--- title: "Azure SQL Database MCP server for AI agents - actionlake" description: "Give Claude 548 Azure SQL Database actions through one MCP server: long term retention backups, managed instances. 100,000 calls a month free, no card." canonical: https://actionlake.com/connectors/azure-sql-database updated: 2026-10-23 --- Connectors · MSP & PSA # Azure SQL Database MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure SQL Database and the rest of your systems. It gives your agent 548 Azure SQL Database actions (301 reads, 151 writes and 96 that wait for a confirmation) and holds the Azure SQL Database credential itself, so the agent never does. It paces Azure SQL Database's limits and records every call. [Connect Azure SQL Database free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "azure_sql.subscriptions.list", intent: "check which Azure SQL Database account is connected" } # List the subscriptions the credential can see · read · 1 upstream call ``` - 548 actions in one signed file - 301 read look, never change - 151 write create and update - 96 wait for a yes destructive, confirmed first Set up ## Connect Azure SQL Database in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Azure SQL Database. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id of a service principal with an Azure RBAC role on the subscription - `client_secret` Entra client secret - `tenant_id` Your Azure SQL Database tenant id ``` account { op: "connections.requirements", service: "azure_sql" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "azure_sql.subscriptions.list" } # list the subscriptions the credential can see · read · 1 upstream call check { action: "azure_sql.databases.update", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Azure SQL Database at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 200 calls a minute, per connection **API covered** Azure SQL Database and SQL Managed Instance (servers, databases, elastic pools, firewall rules, backups, failover, security) API Azure Resource Manager Microsoft.Sql 2025-01-01`management.azure.com` **Built from** Azure SQL Database's documentation, read 23 October 2026[GitHub](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/sql/resource-manager/Microsoft.Sql/SQL/stable/2025-01-01/) [learn.microsoft.com](https://learn.microsoft.com/en-us/rest/api/sql/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 297 of 301 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line Azure SQL Database up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Azure SQL Database. 548 actions in 150 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **301** read look, never change - **151** write create and update - **96** destructive wait for a confirmation 1. ### Long term retention backups 24 8 read · 8 write · 8 destructive Lists all long term retention backups for a database · Lists the long term retention backups for a given location · Lists all long term retention backups for a database based on a particular resource group · Lists the long term retention backups for a given location based on resource group 2. ### Managed instances 15 7 read · 5 write · 3 destructive Gets a list of all managed instances in the subscription · Gets a list of all managed instances in an instance pool · Get top resource consuming queries of a managed instance · Gets a list of managed instances in a resource group 3. ### Databases 14 4 read · 5 write · 5 destructive Gets a list of databases · Gets a database · Updates an existing database · Deletes the database 4. ### Managed databases 11 3 read · 4 write · 4 destructive Gets a list of managed databases · Gets a list of inaccessible managed databases in a managed instance · Gets a managed database · Completes a managed database move operation 5. ### Sync groups 11 5 read · 4 write · 2 destructive Lists sync groups under a hub database · Gets a collection of hub database schemas · Gets a collection of sync group logs · Gets a collection of sync database ids 6. ### Long term retention managed instance backups 10 8 read · 0 write · 2 destructive Lists all long term retention backups for a managed database · Lists the long term retention backups for a given managed instance · Lists the long term retention backups for managed databases in a given location · Lists all long term retention backups for a managed database 7. ### Managed database sensitivity labels 9 4 read · 4 write · 1 destructive Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity label of a given column 8. ### Sensitivity labels 9 4 read · 4 write · 1 destructive Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity labels of a given database · Gets the sensitivity label of a given column **142 more areas · 445 actions** - Servers **9** - Failover groups **8** - Replication links **8** - Distributed availability groups **7** - Sync members **7** - Virtual clusters **7** - Elastic pools **6** - Instance failover groups **6** - Instance pools **6** - Job executions **6** - Job steps **6** - Sync agents **6** - Firewall rules **5** - Job agents **5** - Managed server DNS aliases **5** - Server DNS aliases **5** - Server trust groups **5** - Transparent data encryptions **5** - Backup short term retention policies **4** - Database SQL vulnerability assessment rule baselines **4** - Database vulnerability assessment scans **4** - Database vulnerability assessments **4** - Deleted servers **4** - Encryption protectors **4** - Ipv6 firewall rules **4** - Job credentials **4** - Job private endpoints **4** - Job target groups **4** - Jobs **4** - Ledger digest uploads **4** - Managed backup short term retention policies **4** - Managed database vulnerability assessment scans **4** - Managed database vulnerability assessments **4** - Managed instance administrators **4** - Managed instance azure ad only authentications **4** - Managed instance encryption protectors **4** - Managed instance keys **4** - Managed instance long term retention policies **4** - Managed instance private endpoint connections **4** - Managed instance vulnerability assessments **4** - Managed ledger digest uploads **4** - Managed restorable dropped database backup short term retention policies **4** - Outbound firewall rules **4** - Private endpoint connections **4** - Restore points **4** - Server azure ad administrators **4** - Server azure ad only authentications **4** - Server keys **4** - Server trust certificates **4** - Server vulnerability assessments **4** - Start stop managed instance schedules **4** - Virtual network rules **4** - Workload classifiers **4** - Workload groups **4** - Database advanced threat protection settings **3** - Database advisors **3** - Database blob auditing policies **3** - Database columns **3** - Database extensions **3** - Database recommended actions **3** - Database security alert policies **3** - Database SQL vulnerability assessment baselines **3** - Database vulnerability assessment rule baselines **3** - Extended database blob auditing policies **3** - Extended server blob auditing policies **3** - Geo backup policies **3** - Job target executions **3** - Long term retention policies **3** - Managed database advanced threat protection settings **3** - Managed database columns **3** - Managed database security alert policies **3** - Managed database transparent data encryption **3** - Managed database vulnerability assessment rule baselines **3** - Managed instance advanced threat protection settings **3** - Managed instance DTCS **3** - Managed instance operations **3** - Managed server security alert policies **3** - Network security perimeter configurations **3** - Server advanced threat protection settings **3** - Server advisors **3** - Server blob auditing policies **3** - Server configuration options **3** - Server connection policies **3** - Server dev ops audit settings **3** - Server security alert policies **3** - SQL vulnerability assessment rule baseline **3** - SQL vulnerability assessments settings **3** - Data masking policies **2** - Data masking rules **2** - Data warehouse user activities **2** - Database automatic tuning **2** - Database encryption protectors **2** - Database operations **2** - Database schemas **2** - Database SQL vulnerability assessment scan result **2** - Database SQL vulnerability assessment scans **2** - Database SQL vulnerability assessments settings **2** - Database tables **2** - Elastic pool operations **2** - Endpoint certificates **2** - Instance pool operations **2** - Job step executions **2** - Job versions **2** - Maintenance windows **2** - Managed database move operations **2** - Managed database queries **2** - Managed database schemas **2** - Managed database tables **2** - Managed instance private link resources **2** - Private link resources **2** - Recoverable databases **2** - Recoverable managed databases **2** - Restorable dropped databases **2** - Restorable dropped managed databases **2** - Server automatic tuning **2** - SQL agent **2** - SQL vulnerability assessment baseline **2** - SQL vulnerability assessment scan result **2** - SQL vulnerability assessment scans **2** - Subscription usages **2** - Subscriptions **2** - Time zones **2** - Capabilities **1** - Database SQL vulnerability assessment execute scan **1** - Database usages **1** - Maintenance window options **1** - Managed database recommended sensitivity labels **1** - Managed database restore details **1** - Managed database security events **1** - Managed instance tde certificates **1** - Operations **1** - Recommended sensitivity labels **1** - Resource groups **1** - Server operations **1** - Server usages **1** - SQL vulnerability assessment baselines **1** - SQL vulnerability assessment execute scan **1** - SQL vulnerability assessment rule baselines **1** - SQL vulnerability assessments **1** - Synapse link workspaces **1** - Tde certificates **1** - Usages **1** Top actions ## The Azure SQL Database API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 10 of Azure SQL Database's 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `azure_sql.databases.list_by_server` Gets a list of databases | Gets a list of databases. | read | `infra.database.list` 7 connectors | | `azure_sql.resource_groups.list` List the resource groups in a subscription | List the resource groups in a subscription. | read | `infra.resource_group.list` 19 connectors | | `azure_sql.subscriptions.list_locations` List the Azure regions available to a subscription | List the Azure regions available to a subscription. | read | `infra.region.list` 16 connectors | | `azure_sql.servers.list` Gets a list of all servers in the subscription | Gets a list of all servers in the subscription. | read | `infra.database_instance.list` 5 connectors | | `azure_sql.databases.get` Gets a database | Gets a database. | read | `infra.database.get` 6 connectors | | `azure_sql.servers.get` Gets a server | Gets a server. | read | `infra.database_instance.get` 5 connectors | | `azure_sql.subscriptions.list` List the subscriptions the credential can see | List the subscriptions the credential can see. | read | this connector | | `azure_sql.databases.update` Updates an existing database | Updates an existing database. | write | `infra.database.update` 5 connectors | | `azure_sql.databases.delete` Deletes the database | Deletes the database. | destructive | `infra.database.delete` 7 connectors | | `azure_sql.servers.update` Updates a server | Updates a server. | write | `infra.database_instance.update` 4 connectors | | `azure_sql.operations.list` Lists all of the available SQL Rest API operations | Lists all of the available SQL Rest API operations. | read | this connector | | `azure_sql.servers.create_or_update` Creates or updates a server | Creates or updates a server. | write | this connector | Try it ## Prompts to paste into Claude. Each one names the Azure SQL Database actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List the subscriptions the credential can see in Azure SQL Database and tell me what stands out. calls `azure_sql.subscriptions.list` 2. Write write Updates an existing database in Azure SQL Database. Show me exactly what you will send before you save it. calls `azure_sql.databases.update` Governance for Azure SQL Database ## Destructive actions wait for a yes. 96 Azure SQL Database actions are destructive. The first 10: - Deletes the database `azure_sql.databases.delete` - Deletes a server `azure_sql.servers.delete` - Generates a sync agent key `azure_sql.sync_agents.generate_key` - Pauses a database `azure_sql.databases.pause` - Renames a database `azure_sql.databases.rename` - Failovers a database `azure_sql.databases.failover` - Failovers an elastic pool `azure_sql.elastic_pools.failover` - Stops the managed instance `azure_sql.managed_instances.stop` - Fails over from the current primary server to this server `azure_sql.failover_groups.failover` - Failovers a managed instance `azure_sql.managed_instances.failover` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do azure_sql.databases.delete confirm_policy: **human** Deletes the database? **intent:** the user asked me to deletes the database run suspended · waiting for a named person · key _azure-sql-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "azure-sql-agent", allowed_actions: ["azure_sql.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "azure_sql.databases.delete", approver: "lead@example.com" }, { match: "azure_sql.servers.delete", approver: "lead@example.com" }, { match: "azure_sql.sync_agents.generate_key", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Azure SQL Database only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Azure SQL Database costs on actionlake. Every Azure SQL Database action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Azure SQL Database refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 548 Azure SQL Database actions - 164 actions page each page of a long list is one call - 297 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Azure SQL Database action. 548 actions by area: the id your agent calls, what it does, and its effect. **Long term retention backups 24** - `azure_sql.long_term_retention_backups.list_by_database` Lists all long term retention backups for a database read - `azure_sql.long_term_retention_backups.list_by_location` Lists the long term retention backups for a given location read - and 22 more in this area **Managed instances 15** - `azure_sql.managed_instances.list` Gets a list of all managed instances in the subscription read - `azure_sql.managed_instances.list_by_instance_pool` Gets a list of all managed instances in an instance pool read - and 13 more in this area **Databases 14** - `azure_sql.databases.delete` Deletes the database destructive - `azure_sql.databases.get` Gets a database read - and 12 more in this area **Managed databases 11** - `azure_sql.managed_databases.complete_move` Completes a managed database move operation destructive - `azure_sql.managed_databases.get` Gets a managed database read - and 9 more in this area **Sync groups 11** - `azure_sql.sync_groups.list_by_database` Lists sync groups under a hub database read - `azure_sql.sync_groups.list_hub_schemas` Gets a collection of hub database schemas read - and 9 more in this area **Long term retention managed instance backups 10** - `azure_sql.long_term_retention_managed_instance_backups.list_by_database` Lists all long term retention backups for a managed database read - `azure_sql.long_term_retention_managed_instance_backups.list_by_instance` Lists the long term retention backups for a given managed instance read - and 8 more in this area **Managed database sensitivity labels 9** - `azure_sql.managed_database_sensitivity_labels.get` Gets the sensitivity label of a given column read - `azure_sql.managed_database_sensitivity_labels.list_by_database` Gets the sensitivity labels of a given database read - and 7 more in this area **Sensitivity labels 9** - `azure_sql.sensitivity_labels.get` Gets the sensitivity label of a given column read - `azure_sql.sensitivity_labels.list_by_database` Gets the sensitivity labels of a given database read - and 7 more in this area **Servers 9** - `azure_sql.servers.delete` Deletes a server destructive - `azure_sql.servers.get` Gets a server read - and 7 more in this area **Failover groups 8** - `azure_sql.failover_groups.failover` Fails over from the current primary server to this server destructive - `azure_sql.failover_groups.force_failover_allow_data_loss` Fails over from the current primary server to this server destructive - and 6 more in this area **Replication links 8** - `azure_sql.replication_links.failover` Fails over from the current primary server to this server destructive - `azure_sql.replication_links.get` Gets a replication link read - and 6 more in this area **Distributed availability groups 7** - `azure_sql.distributed_availability_groups.failover` Performs requested failover type in this distributed availability group destructive - `azure_sql.distributed_availability_groups.get` Gets a distributed availability group info read - and 5 more in this area **Sync members 7** - `azure_sql.sync_members.get` Gets a sync member read - `azure_sql.sync_members.list_by_sync_group` Lists sync members in the given sync group read - and 5 more in this area **Virtual clusters 7** - `azure_sql.virtual_clusters.get` Gets a virtual cluster read - `azure_sql.virtual_clusters.list` Gets a list of all virtualClusters in the subscription read - and 5 more in this area **Elastic pools 6** - `azure_sql.elastic_pools.failover` Failovers an elastic pool destructive - `azure_sql.elastic_pools.get` Gets an elastic pool read - and 4 more in this area **Instance failover groups 6** - `azure_sql.instance_failover_groups.failover` Fails over from the current primary managed instance to this managed instance destructive - `azure_sql.instance_failover_groups.force_failover_allow_data_loss` Fails over from the current primary managed instance to this managed instance destructive - and 4 more in this area **Instance pools 6** - `azure_sql.instance_pools.get` Gets an instance pool read - `azure_sql.instance_pools.list` Gets a list of all instance pools in the subscription read - and 4 more in this area **Job executions 6** - `azure_sql.job_executions.create` Starts an elastic job execution write - `azure_sql.job_executions.get` Gets a job execution read - and 4 more in this area **Job steps 6** - `azure_sql.job_steps.get` Gets a job step in a job's current version read - `azure_sql.job_steps.get_by_version` Gets the specified version of a job step read - and 4 more in this area **Sync agents 6** - `azure_sql.sync_agents.generate_key` Generates a sync agent key destructive - `azure_sql.sync_agents.get` Gets a sync agent read - and 4 more in this area **Firewall rules 5** - `azure_sql.firewall_rules.delete` Deletes a firewall rule destructive - `azure_sql.firewall_rules.get` Gets a firewall rule read - and 3 more in this area **Job agents 5** - `azure_sql.job_agents.delete` Deletes a job agent destructive - `azure_sql.job_agents.get` Gets a job agent read - and 3 more in this area **Managed server DNS aliases 5** - `azure_sql.managed_server_dns_aliases.acquire` Acquires managed server DNS alias from another managed server destructive - `azure_sql.managed_server_dns_aliases.delete` Deletes the managed server DNS alias with the given name destructive - and 3 more in this area **Server DNS aliases 5** - `azure_sql.server_dns_aliases.acquire` Acquires server DNS alias from another server destructive - `azure_sql.server_dns_aliases.delete` Deletes the server DNS alias with the given name destructive - and 3 more in this area **Server trust groups 5** - `azure_sql.server_trust_groups.delete` Deletes a server trust group destructive - `azure_sql.server_trust_groups.get` Gets a server trust group read - and 3 more in this area **Transparent data encryptions 5** - `azure_sql.transparent_data_encryptions.get` Gets a logical database's transparent data encryption read - `azure_sql.transparent_data_encryptions.list_by_database` Gets a list of the logical database's transparent data encryption read - and 3 more in this area **Backup short term retention policies 4** - `azure_sql.backup_short_term_retention_policies.create_or_update` Updates a database's short term retention policy write - `azure_sql.backup_short_term_retention_policies.get` Gets a database's short term retention policy read - and 2 more in this area **Database SQL vulnerability assessment rule baselines 4** - `azure_sql.database_sql_vulnerability_assessment_rule_baselines.create_or_update` Creates or updates a database's vulnerability assessment rule baseline write - `azure_sql.database_sql_vulnerability_assessment_rule_baselines.delete` Removes the database's vulnerability assessment rule baseline destructive - and 2 more in this area **Database vulnerability assessment scans 4** - `azure_sql.database_vulnerability_assessment_scans.export` Convert an existing scan result to a human readable format write - `azure_sql.database_vulnerability_assessment_scans.get` Gets a vulnerability assessment scan record of a database read - and 2 more in this area **Database vulnerability assessments 4** - `azure_sql.database_vulnerability_assessments.create_or_update` Creates or updates the database's vulnerability assessment write - `azure_sql.database_vulnerability_assessments.delete` Removes the database's vulnerability assessment destructive - and 2 more in this area Deleted servers **4** Encryption protectors **4** Ipv6 firewall rules **4** Job credentials **4** Job private endpoints **4** Job target groups **4** Jobs **4** Ledger digest uploads **4** Managed backup short term retention policies **4** Managed database vulnerability assessment scans **4** Managed database vulnerability assessments **4** Managed instance administrators **4** Managed instance azure ad only authentications **4** Managed instance encryption protectors **4** Managed instance keys **4** Managed instance long term retention policies **4** Managed instance private endpoint connections **4** Managed instance vulnerability assessments **4** Managed ledger digest uploads **4** Managed restorable dropped database backup short term retention policies **4** Outbound firewall rules **4** Private endpoint connections **4** Restore points **4** Server azure ad administrators **4** Server azure ad only authentications **4** Server keys **4** Server trust certificates **4** Server vulnerability assessments **4** Start stop managed instance schedules **4** Virtual network rules **4** Workload classifiers **4** Workload groups **4** Database advanced threat protection settings **3** Database advisors **3** Database blob auditing policies **3** Database columns **3** Database extensions **3** Database recommended actions **3** Database security alert policies **3** Database SQL vulnerability assessment baselines **3** Database vulnerability assessment rule baselines **3** Extended database blob auditing policies **3** Extended server blob auditing policies **3** Geo backup policies **3** Job target executions **3** Long term retention policies **3** Managed database advanced threat protection settings **3** Managed database columns **3** Managed database security alert policies **3** Managed database transparent data encryption **3** Managed database vulnerability assessment rule baselines **3** Managed instance advanced threat protection settings **3** Managed instance DTCS **3** Managed instance operations **3** Managed server security alert policies **3** Network security perimeter configurations **3** Server advanced threat protection settings **3** Server advisors **3** Server blob auditing policies **3** Server configuration options **3** Server connection policies **3** Server dev ops audit settings **3** Server security alert policies **3** SQL vulnerability assessment rule baseline **3** SQL vulnerability assessments settings **3** Data masking policies **2** Data masking rules **2** Data warehouse user activities **2** Database automatic tuning **2** Database encryption protectors **2** Database operations **2** Database schemas **2** Database SQL vulnerability assessment scan result **2** Database SQL vulnerability assessment scans **2** Database SQL vulnerability assessments settings **2** Database tables **2** Elastic pool operations **2** Endpoint certificates **2** Instance pool operations **2** Job step executions **2** Job versions **2** Maintenance windows **2** Managed database move operations **2** Managed database queries **2** Managed database schemas **2** Managed database tables **2** Managed instance private link resources **2** Private link resources **2** Recoverable databases **2** Recoverable managed databases **2** Restorable dropped databases **2** Restorable dropped managed databases **2** Server automatic tuning **2** SQL agent **2** SQL vulnerability assessment baseline **2** SQL vulnerability assessment scan result **2** SQL vulnerability assessment scans **2** Subscription usages **2** Subscriptions **2** Time zones **2** Capabilities **1** Database SQL vulnerability assessment execute scan **1** Database usages **1** Maintenance window options **1** Managed database recommended sensitivity labels **1** Managed database restore details **1** Managed database security events **1** Managed instance tde certificates **1** Operations **1** Recommended sensitivity labels **1** Resource groups **1** Server operations **1** Server usages **1** SQL vulnerability assessment baselines **1** SQL vulnerability assessment execute scan **1** SQL vulnerability assessment rule baselines **1** SQL vulnerability assessments **1** Synapse link workspaces **1** Tde certificates **1** Usages **1** This index shows a sample of each area. All 548 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Azure SQL Database MCP server, answered. **Is there an Azure SQL Database MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 548 Azure SQL Database actions across long term retention backups, managed instances, databases and managed databases, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure SQL Database. **What do I need to connect Azure SQL Database?** Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_sql" } lists exactly what to paste. **Can an AI agent delete or change things in Azure SQL Database?** Only if its key allows it, and only with an explicit confirmation. 96 Azure SQL Database actions are destructive, including deletes the database, deletes a server and generates a sync agent key. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Azure SQL Database API limit?** actionlake paces every call to the limits in the Azure SQL Database service file: 200 calls a minute per connection. Repeated reads are answered from cache (297 Azure SQL Database actions can be), which never reaches Azure SQL Database. **What does an Azure SQL Database action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (164 Azure SQL Database actions page). Cache hits, searches, dry runs and calls Azure SQL Database refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Azure SQL Database API does it cover?** The Azure SQL Database and SQL Managed Instance (servers, databases, elastic pools, firewall rules, backups, failover, security) API Azure Resource Manager Microsoft.Sql 2025-01-01 at management.azure.com. It is built from Azure SQL Database's documentation as read on 23 October 2026. 548 actions in 150 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Azure SQL Database data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure SQL Database credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Azure SQL Database Shares the most action names with - [Azure Kubernetes Service (AKS) 2](https://actionlake.com/connectors/azure-kubernetes-service-aks) - [Azure Container Apps 2](https://actionlake.com/connectors/azure-container-apps) - [Azure Resource Manager 2](https://actionlake.com/connectors/azure-resource-manager) - [Azure Storage 1](https://actionlake.com/connectors/azure-storage) - [Azure Virtual Desktop 1](https://actionlake.com/connectors/azure-virtual-desktop) - [Microsoft Defender for Cloud 1](https://actionlake.com/connectors/microsoft-defender-for-cloud) Joins with, on shared entities - [PlanetScale 2](https://actionlake.com/connectors/planetscale) - [Slack 1](https://actionlake.com/connectors/slack) - [Gusto 1](https://actionlake.com/connectors/gusto) - [Microsoft 365 Users 1](https://actionlake.com/connectors/microsoft-365-users) - [Cloudflare 1](https://actionlake.com/connectors/cloudflare) - [Amazon Ads API 1](https://actionlake.com/connectors/amazon-ads-api) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Azure SQL Database; the name is the vendor's own. Counts are from the Azure SQL Database service file, version 1.0.0. ## Give your agent Azure SQL Database today. [Connect Azure SQL Database free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/azure-sql-database More: https://actionlake.com/llms.txt