action1-mcp

MCP server for the Action1 RMM REST API. Gives Claude (or any other MCP client) read-only access to endpoints, missing updates, vulnerabilities, installed software, policies, automations and reports.

Unofficial — not affiliated with or endorsed by Action1 Corporation.

Why read-only

Action1's write surface deploys software and runs scripts on managed endpoints. That is remote code execution across a whole fleet, and it is not something to put behind a bearer token and a language model on day one. v1 exposes GETs only, and the guarantee is enforced in the HTTP client itself — not merely by the absence of write tools. See docs/ARCHITECTURE.md for the write tiers planned for v2 and SECURITY.md for the threat model.

Quick start

git clone https://github.com/molnkontakt/action1-mcp.git
cd action1-mcp
python3 -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"

# Credentials from the Action1 console: Configuration → API Credentials
export ACTION1_CLIENT_ID=...
export ACTION1_CLIENT_SECRET=...
export ACTION1_REGION=NorthAmerica          # or Europe / Australia / NA-2
export ACTION1_DEFAULT_ORG_ID=...           # optional, saves passing org_id everywhere

action1-mcp                                  # stdio transport

Wire it into Claude Code:

claude mcp add action1 -- action1-mcp

Shared HTTP server

One long-lived process instead of one per client session:

export ACTION1_MCP_BEARER="$(openssl rand -base64 36 | tr -d '=+/' | cut -c1-48)"
action1-mcp --transport http --host 127.0.0.1 --port 3002

{
  "mcpServers": {
    "action1": {
      "type": "http",
      "url": "https://mcp.example.com/action1/mcp",
      "headers": { "Authorization": "Bearer <ACTION1_MCP_BEARER>" }
    }
  }
}

Bind loopback and put a TLS-terminating reverse proxy in front. The server refuses to bind a non-loopback address when ACTION1_MCP_BEARER is unset, but that check is a backstop, not a deployment plan — see docs/DEPLOY.md.

Configuration

Variable	Default	Purpose
`ACTION1_CLIENT_ID`	—	Required. API credential from the Action1 console
`ACTION1_CLIENT_SECRET`	—	Required.
`ACTION1_REGION`	`NorthAmerica`	`NorthAmerica`, `NA-2`, `Europe`, `Australia`
`ACTION1_DEFAULT_ORG_ID`	unset	Org used when a tool is called without `org_id`
`ACTION1_MCP_BEARER`	unset	Bearer token required by the HTTP transport
`ACTION1_MCP_TRANSPORT`	`stdio`	`stdio` or `http`; `--transport` overrides it
`ACTION1_MCP_HOST`	`127.0.0.1`	HTTP bind address; `--host` overrides it
`ACTION1_MCP_PORT`	`3002`	HTTP bind port; `--port` overrides it
`ACTION1_RATE_LIMIT_PER_MINUTE`	`25`	Local throttle; Action1's ceiling is 30/min per tenant
`ACTION1_MAX_ITEMS`	`1000`	Hard ceiling on items one tool call will page through. A tool's `limit` can ask for fewer, never more
`ACTION1_PAGE_SIZE`	`200`	Items per API request
`ACTION1_TIMEOUT_SECONDS`	`60`	Per-request timeout
`ACTION1_MAX_429_RETRIES`	`3`	Retries after a rate-limit response
`ACTION1_ALLOW_WRITE`	`0`	Unblocks non-GET requests. No write tools exist in v1

Tools

21 read tools — see docs/TOOLS.md for the full reference.

Area	Tools
Identity	`action1_whoami`
Tenant	`action1_list_organizations`, `action1_get_organization`
Endpoints	`action1_list_endpoints`, `action1_get_endpoint`, `action1_list_discovered_endpoints`, `action1_list_endpoint_groups`, `action1_get_endpoint_group_members`
Patching	`action1_list_missing_updates`, `action1_list_installed_apps`, `action1_list_packages`
Vulnerabilities	`action1_list_vulnerabilities`, `action1_get_vulnerability`, `action1_list_vulnerability_endpoints`, `action1_list_vulnerability_remediations`
Automation	`action1_list_policies`, `action1_get_policy_results`, `action1_list_automations`, `action1_list_scripts`
Reports	`action1_list_reports`, `action1_get_report_data`

Every list tool returns the same envelope:

{"items": [...], "returned": 200, "total_items": 1432, "truncated": true}

truncated: true means more data may exist beyond what came back. The list is a prefix, not the whole set — narrow the query rather than concluding from a partial answer. The flag errs towards true: several Action1 endpoints return no total_items at all, and a missing counter is not evidence that the page you got was everything.

Rate limiting

Action1 counts requests per enterprise, across every endpoint and every integration hitting the tenant — so this server shares its budget with your PowerShell scripts and any other tooling. It throttles locally below the documented ceiling rather than discovering it through 429s, and when one arrives anyway it honours the retry_after the API returns before falling back to exponential backoff.

Development

pytest          # no network: every request is served by an httpx MockTransport
ruff check .
mypy src

License

Apache-2.0. Provided as is; review before pointing it at a production tenant.