Skip to content

Connectors · MSP & PSA

Azure SQL Database MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure SQL Database and the rest of your systems. It gives your agent 548 Azure SQL Database actions (301 reads, 151 writes and 96 that wait for a confirmation) and holds the Azure SQL Database credential itself, so the agent never does. It paces Azure SQL Database's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "azure_sql.subscriptions.list",  intent: "check which Azure SQL Database account is connected"}# List the subscriptions the credential can see · read · 1 upstream call
  • 548actionsin one signed file
  • 301readlook, never change
  • 151writecreate and update
  • 96wait for a yesdestructive, confirmed first

Set up

Connect Azure SQL Database in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Azure SQL Database.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idEntra application (client) id of a service principal with an Azure RBAC role on the subscription
    • client_secretEntra client secret
    • tenant_idYour Azure SQL Database tenant id
    account { op: "connections.requirements", service: "azure_sql" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "azure_sql.subscriptions.list" }# list the subscriptions the credential can see · read · 1 upstream callcheck { action: "azure_sql.databases.update", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Azure SQL Database at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Setup fields
tenant_id
Limits we pace to
200 calls a minute, per connection
API covered
Azure SQL Database and SQL Managed Instance (servers, databases, elastic pools, firewall rules, backups, failover, security) API Azure Resource Manager Microsoft.Sql 2025-01-01management.azure.com
Built from
Azure SQL Database's documentation, read 23 October 2026GitHublearn.microsoft.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
297 of 301 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Azure SQL Database up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Azure SQL Database.

548 actions in 150 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 301readlook, never change
  • 151writecreate and update
  • 96destructivewait for a confirmation
  1. Long term retention backups

    24

    8 read · 8 write · 8 destructive

    Lists all long term retention backups for a database · Lists the long term retention backups for a given location · Lists all long term retention backups for a database based on a particular resource group · Lists the long term retention backups for a given location based on resource group

  2. Managed instances

    15

    7 read · 5 write · 3 destructive

    Gets a list of all managed instances in the subscription · Gets a list of all managed instances in an instance pool · Get top resource consuming queries of a managed instance · Gets a list of managed instances in a resource group

  3. Databases

    14

    4 read · 5 write · 5 destructive

    Gets a list of databases · Gets a database · Updates an existing database · Deletes the database

  4. Managed databases

    11

    3 read · 4 write · 4 destructive

    Gets a list of managed databases · Gets a list of inaccessible managed databases in a managed instance · Gets a managed database · Completes a managed database move operation

  5. Sync groups

    11

    5 read · 4 write · 2 destructive

    Lists sync groups under a hub database · Gets a collection of hub database schemas · Gets a collection of sync group logs · Gets a collection of sync database ids

  6. Long term retention managed instance backups

    10

    8 read · 0 write · 2 destructive

    Lists all long term retention backups for a managed database · Lists the long term retention backups for a given managed instance · Lists the long term retention backups for managed databases in a given location · Lists all long term retention backups for a managed database

  7. Managed database sensitivity labels

    9

    4 read · 4 write · 1 destructive

    Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity label of a given column

  8. Sensitivity labels

    9

    4 read · 4 write · 1 destructive

    Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity label of a given column

142 more areas · 445 actions
  • Servers 9
  • Failover groups 8
  • Replication links 8
  • Distributed availability groups 7
  • Sync members 7
  • Virtual clusters 7
  • Elastic pools 6
  • Instance failover groups 6
  • Instance pools 6
  • Job executions 6
  • Job steps 6
  • Sync agents 6
  • Firewall rules 5
  • Job agents 5
  • Managed server DNS aliases 5
  • Server DNS aliases 5
  • Server trust groups 5
  • Transparent data encryptions 5
  • Backup short term retention policies 4
  • Database SQL vulnerability assessment rule baselines 4
  • Database vulnerability assessment scans 4
  • Database vulnerability assessments 4
  • Deleted servers 4
  • Encryption protectors 4
  • Ipv6 firewall rules 4
  • Job credentials 4
  • Job private endpoints 4
  • Job target groups 4
  • Jobs 4
  • Ledger digest uploads 4
  • Managed backup short term retention policies 4
  • Managed database vulnerability assessment scans 4
  • Managed database vulnerability assessments 4
  • Managed instance administrators 4
  • Managed instance azure ad only authentications 4
  • Managed instance encryption protectors 4
  • Managed instance keys 4
  • Managed instance long term retention policies 4
  • Managed instance private endpoint connections 4
  • Managed instance vulnerability assessments 4
  • Managed ledger digest uploads 4
  • Managed restorable dropped database backup short term retention policies 4
  • Outbound firewall rules 4
  • Private endpoint connections 4
  • Restore points 4
  • Server azure ad administrators 4
  • Server azure ad only authentications 4
  • Server keys 4
  • Server trust certificates 4
  • Server vulnerability assessments 4
  • Start stop managed instance schedules 4
  • Virtual network rules 4
  • Workload classifiers 4
  • Workload groups 4
  • Database advanced threat protection settings 3
  • Database advisors 3
  • Database blob auditing policies 3
  • Database columns 3
  • Database extensions 3
  • Database recommended actions 3
  • Database security alert policies 3
  • Database SQL vulnerability assessment baselines 3
  • Database vulnerability assessment rule baselines 3
  • Extended database blob auditing policies 3
  • Extended server blob auditing policies 3
  • Geo backup policies 3
  • Job target executions 3
  • Long term retention policies 3
  • Managed database advanced threat protection settings 3
  • Managed database columns 3
  • Managed database security alert policies 3
  • Managed database transparent data encryption 3
  • Managed database vulnerability assessment rule baselines 3
  • Managed instance advanced threat protection settings 3
  • Managed instance DTCS 3
  • Managed instance operations 3
  • Managed server security alert policies 3
  • Network security perimeter configurations 3
  • Server advanced threat protection settings 3
  • Server advisors 3
  • Server blob auditing policies 3
  • Server configuration options 3
  • Server connection policies 3
  • Server dev ops audit settings 3
  • Server security alert policies 3
  • SQL vulnerability assessment rule baseline 3
  • SQL vulnerability assessments settings 3
  • Data masking policies 2
  • Data masking rules 2
  • Data warehouse user activities 2
  • Database automatic tuning 2
  • Database encryption protectors 2
  • Database operations 2
  • Database schemas 2
  • Database SQL vulnerability assessment scan result 2
  • Database SQL vulnerability assessment scans 2
  • Database SQL vulnerability assessments settings 2
  • Database tables 2
  • Elastic pool operations 2
  • Endpoint certificates 2
  • Instance pool operations 2
  • Job step executions 2
  • Job versions 2
  • Maintenance windows 2
  • Managed database move operations 2
  • Managed database queries 2
  • Managed database schemas 2
  • Managed database tables 2
  • Managed instance private link resources 2
  • Private link resources 2
  • Recoverable databases 2
  • Recoverable managed databases 2
  • Restorable dropped databases 2
  • Restorable dropped managed databases 2
  • Server automatic tuning 2
  • SQL agent 2
  • SQL vulnerability assessment baseline 2
  • SQL vulnerability assessment scan result 2
  • SQL vulnerability assessment scans 2
  • Subscription usages 2
  • Subscriptions 2
  • Time zones 2
  • Capabilities 1
  • Database SQL vulnerability assessment execute scan 1
  • Database usages 1
  • Maintenance window options 1
  • Managed database recommended sensitivity labels 1
  • Managed database restore details 1
  • Managed database security events 1
  • Managed instance tde certificates 1
  • Operations 1
  • Recommended sensitivity labels 1
  • Resource groups 1
  • Server operations 1
  • Server usages 1
  • SQL vulnerability assessment baselines 1
  • SQL vulnerability assessment execute scan 1
  • SQL vulnerability assessment rule baselines 1
  • SQL vulnerability assessments 1
  • Synapse link workspaces 1
  • Tde certificates 1
  • Usages 1

Top actions

The Azure SQL Database API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 10 of Azure SQL Database's 12 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
azure_sql.databases.list_by_serverGets a list of databasesGets a list of databases.readinfra.database.list7 connectors
azure_sql.resource_groups.listList the resource groups in a subscriptionList the resource groups in a subscription.readinfra.resource_group.list19 connectors
azure_sql.subscriptions.list_locationsList the Azure regions available to a subscriptionList the Azure regions available to a subscription.readinfra.region.list16 connectors
azure_sql.servers.listGets a list of all servers in the subscriptionGets a list of all servers in the subscription.readinfra.database_instance.list5 connectors
azure_sql.databases.getGets a databaseGets a database.readinfra.database.get6 connectors
azure_sql.servers.getGets a serverGets a server.readinfra.database_instance.get5 connectors
azure_sql.subscriptions.listList the subscriptions the credential can seeList the subscriptions the credential can see.readthis connector
azure_sql.databases.updateUpdates an existing databaseUpdates an existing database.writeinfra.database.update5 connectors
azure_sql.databases.deleteDeletes the databaseDeletes the database.destructiveinfra.database.delete7 connectors
azure_sql.servers.updateUpdates a serverUpdates a server.writeinfra.database_instance.update4 connectors
azure_sql.operations.listLists all of the available SQL Rest API operationsLists all of the available SQL Rest API operations.readthis connector
azure_sql.servers.create_or_updateCreates or updates a serverCreates or updates a server.writethis connector

Try it

Prompts to paste into Claude.

Each one names the Azure SQL Database actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List the subscriptions the credential can see in Azure SQL Database and tell me what stands out.

    callsazure_sql.subscriptions.list

  2. Writewrite

    Updates an existing database in Azure SQL Database. Show me exactly what you will send before you save it.

    callsazure_sql.databases.update

Governance for Azure SQL Database

Destructive actions wait for a yes.

96 Azure SQL Database actions are destructive. The first 10:

  • Deletes the databaseazure_sql.databases.delete
  • Deletes a serverazure_sql.servers.delete
  • Generates a sync agent keyazure_sql.sync_agents.generate_key
  • Pauses a databaseazure_sql.databases.pause
  • Renames a databaseazure_sql.databases.rename
  • Failovers a databaseazure_sql.databases.failover
  • Failovers an elastic poolazure_sql.elastic_pools.failover
  • Stops the managed instanceazure_sql.managed_instances.stop
  • Fails over from the current primary server to this serverazure_sql.failover_groups.failover
  • Failovers a managed instanceazure_sql.managed_instances.failover

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doazure_sql.databases.deleteconfirm_policy: human

Deletes the database?

intent: the user asked me to deletes the database

run suspended · waiting for a named person · key azure-sql-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "azure-sql-agent",  allowed_actions: ["azure_sql.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "azure_sql.databases.delete", approver: "[email protected]" },    { match: "azure_sql.servers.delete", approver: "[email protected]" },    { match: "azure_sql.sync_agents.generate_key", approver: "[email protected]" }  ]}
Illustrative. Scoped to Azure SQL Database only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Azure SQL Database costs on actionlake.

Every Azure SQL Database action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Azure SQL Database refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 548 Azure SQL Database actions
  • 164actions pageeach page of a long list is one call
  • 297reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Azure SQL Database action.

548 actions by area: the id your agent calls, what it does, and its effect.

Long term retention backups24
  • azure_sql.long_term_retention_backups.list_by_databaseLists all long term retention backups for a databaseread
  • azure_sql.long_term_retention_backups.list_by_locationLists the long term retention backups for a given locationread
  • and 22 more in this area
Managed instances15
  • azure_sql.managed_instances.listGets a list of all managed instances in the subscriptionread
  • azure_sql.managed_instances.list_by_instance_poolGets a list of all managed instances in an instance poolread
  • and 13 more in this area
Databases14
  • azure_sql.databases.deleteDeletes the databasedestructive
  • azure_sql.databases.getGets a databaseread
  • and 12 more in this area
Managed databases11
  • azure_sql.managed_databases.complete_moveCompletes a managed database move operationdestructive
  • azure_sql.managed_databases.getGets a managed databaseread
  • and 9 more in this area
Sync groups11
  • azure_sql.sync_groups.list_by_databaseLists sync groups under a hub databaseread
  • azure_sql.sync_groups.list_hub_schemasGets a collection of hub database schemasread
  • and 9 more in this area
Long term retention managed instance backups10
  • azure_sql.long_term_retention_managed_instance_backups.list_by_databaseLists all long term retention backups for a managed databaseread
  • azure_sql.long_term_retention_managed_instance_backups.list_by_instanceLists the long term retention backups for a given managed instanceread
  • and 8 more in this area
Managed database sensitivity labels9
  • azure_sql.managed_database_sensitivity_labels.getGets the sensitivity label of a given columnread
  • azure_sql.managed_database_sensitivity_labels.list_by_databaseGets the sensitivity labels of a given databaseread
  • and 7 more in this area
Sensitivity labels9
  • azure_sql.sensitivity_labels.getGets the sensitivity label of a given columnread
  • azure_sql.sensitivity_labels.list_by_databaseGets the sensitivity labels of a given databaseread
  • and 7 more in this area
Servers9
  • azure_sql.servers.deleteDeletes a serverdestructive
  • azure_sql.servers.getGets a serverread
  • and 7 more in this area
Failover groups8
  • azure_sql.failover_groups.failoverFails over from the current primary server to this serverdestructive
  • azure_sql.failover_groups.force_failover_allow_data_lossFails over from the current primary server to this serverdestructive
  • and 6 more in this area
Replication links8
  • azure_sql.replication_links.failoverFails over from the current primary server to this serverdestructive
  • azure_sql.replication_links.getGets a replication linkread
  • and 6 more in this area
Distributed availability groups7
  • azure_sql.distributed_availability_groups.failoverPerforms requested failover type in this distributed availability groupdestructive
  • azure_sql.distributed_availability_groups.getGets a distributed availability group inforead
  • and 5 more in this area
Sync members7
  • azure_sql.sync_members.getGets a sync memberread
  • azure_sql.sync_members.list_by_sync_groupLists sync members in the given sync groupread
  • and 5 more in this area
Virtual clusters7
  • azure_sql.virtual_clusters.getGets a virtual clusterread
  • azure_sql.virtual_clusters.listGets a list of all virtualClusters in the subscriptionread
  • and 5 more in this area
Elastic pools6
  • azure_sql.elastic_pools.failoverFailovers an elastic pooldestructive
  • azure_sql.elastic_pools.getGets an elastic poolread
  • and 4 more in this area
Instance failover groups6
  • azure_sql.instance_failover_groups.failoverFails over from the current primary managed instance to this managed instancedestructive
  • azure_sql.instance_failover_groups.force_failover_allow_data_lossFails over from the current primary managed instance to this managed instancedestructive
  • and 4 more in this area
Instance pools6
  • azure_sql.instance_pools.getGets an instance poolread
  • azure_sql.instance_pools.listGets a list of all instance pools in the subscriptionread
  • and 4 more in this area
Job executions6
  • azure_sql.job_executions.createStarts an elastic job executionwrite
  • azure_sql.job_executions.getGets a job executionread
  • and 4 more in this area
Job steps6
  • azure_sql.job_steps.getGets a job step in a job's current versionread
  • azure_sql.job_steps.get_by_versionGets the specified version of a job stepread
  • and 4 more in this area
Sync agents6
  • azure_sql.sync_agents.generate_keyGenerates a sync agent keydestructive
  • azure_sql.sync_agents.getGets a sync agentread
  • and 4 more in this area
Firewall rules5
  • azure_sql.firewall_rules.deleteDeletes a firewall ruledestructive
  • azure_sql.firewall_rules.getGets a firewall ruleread
  • and 3 more in this area
Job agents5
  • azure_sql.job_agents.deleteDeletes a job agentdestructive
  • azure_sql.job_agents.getGets a job agentread
  • and 3 more in this area
Managed server DNS aliases5
  • azure_sql.managed_server_dns_aliases.acquireAcquires managed server DNS alias from another managed serverdestructive
  • azure_sql.managed_server_dns_aliases.deleteDeletes the managed server DNS alias with the given namedestructive
  • and 3 more in this area
Server DNS aliases5
  • azure_sql.server_dns_aliases.acquireAcquires server DNS alias from another serverdestructive
  • azure_sql.server_dns_aliases.deleteDeletes the server DNS alias with the given namedestructive
  • and 3 more in this area
Server trust groups5
  • azure_sql.server_trust_groups.deleteDeletes a server trust groupdestructive
  • azure_sql.server_trust_groups.getGets a server trust groupread
  • and 3 more in this area
Transparent data encryptions5
  • azure_sql.transparent_data_encryptions.getGets a logical database's transparent data encryptionread
  • azure_sql.transparent_data_encryptions.list_by_databaseGets a list of the logical database's transparent data encryptionread
  • and 3 more in this area
Backup short term retention policies4
  • azure_sql.backup_short_term_retention_policies.create_or_updateUpdates a database's short term retention policywrite
  • azure_sql.backup_short_term_retention_policies.getGets a database's short term retention policyread
  • and 2 more in this area
Database SQL vulnerability assessment rule baselines4
  • azure_sql.database_sql_vulnerability_assessment_rule_baselines.create_or_updateCreates or updates a database's vulnerability assessment rule baselinewrite
  • azure_sql.database_sql_vulnerability_assessment_rule_baselines.deleteRemoves the database's vulnerability assessment rule baselinedestructive
  • and 2 more in this area
Database vulnerability assessment scans4
  • azure_sql.database_vulnerability_assessment_scans.exportConvert an existing scan result to a human readable formatwrite
  • azure_sql.database_vulnerability_assessment_scans.getGets a vulnerability assessment scan record of a databaseread
  • and 2 more in this area
Database vulnerability assessments4
  • azure_sql.database_vulnerability_assessments.create_or_updateCreates or updates the database's vulnerability assessmentwrite
  • azure_sql.database_vulnerability_assessments.deleteRemoves the database's vulnerability assessmentdestructive
  • and 2 more in this area

Deleted servers 4Encryption protectors 4Ipv6 firewall rules 4Job credentials 4Job private endpoints 4Job target groups 4Jobs 4Ledger digest uploads 4Managed backup short term retention policies 4Managed database vulnerability assessment scans 4Managed database vulnerability assessments 4Managed instance administrators 4Managed instance azure ad only authentications 4Managed instance encryption protectors 4Managed instance keys 4Managed instance long term retention policies 4Managed instance private endpoint connections 4Managed instance vulnerability assessments 4Managed ledger digest uploads 4Managed restorable dropped database backup short term retention policies 4Outbound firewall rules 4Private endpoint connections 4Restore points 4Server azure ad administrators 4Server azure ad only authentications 4Server keys 4Server trust certificates 4Server vulnerability assessments 4Start stop managed instance schedules 4Virtual network rules 4Workload classifiers 4Workload groups 4Database advanced threat protection settings 3Database advisors 3Database blob auditing policies 3Database columns 3Database extensions 3Database recommended actions 3Database security alert policies 3Database SQL vulnerability assessment baselines 3Database vulnerability assessment rule baselines 3Extended database blob auditing policies 3Extended server blob auditing policies 3Geo backup policies 3Job target executions 3Long term retention policies 3Managed database advanced threat protection settings 3Managed database columns 3Managed database security alert policies 3Managed database transparent data encryption 3Managed database vulnerability assessment rule baselines 3Managed instance advanced threat protection settings 3Managed instance DTCS 3Managed instance operations 3Managed server security alert policies 3Network security perimeter configurations 3Server advanced threat protection settings 3Server advisors 3Server blob auditing policies 3Server configuration options 3Server connection policies 3Server dev ops audit settings 3Server security alert policies 3SQL vulnerability assessment rule baseline 3SQL vulnerability assessments settings 3Data masking policies 2Data masking rules 2Data warehouse user activities 2Database automatic tuning 2Database encryption protectors 2Database operations 2Database schemas 2Database SQL vulnerability assessment scan result 2Database SQL vulnerability assessment scans 2Database SQL vulnerability assessments settings 2Database tables 2Elastic pool operations 2Endpoint certificates 2Instance pool operations 2Job step executions 2Job versions 2Maintenance windows 2Managed database move operations 2Managed database queries 2Managed database schemas 2Managed database tables 2Managed instance private link resources 2Private link resources 2Recoverable databases 2Recoverable managed databases 2Restorable dropped databases 2Restorable dropped managed databases 2Server automatic tuning 2SQL agent 2SQL vulnerability assessment baseline 2SQL vulnerability assessment scan result 2SQL vulnerability assessment scans 2Subscription usages 2Subscriptions 2Time zones 2Capabilities 1Database SQL vulnerability assessment execute scan 1Database usages 1Maintenance window options 1Managed database recommended sensitivity labels 1Managed database restore details 1Managed database security events 1Managed instance tde certificates 1Operations 1Recommended sensitivity labels 1Resource groups 1Server operations 1Server usages 1SQL vulnerability assessment baselines 1SQL vulnerability assessment execute scan 1SQL vulnerability assessment rule baselines 1SQL vulnerability assessments 1Synapse link workspaces 1Tde certificates 1Usages 1

This index shows a sample of each area. All 548 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Azure SQL Database MCP server, answered.

Is there an Azure SQL Database MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 548 Azure SQL Database actions across long term retention backups, managed instances, databases and managed databases, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure SQL Database.

What do I need to connect Azure SQL Database?

Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_sql" } lists exactly what to paste.

Can an AI agent delete or change things in Azure SQL Database?

Only if its key allows it, and only with an explicit confirmation. 96 Azure SQL Database actions are destructive, including deletes the database, deletes a server and generates a sync agent key. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Azure SQL Database API limit?

actionlake paces every call to the limits in the Azure SQL Database service file: 200 calls a minute per connection. Repeated reads are answered from cache (297 Azure SQL Database actions can be), which never reaches Azure SQL Database.

What does an Azure SQL Database action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (164 Azure SQL Database actions page). Cache hits, searches, dry runs and calls Azure SQL Database refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Azure SQL Database API does it cover?

The Azure SQL Database and SQL Managed Instance (servers, databases, elastic pools, firewall rules, backups, failover, security) API Azure Resource Manager Microsoft.Sql 2025-01-01 at management.azure.com. It is built from Azure SQL Database's documentation as read on 23 October 2026. 548 actions in 150 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Azure SQL Database data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure SQL Database credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Azure SQL Database today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.