Connect
/docs/connectYour agent,connected.
One address for every agent platform that speaks MCP. Pick yours: the exact menu, command or config, with a key or with sign-in.
URL https://connect.actionlake.com/mcpHeader Authorization: Bearer al_YOUR_KEY or Authorization: al_YOUR_KEY or X-API-Key: al_YOUR_KEYSign-in OAuth 2.1 on the same URL, instead of a headerThe address and the key.
Every platform below connects to https://connect.actionlake.com/mcp over the Streamable HTTP transport. It authenticates one of two ways:
- An API key in
Authorization: Bearer al_…, a bareAuthorization: al_…, orX-API-Key: al_…. Give each agent a key of its own, with only the actions it needs and a cap in calls. The console makes one and fills it into the snippets. - Sign-in (OAuth 2.1) on the same URL. The platform registers itself; the person signs in on the actionlake consent page, which can create a free account in one click.
Some enterprise platforms ask an admin for an OAuth client ID and secret instead. The console's Connect an agent screen makes one for those.
Each platform below says what its steps rest on: actionlake's own code, or the vendor's documentation on the date given. Vendors move menus; if a step has moved, the URL and the header still hold.
Chat apps
Claude.ai and Claude Desktop
Custom connectors work on Free (one connector), Pro, Max, Team and Enterprise. On Team and Enterprise an Owner adds it once for everyone.
- Open Customize > Connectors and click Add custom connector. (Team or Enterprise Owner: Organization settings > Connectors > Add > Custom > Web.)
- Name it ActionLake and paste the MCP server URL:
https://connect.actionlake.com/mcp. - Leave the OAuth client fields empty. If the dialog asks how Claude identifies itself, choose Register automatically.
- Click Add, then Connect. Sign in on the ActionLake page, or create a free account there with one click.
- Prefer a key? If your dialog shows Request headers (beta), choose No sign-in and add the header
x-api-keywith your key as the value.
https://connect.actionlake.com/mcpx-api-key: al_YOUR_KEYChatGPT
ChatGPT connects with sign-in only; it does not send API keys. Full read and write needs ChatGPT Business, Enterprise or Edu on the web. Pro can connect for read and fetch only. In a Business workspace only admins and owners can add one; on Enterprise and Edu an admin grants Create plugins with MCPs.
- Open chatgpt.com/plugins, click +, and choose Add custom MCP server.
- Name it ActionLake. Connection: the URL, including
/mcp:https://connect.actionlake.com/mcp. - Authentication: OAuth.
- Tick I understand and want to continue, then click Create as a plugin. Review the tools and install it.
- Sign in on the ActionLake page, or create a free account there. Then mention @ActionLake in a chat.
- ChatGPT asks you to confirm each action that can change something. Keep that on; it is the safe default.
https://connect.actionlake.com/mcpGrok
The xAI API has no approval step: the model calls tools on its own. Give it a key with narrow grants.
- Grok app: open grok.com/connectors, click New Connector, then Custom.
- Paste
https://connect.actionlake.com/mcpand sign in to ActionLake, or create a free account there. On mobile it is Settings > Connectors. - Grok CLI: run the command below.
- xAI API: add an
mcptool. Theauthorizationvalue can be the bare key.
grok mcp add --transport http actionlake https://connect.actionlake.com/mcp --header "Authorization: Bearer al_YOUR_KEY"import os
from openai import OpenAI
client = OpenAI(base_url="https://api.x.ai/v1", api_key=os.environ["XAI_API_KEY"])
response = client.responses.create(
model="grok-4",
tools=[{
"type": "mcp",
"server_label": "actionlake",
"server_url": "https://connect.actionlake.com/mcp",
"authorization": "al_YOUR_KEY",
}],
input="Use actionlake: call help, then tell me what you can do.",
)
print(response.output_text)Coding agents and IDEs
Claude Code
- Run the command once. Add
--scope userbefore the name to use ActionLake in every project. - Signing in instead of using a key? Leave the header off, start
claudeand run/mcp; the ActionLake consent page opens, and it can create a free account there. - Ask your agent to call
help. The eight tools are listed underactionlake.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcp --header "Authorization: Bearer al_YOUR_KEY"claude mcp add --transport http actionlake https://connect.actionlake.com/mcpCodex
- Add the table to
~/.codex/config.toml(or.codex/config.tomlin a trusted project). - Put the key in the environment variable the table names. Codex sends it as
Authorization: Bearer. - Signing in instead? Run the two commands under sign in; the browser opens the ActionLake consent page.
[mcp_servers.actionlake]
url = "https://connect.actionlake.com/mcp"
bearer_token_env_var = "ACTIONLAKE_KEY"export ACTIONLAKE_KEY="al_YOUR_KEY"codex mcp add actionlake --url https://connect.actionlake.com/mcp
codex mcp login actionlakeVS Code and GitHub Copilot
On Copilot Business or Enterprise, an admin must enable the MCP servers in Copilot policy.
- Click Install in VS Code. It adds the server with sign-in; VS Code opens the ActionLake consent page the first time a tool needs it.
- Using a key instead? Put the JSON in
.vscode/mcp.json(or your usermcp.json). VS Code asks for the key once and stores it securely, so the file is safe to commit. - Open Copilot Chat in Agent mode and ask it to call
help.
{
"inputs": [
{
"type": "promptString",
"id": "actionlake-key",
"description": "ActionLake API key",
"password": true
}
],
"servers": {
"actionlake": {
"type": "http",
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer ${input:actionlake-key}"
}
}
}
}al_YOUR_KEYcode --add-mcp '{"name":"actionlake","type":"http","url":"https://connect.actionlake.com/mcp"}'GitHub Copilot CLI
- Run the command. It writes the server to
~/.copilot/mcp-config.json. - Signing in instead? Leave the header off; Copilot CLI registers itself and opens the ActionLake consent page.
- In a session,
/mcplists the server and its tools.
copilot mcp add --transport http --header "Authorization: Bearer al_YOUR_KEY" actionlake https://connect.actionlake.com/mcpcopilot mcp add --transport http actionlake https://connect.actionlake.com/mcpGitHub Copilot cloud agent
The cloud agent does not support sign-in (OAuth) for remote servers, and it runs tools without asking. Give it a key of its own with read-only or narrow grants.
- In the repository, open Settings > Agents secrets (organization or repository) and add a secret named
COPILOT_MCP_ACTIONLAKE_KEYwith your key as the value. - Open Settings > Copilot > MCP servers (under Code, planning, and automation).
- Paste the JSON into MCP configuration and click Save MCP configuration.
toolsis required.["*"]enables all eight; list names to allow fewer.
{
"mcpServers": {
"actionlake": {
"type": "http",
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer $COPILOT_MCP_ACTIONLAKE_KEY"
},
"tools": [
"*"
]
}
}
}al_YOUR_KEYCursor
- Click Add to Cursor. Cursor installs the server with sign-in and opens the ActionLake consent page when you connect.
- Using a key instead? Put the JSON in
~/.cursor/mcp.json(every project) or.cursor/mcp.json(this one). Keep a file with a key in it out of git. - In Cursor Settings > MCP, check that actionlake is on and lists eight tools.
{
"mcpServers": {
"actionlake": {
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Windsurf
- Open the MCP config:
~/.codeium/windsurf/mcp_config.json(Devin Desktop:~/.config/devin/mcp_config.json). - Add the server. Windsurf reads
serverUrlfor a remote server. - Signing in instead? Leave out
headers, refresh the MCP list, and Windsurf opens the ActionLake consent page.
{
"mcpServers": {
"actionlake": {
"serverUrl": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Cline
- Open MCP Servers > Configure and edit
cline_mcp_settings.json(CLI:~/.cline/data/settings/cline_mcp_settings.json). "type": "streamableHttp"is required. Without it Cline falls back to the old SSE transport and the connection fails.- Or use the CLI command below.
{
"mcpServers": {
"actionlake": {
"type": "streamableHttp",
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
},
"disabled": false,
"autoApprove": []
}
}
}cline mcp add actionlake https://connect.actionlake.com/mcp --transport http --header "Authorization: Bearer al_YOUR_KEY" --yesZed
- Run
zed: open settings fileand add the server undercontext_servers. - Signing in instead? Leave out
headers; Zed runs the MCP sign-in itself and keeps the token in your keychain. - Settings > AI > MCP Servers shows a green dot when it is connected.
{
"context_servers": {
"actionlake": {
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Kiro
- Click Add to Kiro. Kiro installs the server with sign-in and opens the ActionLake consent page.
- Using a key instead? Put the JSON in
~/.kiro/settings/mcp.json(or.kiro/settings/mcp.jsonin a workspace).
{
"mcpServers": {
"actionlake": {
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Gemini CLI
- Run the command.
-s useradds it for every project; leave it off for this project only. - Editing
settings.jsonby hand? UsehttpUrl. In Gemini CLI,urlmeans the old SSE transport. - Signing in instead? Leave the header off and run
/mcp auth actionlakein Gemini CLI.
gemini mcp add -s user --transport http --header "Authorization: Bearer al_YOUR_KEY" actionlake https://connect.actionlake.com/mcp{
"mcpServers": {
"actionlake": {
"httpUrl": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Enterprise agent platforms
Microsoft Copilot Studio
Generative orchestration must be on for the agent. Your tenant's data policies (DLP) govern MCP connections like any connector.
- Open your agent, then Tools > Add a tool > New tool > Model Context Protocol.
- Server name: ActionLake. Server URL:
https://connect.actionlake.com/mcp. Write a description that says when to use it, for example "Run actions in our business systems". - Authentication, simplest first: OAuth 2.0 > Dynamic discovery. Copilot Studio registers itself; you sign in when you create the connection.
- Or API key: Type Header, Header name
X-API-Key. Paste your key when you create the connection. - Or OAuth 2.0 > Manual, with a client from Create OAuth client below. Leave its redirect URIs empty: Copilot Studio shows its callback only after Create, and an empty list accepts any https callback.
- Click Create, then Create a new connection, then Add to agent.
Header name X-API-Key
API key al_YOUR_KEYMCP server URL https://connect.actionlake.com/mcp
Client ID <the client ID from Create OAuth client>
Client secret <the client secret, shown once when you create the client>
Authorization URL https://api.actionlake.com/oauth/authorize
Token URL https://api.actionlake.com/oauth/token
Refresh URL https://api.actionlake.com/oauth/token
Scopes actions accountMicrosoft 365 Copilot
Microsoft 365 Copilot reaches MCP servers through a declarative agent. API keys are not supported for MCP plugins; it signs in with OAuth. The account needs custom app upload and Copilot access enabled.
- In VS Code, install Microsoft 365 Agents Toolkit (6.12 or later).
- Create a New Agent/App > Declarative Agent > Add an Action > Start with an MCP Server.
- Enter the server URL
https://connect.actionlake.com/mcp. - Authentication: OAuth (with static registration). Use a client from Create OAuth client below; its redirect URI is Teams'
https://teams.microsoft.com/api/platform/v1.0/oAuthRedirect. - Provision, then open m365.cloud.microsoft/chat. Your agent shows with a dev suffix; the first call asks you to sign in to ActionLake.
MCP server URL https://connect.actionlake.com/mcp
Client ID <the client ID from Create OAuth client>
Client secret <the client secret, shown once when you create the client>
Authorization URL https://api.actionlake.com/oauth/authorize
Token URL https://api.actionlake.com/oauth/token
Refresh URL https://api.actionlake.com/oauth/token
Scopes actions account
Redirect URI https://teams.microsoft.com/api/platform/v1.0/oAuthRedirectGemini Enterprise
Gemini Enterprise takes no API keys; an admin registers an OAuth client. New connections start disabled until an admin turns them on.
- Create an OAuth client below. Its redirect URI is
https://vertexaisearch.cloud.google.com/oauth-redirect. - Business edition: Settings & help > Manage team > Connected apps > Add MCP Server.
- Standard or Plus edition: Google Cloud console > Gemini Enterprise > your app > Connected data stores > New data store > Custom MCP Server.
- Choose OAuth 2.0 and fill in the fields below. Leave PKCE on.
- Save, enable the connection, and sign in to ActionLake when Gemini asks.
MCP server URL https://connect.actionlake.com/mcp
Client ID <the client ID from Create OAuth client>
Client secret <the client secret, shown once when you create the client>
Authorization URL https://api.actionlake.com/oauth/authorize
Token URL https://api.actionlake.com/oauth/token
Refresh URL https://api.actionlake.com/oauth/token
Scopes actions account
Redirect URI https://vertexaisearch.cloud.google.com/oauth-redirectAmazon Bedrock AgentCore Gateway
- In AgentCore Identity, add an API key credential provider and store your ActionLake key in it. Create it before the target.
- Open your gateway and add a target of type MCP server, with the endpoint
https://connect.actionlake.com/mcp. - Outbound authentication: API key, using the provider from step 1, sent in the
Authorizationheader with the prefixBearer. - Create the target. The gateway lists ActionLake's eight tools; synchronise the target if they change.
- Per-user sign-in instead? Use OAuth (authorization code) with a client from Create OAuth client below.
Header Authorization
Prefix Bearer
Key al_YOUR_KEYMCP server URL https://connect.actionlake.com/mcp
Client ID <the client ID from Create OAuth client>
Client secret <the client secret, shown once when you create the client>
Authorization URL https://api.actionlake.com/oauth/authorize
Token URL https://api.actionlake.com/oauth/token
Refresh URL https://api.actionlake.com/oauth/token
Scopes actions accountAmazon Quick
Amazon Quick sends no custom headers, so it signs in with OAuth. It needs a Quick Enterprise subscription.
- Open Connectors > Create for your team > Model Context Protocol (MCP).
- Name it ActionLake and enter the endpoint
https://connect.actionlake.com/mcp. Connection type: public. - Quick discovers ActionLake's sign-in and registers itself. Sign in to ActionLake when asked.
- If ActionLake's tools change, open the connector and click Sync.
https://connect.actionlake.com/mcpSalesforce Agentforce
Agentforce takes no API keys for MCP servers; it uses an OAuth client you register.
- Create an OAuth client below and leave its redirect URIs empty: Salesforce shows its callback only after you save, and an empty list accepts any https callback.
- In Setup, open Agentforce Registry and click New (or API Catalog > MCP Servers > External Servers > Add MCP Server).
- Name it ActionLake, describe when to use it, and enter the URL
https://connect.actionlake.com/mcp. - Authentication: OAuth 2.0, with the client ID, client secret, endpoints and scopes below.
- Choose the tools to allow. Then assign the permission set Salesforce created to the users or agent user who will use it; without it the tools fail.
MCP server URL https://connect.actionlake.com/mcp
Client ID <the client ID from Create OAuth client>
Client secret <the client secret, shown once when you create the client>
Authorization URL https://api.actionlake.com/oauth/authorize
Token URL https://api.actionlake.com/oauth/token
Refresh URL https://api.actionlake.com/oauth/token
Scopes actions accountAPIs and SDKs
OpenAI API and Agents SDK
The Responses API asks for approval before every MCP call unless you say otherwise. ActionLake's key grants and approval policy still gate what the key may do.
- Responses API: add an
mcptool. OpenAI sendsauthorizationasAuthorization: Bearer. - Agents SDK: open the server with
MCPServerStreamableHttp; the SDK runs the MCP client itself, with any model. - Give the agent a key with only the grants it needs. Make one below.
from openai import OpenAI
client = OpenAI()
response = client.responses.create(
model="gpt-5",
tools=[{
"type": "mcp",
"server_label": "actionlake",
"server_url": "https://connect.actionlake.com/mcp",
"authorization": "al_YOUR_KEY",
"require_approval": "never",
}],
input="Use actionlake: call help, then tell me what you can do.",
)
print(response.output_text)import asyncio
from agents import Agent, Runner
from agents.mcp import MCPServerStreamableHttp
async def main():
async with MCPServerStreamableHttp(
name="actionlake",
params={
"url": "https://connect.actionlake.com/mcp",
"headers": {"Authorization": "Bearer al_YOUR_KEY"},
},
cache_tools_list=True,
) as server:
agent = Agent(name="Assistant", instructions="Use actionlake to act on business systems.", mcp_servers=[server])
result = await Runner.run(agent, "Call help, then tell me what you can do.")
print(result.final_output)
asyncio.run(main())REST, from your own code
- The same eight tools answer as plain HTTPS under the same names. The OpenAPI document describes every route.
- No key yet? One unauthenticated call creates a tenant and returns its key, shown once.
- Every other request sends the key as
Authorization: Bearer(orX-API-Key).
curl -X POST https://api.actionlake.com/v1/account/tenant.create \
-H "Content-Type: application/json" -d '{"name": "acme"}'curl "https://api.actionlake.com/v1/actions?q=invoice" \
-H "Authorization: Bearer al_YOUR_KEY"Automation tools
n8n
- In an AI Agent node, add a tool: MCP Client Tool.
- Endpoint:
https://connect.actionlake.com/mcp. Server Transport: HTTP Streamable. - Authentication: Bearer Auth. Create a credential with your key as the token.
- Tools to Include: All.
Endpoint https://connect.actionlake.com/mcp
Server Transport HTTP Streamable
Authentication Bearer Auth
Bearer Token al_YOUR_KEYZapier
Zapier's MCP Client app is in beta.
- In a Zap, add an action from the MCP Client app.
- Connect a new account. Server URL below; Transport: Streamable HTTP.
- With a key: OAuth No, and paste the key as the Bearer Token. With sign-in: OAuth Yes, then sign in to ActionLake.
- Pick the tool to run, for example
do, and map its inputs.
Server URL https://connect.actionlake.com/mcp
Transport Streamable HTTP
OAuth No
Bearer Token al_YOUR_KEYAnything else
Any other MCP client
- Add a remote MCP server with the URL. ActionLake speaks the Streamable HTTP transport; choose it, not SSE.
- Send the key in any one of the three headers, or leave headers off and sign in with OAuth on the same URL.
- OAuth: PKCE (S256) with dynamic client registration. The consent page can create a free account in one click.
- Ask your agent to call
help. Eight tools: help, find_actions, get_action, do, ask, check, cost, account.
URL https://connect.actionlake.com/mcp
Header Authorization: Bearer al_YOUR_KEY
or Authorization: al_YOUR_KEY
or X-API-Key: al_YOUR_KEY
Sign-in OAuth 2.1 on the same URL, instead of a header{
"mcpServers": {
"actionlake": {
"type": "http",
"url": "https://connect.actionlake.com/mcp",
"headers": {
"Authorization": "Bearer al_YOUR_KEY"
}
}
}
}Stdio-only clients
For a client that can only start local servers, such as Claude Desktop's claude_desktop_config.json or JetBrains AI Assistant. Needs Node.js.
- Add the server to the client's MCP config.
mcp-remoteruns locally and forwards to ActionLake over HTTP. - The header has no space after the colon on purpose: some clients split arguments on spaces. The space lives in the environment variable instead.
- Signing in instead? Remove the two
--headerlines and theenvblock;mcp-remoteopens the ActionLake consent page in your browser. - Restart the client completely after editing its config.
{
"mcpServers": {
"actionlake": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://connect.actionlake.com/mcp",
"--transport",
"http-only",
"--header",
"Authorization:${AUTH_HEADER}"
],
"env": {
"AUTH_HEADER": "Bearer al_YOUR_KEY"
}
}
}
}Connect your agent.
100,000 free calls. No card. Hard caps on every key. Cached answers are free.