrite
  • tactical_rmm.api_keys.deleteDelete an API keydestructive
  • tactical_rmm.api_keys.listList API keysread
  • tactical_rmm.api_keys.updateUpdate an API keywrite
Code signing4
  • tactical_rmm.code_signing.delete_tokenRemove the code signing tokendestructive
  • tactical_rmm.code_signing.getGet the code signing tokenread
  • tactical_rmm.code_signing.set_tokenSave and verify a code signing tokenwrite
  • tactical_rmm.code_signing.sign_all_agentsPush code-signed agents to every agentwrite
Keystore4
  • tactical_rmm.keystore.createCreate a global key store entrywrite
  • tactical_rmm.keystore.deleteDelete a global key store entrydestructive
  • tactical_rmm.keystore.listList global key store entriesread
  • tactical_rmm.keystore.updateUpdate a global key store entrywrite
Patch policies4
  • tactical_rmm.patch_policies.createCreate a policy's Windows patch policywrite
  • tactical_rmm.patch_policies.deleteDelete a Windows patch policydestructive
  • tactical_rmm.patch_policies.reset_agentsReset agents' patch policies to inherit (all, one client or one site)write
  • tactical_rmm.patch_policies.updateUpdate a Windows patch policywrite
Schedules4
  • tactical_rmm.schedules.createCreate a schedulewrite
  • tactical_rmm.schedules.deleteDelete a scheduledestructive
  • tactical_rmm.schedules.listList schedulesread
  • tactical_rmm.schedules.updateUpdate a schedulewrite
Services4
  • tactical_rmm.services.controlStart, stop or restart a Windows service on an agentwrite
  • tactical_rmm.services.getGet a Windows service's details on an agentread
  • tactical_rmm.services.listList Windows services on an agentread
  • tactical_rmm.services.set_start_typeChange a Windows service's start type on an agentwrite
Windows updates4
  • tactical_rmm.windows_updates.installInstall approved Windows updates on an agent nowdestructive
  • tactical_rmm.windows_updates.listList Windows updates on an agentread
  • tactical_rmm.windows_updates.scanScan an agent for Windows updateswrite
  • tactical_rmm.windows_updates.updateApprove, ignore or reset one Windows updatewrite
Deployments3
  • tactical_rmm.deployments.createCreate an agent deployment linkwrite
  • tactical_rmm.deployments.deleteDelete an agent deployment linkdestructive
  • tactical_rmm.deployments.listList agent deployment linksread
Pending actions3
  • tactical_rmm.pending_actions.deleteCancel and delete a pending actiondestructive
  • tactical_rmm.pending_actions.listList pending actions (all agents)read
  • tactical_rmm.pending_actions.list_for_agentList an agent's pending actionsread
Report history3
  • tactical_rmm.report_history.deleteDelete a report history entrydestructive
  • tactical_rmm.report_history.listList report run historyread
  • tactical_rmm.report_history.renderRe-render a saved report (HTML or plain text)read
Sessions3
  • tactical_rmm.sessions.deleteEnd one login sessiondestructive
  • tactical_rmm.sessions.delete_all_for_userEnd every active login session of a userdestructive
  • tactical_rmm.sessions.list_for_userList a user's active login sessionsread
Agent history2
  • tactical_rmm.agent_history.listList agent command and script history (all agents)read
  • tactical_rmm.agent_history.list_for_agentList an agent's command and script historyread
Core settings2
  • tactical_rmm.core_settings.getGet global settingsread
  • tactical_rmm.core_settings.updateUpdate global settingswrite
Audit logs1
  • tactical_rmm.audit_logs.searchSearch the audit logwrite
Debug logs1
  • tactical_rmm.debug_logs.searchSearch the debug logwrite
Script history1
  • tactical_rmm.script_history.listList script run history across agentsread

Questions

The Tactical RMM MCP server, answered.

Is there a Tactical RMM MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 236 Tactical RMM actions across agents, checks, report templates and users, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Tactical RMM.

What do I need to connect Tactical RMM?

Tactical RMM API key. Plus your host. The free call account { op: "connections.requirements", service: "tactical_rmm" } lists exactly what to paste.

Can an AI agent delete or change things in Tactical RMM?

Only if its key allows it, and only with an explicit confirmation. 54 Tactical RMM actions are destructive, including delete a user, delete a client and uninstall and remove an agent. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Tactical RMM API limit?

actionlake paces every call to the limits in the Tactical RMM service file: 600 calls a minute per connection. Repeated reads are answered from cache (76 Tactical RMM actions can be), which never reaches Tactical RMM.

What does a Tactical RMM action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (236 Tactical RMM actions page). Cache hits, searches, dry runs and calls Tactical RMM refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Tactical RMM API does it cover?

The Tactical RMM v1.5.2 REST API (Django REST Framework; derived from the tagged source's urls.py and views.py) at your Tactical RMM instance's API base URL, which you enter when connecting. It is built from Tactical RMM's documentation as read on 23 October 2026. 236 actions in 40 areas, each one in the signed service file (version 1.0.0).

Can I combine Tactical RMM with my other systems?

Yes. ask joins Tactical RMM to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Tactical RMM maps crm.company, which 227 other connectors also map.

Does actionlake keep my Tactical RMM data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Tactical RMM credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Tactical RMM today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.