--- title: "Tactical RMM MCP server for AI agents - actionlake" description: "Give Claude 236 Tactical RMM actions through one MCP server: agents, checks. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/tactical-rmm updated: 2026-10-23 --- Connectors · MSP & PSA # Tactical RMM MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Tactical RMM and the rest of your systems. It gives your agent 236 Tactical RMM actions (87 reads, 95 writes and 54 that wait for a confirmation) and holds the Tactical RMM credential itself, so the agent never does. It paces Tactical RMM's limits and records every call. [Connect Tactical RMM free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "tactical_rmm.clients.list", intent: "check which Tactical RMM account is connected" } # List clients · read · 1 upstream call ``` - 236 actions in one signed file - 87 read look, never change - 95 write create and update - 54 wait for a yes destructive, confirmed first Set up ## Connect Tactical RMM in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Tactical RMM. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` Tactical RMM API key - `host` Where your Tactical RMM lives: your host ``` account { op: "connections.requirements", service: "tactical_rmm" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "tactical_rmm.clients.list" } # list clients · read · 1 upstream call check { action: "tactical_rmm.users.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Tactical RMM at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Setup fields** `host` **Limits we pace to** 600 calls a minute, per connection **API covered** Tactical RMM v1.5.2 REST API (Django REST Framework; derived from the tagged source's urls.py and views.py), at your Tactical RMM instance's API base URL, which you enter when connecting **Built from** Tactical RMM's documentation, read 23 October 2026[codeload.github.com](https://codeload.github.com/amidaware/tacticalrmm/tar.gz/refs/tags/v1.5.2) [docs.tacticalrmm.com](https://docs.tacticalrmm.com/functions/api/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 76 of 87 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line Tactical RMM up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Tactical RMM. 236 actions in 40 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **87** read look, never change - **95** write create and update - **54** destructive wait for a confirmation 1. ### Agents 26 9 read · 9 write · 8 destructive List agents · Get an agent · Update an agent's settings · Uninstall and remove an agent 2. ### Checks 13 5 read · 5 write · 3 destructive Create a check on an agent or policy · List checks · List an agent's checks (including policy checks) · List a policy's checks 3. ### Report templates 13 6 read · 6 write · 1 destructive Evaluate a report template's variables and dependencies · Create a report template · Run a report and email a link to it · Import an exported report template 4. ### Users 11 2 read · 4 write · 5 destructive List users · Create a user · Get a user · Update a user 5. ### Tasks 10 5 read · 2 write · 3 destructive Create an automated task on an agent or policy · List automated tasks · List an agent's automated tasks (including policy tasks) · List a policy's automated tasks 6. ### Core 9 3 read · 5 write · 1 destructive Generate script code from a prompt with the configured OpenAI model · Send a test alert email · Send a test alert SMS · Check whether the server web terminal is enabled for the user 7. ### Agent registry 8 1 read · 5 write · 2 destructive Browse an agent's Windows registry · Create a registry key on an agent · Create a registry value on an agent · Change a registry value's data on an agent 8. ### Policies 7 4 read · 2 write · 1 destructive Create (or copy) an automation policy · List automation policies · Get the policy overview tree (clients, sites, policies) · Get an automation policy **32 more areas · 139 actions** - Scripts **7** - SSO providers **7** - Agent notes **6** - Alert templates **6** - Alerts **6** - Custom fields **6** - Report data queries **6** - Report schedules **6** - Software **6** - URL actions **6** - Clients **5** - Report assets **5** - Report HTML templates **5** - Roles **5** - Script snippets **5** - Sites **5** - API keys **4** - Code signing **4** - Keystore **4** - Patch policies **4** - Schedules **4** - Services **4** - Windows updates **4** - Deployments **3** - Pending actions **3** - Report history **3** - Sessions **3** - Agent history **2** - Core settings **2** - Audit logs **1** - Debug logs **1** - Script history **1** Top actions ## The Tactical RMM API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 32 of Tactical RMM's 32 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `tactical_rmm.users.list` List users | List users. | read | `identity.user.list` 474 connectors | | `tactical_rmm.clients.list` List clients | List clients. | read | `crm.company.list` 162 connectors | | `tactical_rmm.users.create` Create a user | Create a user. | write | `identity.user.create` 262 connectors | | `tactical_rmm.agents.list` List agents | List agents. | read | `device.endpoint.list` 65 connectors | | `tactical_rmm.users.delete` Delete a user | Delete a user. | destructive | `identity.user.delete` 253 connectors | | `tactical_rmm.clients.create` Create a client (with its first site) | Create a client (with its first site). | write | `crm.company.create` 142 connectors | | `tactical_rmm.roles.list` List roles | List roles. | read | `identity.role.list` 184 connectors | | `tactical_rmm.roles.create` Create a role | Create a role. | write | `identity.role.create` 105 connectors | | `tactical_rmm.api_keys.create` Create an API key | Create an API key. | write | `identity.api_key.create` 100 connectors | | `tactical_rmm.api_keys.list` List API keys | List API keys. | read | `identity.api_key.list` 96 connectors | | `tactical_rmm.agents.get` Get an agent | Get an agent. | read | `device.endpoint.get` 57 connectors | | `tactical_rmm.scripts.create` Create a script | Create a script. | write | `automation.script.create` 8 connectors | Try it ## Prompts to paste into Claude. Each one names the Tactical RMM actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Tactical RMM devices have not checked in for a week? calls `tactical_rmm.agents.list` 2. Write write Create a user in Tactical RMM. Show me exactly what you will send before you save it. calls `tactical_rmm.users.create` 3. Across systems read Which Tactical RMM companies have invoices in NetSuite, and how many each? calls `tactical_rmm.clients.list` `netsuite.views.invoices` Across your systems ## Tactical RMM, joined to the rest of your business. One `ask` fetches from Tactical RMM and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which Tactical RMM companies have invoices in NetSuite, and how many each? `tactical_rmm.clients.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) - Which Tactical RMM companies have tickets in HubSpot CRM, and how many each? `tactical_rmm.clients.list` + `hubspot_crm.tickets.list`, on `crm.company` · [HubSpot CRM](https://actionlake.com/connectors/hubspot-crm) Also mapped by other connectors `identity.user` **517** `crm.company` **227** `device.endpoint` **69** ask ``` ask { intent: "which Tactical RMM companies have invoices in NetSuite, and how many each", steps: [ { action: "tactical_rmm.clients.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. Governance for Tactical RMM ## Destructive actions wait for a yes. 54 Tactical RMM actions are destructive. The first 10: - Delete a user `tactical_rmm.users.delete` - Delete a client `tactical_rmm.clients.delete` - Uninstall and remove an agent `tactical_rmm.agents.uninstall` - Delete a role `tactical_rmm.roles.delete` - Delete an API key `tactical_rmm.api_keys.delete` - Delete a script `tactical_rmm.scripts.delete` - Delete an alert `tactical_rmm.alerts.delete` - Run an automated task now `tactical_rmm.tasks.run` - Test-run unsaved script code on an agent `tactical_rmm.scripts.test` - Delete a site `tactical_rmm.sites.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do tactical_rmm.users.delete confirm_policy: **human** Delete a user? **intent:** the user asked me to delete a user run suspended · waiting for a named person · key _tactical-rmm-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "tactical-rmm-agent", allowed_actions: ["tactical_rmm.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "tactical_rmm.users.delete", approver: "lead@example.com" }, { match: "tactical_rmm.clients.delete", approver: "lead@example.com" }, { match: "tactical_rmm.agents.uninstall", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Tactical RMM only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Tactical RMM costs on actionlake. Every Tactical RMM action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Tactical RMM refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 236 Tactical RMM actions - 236 actions page each page of a long list is one call - 76 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Tactical RMM action. 236 actions by area: the id your agent calls, what it does, and its effect. **Agents 26** - `tactical_rmm.agents.bulk_action` Run a command, script or patch action on many agents destructive - `tactical_rmm.agents.generate_installer` Generate a manual or macOS agent install command write - `tactical_rmm.agents.get` Get an agent read - `tactical_rmm.agents.get_event_log` Read an agent's Windows event log read - `tactical_rmm.agents.get_meshcentral_urls` Get MeshCentral take-control, terminal and file URLs for an agent read - `tactical_rmm.agents.get_terminal_defaults` Get an agent's web terminal defaults read - `tactical_rmm.agents.get_vnc_url` Get a MeshCentral web VNC URL for an agent read - `tactical_rmm.agents.kill_process` End a process on an agent destructive - `tactical_rmm.agents.list` List agents read - `tactical_rmm.agents.list_processes` List running processes on an agent read - `tactical_rmm.agents.list_versions` List agent versions and the latest available version read - `tactical_rmm.agents.ping` Check whether an agent is online read - `tactical_rmm.agents.reboot` Reboot an agent's machine now destructive - `tactical_rmm.agents.recover` Recover (restart) the Tactical or Mesh agent service write - `tactical_rmm.agents.recover_all` Queue recovery of every agent that needs it write - `tactical_rmm.agents.recover_mesh` Repair the MeshCentral agent on a machine write - `tactical_rmm.agents.refresh_inventory` Refresh an agent's system information (WMI) write - `tactical_rmm.agents.run_command` Run a shell command on an agent destructive - `tactical_rmm.agents.run_script` Run a saved script on an agent destructive - `tactical_rmm.agents.schedule_reboot` Schedule a reboot of an agent's machine destructive - `tactical_rmm.agents.set_maintenance_mode_bulk` Turn maintenance mode on or off for every agent in a client or site write - `tactical_rmm.agents.shutdown` Shut down an agent's machine destructive - `tactical_rmm.agents.uninstall` Uninstall and remove an agent destructive - `tactical_rmm.agents.update` Update an agent's settings write - `tactical_rmm.agents.update_agent_software` Update agents to the latest Tactical agent version write - `tactical_rmm.agents.wake_on_lan` Send a Wake-on-LAN packet to an agent's machine write **Checks 13** - `tactical_rmm.checks.create` Create a check on an agent or policy write - `tactical_rmm.checks.delete` Delete a check destructive - `tactical_rmm.checks.get` Get a check read - `tactical_rmm.checks.history` Get a check's result history write - `tactical_rmm.checks.list` List checks read - `tactical_rmm.checks.list_for_agent` List an agent's checks (including policy checks) read - `tactical_rmm.checks.list_for_policy` List a policy's checks read - `tactical_rmm.checks.policy_status` Get a policy check's result on every agent read - `tactical_rmm.checks.reset` Reset a failing check to passing write - `tactical_rmm.checks.reset_all_for_agent` Reset every check on an agent to passing write - `tactical_rmm.checks.run_bulk` Run checks on every agent in a client or site destructive - `tactical_rmm.checks.run_for_agent` Run every check on an agent now destructive - `tactical_rmm.checks.update` Update a check write **Report templates 13** - `tactical_rmm.report_templates.analyze_variables` Evaluate a report template's variables and dependencies read - `tactical_rmm.report_templates.create` Create a report template write - `tactical_rmm.report_templates.delete` Delete a report template destructive - `tactical_rmm.report_templates.email` Run a report and email a link to it write - `tactical_rmm.report_templates.export` Export a report template with its base template and assets read - `tactical_rmm.report_templates.get` Get a report template read - `tactical_rmm.report_templates.import` Import an exported report template write - `tactical_rmm.report_templates.import_shared` Import shared report templates from the community repository write - `tactical_rmm.report_templates.list` List report templates read - `tactical_rmm.report_templates.list_shared` List shared report templates from the community repository read - `tactical_rmm.report_templates.preview` Render an unsaved report template (HTML or plain text) read - `tactical_rmm.report_templates.run` Run a report (HTML or plain text) write - `tactical_rmm.report_templates.update` Update a report template write **Users 11** - `tactical_rmm.users.create` Create a user write - `tactical_rmm.users.delete` Delete a user destructive - `tactical_rmm.users.get` Get a user read - `tactical_rmm.users.list` List users read - `tactical_rmm.users.reset_2fa` Reset a user's two-factor key destructive - `tactical_rmm.users.reset_own_2fa` Reset the API key user's own two-factor key destructive - `tactical_rmm.users.reset_own_password` Set the API key user's own password destructive - `tactical_rmm.users.reset_password` Set a user's password destructive - `tactical_rmm.users.setup_own_totp` Generate a TOTP key for the API key's user if it has none write - `tactical_rmm.users.update` Update a user write - `tactical_rmm.users.update_own_ui_preferences` Update the API key user's dashboard preferences write **Tasks 10** - `tactical_rmm.tasks.create` Create an automated task on an agent or policy write - `tactical_rmm.tasks.delete` Delete an automated task destructive - `tactical_rmm.tasks.get` Get an automated task read - `tactical_rmm.tasks.list` List automated tasks read - `tactical_rmm.tasks.list_for_agent` List an agent's automated tasks (including policy tasks) read - `tactical_rmm.tasks.list_for_policy` List a policy's automated tasks read - `tactical_rmm.tasks.policy_status` Get a policy task's result on every agent read - `tactical_rmm.tasks.run` Run an automated task now destructive - `tactical_rmm.tasks.run_policy_task` Run a policy task on every agent it applies to destructive - `tactical_rmm.tasks.update` Update an automated task write **Core 9** - `tactical_rmm.core.check_web_terminal_access` Check whether the server web terminal is enabled for the user read - `tactical_rmm.core.clear_cache` Clear the server's cache write - `tactical_rmm.core.dashboard_info` Get dashboard information for the API key's user read - `tactical_rmm.core.generate_script_with_ai` Generate script code from a prompt with the configured OpenAI model write - `tactical_rmm.core.run_server_script` Run a script on the Tactical RMM server destructive - `tactical_rmm.core.send_test_email` Send a test alert email write - `tactical_rmm.core.send_test_sms` Send a test alert SMS write - `tactical_rmm.core.server_maintenance` Run a server maintenance action write - `tactical_rmm.core.version` Get the Tactical RMM server version read **Agent registry 8** - `tactical_rmm.agent_registry.browse` Browse an agent's Windows registry read - `tactical_rmm.agent_registry.create_key` Create a registry key on an agent write - `tactical_rmm.agent_registry.create_value` Create a registry value on an agent write - `tactical_rmm.agent_registry.delete_key` Delete a registry key on an agent destructive - `tactical_rmm.agent_registry.delete_value` Delete a registry value on an agent destructive - `tactical_rmm.agent_registry.modify_value` Change a registry value's data on an agent write - `tactical_rmm.agent_registry.rename_key` Rename a registry key on an agent write - `tactical_rmm.agent_registry.rename_value` Rename a registry value on an agent write **Policies 7** - `tactical_rmm.policies.create` Create (or copy) an automation policy write - `tactical_rmm.policies.delete` Delete an automation policy destructive - `tactical_rmm.policies.get` Get an automation policy read - `tactical_rmm.policies.list` List automation policies read - `tactical_rmm.policies.overview` Get the policy overview tree (clients, sites, policies) read - `tactical_rmm.policies.related` List the clients, sites and agents a policy applies to read - `tactical_rmm.policies.update` Update an automation policy write **Scripts 7** - `tactical_rmm.scripts.create` Create a script write - `tactical_rmm.scripts.delete` Delete a script destructive - `tactical_rmm.scripts.download` Get a script's code and file name read - `tactical_rmm.scripts.get` Get a script read - `tactical_rmm.scripts.list` List scripts read - `tactical_rmm.scripts.test` Test-run unsaved script code on an agent destructive - `tactical_rmm.scripts.update` Update a script write **SSO providers 7** - `tactical_rmm.sso_providers.create` Add an SSO (OpenID Connect) provider write - `tactical_rmm.sso_providers.delete` Delete an SSO provider destructive - `tactical_rmm.sso_providers.disconnect_account` Disconnect a user's linked SSO account destructive - `tactical_rmm.sso_providers.get_settings` Get SSO settings read - `tactical_rmm.sso_providers.list` List SSO (OpenID Connect) providers read - `tactical_rmm.sso_providers.update` Update an SSO provider write - `tactical_rmm.sso_providers.update_settings` Update SSO settings write **Agent notes 6** - `tactical_rmm.agent_notes.create` Add a note to an agent write - `tactical_rmm.agent_notes.delete` Delete an agent note destructive - `tactical_rmm.agent_notes.get` Get an agent note read - `tactical_rmm.agent_notes.list` List agent notes (all agents) read - `tactical_rmm.agent_notes.list_for_agent` List an agent's notes read - `tactical_rmm.agent_notes.update` Update an agent note write **Alert templates 6** - `tactical_rmm.alert_templates.create` Create an alert template write - `tactical_rmm.alert_templates.delete` Delete an alert template destructive - `tactical_rmm.alert_templates.get` Get an alert template read - `tactical_rmm.alert_templates.list` List alert templates read - `tactical_rmm.alert_templates.related` List the policies, clients, sites and agents using an alert template read - `tactical_rmm.alert_templates.update` Update an alert template write **Alerts 6** - `tactical_rmm.alerts.bulk_update` Resolve or snooze many alerts write - `tactical_rmm.alerts.create` Create an alert write - `tactical_rmm.alerts.delete` Delete an alert destructive - `tactical_rmm.alerts.get` Get an alert read - `tactical_rmm.alerts.search` Search alerts write - `tactical_rmm.alerts.update` Resolve, snooze, unsnooze or edit an alert write **Custom fields 6** - `tactical_rmm.custom_fields.create` Create a custom field definition write - `tactical_rmm.custom_fields.delete` Delete a custom field definition destructive - `tactical_rmm.custom_fields.get` Get a custom field definition read - `tactical_rmm.custom_fields.list` List custom field definitions read - `tactical_rmm.custom_fields.list_by_model` List custom field definitions for one model write - `tactical_rmm.custom_fields.update` Update a custom field definition write **Report data queries 6** - `tactical_rmm.report_data_queries.create` Create a report data query write - `tactical_rmm.report_data_queries.delete` Delete a report data query destructive - `tactical_rmm.report_data_queries.get` Get a report data query read - `tactical_rmm.report_data_queries.list` List report data queries read - `tactical_rmm.report_data_queries.schema` Get the JSON schema for report data queries read - `tactical_rmm.report_data_queries.update` Update a report data query write **Report schedules 6** - `tactical_rmm.report_schedules.create` Create a report schedule write - `tactical_rmm.report_schedules.delete` Delete a report schedule destructive - `tactical_rmm.report_schedules.get` Get a report schedule read - `tactical_rmm.report_schedules.list` List report schedules read - `tactical_rmm.report_schedules.run` Run a scheduled report now write - `tactical_rmm.report_schedules.update` Update a report schedule write **Software 6** - `tactical_rmm.software.install` Install a Chocolatey package on an agent destructive - `tactical_rmm.software.list` List installed software (all agents) read - `tactical_rmm.software.list_chocolatey_packages` List Chocolatey packages available to install read - `tactical_rmm.software.list_for_agent` List installed software on an agent read - `tactical_rmm.software.refresh` Refresh an agent's installed software list write - `tactical_rmm.software.uninstall` Uninstall software from an agent destructive **URL actions 6** - `tactical_rmm.url_actions.create` Create a URL action write - `tactical_rmm.url_actions.delete` Delete a URL action destructive - `tactical_rmm.url_actions.list` List URL actions read - `tactical_rmm.url_actions.run` Run a URL action against an agent, site or client write - `tactical_rmm.url_actions.test` Test an REST URL action definition write - `tactical_rmm.url_actions.update` Update a URL action write **Clients 5** - `tactical_rmm.clients.create` Create a client (with its first site) write - `tactical_rmm.clients.delete` Delete a client destructive - `tactical_rmm.clients.get` Get a client read - `tactical_rmm.clients.list` List clients read - `tactical_rmm.clients.update` Update a client write **Report assets 5** - `tactical_rmm.report_assets.create_folder` Create a report asset folder write - `tactical_rmm.report_assets.delete` Delete report assets or folders destructive - `tactical_rmm.report_assets.list` List report assets in a folder read - `tactical_rmm.report_assets.list_all` List every report asset (or folder) as a tree read - `tactical_rmm.report_assets.rename` Rename a report asset or folder write **Report HTML templates 5** - `tactical_rmm.report_html_templates.create` Create a report base HTML template write - `tactical_rmm.report_html_templates.delete` Delete a report base HTML template destructive - `tactical_rmm.report_html_templates.get` Get a report base HTML template read - `tactical_rmm.report_html_templates.list` List report base HTML templates read - `tactical_rmm.report_html_templates.update` Update a report base HTML template write **Roles 5** - `tactical_rmm.roles.create` Create a role write - `tactical_rmm.roles.delete` Delete a role destructive - `tactical_rmm.roles.get` Get a role read - `tactical_rmm.roles.list` List roles read - `tactical_rmm.roles.update` Update a role write **Script snippets 5** - `tactical_rmm.script_snippets.create` Create a script snippet write - `tactical_rmm.script_snippets.delete` Delete a script snippet destructive - `tactical_rmm.script_snippets.get` Get a script snippet read - `tactical_rmm.script_snippets.list` List script snippets read - `tactical_rmm.script_snippets.update` Update a script snippet write **Sites 5** - `tactical_rmm.sites.create` Create a site write - `tactical_rmm.sites.delete` Delete a site destructive - `tactical_rmm.sites.get` Get a site read - `tactical_rmm.sites.list` List sites read - `tactical_rmm.sites.update` Update a site write **API keys 4** - `tactical_rmm.api_keys.create` Create an API key write - `tactical_rmm.api_keys.delete` Delete an API key destructive - `tactical_rmm.api_keys.list` List API keys read - `tactical_rmm.api_keys.update` Update an API key write **Code signing 4** - `tactical_rmm.code_signing.delete_token` Remove the code signing token destructive - `tactical_rmm.code_signing.get` Get the code signing token read - `tactical_rmm.code_signing.set_token` Save and verify a code signing token write - `tactical_rmm.code_signing.sign_all_agents` Push code-signed agents to every agent write **Keystore 4** - `tactical_rmm.keystore.create` Create a global key store entry write - `tactical_rmm.keystore.delete` Delete a global key store entry destructive - `tactical_rmm.keystore.list` List global key store entries read - `tactical_rmm.keystore.update` Update a global key store entry write **Patch policies 4** - `tactical_rmm.patch_policies.create` Create a policy's Windows patch policy write - `tactical_rmm.patch_policies.delete` Delete a Windows patch policy destructive - `tactical_rmm.patch_policies.reset_agents` Reset agents' patch policies to inherit (all, one client or one site) write - `tactical_rmm.patch_policies.update` Update a Windows patch policy write **Schedules 4** - `tactical_rmm.schedules.create` Create a schedule write - `tactical_rmm.schedules.delete` Delete a schedule destructive - `tactical_rmm.schedules.list` List schedules read - `tactical_rmm.schedules.update` Update a schedule write **Services 4** - `tactical_rmm.services.control` Start, stop or restart a Windows service on an agent write - `tactical_rmm.services.get` Get a Windows service's details on an agent read - `tactical_rmm.services.list` List Windows services on an agent read - `tactical_rmm.services.set_start_type` Change a Windows service's start type on an agent write **Windows updates 4** - `tactical_rmm.windows_updates.install` Install approved Windows updates on an agent now destructive - `tactical_rmm.windows_updates.list` List Windows updates on an agent read - `tactical_rmm.windows_updates.scan` Scan an agent for Windows updates write - `tactical_rmm.windows_updates.update` Approve, ignore or reset one Windows update write **Deployments 3** - `tactical_rmm.deployments.create` Create an agent deployment link write - `tactical_rmm.deployments.delete` Delete an agent deployment link destructive - `tactical_rmm.deployments.list` List agent deployment links read **Pending actions 3** - `tactical_rmm.pending_actions.delete` Cancel and delete a pending action destructive - `tactical_rmm.pending_actions.list` List pending actions (all agents) read - `tactical_rmm.pending_actions.list_for_agent` List an agent's pending actions read **Report history 3** - `tactical_rmm.report_history.delete` Delete a report history entry destructive - `tactical_rmm.report_history.list` List report run history read - `tactical_rmm.report_history.render` Re-render a saved report (HTML or plain text) read **Sessions 3** - `tactical_rmm.sessions.delete` End one login session destructive - `tactical_rmm.sessions.delete_all_for_user` End every active login session of a user destructive - `tactical_rmm.sessions.list_for_user` List a user's active login sessions read **Agent history 2** - `tactical_rmm.agent_history.list` List agent command and script history (all agents) read - `tactical_rmm.agent_history.list_for_agent` List an agent's command and script history read **Core settings 2** - `tactical_rmm.core_settings.get` Get global settings read - `tactical_rmm.core_settings.update` Update global settings write **Audit logs 1** - `tactical_rmm.audit_logs.search` Search the audit log write **Debug logs 1** - `tactical_rmm.debug_logs.search` Search the debug log write **Script history 1** - `tactical_rmm.script_history.list` List script run history across agents read Questions ## The Tactical RMM MCP server, answered. **Is there a Tactical RMM MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 236 Tactical RMM actions across agents, checks, report templates and users, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Tactical RMM. **What do I need to connect Tactical RMM?** Tactical RMM API key. Plus your host. The free call account { op: "connections.requirements", service: "tactical_rmm" } lists exactly what to paste. **Can an AI agent delete or change things in Tactical RMM?** Only if its key allows it, and only with an explicit confirmation. 54 Tactical RMM actions are destructive, including delete a user, delete a client and uninstall and remove an agent. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Tactical RMM API limit?** actionlake paces every call to the limits in the Tactical RMM service file: 600 calls a minute per connection. Repeated reads are answered from cache (76 Tactical RMM actions can be), which never reaches Tactical RMM. **What does a Tactical RMM action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (236 Tactical RMM actions page). Cache hits, searches, dry runs and calls Tactical RMM refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Tactical RMM API does it cover?** The Tactical RMM v1.5.2 REST API (Django REST Framework; derived from the tagged source's urls.py and views.py) at your Tactical RMM instance's API base URL, which you enter when connecting. It is built from Tactical RMM's documentation as read on 23 October 2026. 236 actions in 40 areas, each one in the signed service file (version 1.0.0). **Can I combine Tactical RMM with my other systems?** Yes. ask joins Tactical RMM to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Tactical RMM maps crm.company, which 227 other connectors also map. **Does actionlake keep my Tactical RMM data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Tactical RMM credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Tactical RMM Shares the most action names with - [Liongard 19](https://actionlake.com/connectors/liongard) - [Kaseya VSA 18](https://actionlake.com/connectors/kaseya-vsa) - [TP-Link Omada Open API 16](https://actionlake.com/connectors/tp-link-omada-open-api) - [Action1 15](https://actionlake.com/connectors/action1) - [Veeam Service Provider Console 14](https://actionlake.com/connectors/veeam-service-provider-console) - [ThreatDown OneView 12](https://actionlake.com/connectors/threatdown-oneview) Joins with, on shared entities - [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users) - [Salesforce Sales Cloud 2](https://actionlake.com/connectors/salesforce-sales-cloud) - [Xero 2](https://actionlake.com/connectors/xero) - [ServiceNow 2](https://actionlake.com/connectors/servicenow) - [Genesys Cloud CX 2](https://actionlake.com/connectors/genesys-cloud-cx) - [Procore 2](https://actionlake.com/connectors/procore) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Tactical RMM; the name is the vendor's own. Counts are from the Tactical RMM service file, version 1.0.0. ## Give your agent Tactical RMM today. [Connect Tactical RMM free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/tactical-rmm More: https://actionlake.com/llms.txt