mcp-server-action1
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ACTION1_BASE_URL | Yes | The base URL for the Action1 API, e.g. https://app.eu.action1.com/api/3.0 | |
| ACTION1_CLIENT_ID | Yes | OAuth2 client ID for authentication | |
| ACTION1_CLIENT_SECRET | Yes | OAuth2 client secret for authentication | |
| ACTION1_ENABLE_WRITES | No | Set to 'true' to enable write operations like update approvals | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| action1_search_capabilitiesA | Search the Action1 MCP server capabilities and examples. Use this first when deciding which tool to call. |
| action1_list_organizationsA | List the Action1 organizations this credential can access. Start here — other tools need an orgId. |
| action1_list_endpointsA | Inventory of managed endpoints: name, OS, agent status, last seen, update/vulnerability status, reboot-required. All status filters accept the values shown in the Action1 console. fields="*" adds extended data. |
| action1_get_endpointA | Fetch one managed endpoint; includeMissingUpdates=true also returns its missing updates. |
| action1_list_endpoint_groupsA | List endpoint groups, one group (groupId), or its member endpoints (contents=true). |
| action1_list_updatesB | Available updates with approval status, severity, and affected endpoints. Filters: approvalStatus (New/Approved/Declined), securitySeverity, onlyLatest. packageId fetches a single update. |
| action1_list_vulnerabilitiesA | CVEs across endpoints with score and remediation status. cveId fetches one CVE; detail=endpoints|remediations lists affected machines or available fixes. |
| action1_get_installed_softwareA | Installed software inventory for the organization, or one endpoint with endpointId. |
| action1_list_software_repositoryB | Deployable packages in the software repository (read-only). |
| action1_list_scriptsA | The script library, read-only. This server can NOT run or edit scripts by design. |
| action1_list_automationsA | Scheduled automations (kind=schedules) or run history (kind=instances); endpointResults=true lists per-endpoint outcomes for one instance. Read-only — creating/running automations is deliberately not exposed. |
| action1_list_reportsA | List available built-in and custom reports. |
| action1_get_report_dataB | Fetch the data rows of a report for an organization. |
| action1_get_audit_logA | Enterprise-wide audit events, or org-scoped logs with orgId. |
| action1_set_update_approvalsA | Approve/decline updates for ONE organization. Approved updates are what scheduled automations deploy — confirm the list with the user before approving. Requires write access on this instance; orgId="all" is refused. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 15 tools
Each tool targets a distinct resource or action, with no overlapping purposes. The addition of action1_search_capabilities helps agents disambiguate further.
All tools follow a consistent 'action1_verb_noun' pattern using snake_case, with verbs limited to 'list', 'get', 'search', and 'set'.
15 tools cover the core capabilities of the Action1 platform (endpoints, updates, vulnerabilities, reports, etc.) without unnecessary bloat or deficiency.
The tool surface is comprehensive for viewing and reading data, and includes a critical write operation (set_update_approvals). However, it lacks tools for deploying software or running scripts, though this is by design.