Skip to content
actionlake
Start free

Connectors · Developer & infrastructure

CockroachDB Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to CockroachDB Cloud and the rest of your systems. It gives your agent 161 CockroachDB Cloud actions (72 reads, 59 writes and 30 that wait for a confirmation) and holds the CockroachDB Cloud credential itself, so the agent never does. It paces CockroachDB Cloud's limits and records every call.

Connect CockroachDB Cloud freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "cockroachdb_cloud.organizations.get_organization_info",  intent: "check which CockroachDB Cloud account is connected"}# Get information about the caller's organization · read · 1 upstream call
  • 161actionsin one signed file
  • 72readlook, never change
  • 59writecreate and update
  • 30wait for a yesdestructive, confirmed first

Set up

Connect CockroachDB Cloud in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect CockroachDB Cloud.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyCockroachDB Cloud API key (secret key of a service account), sent as a Bearer token
    account { op: "connections.requirements", service: "cockroachdb_cloud" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "cockroachdb_cloud.organizations.get_organization_info" }# get information about the caller's organization · read · 1 upstream callcheck { action: "cockroachdb_cloud.clusters.create_cluster", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

CockroachDB Cloud at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_key
Limits we pace to
10 calls a second, per connection
API covered
CockroachDB Cloud API 2026-09-15 (OpenAPI 3.0.0)cockroachlabs.cloud
Built from
CockroachDB Cloud's documentation, read 23 October 2026cockroachlabs.cloudcockroachlabs.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
65 of 72 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line CockroachDB Cloud up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in CockroachDB Cloud.

161 actions in 29 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 72readlook, never change
  • 59writecreate and update
  • 30destructivewait for a confirmation

  1. Scim

    21

    13 read · 6 write · 2 destructive

    List Users · List groups · Get a user by ID · Get a group by ID

  2. Metric export

    12

    4 read · 4 write · 4 destructive

    Get the CloudWatch Metric Export configuration for a cluster · Get the Datadog Metric Export configuration for a cluster · Get the OTLP Metric Export configuration for a cluster · Get the Prometheus Metric Export configuration for a cluster

  3. Clusters

    11

    6 read · 4 write · 1 destructive

    List clusters in the organization · Get extended information about a cluster · Create and initialize a new cluster · Create a virtual cluster in a workspace

  4. Private endpoint services

    11

    5 read · 4 write · 2 destructive

    Add a connection to a cluster's private endpoint service · Add a private endpoint trusted owner to a cluster · Create all PrivateEndpointServices for a cluster · List all AwsEndpointConnections for a cluster

  5. Service accounts

    8

    3 read · 3 write · 2 destructive

    List service accounts for an organization · Get a service account by ID · Create a service account · Create an OAuth credential for a service account

  6. Backup restore

    6

    4 read · 2 write · 0 destructive

    Create a restore · List cluster backups · List restore jobs · Get the backup configuration for a cluster

  7. Egress private endpoints

    6

    2 read · 3 write · 1 destructive

    Create an egress private endpoint · List egress private endpoints · Get egress private endpoint · Delete an egress private endpoint

  8. Egress rules

    6

    2 read · 3 write · 1 destructive

    Add an egress rule · List all egress rules associated with a cluster · Get an existing egress rule · Outbound traffic management

21 more areas · 80 actions
  • Folders 6
  • Migration assistant 6
  • Role management 6
  • API keys 5
  • Blackout windows 5
  • Databases 5
  • Ip allowlists 5
  • JWT issuers 5
  • Client ca certificates 4
  • Customer managed encryption keys 4
  • Physical cluster replication 4
  • SQL users 4
  • Billing 3
  • Log export 3
  • Maintenance windows 3
  • Runtime scanning 3
  • Virtual cluster workspaces 3
  • Cluster disruption 2
  • Version deferral 2
  • Audit logs 1
  • Organizations 1

Top actions

The CockroachDB Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 14 of CockroachDB Cloud's 14 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
cockroachdb_cloud.scim.get_usersList UsersList Users.readidentity.user.list474 connectors
cockroachdb_cloud.scim.get_groupsList groupsList groups.readidentity.group.list262 connectors
cockroachdb_cloud.service_accounts.list_service_accountsList service accounts for an organizationList service accounts for an organization.readidentity.service_account.list35 connectors
cockroachdb_cloud.scim.get_userGet a user by IDGet a user by ID.readidentity.user.get399 connectors
cockroachdb_cloud.scim.get_groupGet a group by IDGet a group by ID.readidentity.group.get212 connectors
cockroachdb_cloud.service_accounts.get_service_accountGet a service account by IDGet a service account by ID.readidentity.service_account.get28 connectors
cockroachdb_cloud.api_keys.list_api_keysList API KeysList API Keys.readidentity.api_key.list96 connectors
cockroachdb_cloud.role_management.list_role_grantsList all RoleGrantsList all RoleGrants.readidentity.role_assignment.list41 connectors
cockroachdb_cloud.clusters.create_clusterCreate and initialize a new clusterCreate and initialize a new cluster.writethis connector
cockroachdb_cloud.databases.create_databaseCreate a new databaseCreate a new database.writethis connector
cockroachdb_cloud.sql_users.create_sql_userCreate a new SQL userCreate a new SQL user.writethis connector
cockroachdb_cloud.clusters.delete_clusterDelete a cluster and all of its dataDelete a cluster and all of its data.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the CockroachDB Cloud actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in CockroachDB Cloud? List every user and their role.

    callscockroachdb_cloud.scim.get_users

  2. Writewrite

    Create and initialize a new cluster in CockroachDB Cloud. Show me exactly what you will send before you save it.

    callscockroachdb_cloud.clusters.create_cluster

Governance for CockroachDB Cloud

Destructive actions wait for a yes.

30 CockroachDB Cloud actions are destructive. These are all of them:

  • Delete a cluster and all of its datacockroachdb_cloud.clusters.delete_cluster
  • Delete a databasecockroachdb_cloud.databases.delete_database
  • Delete a SQL usercockroachdb_cloud.sql_users.delete_sql_user
  • Delete an IP allowlist entrycockroachdb_cloud.ip_allowlists.delete_allowlist_entry
  • Delete a service accountcockroachdb_cloud.service_accounts.delete_service_account
  • Delete a service account's OAuth credentialcockroachdb_cloud.service_accounts.delete_service_account_credential
  • Delete a user based on IDcockroachdb_cloud.scim.delete_user
  • Delete a group based on IDcockroachdb_cloud.scim.delete_group
  • Delete a foldercockroachdb_cloud.folders.delete_folder
  • Delete an API Keycockroachdb_cloud.api_keys.delete_api_key
  • Delete the Log Export configuration for a clustercockroachdb_cloud.log_export.delete_log_export
  • Delete a JWT Issuercockroachdb_cloud.jwt_issuers.delete_jwt_issuer
  • Delete an existing egress rulecockroachdb_cloud.egress_rules.delete_egress_rule
  • Add a role to a user, service account, or groupcockroachdb_cloud.role_management.add_user_to_role
  • Replace the roles for a user, service account, or group with exactly those providedcockroachdb_cloud.role_management.set_roles_for_user
  • Remove a role from a user, service account, or groupcockroachdb_cloud.role_management.remove_user_from_role
  • Delete a blackout window for a clustercockroachdb_cloud.blackout_windows.delete_blackout_window
  • Delete the OTLP Metric Export configuration for a clustercockroachdb_cloud.metric_export.delete_otlp_metric_export
  • Delete the Datadog Metric Export configuration for a clustercockroachdb_cloud.metric_export.delete_datadog_metric_export
  • Delete Client CA Cert for a clustercockroachdb_cloud.client_ca_certificates.delete_client_ca_cert
  • Update disruption specifications for a clustercockroachdb_cloud.cluster_disruption.update_cluster_disruption
  • Delete the maintenance window for a clustercockroachdb_cloud.maintenance_windows.delete_maintenance_window
  • Disable Prometheus Metric Export for a clustercockroachdb_cloud.metric_export.delete_prometheus_metric_export
  • Delete the CloudWatch Metric Export configuration for a clustercockroachdb_cloud.metric_export.delete_cloud_watch_metric_export
  • Delete the Migration Assistant for a clustercockroachdb_cloud.migration_assistant.delete_migration_assistant
  • Disable runtime scanning on a clustercockroachdb_cloud.runtime_scanning.disable_cluster_runtime_scanning
  • Delete an egress private endpointcockroachdb_cloud.egress_private_endpoints.delete_egress_private_endpoint
  • Delete a connection from a cluster's private endpoint servicecockroachdb_cloud.private_endpoint_services.delete_private_endpoint_connection
  • Delete the source-database CA certificate for a cluster's Migration Assistantcockroachdb_cloud.migration_assistant.delete_migration_assistant_source_ca_cert
  • Remove a private endpoint trusted owner from a clustercockroachdb_cloud.private_endpoint_services.remove_private_endpoint_trusted_owner

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

docockroachdb_cloud.clusters.delete_clusterconfirm_policy: human

Delete a cluster and all of its data?

intent: the user asked me to delete a cluster and all of its data

run suspended · waiting for a named person · key cockroachdb-cloud-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "cockroachdb-cloud-agent",  allowed_actions: ["cockroachdb_cloud.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "cockroachdb_cloud.clusters.delete_cluster", approver: "[email protected]" },    { match: "cockroachdb_cloud.databases.delete_database", approver: "[email protected]" },    { match: "cockroachdb_cloud.sql_users.delete_sql_user", approver: "[email protected]" }  ]}
Illustrative. Scoped to CockroachDB Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What CockroachDB Cloud costs on actionlake.

Every CockroachDB Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call CockroachDB Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 161 CockroachDB Cloud actions
  • 161actions pageeach page of a long list is one call
  • 65reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every CockroachDB Cloud action.

161 actions by area: the id your agent calls, what it does, and its effect.

Scim21
  • cockroachdb_cloud.scim.create_groupCreate a groupwrite
  • cockroachdb_cloud.scim.create_userCreate a userwrite
  • cockroachdb_cloud.scim.delete_groupDelete a group based on IDdestructive
  • cockroachdb_cloud.scim.delete_userDelete a user based on IDdestructive
  • cockroachdb_cloud.scim.get_groupGet a group by IDread
  • cockroachdb_cloud.scim.get_groupsList groupsread
  • cockroachdb_cloud.scim.get_resource_typeGet a SCIM resource type by IDread
  • cockroachdb_cloud.scim.get_resource_typesList the SCIM resource typesread
  • cockroachdb_cloud.scim.get_schemaGet a SCIM schema by IDread
  • cockroachdb_cloud.scim.get_schemasList the SCIM schemasread
  • cockroachdb_cloud.scim.get_service_provider_configReturn the SCIM Service Provider configurationread
  • cockroachdb_cloud.scim.get_userGet a user by IDread
  • cockroachdb_cloud.scim.get_usersList Usersread
  • cockroachdb_cloud.scim.patch_groupPatch a group by supplying partial updateswrite
  • cockroachdb_cloud.scim.patch_userPatch a user by supplying partial updateswrite
  • cockroachdb_cloud.scim.search_groupSearch a group by IDread
  • cockroachdb_cloud.scim.search_groupsSearch groupsread
  • cockroachdb_cloud.scim.search_userSearch for a user by IDread
  • cockroachdb_cloud.scim.search_usersSearch Usersread
  • cockroachdb_cloud.scim.update_groupUpdate a group by supplying all values of the user objectwrite
  • cockroachdb_cloud.scim.update_userUpdate a user by supplying all values of the user objectwrite
Metric export12
  • cockroachdb_cloud.metric_export.delete_cloud_watch_metric_exportDelete the CloudWatch Metric Export configuration for a clusterdestructive
  • cockroachdb_cloud.metric_export.delete_datadog_metric_exportDelete the Datadog Metric Export configuration for a clusterdestructive
  • cockroachdb_cloud.metric_export.delete_otlp_metric_exportDelete the OTLP Metric Export configuration for a clusterdestructive
  • cockroachdb_cloud.metric_export.delete_prometheus_metric_exportDisable Prometheus Metric Export for a clusterdestructive
  • cockroachdb_cloud.metric_export.enable_cloud_watch_metric_exportCreate or update the CloudWatch Metric Export configuration for a clusterwrite
  • cockroachdb_cloud.metric_export.enable_datadog_metric_exportCreate or update the Datadog Metric Export configuration for a clusterwrite
  • cockroachdb_cloud.metric_export.enable_otlp_metric_exportCreate or update the OTLP Metric Export configuration for a clusterwrite
  • cockroachdb_cloud.metric_export.enable_prometheus_metric_exportEnable Prometheus Metric Export for a clusterwrite
  • cockroachdb_cloud.metric_export.get_cloud_watch_metric_export_infoGet the CloudWatch Metric Export configuration for a clusterread
  • cockroachdb_cloud.metric_export.get_datadog_metric_export_infoGet the Datadog Metric Export configuration for a clusterread
  • cockroachdb_cloud.metric_export.get_otlp_metric_export_infoGet the OTLP Metric Export configuration for a clusterread
  • cockroachdb_cloud.metric_export.get_prometheus_metric_export_infoGet the Prometheus Metric Export configuration for a clusterread
Clusters11
  • cockroachdb_cloud.clusters.create_clusterCreate and initialize a new clusterwrite
  • cockroachdb_cloud.clusters.create_virtual_clusterCreate a virtual cluster in a workspacewrite
  • cockroachdb_cloud.clusters.delete_clusterDelete a cluster and all of its datadestructive
  • cockroachdb_cloud.clusters.get_clusterGet extended information about a clusterread
  • cockroachdb_cloud.clusters.get_connection_stringGet a formatted generic connection string for a clusterread
  • cockroachdb_cloud.clusters.list_available_regionsList the regions available for new clusters and nodesread
  • cockroachdb_cloud.clusters.list_cluster_nodesList nodes for a clusterread
  • cockroachdb_cloud.clusters.list_clustersList clusters in the organizationread
  • cockroachdb_cloud.clusters.list_major_cluster_versionsList available major cluster versionsread
  • cockroachdb_cloud.clusters.update_clusterScale, edit or upgrade a clusterwrite
  • cockroachdb_cloud.clusters.update_virtual_clusterUpdate a specific virtual clusterwrite
Private endpoint services11
  • cockroachdb_cloud.private_endpoint_services.add_private_endpoint_connectionAdd a connection to a cluster's private endpoint servicewrite
  • cockroachdb_cloud.private_endpoint_services.add_private_endpoint_trusted_ownerAdd a private endpoint trusted owner to a clusterwrite
  • cockroachdb_cloud.private_endpoint_services.create_private_endpoint_servicesCreate all PrivateEndpointServices for a clusterwrite
  • cockroachdb_cloud.private_endpoint_services.delete_private_endpoint_connectionDelete a connection from a cluster's private endpoint servicedestructive
  • cockroachdb_cloud.private_endpoint_services.get_private_endpoint_trusted_ownerGet a private endpoint trusted owner entry for a clusterread
  • cockroachdb_cloud.private_endpoint_services.list_aws_endpoint_connectionsList all AwsEndpointConnections for a clusterread
  • cockroachdb_cloud.private_endpoint_services.list_private_endpoint_connectionsList all connections to a cluster's private endpoint serviceread
  • cockroachdb_cloud.private_endpoint_services.list_private_endpoint_servicesList all PrivateEndpointServices for a clusterread
  • cockroachdb_cloud.private_endpoint_services.list_private_endpoint_trusted_ownersList all private endpoint trusted owners for a clusterread
  • cockroachdb_cloud.private_endpoint_services.remove_private_endpoint_trusted_ownerRemove a private endpoint trusted owner from a clusterdestructive
  • cockroachdb_cloud.private_endpoint_services.set_aws_endpoint_connection_stateSet the AWS Endpoint Connection statewrite
Service accounts8
  • cockroachdb_cloud.service_accounts.create_service_accountCreate a service accountwrite
  • cockroachdb_cloud.service_accounts.create_service_account_credentialCreate an OAuth credential for a service accountwrite
  • cockroachdb_cloud.service_accounts.delete_service_accountDelete a service accountdestructive
  • cockroachdb_cloud.service_accounts.delete_service_account_credentialDelete a service account's OAuth credentialdestructive
  • cockroachdb_cloud.service_accounts.get_service_accountGet a service account by IDread
  • cockroachdb_cloud.service_accounts.list_service_account_credentialsList a service account's OAuth credentialsread
  • cockroachdb_cloud.service_accounts.list_service_accountsList service accounts for an organizationread
  • cockroachdb_cloud.service_accounts.update_service_accountUpdate a service accountwrite
Backup restore6
  • cockroachdb_cloud.backup_restore.create_restoreCreate a restorewrite
  • cockroachdb_cloud.backup_restore.get_backup_configurationGet the backup configuration for a clusterread
  • cockroachdb_cloud.backup_restore.get_restoreView a restore jobread
  • cockroachdb_cloud.backup_restore.list_backupsList cluster backupsread
  • cockroachdb_cloud.backup_restore.list_restoresList restore jobsread
  • cockroachdb_cloud.backup_restore.update_backup_configurationUpdate the backup configuration for a clusterwrite
Egress private endpoints6
  • cockroachdb_cloud.egress_private_endpoints.create_egress_private_endpointCreate an egress private endpointwrite
  • cockroachdb_cloud.egress_private_endpoints.delete_egress_private_endpointDelete an egress private endpointdestructive
  • cockroachdb_cloud.egress_private_endpoints.get_egress_private_endpointGet egress private endpointread
  • cockroachdb_cloud.egress_private_endpoints.list_egress_private_endpointsList egress private endpointsread
  • cockroachdb_cloud.egress_private_endpoints.update_egress_private_endpointUpdate egress private endpointwrite
  • cockroachdb_cloud.egress_private_endpoints.update_egress_private_endpoint_domain_namesUpdate egress private endpoint domain names. This endpoint is deprecated in favor of PATCH /api/v1/clusters/{cluster_id}write
Egress rules6
  • cockroachdb_cloud.egress_rules.add_egress_ruleAdd an egress rulewrite
  • cockroachdb_cloud.egress_rules.delete_egress_ruleDelete an existing egress ruledestructive
  • cockroachdb_cloud.egress_rules.edit_egress_ruleEdit an existing egress rulewrite
  • cockroachdb_cloud.egress_rules.get_egress_ruleGet an existing egress ruleread
  • cockroachdb_cloud.egress_rules.list_egress_rulesList all egress rules associated with a clusterread
  • cockroachdb_cloud.egress_rules.set_egress_traffic_policyOutbound traffic managementwrite
Folders6
  • cockroachdb_cloud.folders.create_folderCreate a folderwrite
  • cockroachdb_cloud.folders.delete_folderDelete a folderdestructive
  • cockroachdb_cloud.folders.get_folderGet folder info for a folderread
  • cockroachdb_cloud.folders.list_folder_contentsList contents of a folderread
  • cockroachdb_cloud.folders.list_foldersList folders owned by an organizationread
  • cockroachdb_cloud.folders.update_folderUpdate a folderwrite
Migration assistant6
  • cockroachdb_cloud.migration_assistant.create_migration_assistantProvision a Migration Assistant for a clusterwrite
  • cockroachdb_cloud.migration_assistant.delete_migration_assistantDelete the Migration Assistant for a clusterdestructive
  • cockroachdb_cloud.migration_assistant.delete_migration_assistant_source_ca_certDelete the source-database CA certificate for a cluster's Migration Assistantdestructive
  • cockroachdb_cloud.migration_assistant.get_migration_assistantGet the Migration Assistant for a clusterread
  • cockroachdb_cloud.migration_assistant.get_migration_assistant_source_ca_certGet the source-database CA certificate for a cluster's Migration Assistantread
  • cockroachdb_cloud.migration_assistant.update_migration_assistant_source_ca_certUpdate the source-database CA certificate for a cluster's Migration Assistantwrite
Role management6
  • cockroachdb_cloud.role_management.add_user_to_roleAdd a role to a user, service account, or groupdestructive
  • cockroachdb_cloud.role_management.get_all_roles_for_userGet all role grants for a user, service account, or groupread
  • cockroachdb_cloud.role_management.get_person_users_by_emailSearch person users by email addressread
  • cockroachdb_cloud.role_management.list_role_grantsList all RoleGrantsread
  • cockroachdb_cloud.role_management.remove_user_from_roleRemove a role from a user, service account, or groupdestructive
  • cockroachdb_cloud.role_management.set_roles_for_userReplace the roles for a user, service account, or group with exactly those provideddestructive
API keys5
  • cockroachdb_cloud.api_keys.create_api_keyCreate a new API Keywrite
  • cockroachdb_cloud.api_keys.delete_api_keyDelete an API Keydestructive
  • cockroachdb_cloud.api_keys.get_api_keyGet an API Key by IDread
  • cockroachdb_cloud.api_keys.list_api_keysList API Keysread
  • cockroachdb_cloud.api_keys.update_api_keyUpdate an API Keywrite
Blackout windows5
  • cockroachdb_cloud.blackout_windows.create_blackout_windowCreate a blackout window for a clusterwrite
  • cockroachdb_cloud.blackout_windows.delete_blackout_windowDelete a blackout window for a clusterdestructive
  • cockroachdb_cloud.blackout_windows.get_blackout_windowGet a blackout window by its ID for a clusterread
  • cockroachdb_cloud.blackout_windows.list_blackout_windowsList all blackout windows for a clusterread
  • cockroachdb_cloud.blackout_windows.update_blackout_windowUpdate a blackout window for a clusterwrite
Databases5
  • cockroachdb_cloud.databases.create_databaseCreate a new databasewrite
  • cockroachdb_cloud.databases.delete_databaseDelete a databasedestructive
  • cockroachdb_cloud.databases.edit_databaseUpdate a databasewrite
  • cockroachdb_cloud.databases.edit_database_by_bodyUpdate a databasewrite
  • cockroachdb_cloud.databases.list_databasesList databases for a clusterread
Ip allowlists5
  • cockroachdb_cloud.ip_allowlists.add_allowlist_entryAdd a new CIDR address to the IP allowlistwrite
  • cockroachdb_cloud.ip_allowlists.delete_allowlist_entryDelete an IP allowlist entrydestructive
  • cockroachdb_cloud.ip_allowlists.list_allowlist_entriesGet the IP allowlist and propagation status for a clusterread
  • cockroachdb_cloud.ip_allowlists.put_allowlist_entryAdd a new CIDR address to the IP allowlistwrite
  • cockroachdb_cloud.ip_allowlists.update_allowlist_entryUpdate an IP allowlist entrywrite
JWT issuers5
  • cockroachdb_cloud.jwt_issuers.add_jwt_issuerAdd a JWT Issuerwrite
  • cockroachdb_cloud.jwt_issuers.delete_jwt_issuerDelete a JWT Issuerdestructive
  • cockroachdb_cloud.jwt_issuers.get_jwt_issuerGet a JWT Issuerread
  • cockroachdb_cloud.jwt_issuers.list_jwt_issuersList all JWT Issuersread
  • cockroachdb_cloud.jwt_issuers.update_jwt_issuerUpdate a JWT Issuerwrite
Client ca certificates4
  • cockroachdb_cloud.client_ca_certificates.delete_client_ca_certDelete Client CA Cert for a clusterdestructive
  • cockroachdb_cloud.client_ca_certificates.get_client_ca_certGet Client CA Cert information for a clusterread
  • cockroachdb_cloud.client_ca_certificates.set_client_ca_certSet Client CA Cert for a clusterwrite
  • cockroachdb_cloud.client_ca_certificates.update_client_ca_certUpdate Client CA Cert for a clusterwrite
Customer managed encryption keys4
  • cockroachdb_cloud.customer_managed_encryption_keys.enable_cmek_specEnable CMEK for a clusterwrite
  • cockroachdb_cloud.customer_managed_encryption_keys.get_cmek_cluster_infoGet CMEK-related information for a clusterread
  • cockroachdb_cloud.customer_managed_encryption_keys.update_cmek_specEnable or update the CMEK spec for a clusterwrite
  • cockroachdb_cloud.customer_managed_encryption_keys.update_cmek_statusUpdate the CMEK-related status for a clusterwrite
Physical cluster replication4
  • cockroachdb_cloud.physical_cluster_replication.create_physical_replication_streamCreate a physical replication streamwrite
  • cockroachdb_cloud.physical_cluster_replication.get_physical_replication_streamGet a physical replication streamread
  • cockroachdb_cloud.physical_cluster_replication.list_physical_replication_streamsList physical replication streamsread
  • cockroachdb_cloud.physical_cluster_replication.update_physical_replication_streamUpdate a physical replication streamwrite
SQL users4
  • cockroachdb_cloud.sql_users.create_sql_userCreate a new SQL userwrite
  • cockroachdb_cloud.sql_users.delete_sql_userDelete a SQL userdestructive
  • cockroachdb_cloud.sql_users.list_sql_usersList SQL users for a clusterread
  • cockroachdb_cloud.sql_users.update_sql_user_passwordUpdate a SQL user's passwordwrite
Billing3
  • cockroachdb_cloud.billing.get_invoiceGet a specific invoice for an organizationread
  • cockroachdb_cloud.billing.list_invoice_daily_usageList an invoice's daily usage breakdownread
  • cockroachdb_cloud.billing.list_invoicesList invoices for a given organizationread
Log export3
  • cockroachdb_cloud.log_export.delete_log_exportDelete the Log Export configuration for a clusterdestructive
  • cockroachdb_cloud.log_export.enable_log_exportCreate or update the Log Export configuration for a clusterwrite
  • cockroachdb_cloud.log_export.get_log_export_infoGet the Log Export configuration for a clusterread
Maintenance windows3
  • cockroachdb_cloud.maintenance_windows.delete_maintenance_windowDelete the maintenance window for a clusterdestructive
  • cockroachdb_cloud.maintenance_windows.get_maintenance_windowGet the maintenance window for a clusterread
  • cockroachdb_cloud.maintenance_windows.set_maintenance_windowSet the maintenance window for a clusterwrite
Runtime scanning3
  • cockroachdb_cloud.runtime_scanning.disable_cluster_runtime_scanningDisable runtime scanning on a clusterdestructive
  • cockroachdb_cloud.runtime_scanning.enable_cluster_runtime_scanningEnable runtime scanning on a clusterwrite
  • cockroachdb_cloud.runtime_scanning.get_cluster_runtime_scanningGet the runtime scanning status of a clusterread
Virtual cluster workspaces3
  • cockroachdb_cloud.virtual_cluster_workspaces.get_virtual_cluster_workspaceShow details for a specific workspaceread
  • cockroachdb_cloud.virtual_cluster_workspaces.list_virtual_cluster_workspacesList workspaces in the organizationread
  • cockroachdb_cloud.virtual_cluster_workspaces.update_virtual_cluster_workspaceUpdate the configuration of a specific workspacewrite
Cluster disruption2
  • cockroachdb_cloud.cluster_disruption.get_cluster_disruption_infoGet disruption specifications for a clusterread
  • cockroachdb_cloud.cluster_disruption.update_cluster_disruptionUpdate disruption specifications for a clusterdestructive
Version deferral2
  • cockroachdb_cloud.version_deferral.get_cluster_version_deferralGet the version upgrade deferral policy for a clusterread
  • cockroachdb_cloud.version_deferral.set_cluster_version_deferralSet the version upgrade deferral policy for a clusterwrite
Audit logs1
  • cockroachdb_cloud.audit_logs.list_audit_logsList audit logsread
Organizations1
  • cockroachdb_cloud.organizations.get_organization_infoGet information about the caller's organizationread

Questions

The CockroachDB Cloud MCP server, answered.

Is there a CockroachDB Cloud MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 161 CockroachDB Cloud actions across scim, metric export, clusters and private endpoint services, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by CockroachDB Cloud.

What do I need to connect CockroachDB Cloud?

CockroachDB Cloud API key (secret key of a service account), sent as a Bearer token. The free call account { op: "connections.requirements", service: "cockroachdb_cloud" } lists exactly what to paste.

Can an AI agent delete or change things in CockroachDB Cloud?

Only if its key allows it, and only with an explicit confirmation. 30 CockroachDB Cloud actions are destructive, including delete a cluster and all of its data, delete a database and delete a SQL user. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my CockroachDB Cloud API limit?

actionlake paces every call to the limits in the CockroachDB Cloud service file: 10 calls a second per connection. Repeated reads are answered from cache (65 CockroachDB Cloud actions can be), which never reaches CockroachDB Cloud.

What does a CockroachDB Cloud action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (161 CockroachDB Cloud actions page). Cache hits, searches, dry runs and calls CockroachDB Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which CockroachDB Cloud API does it cover?

The CockroachDB Cloud API 2026-09-15 (OpenAPI 3.0.0) at cockroachlabs.cloud. It is built from CockroachDB Cloud's documentation as read on 23 October 2026. 161 actions in 29 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my CockroachDB Cloud data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your CockroachDB Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like CockroachDB Cloud

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by CockroachDB Cloud; the name is the vendor's own. Counts are from the CockroachDB Cloud service file, version 1.0.0.

Give your agent CockroachDB Cloud today.

Connect CockroachDB Cloud freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.