Action1 MCP by usefulapi

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs in the cloud
• Transport: Streamable HTTP
• Category: Cybersecurity

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

https://action1.usefulapi.io/mcp

claude mcp add --transport http action1 https://action1.usefulapi.io/mcp

{
  "mcpServers": {
    "action1": {
      "url": "https://action1.usefulapi.io/mcp"
    }
  }
}

{
  "servers": {
    "action1": {
      "type": "http",
      "url": "https://action1.usefulapi.io/mcp"
    }
  }
}

https://action1.usefulapi.io/mcp

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 8, 2026. The maker wrote them, not us; we show them as plain text.

• action1_list_organizations

  List the Action1 organizations these API credentials can reach, with their ids. Call this first: most other tools need an organization id. Action1 API: GET /organizations.

• action1_get_current_user

  Get the settings and roles of the user behind these API credentials. Use it to check what the credentials can see. Action1 API: GET /me.

• action1_search

  Search endpoints, software and other Action1 objects in one organization by text. Action1 API: GET /search/{orgId}.

• action1_list_endpoints

  List the managed endpoints (computers) of one organization or of all organizations, with status, OS, last-seen time and update state. Filter by status, update state, OS or reboot need. Action1 API: GET /endpoints/managed/{orgId}.

• action1_get_endpoint

  Get one managed endpoint: name, OS, hardware, agent version, last seen and status. Action1 API: GET /endpoints/managed/{orgId}/{endpointId}.

• action1_list_endpoint_groups

  List the endpoint groups (dynamic or manual sets of endpoints) of one organization. Action1 API: GET /endpoints/groups/{orgId}.

• action1_list_group_endpoints

  List the endpoints in one endpoint group, with the same filters as action1_list_endpoints. Action1 API: GET /endpoints/groups/{orgId}/{groupId}/contents.

• action1_list_missing_updates

  List the software updates (patches) that endpoints still miss, across one organization or all organizations. Filter by approval status and severity. Action1 API: GET /updates/{orgId}.

• action1_list_package_updates

  List the updates of one software package and the endpoints they affect. Action1 API: GET /updates/{orgId}/{packageId}.

• action1_list_vulnerabilities

  List the CVE vulnerabilities found on endpoints in one organization or all organizations, with CVSS score, remediation deadline and affected endpoint counts. Action1 API: GET /vulnerabilities/{orgId}.

• action1_get_vulnerability

  Get one CVE as Action1 sees it in one organization: CVSS vector, exploitability, CISA KEV flag, remediation status and deadline. Action1 API: GET /vulnerabilities/{orgId}/{cveId}.

• action1_list_vulnerability_endpoints

  List the endpoints in one organization or all organizations that a CVE affects, with the software involved. Action1 API: GET /vulnerabilities/{orgId}/{cveId}/endpoints.

• action1_list_installed_software

  List the software installed across the endpoints of one organization (the software inventory). Action1 API: GET /installed-software/{orgId}/data.

• action1_list_automation_instances

  List automation runs (instances) of one organization with their status and completion. Action1 API: GET /automations/instances/{orgId}.

• action1_list_reports

  List the Action1 report definitions available to these credentials (built-in and custom). Use the report ids with action1_get_report_rows. Action1 API: GET /reports/all.

• action1_get_report_rows

  Get the rows of one Action1 report for one organization. Use action1_list_reports for report ids. Action1 API: GET /reportdata/{orgId}/{reportId}/data.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified against the domain usefulapi.io (the registry checks domain ownership)

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 819 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 16 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

• More stars than 0% of the other 996 servers in this category
• Published to the registry more recently than 100% of the other 996 servers in this category
• Basic checks equal to or better than 100% of the other 996 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

{