--- title: "Azure Backup (Recovery Services) MCP server - actionlake" description: "Give Claude 110 Azure Backup (Recovery Services) actions through one MCP server: vaults. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/azure-backup-recovery-services updated: 2026-10-23 --- Connectors · MSP & PSA # Azure Backup (Recovery Services) MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Backup (Recovery Services) and the rest of your systems. It gives your agent 110 Azure Backup (Recovery Services) actions (71 reads, 25 writes and 14 that wait for a confirmation) and holds the Azure Backup (Recovery Services) credential itself, so the agent never does. It paces Azure Backup (Recovery Services)'s limits and records every call. [Connect Azure Backup (Recovery Services) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "azure_backup.operations.list", intent: "check which Azure Backup (Recovery Services) account is connected" } # List the operations for the provider · read · 1 upstream call ``` - 110 actions in one signed file - 71 read look, never change - 25 write create and update - 14 wait for a yes destructive, confirmed first Set up ## Connect Azure Backup (Recovery Services) in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Azure Backup (Recovery Services). OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id of a service principal with an Azure RBAC role on the subscription - `client_secret` Entra client secret - `tenant_id` Your Azure Backup (Recovery Services) tenant id ``` account { op: "connections.requirements", service: "azure_backup" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "azure_backup.operations.list" } # list the operations for the provider · read · 1 upstream call check { action: "azure_backup.protection_policies.delete", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Azure Backup (Recovery Services) at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 200 calls a minute, per connection **API covered** Azure Backup (Recovery Services vaults, backup jobs, protected items, policies, recovery points, restores) API Azure Resource Manager Microsoft.RecoveryServices: bms.json (2026-10-01), vaults_openapi.json (2026-07-01)`management.azure.com` **Built from** Azure Backup (Recovery Services)'s documentation, read 23 October 2026[OpenAPI spec (GitHub)](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/recoveryservicesbackup/resource-manager/Microsoft.RecoveryServices/RecoveryServicesBackup/stable/2026-10-01/bms.json) [OpenAPI spec (GitHub)](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/recoveryservices/resource-manager/Microsoft.RecoveryServices/RecoveryServices/stable/2026-07-01/openapi.json) [learn.microsoft.com](https://learn.microsoft.com/en-us/rest/api/backup/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 59 of 71 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 1, so ask can line Azure Backup (Recovery Services) up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Azure Backup (Recovery Services). 110 actions in 62 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **71** read look, never change - **25** write create and update - **14** destructive wait for a confirmation 1. ### Vaults 8 5 read · 2 write · 1 destructive Retrieve a list of Vaults · Fetches all the resources of the specified type in the subscription · Get the Vault details · Gets the operation result for a resource 2. ### Backup resource storage configs 7 3 read · 3 write · 1 destructive Fetches resource storage config · Fetches operation status for data move operation on vault · Fetches Operation Result for Prepare Data Move · Updates vault storage model type 3. ### Protection containers 5 1 read · 3 write · 1 destructive Gets details of the specific container registered to your Recovery Services Vault · This is an async operation and the results should be tracked using location header or Azure-async-url · Discovers all the containers in the subscription that can be backed up to Recovery Services Vault · Unregisters the given container from your Recovery Services Vault 4. ### Recovery points 5 4 read · 1 write · 0 destructive Lists the backup copies for the backed up item · Provides the information of the backed up data identified using RecoveryPointID · Returns the additional details of the recovery points fetched by a prior getRPExtendedInfo operation · Triggers fetching the additional details of a recovery point, which are not returned by the recovery point GET API 5. ### Deleted vaults 4 3 read · 1 write · 0 destructive List deleted vaults in a subscription · Get a specific deleted vault · Get the operation status of a deleted vault · Start undelete of a deleted vault 6. ### Protection intent 4 2 read · 1 write · 1 destructive Provides the details of the protection intent up item · It will validate followings 1. Vault capacity 2. VM is already protected 3. Any VM related configuration passed in properties · Used to remove intent from an item · Create Intent for Enabling backup of an item 7. ### Resource guard proxy 4 1 read · 1 write · 2 destructive Returns ResourceGuardProxy under vault and with the name referenced in request · Secures delete ResourceGuardProxy operations · Delete ResourceGuardProxy under vault · Add or Update ResourceGuardProxy under vault Secures vault critical operations 8. ### Backup resource vault configs 3 1 read · 2 write · 0 destructive Fetches resource vault config · Updates vault security config · Updates vault security config **54 more areas · 70 actions** - Item level recovery connections **3** - Private endpoint connection **3** - Protected items **3** - Protection policies **3** - Tiering cost **3** - Vault extended info **3** - Backup engines **2** - Backup resource encryption configs **2** - Private link resources **2** - Recovery services **2** - Backup jobs **1** - Backup operation results **1** - Backup operation statuses **1** - Backup policies **1** - Backup protectable items **1** - Backup protected items **1** - Backup protection containers **1** - Backup protection intent **1** - Backup status **1** - Backup usage summaries **1** - Backup workload items **1** - Backups **1** - Configure source scan **1** - Deleted protection containers **1** - Export jobs operation results **1** - Feature support **1** - Job cancellations **1** - Job details **1** - Job operation results **1** - Jobs **1** - Operation **1** - Operations **1** - Private endpoint **1** - Protectable containers **1** - Protected item operation results **1** - Protected item operation statuses **1** - Protection container operation results **1** - Protection container refresh operation results **1** - Protection container refresh operation statuses **1** - Protection policy operation results **1** - Protection policy operation statuses **1** - Recovery points recommended for move **1** - Registered identities **1** - Replication usages **1** - Resource groups **1** - Resource guard proxies **1** - Restores **1** - Security pins **1** - Subscriptions **1** - Usages **1** - Validate operation **1** - Validate operation results **1** - Validate operation statuses **1** - Vault certificates **1** Top actions ## The Azure Backup (Recovery Services) API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 11 of Azure Backup (Recovery Services)'s 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `azure_backup.backup_jobs.list` Provides a pageable list of jobs | Provides a pageable list of jobs. | read | `security.backup_job.list` 3 connectors | | `azure_backup.resource_groups.list` List the resource groups in a subscription | List the resource groups in a subscription. | read | `infra.resource_group.list` 19 connectors | | `azure_backup.backup_policies.list` Lists of backup policies associated with Recovery Services Vault | Lists of backup policies associated with Recovery Services Vault. | read | `security.backup_policy.list` 4 connectors | | `azure_backup.recovery_points.list` Lists the backup copies for the backed up item | Lists the backup copies for the backed up item. | read | `security.restore_point.list` 2 connectors | | `azure_backup.protection_policies.get` Provides the details of the backup policies associated to Recovery Services Vault | Provides the details of the backup policies associated to Recovery Services Vault. | read | `security.backup_policy.get` 4 connectors | | `azure_backup.job_details.get` Gets extended information associated with the job | Gets extended information associated with the job. | read | `security.backup_job.get` 2 connectors | | `azure_backup.recovery_points.get` Provides the information of the backed up data identified using RecoveryPointID | Provides the information of the backed up data identified using RecoveryPointID. | read | `security.restore_point.get` 2 connectors | | `azure_backup.protection_policies.delete` Deletes specified backup policy from your Recovery Services Vault | Deletes specified backup policy from your Recovery Services Vault. | destructive | `security.backup_policy.delete` 4 connectors | | `azure_backup.operations.list` List the operations for the provider | List the operations for the provider. | read | this connector | | `azure_backup.backups.trigger` Triggers backup for specified backed up item | Triggers backup for specified backed up item. | write | `security.backup_job.run` 2 connectors | | `azure_backup.protection_policies.create_or_update` Creates or modifies a backup policy | Creates or modifies a backup policy. | write | this connector | | `azure_backup.jobs.export` Triggers export of jobs specified by filters and returns an OperationID to track | Triggers export of jobs specified by filters and returns an OperationID to track. | write | this connector | Try it ## Prompts to paste into Claude. Each one names the Azure Backup (Recovery Services) actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List the operations for the provider in Azure Backup (Recovery Services) and tell me what stands out. calls `azure_backup.operations.list` 2. Write write Triggers backup for specified backed up item in Azure Backup (Recovery Services). Show me exactly what you will send before you save it. calls `azure_backup.backups.trigger` Governance for Azure Backup (Recovery Services) ## Destructive actions wait for a yes. 14 Azure Backup (Recovery Services) actions are destructive. These are all of them: - Deletes specified backup policy from your Recovery Services Vault `azure_backup.protection_policies.delete` - Restores the specified backed up data `azure_backup.restores.trigger` - Cancels a job `azure_backup.job_cancellations.trigger` - Provisions a script which invokes an iSCSI connection to the backup data `azure_backup.item_level_recovery_connections.provision` - Secures delete ResourceGuardProxy operations `azure_backup.resource_guard_proxy.unlock_delete` - Triggers Data Move Operation on target vault `azure_backup.backup_resource_storage_configs.trigger_data_move` - Deletes a vault `azure_backup.vaults.delete` - Used to disable backup of an item within a container `azure_backup.protected_items.delete` - Used to remove intent from an item `azure_backup.protection_intent.delete` - Delete ResourceGuardProxy under vault `azure_backup.resource_guard_proxy.delete` - Unregisters the given container from your Recovery Services vault `azure_backup.registered_identities.delete` - Unregisters the given container from your Recovery Services Vault `azure_backup.protection_containers.unregister` - Delete Private Endpoint requests `azure_backup.private_endpoint_connection.delete` - Revokes an iSCSI connection which can be used to download a script `azure_backup.item_level_recovery_connections.revoke` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do azure_backup.protection_policies.delete confirm_policy: **human** Deletes specified backup policy from your Recovery Services Vault? **intent:** the user asked me to deletes specified backup policy from your Recovery Services Vault run suspended · waiting for a named person · key _azure-backup-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "azure-backup-agent", allowed_actions: ["azure_backup.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "azure_backup.protection_policies.delete", approver: "lead@example.com" }, { match: "azure_backup.restores.trigger", approver: "lead@example.com" }, { match: "azure_backup.job_cancellations.trigger", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Azure Backup (Recovery Services) only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Azure Backup (Recovery Services) costs on actionlake. Every Azure Backup (Recovery Services) action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Azure Backup (Recovery Services) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 110 Azure Backup (Recovery Services) actions - 23 actions page each page of a long list is one call - 59 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Azure Backup (Recovery Services) action. 110 actions by area: the id your agent calls, what it does, and its effect. **Vaults 8** - `azure_backup.vaults.create_or_update` Creates or updates a Recovery Services vault write - `azure_backup.vaults.delete` Deletes a vault destructive - `azure_backup.vaults.get` Get the Vault details read - `azure_backup.vaults.get_operation_result` Gets the operation result for a resource read - `azure_backup.vaults.get_operation_status` Gets the operation status for a resource read - `azure_backup.vaults.list_by_resource_group` Retrieve a list of Vaults read - `azure_backup.vaults.list_by_subscription_id` Fetches all the resources of the specified type in the subscription read - `azure_backup.vaults.update` Updates the vault write **Backup resource storage configs 7** - `azure_backup.backup_resource_storage_configs.get` Fetches resource storage config read - `azure_backup.backup_resource_storage_configs.get_data_move_operation_result` Fetches operation status for data move operation on vault read - `azure_backup.backup_resource_storage_configs.get_data_move_operation_status` Fetches Operation Result for Prepare Data Move read - `azure_backup.backup_resource_storage_configs.patch` Updates vault storage model type write - `azure_backup.backup_resource_storage_configs.prepare_data_move` Prepares source vault for Data Move operation write - `azure_backup.backup_resource_storage_configs.trigger_data_move` Triggers Data Move Operation on target vault destructive - `azure_backup.backup_resource_storage_configs.update` Updates vault storage model type write **Protection containers 5** - `azure_backup.protection_containers.get` Gets details of the specific container registered to your Recovery Services Vault read - `azure_backup.protection_containers.inquire` This is an async operation and the results should be tracked using location header or Azure-async-url write - `azure_backup.protection_containers.refresh` Discovers all the containers in the subscription that can be backed up to Recovery Services Vault write - `azure_backup.protection_containers.register` Registers the container with Recovery Services vault write - `azure_backup.protection_containers.unregister` Unregisters the given container from your Recovery Services Vault destructive **Recovery points 5** - `azure_backup.recovery_points.get` Provides the information of the backed up data identified using RecoveryPointID read - `azure_backup.recovery_points.get_rp_extended_info` Triggers fetching the additional details of a recovery point, which are not returned by the recovery point GET API read - `azure_backup.recovery_points.get_rp_extended_info_operation_result` Returns the additional details of the recovery points fetched by a prior getRPExtendedInfo operation read - `azure_backup.recovery_points.list` Lists the backup copies for the backed up item read - `azure_backup.recovery_points.move` Move recovery point from one datastore to another store write **Deleted vaults 4** - `azure_backup.deleted_vaults.get` Get a specific deleted vault read - `azure_backup.deleted_vaults.get_operation_status` Get the operation status of a deleted vault read - `azure_backup.deleted_vaults.list_by_subscription_id` List deleted vaults in a subscription read - `azure_backup.deleted_vaults.undelete` Start undelete of a deleted vault write **Protection intent 4** - `azure_backup.protection_intent.create_or_update` Create Intent for Enabling backup of an item write - `azure_backup.protection_intent.delete` Used to remove intent from an item destructive - `azure_backup.protection_intent.get` Provides the details of the protection intent up item read - `azure_backup.protection_intent.validate` It will validate followings 1. Vault capacity 2. VM is already protected 3. Any VM related configuration passed in properties read **Resource guard proxy 4** - `azure_backup.resource_guard_proxy.delete` Delete ResourceGuardProxy under vault destructive - `azure_backup.resource_guard_proxy.get` Returns ResourceGuardProxy under vault and with the name referenced in request read - `azure_backup.resource_guard_proxy.put` Add or Update ResourceGuardProxy under vault Secures vault critical operations write - `azure_backup.resource_guard_proxy.unlock_delete` Secures delete ResourceGuardProxy operations destructive **Backup resource vault configs 3** - `azure_backup.backup_resource_vault_configs.get` Fetches resource vault config read - `azure_backup.backup_resource_vault_configs.put` Updates vault security config write - `azure_backup.backup_resource_vault_configs.update` Updates vault security config write **Item level recovery connections 3** - `azure_backup.item_level_recovery_connections.list_instant_item_recovery_operation_result` Fetches the mount scripts (iSCSI connection details) for an active Instant Item Recovery (ILR) session on the recovery point read - `azure_backup.item_level_recovery_connections.provision` Provisions a script which invokes an iSCSI connection to the backup data destructive - `azure_backup.item_level_recovery_connections.revoke` Revokes an iSCSI connection which can be used to download a script destructive **Private endpoint connection 3** - `azure_backup.private_endpoint_connection.delete` Delete Private Endpoint requests destructive - `azure_backup.private_endpoint_connection.get` Get Private Endpoint Connection read - `azure_backup.private_endpoint_connection.put` Approve or Reject Private Endpoint requests write **Protected items 3** - `azure_backup.protected_items.create_or_update` Enables backup of an item or to modifies the backup policy information of an already backed up item write - `azure_backup.protected_items.delete` Used to disable backup of an item within a container destructive - `azure_backup.protected_items.get` Provides the details of the backed up item read **Protection policies 3** - `azure_backup.protection_policies.create_or_update` Creates or modifies a backup policy write - `azure_backup.protection_policies.delete` Deletes specified backup policy from your Recovery Services Vault destructive - `azure_backup.protection_policies.get` Provides the details of the backup policies associated to Recovery Services Vault read **Tiering cost 3** - `azure_backup.tiering_cost.fetch` Provides the details of the tiering related sizes and cost read - `azure_backup.tiering_cost.get_operation_result` Gets the result of async operation for tiering cost read - `azure_backup.tiering_cost.get_operation_status` Gets the status of async operations of tiering cost read **Vault extended info 3** - `azure_backup.vault_extended_info.create_or_update` Create vault extended info write - `azure_backup.vault_extended_info.get` Get the vault extended info read - `azure_backup.vault_extended_info.update` Update vault extended info write **Backup engines 2** - `azure_backup.backup_engines.get` Returns backup management server registered to Recovery Services Vault read - `azure_backup.backup_engines.list` Backup management servers registered to Recovery Services Vault read **Backup resource encryption configs 2** - `azure_backup.backup_resource_encryption_configs.get` Fetches Vault Encryption config read - `azure_backup.backup_resource_encryption_configs.update` Updates Vault encryption config write **Private link resources 2** - `azure_backup.private_link_resources.get` Returns a specified private link resource that need to be created for Backup and SiteRecovery read - `azure_backup.private_link_resources.list` Returns the list of private link resources that need to be created for Backup and SiteRecovery read **Recovery services 2** - `azure_backup.recovery_services.capabilities` API to get details about capabilities provided by Microsoft.RecoveryServices RP read - `azure_backup.recovery_services.check_name_availability` API to check for resource name availability. A name is available if no other resource exists that has the same SubscriptionId, Resource Name and Type or if one or more such resources exist, each of t… read **Backup jobs 1** - `azure_backup.backup_jobs.list` Provides a pageable list of jobs read **Backup operation results 1** - `azure_backup.backup_operation_results.get` Provides the status of the delete operations such as deleting backed up item read **Backup operation statuses 1** - `azure_backup.backup_operation_statuses.get` Fetches the status of an operation such as triggering a backup, restore read **Backup policies 1** - `azure_backup.backup_policies.list` Lists of backup policies associated with Recovery Services Vault read **Backup protectable items 1** - `azure_backup.backup_protectable_items.list` Provides a pageable list of protectable objects within your subscription according to the query filter and the pagination parameters read **Backup protected items 1** - `azure_backup.backup_protected_items.list` Provides a pageable list of all items that are backed up within a vault read **Backup protection containers 1** - `azure_backup.backup_protection_containers.list` Lists the containers registered to Recovery Services Vault read **Backup protection intent 1** - `azure_backup.backup_protection_intent.list` Provides a pageable list of all intents that are present within a vault read **Backup status 1** - `azure_backup.backup_status.get` Get the container backup status read **Backup usage summaries 1** - `azure_backup.backup_usage_summaries.list` Fetches the backup management usage summaries of the vault read **Backup workload items 1** - `azure_backup.backup_workload_items.list` Provides a pageable list of workload item of a specific container according to the query filter and the pagination parameters read **Backups 1** - `azure_backup.backups.trigger` Triggers backup for specified backed up item write **Configure source scan 1** - `azure_backup.configure_source_scan.execute` Configures source scan for a protected item write **Deleted protection containers 1** - `azure_backup.deleted_protection_containers.list` Lists the soft deleted containers registered to Recovery Services Vault read **Export jobs operation results 1** - `azure_backup.export_jobs_operation_results.get` Gets the operation result of operation triggered by Export Jobs API read **Feature support 1** - `azure_backup.feature_support.validate` It will validate if given feature with resource properties is supported in service read **Job cancellations 1** - `azure_backup.job_cancellations.trigger` Cancels a job destructive **Job details 1** - `azure_backup.job_details.get` Gets extended information associated with the job read **Job operation results 1** - `azure_backup.job_operation_results.get` Fetches the result of any operation read **Jobs 1** - `azure_backup.jobs.export` Triggers export of jobs specified by filters and returns an OperationID to track write **Operation 1** - `azure_backup.operation.validate` Validate operation for specified backed up item read **Operations 1** - `azure_backup.operations.list` List the operations for the provider read **Private endpoint 1** - `azure_backup.private_endpoint.get_operation_status` Gets the operation status for a private endpoint connection read **Protectable containers 1** - `azure_backup.protectable_containers.list` Lists the containers that can be registered to Recovery Services Vault read **Protected item operation results 1** - `azure_backup.protected_item_operation_results.get` Fetches the result of any operation on the backup item read **Protected item operation statuses 1** - `azure_backup.protected_item_operation_statuses.get` Fetches the status of an operation such as triggering a backup, restore read **Protection container operation results 1** - `azure_backup.protection_container_operation_results.get` Fetches the result of any operation on the container read **Protection container refresh operation results 1** - `azure_backup.protection_container_refresh_operation_results.get` Provides the result of the refresh operation triggered by the BeginRefresh operation read **Protection container refresh operation statuses 1** - `azure_backup.protection_container_refresh_operation_statuses.get` Fetches the status of the fabric level asynchronous operation identified by the given operation id read **Protection policy operation results 1** - `azure_backup.protection_policy_operation_results.get` Provides the result of an operation read **Protection policy operation statuses 1** - `azure_backup.protection_policy_operation_statuses.get` Provides the status of the asynchronous operations like backup, restore read **Recovery points recommended for move 1** - `azure_backup.recovery_points_recommended_for_move.list` Lists the recovery points recommended for move to another tier read **Registered identities 1** - `azure_backup.registered_identities.delete` Unregisters the given container from your Recovery Services vault destructive **Replication usages 1** - `azure_backup.replication_usages.list` Fetches the replication usages of the vault read **Resource groups 1** - `azure_backup.resource_groups.list` List the resource groups in a subscription read **Resource guard proxies 1** - `azure_backup.resource_guard_proxies.list` List the ResourceGuardProxies under vault read **Restores 1** - `azure_backup.restores.trigger` Restores the specified backed up data destructive **Security pins 1** - `azure_backup.security_pins.get` Get the security PIN write **Subscriptions 1** - `azure_backup.subscriptions.list` List the subscriptions the credential can see read **Usages 1** - `azure_backup.usages.list_by_vaults` Fetches the usages of the vault read **Validate operation 1** - `azure_backup.validate_operation.trigger` Validate operation for specified backed up item in the form of an asynchronous operation read **Validate operation results 1** - `azure_backup.validate_operation_results.get` Fetches the result of a triggered validate operation read **Validate operation statuses 1** - `azure_backup.validate_operation_statuses.get` Fetches the status of a triggered validate operation read **Vault certificates 1** - `azure_backup.vault_certificates.create` Uploads a certificate for a resource write Questions ## The Azure Backup (Recovery Services) MCP server, answered. **Is there an Azure Backup (Recovery Services) MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 110 Azure Backup (Recovery Services) actions across vaults, backup resource storage configs, protection containers and recovery points, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Backup (Recovery Services). **What do I need to connect Azure Backup (Recovery Services)?** Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_backup" } lists exactly what to paste. **Can an AI agent delete or change things in Azure Backup (Recovery Services)?** Only if its key allows it, and only with an explicit confirmation. 14 Azure Backup (Recovery Services) actions are destructive, including deletes specified backup policy from your Recovery Services Vault, restores the specified backed up data and cancels a job. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Azure Backup (Recovery Services) API limit?** actionlake paces every call to the limits in the Azure Backup (Recovery Services) service file: 200 calls a minute per connection. Repeated reads are answered from cache (59 Azure Backup (Recovery Services) actions can be), which never reaches Azure Backup (Recovery Services). **What does an Azure Backup (Recovery Services) action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (23 Azure Backup (Recovery Services) actions page). Cache hits, searches, dry runs and calls Azure Backup (Recovery Services) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Azure Backup (Recovery Services) API does it cover?** The Azure Backup (Recovery Services vaults, backup jobs, protected items, policies, recovery points, restores) API Azure Resource Manager Microsoft.RecoveryServices: bms.json (2026-10-01), vaults_openapi.json (2026-07-01) at management.azure.com. It is built from Azure Backup (Recovery Services)'s documentation as read on 23 October 2026. 110 actions in 62 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Azure Backup (Recovery Services) data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Backup (Recovery Services) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Azure Backup (Recovery Services) Shares the most action names with - [Commvault Cloud 3](https://actionlake.com/connectors/commvault-cloud) - [Azure Storage 1](https://actionlake.com/connectors/azure-storage) - [Azure Kubernetes Service (AKS) 1](https://actionlake.com/connectors/azure-kubernetes-service-aks) - [Azure Virtual Desktop 1](https://actionlake.com/connectors/azure-virtual-desktop) - [Microsoft Defender for Cloud 1](https://actionlake.com/connectors/microsoft-defender-for-cloud) - [Azure Log Analytics 1](https://actionlake.com/connectors/azure-log-analytics) Joins with, on shared entities - [Google Vertex AI 1](https://actionlake.com/connectors/google-vertex-ai) - [Kubernetes 1](https://actionlake.com/connectors/kubernetes) - [Veeam Backup & Replication 1](https://actionlake.com/connectors/veeam-backup-and-replication) - [Veeam Backup for Microsoft 365 1](https://actionlake.com/connectors/veeam-backup-for-microsoft-365) - [Northflank 1](https://actionlake.com/connectors/northflank) - [HashiCorp Nomad 1](https://actionlake.com/connectors/hashicorp-nomad) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Azure Backup (Recovery Services); the name is the vendor's own. Counts are from the Azure Backup (Recovery Services) service file, version 1.0.0. ## Give your agent Azure Backup (Recovery Services) today. [Connect Azure Backup (Recovery Services) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/azure-backup-recovery-services More: https://actionlake.com/llms.txt