action1-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | HTTP transport host. | 127.0.0.1 |
| PORT | No | HTTP transport port. | 3000 |
| TRUST_PROXY | No | Reverse-proxy hop trust for correct client IPs in rate-limiting. One of false / true / loopback / a CIDR. | false |
| ACTION1_ORG_ID | No | Default org UUID. Each tool can override via org_id. | |
| MCP_HTTP_TOKEN | No | Required Authorization: Bearer <token> on /mcp when set. Strongly recommended for any non-loopback bind. | |
| ACTION1_BASE_URL | Yes | Region-specific instance, e.g. https://app.eu.action1.com/api/3.0. | |
| ACTION1_CLIENT_ID | Yes | OAuth2 client id from Action1 → Settings → API Credentials. | |
| ACTION1_LOG_LEVEL | No | One of debug, info, notice, warn, warning, error, critical, alert, emergency. | info |
| ACTION1_CLIENT_SECRET | Yes | OAuth2 client secret. Shown once at credential creation. | |
| MCP_HTTP_ALLOWED_ORIGINS | No | Comma-separated allowlist for browser Origin headers. Required when binding to a non-loopback host — the server hard-fails to start otherwise. | |
| ACTION1_ALLOW_DESTRUCTIVE | No | Set to true / 1 / yes to allow tools with destructiveHint: true to mutate state. | false |
| ACTION1_DEFAULT_RETRY_MINUTES | No | Window during which Action1 retries when an endpoint is offline. | 1440 |
| ACTION1_DEFAULT_TIMEOUT_MINUTES | No | Per-action timeout (PowerShell, etc.). | 10 |
| ACTION1_LAST_SEEN_STALE_MINUTES | No | Minutes since last_seen before an endpoint is treated as offline (range 1–1440). | 10 |
| ACTION1_DESTRUCTIVE_AUTO_CONFIRM | No | Single-operator only: waives the per-call confirm: YES requirement. dry_run still defaults to true — pass dry_run: false to actually execute. Still requires ACTION1_ALLOW_DESTRUCTIVE=true. | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| action1_list_organizationsA | List every organization the configured API key can access. |
| action1_list_endpointsA | List endpoints with server-side filters (status, online_status, os, reboot_required, …). For counts, use action1_endpoints_summary instead. |
| action1_endpoints_summaryA | Walks every endpoint and returns counts (total, by status/platform/OS/online, reboot_required). ~1 KB output regardless of fleet size. |
| action1_get_endpointA | Fetch the general info block for a single endpoint, plus derived platform and connectivity.online flags. |
| action1_search_endpointsA | Substring search across hostname, user, OS, status. Walks pages client-side since Action1 has no server-side substring search. |
| action1_list_missing_updatesA | Returns missing-update items for one endpoint. Each item.id can be passed to action1_deploy_update. |
| action1_list_vulnerabilitiesA | Returns vulnerability findings for one endpoint. Returns a clear 403 if the API key lacks the vulnerabilities scope. |
| action1_list_action_templatesA | List every action template (id, name, description). Use ids with action1_get_action_template. |
| action1_get_action_templateA | Fetch full details (parameters, supported platforms) for a single action template by id. |
| action1_list_recent_automationsA | List recent automation instances for the org. For counts use action1_automations_summary instead. |
| action1_automations_summaryA | Walks recent automation instances and returns counts (by_status, by_template, success/failure). ~1 KB output. |
| action1_run_powershellA | Run PowerShell on a Windows endpoint via the run_powershell template. Runs as SYSTEM (no user profile). |
| action1_run_bash_macosA | Run a Bash script on a macOS endpoint via the run_script template. For OS-aware routing use action1_run_script. |
| action1_run_scriptA | Cross-platform script runner. Routes to PowerShell (Windows) or Bash (macOS); errors on Linux/unknown. |
| action1_reboot_endpointA | Reboots the host via the reboot action template. Combine with action1_wait_for_automation to track recovery. |
| action1_deploy_updateB | Deploy one or more updates (by package id) via the deploy_update template. |
| action1_deploy_packageB | Deploy software via the deploy_package template. Use action1_get_action_template for the params schema. |
| action1_uninstall_programA | Uninstall software via the uninstall_program template. Use action1_get_action_template for the params schema. |
| action1_run_data_collectionC | Trigger the run_data_collection template on an endpoint. |
| action1_get_automation_statusA | Returns the high-level status of one automation instance. For stdout use action1_get_automation_output. |
| action1_get_automation_resultsA | Per-endpoint result rollup for an instance. Use action1_get_automation_output for stdout. |
| action1_get_automation_outputA | Returns filtered stdout for one endpoint of an automation instance. Strips Action1 status markers. |
| action1_wait_for_automationA | Block until an automation instance reaches a terminal status (Success/Failed/Stopped/Error/Canceled) or timeout. |
| action1_execute_and_waitB | One-shot helper: starts an action (auto-routes by OS for 'script', or runs a template), polls until terminal, returns filtered output. |
| action1_create_organizationB | Create an organization. Creates a new organization. Perm: manage_organizations. |
| action1_get_meA | Get the current user settings. Gets settings for the currently authenticated… |
| action1_update_meC | Update the current user settings. Updates settings for the currently authenticated… |
| action1_searchC | Searching. Perm: view_endpoints, view_software_repository, view_reports. |
| action1_get_endpoints_onboarded_statusC | Checking endpoint status. Retrieves information if any endpoints were added to an organization. |
| action1_get_agent_install_urlB | Getting the URL for agent installation. In order to manage an endpoint, the Action1 agent needs to be installed on it first. Perm: manage_endpoints. |
| action1_update_endpointA | Changing an endpoint comment or name. Changes the user-defined 'comment', 'name' and custom attributes for the specified endpoint. Perm: manage_endpoint_attributes. |
| action1_delete_endpointB | Deleting an endpoint. Removes a specified endpoint and attempts to uninstall its agent. Perm: manage_endpoints. |
| action1_move_endpointB | Moving the endpoint to another organization. Moves the endpoint to another organization. Perm: manage_endpoints. |
| action1_list_endpoint_missing_updatesA | Filtered/paginated variant of action1_list_missing_updates (curated). Use for severity/approval_status/sortby filtering. Getting missing updates for an endpoint. Obtains a list of missing software updates for a specific endpoint. Perm: view_endpoints. |
| action1_list_endpoint_groupsB | Listing endpoint groups. Lists existing endpoint groups. Use filters and narrow down and sort the returned results. Perm: view_endpoints. |
| action1_create_endpoint_groupA | Creating a new group. Creates a new endpoint group within the specified organization. Perm: manage_endpoints. |
| action1_get_groupB | Getting an endpoint group. Gets a specific endpoint group by its ID. Perm: view_endpoints. |
| action1_update_groupB | Changing group settings. Changes settings for an existing endpoint group in the specified organization. Perm: manage_endpoints. |
| action1_delete_groupB | Deleting an endpoint group. Deletes an existing group in the specified organization. Perm: manage_endpoints. |
| action1_list_group_contentsA | Listing endpoints from the group. Lists all endpoints included in the specified group. Perm: view_endpoints. |
| action1_create_endpoint_remote_sessionC | Starting a new remote session. Sends a request to the endpoint to start a new remote session. Perm: remote_connect. |
| action1_get_remote_sessionA | Getting a remote session. Gets details for an existing remote session specified by ID. Perm: remote_connect. |
| action1_update_remote_sessionB | Switching a current monitor. Changes the 'current_monitor' parameter for a specific remote session. Perm: remote_connect. |
| action1_get_endpoint_discovery_settingsA | Getting Agent Deployment settings. Obtains the current Agent Deployment settings in a specified organization. Perm: manage_endpoints. |
| action1_update_endpoint_agent_deploymentC | Updating Agent Deployment settings. Updates the Agent Deployment configuration for a specific organization. Perm: manage_endpoints. |
| action1_list_endpoint_deployersB | Listing Deployers. Lists all Action1 Deployer services in the specified organization. Perm: manage_endpoints. |
| action1_get_windows_deployer_urlA | Getting Deployer installation URL. Obtains an URL to download the Deployer installation… Perm: manage_endpoints. |
| action1_get_deployerA | Getting a specific Deployer. Obtains the current information about the specified Action1 Deployer service. Perm: manage_endpoints. |
| action1_delete_deployerB | Deleting Deployer. Perm: manage_endpoints. |
| action1_list_data_sourcesA | Listing data sources. Gets a list of existing data sources. To filter out built-in data sources, set the 'builtin'. Perm: manage_data_sources, manage_reports. |
| action1_create_data_sourceA | Creating a data source. Creates a new custom data source. At this time, all data sources are enterprise-wide. Perm: manage_data_sources. |
| action1_get_data_sourceA | Getting a specific data source. Gets details about a specific data source. Perm: manage_data_sources, manage_reports. |
| action1_update_data_sourceB | Updating a custom data source. Updates a custom data source specified by its ID. Perm: manage_data_sources. |
| action1_delete_data_sourceA | Deleting a custom data source. Deletes an existing custom data source. Note that you cannot remove built-in data sources. Perm: manage_data_sources. |
| action1_list_scriptsA | Listing scripts. Gets a list of existing scripts from the Script Library. Perm: use_scripts. |
| action1_create_scriptA | Creating a custom script. Creates a new custom script and adds it to the Script Library. Perm: manage_scripts. |
| action1_get_scriptA | Getting a specific script. Gets details for a script specified by its ID. Perm: use_scripts. |
| action1_update_scriptB | Updating a custom script. Updates details for an existing custom script specified by its ID. Perm: manage_scripts. |
| action1_delete_scriptA | Deleting a custom script. Deletes an existing custom script specified by its ID. Perm: manage_scripts. |
| action1_list_setting_templatesB | Listing setting templates. Gets a list of existing setting templates. |
| action1_get_setting_templateB | Getting a setting template. Gets details about a setting template specified by its ID. |
| action1_list_settingsA | Listing settings. Lists all existing settings. At this time, all settings are enterprise-wide. Perm: manage_advanced_settings. |
| action1_create_settingC | Creating a new setting. Creates a new setting. At this time, all setting templates are enterprise-wide. Perm: manage_advanced_settings. |
| action1_get_settingA | Getting setting configuration. Gets details about the setting configuration. Perm: manage_advanced_settings. |
| action1_update_settingB | Updating a setting. Updates an existing setting specified by its ID. Perm: manage_advanced_settings. |
| action1_delete_settingA | Deleting a setting. Deletes an existing setting specified by its ID. Perm: manage_advanced_settings. |
| action1_list_reportsA | Listing reports. Gets a list of existing reports. At this time all reports are enterprise-wide. |
| action1_get_report_or_categoryC | Listing reports and categories. Gets a list of reports and categories. At this time all reports are enterprise-wide. |
| action1_create_reportB | Creating a custom report. Creates a custom report in the predefined Custom report category. Perm: manage_reports. |
| action1_update_reportC | Updating a custom report. Updates a custom report. You cannot changes a custom report's category. Perm: manage_reports. |
| action1_delete_reportA | Deleting a custom report. Deletes a custom report specified by its ID. Perm: manage_reports. |
| action1_list_report_dataC | Getting report rows. Gets data organized by report rows. Use parameters to filter out returned results. Perm: view_reports. |
| action1_list_report_errorsA | Getting report errors. Returns report errors for the specified report. Perm: view_reports. |
| action1_get_export_for_reportB | Exporting a report. Exports data from the report. Use parameters to filter out exported… Perm: view_reports. |
| action1_requery_reportA | Re-querying a report. This API method initiates an asynchronous update ("requery") of the report's underlying data source. Perm: view_reports. |
| action1_get_drilldown_for_report_rowB | Drilling down to details. Expands report details to provide more information. Perm: view_reports. |
| action1_get_export_for_report_rowC | Exporting report details. Exports reports data. Use parameters to filter out exported… Perm: view_reports. |
| action1_list_software_repositoryA | List Software Repository packages. Gets a list of Software Repository packages for the entire enterprise. Perm: view_software_repository. |
| action1_create_packageA | Create new Software Repository package. Create a new custom Software Repository package object (with no versions) and set its initial basic. Perm: manage_software_repository. |
| action1_get_software_repository_packageA | Get Software Repository package settings. Gets details for a Software Repository package specified by its ID. Perm: view_software_repository. |
| action1_update_packageA | Update Software Repository package settings. Perm: manage_software_repository. |
| action1_delete_packageA | Delete custom Software Repository package. Deletes a custom Software Repository package specified by its ID. Perm: manage_software_repository. |
| action1_clone_packageA | Clone Software Repository package. Creates a full copy of an existing Software Repository package under a new package ID. Perm: manage_software_repository. |
| action1_create_package_versionC | Create new version in Software Repository package. Adds a new version to the specified Software Repository package. Perm: manage_software_repository. |
| action1_get_versionA | Get version in Software Repository package. Gets details about a package version specified by its ID. Perm: view_software_repository. |
| action1_update_versionC | Modify version in Software Repository package. - |
| action1_delete_versionA | Delete version from Software Repository package. Deletes the specified version of the specified custom Software Repository package. Perm: manage_software_repository. |
| action1_delete_package_version_actionC | Delete additional action from version of Software Repository package. Deletes the specified additional action from the specified custom… Perm: manage_software_repository. |
| action1_get_match_conflicts_for_software_repositoryA | Check for Software Repository package matching conflicts before creating a new package version… Perm: view_software_repository. |
| action1_get_match_conflicts_for_packageC | Check for package matching conflicts when editing and existing package version… Perm: view_software_repository. |
| action1_init_software_uploadC | Initialize package file upload. Initializes package file upload. The client starts by sending the initial upload request. Perm: manage_software_repository. |
| action1_upload_software_chunkC | Upload package file chunks. Uploads package file chunks. Perm: manage_software_repository. |
| action1_list_updatesC | Listing missing updates. Gets a list of all missing updates. Use parameters to filter out updates in the returned results. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_get_update_packageA | Listing updates for a package. Gets a list of updates available for a package specified by its ID. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_list_version_endpointsB | Listing endpoints missing a specific update. Gets a list of endpoints that are missing updates for a specific package and its version,. Perm: approve_updates, view_dashboards, manage_automations. |
| action1_list_installed_software_dataB | Getting installed apps. Gets a list of installed apps. Use parameters to filter out apps in the returned results. Perm: view_installed_software. |
| action1_requery_installed_software_for_orgA | Re-querying installed apps. This API method initiates an asynchronous update ("requery") of the installed software inventory. Perm: view_installed_software. |
| action1_list_installed_software_errorsC | Getting apps report errors. Returns apps report errors. Use parameters to filter out returned results. Perm: view_installed_software. |
| action1_get_installed_software_endpointB | Getting installed apps on a specific endpoint. Gets a list of installed apps on an endpoint specified by its ID. Perm: view_installed_software, view_endpoints. |
| action1_requery_installed_software_for_endpointA | Re-querying installed apps on a specific endpoint. This API method initiates an asynchronous update ("requery") of the installed software… Perm: view_installed_software, view_endpoints. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| patch-windows-fleet | Walks through resolving an endpoint group, picking the missing-update set, previewing the deploy, and executing it once you confirm. |
| audit-vulnerabilities | Surveys org-wide vulnerabilities, ranks the worst, builds a remediation plan, presents it for approval — no execution by default. |
| triage-offline-endpoints | Walks the endpoint inventory and surfaces hosts whose status or last_seen suggest they are not actually online. |
| run-script-fleetwide | Runs the supplied script (PowerShell on Windows, Bash on macOS via OS-aware routing) on every member of a group. Read-only by default — guard rails on. |
| software-inventory-sweep | Find every endpoint that has (or doesn't have) a given software package installed. |
| check-my-permissions | Reads the /me identity, lists the granted permissions, and flags which tool families will 403 with this role. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| me | The authenticated API user (GET /me). Useful as a startup probe — agents can read this to know which permissions / role they have before calling potentially-403 tools. |
| organizations | All organizations the configured API key can access (GET /organizations). |
| templates | All action templates (run_powershell, run_script, deploy_update, …) with their parameter shapes (GET /automations/action-templates). |
| reports | All reports the API key can see (GET /reports/all). Use action1_report_export to fetch one by id or name fragment. |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/mguttmann/action1-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server