Skip to content

Connectors · Data & integration

Confluent Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Confluent Cloud and the rest of your systems. It gives your agent 309 Confluent Cloud actions (142 reads, 114 writes and 53 that wait for a confirmation) and holds the Confluent Cloud credential itself, so the agent never does. It paces Confluent Cloud's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "confluent_cloud.iam_users.list",  intent: "check which Confluent Cloud account is connected"}# List of Users · read · 1 upstream call
  • 309actionsin one signed file
  • 142readlook, never change
  • 114writecreate and update
  • 53wait for a yesdestructive, confirmed first

Set up

Connect Confluent Cloud in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Confluent Cloud.

    Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_keyConfluent Cloud API key ID (a Cloud resource management key, not a cluster key)
    • api_secretThe Cloud API key's secret, shown once when the key is created
    account { op: "connections.requirements", service: "confluent_cloud" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "confluent_cloud.iam_users.list" }# list of users · read · 1 upstream callcheck { action: "confluent_cloud.byok_key.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Confluent Cloud at a glance

Sign-in
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_keyapi_secret
Limits we pace to
50 calls a second, per connection
API covered
Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0)api.confluent.cloud
Built from
Confluent Cloud's documentation, read 23 October 2026docs.confluent.iodocs.confluent.io
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
137 of 142 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Confluent Cloud up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Confluent Cloud.

309 actions in 150 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 142readlook, never change
  • 114writecreate and update
  • 53destructivewait for a confirmation
  1. Connect connector

    6

    1 read · 4 write · 1 destructive

    Read a Connector · Create a Connector · Restart a Connector · Pause a Connector

  2. Notifications integration

    5

    1 read · 3 write · 1 destructive

    Read an Integration · Create an Integration · Test a Webhook, Slack or Microsoft Teams integration · Update an Integration

  3. Scim user

    5

    1 read · 3 write · 1 destructive

    Read a User · Create a User · Patch a User · Update a User

  4. Switchover switchover pair

    5

    1 read · 3 write · 1 destructive

    Read a Switchover Pair · Create a Switchover Pair · Trigger a failover on a switchover pair · Update a Switchover Pair

  5. Artifact flink artifact

    4

    1 read · 2 write · 1 destructive

    Read a Flink Artifact · Create a new Flink Artifact. · Update a Flink Artifact · Delete a Flink Artifact

  6. Byok key

    4

    1 read · 2 write · 1 destructive

    Read a Key · Create a Key · Update a Key · Delete a Key

  7. CCL custom code logging

    4

    1 read · 2 write · 1 destructive

    Read a Custom Code Logging · Create a Custom Code Logging · Update a Custom Code Logging · Delete a Custom Code Logging

  8. CCPM custom connect plugin

    4

    1 read · 2 write · 1 destructive

    Read a Custom Connect Plugin · Create a Custom Connect Plugin · Update a Custom Connect Plugin · Delete a Custom Connect Plugin

142 more areas · 272 actions
  • CDX provider share 4
  • CMK cluster 4
  • Connect custom connector plugin 4
  • FCPM compute pool 4
  • IAM API key 4
  • IAM certificate authority 4
  • IAM certificate identity pool 4
  • IAM identity pool 4
  • IAM identity provider 4
  • IAM ip filter 4
  • IAM ip group 4
  • IAM service account 4
  • IAM SSO group mapping 4
  • IAM user 4
  • Kafka quotas client quota 4
  • Networking access point 4
  • Networking DNS forwarder 4
  • Networking DNS record 4
  • Networking gateway 4
  • Networking network 4
  • Networking network link endpoint 4
  • Networking network link service 4
  • Networking peering 4
  • Networking private link access 4
  • Networking private link attachment 4
  • Networking private link attachment connection 4
  • Networking transit gateway attachment 4
  • Notifications resource preference 4
  • Notifications resource subscription 4
  • Notifications subscription 4
  • Org environment 4
  • Switchover switchover endpoint 4
  • Cam connect artifact 3
  • CCPM custom connect plugin version 3
  • CDX provider shared resource 3
  • IAM invitation 3
  • IAM role binding 3
  • Ksqldbcm cluster 3
  • Pim V1 integration 3
  • Pim V2 integration 3
  • SRCM cluster 3
  • Usm connect cluster 3
  • Usm kafka cluster 3
  • CDX consumer share 2
  • CDX consumer shared resource 2
  • CDX opt in 2
  • CDX shared token 2
  • Connect connector config 2
  • Connect connector plugin 2
  • FCPM org compute pool config 2
  • Notifications user notification 2
  • Notifications user notifications 2
  • Org organization 2
  • Org scim token 2
  • Pim integration 2
  • Artifact flink artifacts 1
  • Artifact presigned upload URL 1
  • Billing costs 1
  • Byok keys 1
  • Cam connect artifacts 1
  • Cam presigned upload URL 1
  • CCL custom code loggings 1
  • CCPM custom connect plugin versions 1
  • CCPM custom connect plugins 1
  • CCPM presigned URL 1
  • CDX consumer shared resources 1
  • CDX consumer shares 1
  • CDX provider shared resources 1
  • CDX provider shares 1
  • CMK clusters 1
  • Connect connector offsets 1
  • Connect connector offsets request 1
  • Connect connector offsets request status 1
  • Connect connector plugins 1
  • Connect connector status 1
  • Connect connector tasks 1
  • Connect connectors 1
  • Connect connectors with expansions 1
  • Connect custom connector plugins 1
  • Connect custom connector runtimes 1
  • Connect presigned upload URL 1
  • Endpoint endpoints 1
  • FCPM compute pools 1
  • FCPM regions 1
  • IAM API keys 1
  • IAM certificate authorities 1
  • IAM certificate identity pools 1
  • IAM identity pools 1
  • IAM identity providers 1
  • IAM invitations 1
  • IAM ip filter summary 1
  • IAM ip filters 1
  • IAM ip groups 1
  • IAM json web key set 1
  • IAM role bindings 1
  • IAM service accounts 1
  • IAM SSO group mappings 1
  • IAM users 1
  • Kafka quotas client quotas 1
  • Ksqldbcm clusters 1
  • Networking access points 1
  • Networking DNS forwarders 1
  • Networking DNS records 1
  • Networking gateways 1
  • Networking ip addresses 1
  • Networking network link endpoints 1
  • Networking network link service association 1
  • Networking network link service associations 1
  • Networking network link services 1
  • Networking networks 1
  • Networking peerings 1
  • Networking private link accesses 1
  • Networking private link attachment connections 1
  • Networking private link attachments 1
  • Networking transit gateway attachments 1
  • Notifications integrations 1
  • Notifications notification type 1
  • Notifications notification types 1
  • Notifications resource preference by filter 1
  • Notifications resource subscriptions by filter 1
  • Notifications subscriptions 1
  • Notifications user notifications summary 1
  • Org environments 1
  • Org organizations 1
  • Org scim tokens 1
  • Pim V1 integrations 1
  • Pim V2 integrations 1
  • Scim users 1
  • Service quota applied quota 1
  • Service quota applied quotas 1
  • Service quota scope 1
  • Service quota scopes 1
  • SRCM region 1
  • SRCM regions 1
  • SRCM V2 cluster 1
  • SRCM V2 clusters 1
  • SRCM V3 cluster 1
  • SRCM V3 clusters 1
  • Switchover switchover endpoints 1
  • Switchover switchover pairs 1
  • Usm connect clusters 1
  • Usm kafka clusters 1

Top actions

The Confluent Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 5 of Confluent Cloud's 5 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
confluent_cloud.iam_users.listList of UsersRetrieve a sorted, filtered, paginated list of all users.readidentity.user.list474 connectors
confluent_cloud.iam_service_accounts.listList of Service AccountsRetrieve a sorted, filtered, paginated list of all service accounts.readidentity.service_account.list35 connectors
confluent_cloud.iam_api_keys.listList of API KeysRetrieve a sorted, filtered, paginated list of all API keys.readidentity.api_key.list96 connectors
confluent_cloud.iam_invitations.listList of InvitationsRetrieve a sorted, filtered, paginated list of all invitations.readidentity.invitation.list33 connectors
confluent_cloud.org_environments.listList of EnvironmentsRetrieve a sorted, filtered, paginated list of all environments.readdevops.environment.list24 connectors
confluent_cloud.byok_keys.listList of KeysRetrieve a sorted, filtered, paginated list of all keys.readthis connector
confluent_cloud.scim_users.listSearch for UsersMake a request to find a user.readthis connector
confluent_cloud.cmk_clusters.listList of ClustersRetrieve a sorted, filtered, paginated list of all clusters.readthis connector
confluent_cloud.byok_key.createCreate a KeyMake a request to create a key.writethis connector
confluent_cloud.scim_user.createCreate a UserMake a request to create a user.writethis connector
confluent_cloud.cmk_cluster.createCreate a ClusterMake a request to create a cluster.writethis connector
confluent_cloud.byok_key.deleteDelete a KeyMake a request to delete a key.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the Confluent Cloud actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Confluent Cloud? List every user and their role.

    callsconfluent_cloud.iam_users.list

  2. Writewrite

    Create a Key in Confluent Cloud. Show me exactly what you will send before you save it.

    callsconfluent_cloud.byok_key.create

Governance for Confluent Cloud

Destructive actions wait for a yes.

53 Confluent Cloud actions are destructive. The first 10:

  • Delete a Keyconfluent_cloud.byok_key.delete
  • Delete a Userconfluent_cloud.iam_user.delete
  • Delete a Userconfluent_cloud.scim_user.delete
  • Delete a Clusterconfluent_cloud.cmk_cluster.delete
  • Delete an API Keyconfluent_cloud.iam_api_key.delete
  • Delete an IP Groupconfluent_cloud.iam_ip_group.delete
  • Delete a Clusterconfluent_cloud.srcm_cluster.delete
  • Delete an IP Filterconfluent_cloud.iam_ip_filter.delete
  • Delete an Invitationconfluent_cloud.iam_invitation.delete
  • Delete a Scim Tokenconfluent_cloud.org_scim_token.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doconfluent_cloud.byok_key.deleteconfirm_policy: human

Delete a Key?

intent: the user asked me to delete a Key

run suspended · waiting for a named person · key confluent-cloud-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "confluent-cloud-agent",  allowed_actions: ["confluent_cloud.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "confluent_cloud.byok_key.delete", approver: "[email protected]" },    { match: "confluent_cloud.iam_user.delete", approver: "[email protected]" },    { match: "confluent_cloud.scim_user.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Confluent Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Confluent Cloud costs on actionlake.

Every Confluent Cloud action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Confluent Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 309 Confluent Cloud actions
  • 309actions pageeach page of a long list is one call
  • 137reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Confluent Cloud action.

309 actions by area: the id your agent calls, what it does, and its effect.

Connect connector6
  • confluent_cloud.connect_connector.createCreate a Connectorwrite
  • confluent_cloud.connect_connector.pausePause a Connectorwrite
  • confluent_cloud.connect_connector.readRead a Connectorread
  • confluent_cloud.connect_connector.restartRestart a Connectorwrite
  • confluent_cloud.connect_connector.deleteDelete a Connectordestructive
  • confluent_cloud.connect_connector.resumeResume a Connectorwrite
Notifications integration5
  • confluent_cloud.notifications_integration.createCreate an Integrationwrite
  • confluent_cloud.notifications_integration.getRead an Integrationread
  • confluent_cloud.notifications_integration.testTest a Webhook, Slack or Microsoft Teams integrationwrite
  • confluent_cloud.notifications_integration.updateUpdate an Integrationwrite
  • confluent_cloud.notifications_integration.deleteDelete an Integrationdestructive
Scim user5
  • confluent_cloud.scim_user.createCreate a Userwrite
  • confluent_cloud.scim_user.getRead a Userread
  • confluent_cloud.scim_user.patchPatch a Userwrite
  • confluent_cloud.scim_user.updateUpdate a Userwrite
  • confluent_cloud.scim_user.deleteDelete a Userdestructive
Switchover switchover pair5
  • confluent_cloud.switchover_switchover_pair.createCreate a Switchover Pairwrite
  • confluent_cloud.switchover_switchover_pair.failoverTrigger a failover on a switchover pairwrite
  • confluent_cloud.switchover_switchover_pair.getRead a Switchover Pairread
  • confluent_cloud.switchover_switchover_pair.updateUpdate a Switchover Pairwrite
  • confluent_cloud.switchover_switchover_pair.deleteDelete a Switchover Pairdestructive
Artifact flink artifact4
  • confluent_cloud.artifact_flink_artifact.createCreate a new Flink Artifact.write
  • confluent_cloud.artifact_flink_artifact.deleteDelete a Flink Artifactdestructive
  • confluent_cloud.artifact_flink_artifact.getRead a Flink Artifactread
  • confluent_cloud.artifact_flink_artifact.updateUpdate a Flink Artifactwrite
Byok key4
  • confluent_cloud.byok_key.createCreate a Keywrite
  • confluent_cloud.byok_key.deleteDelete a Keydestructive
  • confluent_cloud.byok_key.getRead a Keyread
  • confluent_cloud.byok_key.updateUpdate a Keywrite
CCL custom code logging4
  • confluent_cloud.ccl_custom_code_logging.createCreate a Custom Code Loggingwrite
  • confluent_cloud.ccl_custom_code_logging.deleteDelete a Custom Code Loggingdestructive
  • confluent_cloud.ccl_custom_code_logging.getRead a Custom Code Loggingread
  • confluent_cloud.ccl_custom_code_logging.updateUpdate a Custom Code Loggingwrite
CCPM custom connect plugin4
  • confluent_cloud.ccpm_custom_connect_plugin.createCreate a Custom Connect Pluginwrite
  • confluent_cloud.ccpm_custom_connect_plugin.deleteDelete a Custom Connect Plugindestructive
  • confluent_cloud.ccpm_custom_connect_plugin.getRead a Custom Connect Pluginread
  • confluent_cloud.ccpm_custom_connect_plugin.updateUpdate a Custom Connect Pluginwrite
CDX provider share4
  • confluent_cloud.cdx_provider_share.createCreate a provider sharewrite
  • confluent_cloud.cdx_provider_share.deleteDelete a Provider Sharedestructive
  • confluent_cloud.cdx_provider_share.getRead a Provider Shareread
  • confluent_cloud.cdx_provider_share.resendResendwrite
CMK cluster4
  • confluent_cloud.cmk_cluster.createCreate a Clusterwrite
  • confluent_cloud.cmk_cluster.deleteDelete a Clusterdestructive
  • confluent_cloud.cmk_cluster.getRead a Clusterread
  • confluent_cloud.cmk_cluster.updateUpdate a Clusterwrite
Connect custom connector plugin4
  • confluent_cloud.connect_custom_connector_plugin.createCreate a Custom Connector Pluginwrite
  • confluent_cloud.connect_custom_connector_plugin.deleteDelete a Custom Connector Plugindestructive
  • confluent_cloud.connect_custom_connector_plugin.getRead a Custom Connector Pluginread
  • confluent_cloud.connect_custom_connector_plugin.updateUpdate a Custom Connector Pluginwrite
FCPM compute pool4
  • confluent_cloud.fcpm_compute_pool.createCreate a Compute Poolwrite
  • confluent_cloud.fcpm_compute_pool.deleteDelete a Compute Pooldestructive
  • confluent_cloud.fcpm_compute_pool.getRead a Compute Poolread
  • confluent_cloud.fcpm_compute_pool.updateUpdate a Compute Poolwrite
IAM API key4
  • confluent_cloud.iam_api_key.createCreate an API Keywrite
  • confluent_cloud.iam_api_key.deleteDelete an API Keydestructive
  • confluent_cloud.iam_api_key.getRead an API Keyread
  • confluent_cloud.iam_api_key.updateUpdate an API Keywrite
IAM certificate authority4
  • confluent_cloud.iam_certificate_authority.createCreate a Certificate Authoritywrite
  • confluent_cloud.iam_certificate_authority.deleteDelete a Certificate Authoritydestructive
  • confluent_cloud.iam_certificate_authority.getRead a Certificate Authorityread
  • confluent_cloud.iam_certificate_authority.updateUpdate a Certificate Authoritywrite
IAM certificate identity pool4
  • confluent_cloud.iam_certificate_identity_pool.createCreate a Certificate Identity Poolwrite
  • confluent_cloud.iam_certificate_identity_pool.deleteDelete a Certificate Identity Pooldestructive
  • confluent_cloud.iam_certificate_identity_pool.getRead a Certificate Identity Poolread
  • confluent_cloud.iam_certificate_identity_pool.updateUpdate a Certificate Identity Poolwrite
IAM identity pool4
  • confluent_cloud.iam_identity_pool.createCreate an Identity Poolwrite
  • confluent_cloud.iam_identity_pool.deleteDelete an Identity Pooldestructive
  • confluent_cloud.iam_identity_pool.getRead an Identity Poolread
  • confluent_cloud.iam_identity_pool.updateUpdate an Identity Poolwrite
IAM identity provider4
  • confluent_cloud.iam_identity_provider.createCreate an Identity Providerwrite
  • confluent_cloud.iam_identity_provider.deleteDelete an Identity Providerdestructive
  • confluent_cloud.iam_identity_provider.getRead an Identity Providerread
  • confluent_cloud.iam_identity_provider.updateUpdate an Identity Providerwrite
IAM ip filter4
  • confluent_cloud.iam_ip_filter.createCreate an IP Filterwrite
  • confluent_cloud.iam_ip_filter.deleteDelete an IP Filterdestructive
  • confluent_cloud.iam_ip_filter.getRead an IP Filterread
  • confluent_cloud.iam_ip_filter.updateUpdate an IP Filterwrite
IAM ip group4
  • confluent_cloud.iam_ip_group.createCreate an IP Groupwrite
  • confluent_cloud.iam_ip_group.deleteDelete an IP Groupdestructive
  • confluent_cloud.iam_ip_group.getRead an IP Groupread
  • confluent_cloud.iam_ip_group.updateUpdate an IP Groupwrite
IAM service account4
  • confluent_cloud.iam_service_account.createCreate a Service Accountwrite
  • confluent_cloud.iam_service_account.deleteDelete a Service Accountdestructive
  • confluent_cloud.iam_service_account.getRead a Service Accountread
  • confluent_cloud.iam_service_account.updateUpdate a Service Accountwrite
IAM SSO group mapping4
  • confluent_cloud.iam_sso_group_mapping.createCreate a Group Mappingwrite
  • confluent_cloud.iam_sso_group_mapping.deleteDelete a Group Mappingdestructive
  • confluent_cloud.iam_sso_group_mapping.getRead a Group Mappingread
  • confluent_cloud.iam_sso_group_mapping.updateUpdate a Group Mappingwrite
IAM user4
  • confluent_cloud.iam_user.deleteDelete a Userdestructive
  • confluent_cloud.iam_user.getRead a Userread
  • confluent_cloud.iam_user.updateUpdate a Userwrite
  • confluent_cloud.iam_user.update_auth_typeUpdate Auth Type of a Userwrite
Kafka quotas client quota4
  • confluent_cloud.kafka_quotas_client_quota.createCreate a Client Quotawrite
  • confluent_cloud.kafka_quotas_client_quota.deleteDelete a Client Quotadestructive
  • confluent_cloud.kafka_quotas_client_quota.getRead a Client Quotaread
  • confluent_cloud.kafka_quotas_client_quota.updateUpdate a Client Quotawrite
Networking access point4
  • confluent_cloud.networking_access_point.createCreate an Access Pointwrite
  • confluent_cloud.networking_access_point.deleteDelete an Access Pointdestructive
  • confluent_cloud.networking_access_point.getRead an Access Pointread
  • confluent_cloud.networking_access_point.updateUpdate an Access Pointwrite
Networking DNS forwarder4
  • confluent_cloud.networking_dns_forwarder.createCreate a DNS Forwarderwrite
  • confluent_cloud.networking_dns_forwarder.deleteDelete a DNS Forwarderdestructive
  • confluent_cloud.networking_dns_forwarder.getRead a DNS Forwarderread
  • confluent_cloud.networking_dns_forwarder.updateUpdate a DNS Forwarderwrite
Networking DNS record4
  • confluent_cloud.networking_dns_record.createCreate a DNS Recordwrite
  • confluent_cloud.networking_dns_record.deleteDelete a DNS Recorddestructive
  • confluent_cloud.networking_dns_record.getRead a DNS Recordread
  • confluent_cloud.networking_dns_record.updateUpdate a DNS Recordwrite
Networking gateway4
  • confluent_cloud.networking_gateway.createCreate a Gatewaywrite
  • confluent_cloud.networking_gateway.deleteDelete a Gatewaydestructive
  • confluent_cloud.networking_gateway.getRead a Gatewayread
  • confluent_cloud.networking_gateway.updateUpdate a Gatewaywrite
Networking network4
  • confluent_cloud.networking_network.createCreate a Networkwrite
  • confluent_cloud.networking_network.deleteDelete a Networkdestructive
  • confluent_cloud.networking_network.getRead a Networkread
  • confluent_cloud.networking_network.updateUpdate a Networkwrite
Networking network link endpoint4
  • confluent_cloud.networking_network_link_endpoint.createCreate a Network Link Endpointwrite
  • confluent_cloud.networking_network_link_endpoint.deleteDelete a Network Link Endpointdestructive
  • confluent_cloud.networking_network_link_endpoint.getRead a Network Link Endpointread
  • confluent_cloud.networking_network_link_endpoint.updateUpdate a Network Link Endpointwrite
Networking network link service4
  • confluent_cloud.networking_network_link_service.createCreate a Network Link Servicewrite
  • confluent_cloud.networking_network_link_service.deleteDelete a Network Link Servicedestructive
  • confluent_cloud.networking_network_link_service.getRead a Network Link Serviceread
  • confluent_cloud.networking_network_link_service.updateUpdate a Network Link Servicewrite

Networking peering 4Networking private link access 4Networking private link attachment 4Networking private link attachment connection 4Networking transit gateway attachment 4Notifications resource preference 4Notifications resource subscription 4Notifications subscription 4Org environment 4Switchover switchover endpoint 4Cam connect artifact 3CCPM custom connect plugin version 3CDX provider shared resource 3IAM invitation 3IAM role binding 3Ksqldbcm cluster 3Pim V1 integration 3Pim V2 integration 3SRCM cluster 3Usm connect cluster 3Usm kafka cluster 3CDX consumer share 2CDX consumer shared resource 2CDX opt in 2CDX shared token 2Connect connector config 2Connect connector plugin 2FCPM org compute pool config 2Notifications user notification 2Notifications user notifications 2Org organization 2Org scim token 2Pim integration 2Artifact flink artifacts 1Artifact presigned upload URL 1Billing costs 1Byok keys 1Cam connect artifacts 1Cam presigned upload URL 1CCL custom code loggings 1CCPM custom connect plugin versions 1CCPM custom connect plugins 1CCPM presigned URL 1CDX consumer shared resources 1CDX consumer shares 1CDX provider shared resources 1CDX provider shares 1CMK clusters 1Connect connector offsets 1Connect connector offsets request 1Connect connector offsets request status 1Connect connector plugins 1Connect connector status 1Connect connector tasks 1Connect connectors 1Connect connectors with expansions 1Connect custom connector plugins 1Connect custom connector runtimes 1Connect presigned upload URL 1Endpoint endpoints 1FCPM compute pools 1FCPM regions 1IAM API keys 1IAM certificate authorities 1IAM certificate identity pools 1IAM identity pools 1IAM identity providers 1IAM invitations 1IAM ip filter summary 1IAM ip filters 1IAM ip groups 1IAM json web key set 1IAM role bindings 1IAM service accounts 1IAM SSO group mappings 1IAM users 1Kafka quotas client quotas 1Ksqldbcm clusters 1Networking access points 1Networking DNS forwarders 1Networking DNS records 1Networking gateways 1Networking ip addresses 1Networking network link endpoints 1Networking network link service association 1Networking network link service associations 1Networking network link services 1Networking networks 1Networking peerings 1Networking private link accesses 1Networking private link attachment connections 1Networking private link attachments 1Networking transit gateway attachments 1Notifications integrations 1Notifications notification type 1Notifications notification types 1Notifications resource preference by filter 1Notifications resource subscriptions by filter 1Notifications subscriptions 1Notifications user notifications summary 1Org environments 1Org organizations 1Org scim tokens 1Pim V1 integrations 1Pim V2 integrations 1Scim users 1Service quota applied quota 1Service quota applied quotas 1Service quota scope 1Service quota scopes 1SRCM region 1SRCM regions 1SRCM V2 cluster 1SRCM V2 clusters 1SRCM V3 cluster 1SRCM V3 clusters 1Switchover switchover endpoints 1Switchover switchover pairs 1Usm connect clusters 1Usm kafka clusters 1

This index shows a sample of each area. All 309 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Confluent Cloud MCP server, answered.

Is there a Confluent Cloud MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 309 Confluent Cloud actions across connect connector, notifications integration, scim user and switchover switchover pair, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Confluent Cloud.

What do I need to connect Confluent Cloud?

Confluent Cloud API key ID (a Cloud resource management key, not a cluster key) and The Cloud API key's secret, shown once when the key is created. The free call account { op: "connections.requirements", service: "confluent_cloud" } lists exactly what to paste.

Can an AI agent delete or change things in Confluent Cloud?

Only if its key allows it, and only with an explicit confirmation. 53 Confluent Cloud actions are destructive, including delete a Key, delete a User and delete a Cluster. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Confluent Cloud API limit?

actionlake paces every call to the limits in the Confluent Cloud service file: 50 calls a second per connection. Repeated reads are answered from cache (137 Confluent Cloud actions can be), which never reaches Confluent Cloud.

What does a Confluent Cloud action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (309 Confluent Cloud actions page). Cache hits, searches, dry runs and calls Confluent Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Confluent Cloud API does it cover?

The Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0) at api.confluent.cloud. It is built from Confluent Cloud's documentation as read on 23 October 2026. 309 actions in 150 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Confluent Cloud data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Confluent Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Confluent Cloud today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.