Action1 MCP by usefulapi

io.usefulapiPublished by usefulapi.ioOfficial publisherv1.0.1Updated Nov 8, 2026

Read endpoints, missing updates, CVE vulnerabilities, installed software and reports in Action1.

The publisher's own server: Ably MCP by usefulapi

VerifiedStreamable HTTPWeb executableCloud & Infrastructure Security & Monitoring Data & Analytics

Server details

Identifier: io.usefulapi/action1
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Nov 8, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to usefulapi.io, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.usefulapi%2Faction1.svg)](https://sourceweft.com/mcp/io.usefulapi%2Faction1?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Read-only access to Action1 endpoint management data: managed endpoints, missing patches, CVE vulnerabilities, software inventory and reports.

What you can do: List organizations and the API user's roles and settings
Search Action1 objects and list managed endpoints, endpoint groups and group members
List missing updates, per-package updates and installed software inventory
List CVE vulnerabilities, get one CVE's details and list affected endpoints
List automation runs and report definitions, and fetch report rows
Check usage, request a feature, upgrade or cancel a subscription
When to use it: Useful when you want an assistant to answer questions about fleet health, patch compliance or vulnerability exposure in Action1 without opening the console, for example which endpoints are offline, which critical updates are missing, or which machines a CVE affects.
Requirements: Remote hosted endpoint reached over streamable HTTP; no local install. Sign-in uses OAuth, and the login page asks for your Action1 region, Client ID and Client secret created under Configuration | Users & API Credentials in Action1. The server stores those credentials per user. A free plan allows 50 tool calls per month.

Before you install

You hand your Action1 Client ID and Client secret to a third-party hosted service, which stores them per user. The listed tools are read-only, but the server also offers meta tools that start a paid Stripe checkout, cancel a subscription, or send a feature request; confirm before running them. Paid plans cost money and Pro covers only this server.

Installation

In SourceWeft

Open Action1 MCP by usefulapi in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.usefulapi%2Faction1/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "action1-by-usefulapi": {
      "type": "http",
      "url": "https://action1.usefulapi.io/mcp"
    }
  }
}

README

Action1 MCP by usefulapi

Use your Action1 account from Claude, Cursor, or any MCP client. Read endpoints, missing updates, CVE vulnerabilities, installed software and reports. Hosted, no local install: connect with your own credentials.

Live endpoint: https://action1.usefulapi.io/mcp · Homepage: https://usefulapi.io

Connect

Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://action1.usefulapi.io/mcp.
Claude Code: claude mcp add --transport http action1 https://action1.usefulapi.io/mcp, then run /mcp to log in.
VS Code: Add to VS Code.
Cursor and other clients: add the URL as a remote MCP server:

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Action1 credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/action1/

On first connect you provide your Action1 region, a Client ID and a Client secret (created under Configuration | Users & API Credentials in Action1). The server validates it and stores it per user. No keys go in config files.

Tools

Tool	Type	What it does
`action1_list_organizations`	read	List organizations
`action1_get_current_user`	read	Get the API user
`action1_search`	read	Search Action1
`action1_list_endpoints`	read	List managed endpoints
`action1_get_endpoint`	read	Get a managed endpoint
`action1_list_endpoint_groups`	read	List endpoint groups
`action1_list_group_endpoints`	read	List endpoints in a group
`action1_list_missing_updates`	read	List missing updates
`action1_list_package_updates`	read	List updates for a package
`action1_list_vulnerabilities`	read	List vulnerable software
`action1_get_vulnerability`	read	Get a CVE in an organization
`action1_list_vulnerability_endpoints`	read	List endpoints affected by a CVE
`action1_list_installed_software`	read	List installed software
`action1_list_automation_instances`	read	List automation runs
`action1_list_reports`	read	List reports
`action1_get_report_rows`	read	Get report rows
`action1_usage_status`	meta	Usage status (free-tier meter)
`action1_request_feature`	meta	Request a missing feature
`action1_upgrade`	meta	Upgrade to Pro or Pro+
`action1_cancel_subscription`	meta	Cancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

*Pro has a fair use limit of 10,000 tool calls a month on this server. For more, write to [email protected].

Pro covers this server only. Subscribe with action1_upgrade (it returns a Stripe Checkout link). Cancel any time with action1_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running action1_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT — see LICENSE. Documentation only; the server is hosted.

Source: servers/action1/README.md at commit eece7cf

Tools

action1_list_organizations

List organizations

List the Action1 organizations these API credentials can reach, with their ids. Call this first: most other tools need an organization id. Action1 API: GET /organizations.

Parametersadmin

action1_get_current_user

Get the API user

Get the settings and roles of the user behind these API credentials. Use it to check what the credentials can see. Action1 API: GET /me.

Takes no parameters.

action1_search

Search Action1

Search endpoints, software and other Action1 objects in one organization by text. Action1 API: GET /search/{orgId}.

ParameterslimitorgIdrequiredqueryrequired

action1_list_endpoints

List managed endpoints

List the managed endpoints (computers) of one organization or of all organizations, with status, OS, last-seen time and update state. Filter by status, update state, OS or reboot need. Action1 API: GET /endpoints/managed/{orgId}.

ParametersosfromlimitorgIdfieldsfiltersortbystatusonline_statusupdate_statusreboot_requiredvulnerability_status

action1_get_endpoint

Get a managed endpoint

Get one managed endpoint: name, OS, hardware, agent version, last seen and status. Action1 API: GET /endpoints/managed/{orgId}/{endpointId}.

ParametersorgIdendpointIdrequired

action1_list_endpoint_groups

List endpoint groups

List the endpoint groups (dynamic or manual sets of endpoints) of one organization. Action1 API: GET /endpoints/groups/{orgId}.

ParametersfromlimitorgIdrequiredfiltersortby

action1_list_group_endpoints

List endpoints in a group

List the endpoints in one endpoint group, with the same filters as action1_list_endpoints. Action1 API: GET /endpoints/groups/{orgId}/{groupId}/contents.

ParametersosfromlimitorgIdrequiredfiltersortbystatusgroupIdrequiredonline_statusupdate_statusreboot_requiredvulnerability_status

action1_list_missing_updates

List missing updates

List the software updates (patches) that endpoints still miss, across one organization or all organizations. Filter by approval status and severity. Action1 API: GET /updates/{orgId}.

ParametersfromlimitorgIdcustomfiltersortbyonly_latestapproval_statussecurity_severity

action1_list_package_updates

List updates for a package

List the updates of one software package and the endpoints they affect. Action1 API: GET /updates/{orgId}/{packageId}.

ParametersfromlimitorgIdfiltersortbypackageIdrequiredonly_latestapproval_statussecurity_severity

action1_list_vulnerabilities

List vulnerable software

List the CVE vulnerabilities found on endpoints in one organization or all organizations, with CVSS score, remediation deadline and affected endpoint counts. Action1 API: GET /vulnerabilities/{orgId}.

ParametersfromlimitorgIdscorefiltersortbycve_idsendpoint_idpublished_date_endremediation_statuspublished_date_start

action1_get_vulnerability

Get a CVE in an organization

Get one CVE as Action1 sees it in one organization: CVSS vector, exploitability, CISA KEV flag, remediation status and deadline. Action1 API: GET /vulnerabilities/{orgId}/{cveId}.

ParameterscveIdrequiredorgIdrequired

action1_list_vulnerability_endpoints

List endpoints affected by a CVE

List the endpoints in one organization or all organizations that a CVE affects, with the software involved. Action1 API: GET /vulnerabilities/{orgId}/{cveId}/endpoints.

ParametersfromcveIdrequiredlimitorgIdfiltersortbyproduct_names

action1_list_installed_software

List installed software

List the software installed across the endpoints of one organization (the software inventory). Action1 API: GET /installed-software/{orgId}/data.

ParametersfromlimitorgIdrequiredfiltersortbylive_only

action1_list_automation_instances

List automation runs

List automation runs (instances) of one organization with their status and completion. Action1 API: GET /automations/instances/{orgId}.

ParametersfromlimitorgIdrequiredfiltersortbystatuscompletedendpoint_id

action1_list_reports

List reports

List the Action1 report definitions available to these credentials (built-in and custom). Use the report ids with action1_get_report_rows. Action1 API: GET /reports/all.

Parameterssubtree

action1_get_report_rows

Get report rows

Get the rows of one Action1 report for one organization. Use action1_list_reports for report ids. Action1 API: GET /reportdata/{orgId}/{reportId}/data.

ParametersfromlimitorgIdrequiredfiltersortbydetailsreportIdrequiredlive_onlyendpoint_id

Version history

v1.0.1LatestNov 8, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

Business & Commerce15 toolsNov 8, 2026

Plan	Price	Limit
Free	$0	50 tool calls / month
Pro (per user)	$9/mo or $90/yr (2 months free)	Unlimited*