Action1
About
An unofficial and fully featured Model Context Protocol (MCP) server for the Action1 RMM REST API
Details
- Author
- ybellerose
- Categories
- Other, Infrastructure, API
Jump to
Setup
Install Action1 in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/ybellerose/MCP-Action1
Follow the installation instructions in the repository README, then restart your MCP client.
An unofficial and fully featured Model Context Protocol (MCP) server for theAction1 RMM REST API.
This server exposes Action1's remote monitoring and management (RMM) capabilities as actionable tools for AI coding assistants and agents (such as Gemini CLI, Claude Desktop, Cursor, Cline, and custom GenAI applications). It allows AI models to inspect endpoints, deploy updates/patches, run scripts, manage groups, and trigger software deployments.
- Organization & Authenticated User Info: Retrieve API permissions and list accessible organizations.
- Endpoint Monitoring: List managed devices, query detailed system statuses, update device attributes, and fetch discovered (unmanaged) devices on the network.
- Vulnerability & Update Management: List pending CVE vulnerabilities, scan Windows update statuses, and trigger telemetry refreshes.
- Task & Policy Deployments:
- Patching: Deploy Windows updates / CVE mitigations with customizable reboots.
- Software: Deploy packages from the Action1 Software Repository.
- Scripts: Execute library scripts with parameter overrides.
- Node.js:v18.0.0or higher
- Action1 Account: Access to an Action1 RMM console.
- API Credentials: Client ID and Client Secret created in Action1 underConfiguration > Users & API Credentials.
Configure Environment Variables: Copy.env.exampleto.envand fill in your Action1 credentials:
ACTION1_CLIENT_ID=api-key-your-client-id@action1.com ACTION1_CLIENT_SECRET=your_client_secret_here ACTION1_REGION=na # na (default), eu, or au ACTION1_ORG_ID=your_default_organization_id # optional — can be passed per-tool call
Build the Server: Compile the TypeScript source files to JavaScript:
MCP servers communicate overstdio(standard input/output). Testing them in a standard terminal shell will block waiting for JSON-RPC messages. To test and verify tools interactively, use theMCP Inspector:
# Start the MCP Inspector (local environment variables in .env are loaded automatically!) npx @modelcontextprotocol/inspector node dist/index.js
This will spin up a web interface (typically athttp://localhost:5173) where you can interactively invoke tools, inspect inputs, and verify outputs.
To run with live-reloading during TypeScript development:
npx @modelcontextprotocol/inspector npx tsx src/index.ts
The codebase includes a comprehensive unit testing suite usingVitestto verify Zod input schemas (UUID matching, strict alphanumeric/hyphen ID constraints, and numeric paging limits).
Here is how you can connect this server to popular AI clients:
Create or edit your local project settings in.gemini/settings.json(or globally in~/.gemini/settings.json):
{ "mcpServers": { "action1": { "command": "node", "args": ["/path/to/mcp-action1/dist/index.js"], "env": { "ACTION1_CLIENT_ID": "api-key-your-client-id@action1.com", "ACTION1_CLIENT_SECRET": "your-client-secret", "ACTION1_REGION": "na", "ACTION1_ORG_ID": "your-org-id" } } } }
Add the following to your Claude Desktop configuration (~/Library/Application Support/Claude/claude_desktop_config.json):
{ "mcpServers": { "action1": { "command": "node", "args": ["/path/to/mcp-action1/dist/index.js"], "env": { "ACTION1_CLIENT_ID": "api-key-your-client-id@action1.com", "ACTION1_CLIENT_SECRET": "your-client-secret", "ACTION1_REGION": "na", "ACTION1_ORG_ID": "your-org-id" } } } }
- Navigate toCursor Settings > Features > MCP.
- Click+ Add New MCP Server.
- Choose Type:command
- Set Command:node /path/to/mcp-action1/dist/index.js
- Configure environmental variables matching your.envvalues.
This MCP server registers the following tools under standard schemas:
- get_me: Get information about the currently authenticated API user.
- list_organizations: List all organizations accessible to the API credentials.
- list_endpoints: List managed endpoints (agents). Supports pagination, cursors, and extended fields (e.g. patch status).
- get_endpoint: Get detailed telemetry information about a single device.
- update_endpoint: Update device properties (name, comment, custom attributes).
- delete_endpoint: Remove/unmanage a device (uninstalls the agent).
- list_discovery_endpoints: List unmanaged/discovered devices seen on the network.
- requery_installed_apps: Force a refresh of installed app inventory on endpoints.
- requery_installed_updates: Force a scan of Windows updates on endpoints.
- list_endpoint_groups: List all defined endpoint groups in the organization.
- get_endpoint_group_contents: List member devices of a specific group.
- add_endpoint_to_group: Add endpoints to a target group.
- update_endpoint_group: Edit group names or descriptions.
- delete_endpoint_group: Remove an endpoint group.
- list_vulnerabilities: List known CVE vulnerabilities detected across endpoints. Filterable by severity.
- list_windows_updates: List missing Windows updates across endpoints.
- list_scripts: List script library catalog (both built-in and custom script templates).
- list_packages: List all software packages available in the managed Action1 catalog.
- list_software_repository: List packages in the local repository and retrieve versions.
- list_installed_apps: List currently installed apps across all endpoints.
- list_policies: List past and active one-time deployment instances (software, patches, scripts).
- get_policy: Retrieve configuration and target scope details of a policy.
- get_policy_results: Fetch per-endpoint execution results (success/failure details).
- deploy_updates: Run a deployment job to install patches/updates. Supports targeting specific CVEs, automatic reboots, and retry windows.
- deploy_software: Deploy a software catalog package to target groups or endpoints.
- run_script: Execute a script library item with arguments and reboot rules.
- list_automations: List configured recurring automations.
- create_automation: Build a daily, weekly, or monthly recurring deployment automation schedule.
- update_automation: Edit or toggle an automation.
- delete_automation: Delete an automation schedule.
- list_reports: Retrieve a catalog of all available built-in reports.
- get_report_data: Retrieve raw data rows for a target report.
- export_report: Export report rows directly to CSV format.
- requery_report: Trigger a data refresh for a specific report.
- get_activity_logs: Retrieve organization-wide action and audit logs.
- list_setting_templates: List templates used for configuration profiles.
This project is licensed under the MIT License. Refer toLICENSEfor details.
ClawManager Fleet Control is a paid hosted remote MCP for ClawManager. It exposes Streamable HTTP tool calls, bearer-token access, public server-card metadata, usage logs, and receipt-orient
Interact with Kong Konnect APIs to query and analyze Kong Gateway configurations, traffic, and analytics.
A feature-rich gateway and proxy that federates MCP and REST services, unifying discovery, authentication, rate-limiting, and observability into a single endpoint for AI clients.
Paid remote MCP for server uptime checks, schema validation, auth failure detection, SLA receipts, and status report exports.
Interact with your OpsLevel account using read-only access.
Monitor sites, APIs, servers & SSL certs with UptimeRobot: manage monitors, incidents & stats.
Model Context Protocol server for secure AsusWRT router administration via SSH. Provides 42+ read-only monitoring tools and guarded mutation tools for managing AsusWRT/Merlin routers.
Monitor backup status and query Prometheus metrics from a Duplicacy exporter
MCP server for ESET Connect API - 102 tools, RO/RW mode, stdio+HTTP, OAuth2
Civilian situational awareness for AI deployments — real-time risk dashboards, multi-source threat correlation, anomaly detection, and automated alerting for critical infrastructure and enterprise AI systems.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.




