AI agents for MSPs, finance and IT Made for the people who run the systems.
actionlake lets AI agents work across the systems your team already runs: PSA, RMM, accounting, CRM and Microsoft 365. MSPs ask one question across the PSA and the books, finance turns a written procedure into a scheduled plan, and security gives every agent a scoped key, a cap and a named approver.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
- 100,000 free calls, no card
- 1,000+ connectors · 289,000+ actions
- Every run on the record
01 · For MSPs
One question across the PSA, the RMM and the books.
Which clients are 30 days overdue and have an urgent ticket open? One question. One answer. On the record.
Every client is a different stack and your technicians are the glue. actionlake connects HaloPSA, Autotask, ConnectWise, NinjaOne, IT Glue, Hudu, Pax8, CIPP, ScreenConnect and Microsoft 365 behind one endpoint: joined per client, paced to the limit each connector declares, billed only when a request reaches a vendor.
- Reconcile tickets, time and invoices in one question
- Every run names its key, so agent work is attributable, and rebillable
- A tenant-wide cache protects the vendor quota your billing and ticket sync depend on
- Every Monday: a scheduled plan asks what changed since last week
100,000 free calls. No card. Connect HaloPSA or Autotask with the API key you already hold. Running a client book? Team gives you 100 connections.
Counted from the catalog, 24 October 2026
- HaloPSA465
- ConnectWise PSA927
- NinjaOne244
- IT Glue228
- CIPP710
- Autotask62
- Pax899
- Kaseya BMS363
- Atera86
- Syncro190
- ScalePad378
- DNSFilter245
- service.ticket.createreaches 54 connectors
Objection"My techs will not learn a new tool."
AnswerThey do not. They ask Claude. The desk key gets service.ticket.* and a cap; nothing else is reachable.
02 · For finance and operations
Never build an automation again.
Tell your AI what needs doing. It does it, in QuickBooks, in NetSuite, in your CRM, and does it again next week without being asked.
You do not need a developer, and you do not need to build anything. Ask in plain words. Your agent finds the action, checks it, runs it, and saves the run as a plan. Give it read-only and a budget of a few dollars. Require your approval for every write. Then read the record.
- Chase every invoice over 30 days and open a ticket for the account manager
- Find closed work that was never invoiced
- Approve each payment from an emailed link; the run waits
- A bank statement for your AI: every action a line item
100,000 free calls. No card. A hard budget on every key. Cached answers are free.
Pay $12,400 to Acme Ltd?
intent: the user asked me to settle the approved October invoices
Objection"I don't trust AI in my finance system."
AnswerGood. Give it read-only. Give it a budget of ten dollars. Require your approval for every write. Then read the record. Trust is a dial, not a leap.
03 · For enterprise IT and security
Say yes to agents.
Keep control of every action.
One vault for every credential. A scope and a budget for every agent. A sealed record of every action, including why it was taken.
There are agents in your company already. actionlake puts one layer between them and your systems: credentials sealed under a per-tenant key and never in a prompt; keys that hand down only what they hold; caps enforced before dispatch; approvals a named person decides; a hash-chained ledger sealed daily. And a trust page that says plainly what is not yet true.
- AES-256-GCM envelope per tenant; no endpoint returns a credential
- caps refused before dispatch; confirm_policy per key
- approvals by a named person, in the console or from a signed link
- sha256(prev_hash + row), chain head sealed daily; traces per plan window
- one door out: allowed hosts per connector, private ranges refused, 22 SSRF shapes tested
- one region you can name: Sydney. No model on the data path. No training on your traffic.
An engineer reads it. No shortcuts on this path: every control is published as it stands, and so is every gap.
- r_84,211desk-agentask · invoices + tickets✓ 4 rowsprev 7b10…e4c2 · sha256 a3f9…c21e · $0.002
- r_84,212desk-agentdo · halopsa service.ticket.create✓ #48112prev a3f9…c21e · sha256 0d77…91af · $0.002
- r_84,213billing-agentdo · xero finance.payment.create✓ approvedprev 0d77…91af · sha256 5c2e…77b0 · $0.002intent: "the user asked me to settle the approved October invoices"
- r_84,214researchdo · hubspot crm.company.listrefused · capprev 5c2e…77b0 · sha256 e91b…04d6 · $0.000
Identity, workspace, service and infrastructure connectors, counted 24 October 2026
- Okta646
- Microsoft 365274
- Google Workspace Directory128
- JumpCloud506
- ServiceNow126
- Jira604
- Datadog586
- PagerDuty451
- Kubernetes578
- Dedicated IPone static address your vendors can allow-list
Objection"No SOC 2."
AnswerSOC 2 Type II, ISO 27001 and a third-party penetration test are in progress. Meanwhile every control is published as it stands, machine-readable, with what would close each gap. The trust page lists every absence. Bring the questionnaire.
04 · For developers and agent builders
Eight tools.
Every system.
One MCP endpoint and a REST twin. Credentials held, pagination handled, calls paced to the limit each connector declares, results cached and joined. Add a hundred systems; the tool list never grows.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcp- OAuth 2.1 with dynamic client registration, or a bearer key
checkis a free dry run that returns the estimate- Every response carries
AL-Calls,AL-Micros,AL-Cache - Tenants, keys, caps and connections are all
accountcalls: your product can set up its own customers - Your own APIs join the catalog as a private connector only you can see
$ claude mcp add --transport http actionlake https://connect.actionlake.com/mcp ✓ connected - help, find_actions, get_action, do, ask, check, cost, account > check {action: "halopsa.service.ticket.create", input: {…}} ok · permitted · 1 call · $0.0003 · nothing was sent > do {action: "halopsa.service.ticket.create", input: {…}, intent: "printer on level 2 at Acme"} ✓ ticket #48112 AL-Calls: 1 · AL-Micros: 300 · AL-Cache: MISS
Objection"Can't the model just call the APIs itself?"
AnswerIt can. It cannot hold the credentials, share a cache across your agents, protect a shared vendor quota, know that two IDs in two systems are the same customer, or produce a record your auditor accepts. That is what you are buying.
05 · For software makers
Make your software
AI-ready. Today.
Publish your API once. Every agent can use it, with limits and a record you did not have to build. Earn a share of every call.
Your customers are asking whether you work with AI. A connector is one JSON file; your agent can draft it from the documentation you already have. Publish it privately to test, list it in the store after review, and earn 25% of every upstream call it serves, settled 30 days after the month.
- 25% revenue share on upstream calls, reviewed annually
- Nothing earned on cache hits; nobody is billed for them either
- Installs and error rate shown on every listing
Then draft a connector from your docs. The agent does it; you need an API document and a sandbox key.
- service.draftdocs URL → fetched through the egress guard → authoring kit + skeleton
- service.validateALCM grammar · every action's schema · allowed hosts
- testlive against your sandbox key · only live-tested actions are marked working
- publishsigned (Ed25519) · private to your tenant · listed only after review
Objection"We have no AI team."
AnswerYou need an API document and a sandbox key. The agent drafts, validates and tests; only live-tested actions are marked working.
07Questions
Questions from every door.
MSPs, finance, security and software makers ask different things first. The answers, in the open.
Can an AI agent work across my PSA, RMM and accounting system?01
Yes. actionlake connects HaloPSA, Autotask, ConnectWise, NinjaOne, IT Glue, Pax8, CIPP, ScreenConnect and Microsoft 365, plus Xero, QuickBooks and MYOB. One question can join them on the same client, for example overdue invoices with open urgent tickets, and only the answer comes back.
Will my technicians have to learn a new tool?02
No. They ask Claude in plain words. The desk agent's key can be limited to service.ticket.* with a cap, so nothing else is reachable, and every action it takes is on the record with its reason.
Can I bill clients for agent work?03
Every run names the key that ran it, its cost and its reason, so agent work is attributable per key. Give each client's work its own key to separate it, and read the runs per key in the console.
Can finance automate a written procedure without building a workflow?04
Yes. Hand the procedure to your agent; it builds a plan from it. The plan is versioned, can run on a schedule under its own key and budget, and can stop for a named person's approval before any write.
Will agents use up our vendor API quota?05
Calls are paced to each connector's declared limit, reads are served from a tenant-wide cache where they can be, and each key has a cap that is refused before dispatch. Cached answers are free and spend none of the vendor's rate limit.
Can our security team review actionlake?06
Yes. The trust page and a machine-readable trust document list every mechanism and every gap. actionlake holds no SOC 2 or ISO 27001 certification yet; both, and a third-party penetration test, are in progress, and the trust page says so. A DPA summary is published.
Can I make my software available to AI agents?07
Yes. Describe your API as a connector file, which your agent can draft from your documentation, and publish it. After review it is listed for every actionlake account, and you earn 25% of the per-call rate on its upstream calls.
Your systems. Their agent. One record.
100,000 free calls. No card. Hard caps on every key. Cached answers are free.