Connectors · Data & integration
Confluent Cloud MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Confluent Cloud and the rest of your systems. It gives your agent 309 Confluent Cloud actions (142 reads, 114 writes and 53 that wait for a confirmation) and holds the Confluent Cloud credential itself, so the agent never does. It paces Confluent Cloud's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "confluent_cloud.iam_users.list", intent: "check which Confluent Cloud account is connected"}# List of Users · read · 1 upstream call- 309actionsin one signed file
- 142readlook, never change
- 114writecreate and update
- 53wait for a yesdestructive, confirmed first
Set up
Connect Confluent Cloud in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Confluent Cloud.
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
api_keyConfluent Cloud API key ID (a Cloud resource management key, not a cluster key)api_secretThe Cloud API key's secret, shown once when the key is created
account { op: "connections.requirements", service: "confluent_cloud" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "confluent_cloud.iam_users.list" }# list of users · read · 1 upstream callcheck { action: "confluent_cloud.byok_key.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Confluent Cloud at a glance
- Sign-in
- Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
api_keyapi_secret- Limits we pace to
- 50 calls a second, per connection
- API covered
- Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0)
api.confluent.cloud - Built from
- Confluent Cloud's documentation, read 23 October 2026docs.confluent.iodocs.confluent.io
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 137 of 142 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 2, so ask can line Confluent Cloud up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Confluent Cloud.
309 actions in 150 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 142readlook, never change
- 114writecreate and update
- 53destructivewait for a confirmation
Connect connector
61 read · 4 write · 1 destructive
Read a Connector · Create a Connector · Restart a Connector · Pause a Connector
Notifications integration
51 read · 3 write · 1 destructive
Read an Integration · Create an Integration · Test a Webhook, Slack or Microsoft Teams integration · Update an Integration
Scim user
51 read · 3 write · 1 destructive
Read a User · Create a User · Patch a User · Update a User
Switchover switchover pair
51 read · 3 write · 1 destructive
Read a Switchover Pair · Create a Switchover Pair · Trigger a failover on a switchover pair · Update a Switchover Pair
Artifact flink artifact
41 read · 2 write · 1 destructive
Read a Flink Artifact · Create a new Flink Artifact. · Update a Flink Artifact · Delete a Flink Artifact
Byok key
41 read · 2 write · 1 destructive
Read a Key · Create a Key · Update a Key · Delete a Key
CCL custom code logging
41 read · 2 write · 1 destructive
Read a Custom Code Logging · Create a Custom Code Logging · Update a Custom Code Logging · Delete a Custom Code Logging
CCPM custom connect plugin
41 read · 2 write · 1 destructive
Read a Custom Connect Plugin · Create a Custom Connect Plugin · Update a Custom Connect Plugin · Delete a Custom Connect Plugin
142 more areas · 272 actions
- CDX provider share 4
- CMK cluster 4
- Connect custom connector plugin 4
- FCPM compute pool 4
- IAM API key 4
- IAM certificate authority 4
- IAM certificate identity pool 4
- IAM identity pool 4
- IAM identity provider 4
- IAM ip filter 4
- IAM ip group 4
- IAM service account 4
- IAM SSO group mapping 4
- IAM user 4
- Kafka quotas client quota 4
- Networking access point 4
- Networking DNS forwarder 4
- Networking DNS record 4
- Networking gateway 4
- Networking network 4
- Networking network link endpoint 4
- Networking network link service 4
- Networking peering 4
- Networking private link access 4
- Networking private link attachment 4
- Networking private link attachment connection 4
- Networking transit gateway attachment 4
- Notifications resource preference 4
- Notifications resource subscription 4
- Notifications subscription 4
- Org environment 4
- Switchover switchover endpoint 4
- Cam connect artifact 3
- CCPM custom connect plugin version 3
- CDX provider shared resource 3
- IAM invitation 3
- IAM role binding 3
- Ksqldbcm cluster 3
- Pim V1 integration 3
- Pim V2 integration 3
- SRCM cluster 3
- Usm connect cluster 3
- Usm kafka cluster 3
- CDX consumer share 2
- CDX consumer shared resource 2
- CDX opt in 2
- CDX shared token 2
- Connect connector config 2
- Connect connector plugin 2
- FCPM org compute pool config 2
- Notifications user notification 2
- Notifications user notifications 2
- Org organization 2
- Org scim token 2
- Pim integration 2
- Artifact flink artifacts 1
- Artifact presigned upload URL 1
- Billing costs 1
- Byok keys 1
- Cam connect artifacts 1
- Cam presigned upload URL 1
- CCL custom code loggings 1
- CCPM custom connect plugin versions 1
- CCPM custom connect plugins 1
- CCPM presigned URL 1
- CDX consumer shared resources 1
- CDX consumer shares 1
- CDX provider shared resources 1
- CDX provider shares 1
- CMK clusters 1
- Connect connector offsets 1
- Connect connector offsets request 1
- Connect connector offsets request status 1
- Connect connector plugins 1
- Connect connector status 1
- Connect connector tasks 1
- Connect connectors 1
- Connect connectors with expansions 1
- Connect custom connector plugins 1
- Connect custom connector runtimes 1
- Connect presigned upload URL 1
- Endpoint endpoints 1
- FCPM compute pools 1
- FCPM regions 1
- IAM API keys 1
- IAM certificate authorities 1
- IAM certificate identity pools 1
- IAM identity pools 1
- IAM identity providers 1
- IAM invitations 1
- IAM ip filter summary 1
- IAM ip filters 1
- IAM ip groups 1
- IAM json web key set 1
- IAM role bindings 1
- IAM service accounts 1
- IAM SSO group mappings 1
- IAM users 1
- Kafka quotas client quotas 1
- Ksqldbcm clusters 1
- Networking access points 1
- Networking DNS forwarders 1
- Networking DNS records 1
- Networking gateways 1
- Networking ip addresses 1
- Networking network link endpoints 1
- Networking network link service association 1
- Networking network link service associations 1
- Networking network link services 1
- Networking networks 1
- Networking peerings 1
- Networking private link accesses 1
- Networking private link attachment connections 1
- Networking private link attachments 1
- Networking transit gateway attachments 1
- Notifications integrations 1
- Notifications notification type 1
- Notifications notification types 1
- Notifications resource preference by filter 1
- Notifications resource subscriptions by filter 1
- Notifications subscriptions 1
- Notifications user notifications summary 1
- Org environments 1
- Org organizations 1
- Org scim tokens 1
- Pim V1 integrations 1
- Pim V2 integrations 1
- Scim users 1
- Service quota applied quota 1
- Service quota applied quotas 1
- Service quota scope 1
- Service quota scopes 1
- SRCM region 1
- SRCM regions 1
- SRCM V2 cluster 1
- SRCM V2 clusters 1
- SRCM V3 cluster 1
- SRCM V3 clusters 1
- Switchover switchover endpoints 1
- Switchover switchover pairs 1
- Usm connect clusters 1
- Usm kafka clusters 1
Top actions
The Confluent Cloud API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 5 of Confluent Cloud's 5 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
confluent_cloud.iam_users.listList of Users | Retrieve a sorted, filtered, paginated list of all users. | read | identity.user.list474 connectors |
confluent_cloud.iam_service_accounts.listList of Service Accounts | Retrieve a sorted, filtered, paginated list of all service accounts. | read | identity.service_account.list35 connectors |
confluent_cloud.iam_api_keys.listList of API Keys | Retrieve a sorted, filtered, paginated list of all API keys. | read | identity.api_key.list96 connectors |
confluent_cloud.iam_invitations.listList of Invitations | Retrieve a sorted, filtered, paginated list of all invitations. | read | identity.invitation.list33 connectors |
confluent_cloud.org_environments.listList of Environments | Retrieve a sorted, filtered, paginated list of all environments. | read | devops.environment.list24 connectors |
confluent_cloud.byok_keys.listList of Keys | Retrieve a sorted, filtered, paginated list of all keys. | read | this connector |
confluent_cloud.scim_users.listSearch for Users | Make a request to find a user. | read | this connector |
confluent_cloud.cmk_clusters.listList of Clusters | Retrieve a sorted, filtered, paginated list of all clusters. | read | this connector |
confluent_cloud.byok_key.createCreate a Key | Make a request to create a key. | write | this connector |
confluent_cloud.scim_user.createCreate a User | Make a request to create a user. | write | this connector |
confluent_cloud.cmk_cluster.createCreate a Cluster | Make a request to create a cluster. | write | this connector |
confluent_cloud.byok_key.deleteDelete a Key | Make a request to delete a key. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the Confluent Cloud actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Confluent Cloud? List every user and their role.
calls
confluent_cloud.iam_users.list - Writewrite
Create a Key in Confluent Cloud. Show me exactly what you will send before you save it.
calls
confluent_cloud.byok_key.create
Governance for Confluent Cloud
Destructive actions wait for a yes.
53 Confluent Cloud actions are destructive. The first 10:
- Delete a Key
confluent_cloud.byok_key.delete - Delete a User
confluent_cloud.iam_user.delete - Delete a User
confluent_cloud.scim_user.delete - Delete a Cluster
confluent_cloud.cmk_cluster.delete - Delete an API Key
confluent_cloud.iam_api_key.delete - Delete an IP Group
confluent_cloud.iam_ip_group.delete - Delete a Cluster
confluent_cloud.srcm_cluster.delete - Delete an IP Filter
confluent_cloud.iam_ip_filter.delete - Delete an Invitation
confluent_cloud.iam_invitation.delete - Delete a Scim Token
confluent_cloud.org_scim_token.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete a Key?
intent: the user asked me to delete a Key
account { op: "keys.create", name: "confluent-cloud-agent", allowed_actions: ["confluent_cloud.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "confluent_cloud.byok_key.delete", approver: "[email protected]" }, { match: "confluent_cloud.iam_user.delete", approver: "[email protected]" }, { match: "confluent_cloud.scim_user.delete", approver: "[email protected]" } ]}Cost
What Confluent Cloud costs on actionlake.
Every Confluent Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Confluent Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 309 Confluent Cloud actions
- 309actions pageeach page of a long list is one call
- 137reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Confluent Cloud action.
309 actions by area: the id your agent calls, what it does, and its effect.
Connect connector6
confluent_cloud.connect_connector.createCreate a Connectorwriteconfluent_cloud.connect_connector.pausePause a Connectorwriteconfluent_cloud.connect_connector.readRead a Connectorreadconfluent_cloud.connect_connector.restartRestart a Connectorwriteconfluent_cloud.connect_connector.deleteDelete a Connectordestructiveconfluent_cloud.connect_connector.resumeResume a Connectorwrite
Notifications integration5
confluent_cloud.notifications_integration.createCreate an Integrationwriteconfluent_cloud.notifications_integration.getRead an Integrationreadconfluent_cloud.notifications_integration.testTest a Webhook, Slack or Microsoft Teams integrationwriteconfluent_cloud.notifications_integration.updateUpdate an Integrationwriteconfluent_cloud.notifications_integration.deleteDelete an Integrationdestructive
Scim user5
confluent_cloud.scim_user.createCreate a Userwriteconfluent_cloud.scim_user.getRead a Userreadconfluent_cloud.scim_user.patchPatch a Userwriteconfluent_cloud.scim_user.updateUpdate a Userwriteconfluent_cloud.scim_user.deleteDelete a Userdestructive
Switchover switchover pair5
confluent_cloud.switchover_switchover_pair.createCreate a Switchover Pairwriteconfluent_cloud.switchover_switchover_pair.failoverTrigger a failover on a switchover pairwriteconfluent_cloud.switchover_switchover_pair.getRead a Switchover Pairreadconfluent_cloud.switchover_switchover_pair.updateUpdate a Switchover Pairwriteconfluent_cloud.switchover_switchover_pair.deleteDelete a Switchover Pairdestructive
Artifact flink artifact4
confluent_cloud.artifact_flink_artifact.createCreate a new Flink Artifact.writeconfluent_cloud.artifact_flink_artifact.deleteDelete a Flink Artifactdestructiveconfluent_cloud.artifact_flink_artifact.getRead a Flink Artifactreadconfluent_cloud.artifact_flink_artifact.updateUpdate a Flink Artifactwrite
Byok key4
confluent_cloud.byok_key.createCreate a Keywriteconfluent_cloud.byok_key.deleteDelete a Keydestructiveconfluent_cloud.byok_key.getRead a Keyreadconfluent_cloud.byok_key.updateUpdate a Keywrite
CCL custom code logging4
confluent_cloud.ccl_custom_code_logging.createCreate a Custom Code Loggingwriteconfluent_cloud.ccl_custom_code_logging.deleteDelete a Custom Code Loggingdestructiveconfluent_cloud.ccl_custom_code_logging.getRead a Custom Code Loggingreadconfluent_cloud.ccl_custom_code_logging.updateUpdate a Custom Code Loggingwrite
CCPM custom connect plugin4
confluent_cloud.ccpm_custom_connect_plugin.createCreate a Custom Connect Pluginwriteconfluent_cloud.ccpm_custom_connect_plugin.deleteDelete a Custom Connect Plugindestructiveconfluent_cloud.ccpm_custom_connect_plugin.getRead a Custom Connect Pluginreadconfluent_cloud.ccpm_custom_connect_plugin.updateUpdate a Custom Connect Pluginwrite
CDX provider share4
confluent_cloud.cdx_provider_share.createCreate a provider sharewriteconfluent_cloud.cdx_provider_share.deleteDelete a Provider Sharedestructiveconfluent_cloud.cdx_provider_share.getRead a Provider Sharereadconfluent_cloud.cdx_provider_share.resendResendwrite
CMK cluster4
confluent_cloud.cmk_cluster.createCreate a Clusterwriteconfluent_cloud.cmk_cluster.deleteDelete a Clusterdestructiveconfluent_cloud.cmk_cluster.getRead a Clusterreadconfluent_cloud.cmk_cluster.updateUpdate a Clusterwrite
Connect custom connector plugin4
confluent_cloud.connect_custom_connector_plugin.createCreate a Custom Connector Pluginwriteconfluent_cloud.connect_custom_connector_plugin.deleteDelete a Custom Connector Plugindestructiveconfluent_cloud.connect_custom_connector_plugin.getRead a Custom Connector Pluginreadconfluent_cloud.connect_custom_connector_plugin.updateUpdate a Custom Connector Pluginwrite
FCPM compute pool4
confluent_cloud.fcpm_compute_pool.createCreate a Compute Poolwriteconfluent_cloud.fcpm_compute_pool.deleteDelete a Compute Pooldestructiveconfluent_cloud.fcpm_compute_pool.getRead a Compute Poolreadconfluent_cloud.fcpm_compute_pool.updateUpdate a Compute Poolwrite
IAM API key4
confluent_cloud.iam_api_key.createCreate an API Keywriteconfluent_cloud.iam_api_key.deleteDelete an API Keydestructiveconfluent_cloud.iam_api_key.getRead an API Keyreadconfluent_cloud.iam_api_key.updateUpdate an API Keywrite
IAM certificate authority4
confluent_cloud.iam_certificate_authority.createCreate a Certificate Authoritywriteconfluent_cloud.iam_certificate_authority.deleteDelete a Certificate Authoritydestructiveconfluent_cloud.iam_certificate_authority.getRead a Certificate Authorityreadconfluent_cloud.iam_certificate_authority.updateUpdate a Certificate Authoritywrite
IAM certificate identity pool4
confluent_cloud.iam_certificate_identity_pool.createCreate a Certificate Identity Poolwriteconfluent_cloud.iam_certificate_identity_pool.deleteDelete a Certificate Identity Pooldestructiveconfluent_cloud.iam_certificate_identity_pool.getRead a Certificate Identity Poolreadconfluent_cloud.iam_certificate_identity_pool.updateUpdate a Certificate Identity Poolwrite
IAM identity pool4
confluent_cloud.iam_identity_pool.createCreate an Identity Poolwriteconfluent_cloud.iam_identity_pool.deleteDelete an Identity Pooldestructiveconfluent_cloud.iam_identity_pool.getRead an Identity Poolreadconfluent_cloud.iam_identity_pool.updateUpdate an Identity Poolwrite
IAM identity provider4
confluent_cloud.iam_identity_provider.createCreate an Identity Providerwriteconfluent_cloud.iam_identity_provider.deleteDelete an Identity Providerdestructiveconfluent_cloud.iam_identity_provider.getRead an Identity Providerreadconfluent_cloud.iam_identity_provider.updateUpdate an Identity Providerwrite
IAM ip filter4
confluent_cloud.iam_ip_filter.createCreate an IP Filterwriteconfluent_cloud.iam_ip_filter.deleteDelete an IP Filterdestructiveconfluent_cloud.iam_ip_filter.getRead an IP Filterreadconfluent_cloud.iam_ip_filter.updateUpdate an IP Filterwrite
IAM ip group4
confluent_cloud.iam_ip_group.createCreate an IP Groupwriteconfluent_cloud.iam_ip_group.deleteDelete an IP Groupdestructiveconfluent_cloud.iam_ip_group.getRead an IP Groupreadconfluent_cloud.iam_ip_group.updateUpdate an IP Groupwrite
IAM service account4
confluent_cloud.iam_service_account.createCreate a Service Accountwriteconfluent_cloud.iam_service_account.deleteDelete a Service Accountdestructiveconfluent_cloud.iam_service_account.getRead a Service Accountreadconfluent_cloud.iam_service_account.updateUpdate a Service Accountwrite
IAM SSO group mapping4
confluent_cloud.iam_sso_group_mapping.createCreate a Group Mappingwriteconfluent_cloud.iam_sso_group_mapping.deleteDelete a Group Mappingdestructiveconfluent_cloud.iam_sso_group_mapping.getRead a Group Mappingreadconfluent_cloud.iam_sso_group_mapping.updateUpdate a Group Mappingwrite
IAM user4
confluent_cloud.iam_user.deleteDelete a Userdestructiveconfluent_cloud.iam_user.getRead a Userreadconfluent_cloud.iam_user.updateUpdate a Userwriteconfluent_cloud.iam_user.update_auth_typeUpdate Auth Type of a Userwrite
Kafka quotas client quota4
confluent_cloud.kafka_quotas_client_quota.createCreate a Client Quotawriteconfluent_cloud.kafka_quotas_client_quota.deleteDelete a Client Quotadestructiveconfluent_cloud.kafka_quotas_client_quota.getRead a Client Quotareadconfluent_cloud.kafka_quotas_client_quota.updateUpdate a Client Quotawrite
Networking access point4
confluent_cloud.networking_access_point.createCreate an Access Pointwriteconfluent_cloud.networking_access_point.deleteDelete an Access Pointdestructiveconfluent_cloud.networking_access_point.getRead an Access Pointreadconfluent_cloud.networking_access_point.updateUpdate an Access Pointwrite
Networking DNS forwarder4
confluent_cloud.networking_dns_forwarder.createCreate a DNS Forwarderwriteconfluent_cloud.networking_dns_forwarder.deleteDelete a DNS Forwarderdestructiveconfluent_cloud.networking_dns_forwarder.getRead a DNS Forwarderreadconfluent_cloud.networking_dns_forwarder.updateUpdate a DNS Forwarderwrite
Networking DNS record4
confluent_cloud.networking_dns_record.createCreate a DNS Recordwriteconfluent_cloud.networking_dns_record.deleteDelete a DNS Recorddestructiveconfluent_cloud.networking_dns_record.getRead a DNS Recordreadconfluent_cloud.networking_dns_record.updateUpdate a DNS Recordwrite
Networking gateway4
confluent_cloud.networking_gateway.createCreate a Gatewaywriteconfluent_cloud.networking_gateway.deleteDelete a Gatewaydestructiveconfluent_cloud.networking_gateway.getRead a Gatewayreadconfluent_cloud.networking_gateway.updateUpdate a Gatewaywrite
Networking network4
confluent_cloud.networking_network.createCreate a Networkwriteconfluent_cloud.networking_network.deleteDelete a Networkdestructiveconfluent_cloud.networking_network.getRead a Networkreadconfluent_cloud.networking_network.updateUpdate a Networkwrite
Networking network link endpoint4
confluent_cloud.networking_network_link_endpoint.createCreate a Network Link Endpointwriteconfluent_cloud.networking_network_link_endpoint.deleteDelete a Network Link Endpointdestructiveconfluent_cloud.networking_network_link_endpoint.getRead a Network Link Endpointreadconfluent_cloud.networking_network_link_endpoint.updateUpdate a Network Link Endpointwrite
Networking network link service4
confluent_cloud.networking_network_link_service.createCreate a Network Link Servicewriteconfluent_cloud.networking_network_link_service.deleteDelete a Network Link Servicedestructiveconfluent_cloud.networking_network_link_service.getRead a Network Link Servicereadconfluent_cloud.networking_network_link_service.updateUpdate a Network Link Servicewrite
Networking peering 4Networking private link access 4Networking private link attachment 4Networking private link attachment connection 4Networking transit gateway attachment 4Notifications resource preference 4Notifications resource subscription 4Notifications subscription 4Org environment 4Switchover switchover endpoint 4Cam connect artifact 3CCPM custom connect plugin version 3CDX provider shared resource 3IAM invitation 3IAM role binding 3Ksqldbcm cluster 3Pim V1 integration 3Pim V2 integration 3SRCM cluster 3Usm connect cluster 3Usm kafka cluster 3CDX consumer share 2CDX consumer shared resource 2CDX opt in 2CDX shared token 2Connect connector config 2Connect connector plugin 2FCPM org compute pool config 2Notifications user notification 2Notifications user notifications 2Org organization 2Org scim token 2Pim integration 2Artifact flink artifacts 1Artifact presigned upload URL 1Billing costs 1Byok keys 1Cam connect artifacts 1Cam presigned upload URL 1CCL custom code loggings 1CCPM custom connect plugin versions 1CCPM custom connect plugins 1CCPM presigned URL 1CDX consumer shared resources 1CDX consumer shares 1CDX provider shared resources 1CDX provider shares 1CMK clusters 1Connect connector offsets 1Connect connector offsets request 1Connect connector offsets request status 1Connect connector plugins 1Connect connector status 1Connect connector tasks 1Connect connectors 1Connect connectors with expansions 1Connect custom connector plugins 1Connect custom connector runtimes 1Connect presigned upload URL 1Endpoint endpoints 1FCPM compute pools 1FCPM regions 1IAM API keys 1IAM certificate authorities 1IAM certificate identity pools 1IAM identity pools 1IAM identity providers 1IAM invitations 1IAM ip filter summary 1IAM ip filters 1IAM ip groups 1IAM json web key set 1IAM role bindings 1IAM service accounts 1IAM SSO group mappings 1IAM users 1Kafka quotas client quotas 1Ksqldbcm clusters 1Networking access points 1Networking DNS forwarders 1Networking DNS records 1Networking gateways 1Networking ip addresses 1Networking network link endpoints 1Networking network link service association 1Networking network link service associations 1Networking network link services 1Networking networks 1Networking peerings 1Networking private link accesses 1Networking private link attachment connections 1Networking private link attachments 1Networking transit gateway attachments 1Notifications integrations 1Notifications notification type 1Notifications notification types 1Notifications resource preference by filter 1Notifications resource subscriptions by filter 1Notifications subscriptions 1Notifications user notifications summary 1Org environments 1Org organizations 1Org scim tokens 1Pim V1 integrations 1Pim V2 integrations 1Scim users 1Service quota applied quota 1Service quota applied quotas 1Service quota scope 1Service quota scopes 1SRCM region 1SRCM regions 1SRCM V2 cluster 1SRCM V2 clusters 1SRCM V3 cluster 1SRCM V3 clusters 1Switchover switchover endpoints 1Switchover switchover pairs 1Usm connect clusters 1Usm kafka clusters 1
This index shows a sample of each area. All 309 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Confluent Cloud MCP server, answered.
Is there a Confluent Cloud MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 309 Confluent Cloud actions across connect connector, notifications integration, scim user and switchover switchover pair, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Confluent Cloud.
What do I need to connect Confluent Cloud?
Confluent Cloud API key ID (a Cloud resource management key, not a cluster key) and The Cloud API key's secret, shown once when the key is created. The free call account { op: "connections.requirements", service: "confluent_cloud" } lists exactly what to paste.
Can an AI agent delete or change things in Confluent Cloud?
Only if its key allows it, and only with an explicit confirmation. 53 Confluent Cloud actions are destructive, including delete a Key, delete a User and delete a Cluster. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Confluent Cloud API limit?
actionlake paces every call to the limits in the Confluent Cloud service file: 50 calls a second per connection. Repeated reads are answered from cache (137 Confluent Cloud actions can be), which never reaches Confluent Cloud.
What does a Confluent Cloud action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (309 Confluent Cloud actions page). Cache hits, searches, dry runs and calls Confluent Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Confluent Cloud API does it cover?
The Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0) at api.confluent.cloud. It is built from Confluent Cloud's documentation as read on 23 October 2026. 309 actions in 150 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Confluent Cloud data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Confluent Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Confluent Cloud today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.