Connectors · Developer & infrastructure
Baserow MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Baserow and the rest of your systems. It gives your agent 400 Baserow actions (153 reads, 183 writes and 64 that wait for a confirmation) and holds the Baserow credential itself, so the agent never does. It paces Baserow's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "baserow.admin_users.list", intent: "check which Baserow account is connected"}# admin users list · read · 1 upstream call- 400actionsin one signed file
- 153readlook, never change
- 183writecreate and update
- 64wait for a yesdestructive, confirmed first
Set up
Connect Baserow in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Baserow.
Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key.
emailEmail address of the Baserow account actionlake signs in aspasswordPassword of that Baserow account. actionlake exchanges it at /api/user/token-auth/ for a 10-minute JWThostWhere your Baserow lives: your host
account { op: "connections.requirements", service: "baserow" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "baserow.admin_users.list" }# admin users list · read · 1 upstream callcheck { action: "baserow.admin_user.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Baserow at a glance
- Sign-in
- Session login. actionlake opens the session and renews it when it expires.
- You provide
emailpassword- Setup fields
host- Limits we pace to
- 10 calls a second, per connection
- API covered
- Baserow REST API 2.4.1 (OpenAPI 3.0.3)
api.baserow.io - Built from
- Baserow's documentation, read 23 October 2026api.baserow.iobaserow.io
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 138 of 153 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 5, so ask can line Baserow up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Baserow.
400 actions in 235 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 153readlook, never change
- 183writecreate and update
- 64destructivewait for a confirmation
Automation node
70 read · 6 write · 1 destructive
automation node create · automation node duplicate · automation node move · automation node replace
Automation workflow
61 read · 4 write · 1 destructive
automation workflow create · automation workflow publish · automation workflow test · automation workflow get
Workspace invitation
61 read · 3 write · 2 destructive
workspace invitation accept · workspace invitation create · workspace invitation get · workspace invitation update
Admin data scanner scan
51 read · 3 write · 1 destructive
admin data scanner scan create · admin data scanner scan trigger · admin data scanner scan get · admin data scanner scan update
Builder page data source
50 read · 4 write · 1 destructive
builder page data source create · builder page data source dispatch · builder page data source move · builder page data source update
Builder page element
50 read · 4 write · 1 destructive
builder page element create · builder page element duplicate · builder page element move · builder page element update
Database table row
51 read · 3 write · 1 destructive
database table row create · database table row get · database table row move · database table row update
Database table view
51 read · 3 write · 1 destructive
database table view create · database table view duplicate · database table view get · database table view update
112 more areas · 356 actions
- Database table webhook 5
- Database token 5
- Admin license 4
- Admin user 4
- Application integration 4
- Application user source 4
- Auth provider 4
- Builder domain 4
- Builder page workflow action 4
- Database table 4
- Database table field 4
- Database table rows 4
- Database table view decoration 4
- Database table view filter 4
- Database table view filter group 4
- Database table view group 4
- Database table view sort 4
- Job 4
- MCP endpoint 4
- Two factor auth 4
- User source token 4
- User token 4
- Workspace 4
- Workspace application 4
- AI provider 3
- AI provider model 3
- Builder page 3
- Dashboard widget 3
- Database field workflow action 3
- Database field workflow actions 3
- Field rule 3
- Row comment 3
- Snapshot 3
- Subject 3
- Team 3
- Admin audit log 2
- Admin data scanner results 2
- Agent 2
- AI provider models 2
- Automation workflow history 2
- Builder domains 2
- Builder page data sources 2
- Dashboard data source 2
- Database table async 2
- Database table grid view rows 2
- Database table view field options 2
- Database table view sortings 2
- Database table views 2
- Database tables 2
- Email 2
- Field permissions 2
- Form view edit row 2
- MCP oauth consent 2
- Me 2
- Password 2
- Periodic data sync interval 2
- Public builder page data sources 2
- Role 2
- Settings 2
- Table data sync 2
- Trash contents 2
- User action 2
- Workspace applications 2
- Workspace applications async 2
- Workspace audit log 2
- Workspace notifications 2
- Workspace user 2
- Workspaces 2
- Abuse report 1
- Adjacent database table row 1
- Admin all users from license 1
- Admin audit log action types 1
- Admin audit log actors 1
- Admin dashboard 1
- Admin data scanner result 1
- Admin data scanner scans 1
- Admin data scanner workspace structure 1
- Admin database view 1
- Admin database view slug 1
- Admin database views 1
- Admin license users 1
- Admin licenses 1
- Admin seats of license 1
- Admin user from license 1
- Admin user to license 1
- Admin user two factor auth 1
- Admin users 1
- Admin workspace 1
- Admin workspaces 1
- Admin workspaces as options 1
- AI provider feature setting 1
- AI provider feature settings 1
- AI provider model usage 1
- AI provider types 1
- AI providers 1
- All applications 1
- All token tables 1
- Application async 1
- Application integrations 1
- Application user source roles 1
- Application user source users 1
- Application user sources 1
- Assistant chat messages 1
- Assistant chats 1
- Assistant message 1
- Assistant message feedback 1
- Assistant onboarding prompt suggestions 1
- Auth provider login URL 1
- Auth providers 1
- Auth providers login options 1
- Automation node histories 1
- 116 smaller areas 116
Top actions
The Baserow API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 18 of Baserow's 18 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
baserow.admin_users.listadmin users list | Returns all users with detailed information on each user, if the requesting user is staff. | read | identity.user.list474 connectors |
baserow.database_tables.listdatabase tables list | Lists all the tables that are in the database related to the `database_id` parameter if the user has access to the database's workspace. A table is exactly as… | read | content.table.list21 connectors |
baserow.admin_user.createadmin user create | Creates and returns a new user if the requesting user is staff. This works even if new signups are disabled. | write | identity.user.create262 connectors |
baserow.workspaces.listworkspaces list | Lists all the workspaces of the authorized user. A workspace can contain multiple applications like a database. Multiple users can have access to a workspace.… | read | work.workspace.list50 connectors |
baserow.database_table.createdatabase table create | Creates synchronously a new table for the database related to the provided `database_id` parameter if the authorized user has access to the database's… | write | content.table.create16 connectors |
baserow.admin_user.deleteadmin user delete | Deletes the specified user, if the requesting user has admin permissions. You cannot delete yourself. | destructive | identity.user.delete253 connectors |
baserow.workspace.createworkspace create | Creates a new workspace where only the authorized user has access to. No initial data like database applications are added, they have to be created via other… | write | work.workspace.create36 connectors |
baserow.row_comments.listrow comments list | Returns all row comments for the specified table and row. | read | content.record_comment.list22 connectors |
baserow.row_comment.createrow comment create | Creates a comment on the specified row. | write | content.record_comment.create21 connectors |
baserow.workspace_users.listworkspace users list | Lists all the users that are in a workspace if the authorized user has admin permissions to the related workspace. To add a user to a workspace an invitation… | read | this connector |
baserow.workspace_applications.listworkspace applications list | Lists all the applications of the workspace related to the provided `workspace_id` parameter if the authorized user is in that workspace. If theworkspace is… | read | this connector |
baserow.workspace_search.queryworkspace search query | Search across all searchable content within a workspace. | read | platform.search_result.search18 connectors |
Try it
Prompts to paste into Claude.
Each one names the Baserow actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Baserow? List every user and their role.
calls
baserow.admin_users.list - Writewrite
admin user create in Baserow. Show me exactly what you will send before you save it.
calls
baserow.admin_user.create
Governance for Baserow
Destructive actions wait for a yes.
64 Baserow actions are destructive. The first 10:
- admin user delete
baserow.admin_user.delete - database table delete
baserow.database_table.delete - workspace delete
baserow.workspace.delete - row comment delete
baserow.row_comment.delete - role assign
baserow.role.assign - team delete
baserow.team.delete - agent delete
baserow.agent.delete - password reset
baserow.password.reset - subject delete
baserow.subject.delete - snapshot delete
baserow.snapshot.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
admin user delete?
intent: the user asked me to admin user delete
account { op: "keys.create", name: "baserow-agent", allowed_actions: ["baserow.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "baserow.admin_user.delete", approver: "[email protected]" }, { match: "baserow.database_table.delete", approver: "[email protected]" }, { match: "baserow.workspace.delete", approver: "[email protected]" } ]}Cost
What Baserow costs on actionlake.
Every Baserow action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Baserow refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 400 Baserow actions
- 400actions pageeach page of a long list is one call
- 138reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Baserow action.
400 actions by area: the id your agent calls, what it does, and its effect.
Automation node7
baserow.automation_node.createautomation node createwritebaserow.automation_node.duplicateautomation node duplicatewrite- and 5 more in this area
Automation workflow6
baserow.automation_workflow.createautomation workflow createwritebaserow.automation_workflow.getautomation workflow getread- and 4 more in this area
Workspace invitation6
baserow.workspace_invitation.acceptworkspace invitation acceptwritebaserow.workspace_invitation.createworkspace invitation createwrite- and 4 more in this area
Admin data scanner scan5
baserow.admin_data_scanner_scan.createadmin data scanner scan createwritebaserow.admin_data_scanner_scan.getadmin data scanner scan getread- and 3 more in this area
Builder page data source5
baserow.builder_page_data_source.createbuilder page data source createwritebaserow.builder_page_data_source.dispatchbuilder page data source dispatchwrite- and 3 more in this area
Builder page element5
baserow.builder_page_element.createbuilder page element createwritebaserow.builder_page_element.duplicatebuilder page element duplicatewrite- and 3 more in this area
Database table row5
baserow.database_table_row.createdatabase table row createwritebaserow.database_table_row.getdatabase table row getread- and 3 more in this area
Database table view5
baserow.database_table_view.createdatabase table view createwritebaserow.database_table_view.duplicatedatabase table view duplicatewrite- and 3 more in this area
Database table webhook5
baserow.database_table_webhook.createdatabase table webhook createwritebaserow.database_table_webhook.getdatabase table webhook getread- and 3 more in this area
Database token5
baserow.database_token.checkdatabase token checkreadbaserow.database_token.createdatabase token createwrite- and 3 more in this area
Admin license4
baserow.admin_license.checkadmin license checkreadbaserow.admin_license.getadmin license getread- and 2 more in this area
Admin user4
baserow.admin_user.createadmin user createwritebaserow.admin_user.deleteadmin user deletedestructive- and 2 more in this area
Application integration4
baserow.application_integration.createapplication integration createwritebaserow.application_integration.deleteapplication integration deletedestructive- and 2 more in this area
Application user source4
baserow.application_user_source.createapplication user source createwritebaserow.application_user_source.deleteapplication user source deletedestructive- and 2 more in this area
Auth provider4
baserow.auth_provider.createauth provider createwritebaserow.auth_provider.deleteauth provider deletedestructive- and 2 more in this area
Builder domain4
baserow.builder_domain.createbuilder domain createwritebaserow.builder_domain.deletebuilder domain deletedestructive- and 2 more in this area
Builder page workflow action4
baserow.builder_page_workflow_action.createbuilder page workflow action createwritebaserow.builder_page_workflow_action.deletebuilder page workflow action deletedestructive- and 2 more in this area
Database table4
baserow.database_table.createdatabase table createwritebaserow.database_table.deletedatabase table deletedestructive- and 2 more in this area
Database table field4
baserow.database_table_field.createdatabase table field createwritebaserow.database_table_field.deletedatabase table field deletedestructive- and 2 more in this area
Database table rows4
baserow.database_table_rows.batch_createdatabase table rows batch createwritebaserow.database_table_rows.batch_deletedatabase table rows batch deletedestructive- and 2 more in this area
Database table view decoration4
baserow.database_table_view_decoration.createdatabase table view decoration createwritebaserow.database_table_view_decoration.deletedatabase table view decoration deletedestructive- and 2 more in this area
Database table view filter4
baserow.database_table_view_filter.createdatabase table view filter createwritebaserow.database_table_view_filter.deletedatabase table view filter deletedestructive- and 2 more in this area
Database table view filter group4
baserow.database_table_view_filter_group.createdatabase table view filter group createwritebaserow.database_table_view_filter_group.deletedatabase table view filter group deletedestructive- and 2 more in this area
Database table view group4
baserow.database_table_view_group.createdatabase table view group createwritebaserow.database_table_view_group.deletedatabase table view group deletedestructive- and 2 more in this area
Database table view sort4
baserow.database_table_view_sort.createdatabase table view sort createwritebaserow.database_table_view_sort.deletedatabase table view sort deletedestructive- and 2 more in this area
Job4
baserow.job.canceljob canceldestructivebaserow.job.createjob createwrite- and 2 more in this area
MCP endpoint4
baserow.mcp_endpoint.createmcp endpoint createwritebaserow.mcp_endpoint.deletemcp endpoint deletedestructive- and 2 more in this area
Two factor auth4
baserow.two_factor_auth.configuretwo factor auth configurewritebaserow.two_factor_auth.disabletwo factor auth disabledestructive- and 2 more in this area
User source token4
baserow.user_source_token.authuser source token authwritebaserow.user_source_token.blacklistuser source token blacklistdestructive- and 2 more in this area
User token4
baserow.user_token.authuser token authwritebaserow.user_token.blacklistuser token blacklistdestructive- and 2 more in this area
Workspace 4Workspace application 4AI provider 3AI provider model 3Builder page 3Dashboard widget 3Database field workflow action 3Database field workflow actions 3Field rule 3Row comment 3Snapshot 3Subject 3Team 3Admin audit log 2Admin data scanner results 2Agent 2AI provider models 2Automation workflow history 2Builder domains 2Builder page data sources 2Dashboard data source 2Database table async 2Database table grid view rows 2Database table view field options 2Database table view sortings 2Database table views 2Database tables 2Email 2Field permissions 2Form view edit row 2MCP oauth consent 2Me 2Password 2Periodic data sync interval 2Public builder page data sources 2Role 2Settings 2Table data sync 2Trash contents 2User action 2Workspace applications 2Workspace applications async 2Workspace audit log 2Workspace notifications 2Workspace user 2Workspaces 2Abuse report 1Adjacent database table row 1Admin all users from license 1Admin audit log action types 1Admin audit log actors 1Admin dashboard 1Admin data scanner result 1Admin data scanner scans 1Admin data scanner workspace structure 1Admin database view 1Admin database view slug 1Admin database views 1Admin license users 1Admin licenses 1Admin seats of license 1Admin user from license 1Admin user to license 1Admin user two factor auth 1Admin users 1Admin workspace 1Admin workspaces 1Admin workspaces as options 1AI provider feature setting 1AI provider feature settings 1AI provider model usage 1AI provider types 1AI providers 1All applications 1All token tables 1Application async 1Application integrations 1Application user source roles 1Application user source users 1Application user sources 1Assistant chat messages 1Assistant chats 1Assistant message 1Assistant message feedback 1Assistant onboarding prompt suggestions 1Auth provider login URL 1Auth providers 1Auth providers login options 1Automation node histories 1116 smaller areas 116
This index shows a sample of each area. All 400 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Baserow MCP server, answered.
Is there a Baserow MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 400 Baserow actions across automation node, automation workflow, workspace invitation and admin data scanner scan, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Baserow.
What do I need to connect Baserow?
Email address of the Baserow account actionlake signs in as and Password of that Baserow account. actionlake exchanges it at /api/user/token-auth/ for a 10-minute JWT. Plus your host. The free call account { op: "connections.requirements", service: "baserow" } lists exactly what to paste.
Can an AI agent delete or change things in Baserow?
Only if its key allows it, and only with an explicit confirmation. 64 Baserow actions are destructive, including admin user delete, database table delete and workspace delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Baserow API limit?
actionlake paces every call to the limits in the Baserow service file: 10 calls a second per connection. Repeated reads are answered from cache (138 Baserow actions can be), which never reaches Baserow.
What does a Baserow action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (400 Baserow actions page). Cache hits, searches, dry runs and calls Baserow refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Baserow API does it cover?
The Baserow REST API 2.4.1 (OpenAPI 3.0.3) at api.baserow.io by default, or the base URL set when you connect. It is built from Baserow's documentation as read on 23 October 2026. 400 actions in 235 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Baserow data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Baserow credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Baserow today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
