Name: Action1 RMM (unofficial)
Author: mguttmann

Action1 RMM (unofficial) MCP

Unofficial MCP server for the Action1 RMM API: fleet queries, scripts, updates, guarded changes.

Grade A Local · stdio API key 167 tools v0.6.2 MIT

No reviews yet by mguttmannnpm 607 Runs on your machine, nothing hosted

93/100

trust score

downloads a day

local

runs on your machine

607

downloads in 30d

What it does

Unofficial MCP server for the Action1 RMM API: fleet queries, scripts, updates, guarded changes.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --env 'ACTION1_BASE_URL=${ACTION1_BASE_URL}' --env 'ACTION1_ORG_ID=${ACTION1_ORG_ID}' --env 'ACTION1_CLIENT_ID=${ACTION1_CLIENT_ID}' --env 'ACTION1_CLIENT_SECRET=${ACTION1_CLIENT_SECRET}' --transport stdio action1-rmm-unofficial-mcp '--' npx -y action1-mcp-server

# 2 — ask your agent for something these tools do
#   action1_create_organization, action1_get_me, action1_update_me and 164 more

It needs ACTION1_BASE_URL, ACTION1_ORG_ID, ACTION1_CLIENT_ID, ACTION1_CLIENT_SECRET: this reads them from your environment, so export them first.

Action1 RMM (unofficial) costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

mguttmann5 servers

3 categories

All 5 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts Action1 RMM (unofficial) as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. Its scan result is on the Security tab — read the surface before you approve it.

Claude Codedeclared by this listing

This is a public server: you run it yourself and this marketplace is not in the path. You need Node.js — the current LTS (24) is the safe choice; npx comes with it. Claude Code registers it in one command; --scope user makes it available in every project. Claude Code reads ACTION1_BASE_URL (Action1 API base URL of your region: https://app.eu.action1.com/api/3.0 (Europe), https://app.action1.com/api/3.0 (North America),…), ACTION1_ORG_ID (Default Action1 organization UUID; each tool can override it with org_id), ACTION1_CLIENT_ID (API client ID from the Action1 console, Settings > API Credentials (api-key-...@action1.com). It can run code on every managed endpoint: treat it like an…), ACTION1_CLIENT_SECRET (API client secret, shown once when the credential is created) from your environment each time it starts the server, so the value stays out of its config: export them in your shell profile (macOS, Linux), or run setx ACTION1_BASE_URL …, setx ACTION1_ORG_ID …, setx ACTION1_CLIENT_ID …, setx ACTION1_CLIENT_SECRET … and open a new terminal (Windows). The '--' is in quotes so that PowerShell passes it on.

claude mcp add --scope user --env 'ACTION1_BASE_URL=${ACTION1_BASE_URL}' --env 'ACTION1_ORG_ID=${ACTION1_ORG_ID}' --env 'ACTION1_CLIENT_ID=${ACTION1_CLIENT_ID}' --env 'ACTION1_CLIENT_SECRET=${ACTION1_CLIENT_SECRET}' --transport stdio action1-rmm-unofficial-mcp '--' npx -y action1-mcp-server

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it runs from its publisher’s own package: this marketplace is not in the path, so there is no key of ours to hold and no card to add.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: ACTION1_BASE_URL — Action1 API base URL of your region: https://app.eu.action1.com/api/3.0 (Europe), https://app.action1.com/api/3.0 (North America), https://app.na-2.action1.com/api/3.0 (North America 2), https://app.uk.action1.com/api/3.0 (United Kingdom) or https://app.au.action1.com/api/3.0 (Australia).; ACTION1_ORG_ID — Default Action1 organization UUID; each tool can override it with org_id.; ACTION1_CLIENT_ID — API client ID from the Action1 console, Settings > API Credentials (api-key-...@action1.com). It can run code on every managed endpoint: treat it like an admin password.; ACTION1_CLIENT_SECRET — API client secret, shown once when the credential is created.. You set them in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.

What you approve

167 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Read from its source code. A server that builds its tool list when it starts can list more tools than this.

Create an organization. Creates a new organization. Perm: manage_organizations.

Parameter	Type	Required	Notes
body	object	no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get the current user settings. Gets settings for the currently authenticated user.

Parameter	Type	Required	Notes
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update the current user settings. Updates settings for the currently authenticated user.

Parameter	Type	Required	Notes
body	object	no	Request body (schema: UserPayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Search. Perm: view_endpoints, view_software_repository, view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
query	string	yes	Provide a query for searching.
limit	integer	no	Set the maximum number of items to be returned (the page size).
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Check endpoint status. Retrieves information if any endpoints were added to an organization.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Get the URL for agent installation. In order to manage an endpoint, the Action1 agent needs to be installed on it first. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
install_type	string	yes	The install type.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Change an endpoint comment or name. Changes the user-defined 'comment', 'name' and custom attributes for the specified endpoint. Perm: manage_endpoint_attributes.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete an endpoint. Removes a specified endpoint and attempts to uninstall its agent. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Move the endpoint to another organization. Moves the endpoint to another organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Filtered/paginated variant of action1_list_missing_updates (curated). Use for severity/approval_status/sortby filtering. Get missing updates for an endpoint. Obtains a list of missing software updates for a specific endpoint. Perm: view_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
limit	integer	no	Set the maximum number of items to be returned (the page size).
from	integer	no	Provide the number of the first record to be returned.
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
approval_status	string	no	Specify the update status.
security_severity	string	no	—
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

List endpoint groups. Lists existing endpoint groups. Use filters and narrow down and sort the returned results. Perm: view_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
filter	string	no	—
sortby	string	no	Define the sorting order by a certain field.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create a new group. Creates a new endpoint group within the specified organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get an endpoint group. Gets a specific endpoint group by its ID. Perm: view_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
group_id	string	yes	Provide an endpoint group ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Change group settings. Changes settings for an existing endpoint group in the specified organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
group_id	string	yes	Provide an endpoint group ID.
body	object	no	Request body (schema: EndpointGroupPayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete an endpoint group. Deletes an existing group in the specified organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
group_id	string	yes	Provide an endpoint group ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List endpoints from the group. Lists all endpoints included in the specified group. Perm: view_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
group_id	string	yes	Provide an endpoint group ID.
limit	integer	no	Set the maximum number of items to be returned (the page size).
from	integer	no	Provide the number of the first record to be returned.
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
fields	string	no	—
status	string	no	Filter by online status.
online_status	string	no	Filter by last seen online status.
update_status	string	no	Filter by update status.
vulnerability_status	string	no	Filter by vulnerability status.
reboot_required	string	no	Filter by reboot requirement of the endpoint.
os	string	no	Filter by operation system.
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Start a new remote session. Sends a request to the endpoint to start a new remote session. Perm: remote_connect.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get a remote session. Gets details for an existing remote session specified by ID. Perm: remote_connect.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
session_id	string	yes	Provide a specific remote session ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Switch a current monitor. Changes the 'current_monitor' parameter for a specific remote session. Perm: remote_connect.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
endpoint_id	string	yes	Provide an endpoint ID.
session_id	string	yes	Provide a specific remote session ID.
body	object	no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get Agent Deployment settings. Obtains the current Agent Deployment settings in a specified organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update Agent Deployment settings. Updates the Agent Deployment configuration for a specific organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
body	object	no	Request body (schema: AgentDeploymentPayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List Deployers. Lists all Action1 Deployer services in the specified organization. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
status	string	no	Specify the status.
filter	string	no	—
sortby	string	no	Define the sorting order by a certain field.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
os	string	no	Filter by operation system.
installed_since	string	no	Enter the installation date.
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Get Deployer installation URL. Obtains an URL to download the Deployer installation file. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Get a specific Deployer. Obtains the current information about the specified Action1 Deployer service. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
deployer_id	string	yes	Provide a specific deployer ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Delete Deployer. Perm: manage_endpoints.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
deployer_id	string	yes	Provide a specific deployer ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List data sources. Gets a list of existing data sources. To filter out built-in data sources, set the 'builtin'. Perm: manage_data_sources, manage_reports.

Parameter	Type	Required	Notes
builtin	string	no	Specify if the package is builtin (yes) or custom (no).
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create a data source. Creates a new custom data source. At this time, all data sources are enterprise-wide. Perm: manage_data_sources.

Parameter	Type	Required	Notes
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get a specific data source. Gets details about a specific data source. Perm: manage_data_sources, manage_reports.

Parameter	Type	Required	Notes
data_source_id	string	yes	Provide a specific data source ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update a custom data source. Updates a custom data source specified by its ID. Perm: manage_data_sources.

Parameter	Type	Required	Notes
data_source_id	string	yes	Provide a specific data source ID.
body	object	no	Request body (schema: DataSourcePayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete a custom data source. Deletes an existing custom data source. Note that you cannot remove built-in data sources. Perm: manage_data_sources.

Parameter	Type	Required	Notes
data_source_id	string	yes	Provide a specific data source ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List scripts. Gets a list of existing scripts from the Script Library. Perm: use_scripts.

Parameter	Type	Required	Notes
builtin	string	no	Specify if the package is builtin (yes) or custom (no).
platform	string	no	platform
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create a custom script. Creates a new custom script and adds it to the Script Library. Perm: manage_scripts.

Parameter	Type	Required	Notes
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get a specific script. Gets details for a script specified by its ID. Perm: use_scripts.

Parameter	Type	Required	Notes
script_id	string	yes	Provide a specific script ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update a custom script. Updates details for an existing custom script specified by its ID. Perm: manage_scripts.

Parameter	Type	Required	Notes
script_id	string	yes	Provide a specific script ID.
body	object	no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete a custom script. Deletes an existing custom script specified by its ID. Perm: manage_scripts.

Parameter	Type	Required	Notes
script_id	string	yes	Provide a specific script ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List setting templates. Gets a list of existing setting templates.

Parameter	Type	Required	Notes
filter	string	no	—
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Get a setting template. Gets details about a setting template specified by its ID.

Parameter	Type	Required	Notes
template_id	string	yes	Provide a specific setting template ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

List settings. Lists all existing settings. At this time, all settings are enterprise-wide. Perm: manage_advanced_settings.

Parameter	Type	Required	Notes
filter	string	no	—
sortby	string	no	Define the sorting order by a certain field.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
category	string	no	The category of advanced settings.
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create a new setting. Creates a new setting. At this time, all setting templates are enterprise-wide. Perm: manage_advanced_settings.

Parameter	Type	Required	Notes
body	object	yes	Request body (schema: SettingPayloadPost)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get setting configuration. Gets details about the setting configuration. Perm: manage_advanced_settings.

Parameter	Type	Required	Notes
setting_id	string	yes	Provide a specific setting ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update a setting. Updates an existing setting specified by its ID. Perm: manage_advanced_settings.

Parameter	Type	Required	Notes
setting_id	string	yes	Provide a specific setting ID.
body	object	no	Request body (schema: SettingPayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete a setting. Deletes an existing setting specified by its ID. Perm: manage_advanced_settings.

Parameter	Type	Required	Notes
setting_id	string	yes	Provide a specific setting ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

List reports. Gets a list of existing reports. At this time all reports are enterprise-wide.

Parameter	Type	Required	Notes
subtree	string	no	Specify if you want to query the entire report subtree.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

List reports and categories. Gets a list of reports and categories. At this time all reports are enterprise-wide.

Parameter	Type	Required	Notes
report_or_category_id	string	yes	Provide a specific report id or category id.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create a custom report. Creates a custom report in the predefined Custom report category. Perm: manage_reports.

Parameter	Type	Required	Notes
body	object	yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Update a custom report. Updates a custom report. You cannot changes a custom report's category. Perm: manage_reports.

Parameter	Type	Required	Notes
report_id	string	yes	Provide a specific report ID.
body	object	no	Request body (schema: ReportPayload)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete a custom report. Deletes a custom report specified by its ID. Perm: manage_reports.

Parameter	Type	Required	Notes
report_id	string	yes	Provide a specific report ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get report rows. Gets data organized by report rows. Use parameters to filter out returned results. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
live_only	string	no	Specify if you want to retrieve live results only.
details	string	no	—
endpoint_id	string	no	The ID of the endpoint to query.
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Get report errors. Returns report errors for the specified report. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Export a report. Exports data from the report. Use parameters to filter out exported data. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
format	string	no	Specify the report format.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
live_only	string	no	Specify if you want to retrieve live results only.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Re-querying a report. This API method initiates an asynchronous update ("requery") of the report's underlying data source. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
endpoint_id	string	no	The ID of the endpoint to query.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Drill down to details. Expands report details to provide more information. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
report_row_id	string	yes	Provide a specific report row ID.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
sortby	string	no	Define the sorting order by a certain field.
filter	string	no	—
live_only	string	no	Specify if you want to retrieve live results only.
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Export report details. Exports reports data. Use parameters to filter out exported data. Perm: view_reports.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
report_id	string	yes	Provide a specific report ID.
report_row_id	string	yes	Provide a specific report row ID.
format	string	no	Specify the report format.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

List Software Repository packages. Gets a list of Software Repository packages for the entire enterprise. Perm: view_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
filter	string	no	—
builtin	string	no	Specify if the package is builtin (yes) or custom (no).
custom	string	no	Specify if the package is custom (yes) or builtin (no).
sortby	string	no	Define the sorting order by a certain field.
from	integer	no	Provide the number of the first record to be returned.
limit	integer	no	Set the maximum number of items to be returned (the page size).
match_name	string	no	Provide the software name to search for.
match_version	string	no	Provide the software version to search for.
fields	string	no	Add FIELDS parameter to query extended data.
platform	string	no	platform
auto_paginate	boolean	no	Walk pages until limit or the size budget; then continue with next_cursor.
cursor	string	no	next_cursor of the previous call; takes precedence over from.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Create new Software Repository package. Create a new custom Software Repository package object (with no versions) and set its initial basic. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
body	object	yes	Request body (schema: SoftwareRepositoryPackagePayloadPost)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get Software Repository package settings. Gets details for a Software Repository package specified by its ID. Perm: view_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
fields	string	no	Add FIELDS parameter to query extended data.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Update Software Repository package settings. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
body	object	no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete custom Software Repository package. Deletes a custom Software Repository package specified by its ID. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Clone Software Repository package. Creates a full copy of an existing Software Repository package under a new package ID. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Create new version in Software Repository package. Adds a new version to the specified Software Repository package. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
body		yes	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Get version in Software Repository package. Gets details about a package version specified by its ID. Perm: view_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Modify version in Software Repository package.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
body		no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete version from Software Repository package. Deletes the specified version of the specified custom Software Repository package. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Delete additional action from version of Software Repository package. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
action_id	string	yes	Provide a specific action ID.
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Check for Software Repository package matching conflicts before creating a new package version. Perm: view_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
app_name_match	string	no	Provide the REGEX expression to match the software name.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Check for package matching conflicts when editing and existing package version. Perm: view_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
app_name_match	string	no	Provide the REGEX expression to match the software name.
response_format	string	no	Output format. Default markdown.
verbose	boolean	no	Skip per-item compactor.

Not supported by this server (see error text). Initialize package file upload. Initializes package file upload. The client starts by sending the initial upload request. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
platform	string	yes	platform
body		no	Request body
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

Not supported by this server (see error text). Upload package file chunks. Uploads package file chunks. Perm: manage_software_repository.

Parameter	Type	Required	Notes
org_id	string	no	Org UUID.
package_id	string	yes	Provide a specific package ID.
version_id	string	yes	Provide a specific version ID.
platform	string	yes	platform
upload_id	string	yes	upload_id
body	string	no	Request body (application/octet-stream)
confirm	string	no	Required to execute. Exact string "YES".
dry_run	boolean	no	Default true (preview). Set false to execute.

No parameter schema on file.

Free

$0 forever

Every tool, no call limit
No card, and mcprush charges nothing for it
Source published under MIT
Runs on your machine — nothing of it reaches our gateway
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Action1 RMM (unofficial) or to call it, at any volume.

ATrust score 93 / 100

Release 0.6.2 · scanned 28 Oct 2026

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score99

Client score93

Findings1 threat · 15 capability

Capabilityhigh

Coveragesource

Verificationsource

Surface digest53741adf83a74d3222209599bf4c08c980007f7b3a24fb931608683de185a739

Score vectorthreat 99 → client 93

Term	Level	What it prices	Points
capability-exposure	high	capability blast radius (high) — client exposure if the model is manipulated	−6
verification-discount	source	publisher verification (provenance) — cryptographic build provenance ties the artifact to its source	−0
coverage-honesty	source	inspection depth (source) — how much of the target the scan could see	−0

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

Tool surfaceread

Implementation sourceread

Package metadataread

Live transportnot available

Tools were statically extracted from the published source (167 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.

Tool	Capability tags	Why the tag was assigned
action1_list_recent_automations	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_automations_summary	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_endpoints	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_endpoints_summary	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_endpoint	untrusted-input	untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server)
action1_search_endpoints	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_missing_updates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_vulnerabilities	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_run_powershell	code-execexternal-sink	code-exec: keyword "powershell" in tool name; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_run_bash_macos	code-execexternal-sink	code-exec: keyword "bash" in tool name, parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_run_script	code-execexternal-sink	code-exec: keyword "run_script" in tool name; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_reboot_endpoint	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_deploy_update	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_deploy_package	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_uninstall_program	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_run_data_collection	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_create_organization	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_me	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_me	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_search	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_endpoints_onboarded_status	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_agent_install_url	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_endpoint	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_endpoint	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_move_endpoint	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_endpoint_missing_updates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_endpoint_groups	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_endpoint_group	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_group	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_group	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_group	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_group_contents	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_endpoint_remote_session	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_remote_session	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_remote_session	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_endpoint_discovery_settings	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_endpoint_agent_deployment	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_endpoint_deployers	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_windows_deployer_url	untrusted-input	untrusted-input: keyword "download", declares openWorldHint: true (interacts with entities outside the server)
action1_get_deployer	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_delete_deployer	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_data_sources	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_data_source	code-execexternal-sink	code-exec: parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_data_source	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_data_source	code-execexternal-sink	code-exec: parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_data_source	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_scripts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_script	code-execexternal-sink	code-exec: parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_script	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_script	code-execexternal-sink	code-exec: parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_script	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_setting_templates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_setting_template	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_settings	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_setting	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_setting	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_setting	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_setting	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_reports	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_report_or_category	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_report	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_update_report	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_report	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_report_data	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_report_errors	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_export_for_report	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_requery_report	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_drilldown_for_report_row	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_export_for_report_row	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_software_repository	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_package	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_software_repository_package	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_package	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_package	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_clone_package	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_create_package_version	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_version	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_version	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_version	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_package_version_action	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_match_conflicts_for_software_repository	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_match_conflicts_for_package	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_init_software_upload	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_upload_software_chunk	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_updates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_update_package	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_version_endpoints	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_approval	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_installed_software_data	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_requery_installed_software_for_org	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_installed_software_errors	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_installed_software_endpoint	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_requery_installed_software_for_endpoint	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_automation_schedules	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_automation_schedule	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_automation_schedule	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_automation	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_automation	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_automation_deployment_statuses	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_delete_automation_action	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_automation_instances	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_automation_instance	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_automation_instance	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_instance_endpoint_results	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_automation_script_output	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_stop_instance	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_logs	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_subscription	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_request_enterprise_trial	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_request_enterprise_quote	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_subscription_usage	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_subscription_usage_organizations	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_org_subscription_usage	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_roles	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_role	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_role	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_role	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_role	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_clone_role	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_role_users	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_role_user	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_role_user	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_permissions	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_enterprise	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_enterprise	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_request_enterprise_closure	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_revoke_enterprise_closure	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_update_organization	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_organization	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_report_subscriptions	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_report_subscription	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_update_report_subscription	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_report_subscription	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_users	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_user	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_user	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_update_user	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_user	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_user_roles	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_org_vulnerabilities	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_cve_endpoints	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_cve	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_cve_description	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_cve_remediations	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_create_cve_remediation	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_update_remediation	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_delete_remediation	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_list_audit_events	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_export_audit_log	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_audit_event	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_add_endpoint_to_group	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true, handler sends an HTTP POST (client.request(path) at dist/tools/groups.js:42
action1_remove_endpoint_from_group	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true, handler sends an HTTP POST (client.request(path) at dist/tools/groups.js:76
action1_list_organizations	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_raw_request	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
action1_get_automation_status	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_automation_results	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_automation_output	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_list_action_templates	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_get_action_template	untrusted-input	untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server)
action1_wait_for_automation	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_execute_and_wait	code-execexternal-sink	code-exec: parameter "script"; external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true, handler sends an HTTP POST (client.request(postPath) at dist/tools/workflows.js:189
action1_endpoint_groups_resolve	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_software_inventory_for_endpoint	untrusted-input	untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server)
action1_recurring_schedules	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_audit_log_search	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_report_export	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
action1_cve_remediation_plan	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest53741adf83a74d32

Scanned2026-10-28

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.