Skip to content

Connectors · MSP & PSA

Azure Backup (Recovery Services) MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Backup (Recovery Services) and the rest of your systems. It gives your agent 110 Azure Backup (Recovery Services) actions (71 reads, 25 writes and 14 that wait for a confirmation) and holds the Azure Backup (Recovery Services) credential itself, so the agent never does. It paces Azure Backup (Recovery Services)'s limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "azure_backup.operations.list",  intent: "check which Azure Backup (Recovery Services) account is connected"}# List the operations for the provider · read · 1 upstream call
  • 110actionsin one signed file
  • 71readlook, never change
  • 25writecreate and update
  • 14wait for a yesdestructive, confirmed first

Set up

Connect Azure Backup (Recovery Services) in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Azure Backup (Recovery Services).

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idEntra application (client) id of a service principal with an Azure RBAC role on the subscription
    • client_secretEntra client secret
    • tenant_idYour Azure Backup (Recovery Services) tenant id
    account { op: "connections.requirements", service: "azure_backup" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "azure_backup.operations.list" }# list the operations for the provider · read · 1 upstream callcheck { action: "azure_backup.protection_policies.delete", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Azure Backup (Recovery Services) at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Setup fields
tenant_id
Limits we pace to
200 calls a minute, per connection
API covered
Azure Backup (Recovery Services vaults, backup jobs, protected items, policies, recovery points, restores) API Azure Resource Manager Microsoft.RecoveryServices: bms.json (2026-10-01), vaults_openapi.json (2026-07-01)management.azure.com
Built from
Azure Backup (Recovery Services)'s documentation, read 23 October 2026OpenAPI spec (GitHub)OpenAPI spec (GitHub)learn.microsoft.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
59 of 71 reads, for up to 5 minutes; a write clears what it affects
Shared entities
1, so ask can line Azure Backup (Recovery Services) up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Azure Backup (Recovery Services).

110 actions in 62 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 71readlook, never change
  • 25writecreate and update
  • 14destructivewait for a confirmation
  1. Vaults

    8

    5 read · 2 write · 1 destructive

    Retrieve a list of Vaults · Fetches all the resources of the specified type in the subscription · Get the Vault details · Gets the operation result for a resource

  2. Backup resource storage configs

    7

    3 read · 3 write · 1 destructive

    Fetches resource storage config · Fetches operation status for data move operation on vault · Fetches Operation Result for Prepare Data Move · Updates vault storage model type

  3. Protection containers

    5

    1 read · 3 write · 1 destructive

    Gets details of the specific container registered to your Recovery Services Vault · This is an async operation and the results should be tracked using location header or Azure-async-url · Discovers all the containers in the subscription that can be backed up to Recovery Services Vault · Unregisters the given container from your Recovery Services Vault

  4. Recovery points

    5

    4 read · 1 write · 0 destructive

    Lists the backup copies for the backed up item · Provides the information of the backed up data identified using RecoveryPointID · Returns the additional details of the recovery points fetched by a prior getRPExtendedInfo operation · Triggers fetching the additional details of a recovery point, which are not returned by the recovery point GET API

  5. Deleted vaults

    4

    3 read · 1 write · 0 destructive

    List deleted vaults in a subscription · Get a specific deleted vault · Get the operation status of a deleted vault · Start undelete of a deleted vault

  6. Protection intent

    4

    2 read · 1 write · 1 destructive

    Provides the details of the protection intent up item · It will validate followings 1. Vault capacity 2. VM is already protected 3. Any VM related configuration passed in properties · Used to remove intent from an item · Create Intent for Enabling backup of an item

  7. Resource guard proxy

    4

    1 read · 1 write · 2 destructive

    Returns ResourceGuardProxy under vault and with the name referenced in request · Secures delete ResourceGuardProxy operations · Delete ResourceGuardProxy under vault · Add or Update ResourceGuardProxy under vault Secures vault critical operations

  8. Backup resource vault configs

    3

    1 read · 2 write · 0 destructive

    Fetches resource vault config · Updates vault security config · Updates vault security config

54 more areas · 70 actions
  • Item level recovery connections 3
  • Private endpoint connection 3
  • Protected items 3
  • Protection policies 3
  • Tiering cost 3
  • Vault extended info 3
  • Backup engines 2
  • Backup resource encryption configs 2
  • Private link resources 2
  • Recovery services 2
  • Backup jobs 1
  • Backup operation results 1
  • Backup operation statuses 1
  • Backup policies 1
  • Backup protectable items 1
  • Backup protected items 1
  • Backup protection containers 1
  • Backup protection intent 1
  • Backup status 1
  • Backup usage summaries 1
  • Backup workload items 1
  • Backups 1
  • Configure source scan 1
  • Deleted protection containers 1
  • Export jobs operation results 1
  • Feature support 1
  • Job cancellations 1
  • Job details 1
  • Job operation results 1
  • Jobs 1
  • Operation 1
  • Operations 1
  • Private endpoint 1
  • Protectable containers 1
  • Protected item operation results 1
  • Protected item operation statuses 1
  • Protection container operation results 1
  • Protection container refresh operation results 1
  • Protection container refresh operation statuses 1
  • Protection policy operation results 1
  • Protection policy operation statuses 1
  • Recovery points recommended for move 1
  • Registered identities 1
  • Replication usages 1
  • Resource groups 1
  • Resource guard proxies 1
  • Restores 1
  • Security pins 1
  • Subscriptions 1
  • Usages 1
  • Validate operation 1
  • Validate operation results 1
  • Validate operation statuses 1
  • Vault certificates 1

Top actions

The Azure Backup (Recovery Services) API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 11 of Azure Backup (Recovery Services)'s 12 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
azure_backup.backup_jobs.listProvides a pageable list of jobsProvides a pageable list of jobs.readsecurity.backup_job.list3 connectors
azure_backup.resource_groups.listList the resource groups in a subscriptionList the resource groups in a subscription.readinfra.resource_group.list19 connectors
azure_backup.backup_policies.listLists of backup policies associated with Recovery Services VaultLists of backup policies associated with Recovery Services Vault.readsecurity.backup_policy.list4 connectors
azure_backup.recovery_points.listLists the backup copies for the backed up itemLists the backup copies for the backed up item.readsecurity.restore_point.list2 connectors
azure_backup.protection_policies.getProvides the details of the backup policies associated to Recovery Services VaultProvides the details of the backup policies associated to Recovery Services Vault.readsecurity.backup_policy.get4 connectors
azure_backup.job_details.getGets extended information associated with the jobGets extended information associated with the job.readsecurity.backup_job.get2 connectors
azure_backup.recovery_points.getProvides the information of the backed up data identified using RecoveryPointIDProvides the information of the backed up data identified using RecoveryPointID.readsecurity.restore_point.get2 connectors
azure_backup.protection_policies.deleteDeletes specified backup policy from your Recovery Services VaultDeletes specified backup policy from your Recovery Services Vault.destructivesecurity.backup_policy.delete4 connectors
azure_backup.operations.listList the operations for the providerList the operations for the provider.readthis connector
azure_backup.backups.triggerTriggers backup for specified backed up itemTriggers backup for specified backed up item.writesecurity.backup_job.run2 connectors
azure_backup.protection_policies.create_or_updateCreates or modifies a backup policyCreates or modifies a backup policy.writethis connector
azure_backup.jobs.exportTriggers export of jobs specified by filters and returns an OperationID to trackTriggers export of jobs specified by filters and returns an OperationID to track.writethis connector

Try it

Prompts to paste into Claude.

Each one names the Azure Backup (Recovery Services) actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List the operations for the provider in Azure Backup (Recovery Services) and tell me what stands out.

    callsazure_backup.operations.list

  2. Writewrite

    Triggers backup for specified backed up item in Azure Backup (Recovery Services). Show me exactly what you will send before you save it.

    callsazure_backup.backups.trigger

Governance for Azure Backup (Recovery Services)

Destructive actions wait for a yes.

14 Azure Backup (Recovery Services) actions are destructive. These are all of them:

  • Deletes specified backup policy from your Recovery Services Vaultazure_backup.protection_policies.delete
  • Restores the specified backed up dataazure_backup.restores.trigger
  • Cancels a jobazure_backup.job_cancellations.trigger
  • Provisions a script which invokes an iSCSI connection to the backup dataazure_backup.item_level_recovery_connections.provision
  • Secures delete ResourceGuardProxy operationsazure_backup.resource_guard_proxy.unlock_delete
  • Triggers Data Move Operation on target vaultazure_backup.backup_resource_storage_configs.trigger_data_move
  • Deletes a vaultazure_backup.vaults.delete
  • Used to disable backup of an item within a containerazure_backup.protected_items.delete
  • Used to remove intent from an itemazure_backup.protection_intent.delete
  • Delete ResourceGuardProxy under vaultazure_backup.resource_guard_proxy.delete
  • Unregisters the given container from your Recovery Services vaultazure_backup.registered_identities.delete
  • Unregisters the given container from your Recovery Services Vaultazure_backup.protection_containers.unregister
  • Delete Private Endpoint requestsazure_backup.private_endpoint_connection.delete
  • Revokes an iSCSI connection which can be used to download a scriptazure_backup.item_level_recovery_connections.revoke

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doazure_backup.protection_policies.deleteconfirm_policy: human

Deletes specified backup policy from your Recovery Services Vault?

intent: the user asked me to deletes specified backup policy from your Recovery Services Vault

run suspended · waiting for a named person · key azure-backup-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "azure-backup-agent",  allowed_actions: ["azure_backup.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "azure_backup.protection_policies.delete", approver: "[email protected]" },    { match: "azure_backup.restores.trigger", approver: "[email protected]" },    { match: "azure_backup.job_cancellations.trigger", approver: "[email protected]" }  ]}
Illustrative. Scoped to Azure Backup (Recovery Services) only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Azure Backup (Recovery Services) costs on actionlake.

Every Azure Backup (Recovery Services) action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Azure Backup (Recovery Services) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 110 Azure Backup (Recovery Services) actions
  • 23actions pageeach page of a long list is one call
  • 59reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Azure Backup (Recovery Services) action.

110 actions by area: the id your agent calls, what it does, and its effect.

Vaults8
  • azure_backup.vaults.create_or_updateCreates or updates a Recovery Services vaultwrite
  • azure_backup.vaults.deleteDeletes a vaultdestructive
  • azure_backup.vaults.getGet the Vault detailsread
  • azure_backup.vaults.get_operation_resultGets the operation result for a resourceread
  • azure_backup.vaults.get_operation_statusGets the operation status for a resourceread
  • azure_backup.vaults.list_by_resource_groupRetrieve a list of Vaultsread
  • azure_backup.vaults.list_by_subscription_idFetches all the resources of the specified type in the subscriptionread
  • azure_backup.vaults.updateUpdates the vaultwrite
Backup resource storage configs7
  • azure_backup.backup_resource_storage_configs.getFetches resource storage configread
  • azure_backup.backup_resource_storage_configs.get_data_move_operation_resultFetches operation status for data move operation on vaultread
  • azure_backup.backup_resource_storage_configs.get_data_move_operation_statusFetches Operation Result for Prepare Data Moveread
  • azure_backup.backup_resource_storage_configs.patchUpdates vault storage model typewrite
  • azure_backup.backup_resource_storage_configs.prepare_data_movePrepares source vault for Data Move operationwrite
  • azure_backup.backup_resource_storage_configs.trigger_data_moveTriggers Data Move Operation on target vaultdestructive
  • azure_backup.backup_resource_storage_configs.updateUpdates vault storage model typewrite
Protection containers5
  • azure_backup.protection_containers.getGets details of the specific container registered to your Recovery Services Vaultread
  • azure_backup.protection_containers.inquireThis is an async operation and the results should be tracked using location header or Azure-async-urlwrite
  • azure_backup.protection_containers.refreshDiscovers all the containers in the subscription that can be backed up to Recovery Services Vaultwrite
  • azure_backup.protection_containers.registerRegisters the container with Recovery Services vaultwrite
  • azure_backup.protection_containers.unregisterUnregisters the given container from your Recovery Services Vaultdestructive
Recovery points5
  • azure_backup.recovery_points.getProvides the information of the backed up data identified using RecoveryPointIDread
  • azure_backup.recovery_points.get_rp_extended_infoTriggers fetching the additional details of a recovery point, which are not returned by the recovery point GET APIread
  • azure_backup.recovery_points.get_rp_extended_info_operation_resultReturns the additional details of the recovery points fetched by a prior getRPExtendedInfo operationread
  • azure_backup.recovery_points.listLists the backup copies for the backed up itemread
  • azure_backup.recovery_points.moveMove recovery point from one datastore to another storewrite
Deleted vaults4
  • azure_backup.deleted_vaults.getGet a specific deleted vaultread
  • azure_backup.deleted_vaults.get_operation_statusGet the operation status of a deleted vaultread
  • azure_backup.deleted_vaults.list_by_subscription_idList deleted vaults in a subscriptionread
  • azure_backup.deleted_vaults.undeleteStart undelete of a deleted vaultwrite
Protection intent4
  • azure_backup.protection_intent.create_or_updateCreate Intent for Enabling backup of an itemwrite
  • azure_backup.protection_intent.deleteUsed to remove intent from an itemdestructive
  • azure_backup.protection_intent.getProvides the details of the protection intent up itemread
  • azure_backup.protection_intent.validateIt will validate followings 1. Vault capacity 2. VM is already protected 3. Any VM related configuration passed in propertiesread
Resource guard proxy4
  • azure_backup.resource_guard_proxy.deleteDelete ResourceGuardProxy under vaultdestructive
  • azure_backup.resource_guard_proxy.getReturns ResourceGuardProxy under vault and with the name referenced in requestread
  • azure_backup.resource_guard_proxy.putAdd or Update ResourceGuardProxy under vault Secures vault critical operationswrite
  • azure_backup.resource_guard_proxy.unlock_deleteSecures delete ResourceGuardProxy operationsdestructive
Backup resource vault configs3
  • azure_backup.backup_resource_vault_configs.getFetches resource vault configread
  • azure_backup.backup_resource_vault_configs.putUpdates vault security configwrite
  • azure_backup.backup_resource_vault_configs.updateUpdates vault security configwrite
Item level recovery connections3
  • azure_backup.item_level_recovery_connections.list_instant_item_recovery_operation_resultFetches the mount scripts (iSCSI connection details) for an active Instant Item Recovery (ILR) session on the recovery pointread
  • azure_backup.item_level_recovery_connections.provisionProvisions a script which invokes an iSCSI connection to the backup datadestructive
  • azure_backup.item_level_recovery_connections.revokeRevokes an iSCSI connection which can be used to download a scriptdestructive
Private endpoint connection3
  • azure_backup.private_endpoint_connection.deleteDelete Private Endpoint requestsdestructive
  • azure_backup.private_endpoint_connection.getGet Private Endpoint Connectionread
  • azure_backup.private_endpoint_connection.putApprove or Reject Private Endpoint requestswrite
Protected items3
  • azure_backup.protected_items.create_or_updateEnables backup of an item or to modifies the backup policy information of an already backed up itemwrite
  • azure_backup.protected_items.deleteUsed to disable backup of an item within a containerdestructive
  • azure_backup.protected_items.getProvides the details of the backed up itemread
Protection policies3
  • azure_backup.protection_policies.create_or_updateCreates or modifies a backup policywrite
  • azure_backup.protection_policies.deleteDeletes specified backup policy from your Recovery Services Vaultdestructive
  • azure_backup.protection_policies.getProvides the details of the backup policies associated to Recovery Services Vaultread
Tiering cost3
  • azure_backup.tiering_cost.fetchProvides the details of the tiering related sizes and costread
  • azure_backup.tiering_cost.get_operation_resultGets the result of async operation for tiering costread
  • azure_backup.tiering_cost.get_operation_statusGets the status of async operations of tiering costread
Vault extended info3
  • azure_backup.vault_extended_info.create_or_updateCreate vault extended infowrite
  • azure_backup.vault_extended_info.getGet the vault extended inforead
  • azure_backup.vault_extended_info.updateUpdate vault extended infowrite
Backup engines2
  • azure_backup.backup_engines.getReturns backup management server registered to Recovery Services Vaultread
  • azure_backup.backup_engines.listBackup management servers registered to Recovery Services Vaultread
Backup resource encryption configs2
  • azure_backup.backup_resource_encryption_configs.getFetches Vault Encryption configread
  • azure_backup.backup_resource_encryption_configs.updateUpdates Vault encryption configwrite
Private link resources2
  • azure_backup.private_link_resources.getReturns a specified private link resource that need to be created for Backup and SiteRecoveryread
  • azure_backup.private_link_resources.listReturns the list of private link resources that need to be created for Backup and SiteRecoveryread
Recovery services2
  • azure_backup.recovery_services.capabilitiesAPI to get details about capabilities provided by Microsoft.RecoveryServices RPread
  • azure_backup.recovery_services.check_name_availabilityAPI to check for resource name availability. A name is available if no other resource exists that has the same SubscriptionId, Resource Name and Type or if one or more such resources exist, each of t…read
Backup jobs1
  • azure_backup.backup_jobs.listProvides a pageable list of jobsread
Backup operation results1
  • azure_backup.backup_operation_results.getProvides the status of the delete operations such as deleting backed up itemread
Backup operation statuses1
  • azure_backup.backup_operation_statuses.getFetches the status of an operation such as triggering a backup, restoreread
Backup policies1
  • azure_backup.backup_policies.listLists of backup policies associated with Recovery Services Vaultread
Backup protectable items1
  • azure_backup.backup_protectable_items.listProvides a pageable list of protectable objects within your subscription according to the query filter and the pagination parametersread
Backup protected items1
  • azure_backup.backup_protected_items.listProvides a pageable list of all items that are backed up within a vaultread
Backup protection containers1
  • azure_backup.backup_protection_containers.listLists the containers registered to Recovery Services Vaultread
Backup protection intent1
  • azure_backup.backup_protection_intent.listProvides a pageable list of all intents that are present within a vaultread
Backup status1
  • azure_backup.backup_status.getGet the container backup statusread
Backup usage summaries1
  • azure_backup.backup_usage_summaries.listFetches the backup management usage summaries of the vaultread
Backup workload items1
  • azure_backup.backup_workload_items.listProvides a pageable list of workload item of a specific container according to the query filter and the pagination parametersread
Backups1
  • azure_backup.backups.triggerTriggers backup for specified backed up itemwrite
Configure source scan1
  • azure_backup.configure_source_scan.executeConfigures source scan for a protected itemwrite
Deleted protection containers1
  • azure_backup.deleted_protection_containers.listLists the soft deleted containers registered to Recovery Services Vaultread
Export jobs operation results1
  • azure_backup.export_jobs_operation_results.getGets the operation result of operation triggered by Export Jobs APIread
Feature support1
  • azure_backup.feature_support.validateIt will validate if given feature with resource properties is supported in serviceread
Job cancellations1
  • azure_backup.job_cancellations.triggerCancels a jobdestructive
Job details1
  • azure_backup.job_details.getGets extended information associated with the jobread
Job operation results1
  • azure_backup.job_operation_results.getFetches the result of any operationread
Jobs1
  • azure_backup.jobs.exportTriggers export of jobs specified by filters and returns an OperationID to trackwrite
Operation1
  • azure_backup.operation.validateValidate operation for specified backed up itemread
Operations1
  • azure_backup.operations.listList the operations for the providerread
Private endpoint1
  • azure_backup.private_endpoint.get_operation_statusGets the operation status for a private endpoint connectionread
Protectable containers1
  • azure_backup.protectable_containers.listLists the containers that can be registered to Recovery Services Vaultread
Protected item operation results1
  • azure_backup.protected_item_operation_results.getFetches the result of any operation on the backup itemread
Protected item operation statuses1
  • azure_backup.protected_item_operation_statuses.getFetches the status of an operation such as triggering a backup, restoreread
Protection container operation results1
  • azure_backup.protection_container_operation_results.getFetches the result of any operation on the containerread
Protection container refresh operation results1
  • azure_backup.protection_container_refresh_operation_results.getProvides the result of the refresh operation triggered by the BeginRefresh operationread
Protection container refresh operation statuses1
  • azure_backup.protection_container_refresh_operation_statuses.getFetches the status of the fabric level asynchronous operation identified by the given operation idread
Protection policy operation results1
  • azure_backup.protection_policy_operation_results.getProvides the result of an operationread
Protection policy operation statuses1
  • azure_backup.protection_policy_operation_statuses.getProvides the status of the asynchronous operations like backup, restoreread
Recovery points recommended for move1
  • azure_backup.recovery_points_recommended_for_move.listLists the recovery points recommended for move to another tierread
Registered identities1
  • azure_backup.registered_identities.deleteUnregisters the given container from your Recovery Services vaultdestructive
Replication usages1
  • azure_backup.replication_usages.listFetches the replication usages of the vaultread
Resource groups1
  • azure_backup.resource_groups.listList the resource groups in a subscriptionread
Resource guard proxies1
  • azure_backup.resource_guard_proxies.listList the ResourceGuardProxies under vaultread
Restores1
  • azure_backup.restores.triggerRestores the specified backed up datadestructive
Security pins1
  • azure_backup.security_pins.getGet the security PINwrite
Subscriptions1
  • azure_backup.subscriptions.listList the subscriptions the credential can seeread
Usages1
  • azure_backup.usages.list_by_vaultsFetches the usages of the vaultread
Validate operation1
  • azure_backup.validate_operation.triggerValidate operation for specified backed up item in the form of an asynchronous operationread
Validate operation results1
  • azure_backup.validate_operation_results.getFetches the result of a triggered validate operationread
Validate operation statuses1
  • azure_backup.validate_operation_statuses.getFetches the status of a triggered validate operationread
Vault certificates1
  • azure_backup.vault_certificates.createUploads a certificate for a resourcewrite

Questions

The Azure Backup (Recovery Services) MCP server, answered.

Is there an Azure Backup (Recovery Services) MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 110 Azure Backup (Recovery Services) actions across vaults, backup resource storage configs, protection containers and recovery points, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Backup (Recovery Services).

What do I need to connect Azure Backup (Recovery Services)?

Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_backup" } lists exactly what to paste.

Can an AI agent delete or change things in Azure Backup (Recovery Services)?

Only if its key allows it, and only with an explicit confirmation. 14 Azure Backup (Recovery Services) actions are destructive, including deletes specified backup policy from your Recovery Services Vault, restores the specified backed up data and cancels a job. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Azure Backup (Recovery Services) API limit?

actionlake paces every call to the limits in the Azure Backup (Recovery Services) service file: 200 calls a minute per connection. Repeated reads are answered from cache (59 Azure Backup (Recovery Services) actions can be), which never reaches Azure Backup (Recovery Services).

What does an Azure Backup (Recovery Services) action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (23 Azure Backup (Recovery Services) actions page). Cache hits, searches, dry runs and calls Azure Backup (Recovery Services) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Azure Backup (Recovery Services) API does it cover?

The Azure Backup (Recovery Services vaults, backup jobs, protected items, policies, recovery points, restores) API Azure Resource Manager Microsoft.RecoveryServices: bms.json (2026-10-01), vaults_openapi.json (2026-07-01) at management.azure.com. It is built from Azure Backup (Recovery Services)'s documentation as read on 23 October 2026. 110 actions in 62 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Azure Backup (Recovery Services) data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Backup (Recovery Services) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Azure Backup (Recovery Services) today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.