Skip to content

Connectors · MSP & PSA

Commvault Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Commvault Cloud and the rest of your systems. It gives your agent 1,752 Commvault Cloud actions (645 reads, 956 writes and 151 that wait for a confirmation) and holds the Commvault Cloud credential itself, so the agent never does. It paces Commvault Cloud's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "commvault.alerts.get_alerts_triggered",  intent: "check which Commvault Cloud account is connected"}# Get Alerts Triggered · read · 1 upstream call
  • 1,752actionsin one signed file
  • 645readlook, never change
  • 956writecreate and update
  • 151wait for a yesdestructive, confirmed first

Set up

Connect Commvault Cloud in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Commvault Cloud.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • access_tokenCommvault access token, sent as `Authorization
    • hostWhere your Commvault Cloud lives: your host
    account { op: "connections.requirements", service: "commvault" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "commvault.alerts.get_alerts_triggered" }# get alerts triggered · read · 1 upstream callcheck { action: "commvault.user.create_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Commvault Cloud at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
access_token
Setup fields
host
Limits we pace to
10 calls a second, per connection
API covered
Commvault REST API, public reference 'latest' (Commvault Platform Release 11.x, /commandcenter/api), at your Commvault Cloud instance's API base URL, which you enter when connecting
Built from
Commvault Cloud's documentation, read 23 October 2026api.commvault.comdocumentation.commvault.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
626 of 645 reads, for up to 5 minutes; a write clears what it affects
Shared entities
6, so ask can line Commvault Cloud up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Commvault Cloud.

1,752 actions in 309 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 645readlook, never change
  • 956writecreate and update
  • 151destructivewait for a confirmation
  1. General

    49

    8 read · 39 write · 2 destructive

    Check Conditional Access Policy Configuration · Create Atlassian Trello instance · Create Audit Plan For Workload · Create AWS AgentCore instance

  2. Kubernetes

    32

    16 read · 12 write · 4 destructive

    Browse all namespaces of a Kubernetes cluster · Browse all storage classes of a Kubernetes cluster · Content browse applications in a namespace · Content browse labels in a namespace

  3. Commcell

    28

    3 read · 25 write · 0 destructive

    Get list of downloadable packages in the Commcell · Allow users to enable data privacy · Allow users to enable passkey · Deny users to enable data privacy

  4. Server plan

    28

    7 read · 16 write · 5 destructive

    Run backups on server plan associated entities · Run backups on server plan associated entities based on existing schedule · Clone the backupdestination of the plan · Create Backup Destination for Server Plan

  5. Plan operations

    26

    11 read · 15 write · 0 destructive

    Create a Plan · Get Eligible Plans · Get Plan Alerts · Get Plan Associations

  6. Hypervisor operations

    24

    13 read · 10 write · 1 destructive

    Deploy Access Node · Browse the Inventory of your hypervisor by hypervisor ID · Create Hyper-V Virtualization Client (v1) · Create a Hypervisor

  7. Alerts

    22

    7 read · 11 write · 4 destructive

    Get Alerts Triggered · Get details of triggered alert · Create Alert Definitions · Get Alert Custom Rules List

  8. Plan

    22

    10 read · 11 write · 1 destructive

    Create backup destination (without Plan) · Create Plan V5 · Get associated media agents detail for a Plan · Get all the associated entities of backupdestination.

112 more areas · 1,521 actions
  • Organization operations 21
  • Client operations 20
  • Cloud storage 18
  • Control panel operations 17
  • Server group 17
  • Servers 17
  • Tape storage 17
  • VM group operations 16
  • Archive plan 15
  • Data cube operations 15
  • Laptop plan 15
  • Regions 15
  • Snapshot operations 15
  • Job operations 14
  • Plan rules 14
  • Storage resource operations 14
  • User operations 14
  • Virtual machines 14
  • Apps 13
  • Array management 13
  • Credential manager 13
  • CVFS 13
  • Disk storage 13
  • Identity servers 13
  • Local storage 13
  • Recovery runbook 13
  • Alert operations 12
  • Aws document DB 12
  • Recovery group 12
  • Schedule and schedule policy operations 12
  • Storage policy operations 12
  • Dashboard 11
  • Failover groups 11
  • Media agent 11
  • Reports 11
  • Storage 11
  • Teams 11
  • VM operations 11
  • Backup set operations 10
  • Company 10
  • Failover group operations 10
  • Protection group 10
  • Salesforce 10
  • Subclient operations 10
  • Udvnfs share 10
  • VM provisioning 10
  • Aws dynamo DB 9
  • Azure blob 9
  • Azure data lake storage gen2 9
  • Blackout windows 9
  • Client group operations 9
  • DR backup 9
  • Exchange 9
  • Hyper scale storage 9
  • Object storage 9
  • One drive 9
  • RDS snap 9
  • Replication group 9
  • Replication monitor 9
  • Sharepoint 9
  • Snapshot configurations 9
  • Aws redshift 8
  • Cloud connection 8
  • Compliance 8
  • Data discovery 8
  • Instances 8
  • Inventory operations 8
  • Sybase databases 8
  • Total cost of ownership 8
  • User group operations 8
  • Aws maria DB 7
  • File servers 7
  • GCP big query 7
  • Metallic users 7
  • Operation window operations 7
  • Recovery target 7
  • Request operations 7
  • S3 vault 7
  • Workflow operations 7
  • Agent 6
  • Alibaba my SQL 6
  • Azure file 6
  • Cyber resilience 6
  • H base 6
  • Library operations 6
  • License report 6
  • Mongo DB 6
  • Office365 6
  • Roles 6
  • Software cache 6
  • Splunk 6
  • Topology 6
  • User 6
  • User group 6
  • Access tokens 5
  • Accounts 5
  • Additional settings 5
  • Aggregator 5
  • Anomaly alerts 5
  • Aws my SQL 5
  • Aws oracle 5
  • Azure cloud DB cosmos DB cassandra API 5
  • Cassandra 5
  • Cockroach DB 5
  • Commcell group 5
  • Couchbase 5
  • Credentials manager 5
  • Databricks 5
  • Entity tag 5
  • External endpoint manager 5
  • Hive 5
  • 190 smaller areas 467

Top actions

The Commvault Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 21 of Commvault Cloud's 22 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
commvault.user.get_usersGet UsersGet All Usersreadidentity.user.list474 connectors
commvault.user_group.get_user_groupsGet UserGroupsGet a list of existing user groupsreadidentity.group.list262 connectors
commvault.roles.get_list_of_rolesGet a list of all the rolesGet a list of all the rolesreadidentity.role.list184 connectors
commvault.user.create_userCreateUserCreate a Userwriteidentity.user.create262 connectors
commvault.user_group.create_user_groupCreate User groupCreate a new user-groupwriteidentity.group.create205 connectors
commvault.alerts.get_alerts_triggeredGet Alerts TriggeredGet List Of Alerts Triggeredreadmonitoring.alert.list51 connectors
commvault.roles.create_new_roleCreate a RoleCreate a new rolewriteidentity.role.create105 connectors
commvault.user.delete_userDelete an UserUsed to delete a userdestructiveidentity.user.delete253 connectors
commvault.alerts.get_triggered_alert_detailsGet details of triggered alertGet details of triggered alertreadmonitoring.alert.get33 connectors
commvault.job_operations.get_list_of_jobsGet List of JobsThis operation returns a list of jobs for a clientreadsecurity.backup_job.list3 connectors
commvault.servers.get_serversGet ServersThis end point returns the list of serversreadthis connector
commvault.company.get_companiesGet CompaniesGet All Companiesreadthis connector

Try it

Prompts to paste into Claude.

Each one names the Commvault Cloud actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which Commvault Cloud alerts are open right now? Group them by service.

    callscommvault.alerts.get_alerts_triggered

  2. Writewrite

    CreateUser in Commvault Cloud. Show me exactly what you will send before you save it.

    callscommvault.user.create_user

  3. Across systemsread

    Which Commvault Cloud companies have invoices in NetSuite, and how many each?

    callscommvault.company.get_companiesnetsuite.views.invoices

Across your systems

Commvault Cloud, joined to the rest of your business.

One ask fetches from Commvault Cloud and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which Commvault Cloud companies have invoices in NetSuite, and how many each?

    commvault.company.get_companies + netsuite.views.invoices, on crm.company · NetSuite

  • Which Commvault Cloud companies have tickets in HubSpot CRM, and how many each?

    commvault.company.get_companies + hubspot_crm.tickets.list, on crm.company · HubSpot CRM

Also mapped by other connectorsidentity.user 517identity.group 239crm.company 227identity.role 107device.endpoint 69monitoring.alert 56
ask
ask {  intent: "which Commvault Cloud companies have invoices in NetSuite, and how many each",  steps: [    { action: "commvault.company.get_companies", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "netsuite.views.invoices", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Commvault Cloud

Destructive actions wait for a yes.

151 Commvault Cloud actions are destructive. The first 10:

  • Delete an Usercommvault.user.delete_user
  • Delete User Groupcommvault.user_group.delete_user_group
  • Delete a rolecommvault.roles.delete_roles
  • Kill a Jobcommvault.job_operations.kill_a_job
  • Delete a companycommvault.company.delete_company
  • Retire Multiple Serverscommvault.servers.retire_servers
  • Delete a Server Plancommvault.server_plan.delete_plan
  • Retire Servers of a Server groupcommvault.servers.retire_server_group
  • Add Media Agent License for a Clientcommvault.servers.add_media_agent_role
  • Disable Usercommvault.user_operations.disable_user

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

docommvault.user.delete_userconfirm_policy: human

Delete an User?

intent: the user asked me to delete an User

run suspended · waiting for a named person · key commvault-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "commvault-agent",  allowed_actions: ["commvault.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "commvault.user.delete_user", approver: "[email protected]" },    { match: "commvault.user_group.delete_user_group", approver: "[email protected]" },    { match: "commvault.roles.delete_roles", approver: "[email protected]" }  ]}
Illustrative. Scoped to Commvault Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Commvault Cloud costs on actionlake.

Every Commvault Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Commvault Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 1,752 Commvault Cloud actions
  • 1,752actions pageeach page of a long list is one call
  • 626reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Commvault Cloud action.

1,752 actions by area: the id your agent calls, what it does, and its effect.

General49
  • commvault.general.check_conditional_access_policyCheck Conditional Access Policy Configurationread
  • commvault.general.create_atlassian_trello_instanceCreate Atlassian Trello instancewrite
  • and 47 more in this area
Kubernetes32
  • commvault.kubernetes.browse_kubernetes_namespacesBrowse all namespaces of a Kubernetes clusterread
  • commvault.kubernetes.browse_kubernetes_storage_classBrowse all storage classes of a Kubernetes clusterread
  • and 30 more in this area
Commcell28
  • commvault.commcell.allowdataprivacyAllow users to enable data privacywrite
  • commvault.commcell.allowpasskeyAllow users to enable passkeywrite
  • and 26 more in this area
Server plan28
  • commvault.server_plan.backup_server_planRun backups on server plan associated entitieswrite
  • commvault.server_plan.backup_server_plan_run_rpoRun backups on server plan associated entities based on existing schedulewrite
  • and 26 more in this area
Plan operations26
  • commvault.plan_operations.create_planCreate a Planwrite
  • commvault.plan_operations.get_eligible_plansGet Eligible Plansread
  • and 24 more in this area
Hypervisor operations24
  • commvault.hypervisor_operations.access_nodeDeploy Access Nodewrite
  • commvault.hypervisor_operations.browse_hypervisor_inventoryBrowse the Inventory of your hypervisor by hypervisor IDread
  • and 22 more in this area
Alerts22
  • commvault.alerts.create_alert_definitionsCreate Alert Definitionswrite
  • commvault.alerts.get_alert_custom_rules_listGet Alert Custom Rules Listread
  • and 20 more in this area
Plan22
  • commvault.plan.create_backup_destination_without_plan_infoCreate backup destination (without Plan)write
  • commvault.plan.create_plan_v_5Create Plan V5write
  • and 20 more in this area
Organization operations21
  • commvault.organization_operations.create_a_companyCreate a Company (v1)write
  • commvault.organization_operations.get_all_companiesGet all Companies (v1)read
  • and 19 more in this area
Client operations20
  • commvault.client_operations.create_pseudo_clientCreate Pseudo Clientwrite
  • commvault.client_operations.get_all_client_additional_settingsGet All Client Additional Settingsread
  • and 18 more in this area
Cloud storage18
  • commvault.cloud_storage.create_access_path_for_bucket_of_cloud_storageCreateAccessPathForBucketOfCloudStoragewrite
  • commvault.cloud_storage.create_bucketfor_cloud_storageCreate a new bucket for a specific cloud storagewrite
  • and 16 more in this area
Control panel operations17
  • commvault.control_panel_operations.create_a_custom_calendarCreate a Custom Calendarwrite
  • commvault.control_panel_operations.create_a_http_proxy_serverCreate an HTTP Proxy Serverwrite
  • and 15 more in this area
Server group17
  • commvault.server_group.create_server_groupsCreate a Server Groupwrite
  • commvault.server_group.disable_backup_server_groupDisable backups for ServerGroupwrite
  • and 15 more in this area
Servers17
  • commvault.servers.change_server_domainChange domain for serverswrite
  • commvault.servers.get_server_comm_serve_host_nameGet CommServe for serversread
  • and 15 more in this area
Tape storage17
  • commvault.tape_storage.fetch_tape_media_detailsFetchTapeMediaDetailsread
  • commvault.tape_storage.get_info_for_discover_mediaGet Info for Discover Media Operationread
  • and 15 more in this area
VM group operations16
  • commvault.vm_group_operations.create_vm_groupCreate a VM Groupwrite
  • commvault.vm_group_operations.get_details_of_all_vm_groupsGet VM Groupsread
  • and 14 more in this area
Archive plan15
  • commvault.archive_plan.clone_archive_plan_backup_destinationClone the backupdestination of the planwrite
  • commvault.archive_plan.create_archive_backup_destinationCreateArchiveBackupDestinationwrite
  • and 13 more in this area
Data cube operations15
  • commvault.data_cube_operations.create_a_data_sourceCreate a Data Sourcewrite
  • commvault.data_cube_operations.datasourcesDatasourcesread
  • and 13 more in this area
Laptop plan15
  • commvault.laptop_plan.clone_laptop_plan_backup_destinationClone the backupdestination of the planwrite
  • commvault.laptop_plan.create_laptop_backup_destinationCreate a LaptopPlan BackupDestinationwrite
  • and 13 more in this area
Regions15
  • commvault.regions.create_a_new_regionCreate a new Region (v1)write
  • commvault.regions.create_regionCreate Regionwrite
  • and 13 more in this area
Snapshot operations15
  • commvault.snapshot_operations.get_snap_listGet Snap Listread
  • commvault.snapshot_operations.get_subclients_for_replicationGet subclients for replicationread
  • and 13 more in this area
Job operations14
  • commvault.job_operations.get_active_jobsGet Active Jobsread
  • commvault.job_operations.get_job_detailsGet Job Detailsread
  • and 12 more in this area
Plan rules14
  • commvault.plan_rules.create_plan_ruleCreate a Plan Rulewrite
  • commvault.plan_rules.get_plan_rule_associated_entitiesGet entities applicable for plan associationread
  • and 12 more in this area
Storage resource operations14
  • commvault.storage_resource_operations.add_controller_for_mountpathAdd controller for mountpathwrite
  • commvault.storage_resource_operations.get_all_media_agentsGet All MediaAgent IDsread
  • and 12 more in this area
User operations14
  • commvault.user_operations.create_an_userCreate User (v1)write
  • commvault.user_operations.enable_userEnable Userwrite
  • and 12 more in this area
Virtual machines14
  • commvault.virtual_machines.create_kubernetesclusterCreateKubernetesclusterwrite
  • commvault.virtual_machines.get_access_nodesGet Access Nodesread
  • and 12 more in this area
Apps13
  • commvault.apps.add_data_sourceAdd Data Sourcewrite
  • commvault.apps.create_a_new_projectCreate a new Projectwrite
  • and 11 more in this area
Array management13
  • commvault.array_management.add_storage_arrayAdd storage arraywrite
  • commvault.array_management.arraysArraysread
  • and 11 more in this area
Credential manager13
  • commvault.credential_manager.create_credentialCreate Credentialwrite
  • commvault.credential_manager.create_credential_v_6Create Credentialwrite
  • and 11 more in this area
CVFS13
  • commvault.cvfs.create_cvfs_s_3_bucketCreate CVFS S3 Bucket of given propertieswrite
  • commvault.cvfs.create_s_3_bucket_cloneCreate the bucket clonewrite
  • and 11 more in this area

Disk storage 13Identity servers 13Local storage 13Recovery runbook 13Alert operations 12Aws document DB 12Recovery group 12Schedule and schedule policy operations 12Storage policy operations 12Dashboard 11Failover groups 11Media agent 11Reports 11Storage 11Teams 11VM operations 11Backup set operations 10Company 10Failover group operations 10Protection group 10Salesforce 10Subclient operations 10Udvnfs share 10VM provisioning 10Aws dynamo DB 9Azure blob 9Azure data lake storage gen2 9Blackout windows 9Client group operations 9DR backup 9Exchange 9Hyper scale storage 9Object storage 9One drive 9RDS snap 9Replication group 9Replication monitor 9Sharepoint 9Snapshot configurations 9Aws redshift 8Cloud connection 8Compliance 8Data discovery 8Instances 8Inventory operations 8Sybase databases 8Total cost of ownership 8User group operations 8Aws maria DB 7File servers 7GCP big query 7Metallic users 7Operation window operations 7Recovery target 7Request operations 7S3 vault 7Workflow operations 7Agent 6Alibaba my SQL 6Azure file 6Cyber resilience 6H base 6Library operations 6License report 6Mongo DB 6Office365 6Roles 6Software cache 6Splunk 6Topology 6User 6User group 6Access tokens 5Accounts 5Additional settings 5Aggregator 5Anomaly alerts 5Aws my SQL 5Aws oracle 5Azure cloud DB cosmos DB cassandra API 5Cassandra 5Cockroach DB 5Commcell group 5Couchbase 5Credentials manager 5Databricks 5Entity tag 5External endpoint manager 5Hive 5190 smaller areas 467

This index shows a sample of each area. All 1,752 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Commvault Cloud MCP server, answered.

Is there a Commvault Cloud MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,752 Commvault Cloud actions across general, kubernetes, commcell and server plan, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Commvault Cloud.

What do I need to connect Commvault Cloud?

Commvault access token, sent as `Authorization. Plus your host. The free call account { op: "connections.requirements", service: "commvault" } lists exactly what to paste.

Can an AI agent delete or change things in Commvault Cloud?

Only if its key allows it, and only with an explicit confirmation. 151 Commvault Cloud actions are destructive, including delete an User, delete User Group and delete a role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Commvault Cloud API limit?

actionlake paces every call to the limits in the Commvault Cloud service file: 10 calls a second per connection. Repeated reads are answered from cache (626 Commvault Cloud actions can be), which never reaches Commvault Cloud.

What does a Commvault Cloud action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,752 Commvault Cloud actions page). Cache hits, searches, dry runs and calls Commvault Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Commvault Cloud API does it cover?

The Commvault REST API, public reference 'latest' (Commvault Platform Release 11.x, /commandcenter/api) at your Commvault Cloud instance's API base URL, which you enter when connecting. It is built from Commvault Cloud's documentation as read on 23 October 2026. 1,752 actions in 309 areas, each one in the signed service file (version 1.0.0).

Can I combine Commvault Cloud with my other systems?

Yes. ask joins Commvault Cloud to NetSuite or HubSpot CRM on the same customer and returns the answer rather than every row. Commvault Cloud maps crm.company, which 227 other connectors also map.

Does actionlake keep my Commvault Cloud data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Commvault Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Commvault Cloud today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.