--- title: "Azure Monitor MCP server for AI agents - actionlake" description: "Give Claude 122 Azure Monitor actions through one MCP server: action groups. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/azure-monitor updated: 2026-10-23 --- Connectors · MSP & PSA # Azure Monitor MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Monitor and the rest of your systems. It gives your agent 122 Azure Monitor actions (74 reads, 30 writes and 18 that wait for a confirmation) and holds the Azure Monitor credential itself, so the agent never does. It paces Azure Monitor's limits and records every call. [Connect Azure Monitor free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "azure_monitor.event_categories.list", intent: "check which Azure Monitor account is connected" } # Get the list of available event categories supported in the Activity Logs Service · read · 1 upstream call ``` - 122 actions in one signed file - 74 read look, never change - 30 write create and update - 18 wait for a yes destructive, confirmed first Set up ## Connect Azure Monitor in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Azure Monitor. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id of a service principal with Monitoring Reader or Monitoring Contributor on the… - `client_secret` Entra client secret - `tenant_id` Your Azure Monitor tenant id ``` account { op: "connections.requirements", service: "azure_monitor" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "azure_monitor.event_categories.list" } # get the list of available event categories supported in the activity logs service · read · 1 upstream call check { action: "azure_monitor.metric_alerts.update", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Azure Monitor at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 200 calls a minute, per connection **API covered** Azure Monitor (metrics, alert rules, action groups, activity log, diagnostic settings, data collection) API Azure Resource Manager Microsoft.Insights, one api-version per resource type: stable/2026-01-01/metricAlert.json (2026-01-01), stable/2026-01-01/activityLogAlerts_API.json (2026-01-01), stable/2026-03-01/scheduledQueryRule_API.json (2026-03-01), stable/2023-01-01/actionGroups_API.json (2023-01-01), preview/2023-05-01-preview/tenantActionGroups.json (2023-05-01-preview), stable/2024-02-01/metrics.json (2024-02-01), stable/2019-03-01/metricBaselines.json (2019-03-01), stable/2015-04-01/activityLogs.json (2015-04-01), preview/2021-05-01-preview/openapi.json (2021-05-01-preview), preview/2021-05-01-preview/subscriptionDiagnosticsSettings_API.json (2021-05-01-preview), preview/2021-05-01-preview/managementGroupDiagnosticSettings_API.json (2021-05-01-preview), stable/2022-10-01/autoScale.json (2022-10-01), stable/2024-03-11/dataCollection.json (2024-03-11), stable/2021-09-01/privateLinkScopes_API.json (2021-09-01), stable/2021-10-01/networkSecurityPerimeter.json (2021-10-01), stable/2016-03-01/logProfiles.json (2016-03-01), stable/2016-03-01/alertRulesIncidents.json (2016-03-01), preview/2018-11-27-preview/vmInsightsOnboarding.json (2018-11-27-preview), stable/2015-04-01/operations_API.json (2015-04-01)`management.azure.com` **Built from** Azure Monitor's documentation, read 22 October 2026[GitHub](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/monitor/resource-manager/Microsoft.Insights/Insights/) [learn.microsoft.com](https://learn.microsoft.com/en-us/rest/api/monitor/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 73 of 74 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Azure Monitor up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Azure Monitor. 122 actions in 33 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **74** read look, never change - **30** write create and update - **18** destructive wait for a confirmation 1. ### Action groups 12 6 read · 4 write · 2 destructive Get a list of all action groups in a subscription · Get an action group · Updates an existing action group's tags · Delete an action group 2. ### Data collection endpoints 9 5 read · 3 write · 1 destructive Lists all data collection endpoints in the specified resource group · Lists all data collection endpoints in the specified subscription · Gets a list of NSP configurations for the specified data collection endpoint · Returns the specified data collection endpoint 3. ### Scheduled query rules 9 5 read · 3 write · 1 destructive Retrieve scheduled query rule definitions in a resource group · Retrieve a scheduled query rule definitions in a subscription · Gets a list of NSP configurations for specified scheduled query rule · Retrieve an scheduled query rule definition 4. ### Tenant action groups 7 3 read · 2 write · 2 destructive Get a list of all tenant action groups in a management group · Get a tenant action group · Get the test notifications by the notification id · Send test notifications to a set of provided receivers 5. ### Activity log alerts 6 3 read · 2 write · 1 destructive Get a list of all Activity Log Alert rules in a resource group · Get a list of all Activity Log Alert rules in a subscription · Get an Activity Log Alert rule · Updates 'tags' and 'enabled' fields in an existing Alert rule 6. ### Autoscale settings 6 3 read · 2 write · 1 destructive Lists the autoscale settings for a resource group · Lists the autoscale settings for a subscription · Gets an autoscale setting · Updates an existing AutoscaleSettingsResource 7. ### Data collection rule associations 6 4 read · 1 write · 1 destructive Lists associations for the specified data collection endpoint · Lists associations for the specified resource · Lists associations for the specified data collection rule · Returns the specified association 8. ### Data collection rules 6 3 read · 2 write · 1 destructive Lists all data collection rules in the specified resource group · Lists all data collection rules in the specified subscription · Returns the specified data collection rule · Updates part of a data collection rule **25 more areas · 61 actions** - Metric alerts **6** - Private link scopes **6** - Log profiles **5** - Diagnostic settings **4** - Management group diagnostic settings **4** - Private endpoint connections **4** - Private link scoped resources **4** - Subscription diagnostic settings **4** - Metrics **3** - Alert rule incidents **2** - Diagnostic settings category **2** - Metric alerts status **2** - Metric definitions **2** - Private link resources **2** - Activity logs **1** - Baselines **1** - Event categories **1** - Metric namespaces **1** - Operations **1** - Predictive metric **1** - Private link scope operation status **1** - Resource groups **1** - Subscriptions **1** - Tenant activity logs **1** - VM insights **1** Top actions ## The Azure Monitor API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 13 of Azure Monitor's 14 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `azure_monitor.metric_alerts.list_by_subscription` Retrieve alert rule definitions in a subscription | Retrieve alert rule definitions in a subscription. | read | `monitoring.monitor.list` 32 connectors | | `azure_monitor.activity_logs.list` Provides the list of records from the activity logs | Provides the list of records from the activity logs. | read | `monitoring.event.list` 14 connectors | | `azure_monitor.metric_alerts.get` Retrieve an alert rule definition | Retrieve an alert rule definition. | read | `monitoring.monitor.get` 31 connectors | | `azure_monitor.action_groups.list_by_subscription_id` Get a list of all action groups in a subscription | Get a list of all action groups in a subscription. | read | `monitoring.notification_channel.list` 18 connectors | | `azure_monitor.metric_alerts.update` Update an metric alert definition | Update an metric alert definition. | write | `monitoring.monitor.update` 28 connectors | | `azure_monitor.metric_alerts.delete` Delete an alert rule definition | Delete an alert rule definition. | destructive | `monitoring.monitor.delete` 31 connectors | | `azure_monitor.metric_definitions.list` Lists the metric definitions for the resource | Lists the metric definitions for the resource. | read | `monitoring.metric.list` 10 connectors | | `azure_monitor.metrics.list` **Lists the metric values for a resource** | **Lists the metric values for a resource**. | read | `monitoring.metric.query` 9 connectors | | `azure_monitor.action_groups.get` Get an action group | Get an action group. | read | `monitoring.notification_channel.get` 15 connectors | | `azure_monitor.resource_groups.list` List the resource groups in a subscription | List the resource groups in a subscription. | read | `infra.resource_group.list` 19 connectors | | `azure_monitor.action_groups.update` Updates an existing action group's tags | Updates an existing action group's tags. | write | `monitoring.notification_channel.update` 15 connectors | | `azure_monitor.metric_alerts.create_or_update` Create or update an metric alert definition | Create or update an metric alert definition. | write | `monitoring.monitor.upsert` 2 connectors | Try it ## Prompts to paste into Claude. Each one names the Azure Monitor actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Get the list of available event categories supported in the Activity Logs Service in Azure Monitor and tell me what stands out. calls `azure_monitor.event_categories.list` 2. Write write Update an metric alert definition in Azure Monitor. Show me exactly what you will send before you save it. calls `azure_monitor.metric_alerts.update` Governance for Azure Monitor ## Destructive actions wait for a yes. 18 Azure Monitor actions are destructive. These are all of them: - Delete an alert rule definition `azure_monitor.metric_alerts.delete` - Delete an action group `azure_monitor.action_groups.delete` - Send test notifications to a set of provided receivers `azure_monitor.action_groups.create_notifications` - Send test notifications to a set of provided receivers `azure_monitor.tenant_action_groups.create_notifications` - Deletes the log profile `azure_monitor.log_profiles.delete` - Deletes and autoscale setting `azure_monitor.autoscale_settings.delete` - Delete an Activity Log Alert rule `azure_monitor.activity_log_alerts.delete` - Deletes existing diagnostic settings for the specified resource `azure_monitor.diagnostic_settings.delete` - Deletes an Azure Monitor PrivateLinkScope `azure_monitor.private_link_scopes.delete` - Delete a tenant action group `azure_monitor.tenant_action_groups.delete` - Deletes a data collection rule `azure_monitor.data_collection_rules.delete` - Deletes a scheduled query rule `azure_monitor.scheduled_query_rules.delete` - Deletes a data collection endpoint `azure_monitor.data_collection_endpoints.delete` - Deletes a private endpoint connection with a given name `azure_monitor.private_endpoint_connections.delete` - Deletes an Azure monitor scoped resource with a given name `azure_monitor.private_link_scoped_resources.delete` - Deletes existing subscription diagnostic settings for the specified resource `azure_monitor.subscription_diagnostic_settings.delete` - Deletes an association `azure_monitor.data_collection_rule_associations.delete` - Deletes existing management group diagnostic settings for the specified resource `azure_monitor.management_group_diagnostic_settings.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do azure_monitor.metric_alerts.delete confirm_policy: **human** Delete an alert rule definition? **intent:** the user asked me to delete an alert rule definition run suspended · waiting for a named person · key _azure-monitor-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "azure-monitor-agent", allowed_actions: ["azure_monitor.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "azure_monitor.metric_alerts.delete", approver: "lead@example.com" }, { match: "azure_monitor.action_groups.delete", approver: "lead@example.com" }, { match: "azure_monitor.action_groups.create_notifications", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Azure Monitor only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Azure Monitor costs on actionlake. Every Azure Monitor action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Azure Monitor refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 122 Azure Monitor actions - 35 actions page each page of a long list is one call - 73 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Azure Monitor action. 122 actions by area: the id your agent calls, what it does, and its effect. **Action groups 12** - `azure_monitor.action_groups.create_notifications` Send test notifications to a set of provided receivers destructive - `azure_monitor.action_groups.create_or_update` Create a new action group or update an existing one write - `azure_monitor.action_groups.delete` Delete an action group destructive - `azure_monitor.action_groups.enable_receiver` Enable a receiver in an action group write - `azure_monitor.action_groups.get` Get an action group read - `azure_monitor.action_groups.get_network_security_perimeter_configuration` Gets a specified NSP configuration for specified action group read - `azure_monitor.action_groups.get_test_notifications` Get the test notifications by the notification id read - `azure_monitor.action_groups.list_by_resource_group` Get a list of all action groups in a resource group read - `azure_monitor.action_groups.list_by_subscription_id` Get a list of all action groups in a subscription read - `azure_monitor.action_groups.list_network_security_perimeter_configurations` Gets a list of NSP configurations for specified action group read - `azure_monitor.action_groups.reconcile_network_security_perimeter_configuration` Reconciles a specified NSP configuration for specified action group write - `azure_monitor.action_groups.update` Updates an existing action group's tags write **Data collection endpoints 9** - `azure_monitor.data_collection_endpoints.create` Creates or updates a data collection endpoint write - `azure_monitor.data_collection_endpoints.delete` Deletes a data collection endpoint destructive - `azure_monitor.data_collection_endpoints.get` Returns the specified data collection endpoint read - `azure_monitor.data_collection_endpoints.get_network_security_perimeter_configuration` Gets the specified NSP configuration for the specified data collection endpoint read - `azure_monitor.data_collection_endpoints.list_by_resource_group` Lists all data collection endpoints in the specified resource group read - `azure_monitor.data_collection_endpoints.list_by_subscription` Lists all data collection endpoints in the specified subscription read - `azure_monitor.data_collection_endpoints.list_network_security_perimeter_configurations` Gets a list of NSP configurations for the specified data collection endpoint read - `azure_monitor.data_collection_endpoints.reconcile_network_security_perimeter_configuration` Reconciles the specified NSP configuration for the specified data collection endpoint write - `azure_monitor.data_collection_endpoints.update` Updates part of a data collection endpoint write **Scheduled query rules 9** - `azure_monitor.scheduled_query_rules.create_or_update` Creates or updates a scheduled query rule write - `azure_monitor.scheduled_query_rules.delete` Deletes a scheduled query rule destructive - `azure_monitor.scheduled_query_rules.get` Retrieve an scheduled query rule definition read - `azure_monitor.scheduled_query_rules.get_network_security_perimeter_configuration` Gets a network security perimeter configuration read - `azure_monitor.scheduled_query_rules.list_by_resource_group` Retrieve scheduled query rule definitions in a resource group read - `azure_monitor.scheduled_query_rules.list_by_subscription` Retrieve a scheduled query rule definitions in a subscription read - `azure_monitor.scheduled_query_rules.list_network_security_perimeter_configurations` Gets a list of NSP configurations for specified scheduled query rule read - `azure_monitor.scheduled_query_rules.reconcile_network_security_perimeter_configuration` Reconcile network security perimeter configuration for ScheduledQueryRule resource write - `azure_monitor.scheduled_query_rules.update` Update a scheduled query rule write **Tenant action groups 7** - `azure_monitor.tenant_action_groups.create_notifications` Send test notifications to a set of provided receivers destructive - `azure_monitor.tenant_action_groups.create_or_update` Create a new tenant action group or update an existing one write - `azure_monitor.tenant_action_groups.delete` Delete a tenant action group destructive - `azure_monitor.tenant_action_groups.get` Get a tenant action group read - `azure_monitor.tenant_action_groups.get_test_notifications` Get the test notifications by the notification id read - `azure_monitor.tenant_action_groups.list_by_management_group_id` Get a list of all tenant action groups in a management group read - `azure_monitor.tenant_action_groups.update` Updates an existing tenant action group's tags write **Activity log alerts 6** - `azure_monitor.activity_log_alerts.create_or_update` Create a new Activity Log Alert rule or update an existing one write - `azure_monitor.activity_log_alerts.delete` Delete an Activity Log Alert rule destructive - `azure_monitor.activity_log_alerts.get` Get an Activity Log Alert rule read - `azure_monitor.activity_log_alerts.list_by_resource_group` Get a list of all Activity Log Alert rules in a resource group read - `azure_monitor.activity_log_alerts.list_by_subscription_id` Get a list of all Activity Log Alert rules in a subscription read - `azure_monitor.activity_log_alerts.update` Updates 'tags' and 'enabled' fields in an existing Alert rule write **Autoscale settings 6** - `azure_monitor.autoscale_settings.create_or_update` Creates or updates an autoscale setting write - `azure_monitor.autoscale_settings.delete` Deletes and autoscale setting destructive - `azure_monitor.autoscale_settings.get` Gets an autoscale setting read - `azure_monitor.autoscale_settings.list_by_resource_group` Lists the autoscale settings for a resource group read - `azure_monitor.autoscale_settings.list_by_subscription` Lists the autoscale settings for a subscription read - `azure_monitor.autoscale_settings.update` Updates an existing AutoscaleSettingsResource write **Data collection rule associations 6** - `azure_monitor.data_collection_rule_associations.create` Creates or updates an association write - `azure_monitor.data_collection_rule_associations.delete` Deletes an association destructive - `azure_monitor.data_collection_rule_associations.get` Returns the specified association read - `azure_monitor.data_collection_rule_associations.list_by_data_collection_endpoint` Lists associations for the specified data collection endpoint read - `azure_monitor.data_collection_rule_associations.list_by_resource` Lists associations for the specified resource read - `azure_monitor.data_collection_rule_associations.list_by_rule` Lists associations for the specified data collection rule read **Data collection rules 6** - `azure_monitor.data_collection_rules.create` Creates or updates a data collection rule write - `azure_monitor.data_collection_rules.delete` Deletes a data collection rule destructive - `azure_monitor.data_collection_rules.get` Returns the specified data collection rule read - `azure_monitor.data_collection_rules.list_by_resource_group` Lists all data collection rules in the specified resource group read - `azure_monitor.data_collection_rules.list_by_subscription` Lists all data collection rules in the specified subscription read - `azure_monitor.data_collection_rules.update` Updates part of a data collection rule write **Metric alerts 6** - `azure_monitor.metric_alerts.create_or_update` Create or update an metric alert definition write - `azure_monitor.metric_alerts.delete` Delete an alert rule definition destructive - `azure_monitor.metric_alerts.get` Retrieve an alert rule definition read - `azure_monitor.metric_alerts.list_by_resource_group` Retrieve alert rule definitions in a resource group read - `azure_monitor.metric_alerts.list_by_subscription` Retrieve alert rule definitions in a subscription read - `azure_monitor.metric_alerts.update` Update an metric alert definition write **Private link scopes 6** - `azure_monitor.private_link_scopes.create_or_update` Creates (or updates) an Azure Monitor PrivateLinkScope write - `azure_monitor.private_link_scopes.delete` Deletes an Azure Monitor PrivateLinkScope destructive - `azure_monitor.private_link_scopes.get` Returns an Azure Monitor PrivateLinkScope read - `azure_monitor.private_link_scopes.list` Gets a list of all Azure Monitor PrivateLinkScopes within a subscription read - `azure_monitor.private_link_scopes.list_by_resource_group` Gets a list of Azure Monitor PrivateLinkScopes within a resource group read - `azure_monitor.private_link_scopes.update_tags` Updates an existing PrivateLinkScope's tags write **Log profiles 5** - `azure_monitor.log_profiles.create_or_update` Create or update a log profile in Azure Monitoring REST API write - `azure_monitor.log_profiles.delete` Deletes the log profile destructive - `azure_monitor.log_profiles.get` Gets the log profile read - `azure_monitor.log_profiles.list` List the log profiles read - `azure_monitor.log_profiles.update` Updates an existing LogProfilesResource write **Diagnostic settings 4** - `azure_monitor.diagnostic_settings.create_or_update` Creates or updates diagnostic settings for the specified resource write - `azure_monitor.diagnostic_settings.delete` Deletes existing diagnostic settings for the specified resource destructive - `azure_monitor.diagnostic_settings.get` Gets the active diagnostic settings for the specified resource read - `azure_monitor.diagnostic_settings.list` Gets the active diagnostic settings list for the specified resource read **Management group diagnostic settings 4** - `azure_monitor.management_group_diagnostic_settings.create_or_update` Creates or updates management group diagnostic settings for the specified resource write - `azure_monitor.management_group_diagnostic_settings.delete` Deletes existing management group diagnostic settings for the specified resource destructive - `azure_monitor.management_group_diagnostic_settings.get` Gets the active management group diagnostic settings for the specified resource read - `azure_monitor.management_group_diagnostic_settings.list` Gets the active management group diagnostic settings list for the specified management group read **Private endpoint connections 4** - `azure_monitor.private_endpoint_connections.create_or_update` Approve or reject a private endpoint connection with a given name write - `azure_monitor.private_endpoint_connections.delete` Deletes a private endpoint connection with a given name destructive - `azure_monitor.private_endpoint_connections.get` Gets a private endpoint connection read - `azure_monitor.private_endpoint_connections.list_by_private_link_scope` Gets all private endpoint connections on a private link scope read **Private link scoped resources 4** - `azure_monitor.private_link_scoped_resources.create_or_update` Add an Azure monitor scoped resource in the private link scope write - `azure_monitor.private_link_scoped_resources.delete` Deletes an Azure monitor scoped resource with a given name destructive - `azure_monitor.private_link_scoped_resources.get` Gets a scoped resource in a private link scope read - `azure_monitor.private_link_scoped_resources.list_by_private_link_scope` Gets all scoped resources on a private link scope read **Subscription diagnostic settings 4** - `azure_monitor.subscription_diagnostic_settings.create_or_update` Creates or updates subscription diagnostic settings for the specified resource write - `azure_monitor.subscription_diagnostic_settings.delete` Deletes existing subscription diagnostic settings for the specified resource destructive - `azure_monitor.subscription_diagnostic_settings.get` Gets the active subscription diagnostic settings for the specified resource read - `azure_monitor.subscription_diagnostic_settings.list` Gets the active subscription diagnostic settings list for the specified subscriptionId read **Metrics 3** - `azure_monitor.metrics.list` **Lists the metric values for a resource** read - `azure_monitor.metrics.list_at_subscription_scope` **Lists the metric data for a subscription** read - `azure_monitor.metrics.query_at_subscription_scope` **Lists the metric data for a subscription** read **Alert rule incidents 2** - `azure_monitor.alert_rule_incidents.get` Gets an incident associated to an alert rule read - `azure_monitor.alert_rule_incidents.list_by_alert_rule` Gets a list of incidents associated to an alert rule read **Diagnostic settings category 2** - `azure_monitor.diagnostic_settings_category.get` Gets the diagnostic settings category for the specified resource read - `azure_monitor.diagnostic_settings_category.list` Lists the diagnostic settings categories for the specified resource read **Metric alerts status 2** - `azure_monitor.metric_alerts_status.list` Retrieve an alert rule status read - `azure_monitor.metric_alerts_status.list_by_name` Retrieve an alert rule status read **Metric definitions 2** - `azure_monitor.metric_definitions.list` Lists the metric definitions for the resource read - `azure_monitor.metric_definitions.list_at_subscription_scope` Lists the metric definitions for the subscription read **Private link resources 2** - `azure_monitor.private_link_resources.get` Gets the private link resources that need to be created for an Azure Monitor PrivateLinkScope read - `azure_monitor.private_link_resources.list_by_private_link_scope` Gets the private link resources that need to be created for an Azure Monitor PrivateLinkScope read **Activity logs 1** - `azure_monitor.activity_logs.list` Provides the list of records from the activity logs read **Baselines 1** - `azure_monitor.baselines.list` **Lists the metric baseline values for a resource** read **Event categories 1** - `azure_monitor.event_categories.list` Get the list of available event categories supported in the Activity Logs Service read **Metric namespaces 1** - `azure_monitor.metric_namespaces.list` Lists the metric namespaces for the resource read **Operations 1** - `azure_monitor.operations.list` Lists all of the available operations from Microsoft.Insights provider read **Predictive metric 1** - `azure_monitor.predictive_metric.get` get predictive autoscale metric future data read **Private link scope operation status 1** - `azure_monitor.private_link_scope_operation_status.get` Get the status of an azure asynchronous operation associated with a private link scope operation read **Resource groups 1** - `azure_monitor.resource_groups.list` List the resource groups in a subscription read **Subscriptions 1** - `azure_monitor.subscriptions.list` List the subscriptions the credential can see read **Tenant activity logs 1** - `azure_monitor.tenant_activity_logs.list` Gets the Activity Logs for the Tenant read **VM insights 1** - `azure_monitor.vm_insights.get_onboarding_status` Retrieves the VM Insights onboarding status for the specified resource or resource scope read Questions ## The Azure Monitor MCP server, answered. **Is there an Azure Monitor MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 122 Azure Monitor actions across action groups, data collection endpoints, scheduled query rules and tenant action groups, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Monitor. **What do I need to connect Azure Monitor?** Entra application (client) id of a service principal with Monitoring Reader or Monitoring Contributor on the… and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_monitor" } lists exactly what to paste. **Can an AI agent delete or change things in Azure Monitor?** Only if its key allows it, and only with an explicit confirmation. 18 Azure Monitor actions are destructive, including delete an alert rule definition, delete an action group and send test notifications to a set of provided receivers. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Azure Monitor API limit?** actionlake paces every call to the limits in the Azure Monitor service file: 200 calls a minute per connection. Repeated reads are answered from cache (73 Azure Monitor actions can be), which never reaches Azure Monitor. **What does an Azure Monitor action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (35 Azure Monitor actions page). Cache hits, searches, dry runs and calls Azure Monitor refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Azure Monitor API does it cover?** The Azure Monitor (metrics, alert rules, action groups, activity log, diagnostic settings, data collection) API Azure Resource Manager Microsoft.Insights, one api-version per resource type: stable/2026-01-01/metricAlert.json (2026-01-01), stable/2026-01-01/activityLogAlerts_API.json (2026-01-01), stable/2026-03-01/scheduledQueryRule_API.json (2026-03-01), stable/2023-01-01/actionGroups_API.json (2023-01-01), preview/2023-05-01-preview/tenantActionGroups.json (2023-05-01-preview), stable/2024-02-01/metrics.json (2024-02-01), stable/2019-03-01/metricBaselines.json (2019-03-01), stable/2015-04-01/activityLogs.json (2015-04-01), preview/2021-05-01-preview/openapi.json (2021-05-01-preview), preview/2021-05-01-preview/subscriptionDiagnosticsSettings_API.json (2021-05-01-preview), preview/2021-05-01-preview/managementGroupDiagnosticSettings_API.json (2021-05-01-preview), stable/2022-10-01/autoScale.json (2022-10-01), stable/2024-03-11/dataCollection.json (2024-03-11), stable/2021-09-01/privateLinkScopes_API.json (2021-09-01), stable/2021-10-01/networkSecurityPerimeter.json (2021-10-01), stable/2016-03-01/logProfiles.json (2016-03-01), stable/2016-03-01/alertRulesIncidents.json (2016-03-01), preview/2018-11-27-preview/vmInsightsOnboarding.json (2018-11-27-preview), stable/2015-04-01/operations_API.json (2015-04-01) at management.azure.com. It is built from Azure Monitor's documentation as read on 22 October 2026. 122 actions in 33 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Azure Monitor data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Monitor credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Azure Monitor Shares the most action names with - [Logz.io 4](https://actionlake.com/connectors/logz-io) - [UptimeRobot 4](https://actionlake.com/connectors/uptimerobot) - [DigitalOcean 4](https://actionlake.com/connectors/digitalocean) - [Site24x7 3](https://actionlake.com/connectors/site24x7) - [HPE Aruba Networking Central 1](https://actionlake.com/connectors/hpe-aruba-networking-central) - [Azure Storage 1](https://actionlake.com/connectors/azure-storage) Joins with, on shared entities - [Kibana (Elastic Observability) 1](https://actionlake.com/connectors/kibana-elastic-observability) - [Dynatrace 1](https://actionlake.com/connectors/dynatrace) - [Sumo Logic 1](https://actionlake.com/connectors/sumo-logic) - [Grafana 1](https://actionlake.com/connectors/grafana) - [ilert 1](https://actionlake.com/connectors/ilert) - [Sentry 1](https://actionlake.com/connectors/sentry) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Azure Monitor; the name is the vendor's own. Counts are from the Azure Monitor service file, version 1.0.0. ## Give your agent Azure Monitor today. [Connect Azure Monitor free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/azure-monitor More: https://actionlake.com/llms.txt