--- title: "Baserow MCP server for AI agents - actionlake" description: "Give Claude 400 Baserow actions through one MCP server: automation node, automation workflow. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/baserow updated: 2026-10-23 --- Connectors · Developer & infrastructure # Baserow MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Baserow and the rest of your systems. It gives your agent 400 Baserow actions (153 reads, 183 writes and 64 that wait for a confirmation) and holds the Baserow credential itself, so the agent never does. It paces Baserow's limits and records every call. [Connect Baserow free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "baserow.admin_users.list", intent: "check which Baserow account is connected" } # admin users list · read · 1 upstream call ``` - 400 actions in one signed file - 153 read look, never change - 183 write create and update - 64 wait for a yes destructive, confirmed first Set up ## Connect Baserow in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Baserow. Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key. - `email` Email address of the Baserow account actionlake signs in as - `password` Password of that Baserow account. actionlake exchanges it at /api/user/token-auth/ for a 10-minute JWT - `host` Where your Baserow lives: your host ``` account { op: "connections.requirements", service: "baserow" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "baserow.admin_users.list" } # admin users list · read · 1 upstream call check { action: "baserow.admin_user.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Baserow at a glance **Sign-in** Session login. actionlake opens the session and renews it when it expires. **You provide** `email` `password` **Setup fields** `host` **Limits we pace to** 10 calls a second, per connection **API covered** Baserow REST API 2.4.1 (OpenAPI 3.0.3)`api.baserow.io` **Built from** Baserow's documentation, read 23 October 2026[api.baserow.io](https://api.baserow.io/api/schema.json) [baserow.io](https://baserow.io/api-docs) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 138 of 153 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 5, so ask can line Baserow up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Baserow. 400 actions in 235 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **153** read look, never change - **183** write create and update - **64** destructive wait for a confirmation 1. ### Automation node 7 0 read · 6 write · 1 destructive automation node create · automation node duplicate · automation node move · automation node replace 2. ### Automation workflow 6 1 read · 4 write · 1 destructive automation workflow create · automation workflow publish · automation workflow test · automation workflow get 3. ### Workspace invitation 6 1 read · 3 write · 2 destructive workspace invitation accept · workspace invitation create · workspace invitation get · workspace invitation update 4. ### Admin data scanner scan 5 1 read · 3 write · 1 destructive admin data scanner scan create · admin data scanner scan trigger · admin data scanner scan get · admin data scanner scan update 5. ### Builder page data source 5 0 read · 4 write · 1 destructive builder page data source create · builder page data source dispatch · builder page data source move · builder page data source update 6. ### Builder page element 5 0 read · 4 write · 1 destructive builder page element create · builder page element duplicate · builder page element move · builder page element update 7. ### Database table row 5 1 read · 3 write · 1 destructive database table row create · database table row get · database table row move · database table row update 8. ### Database table view 5 1 read · 3 write · 1 destructive database table view create · database table view duplicate · database table view get · database table view update **112 more areas · 356 actions** - Database table webhook **5** - Database token **5** - Admin license **4** - Admin user **4** - Application integration **4** - Application user source **4** - Auth provider **4** - Builder domain **4** - Builder page workflow action **4** - Database table **4** - Database table field **4** - Database table rows **4** - Database table view decoration **4** - Database table view filter **4** - Database table view filter group **4** - Database table view group **4** - Database table view sort **4** - Job **4** - MCP endpoint **4** - Two factor auth **4** - User source token **4** - User token **4** - Workspace **4** - Workspace application **4** - AI provider **3** - AI provider model **3** - Builder page **3** - Dashboard widget **3** - Database field workflow action **3** - Database field workflow actions **3** - Field rule **3** - Row comment **3** - Snapshot **3** - Subject **3** - Team **3** - Admin audit log **2** - Admin data scanner results **2** - Agent **2** - AI provider models **2** - Automation workflow history **2** - Builder domains **2** - Builder page data sources **2** - Dashboard data source **2** - Database table async **2** - Database table grid view rows **2** - Database table view field options **2** - Database table view sortings **2** - Database table views **2** - Database tables **2** - Email **2** - Field permissions **2** - Form view edit row **2** - MCP oauth consent **2** - Me **2** - Password **2** - Periodic data sync interval **2** - Public builder page data sources **2** - Role **2** - Settings **2** - Table data sync **2** - Trash contents **2** - User action **2** - Workspace applications **2** - Workspace applications async **2** - Workspace audit log **2** - Workspace notifications **2** - Workspace user **2** - Workspaces **2** - Abuse report **1** - Adjacent database table row **1** - Admin all users from license **1** - Admin audit log action types **1** - Admin audit log actors **1** - Admin dashboard **1** - Admin data scanner result **1** - Admin data scanner scans **1** - Admin data scanner workspace structure **1** - Admin database view **1** - Admin database view slug **1** - Admin database views **1** - Admin license users **1** - Admin licenses **1** - Admin seats of license **1** - Admin user from license **1** - Admin user to license **1** - Admin user two factor auth **1** - Admin users **1** - Admin workspace **1** - Admin workspaces **1** - Admin workspaces as options **1** - AI provider feature setting **1** - AI provider feature settings **1** - AI provider model usage **1** - AI provider types **1** - AI providers **1** - All applications **1** - All token tables **1** - Application async **1** - Application integrations **1** - Application user source roles **1** - Application user source users **1** - Application user sources **1** - Assistant chat messages **1** - Assistant chats **1** - Assistant message **1** - Assistant message feedback **1** - Assistant onboarding prompt suggestions **1** - Auth provider login URL **1** - Auth providers **1** - Auth providers login options **1** - Automation node histories **1** - 116 smaller areas **116** Top actions ## The Baserow API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 18 of Baserow's 18 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `baserow.admin_users.list` admin users list | Returns all users with detailed information on each user, if the requesting user is staff. | read | `identity.user.list` 474 connectors | | `baserow.database_tables.list` database tables list | Lists all the tables that are in the database related to the `database_id` parameter if the user has access to the database's workspace. A table is exactly as… | read | `content.table.list` 21 connectors | | `baserow.admin_user.create` admin user create | Creates and returns a new user if the requesting user is staff. This works even if new signups are disabled. | write | `identity.user.create` 262 connectors | | `baserow.workspaces.list` workspaces list | Lists all the workspaces of the authorized user. A workspace can contain multiple applications like a database. Multiple users can have access to a workspace.… | read | `work.workspace.list` 50 connectors | | `baserow.database_table.create` database table create | Creates synchronously a new table for the database related to the provided `database_id` parameter if the authorized user has access to the database's… | write | `content.table.create` 16 connectors | | `baserow.admin_user.delete` admin user delete | Deletes the specified user, if the requesting user has admin permissions. You cannot delete yourself. | destructive | `identity.user.delete` 253 connectors | | `baserow.workspace.create` workspace create | Creates a new workspace where only the authorized user has access to. No initial data like database applications are added, they have to be created via other… | write | `work.workspace.create` 36 connectors | | `baserow.row_comments.list` row comments list | Returns all row comments for the specified table and row. | read | `content.record_comment.list` 22 connectors | | `baserow.row_comment.create` row comment create | Creates a comment on the specified row. | write | `content.record_comment.create` 21 connectors | | `baserow.workspace_users.list` workspace users list | Lists all the users that are in a workspace if the authorized user has admin permissions to the related workspace. To add a user to a workspace an invitation… | read | this connector | | `baserow.workspace_applications.list` workspace applications list | Lists all the applications of the workspace related to the provided `workspace_id` parameter if the authorized user is in that workspace. If theworkspace is… | read | this connector | | `baserow.workspace_search.query` workspace search query | Search across all searchable content within a workspace. | read | `platform.search_result.search` 18 connectors | Try it ## Prompts to paste into Claude. Each one names the Baserow actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Baserow? List every user and their role. calls `baserow.admin_users.list` 2. Write write admin user create in Baserow. Show me exactly what you will send before you save it. calls `baserow.admin_user.create` Governance for Baserow ## Destructive actions wait for a yes. 64 Baserow actions are destructive. The first 10: - admin user delete `baserow.admin_user.delete` - database table delete `baserow.database_table.delete` - workspace delete `baserow.workspace.delete` - row comment delete `baserow.row_comment.delete` - role assign `baserow.role.assign` - team delete `baserow.team.delete` - agent delete `baserow.agent.delete` - password reset `baserow.password.reset` - subject delete `baserow.subject.delete` - snapshot delete `baserow.snapshot.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do baserow.admin_user.delete confirm_policy: **human** admin user delete? **intent:** the user asked me to admin user delete run suspended · waiting for a named person · key _baserow-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "baserow-agent", allowed_actions: ["baserow.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "baserow.admin_user.delete", approver: "lead@example.com" }, { match: "baserow.database_table.delete", approver: "lead@example.com" }, { match: "baserow.workspace.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Baserow only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Baserow costs on actionlake. Every Baserow action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Baserow refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 400 Baserow actions - 400 actions page each page of a long list is one call - 138 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Baserow action. 400 actions by area: the id your agent calls, what it does, and its effect. **Automation node 7** - `baserow.automation_node.create` automation node create write - `baserow.automation_node.duplicate` automation node duplicate write - and 5 more in this area **Automation workflow 6** - `baserow.automation_workflow.create` automation workflow create write - `baserow.automation_workflow.get` automation workflow get read - and 4 more in this area **Workspace invitation 6** - `baserow.workspace_invitation.accept` workspace invitation accept write - `baserow.workspace_invitation.create` workspace invitation create write - and 4 more in this area **Admin data scanner scan 5** - `baserow.admin_data_scanner_scan.create` admin data scanner scan create write - `baserow.admin_data_scanner_scan.get` admin data scanner scan get read - and 3 more in this area **Builder page data source 5** - `baserow.builder_page_data_source.create` builder page data source create write - `baserow.builder_page_data_source.dispatch` builder page data source dispatch write - and 3 more in this area **Builder page element 5** - `baserow.builder_page_element.create` builder page element create write - `baserow.builder_page_element.duplicate` builder page element duplicate write - and 3 more in this area **Database table row 5** - `baserow.database_table_row.create` database table row create write - `baserow.database_table_row.get` database table row get read - and 3 more in this area **Database table view 5** - `baserow.database_table_view.create` database table view create write - `baserow.database_table_view.duplicate` database table view duplicate write - and 3 more in this area **Database table webhook 5** - `baserow.database_table_webhook.create` database table webhook create write - `baserow.database_table_webhook.get` database table webhook get read - and 3 more in this area **Database token 5** - `baserow.database_token.check` database token check read - `baserow.database_token.create` database token create write - and 3 more in this area **Admin license 4** - `baserow.admin_license.check` admin license check read - `baserow.admin_license.get` admin license get read - and 2 more in this area **Admin user 4** - `baserow.admin_user.create` admin user create write - `baserow.admin_user.delete` admin user delete destructive - and 2 more in this area **Application integration 4** - `baserow.application_integration.create` application integration create write - `baserow.application_integration.delete` application integration delete destructive - and 2 more in this area **Application user source 4** - `baserow.application_user_source.create` application user source create write - `baserow.application_user_source.delete` application user source delete destructive - and 2 more in this area **Auth provider 4** - `baserow.auth_provider.create` auth provider create write - `baserow.auth_provider.delete` auth provider delete destructive - and 2 more in this area **Builder domain 4** - `baserow.builder_domain.create` builder domain create write - `baserow.builder_domain.delete` builder domain delete destructive - and 2 more in this area **Builder page workflow action 4** - `baserow.builder_page_workflow_action.create` builder page workflow action create write - `baserow.builder_page_workflow_action.delete` builder page workflow action delete destructive - and 2 more in this area **Database table 4** - `baserow.database_table.create` database table create write - `baserow.database_table.delete` database table delete destructive - and 2 more in this area **Database table field 4** - `baserow.database_table_field.create` database table field create write - `baserow.database_table_field.delete` database table field delete destructive - and 2 more in this area **Database table rows 4** - `baserow.database_table_rows.batch_create` database table rows batch create write - `baserow.database_table_rows.batch_delete` database table rows batch delete destructive - and 2 more in this area **Database table view decoration 4** - `baserow.database_table_view_decoration.create` database table view decoration create write - `baserow.database_table_view_decoration.delete` database table view decoration delete destructive - and 2 more in this area **Database table view filter 4** - `baserow.database_table_view_filter.create` database table view filter create write - `baserow.database_table_view_filter.delete` database table view filter delete destructive - and 2 more in this area **Database table view filter group 4** - `baserow.database_table_view_filter_group.create` database table view filter group create write - `baserow.database_table_view_filter_group.delete` database table view filter group delete destructive - and 2 more in this area **Database table view group 4** - `baserow.database_table_view_group.create` database table view group create write - `baserow.database_table_view_group.delete` database table view group delete destructive - and 2 more in this area **Database table view sort 4** - `baserow.database_table_view_sort.create` database table view sort create write - `baserow.database_table_view_sort.delete` database table view sort delete destructive - and 2 more in this area **Job 4** - `baserow.job.cancel` job cancel destructive - `baserow.job.create` job create write - and 2 more in this area **MCP endpoint 4** - `baserow.mcp_endpoint.create` mcp endpoint create write - `baserow.mcp_endpoint.delete` mcp endpoint delete destructive - and 2 more in this area **Two factor auth 4** - `baserow.two_factor_auth.configure` two factor auth configure write - `baserow.two_factor_auth.disable` two factor auth disable destructive - and 2 more in this area **User source token 4** - `baserow.user_source_token.auth` user source token auth write - `baserow.user_source_token.blacklist` user source token blacklist destructive - and 2 more in this area **User token 4** - `baserow.user_token.auth` user token auth write - `baserow.user_token.blacklist` user token blacklist destructive - and 2 more in this area Workspace **4** Workspace application **4** AI provider **3** AI provider model **3** Builder page **3** Dashboard widget **3** Database field workflow action **3** Database field workflow actions **3** Field rule **3** Row comment **3** Snapshot **3** Subject **3** Team **3** Admin audit log **2** Admin data scanner results **2** Agent **2** AI provider models **2** Automation workflow history **2** Builder domains **2** Builder page data sources **2** Dashboard data source **2** Database table async **2** Database table grid view rows **2** Database table view field options **2** Database table view sortings **2** Database table views **2** Database tables **2** Email **2** Field permissions **2** Form view edit row **2** MCP oauth consent **2** Me **2** Password **2** Periodic data sync interval **2** Public builder page data sources **2** Role **2** Settings **2** Table data sync **2** Trash contents **2** User action **2** Workspace applications **2** Workspace applications async **2** Workspace audit log **2** Workspace notifications **2** Workspace user **2** Workspaces **2** Abuse report **1** Adjacent database table row **1** Admin all users from license **1** Admin audit log action types **1** Admin audit log actors **1** Admin dashboard **1** Admin data scanner result **1** Admin data scanner scans **1** Admin data scanner workspace structure **1** Admin database view **1** Admin database view slug **1** Admin database views **1** Admin license users **1** Admin licenses **1** Admin seats of license **1** Admin user from license **1** Admin user to license **1** Admin user two factor auth **1** Admin users **1** Admin workspace **1** Admin workspaces **1** Admin workspaces as options **1** AI provider feature setting **1** AI provider feature settings **1** AI provider model usage **1** AI provider types **1** AI providers **1** All applications **1** All token tables **1** Application async **1** Application integrations **1** Application user source roles **1** Application user source users **1** Application user sources **1** Assistant chat messages **1** Assistant chats **1** Assistant message **1** Assistant message feedback **1** Assistant onboarding prompt suggestions **1** Auth provider login URL **1** Auth providers **1** Auth providers login options **1** Automation node histories **1** 116 smaller areas **116** This index shows a sample of each area. All 400 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Baserow MCP server, answered. **Is there a Baserow MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 400 Baserow actions across automation node, automation workflow, workspace invitation and admin data scanner scan, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Baserow. **What do I need to connect Baserow?** Email address of the Baserow account actionlake signs in as and Password of that Baserow account. actionlake exchanges it at /api/user/token-auth/ for a 10-minute JWT. Plus your host. The free call account { op: "connections.requirements", service: "baserow" } lists exactly what to paste. **Can an AI agent delete or change things in Baserow?** Only if its key allows it, and only with an explicit confirmation. 64 Baserow actions are destructive, including admin user delete, database table delete and workspace delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Baserow API limit?** actionlake paces every call to the limits in the Baserow service file: 10 calls a second per connection. Repeated reads are answered from cache (138 Baserow actions can be), which never reaches Baserow. **What does a Baserow action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (400 Baserow actions page). Cache hits, searches, dry runs and calls Baserow refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Baserow API does it cover?** The Baserow REST API 2.4.1 (OpenAPI 3.0.3) at api.baserow.io by default, or the base URL set when you connect. It is built from Baserow's documentation as read on 23 October 2026. 400 actions in 235 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Baserow data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Baserow credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Baserow Shares the most action names with - [Airtable 14](https://actionlake.com/connectors/airtable) - [SeaTable 8](https://actionlake.com/connectors/seatable) - [Grist 8](https://actionlake.com/connectors/grist) - [Kintone 7](https://actionlake.com/connectors/kintone) - [SmartSuite 5](https://actionlake.com/connectors/smartsuite) - [Google Play Developer API 4](https://actionlake.com/connectors/google-play-developer-api) Joins with, on shared entities - [Appwrite Cloud 3](https://actionlake.com/connectors/appwrite-cloud) - [Metabase 3](https://actionlake.com/connectors/metabase) - [LangSmith 3](https://actionlake.com/connectors/langsmith) - [Tableau 3](https://actionlake.com/connectors/tableau) - [Portkey 3](https://actionlake.com/connectors/portkey) - [Preset 3](https://actionlake.com/connectors/preset) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Baserow; the name is the vendor's own. Counts are from the Baserow service file, version 1.0.0. ## Give your agent Baserow today. [Connect Baserow free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/baserow More: https://actionlake.com/llms.txt