Skip to main content
Glama
mguttmann
by mguttmann

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
HOSTNoHTTP transport host.127.0.0.1
PORTNoHTTP transport port.3000
TRUST_PROXYNoReverse-proxy hop trust for correct client IPs in rate-limiting. One of false / true / loopback / a CIDR.false
ACTION1_ORG_IDNoDefault org UUID. Each tool can override via org_id.
MCP_HTTP_TOKENNoRequired Authorization: Bearer <token> on /mcp when set. Strongly recommended for any non-loopback bind.
ACTION1_BASE_URLYesRegion-specific instance, e.g. https://app.eu.action1.com/api/3.0.
ACTION1_CLIENT_IDYesOAuth2 client id from Action1 → Settings → API Credentials.
ACTION1_LOG_LEVELNoOne of debug, info, notice, warn, warning, error, critical, alert, emergency.info
ACTION1_CLIENT_SECRETYesOAuth2 client secret. Shown once at credential creation.
MCP_HTTP_ALLOWED_ORIGINSNoComma-separated allowlist for browser Origin headers. Required when binding to a non-loopback host — the server hard-fails to start otherwise.
ACTION1_ALLOW_DESTRUCTIVENoSet to true / 1 / yes to allow tools with destructiveHint: true to mutate state.false
ACTION1_DEFAULT_RETRY_MINUTESNoWindow during which Action1 retries when an endpoint is offline.1440
ACTION1_DEFAULT_TIMEOUT_MINUTESNoPer-action timeout (PowerShell, etc.).10
ACTION1_LAST_SEEN_STALE_MINUTESNoMinutes since last_seen before an endpoint is treated as offline (range 1–1440).10
ACTION1_DESTRUCTIVE_AUTO_CONFIRMNoSingle-operator only: waives the per-call confirm: YES requirement. dry_run still defaults to true — pass dry_run: false to actually execute. Still requires ACTION1_ALLOW_DESTRUCTIVE=true.false

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tools
{
  "listChanged": true
}
logging
{}
prompts
{
  "listChanged": true
}
resources
{
  "listChanged": true
}

Tools

Functions exposed to the LLM to take actions

NameDescription
action1_list_organizationsA

List every organization the configured API key can access.

action1_list_endpointsA

List endpoints with server-side filters (status, online_status, os, reboot_required, …). For counts, use action1_endpoints_summary instead.

action1_endpoints_summaryA

Walks every endpoint and returns counts (total, by status/platform/OS/online, reboot_required). ~1 KB output regardless of fleet size.

action1_get_endpointA

Fetch the general info block for a single endpoint, plus derived platform and connectivity.online flags.

action1_search_endpointsA

Substring search across hostname, user, OS, status. Walks pages client-side since Action1 has no server-side substring search.

action1_list_missing_updatesA

Returns missing-update items for one endpoint. Each item.id can be passed to action1_deploy_update.

action1_list_vulnerabilitiesA

Returns vulnerability findings for one endpoint. Returns a clear 403 if the API key lacks the vulnerabilities scope.

action1_list_action_templatesA

List every action template (id, name, description). Use ids with action1_get_action_template.

action1_get_action_templateA

Fetch full details (parameters, supported platforms) for a single action template by id.

action1_list_recent_automationsA

List recent automation instances for the org. For counts use action1_automations_summary instead.

action1_automations_summaryA

Walks recent automation instances and returns counts (by_status, by_template, success/failure). ~1 KB output.

action1_run_powershellA

Run PowerShell on a Windows endpoint via the run_powershell template. Runs as SYSTEM (no user profile).

action1_run_bash_macosA

Run a Bash script on a macOS endpoint via the run_script template. For OS-aware routing use action1_run_script.

action1_run_scriptA

Cross-platform script runner. Routes to PowerShell (Windows) or Bash (macOS); errors on Linux/unknown.

action1_reboot_endpointA

Reboots the host via the reboot action template. Combine with action1_wait_for_automation to track recovery.

action1_deploy_updateB

Deploy one or more updates (by package id) via the deploy_update template.

action1_deploy_packageB

Deploy software via the deploy_package template. Use action1_get_action_template for the params schema.

action1_uninstall_programA

Uninstall software via the uninstall_program template. Use action1_get_action_template for the params schema.

action1_run_data_collectionC

Trigger the run_data_collection template on an endpoint.

action1_get_automation_statusA

Returns the high-level status of one automation instance. For stdout use action1_get_automation_output.

action1_get_automation_resultsA

Per-endpoint result rollup for an instance. Use action1_get_automation_output for stdout.

action1_get_automation_outputA

Returns filtered stdout for one endpoint of an automation instance. Strips Action1 status markers.

action1_wait_for_automationA

Block until an automation instance reaches a terminal status (Success/Failed/Stopped/Error/Canceled) or timeout.

action1_execute_and_waitB

One-shot helper: starts an action (auto-routes by OS for 'script', or runs a template), polls until terminal, returns filtered output.

action1_create_organizationB

Create an organization. Creates a new organization. Perm: manage_organizations.

action1_get_meA

Get the current user settings. Gets settings for the currently authenticated…

action1_update_meC

Update the current user settings. Updates settings for the currently authenticated…

action1_searchC

Searching. Perm: view_endpoints, view_software_repository, view_reports.

action1_get_endpoints_onboarded_statusC

Checking endpoint status. Retrieves information if any endpoints were added to an organization.

action1_get_agent_install_urlB

Getting the URL for agent installation. In order to manage an endpoint, the Action1 agent needs to be installed on it first. Perm: manage_endpoints.

action1_update_endpointA

Changing an endpoint comment or name. Changes the user-defined 'comment', 'name' and custom attributes for the specified endpoint. Perm: manage_endpoint_attributes.

action1_delete_endpointB

Deleting an endpoint. Removes a specified endpoint and attempts to uninstall its agent. Perm: manage_endpoints.

action1_move_endpointB

Moving the endpoint to another organization. Moves the endpoint to another organization. Perm: manage_endpoints.

action1_list_endpoint_missing_updatesA

Filtered/paginated variant of action1_list_missing_updates (curated). Use for severity/approval_status/sortby filtering. Getting missing updates for an endpoint. Obtains a list of missing software updates for a specific endpoint. Perm: view_endpoints.

action1_list_endpoint_groupsB

Listing endpoint groups. Lists existing endpoint groups. Use filters and narrow down and sort the returned results. Perm: view_endpoints.

action1_create_endpoint_groupA

Creating a new group. Creates a new endpoint group within the specified organization. Perm: manage_endpoints.

action1_get_groupB

Getting an endpoint group. Gets a specific endpoint group by its ID. Perm: view_endpoints.

action1_update_groupB

Changing group settings. Changes settings for an existing endpoint group in the specified organization. Perm: manage_endpoints.

action1_delete_groupB

Deleting an endpoint group. Deletes an existing group in the specified organization. Perm: manage_endpoints.

action1_list_group_contentsA

Listing endpoints from the group. Lists all endpoints included in the specified group. Perm: view_endpoints.

action1_create_endpoint_remote_sessionC

Starting a new remote session. Sends a request to the endpoint to start a new remote session. Perm: remote_connect.

action1_get_remote_sessionA

Getting a remote session. Gets details for an existing remote session specified by ID. Perm: remote_connect.

action1_update_remote_sessionB

Switching a current monitor. Changes the 'current_monitor' parameter for a specific remote session. Perm: remote_connect.

action1_get_endpoint_discovery_settingsA

Getting Agent Deployment settings. Obtains the current Agent Deployment settings in a specified organization. Perm: manage_endpoints.

action1_update_endpoint_agent_deploymentC

Updating Agent Deployment settings. Updates the Agent Deployment configuration for a specific organization. Perm: manage_endpoints.

action1_list_endpoint_deployersB

Listing Deployers. Lists all Action1 Deployer services in the specified organization. Perm: manage_endpoints.

action1_get_windows_deployer_urlA

Getting Deployer installation URL. Obtains an URL to download the Deployer installation… Perm: manage_endpoints.

action1_get_deployerA

Getting a specific Deployer. Obtains the current information about the specified Action1 Deployer service. Perm: manage_endpoints.

action1_delete_deployerB

Deleting Deployer. Perm: manage_endpoints.

action1_list_data_sourcesA

Listing data sources. Gets a list of existing data sources. To filter out built-in data sources, set the 'builtin'. Perm: manage_data_sources, manage_reports.

action1_create_data_sourceA

Creating a data source. Creates a new custom data source. At this time, all data sources are enterprise-wide. Perm: manage_data_sources.

action1_get_data_sourceA

Getting a specific data source. Gets details about a specific data source. Perm: manage_data_sources, manage_reports.

action1_update_data_sourceB

Updating a custom data source. Updates a custom data source specified by its ID. Perm: manage_data_sources.

action1_delete_data_sourceA

Deleting a custom data source. Deletes an existing custom data source. Note that you cannot remove built-in data sources. Perm: manage_data_sources.

action1_list_scriptsA

Listing scripts. Gets a list of existing scripts from the Script Library. Perm: use_scripts.

action1_create_scriptA

Creating a custom script. Creates a new custom script and adds it to the Script Library. Perm: manage_scripts.

action1_get_scriptA

Getting a specific script. Gets details for a script specified by its ID. Perm: use_scripts.

action1_update_scriptB

Updating a custom script. Updates details for an existing custom script specified by its ID. Perm: manage_scripts.

action1_delete_scriptA

Deleting a custom script. Deletes an existing custom script specified by its ID. Perm: manage_scripts.

action1_list_setting_templatesB

Listing setting templates. Gets a list of existing setting templates.

action1_get_setting_templateB

Getting a setting template. Gets details about a setting template specified by its ID.

action1_list_settingsA

Listing settings. Lists all existing settings. At this time, all settings are enterprise-wide. Perm: manage_advanced_settings.

action1_create_settingC

Creating a new setting. Creates a new setting. At this time, all setting templates are enterprise-wide. Perm: manage_advanced_settings.

action1_get_settingA

Getting setting configuration. Gets details about the setting configuration. Perm: manage_advanced_settings.

action1_update_settingB

Updating a setting. Updates an existing setting specified by its ID. Perm: manage_advanced_settings.

action1_delete_settingA

Deleting a setting. Deletes an existing setting specified by its ID. Perm: manage_advanced_settings.

action1_list_reportsA

Listing reports. Gets a list of existing reports. At this time all reports are enterprise-wide.

action1_get_report_or_categoryC

Listing reports and categories. Gets a list of reports and categories. At this time all reports are enterprise-wide.

action1_create_reportB

Creating a custom report. Creates a custom report in the predefined Custom report category. Perm: manage_reports.

action1_update_reportC

Updating a custom report. Updates a custom report. You cannot changes a custom report's category. Perm: manage_reports.

action1_delete_reportA

Deleting a custom report. Deletes a custom report specified by its ID. Perm: manage_reports.

action1_list_report_dataC

Getting report rows. Gets data organized by report rows. Use parameters to filter out returned results. Perm: view_reports.

action1_list_report_errorsA

Getting report errors. Returns report errors for the specified report. Perm: view_reports.

action1_get_export_for_reportB

Exporting a report. Exports data from the report. Use parameters to filter out exported… Perm: view_reports.

action1_requery_reportA

Re-querying a report. This API method initiates an asynchronous update ("requery") of the report's underlying data source. Perm: view_reports.

action1_get_drilldown_for_report_rowB

Drilling down to details. Expands report details to provide more information. Perm: view_reports.

action1_get_export_for_report_rowC

Exporting report details. Exports reports data. Use parameters to filter out exported… Perm: view_reports.

action1_list_software_repositoryA

List Software Repository packages. Gets a list of Software Repository packages for the entire enterprise. Perm: view_software_repository.

action1_create_packageA

Create new Software Repository package. Create a new custom Software Repository package object (with no versions) and set its initial basic. Perm: manage_software_repository.

action1_get_software_repository_packageA

Get Software Repository package settings. Gets details for a Software Repository package specified by its ID. Perm: view_software_repository.

action1_update_packageA

Update Software Repository package settings. Perm: manage_software_repository.

action1_delete_packageA

Delete custom Software Repository package. Deletes a custom Software Repository package specified by its ID. Perm: manage_software_repository.

action1_clone_packageA

Clone Software Repository package. Creates a full copy of an existing Software Repository package under a new package ID. Perm: manage_software_repository.

action1_create_package_versionC

Create new version in Software Repository package. Adds a new version to the specified Software Repository package. Perm: manage_software_repository.

action1_get_versionA

Get version in Software Repository package. Gets details about a package version specified by its ID. Perm: view_software_repository.

action1_update_versionC

Modify version in Software Repository package. - accept_eula - for "EULA_accepted" property - approve_updates - for "approval_status

action1_delete_versionA

Delete version from Software Repository package. Deletes the specified version of the specified custom Software Repository package. Perm: manage_software_repository.

action1_delete_package_version_actionC

Delete additional action from version of Software Repository package. Deletes the specified additional action from the specified custom… Perm: manage_software_repository.

action1_get_match_conflicts_for_software_repositoryA

Check for Software Repository package matching conflicts before creating a new package version… Perm: view_software_repository.

action1_get_match_conflicts_for_packageC

Check for package matching conflicts when editing and existing package version… Perm: view_software_repository.

action1_init_software_uploadC

Initialize package file upload. Initializes package file upload. The client starts by sending the initial upload request. Perm: manage_software_repository.

action1_upload_software_chunkC

Upload package file chunks. Uploads package file chunks. Perm: manage_software_repository.

action1_list_updatesC

Listing missing updates. Gets a list of all missing updates. Use parameters to filter out updates in the returned results. Perm: approve_updates, view_dashboards, manage_automations.

action1_get_update_packageA

Listing updates for a package. Gets a list of updates available for a package specified by its ID. Perm: approve_updates, view_dashboards, manage_automations.

action1_list_version_endpointsB

Listing endpoints missing a specific update. Gets a list of endpoints that are missing updates for a specific package and its version,. Perm: approve_updates, view_dashboards, manage_automations.

action1_list_installed_software_dataB

Getting installed apps. Gets a list of installed apps. Use parameters to filter out apps in the returned results. Perm: view_installed_software.

action1_requery_installed_software_for_orgA

Re-querying installed apps. This API method initiates an asynchronous update ("requery") of the installed software inventory. Perm: view_installed_software.

action1_list_installed_software_errorsC

Getting apps report errors. Returns apps report errors. Use parameters to filter out returned results. Perm: view_installed_software.

action1_get_installed_software_endpointB

Getting installed apps on a specific endpoint. Gets a list of installed apps on an endpoint specified by its ID. Perm: view_installed_software, view_endpoints.

action1_requery_installed_software_for_endpointA

Re-querying installed apps on a specific endpoint. This API method initiates an asynchronous update ("requery") of the installed software… Perm: view_installed_software, view_endpoints.

Prompts

Interactive templates invoked by user choice

NameDescription
patch-windows-fleetWalks through resolving an endpoint group, picking the missing-update set, previewing the deploy, and executing it once you confirm.
audit-vulnerabilitiesSurveys org-wide vulnerabilities, ranks the worst, builds a remediation plan, presents it for approval — no execution by default.
triage-offline-endpointsWalks the endpoint inventory and surfaces hosts whose status or last_seen suggest they are not actually online.
run-script-fleetwideRuns the supplied script (PowerShell on Windows, Bash on macOS via OS-aware routing) on every member of a group. Read-only by default — guard rails on.
software-inventory-sweepFind every endpoint that has (or doesn't have) a given software package installed.
check-my-permissionsReads the /me identity, lists the granted permissions, and flags which tool families will 403 with this role.

Resources

Contextual data attached and managed by the client

NameDescription
meThe authenticated API user (GET /me). Useful as a startup probe — agents can read this to know which permissions / role they have before calling potentially-403 tools.
organizationsAll organizations the configured API key can access (GET /organizations).
templatesAll action templates (run_powershell, run_script, deploy_update, …) with their parameter shapes (GET /automations/action-templates).
reportsAll reports the API key can see (GET /reports/all). Use action1_report_export to fetch one by id or name fragment.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mguttmann/action1-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server