Connectors · MSP & PSA

Azure Monitor MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Monitor and the rest of your systems. It gives your agent 122 Azure Monitor actions (74 reads, 30 writes and 18 that wait for a confirmation) and holds the Azure Monitor credential itself, so the agent never does. It paces Azure Monitor's limits and records every call.

Connect Azure Monitor free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

the first call

do {  action: "azure_monitor.event_categories.list",  intent: "check which Azure Monitor account is connected"}# Get the list of available event categories supported in the Activity Logs Service · read · 1 upstream call

122actionsin one signed file
74readlook, never change
30writecreate and update
18wait for a yesdestructive, confirmed first

Set up

Connect Azure Monitor in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Azure Monitor.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
- client_idEntra application (client) id of a service principal with Monitoring Reader or Monitoring Contributor on the…
- client_secretEntra client secret
- tenant_idYour Azure Monitor tenant id
```
account { op: "connections.requirements", service: "azure_monitor" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "azure_monitor.event_categories.list" }# get the list of available event categories supported in the activity logs service · read · 1 upstream callcheck { action: "azure_monitor.metric_alerts.update", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Azure Monitor at a glance

Sign-in: OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide: client_idclient_secret
Setup fields: tenant_id
Limits we pace to: 200 calls a minute, per connection
API covered: Azure Monitor (metrics, alert rules, action groups, activity log, diagnostic settings, data collection) API Azure Resource Manager Microsoft.Insights, one api-version per resource type: stable/2026-01-01/metricAlert.json (2026-01-01), stable/2026-01-01/activityLogAlerts_API.json (2026-01-01), stable/2026-03-01/scheduledQueryRule_API.json (2026-03-01), stable/2023-01-01/actionGroups_API.json (2023-01-01), preview/2023-05-01-preview/tenantActionGroups.json (2023-05-01-preview), stable/2024-02-01/metrics.json (2024-02-01), stable/2019-03-01/metricBaselines.json (2019-03-01), stable/2015-04-01/activityLogs.json (2015-04-01), preview/2021-05-01-preview/openapi.json (2021-05-01-preview), preview/2021-05-01-preview/subscriptionDiagnosticsSettings_API.json (2021-05-01-preview), preview/2021-05-01-preview/managementGroupDiagnosticSettings_API.json (2021-05-01-preview), stable/2022-10-01/autoScale.json (2022-10-01), stable/2024-03-11/dataCollection.json (2024-03-11), stable/2021-09-01/privateLinkScopes_API.json (2021-09-01), stable/2021-10-01/networkSecurityPerimeter.json (2021-10-01), stable/2016-03-01/logProfiles.json (2016-03-01), stable/2016-03-01/alertRulesIncidents.json (2016-03-01), preview/2018-11-27-preview/vmInsightsOnboarding.json (2018-11-27-preview), stable/2015-04-01/operations_API.json (2015-04-01)management.azure.com
Built from: Azure Monitor's documentation, read 22 October 2026GitHub learn.microsoft.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 73 of 74 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 2, so ask can line Azure Monitor up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Azure Monitor.

122 actions in 33 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

74readlook, never change
30writecreate and update
18destructivewait for a confirmation

Action groups
12
6 read · 4 write · 2 destructive
Get a list of all action groups in a subscription · Get an action group · Updates an existing action group's tags · Delete an action group
Data collection endpoints
9
5 read · 3 write · 1 destructive
Lists all data collection endpoints in the specified resource group · Lists all data collection endpoints in the specified subscription · Gets a list of NSP configurations for the specified data collection endpoint · Returns the specified data collection endpoint
Scheduled query rules
9
5 read · 3 write · 1 destructive
Retrieve scheduled query rule definitions in a resource group · Retrieve a scheduled query rule definitions in a subscription · Gets a list of NSP configurations for specified scheduled query rule · Retrieve an scheduled query rule definition
Tenant action groups
7
3 read · 2 write · 2 destructive
Get a list of all tenant action groups in a management group · Get a tenant action group · Get the test notifications by the notification id · Send test notifications to a set of provided receivers
Activity log alerts
6
3 read · 2 write · 1 destructive
Get a list of all Activity Log Alert rules in a resource group · Get a list of all Activity Log Alert rules in a subscription · Get an Activity Log Alert rule · Updates 'tags' and 'enabled' fields in an existing Alert rule
Autoscale settings
6
3 read · 2 write · 1 destructive
Lists the autoscale settings for a resource group · Lists the autoscale settings for a subscription · Gets an autoscale setting · Updates an existing AutoscaleSettingsResource
Data collection rule associations
6
4 read · 1 write · 1 destructive
Lists associations for the specified data collection endpoint · Lists associations for the specified resource · Lists associations for the specified data collection rule · Returns the specified association
Data collection rules
6
3 read · 2 write · 1 destructive
Lists all data collection rules in the specified resource group · Lists all data collection rules in the specified subscription · Returns the specified data collection rule · Updates part of a data collection rule

25 more areas · 61 actions

Metric alerts 6
Private link scopes 6
Log profiles 5
Diagnostic settings 4
Management group diagnostic settings 4
Private endpoint connections 4
Private link scoped resources 4
Subscription diagnostic settings 4
Metrics 3
Alert rule incidents 2
Diagnostic settings category 2
Metric alerts status 2
Metric definitions 2
Private link resources 2
Activity logs 1
Baselines 1
Event categories 1
Metric namespaces 1
Operations 1
Predictive metric 1
Private link scope operation status 1
Resource groups 1
Subscriptions 1
Tenant activity logs 1
VM insights 1

Top actions

The Azure Monitor API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 13 of Azure Monitor's 14 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`azure_monitor.metric_alerts.list_by_subscription`Retrieve alert rule definitions in a subscription	Retrieve alert rule definitions in a subscription.	read	`monitoring.monitor.list`32 connectors
`azure_monitor.activity_logs.list`Provides the list of records from the activity logs	Provides the list of records from the activity logs.	read	`monitoring.event.list`14 connectors
`azure_monitor.metric_alerts.get`Retrieve an alert rule definition	Retrieve an alert rule definition.	read	`monitoring.monitor.get`31 connectors
`azure_monitor.action_groups.list_by_subscription_id`Get a list of all action groups in a subscription	Get a list of all action groups in a subscription.	read	`monitoring.notification_channel.list`18 connectors
`azure_monitor.metric_alerts.update`Update an metric alert definition	Update an metric alert definition.	write	`monitoring.monitor.update`28 connectors
`azure_monitor.metric_alerts.delete`Delete an alert rule definition	Delete an alert rule definition.	destructive	`monitoring.monitor.delete`31 connectors
`azure_monitor.metric_definitions.list`Lists the metric definitions for the resource	Lists the metric definitions for the resource.	read	`monitoring.metric.list`10 connectors
`azure_monitor.metrics.list`Lists the metric values for a resource	Lists the metric values for a resource.	read	`monitoring.metric.query`9 connectors
`azure_monitor.action_groups.get`Get an action group	Get an action group.	read	`monitoring.notification_channel.get`15 connectors
`azure_monitor.resource_groups.list`List the resource groups in a subscription	List the resource groups in a subscription.	read	`infra.resource_group.list`19 connectors
`azure_monitor.action_groups.update`Updates an existing action group's tags	Updates an existing action group's tags.	write	`monitoring.notification_channel.update`15 connectors
`azure_monitor.metric_alerts.create_or_update`Create or update an metric alert definition	Create or update an metric alert definition.	write	`monitoring.monitor.upsert`2 connectors

Try it

Prompts to paste into Claude.

Each one names the Azure Monitor actions it will call, so you know what it reads and what it changes before you send it.

Readread
Get the list of available event categories supported in the Activity Logs Service in Azure Monitor and tell me what stands out.
callsazure_monitor.event_categories.list
Writewrite
Update an metric alert definition in Azure Monitor. Show me exactly what you will send before you save it.
callsazure_monitor.metric_alerts.update

Governance for Azure Monitor

Destructive actions wait for a yes.

18 Azure Monitor actions are destructive. These are all of them:

Delete an alert rule definitionazure_monitor.metric_alerts.delete
Delete an action groupazure_monitor.action_groups.delete
Send test notifications to a set of provided receiversazure_monitor.action_groups.create_notifications
Send test notifications to a set of provided receiversazure_monitor.tenant_action_groups.create_notifications
Deletes the log profileazure_monitor.log_profiles.delete
Deletes and autoscale settingazure_monitor.autoscale_settings.delete
Delete an Activity Log Alert ruleazure_monitor.activity_log_alerts.delete
Deletes existing diagnostic settings for the specified resourceazure_monitor.diagnostic_settings.delete
Deletes an Azure Monitor PrivateLinkScopeazure_monitor.private_link_scopes.delete
Delete a tenant action groupazure_monitor.tenant_action_groups.delete
Deletes a data collection ruleazure_monitor.data_collection_rules.delete
Deletes a scheduled query ruleazure_monitor.scheduled_query_rules.delete
Deletes a data collection endpointazure_monitor.data_collection_endpoints.delete
Deletes a private endpoint connection with a given nameazure_monitor.private_endpoint_connections.delete
Deletes an Azure monitor scoped resource with a given nameazure_monitor.private_link_scoped_resources.delete
Deletes existing subscription diagnostic settings for the specified resourceazure_monitor.subscription_diagnostic_settings.delete
Deletes an associationazure_monitor.data_collection_rule_associations.delete
Deletes existing management group diagnostic settings for the specified resourceazure_monitor.management_group_diagnostic_settings.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doazure_monitor.metric_alerts.deleteconfirm_policy: human

Delete an alert rule definition?

intent: the user asked me to delete an alert rule definition

run suspended · waiting for a named person · key azure-monitor-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "azure-monitor-agent",  allowed_actions: ["azure_monitor.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "azure_monitor.metric_alerts.delete", approver: "[email protected]" },    { match: "azure_monitor.action_groups.delete", approver: "[email protected]" },    { match: "azure_monitor.action_groups.create_notifications", approver: "[email protected]" }  ]}

Illustrative. Scoped to Azure Monitor only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Azure Monitor costs on actionlake.

Every Azure Monitor action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Azure Monitor refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 122 Azure Monitor actions
35actions pageeach page of a long list is one call
73reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Azure Monitor action.

122 actions by area: the id your agent calls, what it does, and its effect.

Action groups12

azure_monitor.action_groups.create_notificationsSend test notifications to a set of provided receiversdestructive
azure_monitor.action_groups.create_or_updateCreate a new action group or update an existing onewrite
azure_monitor.action_groups.deleteDelete an action groupdestructive
azure_monitor.action_groups.enable_receiverEnable a receiver in an action groupwrite
azure_monitor.action_groups.getGet an action groupread
azure_monitor.action_groups.get_network_security_perimeter_configurationGets a specified NSP configuration for specified action groupread
azure_monitor.action_groups.get_test_notificationsGet the test notifications by the notification idread
azure_monitor.action_groups.list_by_resource_groupGet a list of all action groups in a resource groupread
azure_monitor.action_groups.list_by_subscription_idGet a list of all action groups in a subscriptionread
azure_monitor.action_groups.list_network_security_perimeter_configurationsGets a list of NSP configurations for specified action groupread
azure_monitor.action_groups.reconcile_network_security_perimeter_configurationReconciles a specified NSP configuration for specified action groupwrite
azure_monitor.action_groups.updateUpdates an existing action group's tagswrite

Data collection endpoints9

azure_monitor.data_collection_endpoints.createCreates or updates a data collection endpointwrite
azure_monitor.data_collection_endpoints.deleteDeletes a data collection endpointdestructive
azure_monitor.data_collection_endpoints.getReturns the specified data collection endpointread
azure_monitor.data_collection_endpoints.get_network_security_perimeter_configurationGets the specified NSP configuration for the specified data collection endpointread
azure_monitor.data_collection_endpoints.list_by_resource_groupLists all data collection endpoints in the specified resource groupread
azure_monitor.data_collection_endpoints.list_by_subscriptionLists all data collection endpoints in the specified subscriptionread
azure_monitor.data_collection_endpoints.list_network_security_perimeter_configurationsGets a list of NSP configurations for the specified data collection endpointread
azure_monitor.data_collection_endpoints.reconcile_network_security_perimeter_configurationReconciles the specified NSP configuration for the specified data collection endpointwrite
azure_monitor.data_collection_endpoints.updateUpdates part of a data collection endpointwrite

Scheduled query rules9

azure_monitor.scheduled_query_rules.create_or_updateCreates or updates a scheduled query rulewrite
azure_monitor.scheduled_query_rules.deleteDeletes a scheduled query ruledestructive
azure_monitor.scheduled_query_rules.getRetrieve an scheduled query rule definitionread
azure_monitor.scheduled_query_rules.get_network_security_perimeter_configurationGets a network security perimeter configurationread
azure_monitor.scheduled_query_rules.list_by_resource_groupRetrieve scheduled query rule definitions in a resource groupread
azure_monitor.scheduled_query_rules.list_by_subscriptionRetrieve a scheduled query rule definitions in a subscriptionread
azure_monitor.scheduled_query_rules.list_network_security_perimeter_configurationsGets a list of NSP configurations for specified scheduled query ruleread
azure_monitor.scheduled_query_rules.reconcile_network_security_perimeter_configurationReconcile network security perimeter configuration for ScheduledQueryRule resourcewrite
azure_monitor.scheduled_query_rules.updateUpdate a scheduled query rulewrite

Tenant action groups7

azure_monitor.tenant_action_groups.create_notificationsSend test notifications to a set of provided receiversdestructive
azure_monitor.tenant_action_groups.create_or_updateCreate a new tenant action group or update an existing onewrite
azure_monitor.tenant_action_groups.deleteDelete a tenant action groupdestructive
azure_monitor.tenant_action_groups.getGet a tenant action groupread
azure_monitor.tenant_action_groups.get_test_notificationsGet the test notifications by the notification idread
azure_monitor.tenant_action_groups.list_by_management_group_idGet a list of all tenant action groups in a management groupread
azure_monitor.tenant_action_groups.updateUpdates an existing tenant action group's tagswrite

Activity log alerts6

azure_monitor.activity_log_alerts.create_or_updateCreate a new Activity Log Alert rule or update an existing onewrite
azure_monitor.activity_log_alerts.deleteDelete an Activity Log Alert ruledestructive
azure_monitor.activity_log_alerts.getGet an Activity Log Alert ruleread
azure_monitor.activity_log_alerts.list_by_resource_groupGet a list of all Activity Log Alert rules in a resource groupread
azure_monitor.activity_log_alerts.list_by_subscription_idGet a list of all Activity Log Alert rules in a subscriptionread
azure_monitor.activity_log_alerts.updateUpdates 'tags' and 'enabled' fields in an existing Alert rulewrite

Autoscale settings6

azure_monitor.autoscale_settings.create_or_updateCreates or updates an autoscale settingwrite
azure_monitor.autoscale_settings.deleteDeletes and autoscale settingdestructive
azure_monitor.autoscale_settings.getGets an autoscale settingread
azure_monitor.autoscale_settings.list_by_resource_groupLists the autoscale settings for a resource groupread
azure_monitor.autoscale_settings.list_by_subscriptionLists the autoscale settings for a subscriptionread
azure_monitor.autoscale_settings.updateUpdates an existing AutoscaleSettingsResourcewrite

Data collection rule associations6

azure_monitor.data_collection_rule_associations.createCreates or updates an associationwrite
azure_monitor.data_collection_rule_associations.deleteDeletes an associationdestructive
azure_monitor.data_collection_rule_associations.getReturns the specified associationread
azure_monitor.data_collection_rule_associations.list_by_data_collection_endpointLists associations for the specified data collection endpointread
azure_monitor.data_collection_rule_associations.list_by_resourceLists associations for the specified resourceread
azure_monitor.data_collection_rule_associations.list_by_ruleLists associations for the specified data collection ruleread

Data collection rules6

azure_monitor.data_collection_rules.createCreates or updates a data collection rulewrite
azure_monitor.data_collection_rules.deleteDeletes a data collection ruledestructive
azure_monitor.data_collection_rules.getReturns the specified data collection ruleread
azure_monitor.data_collection_rules.list_by_resource_groupLists all data collection rules in the specified resource groupread
azure_monitor.data_collection_rules.list_by_subscriptionLists all data collection rules in the specified subscriptionread
azure_monitor.data_collection_rules.updateUpdates part of a data collection rulewrite

Metric alerts6

azure_monitor.metric_alerts.create_or_updateCreate or update an metric alert definitionwrite
azure_monitor.metric_alerts.deleteDelete an alert rule definitiondestructive
azure_monitor.metric_alerts.getRetrieve an alert rule definitionread
azure_monitor.metric_alerts.list_by_resource_groupRetrieve alert rule definitions in a resource groupread
azure_monitor.metric_alerts.list_by_subscriptionRetrieve alert rule definitions in a subscriptionread
azure_monitor.metric_alerts.updateUpdate an metric alert definitionwrite

Private link scopes6

azure_monitor.private_link_scopes.create_or_updateCreates (or updates) an Azure Monitor PrivateLinkScopewrite
azure_monitor.private_link_scopes.deleteDeletes an Azure Monitor PrivateLinkScopedestructive
azure_monitor.private_link_scopes.getReturns an Azure Monitor PrivateLinkScoperead
azure_monitor.private_link_scopes.listGets a list of all Azure Monitor PrivateLinkScopes within a subscriptionread
azure_monitor.private_link_scopes.list_by_resource_groupGets a list of Azure Monitor PrivateLinkScopes within a resource groupread
azure_monitor.private_link_scopes.update_tagsUpdates an existing PrivateLinkScope's tagswrite

Log profiles5

azure_monitor.log_profiles.create_or_updateCreate or update a log profile in Azure Monitoring REST APIwrite
azure_monitor.log_profiles.deleteDeletes the log profiledestructive
azure_monitor.log_profiles.getGets the log profileread
azure_monitor.log_profiles.listList the log profilesread
azure_monitor.log_profiles.updateUpdates an existing LogProfilesResourcewrite

Diagnostic settings4

azure_monitor.diagnostic_settings.create_or_updateCreates or updates diagnostic settings for the specified resourcewrite
azure_monitor.diagnostic_settings.deleteDeletes existing diagnostic settings for the specified resourcedestructive
azure_monitor.diagnostic_settings.getGets the active diagnostic settings for the specified resourceread
azure_monitor.diagnostic_settings.listGets the active diagnostic settings list for the specified resourceread

Management group diagnostic settings4

azure_monitor.management_group_diagnostic_settings.create_or_updateCreates or updates management group diagnostic settings for the specified resourcewrite
azure_monitor.management_group_diagnostic_settings.deleteDeletes existing management group diagnostic settings for the specified resourcedestructive
azure_monitor.management_group_diagnostic_settings.getGets the active management group diagnostic settings for the specified resourceread
azure_monitor.management_group_diagnostic_settings.listGets the active management group diagnostic settings list for the specified management groupread

Private endpoint connections4

azure_monitor.private_endpoint_connections.create_or_updateApprove or reject a private endpoint connection with a given namewrite
azure_monitor.private_endpoint_connections.deleteDeletes a private endpoint connection with a given namedestructive
azure_monitor.private_endpoint_connections.getGets a private endpoint connectionread
azure_monitor.private_endpoint_connections.list_by_private_link_scopeGets all private endpoint connections on a private link scoperead

Private link scoped resources4

azure_monitor.private_link_scoped_resources.create_or_updateAdd an Azure monitor scoped resource in the private link scopewrite
azure_monitor.private_link_scoped_resources.deleteDeletes an Azure monitor scoped resource with a given namedestructive
azure_monitor.private_link_scoped_resources.getGets a scoped resource in a private link scoperead
azure_monitor.private_link_scoped_resources.list_by_private_link_scopeGets all scoped resources on a private link scoperead

Subscription diagnostic settings4

azure_monitor.subscription_diagnostic_settings.create_or_updateCreates or updates subscription diagnostic settings for the specified resourcewrite
azure_monitor.subscription_diagnostic_settings.deleteDeletes existing subscription diagnostic settings for the specified resourcedestructive
azure_monitor.subscription_diagnostic_settings.getGets the active subscription diagnostic settings for the specified resourceread
azure_monitor.subscription_diagnostic_settings.listGets the active subscription diagnostic settings list for the specified subscriptionIdread

Metrics3

azure_monitor.metrics.list**Lists the metric values for a resource**read
azure_monitor.metrics.list_at_subscription_scope**Lists the metric data for a subscription**read
azure_monitor.metrics.query_at_subscription_scope**Lists the metric data for a subscription**read

Alert rule incidents2

azure_monitor.alert_rule_incidents.getGets an incident associated to an alert ruleread
azure_monitor.alert_rule_incidents.list_by_alert_ruleGets a list of incidents associated to an alert ruleread

Diagnostic settings category2

azure_monitor.diagnostic_settings_category.getGets the diagnostic settings category for the specified resourceread
azure_monitor.diagnostic_settings_category.listLists the diagnostic settings categories for the specified resourceread

Metric alerts status2

azure_monitor.metric_alerts_status.listRetrieve an alert rule statusread
azure_monitor.metric_alerts_status.list_by_nameRetrieve an alert rule statusread

Metric definitions2

azure_monitor.metric_definitions.listLists the metric definitions for the resourceread
azure_monitor.metric_definitions.list_at_subscription_scopeLists the metric definitions for the subscriptionread

Private link resources2

azure_monitor.private_link_resources.getGets the private link resources that need to be created for an Azure Monitor PrivateLinkScoperead
azure_monitor.private_link_resources.list_by_private_link_scopeGets the private link resources that need to be created for an Azure Monitor PrivateLinkScoperead

Activity logs1

azure_monitor.activity_logs.listProvides the list of records from the activity logsread

Baselines1

azure_monitor.baselines.list**Lists the metric baseline values for a resource**read

Event categories1

azure_monitor.event_categories.listGet the list of available event categories supported in the Activity Logs Serviceread

Metric namespaces1

azure_monitor.metric_namespaces.listLists the metric namespaces for the resourceread

Operations1

azure_monitor.operations.listLists all of the available operations from Microsoft.Insights providerread

Predictive metric1

azure_monitor.predictive_metric.getget predictive autoscale metric future dataread

Private link scope operation status1

azure_monitor.private_link_scope_operation_status.getGet the status of an azure asynchronous operation associated with a private link scope operationread

Resource groups1

azure_monitor.resource_groups.listList the resource groups in a subscriptionread

Subscriptions1

azure_monitor.subscriptions.listList the subscriptions the credential can seeread

Tenant activity logs1

azure_monitor.tenant_activity_logs.listGets the Activity Logs for the Tenantread

VM insights1

azure_monitor.vm_insights.get_onboarding_statusRetrieves the VM Insights onboarding status for the specified resource or resource scoperead

Questions

The Azure Monitor MCP server, answered.

Is there an Azure Monitor MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 122 Azure Monitor actions across action groups, data collection endpoints, scheduled query rules and tenant action groups, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Monitor.

What do I need to connect Azure Monitor?

Entra application (client) id of a service principal with Monitoring Reader or Monitoring Contributor on the… and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_monitor" } lists exactly what to paste.

Can an AI agent delete or change things in Azure Monitor?

Only if its key allows it, and only with an explicit confirmation. 18 Azure Monitor actions are destructive, including delete an alert rule definition, delete an action group and send test notifications to a set of provided receivers. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Azure Monitor API limit?

actionlake paces every call to the limits in the Azure Monitor service file: 200 calls a minute per connection. Repeated reads are answered from cache (73 Azure Monitor actions can be), which never reaches Azure Monitor.

What does an Azure Monitor action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (35 Azure Monitor actions page). Cache hits, searches, dry runs and calls Azure Monitor refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Azure Monitor API does it cover?

The Azure Monitor (metrics, alert rules, action groups, activity log, diagnostic settings, data collection) API Azure Resource Manager Microsoft.Insights, one api-version per resource type: stable/2026-01-01/metricAlert.json (2026-01-01), stable/2026-01-01/activityLogAlerts_API.json (2026-01-01), stable/2026-03-01/scheduledQueryRule_API.json (2026-03-01), stable/2023-01-01/actionGroups_API.json (2023-01-01), preview/2023-05-01-preview/tenantActionGroups.json (2023-05-01-preview), stable/2024-02-01/metrics.json (2024-02-01), stable/2019-03-01/metricBaselines.json (2019-03-01), stable/2015-04-01/activityLogs.json (2015-04-01), preview/2021-05-01-preview/openapi.json (2021-05-01-preview), preview/2021-05-01-preview/subscriptionDiagnosticsSettings_API.json (2021-05-01-preview), preview/2021-05-01-preview/managementGroupDiagnosticSettings_API.json (2021-05-01-preview), stable/2022-10-01/autoScale.json (2022-10-01), stable/2024-03-11/dataCollection.json (2024-03-11), stable/2021-09-01/privateLinkScopes_API.json (2021-09-01), stable/2021-10-01/networkSecurityPerimeter.json (2021-10-01), stable/2016-03-01/logProfiles.json (2016-03-01), stable/2016-03-01/alertRulesIncidents.json (2016-03-01), preview/2018-11-27-preview/vmInsightsOnboarding.json (2018-11-27-preview), stable/2015-04-01/operations_API.json (2015-04-01) at management.azure.com. It is built from Azure Monitor's documentation as read on 22 October 2026. 122 actions in 33 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Azure Monitor data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Monitor credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Azure Monitor today.

Connect Azure Monitor free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

Azure Monitor MCP server for AI agents.

Connect Azure Monitor in three steps.

Add actionlake to Claude.

Connect Azure Monitor.

Make the first call. Check before a write.

What an AI agent can do in Azure Monitor.

Action groups

Data collection endpoints

Scheduled query rules

Tenant action groups

Activity log alerts

Autoscale settings

Data collection rule associations

Data collection rules