Connectors · Data & integration
Aiven MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Aiven and the rest of your systems. It gives your agent 503 Aiven actions (245 reads, 173 writes and 85 that wait for a confirmation) and holds the Aiven credential itself, so the agent never does. It paces Aiven's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "aiven.project.list", intent: "check which Aiven account is connected"}# List projects · read · 1 upstream call- 503actionsin one signed file
- 245readlook, never change
- 173writecreate and update
- 85wait for a yesdestructive, confirmed first
Set up
Connect Aiven in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Aiven.
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
access_tokenAiven token
account { op: "connections.requirements", service: "aiven" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "aiven.project.list" }# list projects · read · 1 upstream callcheck { action: "aiven.user.auth", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Aiven at a glance
- Sign-in
- Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
access_token- Limits we pace to
- 300 calls a minute, per connection
- API covered
- Aiven API v1 (OpenAPI 3.0.1)
api.aiven.io/v1 - Built from
- Aiven's documentation, read 23 October 2026api.aiven.ioapi.aiven.io
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 209 of 245 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Aiven up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Aiven.
503 actions in 268 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 245readlook, never change
- 173writecreate and update
- 85destructivewait for a confirmation
Service kafka connect connector
70 read · 5 write · 2 destructive
Create a Kafka Connect connector · Pause a Kafka Connect Connector · Restart a Kafka Connect Connector · Resume a Kafka Connect Connector
Account
62 read · 3 write · 1 destructive
List accounts you have access to · Get account details · Create a new account · Move an existing organization unit
Project
62 read · 3 write · 1 destructive
List projects · Get project details · Create a project · Send project membership invitation
Service integration
63 read · 2 write · 1 destructive
List available integrations for a service · List available service integration types · Get service integration · Create a new service integration
Service integration endpoint
63 read · 2 write · 1 destructive
List available integration endpoints for project · List available service integration endpoint types · Get service integration endpoint · Create a new service integration endpoint
Upgrade pipeline step
62 read · 3 write · 1 destructive
List upgrade steps · Get details of a specific upgrade step · Create an upgrade step · Validate upgrade step
Account team
52 read · 2 write · 1 destructive
List teams belonging to an account · Get details for a single team · Create a new team · Update team details
AI gateway key
52 read · 2 write · 1 destructive
List the AI Gateway keys of a project · Get the AI Gateway key of a project · Create an AI Gateway key · Update an AI Gateway key
112 more areas · 456 actions
- Billing group 5
- CMK 5
- Custom cloud environment 5
- Kafka connect custom plugin file 5
- Organization address 5
- Organization billing group 5
- Organization projects 5
- Organization user 5
- Organization VPC 5
- Service 5
- Service flink application deployment 5
- Service flink jar application deployment 5
- Service kafka topic 5
- Access token 4
- Account authentication method 4
- Application user 4
- Credit card 4
- Kafka connect custom plugin 4
- Organization governance access 4
- Service flink application 4
- Service flink application version 4
- Service flink jar application 4
- Service kafka mirror maker replication flow 4
- Service kafka native acl 4
- Service kafka quota 4
- Service open search index 4
- Service privatelink aws 4
- Service privatelink azure 4
- Service privatelink google 4
- User 4
- User group 4
- VPC 4
- Account team members 3
- Account team project 3
- Kafka connect custom plugin class 3
- Managed agents agent 3
- Organization 3
- Organization auth domain 3
- Organization domain 3
- Permissions 3
- Project service tags 3
- Project static ip 3
- Project tags 3
- Project user 3
- Service click house database 3
- Service click house user 3
- Service database 3
- Service flink jar application version 3
- Service kafka acl 3
- Service open search acl 3
- Service open search security 3
- Service opensearch custom repo snapshot 3
- Service PG bouncer 3
- Service privatelink azure connection 3
- Service schema registry acl 3
- Service schema registry subject version 3
- Service user 3
- Static ip 3
- User account invites 3
- User credit card 3
- VPC peering connection 3
- Account payment method 2
- Application user access token 2
- Bank transfer 2
- Billing group credits 2
- Billing group invoice 2
- Billing group project 2
- Custom cloud environment permissions 2
- Managed agents agent schedule 2
- Managed agents message 2
- Managed agents session 2
- Organization authentication config 2
- Organization billing invoice 2
- Organization domains 2
- Organization ip allow list 2
- Organization user invitation 2
- Payment method custom 2
- Project credits 2
- Project invite 2
- Project service types 2
- Service click house role 2
- Service kafka topic message 2
- Service open search index multiple 2
- Service privatelink google connection 2
- Service schema registry 2
- Service schema registry global config 2
- Service schema registry subject config 2
- Service task 2
- Service user credentials 2
- User password 2
- Account authentication methods 1
- Account billing group 1
- Account event 1
- Account payment methods 1
- Account projects 1
- Account projects teams 1
- Account team invites 1
- Account team member cancel 1
- Account team member verify 1
- Account team project association 1
- Account user projects 1
- Account user teams 1
- Account users 1
- AI gateway model 1
- AI gateway usage 1
- Application user access tokens 1
- Application users 1
- Billing group event 1
- Billing group fee breakdown 1
- Billing group invoice lines 1
- Billing group projects 1
- 149 smaller areas 149
Top actions
The Aiven API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 2 of Aiven's 2 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
aiven.user.infoGet information for the current session's user | Get information for the current session's user. | read | identity.current_user.get307 connectors |
aiven.project.listList projects | <p>The API endpoint /v1/project is deprecated. | read | work.project.list109 connectors |
aiven.organization_user.listList users of the organization | List users of the organization. | read | this connector |
aiven.cmk.listList CMKs | <p>Response example: { "cmks": [ { "id": "550e8400-e29b-41d4-a716-446655440000", "provider": "aws",… | read | this connector |
aiven.vpc.listList VPCs for a project | List VPCs for a project. | read | this connector |
aiven.list.cloudsList cloud platforms | <p>Returns a list of available cloud platforms.</p>. | read | this connector |
aiven.account.listList accounts you have access to | List accounts you have access to. | read | this connector |
aiven.service.listList services | List services. | read | this connector |
aiven.user.authAuthenticate user | <p>Authenticate user and return token for following authorizations</p>. | write | this connector |
aiven.cmk.createCreate new CMK | <p>Request example: { "provider": "aws", "resource":… | write | this connector |
aiven.cmk.updateUpdate CMK | Update CMK. | write | this connector |
aiven.cmk.deleteDelete CMK | Delete CMK. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the Aiven actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Give me a one-line status for every active Aiven project.
calls
aiven.project.list - Writewrite
Authenticate user in Aiven. Show me exactly what you will send before you save it.
calls
aiven.user.auth
Governance for Aiven
Destructive actions wait for a yes.
85 Aiven actions are destructive. The first 10:
- Delete CMK
aiven.cmk.delete - Delete a project VPC
aiven.vpc.delete - Logout user, removing current authentication token
aiven.user.logout - Delete empty account
aiven.account.delete - Delete project
aiven.project.delete - Terminate a service
aiven.service.delete - Delete a static IP address
aiven.static_ip.delete - Delete a group
aiven.user_group.delete - Delete credit card payment method in the organization
aiven.credit_card.delete - Expire all authorization tokens
aiven.user_tokens.expire
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete CMK?
intent: the user asked me to delete CMK
account { op: "keys.create", name: "aiven-agent", allowed_actions: ["aiven.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "aiven.cmk.delete", approver: "[email protected]" }, { match: "aiven.vpc.delete", approver: "[email protected]" }, { match: "aiven.user.logout", approver: "[email protected]" } ]}Cost
What Aiven costs on actionlake.
Every Aiven action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Aiven refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 503 Aiven actions
- 503actions pageeach page of a long list is one call
- 209reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Aiven action.
503 actions by area: the id your agent calls, what it does, and its effect.
Service kafka connect connector7
aiven.service_kafka_connect_connector.createCreate a Kafka Connect connectorwriteaiven.service_kafka_connect_connector.pausePause a Kafka Connect Connectorwrite- and 5 more in this area
Account6
aiven.account.createCreate a new accountwriteaiven.account.getGet account detailsread- and 4 more in this area
Project6
aiven.project.createCreate a projectwriteaiven.project.getGet project detailsread- and 4 more in this area
Service integration6
aiven.service_integration.createCreate a new service integrationwriteaiven.service_integration.getGet service integrationread- and 4 more in this area
Service integration endpoint6
aiven.service_integration_endpoint.createCreate a new service integration endpointwriteaiven.service_integration_endpoint.getGet service integration endpointread- and 4 more in this area
Upgrade pipeline step6
aiven.upgrade_pipeline_step.createCreate an upgrade stepwriteaiven.upgrade_pipeline_step.getGet details of a specific upgrade stepread- and 4 more in this area
Account team5
aiven.account_team.createCreate a new teamwriteaiven.account_team.getGet details for a single teamread- and 3 more in this area
AI gateway key5
aiven.ai_gateway_key.createCreate an AI Gateway keywriteaiven.ai_gateway_key.getGet the AI Gateway key of a projectread- and 3 more in this area
Billing group5
aiven.billing_group.createCreate a billing groupwriteaiven.billing_group.getGet billing group detailsread- and 3 more in this area
CMK5
aiven.cmk.createCreate new CMKwriteaiven.cmk.getGet CMK detailsread- and 3 more in this area
Custom cloud environment5
aiven.custom_cloud_environment.createCreate a custom cloudwriteaiven.custom_cloud_environment.getRetrieve a custom cloudread- and 3 more in this area
Kafka connect custom plugin file5
aiven.kafka_connect_custom_plugin_file.createInitiate a custom plugin file uploadwriteaiven.kafka_connect_custom_plugin_file.getGet a single custom plugin file with its discovered plugin classesread- and 3 more in this area
Organization address5
aiven.organization_address.createCreate new address for an organizationwriteaiven.organization_address.getGet organization address inforead- and 3 more in this area
Organization billing group5
aiven.organization_billing_group.createCreate an organization billing groupwriteaiven.organization_billing_group.getGet organization billing group detailsread- and 3 more in this area
Organization projects5
aiven.organization_projects.createCreate project under the organizationwriteaiven.organization_projects.getRetrieve project under the organizationread- and 3 more in this area
Organization user5
aiven.organization_user.getGet details on a user of the organizationreadaiven.organization_user.inviteInvite a user to the organizationwrite- and 3 more in this area
Organization VPC5
aiven.organization_vpc.createCreate organization VPCwriteaiven.organization_vpc.getGet organization VPCread- and 3 more in this area
Service5
aiven.service.createCreate a servicewriteaiven.service.getGet service informationread- and 3 more in this area
Service flink application deployment5
aiven.service_flink_application_deployment.cancelCancel an ApplicationDeploymentdestructiveaiven.service_flink_application_deployment.createCreate an ApplicationDeploymentwrite- and 3 more in this area
Service flink jar application deployment5
aiven.service_flink_jar_application_deployment.cancelCancel a JarApplicationDeploymentdestructiveaiven.service_flink_jar_application_deployment.createCreate an JarApplicationDeploymentwrite- and 3 more in this area
Service kafka topic5
aiven.service_kafka_topic.createCreate a Kafka topicwriteaiven.service_kafka_topic.getGet Kafka topic inforead- and 3 more in this area
Access token4
aiven.access_token.createCreate new access tokenwriteaiven.access_token.listList all valid access tokensread- and 2 more in this area
Account authentication method4
aiven.account_authentication_method.createCreate a new authentication methodwriteaiven.account_authentication_method.deleteDelete authentication methoddestructive- and 2 more in this area
Application user4
aiven.application_user.createCreate an application userwriteaiven.application_user.deleteDelete an application userdestructive- and 2 more in this area
Credit card4
aiven.credit_card.createCreate credit card payment method in the organizationwriteaiven.credit_card.deleteDelete credit card payment method in the organizationdestructive- and 2 more in this area
Kafka connect custom plugin4
aiven.kafka_connect_custom_plugin.deleteSoft-delete a custom plugin and all its non-deleted file versionsdestructiveaiven.kafka_connect_custom_plugin.getGet a single custom plugin by plugin nameread- and 2 more in this area
Organization governance access4
aiven.organization_governance_access.createCreate organization accesswriteaiven.organization_governance_access.deleteDelete organization accessdestructive- and 2 more in this area
Service flink application4
aiven.service_flink_application.createCreate a Flink Applicationwriteaiven.service_flink_application.deleteDelete a Flink Applicationdestructive- and 2 more in this area
Service flink application version4
aiven.service_flink_application_version.createCreate a Flink ApplicationVersionwriteaiven.service_flink_application_version.deleteDelete a Flink ApplicationVersiondestructive- and 2 more in this area
Service flink jar application4
aiven.service_flink_jar_application.createCreate a Flink JarApplicationwriteaiven.service_flink_jar_application.deleteDelete a Flink JarApplicationdestructive- and 2 more in this area
Service kafka mirror maker replication flow 4Service kafka native acl 4Service kafka quota 4Service open search index 4Service privatelink aws 4Service privatelink azure 4Service privatelink google 4User 4User group 4VPC 4Account team members 3Account team project 3Kafka connect custom plugin class 3Managed agents agent 3Organization 3Organization auth domain 3Organization domain 3Permissions 3Project service tags 3Project static ip 3Project tags 3Project user 3Service click house database 3Service click house user 3Service database 3Service flink jar application version 3Service kafka acl 3Service open search acl 3Service open search security 3Service opensearch custom repo snapshot 3Service PG bouncer 3Service privatelink azure connection 3Service schema registry acl 3Service schema registry subject version 3Service user 3Static ip 3User account invites 3User credit card 3VPC peering connection 3Account payment method 2Application user access token 2Bank transfer 2Billing group credits 2Billing group invoice 2Billing group project 2Custom cloud environment permissions 2Managed agents agent schedule 2Managed agents message 2Managed agents session 2Organization authentication config 2Organization billing invoice 2Organization domains 2Organization ip allow list 2Organization user invitation 2Payment method custom 2Project credits 2Project invite 2Project service types 2Service click house role 2Service kafka topic message 2Service open search index multiple 2Service privatelink google connection 2Service schema registry 2Service schema registry global config 2Service schema registry subject config 2Service task 2Service user credentials 2User password 2Account authentication methods 1Account billing group 1Account event 1Account payment methods 1Account projects 1Account projects teams 1Account team invites 1Account team member cancel 1Account team member verify 1Account team project association 1Account user projects 1Account user teams 1Account users 1AI gateway model 1AI gateway usage 1Application user access tokens 1Application users 1Billing group event 1Billing group fee breakdown 1Billing group invoice lines 1Billing group projects 1149 smaller areas 149
This index shows a sample of each area. All 503 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Aiven MCP server, answered.
Is there an Aiven MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 503 Aiven actions across service kafka connect connector, account, project and service integration, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Aiven.
What do I need to connect Aiven?
Aiven token. The free call account { op: "connections.requirements", service: "aiven" } lists exactly what to paste.
Can an AI agent delete or change things in Aiven?
Only if its key allows it, and only with an explicit confirmation. 85 Aiven actions are destructive, including delete CMK, delete a project VPC and logout user, removing current authentication token. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Aiven API limit?
actionlake paces every call to the limits in the Aiven service file: 300 calls a minute per connection. Repeated reads are answered from cache (209 Aiven actions can be), which never reaches Aiven.
What does an Aiven action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (503 Aiven actions page). Cache hits, searches, dry runs and calls Aiven refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Aiven API does it cover?
The Aiven API v1 (OpenAPI 3.0.1) at api.aiven.io/v1. It is built from Aiven's documentation as read on 23 October 2026. 503 actions in 268 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Aiven data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Aiven credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Aiven today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
