--- title: "Azure Networking MCP server for AI agents - actionlake" description: "Give Claude 833 Azure Networking actions through one MCP server: virtual network gateways. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/azure-networking updated: 2026-10-23 --- Connectors · MSP & PSA # Azure Networking MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Networking and the rest of your systems. It gives your agent 833 Azure Networking actions (463 reads, 202 writes and 168 that wait for a confirmation) and holds the Azure Networking credential itself, so the agent never does. It paces Azure Networking's limits and records every call. [Connect Azure Networking free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "azure_networking.subscriptions.list", intent: "check which Azure Networking account is connected" } # List the subscriptions the credential can see · read · 1 upstream call ``` - 833 actions in one signed file - 463 read look, never change - 202 write create and update - 168 wait for a yes destructive, confirmed first Set up ## Connect Azure Networking in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Azure Networking. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id of a service principal with an Azure RBAC role on the subscription - `client_secret` Entra client secret - `tenant_id` Your Azure Networking tenant id ``` account { op: "connections.requirements", service: "azure_networking" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "azure_networking.subscriptions.list" } # list the subscriptions the credential can see · read · 1 upstream call check { action: "azure_networking.public_ip_addresses.update_tags", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Azure Networking at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 200 calls a minute, per connection **API covered** Azure Networking (virtual networks, subnets, NSGs, public IPs, load balancers, gateways, firewalls) API Azure Resource Manager Microsoft.Network 2026-03-01`management.azure.com` **Built from** Azure Networking's documentation, read 23 October 2026[GitHub](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/network/resource-manager/Microsoft.Network/Network/stable/2026-03-01/) [learn.microsoft.com](https://learn.microsoft.com/en-us/rest/api/virtual-network/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 376 of 463 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line Azure Networking up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Azure Networking. 833 actions in 173 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **463** read look, never change - **202** write create and update - **168** destructive wait for a confirmation 1. ### Virtual network gateways 34 17 read · 7 write · 10 destructive Gets all virtual network gateways by resource group · Gets all the connections in a virtual network gateway · Gets the specified virtual network gateway by resource group · Generates VPN profile for P2S client of the virtual network gateway in the specified resource group 2. ### Network watchers 24 17 read · 5 write · 2 destructive Lists all connection analyzers in the specified network watcher · Gets all network watchers by resource group · Gets all network watchers by subscription · Gets the specified connection analyzer by name 3. ### Application gateways 17 12 read · 3 write · 2 destructive Lists all application gateways in a resource group · Gets all the application gateways in a subscription · Lists all available request headers · Lists all available response headers 4. ### Express route cross connections 16 8 read · 4 write · 4 destructive Retrieves all the ExpressRouteCrossConnections in a subscription · Retrieves all the ExpressRouteCrossConnections in a resource group · Gets details about the specified ExpressRouteCrossConnection · Gets migration health information for an express route circuit cross connection 5. ### Express route circuits 15 10 read · 3 write · 2 destructive Gets all the express route circuits in a resource group · Gets all the express route circuits in a subscription · Gets information about the specified express route circuit · Gets all stats from an express route circuit in a resource group 6. ### Network virtual appliances 13 4 read · 3 write · 6 destructive Gets all Network Virtual Appliances in a subscription · Lists all Network Virtual Appliances in a resource group · Gets the specified Network Virtual Appliance · Retrieves the boot diagnostic logs for a VM instance belonging to the specified Network Virtual Appliance 7. ### Private link services 13 9 read · 2 write · 2 destructive Gets all private link services in a resource group · Returns all of the private link service ids that can be linked to a Private Endpoint with auto approved in this subscription in this region · Returns all of the private link service ids that can be linked to a Private Endpoint with auto approved in this subscription in this region · Gets all private link service in a subscription 8. ### Bastion hosts 12 5 read · 3 write · 4 destructive Lists all Bastion Hosts in a subscription · Lists all Bastion Hosts in a resource group · Gets the specified Bastion Host · Returns the list of currently active sessions on the Bastion **112 more areas · 689 actions** - Express route gateways **12** - Public ip addresses **12** - Virtual network gateway connections **12** - Virtual networks **12** - Express route lags **11** - Network interfaces **11** - P2S VPN gateways **11** - Service gateways **10** - Azure firewalls **9** - Load balancers **9** - Virtual hubs **9** - VPN gateways **9** - Network managers **8** - Virtual wans **8** - Express route ports **7** - Interconnect groups **7** - Ipam pools **7** - VPN link connections **7** - VPN server configurations **7** - Application security groups **6** - Authentication policies **6** - Connection monitors **6** - Custom ip prefixes **6** - Ddos custom policies **6** - Ddos protection plans **6** - Firewall policies **6** - First party service tags **6** - Ip allocations **6** - Ip groups **6** - Nat gateways **6** - Network profiles **6** - Network security groups **6** - Network security perimeters **6** - Packet captures **6** - Public ip prefixes **6** - Route filters **6** - Route tables **6** - Security partner providers **6** - Service endpoint policies **6** - Subnets **6** - Virtual network appliances **6** - Virtual network taps **6** - VPN connections **6** - VPN sites **6** - DSCP configuration **5** - Express route circuit authorizations **5** - Express route lag authorizations **5** - Express route port authorizations **5** - Flow logs **5** - Local network gateways **5** - Network security perimeter access rules **5** - Network security perimeter associations **5** - Private endpoints **5** - Verifier workspaces **5** - Virtual routers **5** - Web application firewall policies **5** - Address prefix sets **4** - Admin rule collections **4** - Admin rules **4** - Application gateway private endpoint connections **4** - Commits **4** - Configuration policy groups **4** - Connection policies **4** - Connectivity configurations **4** - Express route circuit connections **4** - Express route circuit peerings **4** - Express route connections **4** - Express route cross connection peerings **4** - Firewall policy idps signatures overrides **4** - Firewall policy kube selector groups **4** - Firewall policy rule collection groups **4** - Hub route tables **4** - Hub virtual network connections **4** - Inbound nat rules **4** - Load balancer backend address pools **4** - Management group network manager connections **4** - Nat rules **4** - Network groups **4** - Network interface tap configurations **4** - Network manager routing configurations **4** - Network security perimeter links **4** - Network security perimeter logging configurations **4** - Network security perimeter profiles **4** - Network virtual appliance connections **4** - Private DNS zone groups **4** - Reachability analysis intents **4** - Reachability analysis runs **4** - Route filter rules **4** - Route maps **4** - Routes **4** - Routing intent **4** - Routing rule collections **4** - Routing rules **4** - Scope connections **4** - Security admin configurations **4** - Security rules **4** - Security user configurations **4** - Security user rule collections **4** - Security user rules **4** - Service endpoint policy definitions **4** - Static cidrs **4** - Static members **4** - Subscription network manager connections **4** - Virtual appliance sites **4** - Virtual hub ip configuration **4** - Virtual hub route table V2S **4** - Virtual network appliance capabilities **4** - Virtual network gateway nat rules **4** - Virtual network peerings **4** - Virtual router peerings **4** - Firewall policy drafts **3** - 54 smaller areas **82** Top actions ## The Azure Networking API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 26 of Azure Networking's 31 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `azure_networking.virtual_networks.list_all` Gets all virtual networks in a subscription | Gets all virtual networks in a subscription. | read | `infra.network.list` 6 connectors | | `azure_networking.resource_groups.list` List the resource groups in a subscription | List the resource groups in a subscription. | read | `infra.resource_group.list` 19 connectors | | `azure_networking.subscriptions.list_locations` List the Azure regions available to a subscription | List the Azure regions available to a subscription. | read | `infra.region.list` 16 connectors | | `azure_networking.network_security_groups.list_all` Gets all network security groups in a subscription | Gets all network security groups in a subscription. | read | `infra.security_group.list` 2 connectors | | `azure_networking.public_ip_addresses.list_all` Gets all the public IP addresses in a subscription | Gets all the public IP addresses in a subscription. | read | `infra.ip_address.list` 9 connectors | | `azure_networking.virtual_network_gateway_connections.list` The List VirtualNetworkGatewayConnections operation retrieves all the virtual network gateways connections created | The List VirtualNetworkGatewayConnections operation retrieves all the virtual network gateways connections created. | read | `infra.vpn_connection.list` 5 connectors | | `azure_networking.subnets.list` Gets all subnets in a virtual network | Gets all subnets in a virtual network. | read | `infra.subnet.list` 4 connectors | | `azure_networking.public_ip_addresses.get` Gets the specified public IP address in a specified resource group | Gets the specified public IP address in a specified resource group. | read | `infra.ip_address.get` 7 connectors | | `azure_networking.public_ip_addresses.update_tags` Updates public IP address tags | Updates public IP address tags. | write | `infra.ip_address.update` 6 connectors | | `azure_networking.virtual_networks.update_tags` Updates a virtual network tags | Updates a virtual network tags. | write | `infra.network.update` 5 connectors | | `azure_networking.virtual_networks.delete` Deletes the specified virtual network | Deletes the specified virtual network. | destructive | `infra.network.delete` 6 connectors | | `azure_networking.network_security_groups.update_tags` Updates a network security group tags | Updates a network security group tags. | write | `infra.security_group.update` 3 connectors | Try it ## Prompts to paste into Claude. Each one names the Azure Networking actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List the subscriptions the credential can see in Azure Networking and tell me what stands out. calls `azure_networking.subscriptions.list` 2. Write write Updates public IP address tags in Azure Networking. Show me exactly what you will send before you save it. calls `azure_networking.public_ip_addresses.update_tags` Governance for Azure Networking ## Destructive actions wait for a yes. 168 Azure Networking actions are destructive. The first 10: - Deletes the specified virtual network `azure_networking.virtual_networks.delete` - Deletes the specified public IP address `azure_networking.public_ip_addresses.delete` - Deletes the specified subnet `azure_networking.subnets.delete` - Deletes the specified virtual network Gateway connection `azure_networking.virtual_network_gateway_connections.delete` - Deletes the specified load balancer `azure_networking.load_balancers.delete` - Deletes the specified network security group `azure_networking.network_security_groups.delete` - Post a Network Manager Commit `azure_networking.network_manager_commits.post` - Runs a packet capture on AzureFirewall `azure_networking.azure_firewalls.packet_capture` - Runs a packet capture operation on AzureFirewall `azure_networking.azure_firewalls.packet_capture_operation` - Resets the primary of the vpn gateway in the specified resource group `azure_networking.vpn_gateways.reset` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do azure_networking.virtual_networks.delete confirm_policy: **human** Deletes the specified virtual network? **intent:** the user asked me to deletes the specified virtual network run suspended · waiting for a named person · key _azure-networking-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "azure-networking-agent", allowed_actions: ["azure_networking.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "azure_networking.virtual_networks.delete", approver: "lead@example.com" }, { match: "azure_networking.public_ip_addresses.delete", approver: "lead@example.com" }, { match: "azure_networking.subnets.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Azure Networking only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Azure Networking costs on actionlake. Every Azure Networking action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Azure Networking refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 833 Azure Networking actions - 214 actions page each page of a long list is one call - 376 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Azure Networking action. 833 actions by area: the id your agent calls, what it does, and its effect. **Virtual network gateways 34** - `azure_networking.virtual_network_gateways.generate_vpn_profile` Generates VPN profile for P2S client of the virtual network gateway in the specified resource group write - `azure_networking.virtual_network_gateways.get` Gets the specified virtual network gateway by resource group read - and 32 more in this area **Network watchers 24** - `azure_networking.network_watchers.connection_analyzers_get` Gets the specified connection analyzer by name read - `azure_networking.network_watchers.connection_analyzers_list` Lists all connection analyzers in the specified network watcher read - and 22 more in this area **Application gateways 17** - `azure_networking.application_gateways.list` Lists all application gateways in a resource group read - `azure_networking.application_gateways.list_all` Gets all the application gateways in a subscription read - and 15 more in this area **Express route cross connections 16** - `azure_networking.express_route_cross_connections.get` Gets details about the specified ExpressRouteCrossConnection read - `azure_networking.express_route_cross_connections.get_circuit_migration_info` Gets migration health information for an express route circuit cross connection read - and 14 more in this area **Express route circuits 15** - `azure_networking.express_route_circuits.get` Gets information about the specified express route circuit read - `azure_networking.express_route_circuits.get_peering_stats` Gets all stats from an express route circuit in a resource group read - and 13 more in this area **Network virtual appliances 13** - `azure_networking.network_virtual_appliances.get` Gets the specified Network Virtual Appliance read - `azure_networking.network_virtual_appliances.get_boot_diagnostic_logs` Retrieves the boot diagnostic logs for a VM instance belonging to the specified Network Virtual Appliance read - and 11 more in this area **Private link services 13** - `azure_networking.private_link_services.list` Gets all private link services in a resource group read - `azure_networking.private_link_services.list_auto_approved_private_link_services` Returns all of the private link service ids that can be linked to a Private Endpoint with auto approved in this subscription in this region read - and 11 more in this area **Bastion hosts 12** - `azure_networking.bastion_hosts.disconnect_active_sessions` Returns the list of currently active sessions on the Bastion destructive - `azure_networking.bastion_hosts.get` Gets the specified Bastion Host read - and 10 more in this area **Express route gateways 12** - `azure_networking.express_route_gateways.get` Fetches the details of an ExpressRoute gateway in a resource group read - `azure_networking.express_route_gateways.get_failover_all_tests_details` Retrieves the details of all the failover tests performed on the ExpressRoute gateway for different peering locations read - and 10 more in this area **Public ip addresses 12** - `azure_networking.public_ip_addresses.delete` Deletes the specified public IP address destructive - `azure_networking.public_ip_addresses.get` Gets the specified public IP address in a specified resource group read - and 10 more in this area **Virtual network gateway connections 12** - `azure_networking.virtual_network_gateway_connections.delete` Deletes the specified virtual network Gateway connection destructive - `azure_networking.virtual_network_gateway_connections.get` Gets the specified virtual network gateway connection by resource group read - and 10 more in this area **Virtual networks 12** - `azure_networking.virtual_networks.delete` Deletes the specified virtual network destructive - `azure_networking.virtual_networks.get` Gets the specified virtual network by resource group read - and 10 more in this area **Express route lags 11** - `azure_networking.express_route_lags.links_list` Retrieve the ExpressRouteLagLink sub-resources of the specified ExpressRouteLag resource read - `azure_networking.express_route_lags.list` List all the ExpressRouteLag resources in the specified subscription read - and 9 more in this area **Network interfaces 11** - `azure_networking.network_interfaces.list` Gets all network interfaces in a resource group read - `azure_networking.network_interfaces.list_all` Gets all network interfaces in a subscription read - and 9 more in this area **P2S VPN gateways 11** - `azure_networking.p2s_vpn_gateways.generate_vpn_profile` Generates VPN profile for P2S client of the P2SVpnGateway in the specified resource group write - `azure_networking.p2s_vpn_gateways.get` Retrieves the details of a virtual wan p2s vpn gateway read - and 9 more in this area **Service gateways 10** - `azure_networking.service_gateways.get_address_locations` Get address locations in service gateway read - `azure_networking.service_gateways.get_services` Get Services in service gateway read - and 8 more in this area **Azure firewalls 9** - `azure_networking.azure_firewalls.get` Gets the specified Azure Firewall read - `azure_networking.azure_firewalls.list` Lists all Azure Firewalls in a resource group read - and 7 more in this area **Load balancers 9** - `azure_networking.load_balancers.delete` Deletes the specified load balancer destructive - `azure_networking.load_balancers.get` Gets the specified load balancer read - and 7 more in this area **Virtual hubs 9** - `azure_networking.virtual_hubs.get` Retrieves the details of a VirtualHub read - `azure_networking.virtual_hubs.get_effective_virtual_hub_routes` Gets the effective routes configured for the Virtual Hub resource or the specified resource read - and 7 more in this area **VPN gateways 9** - `azure_networking.vpn_gateways.get` Retrieves the details of a virtual wan vpn gateway read - `azure_networking.vpn_gateways.list` Lists all the VpnGateways in a subscription read - and 7 more in this area **Network managers 8** - `azure_networking.network_managers.get` Gets the specified Network Manager read - `azure_networking.network_managers.list` List network managers in a resource group read - and 6 more in this area **Virtual wans 8** - `azure_networking.virtual_wans.get` Retrieves the details of a VirtualWAN read - `azure_networking.virtual_wans.list` Lists all the VirtualWANs in a subscription read - and 6 more in this area **Express route ports 7** - `azure_networking.express_route_ports.generate_loa` Generate a letter of authorization for the requested ExpressRoutePort resource write - `azure_networking.express_route_ports.get` Retrieves the requested ExpressRoutePort resource read - and 5 more in this area **Interconnect groups 7** - `azure_networking.interconnect_groups.get` Gets information about the specified interconnect group read - `azure_networking.interconnect_groups.get_node_availability` Gets node availability for all subgroups in the specified interconnect group read - and 5 more in this area **Ipam pools 7** - `azure_networking.ipam_pools.get` Gets the specific Pool resource read - `azure_networking.ipam_pools.get_pool_usage` Get the Pool Usage read - and 5 more in this area **VPN link connections 7** - `azure_networking.vpn_link_connections.get_all_shared_keys` Lists all shared keys of VpnLink connection specified read - `azure_networking.vpn_link_connections.get_default_shared_key` Gets the shared key of VpnLink connection specified read - and 5 more in this area **VPN server configurations 7** - `azure_networking.vpn_server_configurations.get` Retrieves the details of a VpnServerConfiguration read - `azure_networking.vpn_server_configurations.list` Lists all the VpnServerConfigurations in a subscription read - and 5 more in this area **Application security groups 6** - `azure_networking.application_security_groups.get` Gets information about the specified application security group read - `azure_networking.application_security_groups.list` Gets all the application security groups in a resource group read - and 4 more in this area **Authentication policies 6** - `azure_networking.authentication_policies.get` Retrieve the authentication policy with specified name within a resource group read - `azure_networking.authentication_policies.list` Lists all of the authentication policies within a resource group read - and 4 more in this area **Connection monitors 6** - `azure_networking.connection_monitors.get` Gets a connection monitor by name read - `azure_networking.connection_monitors.list` Lists all connection monitors for the specified Network Watcher read - and 4 more in this area Custom ip prefixes **6** Ddos custom policies **6** Ddos protection plans **6** Firewall policies **6** First party service tags **6** Ip allocations **6** Ip groups **6** Nat gateways **6** Network profiles **6** Network security groups **6** Network security perimeters **6** Packet captures **6** Public ip prefixes **6** Route filters **6** Route tables **6** Security partner providers **6** Service endpoint policies **6** Subnets **6** Virtual network appliances **6** Virtual network taps **6** VPN connections **6** VPN sites **6** DSCP configuration **5** Express route circuit authorizations **5** Express route lag authorizations **5** Express route port authorizations **5** Flow logs **5** Local network gateways **5** Network security perimeter access rules **5** Network security perimeter associations **5** Private endpoints **5** Verifier workspaces **5** Virtual routers **5** Web application firewall policies **5** Address prefix sets **4** Admin rule collections **4** Admin rules **4** Application gateway private endpoint connections **4** Commits **4** Configuration policy groups **4** Connection policies **4** Connectivity configurations **4** Express route circuit connections **4** Express route circuit peerings **4** Express route connections **4** Express route cross connection peerings **4** Firewall policy idps signatures overrides **4** Firewall policy kube selector groups **4** Firewall policy rule collection groups **4** Hub route tables **4** Hub virtual network connections **4** Inbound nat rules **4** Load balancer backend address pools **4** Management group network manager connections **4** Nat rules **4** Network groups **4** Network interface tap configurations **4** Network manager routing configurations **4** Network security perimeter links **4** Network security perimeter logging configurations **4** Network security perimeter profiles **4** Network virtual appliance connections **4** Private DNS zone groups **4** Reachability analysis intents **4** Reachability analysis runs **4** Route filter rules **4** Route maps **4** Routes **4** Routing intent **4** Routing rule collections **4** Routing rules **4** Scope connections **4** Security admin configurations **4** Security rules **4** Security user configurations **4** Security user rule collections **4** Security user rules **4** Service endpoint policy definitions **4** Static cidrs **4** Static members **4** Subscription network manager connections **4** Virtual appliance sites **4** Virtual hub ip configuration **4** Virtual hub route table V2S **4** Virtual network appliance capabilities **4** Virtual network gateway nat rules **4** Virtual network peerings **4** Virtual router peerings **4** Firewall policy drafts **3** 54 smaller areas **82** This index shows a sample of each area. All 833 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Azure Networking MCP server, answered. **Is there an Azure Networking MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 833 Azure Networking actions across virtual network gateways, network watchers, application gateways and express route cross connections, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Networking. **What do I need to connect Azure Networking?** Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_networking" } lists exactly what to paste. **Can an AI agent delete or change things in Azure Networking?** Only if its key allows it, and only with an explicit confirmation. 168 Azure Networking actions are destructive, including deletes the specified virtual network, deletes the specified public IP address and deletes the specified subnet. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Azure Networking API limit?** actionlake paces every call to the limits in the Azure Networking service file: 200 calls a minute per connection. Repeated reads are answered from cache (376 Azure Networking actions can be), which never reaches Azure Networking. **What does an Azure Networking action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (214 Azure Networking actions page). Cache hits, searches, dry runs and calls Azure Networking refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Azure Networking API does it cover?** The Azure Networking (virtual networks, subnets, NSGs, public IPs, load balancers, gateways, firewalls) API Azure Resource Manager Microsoft.Network 2026-03-01 at management.azure.com. It is built from Azure Networking's documentation as read on 23 October 2026. 833 actions in 173 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Azure Networking data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Networking credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Azure Networking Shares the most action names with - [DNSFilter 7](https://actionlake.com/connectors/dnsfilter) - [Azure Kubernetes Service (AKS) 2](https://actionlake.com/connectors/azure-kubernetes-service-aks) - [Azure SQL Database 2](https://actionlake.com/connectors/azure-sql-database) - [Azure Container Apps 2](https://actionlake.com/connectors/azure-container-apps) - [Azure Resource Manager 2](https://actionlake.com/connectors/azure-resource-manager) - [Azure Compute (Virtual Machines) 2](https://actionlake.com/connectors/azure-compute-virtual-machines) Joins with, on shared entities - [Cloudflare 3](https://actionlake.com/connectors/cloudflare) - [Palo Alto Networks Strata Cloud Manager / Prisma Access 2](https://actionlake.com/connectors/palo-alto-networks-strata-cloud-manager-prisma-access) - [Tenable Vulnerability Management 2](https://actionlake.com/connectors/tenable-vulnerability-management) - [Slack 1](https://actionlake.com/connectors/slack) - [Gusto 1](https://actionlake.com/connectors/gusto) - [Microsoft 365 Users 1](https://actionlake.com/connectors/microsoft-365-users) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Azure Networking; the name is the vendor's own. Counts are from the Azure Networking service file, version 1.0.0. ## Give your agent Azure Networking today. [Connect Azure Networking free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/azure-networking More: https://actionlake.com/llms.txt