Action1 MCP by usefulapi
Read endpoints, missing updates, CVE vulnerabilities, installed software and reports in Action1.
What it does
Action1 MCP by usefulapi is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)Hosted endpoint
https://action1.usefulapi.io/mcpstreamable-http
In Claude Code: claude mcp add --transport http action1-mcp-by-usefulapi https://action1.usefulapi.io/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"action1-mcp-by-usefulapi": {
"url": "https://action1.usefulapi.io/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 2h agoONLINE Action1 MCP by usefulapi answered an MCP connection on 07 Nov 2026 and introduced itself as action1-mcp 1.0.0 (MCP protocol 2025-06-18).
16 tools offered to AI assistants
action1_list_organizations· List the Action1 organizations these API credentials can reach, with their ids. Call this first: most other tools need an organization id. Action1 API: GET /organizations.action1_get_current_user· Get the settings and roles of the user behind these API credentials. Use it to check what the credentials can see. Action1 API: GET /me.action1_search· Search endpoints, software and other Action1 objects in one organization by text. Action1 API: GET /search/{orgId}.action1_list_endpoints· List the managed endpoints (computers) of one organization or of all organizations, with status, OS, last-seen time and update state. Filter by status, update state, OS or reboot need. Action1 API: GET /endpoints/managed/{orgId}.action1_get_endpoint· Get one managed endpoint: name, OS, hardware, agent version, last seen and status. Action1 API: GET /endpoints/managed/{orgId}/{endpointId}.action1_list_endpoint_groups· List the endpoint groups (dynamic or manual sets of endpoints) of one organization. Action1 API: GET /endpoints/groups/{orgId}.action1_list_group_endpoints· List the endpoints in one endpoint group, with the same filters as action1_list_endpoints. Action1 API: GET /endpoints/groups/{orgId}/{groupId}/contents.action1_list_missing_updates· List the software updates (patches) that endpoints still miss, across one organization or all organizations. Filter by approval status and severity. Action1 API: GET /updates/{orgId}.action1_list_package_updates· List the updates of one software package and the endpoints they affect. Action1 API: GET /updates/{orgId}/{packageId}.action1_list_vulnerabilities· List the CVE vulnerabilities found on endpoints in one organization or all organizations, with CVSS score, remediation deadline and affected endpoint counts. Action1 API: GET /vulnerabilities/{orgId}.action1_get_vulnerability· Get one CVE as Action1 sees it in one organization: CVSS vector, exploitability, CISA KEV flag, remediation status and deadline. Action1 API: GET /vulnerabilities/{orgId}/{cveId}.action1_list_vulnerability_endpoints· List the endpoints in one organization or all organizations that a CVE affects, with the software involved. Action1 API: GET /vulnerabilities/{orgId}/{cveId}/endpoints.
Show 4 more
action1_list_installed_software· List the software installed across the endpoints of one organization (the software inventory). Action1 API: GET /installed-software/{orgId}/data.action1_list_automation_instances· List automation runs (instances) of one organization with their status and completion. Action1 API: GET /automations/instances/{orgId}.action1_list_reports· List the Action1 report definitions available to these credentials (built-in and custom). Use the report ids with action1_get_report_rows. Action1 API: GET /reports/all.action1_get_report_rows· Get the rows of one Action1 report for one organization. Use action1_list_reports for report ids. Action1 API: GET /reportdata/{orgId}/{reportId}/data.
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Review pull requests Security Scanning | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- DraugrREMOTELOCALSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk
- EchelonGraph CVE & ExposureREMOTELOCALCVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless
- MCPProxyREMOTELOCALLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Version | 1.0.1 | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Hosted endpoint | https://action1.usefulapi.io/mcp | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Website | https://usefulapi.io/action1/ | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Repository | https://github.com/m190/usefulapi-mcp | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 41m ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 41m ago |
Change history
- VERSION07 Nov 20261.0.0 → 1.0.1
- NEW07 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Action1 MCP by usefulapi still online?
Free alerts · no account▲ 0Do you run Action1 MCP by usefulapi? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about Action1 MCP by usefulapi
How do I connect Action1 MCP by usefulapi?
Use the hosted endpoint https://action1.usefulapi.io/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Action1 MCP by usefulapi offer?
When Electra Index connected on 07 Nov 2026, it listed 16 tools: action1_list_organizations, action1_get_current_user, action1_search, action1_list_endpoints, action1_get_endpoint, action1_list_endpoint_groups, action1_list_group_endpoints, action1_list_missing_updates and more. The full list is in "Live check" above.
Is Action1 MCP by usefulapi online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.
What can I use Action1 MCP by usefulapi for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.