Connectors · MSP & PSA
Azure Kubernetes Service (AKS) MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Kubernetes Service (AKS) and the rest of your systems. It gives your agent 72 Azure Kubernetes Service (AKS) actions (42 reads, 11 writes and 19 that wait for a confirmation) and holds the Azure Kubernetes Service (AKS) credential itself, so the agent never does. It paces Azure Kubernetes Service (AKS)'s limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "azure_kubernetes_service.operations.list", intent: "check which Azure Kubernetes Service (AKS) account is connected"}# Gets a list of operations · read · 1 upstream call- 72actionsin one signed file
- 42readlook, never change
- 11writecreate and update
- 19wait for a yesdestructive, confirmed first
Set up
Connect Azure Kubernetes Service (AKS) in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Azure Kubernetes Service (AKS).
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idEntra application (client) id of a service principal with an Azure RBAC role on the subscriptionclient_secretEntra client secrettenant_idYour Azure Kubernetes Service (AKS) tenant id
account { op: "connections.requirements", service: "azure_kubernetes_service" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "azure_kubernetes_service.operations.list" }# gets a list of operations · read · 1 upstream callcheck { action: "azure_kubernetes_service.managed_clusters.update_tags", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Azure Kubernetes Service (AKS) at a glance
- Sign-in
- OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
- You provide
client_idclient_secret- Setup fields
tenant_id- Limits we pace to
- 200 calls a minute, per connection
- API covered
- Azure Kubernetes Service (managed clusters, node pools, machines, maintenance, namespaces, snapshots) API Azure Resource Manager Microsoft.ContainerService: managedClusters.json (2026-08-01)
management.azure.com - Built from
- Azure Kubernetes Service (AKS)'s documentation, read 23 October 2026OpenAPI spec (GitHub)learn.microsoft.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 35 of 42 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 1, so ask can line Azure Kubernetes Service (AKS) up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Azure Kubernetes Service (AKS).
72 actions in 14 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 42readlook, never change
- 11writecreate and update
- 19destructivewait for a confirmation
Managed clusters
2716 read · 3 write · 8 destructive
Gets a list of managed clusters in the specified subscription · Gets a managed cluster · Updates tags on a managed cluster · Deletes a managed cluster
Agent pools
94 read · 1 write · 4 destructive
Gets a list of agent pools in the specified managed cluster · Gets the specified managed cluster agent pool · Gets a list of supported Kubernetes versions for the specified agent pool · Gets the upgrade profile for an agent pool
Managed namespaces
63 read · 2 write · 1 destructive
Gets a list of managed namespaces in the specified managed cluster · Gets the specified namespace of a managed cluster · Lists the credentials of a namespace · Updates tags on a managed namespace
Snapshots
63 read · 2 write · 1 destructive
Gets a list of snapshots in the specified subscription · Lists snapshots in the specified subscription and resource group · Gets a snapshot · Updates tags on a snapshot
Identity bindings
42 read · 1 write · 1 destructive
Gets a list of identity bindings in the specified managed cluster · Gets the specified Identity Binding · Deletes an identity binding in the specified managed cluster · Creates or updates an identity binding in the specified managed cluster
Maintenance configurations
42 read · 1 write · 1 destructive
Gets a list of maintenance configurations in the specified managed cluster · Gets the specified maintenance configuration of a managed cluster · Deletes a maintenance configuration · Creates or updates a maintenance configuration in the specified managed cluster
Private endpoint connections
42 read · 1 write · 1 destructive
Gets a list of private endpoint connections in the specified managed cluster · Gets the specified private endpoint connection · Updates a private endpoint connection · Deletes a private endpoint connection
Trusted access role bindings
42 read · 0 write · 2 destructive
List trusted access role bindings · Get a trusted access role binding · Delete a trusted access role binding · Create or update a trusted access role binding
6 more areas · 8 actions
- Machines 2
- Subscriptions 2
- Operations 1
- Private link resources 1
- Resource groups 1
- Trusted access roles 1
Top actions
The Azure Kubernetes Service (AKS) API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 6 of Azure Kubernetes Service (AKS)'s 7 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
azure_kubernetes_service.resource_groups.listList the resource groups in a subscription | List the resource groups in a subscription. | read | infra.resource_group.list19 connectors |
azure_kubernetes_service.subscriptions.list_locationsList the Azure regions available to a subscription | List the Azure regions available to a subscription. | read | infra.region.list16 connectors |
azure_kubernetes_service.managed_clusters.listGets a list of managed clusters in the specified subscription | Gets a list of managed clusters in the specified subscription. | read | infra.container_cluster.list6 connectors |
azure_kubernetes_service.managed_clusters.getGets a managed cluster | Gets a managed cluster. | read | infra.container_cluster.get8 connectors |
azure_kubernetes_service.managed_namespaces.list_by_managed_clusterGets a list of managed namespaces in the specified managed cluster | Gets a list of managed namespaces in the specified managed cluster. | read | this connector |
azure_kubernetes_service.managed_clusters.update_tagsUpdates tags on a managed cluster | Updates tags on a managed cluster. | write | infra.container_cluster.update6 connectors |
azure_kubernetes_service.managed_clusters.deleteDeletes a managed cluster | Deletes a managed cluster. | destructive | infra.container_cluster.delete7 connectors |
azure_kubernetes_service.machines.listGets a list of machines in the specified agent pool | Gets a list of machines in the specified agent pool. | read | this connector |
azure_kubernetes_service.snapshots.listGets a list of snapshots in the specified subscription | Gets a list of snapshots in the specified subscription. | read | this connector |
azure_kubernetes_service.operations.listGets a list of operations | Gets a list of operations. | read | this connector |
azure_kubernetes_service.managed_clusters.create_or_updateCreates or updates a managed cluster | Creates or updates a managed cluster. | write | this connector |
azure_kubernetes_service.snapshots.update_tagsUpdates tags on a snapshot | Updates tags on a snapshot. | write | this connector |
Try it
Prompts to paste into Claude.
Each one names the Azure Kubernetes Service (AKS) actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Gets a list of operations in Azure Kubernetes Service (AKS) and tell me what stands out.
calls
azure_kubernetes_service.operations.list - Writewrite
Updates tags on a managed cluster in Azure Kubernetes Service (AKS). Show me exactly what you will send before you save it.
calls
azure_kubernetes_service.managed_clusters.update_tags
Governance for Azure Kubernetes Service (AKS)
Destructive actions wait for a yes.
19 Azure Kubernetes Service (AKS) actions are destructive. These are all of them:
- Deletes a managed cluster
azure_kubernetes_service.managed_clusters.delete - Submits a command to run against the Managed Cluster
azure_kubernetes_service.managed_clusters.run_command - Stops a Managed Cluster
azure_kubernetes_service.managed_clusters.stop - Reset the AAD Profile of a managed cluster
azure_kubernetes_service.managed_clusters.reset_aad_profile - Upgrades the node image version of an agent pool to the latest
azure_kubernetes_service.agent_pools.upgrade_node_image_version - Rotates the certificates of a managed cluster
azure_kubernetes_service.managed_clusters.rotate_cluster_certificates - Reset the Service Principal Profile of a managed cluster
azure_kubernetes_service.managed_clusters.reset_service_principal_profile - Rotates the service account signing keys of a managed cluster
azure_kubernetes_service.managed_clusters.rotate_service_account_signing_keys - Deletes a snapshot
azure_kubernetes_service.snapshots.delete - Deletes an agent pool in the specified managed cluster
azure_kubernetes_service.agent_pools.delete - Deletes an identity binding in the specified managed cluster
azure_kubernetes_service.identity_bindings.delete - Deletes a namespace
azure_kubernetes_service.managed_namespaces.delete - Deletes specific machines in an agent pool
azure_kubernetes_service.agent_pools.delete_machines - Deletes a maintenance configuration
azure_kubernetes_service.maintenance_configurations.delete - Deletes a private endpoint connection
azure_kubernetes_service.private_endpoint_connections.delete - Delete a trusted access role binding
azure_kubernetes_service.trusted_access_role_bindings.delete - Aborts last operation running on agent pool
azure_kubernetes_service.agent_pools.abort_latest_operation - Aborts last operation running on managed cluster
azure_kubernetes_service.managed_clusters.abort_latest_operation - Create or update a trusted access role binding
azure_kubernetes_service.trusted_access_role_bindings.create_or_update
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Deletes a managed cluster?
intent: the user asked me to deletes a managed cluster
account { op: "keys.create", name: "azure-kubernetes-service-agent", allowed_actions: ["azure_kubernetes_service.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "azure_kubernetes_service.managed_clusters.delete", approver: "[email protected]" }, { match: "azure_kubernetes_service.managed_clusters.run_command", approver: "[email protected]" }, { match: "azure_kubernetes_service.managed_clusters.stop", approver: "[email protected]" } ]}Cost
What Azure Kubernetes Service (AKS) costs on actionlake.
Every Azure Kubernetes Service (AKS) action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Azure Kubernetes Service (AKS) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 72 Azure Kubernetes Service (AKS) actions
- 17actions pageeach page of a long list is one call
- 35reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Azure Kubernetes Service (AKS) action.
72 actions by area: the id your agent calls, what it does, and its effect.
Managed clusters27
azure_kubernetes_service.managed_clusters.abort_latest_operationAborts last operation running on managed clusterdestructiveazure_kubernetes_service.managed_clusters.create_or_updateCreates or updates a managed clusterwriteazure_kubernetes_service.managed_clusters.deleteDeletes a managed clusterdestructiveazure_kubernetes_service.managed_clusters.getGets a managed clusterreadazure_kubernetes_service.managed_clusters.get_access_profileGets an access profile of a managed clusterreadazure_kubernetes_service.managed_clusters.get_command_resultGets the results of a command which has been run on the Managed Clusterreadazure_kubernetes_service.managed_clusters.get_mesh_revision_profileGets a mesh revision profile for a specified mesh in the specified locationreadazure_kubernetes_service.managed_clusters.get_mesh_upgrade_profileGets available upgrades for a service mesh in a clusterreadazure_kubernetes_service.managed_clusters.get_upgrade_profileGets the upgrade profile of a managed clusterreadazure_kubernetes_service.managed_clusters.listGets a list of managed clusters in the specified subscriptionreadazure_kubernetes_service.managed_clusters.list_by_resource_groupLists managed clusters in the specified subscription and resource groupreadazure_kubernetes_service.managed_clusters.list_cluster_admin_credentialsLists the admin credentials of a managed clusterreadazure_kubernetes_service.managed_clusters.list_cluster_monitoring_user_credentialsLists the cluster monitoring user credentials of a managed clusterreadazure_kubernetes_service.managed_clusters.list_cluster_user_credentialsLists the user credentials of a managed clusterreadazure_kubernetes_service.managed_clusters.list_kubernetes_versionsGets a list of supported Kubernetes versions in the specified subscriptionreadazure_kubernetes_service.managed_clusters.list_mesh_revision_profilesLists mesh revision profiles for all meshes in the specified locationreadazure_kubernetes_service.managed_clusters.list_mesh_upgrade_profilesLists available upgrades for all service meshes in a specific clusterreadazure_kubernetes_service.managed_clusters.list_outbound_network_dependencies_endpointsGets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed clusterreadazure_kubernetes_service.managed_clusters.reset_aad_profileReset the AAD Profile of a managed clusterdestructiveazure_kubernetes_service.managed_clusters.reset_service_principal_profileReset the Service Principal Profile of a managed clusterdestructiveazure_kubernetes_service.managed_clusters.resolve_private_link_service_idGets the private link service ID for the specified managed clusterreadazure_kubernetes_service.managed_clusters.rotate_cluster_certificatesRotates the certificates of a managed clusterdestructiveazure_kubernetes_service.managed_clusters.rotate_service_account_signing_keysRotates the service account signing keys of a managed clusterdestructiveazure_kubernetes_service.managed_clusters.run_commandSubmits a command to run against the Managed Clusterdestructiveazure_kubernetes_service.managed_clusters.startStarts a previously stopped Managed Clusterwriteazure_kubernetes_service.managed_clusters.stopStops a Managed Clusterdestructiveazure_kubernetes_service.managed_clusters.update_tagsUpdates tags on a managed clusterwrite
Agent pools9
azure_kubernetes_service.agent_pools.abort_latest_operationAborts last operation running on agent pooldestructiveazure_kubernetes_service.agent_pools.create_or_updateCreates or updates an agent pool in the specified managed clusterwriteazure_kubernetes_service.agent_pools.deleteDeletes an agent pool in the specified managed clusterdestructiveazure_kubernetes_service.agent_pools.delete_machinesDeletes specific machines in an agent pooldestructiveazure_kubernetes_service.agent_pools.getGets the specified managed cluster agent poolreadazure_kubernetes_service.agent_pools.get_available_agent_pool_versionsGets a list of supported Kubernetes versions for the specified agent poolreadazure_kubernetes_service.agent_pools.get_upgrade_profileGets the upgrade profile for an agent poolreadazure_kubernetes_service.agent_pools.listGets a list of agent pools in the specified managed clusterreadazure_kubernetes_service.agent_pools.upgrade_node_image_versionUpgrades the node image version of an agent pool to the latestdestructive
Managed namespaces6
azure_kubernetes_service.managed_namespaces.create_or_updateCreates or updates a namespace managed by ARM for the specified managed clusterwriteazure_kubernetes_service.managed_namespaces.deleteDeletes a namespacedestructiveazure_kubernetes_service.managed_namespaces.getGets the specified namespace of a managed clusterreadazure_kubernetes_service.managed_namespaces.list_by_managed_clusterGets a list of managed namespaces in the specified managed clusterreadazure_kubernetes_service.managed_namespaces.list_credentialLists the credentials of a namespacereadazure_kubernetes_service.managed_namespaces.updateUpdates tags on a managed namespacewrite
Snapshots6
azure_kubernetes_service.snapshots.create_or_updateCreates or updates a snapshotwriteazure_kubernetes_service.snapshots.deleteDeletes a snapshotdestructiveazure_kubernetes_service.snapshots.getGets a snapshotreadazure_kubernetes_service.snapshots.listGets a list of snapshots in the specified subscriptionreadazure_kubernetes_service.snapshots.list_by_resource_groupLists snapshots in the specified subscription and resource groupreadazure_kubernetes_service.snapshots.update_tagsUpdates tags on a snapshotwrite
Identity bindings4
azure_kubernetes_service.identity_bindings.create_or_updateCreates or updates an identity binding in the specified managed clusterwriteazure_kubernetes_service.identity_bindings.deleteDeletes an identity binding in the specified managed clusterdestructiveazure_kubernetes_service.identity_bindings.getGets the specified Identity Bindingreadazure_kubernetes_service.identity_bindings.list_by_managed_clusterGets a list of identity bindings in the specified managed clusterread
Maintenance configurations4
azure_kubernetes_service.maintenance_configurations.create_or_updateCreates or updates a maintenance configuration in the specified managed clusterwriteazure_kubernetes_service.maintenance_configurations.deleteDeletes a maintenance configurationdestructiveazure_kubernetes_service.maintenance_configurations.getGets the specified maintenance configuration of a managed clusterreadazure_kubernetes_service.maintenance_configurations.list_by_managed_clusterGets a list of maintenance configurations in the specified managed clusterread
Private endpoint connections4
azure_kubernetes_service.private_endpoint_connections.deleteDeletes a private endpoint connectiondestructiveazure_kubernetes_service.private_endpoint_connections.getGets the specified private endpoint connectionreadazure_kubernetes_service.private_endpoint_connections.listGets a list of private endpoint connections in the specified managed clusterreadazure_kubernetes_service.private_endpoint_connections.updateUpdates a private endpoint connectionwrite
Trusted access role bindings4
azure_kubernetes_service.trusted_access_role_bindings.create_or_updateCreate or update a trusted access role bindingdestructiveazure_kubernetes_service.trusted_access_role_bindings.deleteDelete a trusted access role bindingdestructiveazure_kubernetes_service.trusted_access_role_bindings.getGet a trusted access role bindingreadazure_kubernetes_service.trusted_access_role_bindings.listList trusted access role bindingsread
Machines2
azure_kubernetes_service.machines.getGet a specific machine in the specified agent poolreadazure_kubernetes_service.machines.listGets a list of machines in the specified agent poolread
Subscriptions2
azure_kubernetes_service.subscriptions.listList the subscriptions the credential can seereadazure_kubernetes_service.subscriptions.list_locationsList the Azure regions available to a subscriptionread
Operations1
azure_kubernetes_service.operations.listGets a list of operationsread
Private link resources1
azure_kubernetes_service.private_link_resources.listGets a list of private link resources in the specified managed clusterread
Resource groups1
azure_kubernetes_service.resource_groups.listList the resource groups in a subscriptionread
Trusted access roles1
azure_kubernetes_service.trusted_access_roles.listList supported trusted access rolesread
Questions
The Azure Kubernetes Service (AKS) MCP server, answered.
Is there an Azure Kubernetes Service (AKS) MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 72 Azure Kubernetes Service (AKS) actions across managed clusters, agent pools, managed namespaces and snapshots, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Kubernetes Service (AKS).
What do I need to connect Azure Kubernetes Service (AKS)?
Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_kubernetes_service" } lists exactly what to paste.
Can an AI agent delete or change things in Azure Kubernetes Service (AKS)?
Only if its key allows it, and only with an explicit confirmation. 19 Azure Kubernetes Service (AKS) actions are destructive, including deletes a managed cluster, submits a command to run against the Managed Cluster and stops a Managed Cluster. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Azure Kubernetes Service (AKS) API limit?
actionlake paces every call to the limits in the Azure Kubernetes Service (AKS) service file: 200 calls a minute per connection. Repeated reads are answered from cache (35 Azure Kubernetes Service (AKS) actions can be), which never reaches Azure Kubernetes Service (AKS).
What does an Azure Kubernetes Service (AKS) action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (17 Azure Kubernetes Service (AKS) actions page). Cache hits, searches, dry runs and calls Azure Kubernetes Service (AKS) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Azure Kubernetes Service (AKS) API does it cover?
The Azure Kubernetes Service (managed clusters, node pools, machines, maintenance, namespaces, snapshots) API Azure Resource Manager Microsoft.ContainerService: managedClusters.json (2026-08-01) at management.azure.com. It is built from Azure Kubernetes Service (AKS)'s documentation as read on 23 October 2026. 72 actions in 14 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Azure Kubernetes Service (AKS) data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Kubernetes Service (AKS) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Azure Kubernetes Service (AKS) today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
