Integration · Developer tools

Connect Claude & ChatGPT to Action1

Ask your AI which computers are offline, which updates are missing or which endpoints are hit by a CVE, and get the answer from your Action1 organization. It can read endpoints, installed software, automations, run history and reports. It can also run an automation such as deploying updates or a reboot, and stop a running one, with your approval if you want it.

Connect Action1 free

Free plan, no credit card. Takes about a minute.

Try asking

“How many endpoints are offline or waiting for a reboot?”
The AI reads the endpoint status summary and lists the endpoints that are offline or need a reboot.
“Which critical updates are still missing across our machines?”
It lists missing updates filtered by security severity, with the package details for each one.
“Which computers are affected by CVE-2024-3400?”
It reads the vulnerability in your organization and lists the endpoints it was found on.

What your AI can do

Endpoints and software

List and filter managed endpoints and groups, see status, OS and last-seen details, and read installed software per endpoint or across the organization.

Updates and vulnerabilities

List missing updates by severity or approval status, read CVE details and see which endpoints each vulnerability affects.

Automations and reports

Read scheduled automations and run history, run or stop an automation, and pull the rows of any Action1 report.

“What software is installed on the laptop of our new designer?”
It finds the endpoint and lists the software installed on it.
“Did last night's patch automation succeed everywhere?”
It finds the automation run and lists the per-endpoint results, so you can see where it failed.
“Deploy the missing updates to the three finance PCs now.”
It looks up the action templates and runs an automation on those endpoints. This acts on the computers immediately.

133 tools for Action1

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

create_allChanges dataCreate a new all. Required: name, description, language, script text, columns or status. Search alls first to avoid duplicates. API summary: Creating a data source.
create_all_scripts_org_id_postChanges dataCreate a new all. Required: platform, name, language or script text. Search alls first to avoid duplicates. API summary: Creating a custom script.
create_all_settings_org_id_postChanges dataCreate a new all. Required: template id, value or scope. Search alls first to avoid duplicates. API summary: Creating a new setting.
create_companyChanges dataCreate a new company. Required: name or description. API summary: Create an organization.
create_customChanges dataCreate a new custom. Required: name, description, data sources, filter set, simple columns or summary columns. API summary: Creating a custom report.
create_group_contentChanges dataCreate a new content for a group. Required: items. Search contents first to avoid duplicates. API summary: Manually removing or adding endpoints to the group.
create_installed_software_requeryChanges dataCreate a new requery for a installed software. API summary: Re-querying installed apps.
create_managed_moveChanges dataCreate a new move for a managed. Required: target organization id. API summary: Moving the endpoint to another organization.
create_managed_remote_sessionChanges dataCreate a new remote session for a managed. Required: connection type. API summary: Starting a new remote session.
create_quoteChanges dataCreate a new quote. API summary: Requesting a quote.
create_reportdatum_requeryChanges dataCreate a new requery for a reportdatum. API summary: Re-querying a report.
create_request_closureChanges dataCreate a new request closure. Required: reason. API summary: Closing the entire enterprise associated with Action1 account.
create_revoke_closureChanges dataCreate a new revoke closure. Required: reason. API summary: Revoking account closure.
create_roleDeletesCreate a new role. Required: name or description. Search roles first to avoid duplicates. Destructive action; may require approval. API summary: Creating a role.
create_software_repository_versionChanges dataCreate a new version for a software repository. Required: body. API summary: Create new version in Software Repository package.
create_subscriptionChanges dataCreate a new subscription. API summary: Request a free trial or its extension.
create_subscription_me_subscriptions_postChanges dataCreate a new subscription. Required: name, report id or schedule. API summary: Creating a new report subscription.
create_update_approvalChanges dataCreate a new approval for a update. Required: items. API summary: TBD:Manage updates approvals.
create_userChanges dataCreate a new user. Required: body. Search users first to avoid duplicates. API summary: Create new user.
create_vulnerability_remediationChanges dataCreate a new remediation for a vulnerability. Required: product name or comment. Search remediations first to avoid duplicates. API summary: Documents applied compensating controls for a specific vulnerability.
delete_actionDeletesPermanently delete a action by action id. Destructive action; may require approval. API summary: Deleting an action from a automation.
delete_allDeletesPermanently delete a all by data source id. Destructive action; may require approval. API summary: Deleting a custom data source.
delete_all_scripts_org_id_script_id_deleteDeletesPermanently delete a all by script id. Destructive action; may require approval. API summary: Deleting a custom script.
delete_all_settings_org_id_setting_id_deleteDeletesPermanently delete a all by setting id. Destructive action; may require approval. API summary: Deleting a setting.
delete_companyDeletesPermanently delete a company by org id. Destructive action; may require approval. API summary: Deleting an organization.
delete_customDeletesPermanently delete a custom by report id. Destructive action; may require approval. API summary: Deleting a custom report.
delete_deployerDeletesPermanently delete a deployer by deployer id. Destructive action; may require approval. API summary: Deleting Deployer.
delete_groupDeletesPermanently delete a group by group id. Destructive action; may require approval. API summary: Deleting an endpoint group.
delete_managedDeletesPermanently delete a managed by endpoint id. Destructive action; may require approval. API summary: Deleting an endpoint.
delete_remediationDeletesPermanently delete a remediation by remediation id. Destructive action; may require approval. API summary: Deletes remediation record of compensating controls.
delete_roleDeletesPermanently delete a role by role id. Destructive action; may require approval. API summary: Deleting a specific role.
delete_role_userDeletesPermanently delete a user by user id. Destructive action; may require approval. API summary: Unassigning user from a specific role.
delete_scheduleDeletesPermanently delete a schedule by automation id. Destructive action; may require approval. API summary: Deleting a automation schedule.
delete_software_repositoryDeletesPermanently delete a software repository by package id. Destructive action; may require approval. API summary: Delete custom Software Repository package.
delete_subscriptionDeletesPermanently delete a subscription by subscription id. Destructive action; may require approval. API summary: Deleting the report subscription.
delete_userDeletesPermanently delete a user by user id. Destructive action; may require approval. API summary: Delete user.
delete_versionDeletesPermanently delete a version by version id. Destructive action; may require approval. API summary: Delete version from Software Repository package.
delete_version_additional_actionDeletesPermanently delete a additional action by action id. Destructive action; may require approval. API summary: Delete additional action from version of Software Repository package.
export_auditsExport audits. Results are paginated. API summary: Export of audit trail data.
export_dataExport data. API summary: Exporting report details.
export_reportdataExport reportdata. Results are paginated. API summary: Exporting a report.
get_action_templateGet one action template by template id. API summary: Getting a specific action template.
get_agent_deploymentGet one agent deployment by org id. API summary: Getting Agent Deployment settings.
get_agent_installationGet one agent installation by install type. API summary: Getting the URL for agent installation.
get_allGet one all by data source id. API summary: Getting a specific data source.
get_all_reports_org_id_category_id_getGet one all by report or category id. API summary: Listing reports and categories.
get_all_scripts_org_id_script_id_getGet one all by script id. API summary: Getting a specific script.
get_all_setting_templates_org_id_template_id_getGet one all by template id. API summary: Getting a setting template.
get_all_settings_org_id_setting_id_getGet one all by setting id. API summary: Getting setting configuration.
get_automationGet one scheduled automation by `automation_id`, with its actions, targets and schedule.
get_automation_runGet one automation run by its ID (`automation_id`).
get_companyGet one company by org id. API summary: Getting usage statistics for a specific organization.
get_current_userGet the settings of the user the connection is signed in as.
get_cve_descriptionGet the general description of a CVE by `cve_id`.
get_deployerGet one deployer by org id. Results are paginated. API summary: Listing Deployers.
get_deployer_endpoints_connectors_org_id_deployer_id_getGet one deployer by deployer id. API summary: Getting a specific Deployer.
get_endpointGet one managed endpoint by `endpoint_id`, with OS, status, user and last-seen details.
get_endpoint_installed_softwareList the software installed on one endpoint (`endpoint_id`).
get_endpoint_status_summaryGet a summary of endpoint status (online, offline, needing updates or reboot) for the organization.
get_eventGet one event by event id. API summary: Get an audit record by its ID.
get_group_endpoints_groups_group_idGet one group by group id. API summary: Getting an endpoint group.
get_logGet one log by org id. Results are paginated. API summary: Getting diagnostic logs.
get_remote_sessionGet one remote session by session id. API summary: Getting a remote session.
get_report_dataGet the rows of report `report_id`, optionally for one `endpoint_id`; filterable and paged.
get_roleGet one role by role id. API summary: Getting a specific role.
get_software_repositoryGet one software repository by org id. Results are paginated. API summary: List Software Repository packages.
get_software_repository_package_settingsGet one software repository by package id. API summary: Get Software Repository package settings.
get_update_packageGet missing-update details for one software package by `package_id`.
get_userGet one user by user id. API summary: Get user.
get_versionGet one version by version id. API summary: Get version in Software Repository package.
get_vulnerabilityGet details of one vulnerability in your organization by `cve_id`.
list_action_templatesList the available automation action templates (for example deploy updates, reboot, run script), with their IDs for run_automation.
list_allsList alls. Optional filters: builtin. API summary: Listing data sources.
list_alls_scripts_org_id_getList alls. Optional filters: builtin or platform. API summary: Listing scripts.
list_automation_run_resultsList per-endpoint results for the automation run `instance_id`, filtered by `last_status`.
list_automation_runsList automation runs (history), filtered by `status`, `completed` or `endpoint_id`.
list_automationsList scheduled automations (policies) in the organization.
list_companies_license_usage_organizations_getList companies. API summary: Getting usage statistics for organizations.
list_deployer_installation_windows_exesList windows exes for a deployer installation. API summary: Getting Deployer installation URL.
list_endpoint_groupsList endpoint groups in the organization.
list_endpoint_missing_updatesList updates missing on one endpoint (`endpoint_id`), filtered by `approval_status` or `security_severity`.
list_endpoint_result_detailsList details for a endpoint result. API summary: Getting details of a specific endpoint.
list_endpointsList managed endpoints (computers), filtered by `status`, `online_status`, `os`, `update_status`, `vulnerability_status` or `reboot_required`; paged with `from` and `limit`.
list_group_endpointsList the endpoints in the group `group_id`, with the same status filters as list_endpoints.
list_installed_softwareList installed software across all endpoints; filterable and paged.
list_missing_updatesList missing updates across the organization, filtered by `approval_status`, `security_severity` or SLA days.
list_organizationsList the Action1 organizations you can access, with their IDs.
list_reportsList available reports and report categories, with their IDs.
list_schedule_deployment_statusesList deployment statuses for a schedule. API summary: Getting the deployment statuses of a automation.
list_software_repository_match_conflictsList match conflicts for a software repository. Optional filters: app name match. API summary: Check for Software Repository package matching conflicts before creating a new package version.
list_software_repository_match_conflicts_packages_all_package_idList match conflicts for a software repository. Optional filters: app name match. API summary: Check for package matching conflicts when editing and existing package version.
list_subscriptionsList subscriptions. API summary: Getting enterprise license information.
list_subscriptions_enterprise_getList subscriptions. API summary: Getting enterprise settings.
list_subscriptions_license_usage_enterprise_getList subscriptions. API summary: Getting usage statistics for an enterprise.
list_subscriptions_me_subscriptions_getList subscriptions. Optional filters: from. Results are paginated. API summary: Listing report subscriptions.
list_user_rolesList roles for a user. Optional filters: from. Results are paginated. API summary: List the roles assigned to a user.
list_vulnerabilitiesList vulnerabilities (CVEs) found on endpoints, filtered by `score`, `remediation_status`, `endpoint_id` or published date.
list_vulnerable_endpointsList the endpoints affected by the vulnerability `cve_id`.
run_automationChanges dataRun an automation now: `name`, `actions` (template IDs and parameters), target `endpoints` and `retry_minutes`. Acts immediately on the target computers (for example installing updates or rebooting).
searchSearch the organization for endpoints, updates, software and more by free-text `query`.
search_allsSearch alls by filter. Use this to find existing alls before creating a new all. API summary: Listing setting templates.
search_alls_settings_org_id_getSearch alls by filter, sortby, from or category. Use this to find existing alls before creating a new all. Results are paginated. API summary: Listing settings.
search_data_drilldownsSearch drilldowns for a data by from, sortby, filter or live only. Use this to find existing drilldowns before creating a new drilldown. Results are paginated. API summary: Drilling down to details.
search_eventsSearch events by event, timefrom, timeto, from, sortby or filter. Use this to find existing events before creating a new event. Results are paginated. API summary: Get audit records of user actions.
search_installed_software_errorsSearch errors for a installed software by from, sortby or filter. Use this to find existing errors before creating a new error. Results are paginated. API summary: Getting apps report errors.
search_permissionsSearch permissions by from, sortby or filter. Use this to find existing permissions before creating a new permission. Results are paginated. API summary: Listing permission templates.
search_reportdatum_errorsSearch errors for a reportdatum by from, sortby or filter. Use this to find existing errors before creating a new error. Results are paginated. API summary: Getting report errors.
search_role_usersSearch users for a role by from, sortby or filter. Use this to find existing users before creating a new user. Results are paginated. API summary: Listing users in a specific role.
search_rolesSearch roles by from, sortby or filter. Use this to find existing roles before creating a new role. Results are paginated. API summary: Listing roles.
search_usersSearch users by from, filter or user type. Use this to find existing users before creating a new user. Results are paginated. API summary: Listing users.
search_version_endpointsSearch endpoints for a version by from, sortby or filter. Use this to find existing endpoints before creating a new endpoint. Results are paginated. API summary: Listing endpoints missing a specific update.
search_vulnerability_remediationsSearch remediations for a vulnerability by filter, sortby or from. Use this to find existing remediations before creating a new remediation. Results are paginated. API summary: Lists past remediation actions for a specific vulnerability.
stop_automation_runChanges dataStop a running automation by `instance_id`.
submit_roleDeletesClone a role (role id). Destructive action; may require approval. API summary: Cloning a role.
submit_software_repositoryVisible to othersClone a software repository (package id). Has effects visible outside this system. API summary: Clone Software Repository package.
update_agent_deploymentChanges dataUpdate an existing agent deployment identified by org id. Only the fields you pass are changed. API summary: Updating Agent Deployment settings.
update_allChanges dataUpdate an existing all identified by data source id. Only the fields you pass are changed. API summary: Updating a custom data source.
update_companyChanges dataUpdate an existing company identified by org id. Only the fields you pass are changed. API summary: Updating organization settings.
update_customChanges dataUpdate an existing custom identified by report id. Only the fields you pass are changed. API summary: Updating a custom report.
update_groupChanges dataUpdate an existing group identified by org id. API summary: Creating a new group.
update_installed_software_requeryChanges dataUpdate an existing requery identified by endpoint id. API summary: Re-querying installed apps on a specific endpoint.
update_remediationChanges dataUpdate an existing remediation identified by remediation id. Only the fields you pass are changed. API summary: Updates record of compensating controls when remediation changes.
update_remote_sessionChanges dataUpdate an existing remote session identified by session id. Only the fields you pass are changed. API summary: Switching a current monitor.
update_roleDeletesUpdate an existing role identified by role id. Only the fields you pass are changed. Destructive action; may require approval. API summary: Updating a specific role.
update_role_userDeletesUpdate an existing user identified by user id. Destructive action; may require approval. API summary: Assigning user to a specific role.
update_scheduleChanges dataUpdate an existing schedule identified by org id. API summary: Create a automation schedule.
update_software_repositoryChanges dataUpdate an existing software repository identified by org id. API summary: Create new Software Repository package.
update_subscriptionChanges dataUpdate an existing subscription identified by subscription id. Only the fields you pass are changed. API summary: Updating the report subscription.
update_subscriptionsVisible to othersUpdate an existing subscription. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updating enterprise settings.
update_userChanges dataUpdate an existing user identified by user id. Only the fields you pass are changed. API summary: Update user.
update_usersVisible to othersUpdate an existing user. Only the fields you pass are changed. Has effects visible outside this system. API summary: Update the current user settings.
update_versionChanges dataUpdate an existing version identified by version id. Only the fields you pass are changed. API summary: Modify version in Software Repository package.
upload_versionChanges dataUpload a version (version id). API summary: Initialize package file upload.

Set up in three steps

1
Pick the app
Create a free HeyMyApps account and choose Action1 from the app list.
2
Paste your key
Paste your Action1 console host (app.action1.com for North America, or app.na-2.action1.com, app.eu.action1.com, app.uk.action1.com or app.au.action1.com), plus a Client ID and Client Secret. Create them on the API Credentials page in the Action1 console with the permissions you need; the secret is shown only once. Add your organization ID for calls that need one.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in Action1?

It can read endpoints, endpoint groups, installed software, missing updates, vulnerabilities, automations, automation runs and reports, and search your organization. It can run an automation on chosen endpoints and stop a running one, if you switch those tools on.

Does the AI see my Action1 credentials?

No. Your Action1 Client ID and Client Secret are encrypted at rest and never shown to the AI. After you save them, they are not shown again, not even to you. The AI only sees the results of the tools it calls.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start read-only. Running an automation acts on real computers right away, for example installing updates or rebooting, and it can require your approval before it runs. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

HeyMyApps has a free plan with no credit card required. Paid plans bill per completed task. You also need your own Action1 account.

Which console host should I enter?

Enter the host of the region where your Action1 account lives: app.action1.com for North America, or app.na-2.action1.com, app.eu.action1.com, app.uk.action1.com or app.au.action1.com. It is the address you see in the browser when you are signed in to the Action1 console.