Connectors · MSP & PSA

Azure Storage MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Azure Storage and the rest of your systems. It gives your agent 141 Azure Storage actions (70 reads, 43 writes and 28 that wait for a confirmation) and holds the Azure Storage credential itself, so the agent never does. It paces Azure Storage's limits and records every call.

Connect Azure Storage free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

the first call

do {  action: "azure_storage.subscriptions.list",  intent: "check which Azure Storage account is connected"}# List the subscriptions the credential can see · read · 1 upstream call

141actionsin one signed file
70readlook, never change
43writecreate and update
28wait for a yesdestructive, confirmed first

Set up

Connect Azure Storage in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Azure Storage.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
- client_idEntra application (client) id of a service principal with an Azure RBAC role on the subscription
- client_secretEntra client secret
- tenant_idYour Azure Storage tenant id
```
account { op: "connections.requirements", service: "azure_storage" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "azure_storage.subscriptions.list" }# list the subscriptions the credential can see · read · 1 upstream callcheck { action: "azure_storage.blob_containers.update", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Azure Storage at a glance

Sign-in: OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide: client_idclient_secret
Setup fields: tenant_id
Limits we pace to: 200 calls a minute, per connection
API covered: Azure Storage (storage accounts, keys, blob containers, file shares, queues, tables, lifecycle policies) API Azure Resource Manager Microsoft.Storage: openapi.json (2026-09-01)management.azure.com
Built from: Azure Storage's documentation, read 23 October 2026OpenAPI spec (GitHub)learn.microsoft.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 61 of 70 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 4, so ask can line Azure Storage up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Azure Storage.

141 actions in 32 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

70readlook, never change
43writecreate and update
28destructivewait for a confirmation

Storage accounts
18
8 read · 4 write · 6 destructive
Lists all the storage accounts available under the subscription · Lists all the storage accounts available under the given resource group · Returns the properties for the specified storage account including but not limited to name, SKU name, location, and account status · Gets the status of the ongoing migration for the specified storage account
Blob containers
14
3 read · 6 write · 5 destructive
Lists all containers and does not support a prefix like data plane · Gets properties of a specified container · Updates container properties as specified in request body · Deletes specified container under its account
Blob access point configurations
7
4 read · 2 write · 1 destructive
List all Blob Access Point configurations in a Storage Account · Get the specified Blob Access Point configuration · Test the connection configured on an existing Blob Access Point configuration · Test a proposed Blob Access Point connection before the configuration is created
Context caches
7
4 read · 2 write · 1 destructive
List Context Caches by resource group · List Context Caches by subscription · Get a Context Cache · Check the availability of a context cache resource name
File shares
7
2 read · 4 write · 1 destructive
Lists all shares · Gets properties of a specified share · The Lease Share operation establishes and manages a lock on a share for delete operations · Restore a file share within a valid retention days if share soft delete is enabled
Local users
6
3 read · 1 write · 2 destructive
List the local users associated with the storage account · Get the local user of the storage account by username · List SSH authorized keys and shared key of the local user · Regenerate the local user SSH password
Storage connectors
6
3 read · 2 write · 1 destructive
List all Storage Connectors in a Storage Account · Get the specified Storage Connector · This method is used to verify that the connection to the backing data store works · Update a Storage Connector
Storage task assignments
6
2 read · 2 write · 2 destructive
List all the storage task assignments in an account · Get the storage task assignment properties · Update storage task assignment properties · Delete the storage task assignment sub-resource

24 more areas · 70 actions

Context cache containers 5
Data shares 5
File services 5
Queues 5
Tables 5
Advanced platform metrics 4
Blob inventory policies 4
Encryption scopes 4
Object replication policies 4
Private endpoint connections 4
Blob services 3
Management policies 3
Network security perimeter configurations 3
Queue services 3
Table services 3
Deleted accounts 2
Account task reports 1
Operations 1
Private link resources 1
Resource groups 1
Skus 1
Storage task assignment reports 1
Subscriptions 1
Usages 1

Top actions

The Azure Storage API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 5 of Azure Storage's 6 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`azure_storage.blob_containers.list`Lists all containers and does not support a prefix like data plane	Lists all containers and does not support a prefix like data plane.	read	`infra.bucket.list`3 connectors
`azure_storage.resource_groups.list`List the resource groups in a subscription	List the resource groups in a subscription.	read	`infra.resource_group.list`19 connectors
`azure_storage.blob_containers.get`Gets properties of a specified container	Gets properties of a specified container.	read	`infra.bucket.get`3 connectors
`azure_storage.tables.list`Gets a list of all the tables under the specified storage account	Gets a list of all the tables under the specified storage account.	read	this connector
`azure_storage.subscriptions.list`List the subscriptions the credential can see	List the subscriptions the credential can see.	read	this connector
`azure_storage.storage_accounts.list`Lists all the storage accounts available under the subscription	Lists all the storage accounts available under the subscription.	read	this connector
`azure_storage.blob_containers.update`Updates container properties as specified in request body	Updates container properties as specified in request body.	write	`infra.bucket.update`4 connectors
`azure_storage.blob_containers.delete`Deletes specified container under its account	Deletes specified container under its account.	destructive	`infra.bucket.delete`3 connectors
`azure_storage.skus.list`Lists the available SKUs supported by Microsoft.Storage for given subscription	Lists the available SKUs supported by Microsoft.Storage for given subscription.	read	this connector
`azure_storage.queues.list`Gets a list of all the queues under the specified storage account	Gets a list of all the queues under the specified storage account.	read	this connector
`azure_storage.blob_containers.create`Creates a new container under the specified account as described by request body	Creates a new container under the specified account as described by request body.	write	this connector
`azure_storage.queues.update`Creates a new queue with the specified queue name, under the specified account	Creates a new queue with the specified queue name, under the specified account.	write	this connector

Try it

Prompts to paste into Claude.

Each one names the Azure Storage actions it will call, so you know what it reads and what it changes before you send it.

Readread
List the subscriptions the credential can see in Azure Storage and tell me what stands out.
callsazure_storage.subscriptions.list
Writewrite
Updates container properties as specified in request body in Azure Storage. Show me exactly what you will send before you save it.
callsazure_storage.blob_containers.update

Governance for Azure Storage

Destructive actions wait for a yes.

28 Azure Storage actions are destructive. These are all of them:

Deletes specified container under its accountazure_storage.blob_containers.delete
A failover request can be triggered for a storage account in the event a primary endpoint becomes unavailable for any reasonazure_storage.storage_accounts.failover
Regenerate the local user SSH passwordazure_storage.local_users.regenerate_password
Regenerates one of the access keys or Kerberos keys for the specified storage accountazure_storage.storage_accounts.regenerate_key
Clears legal hold tagsazure_storage.blob_containers.clear_legal_hold
Restore blobs in the specified blob rangesazure_storage.storage_accounts.restore_blob_ranges
Sets the ImmutabilityPolicy to Locked stateazure_storage.blob_containers.lock_immutability_policy
This operation migrates a blob container from container level WORM to object level immutability enabled containerazure_storage.blob_containers.migrate_to_object_level_worm
Live Migration of storage account to enable Hnsazure_storage.storage_accounts.migrate_hierarchical_namespace
Deletes the queue with the specified queue name, under the specified account if it existsazure_storage.queues.delete
Deletes the table with the specified table name, under the specified account if it existsazure_storage.tables.delete
Delete a Storage DataShareazure_storage.data_shares.delete
Deletes specified share under its accountazure_storage.file_shares.delete
Deletes the local user associated with the specified storage accountazure_storage.local_users.delete
Delete a Context Cacheazure_storage.context_caches.delete
Deletes a storage account in Microsoft Azureazure_storage.storage_accounts.delete
Delete a Storage Connectorazure_storage.storage_connectors.delete
Deletes the managementpolicy associated with the specified storage accountazure_storage.management_policies.delete
Deletes the blob inventory policy associated with the specified storage accountazure_storage.blob_inventory_policies.delete
Delete a container from a Context Cacheazure_storage.context_cache_containers.delete
Delete the storage task assignment sub-resourceazure_storage.storage_task_assignments.delete
Delete the advanced platform metrics rule for the storage account by rule typeazure_storage.advanced_platform_metrics.delete
Deletes the object replication policy associated with the specified storage accountazure_storage.object_replication_policies.delete
Deletes the specified private endpoint connection associated with the storage accountazure_storage.private_endpoint_connections.delete
Delete a Blob Access Point configurationazure_storage.blob_access_point_configurations.delete
Aborts an unlocked immutability policyazure_storage.blob_containers.delete_immutability_policy
Revoke user delegation keysazure_storage.storage_accounts.revoke_user_delegation_keys
Stops any active running storage action for the storage task assignmentazure_storage.storage_task_assignments.stop_assignment

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doazure_storage.blob_containers.deleteconfirm_policy: human

Deletes specified container under its account?

intent: the user asked me to deletes specified container under its account

run suspended · waiting for a named person · key azure-storage-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "azure-storage-agent",  allowed_actions: ["azure_storage.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "azure_storage.blob_containers.delete", approver: "[email protected]" },    { match: "azure_storage.storage_accounts.failover", approver: "[email protected]" },    { match: "azure_storage.local_users.regenerate_password", approver: "[email protected]" }  ]}

Illustrative. Scoped to Azure Storage only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Azure Storage costs on actionlake.

Every Azure Storage action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Azure Storage refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 141 Azure Storage actions
30actions pageeach page of a long list is one call
61reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Azure Storage action.

141 actions by area: the id your agent calls, what it does, and its effect.

Storage accounts18

azure_storage.storage_accounts.abort_hierarchical_namespace_migrationAbort live Migration of storage account to enable Hnswrite
azure_storage.storage_accounts.check_name_availabilityChecks that the storage account name is valid and is not already in useread
azure_storage.storage_accounts.createAsynchronously creates a new storage account with the specified parameterswrite
azure_storage.storage_accounts.deleteDeletes a storage account in Microsoft Azuredestructive
azure_storage.storage_accounts.failoverA failover request can be triggered for a storage account in the event a primary endpoint becomes unavailable for any reasondestructive
azure_storage.storage_accounts.getReturns the properties for the specified storage account including but not limited to name, SKU name, location, and account statusread
azure_storage.storage_accounts.get_migrationGets the status of the ongoing migration for the specified storage accountread
azure_storage.storage_accounts.listLists all the storage accounts available under the subscriptionread
azure_storage.storage_accounts.list_account_sasList SAS credentials of a storage accountread
azure_storage.storage_accounts.list_by_resource_groupLists all the storage accounts available under the given resource groupread
azure_storage.storage_accounts.list_keysLists the access keys or Kerberos keys (if active directory enabled) for the specified storage accountread
azure_storage.storage_accounts.list_service_sasList service SAS credentials of a specific resourceread
azure_storage.storage_accounts.migrate_hierarchical_namespaceLive Migration of storage account to enable Hnsdestructive
azure_storage.storage_accounts.regenerate_keyRegenerates one of the access keys or Kerberos keys for the specified storage accountdestructive
azure_storage.storage_accounts.restore_blob_rangesRestore blobs in the specified blob rangesdestructive
azure_storage.storage_accounts.revoke_user_delegation_keysRevoke user delegation keysdestructive
azure_storage.storage_accounts.start_migrationAccount Migration request can be triggered for a storage account to change its redundancy levelwrite
azure_storage.storage_accounts.updateThe update operation can be used to update the SKU, encryption, access tier, or tags for a storage accountwrite

Blob containers14

azure_storage.blob_containers.clear_legal_holdClears legal hold tagsdestructive
azure_storage.blob_containers.createCreates a new container under the specified account as described by request bodywrite
azure_storage.blob_containers.create_or_update_immutability_policyCreates or updates an unlocked immutability policywrite
azure_storage.blob_containers.deleteDeletes specified container under its accountdestructive
azure_storage.blob_containers.delete_immutability_policyAborts an unlocked immutability policydestructive
azure_storage.blob_containers.extend_immutability_policyExtends the immutabilityPeriodSinceCreationInDays of a locked immutabilityPolicywrite
azure_storage.blob_containers.getGets properties of a specified containerread
azure_storage.blob_containers.get_immutability_policyGets the existing immutability policy along with the corresponding ETag in response headers and bodyread
azure_storage.blob_containers.leaseThe Lease Container operation establishes and manages a lock on a container for delete operationswrite
azure_storage.blob_containers.listLists all containers and does not support a prefix like data planeread
azure_storage.blob_containers.lock_immutability_policySets the ImmutabilityPolicy to Locked statedestructive
azure_storage.blob_containers.migrate_to_object_level_wormThis operation migrates a blob container from container level WORM to object level immutability enabled containerdestructive
azure_storage.blob_containers.set_legal_holdSets legal hold tagswrite
azure_storage.blob_containers.updateUpdates container properties as specified in request bodywrite

Blob access point configurations7

azure_storage.blob_access_point_configurations.createCreates or updates a Blob Access Point configurationwrite
azure_storage.blob_access_point_configurations.deleteDelete a Blob Access Point configurationdestructive
azure_storage.blob_access_point_configurations.getGet the specified Blob Access Point configurationread
azure_storage.blob_access_point_configurations.list_by_storage_accountList all Blob Access Point configurations in a Storage Accountread
azure_storage.blob_access_point_configurations.test_existing_connectionTest the connection configured on an existing Blob Access Point configurationread
azure_storage.blob_access_point_configurations.test_proposed_connectionTest a proposed Blob Access Point connection before the configuration is createdread
azure_storage.blob_access_point_configurations.updateUpdate a Blob Access Point configurationwrite

Context caches7

azure_storage.context_caches.check_name_availabilityCheck the availability of a context cache resource nameread
azure_storage.context_caches.create_or_updateCreate or update a Context Cachewrite
azure_storage.context_caches.deleteDelete a Context Cachedestructive
azure_storage.context_caches.getGet a Context Cacheread
azure_storage.context_caches.list_by_resource_groupList Context Caches by resource groupread
azure_storage.context_caches.list_by_subscriptionList Context Caches by subscriptionread
azure_storage.context_caches.updateUpdate a Context Cachewrite

File shares7

azure_storage.file_shares.createCreates a new share under the specified account as described by request bodywrite
azure_storage.file_shares.deleteDeletes specified share under its accountdestructive
azure_storage.file_shares.getGets properties of a specified shareread
azure_storage.file_shares.leaseThe Lease Share operation establishes and manages a lock on a share for delete operationswrite
azure_storage.file_shares.listLists all sharesread
azure_storage.file_shares.restoreRestore a file share within a valid retention days if share soft delete is enabledwrite
azure_storage.file_shares.updateUpdates share properties as specified in request bodywrite

Local users6

azure_storage.local_users.create_or_updateCreate or update the properties of a local user associated with the storage accountwrite
azure_storage.local_users.deleteDeletes the local user associated with the specified storage accountdestructive
azure_storage.local_users.getGet the local user of the storage account by usernameread
azure_storage.local_users.listList the local users associated with the storage accountread
azure_storage.local_users.list_keysList SSH authorized keys and shared key of the local userread
azure_storage.local_users.regenerate_passwordRegenerate the local user SSH passworddestructive

Storage connectors6

azure_storage.storage_connectors.createCreate a Storage Connector if it does not already exist; otherwise, error outwrite
azure_storage.storage_connectors.deleteDelete a Storage Connectordestructive
azure_storage.storage_connectors.getGet the specified Storage Connectorread
azure_storage.storage_connectors.list_by_storage_accountList all Storage Connectors in a Storage Accountread
azure_storage.storage_connectors.test_existing_connectionThis method is used to verify that the connection to the backing data store worksread
azure_storage.storage_connectors.updateUpdate a Storage Connectorwrite

Storage task assignments6

azure_storage.storage_task_assignments.createAsynchronously creates a new storage task assignment sub-resource with the specified parameterswrite
azure_storage.storage_task_assignments.deleteDelete the storage task assignment sub-resourcedestructive
azure_storage.storage_task_assignments.getGet the storage task assignment propertiesread
azure_storage.storage_task_assignments.listList all the storage task assignments in an accountread
azure_storage.storage_task_assignments.stop_assignmentStops any active running storage action for the storage task assignmentdestructive
azure_storage.storage_task_assignments.updateUpdate storage task assignment propertieswrite

Context cache containers5

azure_storage.context_cache_containers.create_or_updateCreate or update a container in a Context Cachewrite
azure_storage.context_cache_containers.deleteDelete a container from a Context Cachedestructive
azure_storage.context_cache_containers.getGet a container in a Context Cacheread
azure_storage.context_cache_containers.list_by_context_cacheList all containers in a Context Cacheread
azure_storage.context_cache_containers.updateUpdate a container in a Context Cachewrite

Data shares5

azure_storage.data_shares.createCreate a Storage DataShare if it does not already exist; otherwise, error outwrite
azure_storage.data_shares.deleteDelete a Storage DataSharedestructive
azure_storage.data_shares.getGet the specified Storage DataShareread
azure_storage.data_shares.list_by_storage_accountList all Storage DataShares in a Storage Accountread
azure_storage.data_shares.updateUpdate a Storage DataSharewrite

File services5

azure_storage.file_services.get_service_propertiesGets the properties of file services in storage accounts, including CORS (Cross-Origin Resource Sharing) rulesread
azure_storage.file_services.get_service_usageGets the usage of file service in storage account including account limits, file share limits and constants used in recommendations and bursting formularead
azure_storage.file_services.listList all file services in storage accountsread
azure_storage.file_services.list_service_usagesGets the usages of file service in storage accountread
azure_storage.file_services.set_service_propertiesSets the properties of file services in storage accounts, including CORS (Cross-Origin Resource Sharing) ruleswrite

Queues5

azure_storage.queues.createCreates a new queue with the specified queue name, under the specified accountwrite
azure_storage.queues.deleteDeletes the queue with the specified queue name, under the specified account if it existsdestructive
azure_storage.queues.getGets the queue with the specified queue name, under the specified account if it existsread
azure_storage.queues.listGets a list of all the queues under the specified storage accountread
azure_storage.queues.updateCreates a new queue with the specified queue name, under the specified accountwrite

Tables5

azure_storage.tables.createCreates a new table with the specified table name, under the specified accountwrite
azure_storage.tables.deleteDeletes the table with the specified table name, under the specified account if it existsdestructive
azure_storage.tables.getGets the table with the specified table name, under the specified account if it existsread
azure_storage.tables.listGets a list of all the tables under the specified storage accountread
azure_storage.tables.updateCreates a new table with the specified table name, under the specified accountwrite

Advanced platform metrics4

azure_storage.advanced_platform_metrics.create_or_updateCreate or update the advanced platform metrics rule for the storage accountwrite
azure_storage.advanced_platform_metrics.deleteDelete the advanced platform metrics rule for the storage account by rule typedestructive
azure_storage.advanced_platform_metrics.getGet the advanced platform metrics rule for the storage account by rule typeread
azure_storage.advanced_platform_metrics.listList the advanced platform metrics rules associated with the storage accountread

Blob inventory policies4

azure_storage.blob_inventory_policies.create_or_updateSets the blob inventory policy to the specified storage accountwrite
azure_storage.blob_inventory_policies.deleteDeletes the blob inventory policy associated with the specified storage accountdestructive
azure_storage.blob_inventory_policies.getGets the blob inventory policy associated with the specified storage accountread
azure_storage.blob_inventory_policies.listGets the blob inventory policy associated with the specified storage accountread

Encryption scopes4

azure_storage.encryption_scopes.getReturns the properties for the specified encryption scoperead
azure_storage.encryption_scopes.listLists all the encryption scopes available under the specified storage accountread
azure_storage.encryption_scopes.patchUpdate encryption scope properties as specified in the request bodywrite
azure_storage.encryption_scopes.putSynchronously creates or updates an encryption scope under the specified storage accountwrite

Object replication policies4

azure_storage.object_replication_policies.create_or_updateCreate or update the object replication policy of the storage accountwrite
azure_storage.object_replication_policies.deleteDeletes the object replication policy associated with the specified storage accountdestructive
azure_storage.object_replication_policies.getGet the object replication policy of the storage account by policy IDread
azure_storage.object_replication_policies.listList the object replication policies associated with the storage accountread

Private endpoint connections4

azure_storage.private_endpoint_connections.deleteDeletes the specified private endpoint connection associated with the storage accountdestructive
azure_storage.private_endpoint_connections.getGets the specified private endpoint connection associated with the storage accountread
azure_storage.private_endpoint_connections.listList all the private endpoint connections associated with the storage accountread
azure_storage.private_endpoint_connections.putUpdate the state of specified private endpoint connection associated with the storage accountwrite

Blob services3

azure_storage.blob_services.get_service_propertiesGets the properties of a storage account’s Blob service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) rulesread
azure_storage.blob_services.listList blob services of storage accountread
azure_storage.blob_services.set_service_propertiesSets the properties of a storage account’s Blob service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) ruleswrite

Management policies3

azure_storage.management_policies.create_or_updateSets the managementpolicy to the specified storage accountwrite
azure_storage.management_policies.deleteDeletes the managementpolicy associated with the specified storage accountdestructive
azure_storage.management_policies.getGets the managementpolicy associated with the specified storage accountread

Network security perimeter configurations3

azure_storage.network_security_perimeter_configurations.getGets effective NetworkSecurityPerimeterConfiguration for associationread
azure_storage.network_security_perimeter_configurations.listGets list of effective NetworkSecurityPerimeterConfiguration for storage accountread
azure_storage.network_security_perimeter_configurations.reconcileRefreshes any information about the associationwrite

Queue services3

azure_storage.queue_services.get_service_propertiesGets the properties of a storage account’s Queue service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) rulesread
azure_storage.queue_services.listList all queue services for the storage accountread
azure_storage.queue_services.set_service_propertiesSets the properties of a storage account’s Queue service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) ruleswrite

Table services3

azure_storage.table_services.get_service_propertiesGets the properties of a storage account’s Table service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) rulesread
azure_storage.table_services.listList all table services for the storage accountread
azure_storage.table_services.set_service_propertiesSets the properties of a storage account’s Table service, including properties for Storage Analytics and CORS (Cross-Origin Resource Sharing) ruleswrite

Deleted accounts2

azure_storage.deleted_accounts.getGet properties of specified deleted account resourceread
azure_storage.deleted_accounts.listLists deleted accounts under the subscriptionread

Account task reports1

azure_storage.account_task_reports.listFetch the report summary of all the storage task assignments and instances in an accountread

Operations1

azure_storage.operations.listLists all of the available Storage Rest API operationsread

Private link resources1

azure_storage.private_link_resources.list_by_storage_accountGets the private link resources that need to be created for a storage accountread

Resource groups1

azure_storage.resource_groups.listList the resource groups in a subscriptionread

Skus1

azure_storage.skus.listLists the available SKUs supported by Microsoft.Storage for given subscriptionread

Storage task assignment reports1

azure_storage.storage_task_assignment_reports.listFetch the report summary of a single storage task assignment's instancesread

Subscriptions1

azure_storage.subscriptions.listList the subscriptions the credential can seeread

Usages1

azure_storage.usages.list_by_locationGets the current usage count and the limit for the resources of the location under the subscriptionread

Questions

The Azure Storage MCP server, answered.

Is there an Azure Storage MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 141 Azure Storage actions across storage accounts, blob containers, blob access point configurations and context caches, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Azure Storage.

What do I need to connect Azure Storage?

Entra application (client) id of a service principal with an Azure RBAC role on the subscription and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "azure_storage" } lists exactly what to paste.

Can an AI agent delete or change things in Azure Storage?

Only if its key allows it, and only with an explicit confirmation. 28 Azure Storage actions are destructive, including deletes specified container under its account, a failover request can be triggered for a storage account in the event a primary endpoint becomes unavailable for any reason and regenerate the local user SSH password. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Azure Storage API limit?

actionlake paces every call to the limits in the Azure Storage service file: 200 calls a minute per connection. Repeated reads are answered from cache (61 Azure Storage actions can be), which never reaches Azure Storage.

What does an Azure Storage action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (30 Azure Storage actions page). Cache hits, searches, dry runs and calls Azure Storage refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Azure Storage API does it cover?

The Azure Storage (storage accounts, keys, blob containers, file shares, queues, tables, lifecycle policies) API Azure Resource Manager Microsoft.Storage: openapi.json (2026-09-01) at management.azure.com. It is built from Azure Storage's documentation as read on 23 October 2026. 141 actions in 32 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Azure Storage data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Azure Storage credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Azure Storage today.

Connect Azure Storage free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

Azure Storage MCP server for AI agents.

Connect Azure Storage in three steps.

Add actionlake to Claude.

Connect Azure Storage.

Make the first call. Check before a write.

What an AI agent can do in Azure Storage.

Storage accounts

Blob containers

Blob access point configurations

Context caches

File shares

Local users

Storage connectors

Storage task assignments