---
title: "Confluent Cloud MCP server for AI agents - actionlake"
description: "Give Claude 309 Confluent Cloud actions through one MCP server: connect connector. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/confluent-cloud
updated: 2026-10-23
---

Connectors · Data & integration

# Confluent Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Confluent Cloud and the rest of your systems. It gives your agent 309 Confluent Cloud actions (142 reads, 114 writes and 53 that wait for a confirmation) and holds the Confluent Cloud credential itself, so the agent never does. It paces Confluent Cloud's limits and records every call.

[Connect Confluent Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "confluent_cloud.iam_users.list",
  intent: "check which Confluent Cloud account is connected"
}
# List of Users · read · 1 upstream call
```

- 309 actions in one signed file
- 142 read look, never change
- 114 write create and update
- 53 wait for a yes destructive, confirmed first

Set up

## Connect Confluent Cloud in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Confluent Cloud.
   Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_key` Confluent Cloud API key ID (a Cloud resource management key, not a cluster key)
   - `api_secret` The Cloud API key's secret, shown once when the key is created
   ```
   account { op: "connections.requirements", service: "confluent_cloud" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "confluent_cloud.iam_users.list" }
   # list of users · read · 1 upstream call
   check { action: "confluent_cloud.byok_key.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Confluent Cloud at a glance

**Sign-in**

Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_key` `api_secret`

**Limits we pace to**

50 calls a second, per connection

**API covered**

Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0)`api.confluent.cloud`

**Built from**

Confluent Cloud's documentation, read 23 October 2026[docs.confluent.io](https://docs.confluent.io/cloud/current/openapi.yaml) [docs.confluent.io](https://docs.confluent.io/cloud/current/api.html)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

137 of 142 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

2, so ask can line Confluent Cloud up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Confluent Cloud.

309 actions in 150 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **142** read look, never change
- **114** write create and update
- **53** destructive wait for a confirmation

1. ### Connect connector
   6
   1 read · 4 write · 1 destructive
   Read a Connector · Create a Connector · Restart a Connector · Pause a Connector
2. ### Notifications integration
   5
   1 read · 3 write · 1 destructive
   Read an Integration · Create an Integration · Test a Webhook, Slack or Microsoft Teams integration · Update an Integration
3. ### Scim user
   5
   1 read · 3 write · 1 destructive
   Read a User · Create a User · Patch a User · Update a User
4. ### Switchover switchover pair
   5
   1 read · 3 write · 1 destructive
   Read a Switchover Pair · Create a Switchover Pair · Trigger a failover on a switchover pair · Update a Switchover Pair
5. ### Artifact flink artifact
   4
   1 read · 2 write · 1 destructive
   Read a Flink Artifact · Create a new Flink Artifact. · Update a Flink Artifact · Delete a Flink Artifact
6. ### Byok key
   4
   1 read · 2 write · 1 destructive
   Read a Key · Create a Key · Update a Key · Delete a Key
7. ### CCL custom code logging
   4
   1 read · 2 write · 1 destructive
   Read a Custom Code Logging · Create a Custom Code Logging · Update a Custom Code Logging · Delete a Custom Code Logging
8. ### CCPM custom connect plugin
   4
   1 read · 2 write · 1 destructive
   Read a Custom Connect Plugin · Create a Custom Connect Plugin · Update a Custom Connect Plugin · Delete a Custom Connect Plugin

**142 more areas · 272 actions**

- CDX provider share **4**
- CMK cluster **4**
- Connect custom connector plugin **4**
- FCPM compute pool **4**
- IAM API key **4**
- IAM certificate authority **4**
- IAM certificate identity pool **4**
- IAM identity pool **4**
- IAM identity provider **4**
- IAM ip filter **4**
- IAM ip group **4**
- IAM service account **4**
- IAM SSO group mapping **4**
- IAM user **4**
- Kafka quotas client quota **4**
- Networking access point **4**
- Networking DNS forwarder **4**
- Networking DNS record **4**
- Networking gateway **4**
- Networking network **4**
- Networking network link endpoint **4**
- Networking network link service **4**
- Networking peering **4**
- Networking private link access **4**
- Networking private link attachment **4**
- Networking private link attachment connection **4**
- Networking transit gateway attachment **4**
- Notifications resource preference **4**
- Notifications resource subscription **4**
- Notifications subscription **4**
- Org environment **4**
- Switchover switchover endpoint **4**
- Cam connect artifact **3**
- CCPM custom connect plugin version **3**
- CDX provider shared resource **3**
- IAM invitation **3**
- IAM role binding **3**
- Ksqldbcm cluster **3**
- Pim V1 integration **3**
- Pim V2 integration **3**
- SRCM cluster **3**
- Usm connect cluster **3**
- Usm kafka cluster **3**
- CDX consumer share **2**
- CDX consumer shared resource **2**
- CDX opt in **2**
- CDX shared token **2**
- Connect connector config **2**
- Connect connector plugin **2**
- FCPM org compute pool config **2**
- Notifications user notification **2**
- Notifications user notifications **2**
- Org organization **2**
- Org scim token **2**
- Pim integration **2**
- Artifact flink artifacts **1**
- Artifact presigned upload URL **1**
- Billing costs **1**
- Byok keys **1**
- Cam connect artifacts **1**
- Cam presigned upload URL **1**
- CCL custom code loggings **1**
- CCPM custom connect plugin versions **1**
- CCPM custom connect plugins **1**
- CCPM presigned URL **1**
- CDX consumer shared resources **1**
- CDX consumer shares **1**
- CDX provider shared resources **1**
- CDX provider shares **1**
- CMK clusters **1**
- Connect connector offsets **1**
- Connect connector offsets request **1**
- Connect connector offsets request status **1**
- Connect connector plugins **1**
- Connect connector status **1**
- Connect connector tasks **1**
- Connect connectors **1**
- Connect connectors with expansions **1**
- Connect custom connector plugins **1**
- Connect custom connector runtimes **1**
- Connect presigned upload URL **1**
- Endpoint endpoints **1**
- FCPM compute pools **1**
- FCPM regions **1**
- IAM API keys **1**
- IAM certificate authorities **1**
- IAM certificate identity pools **1**
- IAM identity pools **1**
- IAM identity providers **1**
- IAM invitations **1**
- IAM ip filter summary **1**
- IAM ip filters **1**
- IAM ip groups **1**
- IAM json web key set **1**
- IAM role bindings **1**
- IAM service accounts **1**
- IAM SSO group mappings **1**
- IAM users **1**
- Kafka quotas client quotas **1**
- Ksqldbcm clusters **1**
- Networking access points **1**
- Networking DNS forwarders **1**
- Networking DNS records **1**
- Networking gateways **1**
- Networking ip addresses **1**
- Networking network link endpoints **1**
- Networking network link service association **1**
- Networking network link service associations **1**
- Networking network link services **1**
- Networking networks **1**
- Networking peerings **1**
- Networking private link accesses **1**
- Networking private link attachment connections **1**
- Networking private link attachments **1**
- Networking transit gateway attachments **1**
- Notifications integrations **1**
- Notifications notification type **1**
- Notifications notification types **1**
- Notifications resource preference by filter **1**
- Notifications resource subscriptions by filter **1**
- Notifications subscriptions **1**
- Notifications user notifications summary **1**
- Org environments **1**
- Org organizations **1**
- Org scim tokens **1**
- Pim V1 integrations **1**
- Pim V2 integrations **1**
- Scim users **1**
- Service quota applied quota **1**
- Service quota applied quotas **1**
- Service quota scope **1**
- Service quota scopes **1**
- SRCM region **1**
- SRCM regions **1**
- SRCM V2 cluster **1**
- SRCM V2 clusters **1**
- SRCM V3 cluster **1**
- SRCM V3 clusters **1**
- Switchover switchover endpoints **1**
- Switchover switchover pairs **1**
- Usm connect clusters **1**
- Usm kafka clusters **1**

Top actions

## The Confluent Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 5 of Confluent Cloud's 5 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `confluent_cloud.iam_users.list` List of Users | Retrieve a sorted, filtered, paginated list of all users. | read | `identity.user.list` 474 connectors |
| `confluent_cloud.iam_service_accounts.list` List of Service Accounts | Retrieve a sorted, filtered, paginated list of all service accounts. | read | `identity.service_account.list` 35 connectors |
| `confluent_cloud.iam_api_keys.list` List of API Keys | Retrieve a sorted, filtered, paginated list of all API keys. | read | `identity.api_key.list` 96 connectors |
| `confluent_cloud.iam_invitations.list` List of Invitations | Retrieve a sorted, filtered, paginated list of all invitations. | read | `identity.invitation.list` 33 connectors |
| `confluent_cloud.org_environments.list` List of Environments | Retrieve a sorted, filtered, paginated list of all environments. | read | `devops.environment.list` 24 connectors |
| `confluent_cloud.byok_keys.list` List of Keys | Retrieve a sorted, filtered, paginated list of all keys. | read | this connector |
| `confluent_cloud.scim_users.list` Search for Users | Make a request to find a user. | read | this connector |
| `confluent_cloud.cmk_clusters.list` List of Clusters | Retrieve a sorted, filtered, paginated list of all clusters. | read | this connector |
| `confluent_cloud.byok_key.create` Create a Key | Make a request to create a key. | write | this connector |
| `confluent_cloud.scim_user.create` Create a User | Make a request to create a user. | write | this connector |
| `confluent_cloud.cmk_cluster.create` Create a Cluster | Make a request to create a cluster. | write | this connector |
| `confluent_cloud.byok_key.delete` Delete a Key | Make a request to delete a key. | destructive | this connector |

Try it

## Prompts to paste into Claude.

Each one names the Confluent Cloud actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in Confluent Cloud? List every user and their role.
   calls `confluent_cloud.iam_users.list`
2. Write write
   Create a Key in Confluent Cloud. Show me exactly what you will send before you save it.
   calls `confluent_cloud.byok_key.create`

Governance for Confluent Cloud

## Destructive actions wait for a yes.

53 Confluent Cloud actions are destructive. The first 10:

- Delete a Key `confluent_cloud.byok_key.delete`
- Delete a User `confluent_cloud.iam_user.delete`
- Delete a User `confluent_cloud.scim_user.delete`
- Delete a Cluster `confluent_cloud.cmk_cluster.delete`
- Delete an API Key `confluent_cloud.iam_api_key.delete`
- Delete an IP Group `confluent_cloud.iam_ip_group.delete`
- Delete a Cluster `confluent_cloud.srcm_cluster.delete`
- Delete an IP Filter `confluent_cloud.iam_ip_filter.delete`
- Delete an Invitation `confluent_cloud.iam_invitation.delete`
- Delete a Scim Token `confluent_cloud.org_scim_token.delete`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do confluent_cloud.byok_key.delete confirm_policy: **human**

Delete a Key?

**intent:** the user asked me to delete a Key

run suspended · waiting for a named person · key _confluent-cloud-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "confluent-cloud-agent",
  allowed_actions: ["confluent_cloud.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "confluent_cloud.byok_key.delete", approver: "lead@example.com" },
    { match: "confluent_cloud.iam_user.delete", approver: "lead@example.com" },
    { match: "confluent_cloud.scim_user.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Confluent Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Confluent Cloud costs on actionlake.

Every Confluent Cloud action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Confluent Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 309 Confluent Cloud actions
- 309 actions page each page of a long list is one call
- 137 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Confluent Cloud action.

309 actions by area: the id your agent calls, what it does, and its effect.

**Connect connector 6**

- `confluent_cloud.connect_connector.create` Create a Connector write
- `confluent_cloud.connect_connector.pause` Pause a Connector write
- `confluent_cloud.connect_connector.read` Read a Connector read
- `confluent_cloud.connect_connector.restart` Restart a Connector write
- `confluent_cloud.connect_connector.delete` Delete a Connector destructive
- `confluent_cloud.connect_connector.resume` Resume a Connector write

**Notifications integration 5**

- `confluent_cloud.notifications_integration.create` Create an Integration write
- `confluent_cloud.notifications_integration.get` Read an Integration read
- `confluent_cloud.notifications_integration.test` Test a Webhook, Slack or Microsoft Teams integration write
- `confluent_cloud.notifications_integration.update` Update an Integration write
- `confluent_cloud.notifications_integration.delete` Delete an Integration destructive

**Scim user 5**

- `confluent_cloud.scim_user.create` Create a User write
- `confluent_cloud.scim_user.get` Read a User read
- `confluent_cloud.scim_user.patch` Patch a User write
- `confluent_cloud.scim_user.update` Update a User write
- `confluent_cloud.scim_user.delete` Delete a User destructive

**Switchover switchover pair 5**

- `confluent_cloud.switchover_switchover_pair.create` Create a Switchover Pair write
- `confluent_cloud.switchover_switchover_pair.failover` Trigger a failover on a switchover pair write
- `confluent_cloud.switchover_switchover_pair.get` Read a Switchover Pair read
- `confluent_cloud.switchover_switchover_pair.update` Update a Switchover Pair write
- `confluent_cloud.switchover_switchover_pair.delete` Delete a Switchover Pair destructive

**Artifact flink artifact 4**

- `confluent_cloud.artifact_flink_artifact.create` Create a new Flink Artifact. write
- `confluent_cloud.artifact_flink_artifact.delete` Delete a Flink Artifact destructive
- `confluent_cloud.artifact_flink_artifact.get` Read a Flink Artifact read
- `confluent_cloud.artifact_flink_artifact.update` Update a Flink Artifact write

**Byok key 4**

- `confluent_cloud.byok_key.create` Create a Key write
- `confluent_cloud.byok_key.delete` Delete a Key destructive
- `confluent_cloud.byok_key.get` Read a Key read
- `confluent_cloud.byok_key.update` Update a Key write

**CCL custom code logging 4**

- `confluent_cloud.ccl_custom_code_logging.create` Create a Custom Code Logging write
- `confluent_cloud.ccl_custom_code_logging.delete` Delete a Custom Code Logging destructive
- `confluent_cloud.ccl_custom_code_logging.get` Read a Custom Code Logging read
- `confluent_cloud.ccl_custom_code_logging.update` Update a Custom Code Logging write

**CCPM custom connect plugin 4**

- `confluent_cloud.ccpm_custom_connect_plugin.create` Create a Custom Connect Plugin write
- `confluent_cloud.ccpm_custom_connect_plugin.delete` Delete a Custom Connect Plugin destructive
- `confluent_cloud.ccpm_custom_connect_plugin.get` Read a Custom Connect Plugin read
- `confluent_cloud.ccpm_custom_connect_plugin.update` Update a Custom Connect Plugin write

**CDX provider share 4**

- `confluent_cloud.cdx_provider_share.create` Create a provider share write
- `confluent_cloud.cdx_provider_share.delete` Delete a Provider Share destructive
- `confluent_cloud.cdx_provider_share.get` Read a Provider Share read
- `confluent_cloud.cdx_provider_share.resend` Resend write

**CMK cluster 4**

- `confluent_cloud.cmk_cluster.create` Create a Cluster write
- `confluent_cloud.cmk_cluster.delete` Delete a Cluster destructive
- `confluent_cloud.cmk_cluster.get` Read a Cluster read
- `confluent_cloud.cmk_cluster.update` Update a Cluster write

**Connect custom connector plugin 4**

- `confluent_cloud.connect_custom_connector_plugin.create` Create a Custom Connector Plugin write
- `confluent_cloud.connect_custom_connector_plugin.delete` Delete a Custom Connector Plugin destructive
- `confluent_cloud.connect_custom_connector_plugin.get` Read a Custom Connector Plugin read
- `confluent_cloud.connect_custom_connector_plugin.update` Update a Custom Connector Plugin write

**FCPM compute pool 4**

- `confluent_cloud.fcpm_compute_pool.create` Create a Compute Pool write
- `confluent_cloud.fcpm_compute_pool.delete` Delete a Compute Pool destructive
- `confluent_cloud.fcpm_compute_pool.get` Read a Compute Pool read
- `confluent_cloud.fcpm_compute_pool.update` Update a Compute Pool write

**IAM API key 4**

- `confluent_cloud.iam_api_key.create` Create an API Key write
- `confluent_cloud.iam_api_key.delete` Delete an API Key destructive
- `confluent_cloud.iam_api_key.get` Read an API Key read
- `confluent_cloud.iam_api_key.update` Update an API Key write

**IAM certificate authority 4**

- `confluent_cloud.iam_certificate_authority.create` Create a Certificate Authority write
- `confluent_cloud.iam_certificate_authority.delete` Delete a Certificate Authority destructive
- `confluent_cloud.iam_certificate_authority.get` Read a Certificate Authority read
- `confluent_cloud.iam_certificate_authority.update` Update a Certificate Authority write

**IAM certificate identity pool 4**

- `confluent_cloud.iam_certificate_identity_pool.create` Create a Certificate Identity Pool write
- `confluent_cloud.iam_certificate_identity_pool.delete` Delete a Certificate Identity Pool destructive
- `confluent_cloud.iam_certificate_identity_pool.get` Read a Certificate Identity Pool read
- `confluent_cloud.iam_certificate_identity_pool.update` Update a Certificate Identity Pool write

**IAM identity pool 4**

- `confluent_cloud.iam_identity_pool.create` Create an Identity Pool write
- `confluent_cloud.iam_identity_pool.delete` Delete an Identity Pool destructive
- `confluent_cloud.iam_identity_pool.get` Read an Identity Pool read
- `confluent_cloud.iam_identity_pool.update` Update an Identity Pool write

**IAM identity provider 4**

- `confluent_cloud.iam_identity_provider.create` Create an Identity Provider write
- `confluent_cloud.iam_identity_provider.delete` Delete an Identity Provider destructive
- `confluent_cloud.iam_identity_provider.get` Read an Identity Provider read
- `confluent_cloud.iam_identity_provider.update` Update an Identity Provider write

**IAM ip filter 4**

- `confluent_cloud.iam_ip_filter.create` Create an IP Filter write
- `confluent_cloud.iam_ip_filter.delete` Delete an IP Filter destructive
- `confluent_cloud.iam_ip_filter.get` Read an IP Filter read
- `confluent_cloud.iam_ip_filter.update` Update an IP Filter write

**IAM ip group 4**

- `confluent_cloud.iam_ip_group.create` Create an IP Group write
- `confluent_cloud.iam_ip_group.delete` Delete an IP Group destructive
- `confluent_cloud.iam_ip_group.get` Read an IP Group read
- `confluent_cloud.iam_ip_group.update` Update an IP Group write

**IAM service account 4**

- `confluent_cloud.iam_service_account.create` Create a Service Account write
- `confluent_cloud.iam_service_account.delete` Delete a Service Account destructive
- `confluent_cloud.iam_service_account.get` Read a Service Account read
- `confluent_cloud.iam_service_account.update` Update a Service Account write

**IAM SSO group mapping 4**

- `confluent_cloud.iam_sso_group_mapping.create` Create a Group Mapping write
- `confluent_cloud.iam_sso_group_mapping.delete` Delete a Group Mapping destructive
- `confluent_cloud.iam_sso_group_mapping.get` Read a Group Mapping read
- `confluent_cloud.iam_sso_group_mapping.update` Update a Group Mapping write

**IAM user 4**

- `confluent_cloud.iam_user.delete` Delete a User destructive
- `confluent_cloud.iam_user.get` Read a User read
- `confluent_cloud.iam_user.update` Update a User write
- `confluent_cloud.iam_user.update_auth_type` Update Auth Type of a User write

**Kafka quotas client quota 4**

- `confluent_cloud.kafka_quotas_client_quota.create` Create a Client Quota write
- `confluent_cloud.kafka_quotas_client_quota.delete` Delete a Client Quota destructive
- `confluent_cloud.kafka_quotas_client_quota.get` Read a Client Quota read
- `confluent_cloud.kafka_quotas_client_quota.update` Update a Client Quota write

**Networking access point 4**

- `confluent_cloud.networking_access_point.create` Create an Access Point write
- `confluent_cloud.networking_access_point.delete` Delete an Access Point destructive
- `confluent_cloud.networking_access_point.get` Read an Access Point read
- `confluent_cloud.networking_access_point.update` Update an Access Point write

**Networking DNS forwarder 4**

- `confluent_cloud.networking_dns_forwarder.create` Create a DNS Forwarder write
- `confluent_cloud.networking_dns_forwarder.delete` Delete a DNS Forwarder destructive
- `confluent_cloud.networking_dns_forwarder.get` Read a DNS Forwarder read
- `confluent_cloud.networking_dns_forwarder.update` Update a DNS Forwarder write

**Networking DNS record 4**

- `confluent_cloud.networking_dns_record.create` Create a DNS Record write
- `confluent_cloud.networking_dns_record.delete` Delete a DNS Record destructive
- `confluent_cloud.networking_dns_record.get` Read a DNS Record read
- `confluent_cloud.networking_dns_record.update` Update a DNS Record write

**Networking gateway 4**

- `confluent_cloud.networking_gateway.create` Create a Gateway write
- `confluent_cloud.networking_gateway.delete` Delete a Gateway destructive
- `confluent_cloud.networking_gateway.get` Read a Gateway read
- `confluent_cloud.networking_gateway.update` Update a Gateway write

**Networking network 4**

- `confluent_cloud.networking_network.create` Create a Network write
- `confluent_cloud.networking_network.delete` Delete a Network destructive
- `confluent_cloud.networking_network.get` Read a Network read
- `confluent_cloud.networking_network.update` Update a Network write

**Networking network link endpoint 4**

- `confluent_cloud.networking_network_link_endpoint.create` Create a Network Link Endpoint write
- `confluent_cloud.networking_network_link_endpoint.delete` Delete a Network Link Endpoint destructive
- `confluent_cloud.networking_network_link_endpoint.get` Read a Network Link Endpoint read
- `confluent_cloud.networking_network_link_endpoint.update` Update a Network Link Endpoint write

**Networking network link service 4**

- `confluent_cloud.networking_network_link_service.create` Create a Network Link Service write
- `confluent_cloud.networking_network_link_service.delete` Delete a Network Link Service destructive
- `confluent_cloud.networking_network_link_service.get` Read a Network Link Service read
- `confluent_cloud.networking_network_link_service.update` Update a Network Link Service write

Networking peering **4** Networking private link access **4** Networking private link attachment **4** Networking private link attachment connection **4** Networking transit gateway attachment **4** Notifications resource preference **4** Notifications resource subscription **4** Notifications subscription **4** Org environment **4** Switchover switchover endpoint **4** Cam connect artifact **3** CCPM custom connect plugin version **3** CDX provider shared resource **3** IAM invitation **3** IAM role binding **3** Ksqldbcm cluster **3** Pim V1 integration **3** Pim V2 integration **3** SRCM cluster **3** Usm connect cluster **3** Usm kafka cluster **3** CDX consumer share **2** CDX consumer shared resource **2** CDX opt in **2** CDX shared token **2** Connect connector config **2** Connect connector plugin **2** FCPM org compute pool config **2** Notifications user notification **2** Notifications user notifications **2** Org organization **2** Org scim token **2** Pim integration **2** Artifact flink artifacts **1** Artifact presigned upload URL **1** Billing costs **1** Byok keys **1** Cam connect artifacts **1** Cam presigned upload URL **1** CCL custom code loggings **1** CCPM custom connect plugin versions **1** CCPM custom connect plugins **1** CCPM presigned URL **1** CDX consumer shared resources **1** CDX consumer shares **1** CDX provider shared resources **1** CDX provider shares **1** CMK clusters **1** Connect connector offsets **1** Connect connector offsets request **1** Connect connector offsets request status **1** Connect connector plugins **1** Connect connector status **1** Connect connector tasks **1** Connect connectors **1** Connect connectors with expansions **1** Connect custom connector plugins **1** Connect custom connector runtimes **1** Connect presigned upload URL **1** Endpoint endpoints **1** FCPM compute pools **1** FCPM regions **1** IAM API keys **1** IAM certificate authorities **1** IAM certificate identity pools **1** IAM identity pools **1** IAM identity providers **1** IAM invitations **1** IAM ip filter summary **1** IAM ip filters **1** IAM ip groups **1** IAM json web key set **1** IAM role bindings **1** IAM service accounts **1** IAM SSO group mappings **1** IAM users **1** Kafka quotas client quotas **1** Ksqldbcm clusters **1** Networking access points **1** Networking DNS forwarders **1** Networking DNS records **1** Networking gateways **1** Networking ip addresses **1** Networking network link endpoints **1** Networking network link service association **1** Networking network link service associations **1** Networking network link services **1** Networking networks **1** Networking peerings **1** Networking private link accesses **1** Networking private link attachment connections **1** Networking private link attachments **1** Networking transit gateway attachments **1** Notifications integrations **1** Notifications notification type **1** Notifications notification types **1** Notifications resource preference by filter **1** Notifications resource subscriptions by filter **1** Notifications subscriptions **1** Notifications user notifications summary **1** Org environments **1** Org organizations **1** Org scim tokens **1** Pim V1 integrations **1** Pim V2 integrations **1** Scim users **1** Service quota applied quota **1** Service quota applied quotas **1** Service quota scope **1** Service quota scopes **1** SRCM region **1** SRCM regions **1** SRCM V2 cluster **1** SRCM V2 clusters **1** SRCM V3 cluster **1** SRCM V3 clusters **1** Switchover switchover endpoints **1** Switchover switchover pairs **1** Usm connect clusters **1** Usm kafka clusters **1**

This index shows a sample of each area. All 309 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The Confluent Cloud MCP server, answered.

**Is there a Confluent Cloud MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 309 Confluent Cloud actions across connect connector, notifications integration, scim user and switchover switchover pair, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Confluent Cloud.

**What do I need to connect Confluent Cloud?**

Confluent Cloud API key ID (a Cloud resource management key, not a cluster key) and The Cloud API key's secret, shown once when the key is created. The free call account { op: "connections.requirements", service: "confluent_cloud" } lists exactly what to paste.

**Can an AI agent delete or change things in Confluent Cloud?**

Only if its key allows it, and only with an explicit confirmation. 53 Confluent Cloud actions are destructive, including delete a Key, delete a User and delete a Cluster. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Confluent Cloud API limit?**

actionlake paces every call to the limits in the Confluent Cloud service file: 50 calls a second per connection. Repeated reads are answered from cache (137 Confluent Cloud actions can be), which never reaches Confluent Cloud.

**What does a Confluent Cloud action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (309 Confluent Cloud actions page). Cache hits, searches, dry runs and calls Confluent Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Confluent Cloud API does it cover?**

The Confluent Cloud (management API: organizations, environments, IAM, API keys, RBAC, clusters, networking, Connect, Flink compute pools, Schema Registry clusters, Stream Sharing, notifications, billing) API Confluent Cloud APIs (OpenAPI 3.0.0) at api.confluent.cloud. It is built from Confluent Cloud's documentation as read on 23 October 2026. 309 actions in 150 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Confluent Cloud data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Confluent Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Confluent Cloud

Shares the most action names with

- [dbt Cloud 3](https://actionlake.com/connectors/dbt-cloud)
- [Fivetran 2](https://actionlake.com/connectors/fivetran)
- [Starburst Galaxy 2](https://actionlake.com/connectors/starburst-galaxy)
- [Workato 2](https://actionlake.com/connectors/workato)
- [Jenkins 1](https://actionlake.com/connectors/jenkins)
- [Airbyte 1](https://actionlake.com/connectors/airbyte)

Joins with, on shared entities

- [Microsoft 365 Users 2](https://actionlake.com/connectors/microsoft-365-users)
- [Rubrik Security Cloud 2](https://actionlake.com/connectors/rubrik-security-cloud)
- [Sumo Logic 2](https://actionlake.com/connectors/sumo-logic)
- [Hugging Face 2](https://actionlake.com/connectors/hugging-face)
- [Snyk 2](https://actionlake.com/connectors/snyk)
- [Unleash 2](https://actionlake.com/connectors/unleash)

Browse

- [All Data & integration connectors](https://actionlake.com/connectors/category/data-and-integration)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Confluent Cloud; the name is the vendor's own. Counts are from the Confluent Cloud service file, version 1.0.0.

## Give your agent Confluent Cloud today.

[Connect Confluent Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/confluent-cloud
More: https://actionlake.com/llms.txt
