action1-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | HTTP transport host. | 127.0.0.1 |
| PORT | No | HTTP transport port. | 3000 |
| TRUST_PROXY | No | Reverse-proxy hop trust for correct client IPs in rate-limiting. One of false / true / loopback / a CIDR. | false |
| ACTION1_ORG_ID | No | Default org UUID. Each tool can override via org_id. | |
| MCP_HTTP_TOKEN | No | Required Authorization: Bearer <token> on /mcp when set. Strongly recommended for any non-loopback bind. | |
| ACTION1_BASE_URL | Yes | Region-specific instance, e.g. https://app.eu.action1.com/api/3.0. | |
| ACTION1_CLIENT_ID | Yes | OAuth2 client id from Action1 → Settings → API Credentials. | |
| ACTION1_LOG_LEVEL | No | One of debug, info, notice, warn, warning, error, critical, alert, emergency. | info |
| ACTION1_CLIENT_SECRET | Yes | OAuth2 client secret. Shown once at credential creation. | |
| MCP_HTTP_ALLOWED_ORIGINS | No | Comma-separated allowlist for browser Origin headers. Required when binding to a non-loopback host — the server hard-fails to start otherwise. | |
| ACTION1_ALLOW_DESTRUCTIVE | No | Set to true / 1 / yes to allow tools with destructiveHint: true to mutate state. | false |
| ACTION1_DEFAULT_RETRY_MINUTES | No | Window during which Action1 retries when an endpoint is offline. | 1440 |
| ACTION1_DEFAULT_TIMEOUT_MINUTES | No | Per-action timeout (PowerShell, etc.). | 10 |
| ACTION1_LAST_SEEN_STALE_MINUTES | No | Minutes since last_seen before an endpoint is treated as offline (range 1–1440). | 10 |
| ACTION1_DESTRUCTIVE_AUTO_CONFIRM | No | Single-operator only: waives the per-call confirm: YES requirement. dry_run still defaults to true — pass dry_run: false to actually execute. Still requires ACTION1_ALLOW_DESTRUCTIVE=true. | false |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| action1_list_organizationsA | List every organization the configured API key can access. |
| action1_list_endpointsA | List endpoints with server-side filters (status, online_status, os, reboot_required, …). For counts, use action1_endpoints_summary instead. |
| action1_endpoints_summaryA | Walks every endpoint and returns counts (total, by status/platform/OS/online, reboot_required). ~1 KB output regardless of fleet size. |
| action1_get_endpointA | Fetch the general info block for a single endpoint, plus derived platform and connectivity.online flags. |
| action1_search_endpointsA | Substring search across hostname, user, OS, status. Walks pages client-side since Action1 has no server-side substring search. |
| action1_list_missing_updatesA | Returns missing-update items for one endpoint. Each item.id can be passed to action1_deploy_update. |
| action1_list_vulnerabilitiesA | Returns vulnerability findings for one endpoint. Returns a clear 403 if the API key lacks the vulnerabilities scope. |
| action1_list_action_templatesA | List every action template (id, name, description). Use ids with action1_get_action_template. |
| action1_get_action_templateA | Fetch full details (parameters, supported platforms) for a single action template by id. |
| action1_list_recent_automationsA | List recent automation instances for the org. For counts use action1_automations_summary instead. |
| action1_automations_summaryA | Walks recent automation instances and returns counts (by_status, by_template, success/failure). ~1 KB output. |
| action1_run_powershellA | Run PowerShell on a Windows endpoint via the run_powershell template. Runs as SYSTEM (no user profile). |
| action1_run_bash_macosA | Run a Bash script on a macOS endpoint via the run_script template. For OS-aware routing use action1_run_script. |
| action1_run_scriptA | Cross-platform script runner. Routes to PowerShell (Windows) or Bash (macOS); errors on Linux/unknown. |
| action1_reboot_endpointA | Reboots the host via the reboot action template. Combine with action1_wait_for_automation to track recovery. |
| action1_deploy_updateB | Deploy one or more updates (by package id) via the deploy_update template. |
| action1_deploy_packageB | Deploy software via the deploy_package template. Use action1_get_action_template for the params schema. |
| action1_uninstall_programA | Uninstall software via the uninstall_program template. Use action1_get_action_template for the params schema. |
| action1_run_data_collectionC | Trigger the run_data_collection template on an endpoint. |
| action1_get_automation_statusA | Returns the high-level status of one automation instance. For stdout use action1_get_automation_output. |
| action1_get_automation_resultsA | Per-endpoint result rollup for an instance. Use action1_get_automation_output for stdout. |
| action1_get_automation_outputA | Returns filtered stdout for one endpoint of an automation instance. Strips Action1 status markers. |
| action1_wait_for_automationA | Block until an automation instance reaches a terminal status (Success/Failed/Stopped/Error/Canceled) or timeout. |
| action1_execute_and_waitB | One-shot helper: starts an action (auto-routes by OS for 'script', or runs a template), polls until terminal, returns filtered output. |
| action1_create_organizationB | Create an organization. Creates a new organization. Perm: manage_organizations. |
| action1_get_meA | Get the current user settings. Gets settings for the currently authenticated… |
| action1_update_meC | Update the current user settings. Updates settings for the currently authenticated… |
| action1_searchC | Searching. Perm: view_endpoints, view_software_repository, view_reports. |
| action1_get_endpoints_onboarded_statusC | Checking endpoint status. Retrieves information if any endpoints were added to an organization. |
| action1_get_agent_install_urlB | Getting the URL for agent installation. In order to manage an endpoint, the Action1 agent needs to be installed on it first. Perm: manage_endpoints. |
| action1_update_endpointA | Changing an endpoint comment or name. Changes the user-defined 'comment', 'name' and custom attributes for the specified endpoint. Perm: manage_endpoint_attributes. |
| action1_delete_endpointB | Deleting an endpoint. Removes a specified endpoint and attempts to uninstall its agent. Perm: manage_endpoints. |
| action1_move_endpointB | Moving the endpoint to another organization. Moves the endpoint to another organization. Perm: manage_endpoints. |
| action1_list_endpoint_missing_updatesA | Filtered/paginated variant of action1_list_missing_updates (curated). Use for severity/approval_status/sortby filtering. Getting missing updates for an endpoint. Obtains a list of missing software updates for a specific endpoint. Perm: view_endpoints. |
| action1_list_endpoint_groupsB | Listing endpoint groups. Lists existing endpoint groups. Use filters and narrow down and sort the returned results. Perm: view_endpoints. |
| action1_create_endpoint_groupA | Creating a new group. Creates a new endpoint group within the specified organization. Perm: manage_endpoints. |
| action1_get_groupB | Getting an endpoint group. Gets a specific endpoint group by its ID. Perm: view_endpoints. |
| action1_update_groupB | Changing group settings. Changes settings for an existing endpoint group in the specified organization. Perm: manage_endpoints. |
| action1_delete_groupB | Deleting an endpoint group. Deletes an existing group in the specified organization. Perm: manage_endpoints. |
| action1_list_group_contentsA | Listing endpoints from the group. Lists all endpoints included in the specified group. Perm: view_endpoints. |
| action1_create_endpoint_remote_sessionC | Starting a new remote session. Sends a request to the endpoint to start a new remote session. Perm: remote_connect. |
| action1_get_remote_sessionA | Getting a remote session. Gets details for an existing remote session specified by ID. Perm: remote_connect. |
| action1_update_remote_sessionB | Switching a current monitor. Changes the 'current_monitor' parameter for a specific remote session. Perm: remote_connect. |
| action1_get_endpoint_discovery_settingsA | Getting Agent Deployment settings. Obtains the current Agent Deployment settings in a specified organization. Perm: manage_endpoints. |
| action1_update_endpoint_agent_deploymentC | Updating Agent Deployment settings. Updates the Agent Deployment configuration for a specific organization. Perm: manage_endpoints. |
| action1_list_endpoint_deployersB | Listing Deployers. Lists all Action1 Deployer services in the specified organization. Perm: manage_endpoints. |
| action1_get_windows_deployer_urlA | Getting Deployer installation URL. Obtains an URL to download the Deployer installation… Perm: manage_endpoints. |
| action1_get_deployerA | Getting a specific Deployer. Obtains the current information about the specified Action1 Deployer service. Perm: manage_endpoints. |
| action1_delete_deployerB | Deleting Deployer. Perm: manage_endpoints. |
| action1_list_data_sourcesA | Listing data sources. Gets a list of existing data sources. To filter out built-in data sources, set the 'builtin'. Perm: manage_data_sources, manage_reports. |
| action1_create_data_sourceA | Creating a data source. Creates a new custom data source. At this time, all data sources are enterprise-wide. Perm: manage_data_sources. |
| action1_get_data_sourceA | Getting a specific data source. Gets details about a specific data source. Perm: manage_data_sources, manage_reports. |
| action1_update_data_sourceB | Updating a custom data source. Updates a custom data source specified by its ID. Perm: manage_data_sources. |
| action1_delete_data_sourceA | Deleting a custom data source. Deletes an existing custom data source. Note that you cannot remove built-in data sources. Perm: manage_data_sources. |
| action1_list_scriptsA | Listing scripts. Gets a list of existing scripts from the Script Library. Perm: use_scripts. |
| action1_create_scriptA | Creating a custom script. Creates a new custom script and adds it to the Script Library. Perm: manage_scripts. |
| action1_get_scriptA | Getting a specific script. Gets details for a script specified by its ID. Perm: use_scripts. |
| action1_update_scriptB | Updating a custom script. Updates details for an existing custom script specified by its ID. Perm: manage_scripts. |
| action1_delete_scriptA | Deleting a custom script. Deletes an existing custom script specified by its ID. Perm: manage_scripts. |
| action1_list_setting_templatesB | Listing setting templates. Gets a list of existing setting templates. |
| action1_get_setting_templateB | Getting a setting template. Gets details about a setting template specified by its ID. |
| action1_list_settingsA | Listing settings. Lists all existing settings. At this time, all settings are enterprise-wide. Perm: manage_advanced_settings. |
| action1_create_settingC | Creating a new setting. Creates a new setting. At this time, all setting templates are enterprise-wide. Perm: manage_advanced_settings. |
| action1_get_settingA | Getting setting configuration. Gets details about the setting configuration. Perm: manage_advanced_settings. |
| action1_update_settingB | Updating a setting. Updates an existing setting specified by its ID. Perm: manage_advanced_settings. |
| action1_delete_settingA | Deleting a setting. Deletes an existing setting specified by its ID. Perm: manage_advanced_settings. |
| action1_list_reportsA | Listing reports. Gets a list of existing reports. At this time all reports are enterprise-wide. |
| action1_get_report_or_categoryC | Listing reports and categories. Gets a list of reports and categories. At this time all reports are enterprise-wide. |
| action1_create_reportB | Creating a custom report. Creates a custom report in the predefined Custom report category. Perm: manage_reports. |
| action1_update_reportC | Updating a custom report. Updates a custom report. You cannot changes a custom report's category. Perm: manage_reports. |
| action1_delete_reportA | Deleting a custom report. Deletes a custom report specified by its ID. Perm: manage_reports. |
| action1_list_report_dataC | Getting report rows. Gets data organized by report rows. Use parameters to filter out returned results. Perm: view_reports. |
| action1_list_report_errorsA | Getting report errors. Returns report errors for the specified report. Perm: view_reports. |
| action1_get_export_for_reportB | Exporting a report. Exports data from the report. Use parameters to filter out exported… Perm: view_reports. |
| action1_requery_reportA | Re-querying a report. This API method initiates an asynchronous update ("requery") of the report's underlying data source. Perm: view_reports. |
| action1_get_drilldown_for_report_rowB | Drilling down to details. Expands report details to provide more information. Perm: view_reports. |
| action1_get_export_for_report_rowC | Exporting report details. Exports reports data. Use parameters to filter out exported… Perm: view_reports. |
| action1_list_software_repositoryA | List Software Repository packages. Gets a list of Software Repository packages for the entire enterprise. Perm: view_software_repository. |
| action1_create_packageA | Create new Software Repository package. Create a new custom Software Repository package object (with no versions) and set its initial basic. Perm: manage_software_repository. |
| action1_get_software_repository_packageA | Get Software Repository package settings. Gets details for a Software Repository package specified by its ID. Perm: view_software_repository. |
| action1_update_packageA | Update Software Repository package settings. Perm: manage_software_repository. |
| action1_delete_packageA | Delete custom Software Repository package. Deletes a custom Software Repository package specified by its ID. Perm: manage_software_repository. |
| action1_clone_packageA | Clone Software Repository package. Creates a full copy of an existing Software Repository package under a new package ID. Perm: manage_software_repository. |
| action1_create_package_versionC | Create new version in Software Repository package. Adds a new version to the specified Software Repository package. Perm: manage_software_repository. |
| action1_get_versionA | Get version in Software Repository package. Gets details about a package version specified by its ID. Perm: view_software_repository. |
| action1_update_versionC | Modify version in Software Repository package. - |
| action1_delete_versionA | Delete version from Software Repository package. Deletes the specified version of the specified custom Software Repository package. Perm: manage_software_repository. |
| action1_delete_package_version_actionC | Delete additional action from version of Software Repository package. Deletes the specified additional action from the specified custom… Perm: manage_software_repository. |
| action1_get_match_conflicts_for_software_repositoryA | Check for Software Repository package matching conflicts before creating a new package version… Perm: view_software_repository. |
| action1_get_match_conflicts_for_packageC | Check for package matching conflicts when editing and existing package version… Perm: view_software_repository. |
| action1_init_software_uploadC | Initialize package file upload. Initializes package file upload. The client starts by sending the initial upload request. Perm: manage_software_repository. |
| action1_upload_software_chunkC | Upload package file chunks. Uploads package file chunks. Perm: manage_software_repository. |
| action1_list_updatesC | Listing missing updates. Gets a list of all missing updates. Use parameters to filter out updates in the returned results. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_get_update_packageA | Listing updates for a package. Gets a list of updates available for a package specified by its ID. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_list_version_endpointsB | Listing endpoints missing a specific update. Gets a list of endpoints that are missing updates for a specific package and its version,. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_list_installed_software_dataB | Getting installed apps. Gets a list of installed apps. Use parameters to filter out apps in the returned results. Perm: view_installed_software. |
| action1_requery_installed_software_for_orgA | Re-querying installed apps. This API method initiates an asynchronous update ("requery") of the installed software inventory. Perm: view_installed_software. |
| action1_list_installed_software_errorsC | Getting apps report errors. Returns apps report errors. Use parameters to filter out returned results. Perm: view_installed_software. |
| action1_get_installed_software_endpointB | Getting installed apps on a specific endpoint. Gets a list of installed apps on an endpoint specified by its ID. Perm: view_installed_software, view_endpoints. |
| action1_requery_installed_software_for_endpointA | Re-querying installed apps on a specific endpoint. This API method initiates an asynchronous update ("requery") of the installed software… Perm: view_installed_software, view_endpoints. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| patch-windows-fleet | Walks through resolving an endpoint group, picking the missing-update set, previewing the deploy, and executing it once you confirm. |
| audit-vulnerabilities | Surveys org-wide vulnerabilities, ranks the worst, builds a remediation plan, presents it for approval — no execution by default. |
| triage-offline-endpoints | Walks the endpoint inventory and surfaces hosts whose status or last_seen suggest they are not actually online. |
| run-script-fleetwide | Runs the supplied script (PowerShell on Windows, Bash on macOS via OS-aware routing) on every member of a group. Read-only by default — guard rails on. |
| software-inventory-sweep | Find every endpoint that has (or doesn't have) a given software package installed. |
| check-my-permissions | Reads the /me identity, lists the granted permissions, and flags which tool families will 403 with this role. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| me | The authenticated API user (GET /me). Useful as a startup probe — agents can read this to know which permissions / role they have before calling potentially-403 tools. |
| organizations | All organizations the configured API key can access (GET /organizations). |
| templates | All action templates (run_powershell, run_script, deploy_update, …) with their parameter shapes (GET /automations/action-templates). |
| reports | All reports the API key can see (GET /reports/all). Use action1_report_export to fetch one by id or name fragment. |
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/mguttmann/action1-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server