Connectors · Developer & infrastructure

env zero (env0) MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to env zero (env0) and the rest of your systems. It gives your agent 350 env zero (env0) actions (168 reads, 124 writes and 58 that wait for a confirmation) and holds the env zero (env0) credential itself, so the agent never does. It paces env zero (env0)'s limits and records every call.

Connect env zero (env0) free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

350actionsin one signed file
168readlook, never change
124writecreate and update
58wait for a yesdestructive, confirmed first

Set up

Connect env zero (env0) in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect env zero (env0).
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
- api_key_idenv zero API Key ID (Organization Settings > API Keys > Add API Key, or a Personal API Key from your avatar >…
- api_key_secretenv zero API Key secret, shown once when the key is created
```
account { op: "connections.requirements", service: "env0" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "env0.environments.list" }# list environments · read · 1 upstream callcheck { action: "env0.teams.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

env zero (env0) at a glance

Sign-in: Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide: api_key_idapi_key_secret
Limits we pace to: 1,000 calls a minute, per connection
API covered: Env zero API 1.0.0 (OpenAPI 3.1.0)api.env0.com
Built from: env zero (env0)'s documentation, read 23 October 2026docs.envzero.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 153 of 168 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 3, so ask can line env zero (env0) up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in env zero (env0).

350 actions in 67 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

168readlook, never change
124writecreate and update
58destructivewait for a confirmation

Environments
19
7 read · 11 write · 1 destructive
Create Environment · Create an Environment Without Template · Get downstream environments that will be triggered by this environment deployment · List Environments
Deployments
17
9 read · 5 write · 3 destructive
List Deployments · Deploy Environment · Get Deployment · Cancel Deployment
Migrations
14
5 read · 8 write · 1 destructive
Start migration for selected workspaces · Connect to migration source · Find Selection Issues · Get migration inventory for a session
Bulk operations
12
1 read · 7 write · 4 destructive
Bulk add environment tags · Bulk approve · Bulk deploy · Bulk lock
Projects
11
7 read · 3 write · 1 destructive
Create a new Project · List Direct Sub-Projects · List Projects (slim tree) · List Organization Projects Tags
Templates
11
6 read · 3 write · 2 destructive
Create Template · Get Assignable Templates · Generate Terraform Variables from Repository · List Templates
Scim
10
4 read · 3 write · 3 destructive
Create SCIM Configuration · Get SCIM Group Mappings · Reconcile SCIM State · Get SCIM Configuration
Approval policies
9
3 read · 3 write · 3 destructive
Assign Approval Policy To Scope · Create Approval Policy · List Approval Policies · Get Approval Policy By Name

59 more areas · 247 actions

Agents 8
Code optimizer 8
Configuration sets 8
Providers 8
Cloud compass credentials 7
Custom flows 7
Modules 7
Notifications 7
VCS connections 7
Cloud accounts 6
Cloud assets 6
Costs 6
Organizations 6
Cloud compass drafts 5
Cloud insights 5
Drift causes 5
Project budgets 5
Roles 5
Scheduling 5
Teams 5
VCS user mappings 5
API keys 4
Cloud environment resources 4
Cloud resource lists 4
Cloud resources 4
Cloud unmanaged 4
Credentials 4
Environment import 4
Git tokens 4
Personal API keys 4
Project policies 4
Project role assignments 4
SSH keys 4
SSO 4
Team project assignments 4
Variables 4
Agent project assignments 3
Agent secrets 3
Cloudquery integrations 3
Environment discovery 3
Environment state access 3
GPG keys 3
Log forwarding 3
Module tests 3
Organization users 3
Project cost credentials 3
Project deployment credentials 3
Remote state access 3
Team role assignments 3
User role assignments 3
Cloud compass 2
Cloud events 2
Deployment steps 2
Environment outputs 2
Module usage 2
Audit events 1
Cloud filters 1
Dashboards 1
Invites 1

Top actions

The env zero (env0) API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 20 of env zero (env0)'s 20 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`env0.organization_users.list`List Users	List Users.	read	`identity.user.list`474 connectors
`env0.teams.list`List Teams	List Teams.	read	`identity.group.list`262 connectors
`env0.roles.list`Get All Roles	Get All Roles.	read	`identity.role.list`184 connectors
`env0.teams.create`Create Team	Create Team.	write	`identity.group.create`205 connectors
`env0.roles.create`Create a Role	Create a Role.	write	`identity.role.create`105 connectors
`env0.organization_users.remove_user_from_organization`Remove User	Remove User.	destructive	`identity.user.delete`253 connectors
`env0.api_keys.create`Create API Key	Create API Key.	write	`identity.api_key.create`100 connectors
`env0.api_keys.list`List Organization API Keys	List Organization API Keys.	read	`identity.api_key.list`96 connectors
`env0.deployments.list`List Deployments	List Deployments.	read	`devops.deployment.list`22 connectors
`env0.deployments.deploy`Deploy Environment	Deploy Environment.	write	`devops.deployment.create`17 connectors
`env0.audit_events.list`Fetch Audit Logs	Fetch Audit Logs.	read	`security.audit_log.list`69 connectors
`env0.projects.list`List Projects	List Projects.	read	this connector

Try it

Prompts to paste into Claude.

Each one names the env zero (env0) actions it will call, so you know what it reads and what it changes before you send it.

Readread
Who has access in env zero (env0)? List every user and their role.
callsenv0.organization_users.list
Writewrite
Create Team in env zero (env0). Show me exactly what you will send before you save it.
callsenv0.teams.create

Governance for env zero (env0)

Destructive actions wait for a yes.

58 env zero (env0) actions are destructive. The first 10:

Remove Userenv0.organization_users.remove_user_from_organization
Delete Teamenv0.teams.delete
Delete a Roleenv0.roles.delete
Delete an API Keyenv0.api_keys.delete
Cancel Deploymentenv0.deployments.cancel
Archive a Projectenv0.projects.archive
Delete Templateenv0.templates.delete
Destroy Environmentenv0.environments.destroy
Remove Template from Projectenv0.templates.remove_blueprint_from_project
Abort Deploymentenv0.deployments.abort

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doenv0.organization_users.remove_user_from_organizationconfirm_policy: human

Remove User?

intent: the user asked me to remove User

run suspended · waiting for a named person · key env0-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "env0-agent",  allowed_actions: ["env0.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "env0.organization_users.remove_user_from_organization", approver: "[email protected]" },    { match: "env0.teams.delete", approver: "[email protected]" },    { match: "env0.roles.delete", approver: "[email protected]" }  ]}

Illustrative. Scoped to env zero (env0) only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What env zero (env0) costs on actionlake.

Every env zero (env0) action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call env zero (env0) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 350 env zero (env0) actions
350actions pageeach page of a long list is one call
153reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every env zero (env0) action.

350 actions by area: the id your agent calls, what it does, and its effect.

Environments19

env0.environments.createCreate Environmentwrite
env0.environments.create_environment_without_templateCreate an Environment Without Templatewrite
env0.environments.find_downstream_environmentsGet downstream environments that will be triggered by this environment deploymentread
env0.environments.listList Environmentsread
env0.environments.count_by_projectCount Environmentsread
env0.environments.destroyDestroy Environmentdestructive
and 13 more in this area

Deployments17

env0.deployments.cancelCancel Deploymentdestructive
env0.deployments.deployDeploy Environmentwrite
env0.deployments.getGet Deploymentread
env0.deployments.listList Deploymentsread
env0.deployments.abortAbort Deploymentdestructive
env0.deployments.batch_cancelBatch Cancel Deploymentsdestructive
and 11 more in this area

Migrations14

env0.migrations.batch_migrateStart migration for selected workspaceswrite
env0.migrations.connectConnect to migration sourcewrite
env0.migrations.find_selection_issuesFind Selection Issuesread
env0.migrations.get_inventoryGet migration inventory for a sessionread
env0.migrations.delete_sessionDelete a migration sessiondestructive
env0.migrations.finish_sessionFinish a migration sessionwrite
and 8 more in this area

Bulk operations12

env0.bulk_operations.bulk_add_tagsBulk add environment tagswrite
env0.bulk_operations.bulk_approveBulk approvewrite
env0.bulk_operations.bulk_cancelBulk deploydestructive
env0.bulk_operations.bulk_deployBulk deploywrite
env0.bulk_operations.bulk_lockBulk lockwrite
env0.bulk_operations.bulk_archiveBulk archivedestructive
and 6 more in this area

Projects11

env0.projects.createCreate a new Projectwrite
env0.projects.find_childrenList Direct Sub-Projectsread
env0.projects.find_project_tree_by_organization_idList Projects (slim tree)read
env0.projects.find_tags_by_organization_idList Organization Projects Tagsread
env0.projects.archiveArchive a Projectdestructive
env0.projects.getGet a Project By IDread
and 5 more in this area

Templates11

env0.templates.createCreate Templatewrite
env0.templates.get_assignable_templatesGet Assignable Templatesread
env0.templates.get_variables_from_repositoryGenerate Terraform Variables from Repositoryread
env0.templates.listList Templatesread
env0.templates.add_blueprint_to_projectAdd Template to Projectwrite
env0.templates.deleteDelete Templatedestructive
and 5 more in this area

Scim10

env0.scim.create_scim_configurationCreate SCIM Configurationwrite
env0.scim.get_scim_configurationGet SCIM Configurationread
env0.scim.get_scim_group_mappingsGet SCIM Group Mappingsread
env0.scim.reconcile_scimReconcile SCIM Statewrite
env0.scim.delete_scim_configurationDelete SCIM Configurationdestructive
env0.scim.delete_scim_group_mappingUnlink SCIM Group Mappingdestructive
and 4 more in this area

Approval policies9

env0.approval_policies.templates_assign_approval_policyAssign Approval Policy To Scopewrite
env0.approval_policies.templates_create_approval_policyCreate Approval Policywrite
env0.approval_policies.templates_find_all_approval_policiesList Approval Policiesread
env0.approval_policies.templates_get_approval_policy_by_nameGet Approval Policy By Nameread
env0.approval_policies.templates_delete_approval_policyDelete Approval Policydestructive
env0.approval_policies.templates_get_approval_policy_by_scopeGet Approval Policy Assignments By Scoperead
and 3 more in this area

Agents8

env0.agents.create_agentCreate agentwrite
env0.agents.get_agentGet agentread
env0.agents.get_agent_valuesGet agent values file content (Deprecated)read
env0.agents.list_agentsList agentsread
env0.agents.delete_agentDelete agentdestructive
env0.agents.get_docker_agent_dot_envGet agent .env file content (Deprecated)read
and 2 more in this area

Code optimizer8

env0.code_optimizer.generate_code_for_issueGenerate Code For Issuewrite
env0.code_optimizer.get_repository_statesGet Repository Statesread
env0.code_optimizer.ignore_issueIgnore Issuewrite
env0.code_optimizer.trigger_code_scanTrigger Code Scanwrite
env0.code_optimizer.get_issueGet Issueread
env0.code_optimizer.get_issuesGet Issuesread
and 2 more in this area

Configuration sets8

env0.configuration_sets.assign_configuration_sets_to_scopeAssign sets to entitywrite
env0.configuration_sets.create_configuration_setCreate a configuration setwrite
env0.configuration_sets.find_set_assignments_by_scopeFind sets assigned to scoperead
env0.configuration_sets.find_sets_by_creation_scopeList Sets created by Scoperead
env0.configuration_sets.delete_configuration_setDelete a configuration setdestructive
env0.configuration_sets.find_configuration_set_by_idGet configuration set by its IDread
and 2 more in this area

Providers8

env0.providers.create_providerCreate a new providerwrite
env0.providers.create_versionCreate a new provider versionwrite
env0.providers.download_versionGet a download url for a specific versionread
env0.providers.find_providers_by_organization_idFind all providers in an organizationread
env0.providers.delete_providerDelete a providerdestructive
env0.providers.find_provider_by_idFind a provider by idread
and 2 more in this area

Cloud compass credentials7

env0.cloud_compass_credentials.create_cloud_compass_credentialCreate a Cloud Compass credential from a verified draftwrite
env0.cloud_compass_credentials.get_cloud_compass_credentialGet a Cloud Compass credential with its features and syncsread
env0.cloud_compass_credentials.get_cloud_compass_credential_logsGet the log of the last run of a Cloud Compass syncread
env0.cloud_compass_credentials.list_cloud_compass_cred_org_unitsList the OUs and accounts of a Cloud Compass credential AWS Organizationread
env0.cloud_compass_credentials.delete_cloud_compass_credentialDelete a Cloud Compass credentialdestructive
env0.cloud_compass_credentials.list_cloud_compass_credentialsList the Cloud Compass credentials and open drafts of an organizationread
and 1 more in this area

Custom flows7

env0.custom_flows.templates_assign_custom_flowAssign Custom Flowwrite
env0.custom_flows.templates_create_custom_flowCreate Custom Flowwrite
env0.custom_flows.templates_find_custom_flowsFind Custom Flowsread
env0.custom_flows.templates_get_custom_flow_assignmentsGet Custom Flow Assignmentsread
env0.custom_flows.templates_delete_custom_flowDelete Custom Flowdestructive
env0.custom_flows.templates_unassign_custom_flowUnassign Custom Flowwrite
and 1 more in this area

Modules7

env0.modules.createCreate modulewrite
env0.modules.getGet moduleread
env0.modules.listList Modulesread
env0.modules.templates_get_module_versionsList Module Versionsread
env0.modules.deleteDelete moduledestructive
env0.modules.templates_get_module_readmeGet Module READMEread
and 1 more in this area

Notifications7

env0.notifications.create_notification_endpointCreate Notification Endpointwrite
env0.notifications.find_notification_endpointsList Notification Endpointsread
env0.notifications.find_project_notification_settingsGet Notification Endpoint settingsread
env0.notifications.test_webhook_notification_endpointTest webhook notification targetwrite
env0.notifications.delete_notification_endpointDelete Notification Endpointdestructive
env0.notifications.update_notification_endpointUpdate Notification Endpointwrite
and 1 more in this area

VCS connections7

env0.vcs_connections.create_vcs_connectionCreate VCS Connectionwrite
env0.vcs_connections.get_vcs_connectionGet VCS Connectionread
env0.vcs_connections.get_vcs_repositoriesGet VCS Repositoriesread
env0.vcs_connections.list_vcs_connectionsList VCS Connectionsread
env0.vcs_connections.delete_vcs_connectionDelete VCS Connectiondestructive
env0.vcs_connections.get_vcs_connection_dependentsList the entities that use a VCS connectionread
and 1 more in this area

Cloud accounts6

env0.cloud_accounts.create_cloud_configurationCreate Cloud Accountwrite
env0.cloud_accounts.find_cloud_configuration_by_idFind Cloud Account by idread
env0.cloud_accounts.find_cloud_configuration_by_org_idList Organization's Cloud Accountsread
env0.cloud_accounts.test_cloud_configurationTest Cloud Accountwrite
env0.cloud_accounts.delete_cloud_configurationDelete Cloud Accountdestructive
env0.cloud_accounts.update_cloud_configurationUpdate Cloud Accountwrite

Cloud assets6

env0.cloud_assets.check_cloud_compass_managed_statusCheck Which Cloud Compass Resources env zero Managesread
env0.cloud_assets.get_cloud_compass_asset_countsCount Cloud Compass Resources By Groupread
env0.cloud_assets.get_cloud_compass_assetsList Cloud Compass Resourcesread
env0.cloud_assets.read_cloud_compass_metadata_rowsRead Cloud Compass Metadata Rowsread
env0.cloud_assets.get_cloud_compass_asset_detailsGet Cloud Compass Resource Detailsread
env0.cloud_assets.get_cloud_compass_asset_relatedList Cloud Compass Connected Resourcesread

Costs6

env0.costs.get_environment_costsGet costs for an Environmentread
env0.costs.get_organization_costsGet costs for an Organizationread
env0.costs.get_project_costsGet costs for a Projectread
env0.costs.get_projects_with_cost_credentialsList projects with cost credentials associated to organizationread
env0.costs.get_weekly_costsGet weekly costs for projects or environmentsread
env0.costs.is_cost_enabledReturn wether or not cost is enabled for a projectread

Organizations6

env0.organizations.create_organizationCreate a new Organizationwrite
env0.organizations.getGet Organizationread
env0.organizations.listList Organizationsread
env0.organizations.update_policyUpdate Policywrite
env0.organizations.get_organization_limitsGet Organization Limitsread
env0.organizations.update_organizationUpdate Organizationwrite

Cloud compass drafts5

env0.cloud_compass_drafts.create_cloud_compass_draftStart a Cloud Compass credential wizard draftwrite
env0.cloud_compass_drafts.get_cloud_compass_draftGet a Cloud Compass credential wizard draftread
env0.cloud_compass_drafts.list_cloud_compass_org_unitsList the OUs and accounts of a Cloud Compass draft AWS Organizationread
env0.cloud_compass_drafts.verify_cloud_compass_draftStart the CloudQuery test connections of a Cloud Compass draftwrite
env0.cloud_compass_drafts.delete_cloud_compass_draftDiscard a Cloud Compass credential wizard draftdestructive

Cloud insights5

env0.cloud_insights.get_cloud_compass_insight_detailsGet Cloud Compass Insight Detailsread
env0.cloud_insights.get_cloud_compass_insight_listList Cloud Compass Insightsread
env0.cloud_insights.get_cloud_compass_insightsCount Cloud Compass Insightsread
env0.cloud_insights.silence_cloud_compass_insightSilence A Cloud Compass Insightwrite
env0.cloud_insights.unsilence_cloud_compass_insightUnsilence A Cloud Compass Insightdestructive

Drift causes5

env0.drift_causes.get_drift_causesGet Drift Causesread
env0.drift_causes.get_drift_fix_statsGet Drift Fix Statsread
env0.drift_causes.ignore_drift_causeIgnore Drift Causewrite
env0.drift_causes.un_ignore_drift_causeUn-ignore Drift Causewrite
env0.drift_causes.get_ignored_drift_causesGet Ignored Drift Causesread

Project budgets5

env0.project_budgets.get_accumulated_project_costsGet a project's accumulated costsread
env0.project_budgets.get_budget_summaryGet projects' budget summary of the current periodread
env0.project_budgets.get_project_budgetGet a project's budgetread
env0.project_budgets.upsert_project_budgetUpsert a project's budgetwrite
env0.project_budgets.remove_project_budgetRemove a project's budgetdestructive

Roles5

env0.roles.createCreate a Rolewrite
env0.roles.getGet a Roleread
env0.roles.listGet All Rolesread
env0.roles.updateUpdate a Rolewrite
env0.roles.deleteDelete a Roledestructive

Scheduling5

env0.scheduling.get_drift_detection_by_environment_idGet Drift Detection Environment Schedulingread
env0.scheduling.get_schedule_by_environment_idGet Environment Schedulingread
env0.scheduling.get_schedule_by_project_idGet Project Schedulingread
env0.scheduling.set_drift_detectionSet Drift Detection Environment Schedulingwrite
env0.scheduling.set_environment_scheduleSet Environment Schedulingwrite

Teams5

env0.teams.createCreate Teamwrite
env0.teams.getGet Teamread
env0.teams.listList Teamsread
env0.teams.updateUpdate Teamwrite
env0.teams.deleteDelete Teamdestructive

VCS user mappings5

env0.vcs_user_mappings.connect_verified_vcs_provider_user_mappingConnect a Verified VCS Provider User Mappingwrite
env0.vcs_user_mappings.create_vcs_provider_user_mappingCreate VCS Provider User Mappingwrite
env0.vcs_user_mappings.get_organization_vcs_provider_user_mappingsList Organization's VCS ID Mappingsread
env0.vcs_user_mappings.get_vcs_provider_user_mappingsList User's VCS ID Mappingsread
env0.vcs_user_mappings.update_vcs_provider_user_mappingsUpdate a User's VCS ID Mappingwrite

API keys4

env0.api_keys.createCreate API Keywrite
env0.api_keys.deleteDelete an API Keydestructive
env0.api_keys.listList Organization API Keysread
env0.api_keys.update_api_key_ip_allowlistUpdate an API Key IP allowlistwrite

Cloud environment resources4

env0.cloud_environment_resources.get_cloud_compass_environment_graphGet Cloud Compass Resource Graph Of An Environmentread
env0.cloud_environment_resources.get_cloud_compass_managed_resourcesList Cloud Compass Managed Resources Of An Environmentread
env0.cloud_environment_resources.get_cloud_compass_unmanaged_resourcesList Cloud Compass Unmanaged Resources Of An Environmentread
env0.cloud_environment_resources.list_environment_state_resourcesList Environment State Resourcesread

Cloud resource lists4

env0.cloud_resource_lists.get_cloud_compass_list_exportGet A Cloud Compass Resource List Exportread
env0.cloud_resource_lists.get_cloud_compass_list_groupsGroup A Cloud Compass Resource Listread
env0.cloud_resource_lists.get_cloud_compass_list_valuesList The Values Of A Cloud Compass Resource List Columnread
env0.cloud_resource_lists.start_cloud_compass_list_exportExport A Cloud Compass Resource Listwrite

Cloud resources4

env0.cloud_resources.codifyGenerate IaC for Cloud Resourcesread
env0.cloud_resources.find_cloud_resourcesFind Cloud Resourcesread
env0.cloud_resources.get_resource_eventsGet Resource Eventsread
env0.cloud_resources.update_cloud_resourcesUpdate Cloud Resourceswrite

Cloud unmanaged4

env0.cloud_unmanaged.get_cloud_compass_unmanaged_countsCount Cloud Compass Unmanaged Resources Per Environmentread
env0.cloud_unmanaged.get_cloud_compass_unmanaged_env_assetsList Cloud Compass Resources Of An Unmanaged Environmentread
env0.cloud_unmanaged.get_cloud_compass_unmanaged_remainderList Cloud Compass Unmanaged Resources In No Environmentread
env0.cloud_unmanaged.get_compass_unmanaged_environmentsList Cloud Compass Unmanaged Environmentsread

Credentials4

env0.credentials.create_credentialCreate Credentialswrite
env0.credentials.delete_credentialDelete Credentialsdestructive
env0.credentials.find_credentialsList Organization credentialsread
env0.credentials.update_credentialUpdate Credentialswrite

Environment import4

env0.environment_import.batch_importImport Discovered Environmentswrite
env0.environment_import.discover_environmentsDiscover Unimported Environmentswrite
env0.environment_import.find_discovered_environmentsFind Discovered Environmentsread
env0.environment_import.rerun_importRerun environments which failed to importwrite

Git tokens4

env0.git_tokens.create_tokenCreate a git tokenwrite
env0.git_tokens.delete_tokenDelete a git tokendestructive
env0.git_tokens.find_token_by_idGet git token by idread
env0.git_tokens.find_token_by_typeList git tokensread

Personal API keys4

env0.personal_api_keys.create_personal_api_keyCreate personal API Keywrite
env0.personal_api_keys.delete_personal_api_keyDelete a User's personal API Key endpointdestructive
env0.personal_api_keys.find_all_personal_api_keysList User's personal API Keys endpointread
env0.personal_api_keys.update_personal_api_key_ip_allowlistUpdate a personal API Key IP allowlistwrite

Project policies4

env0.project_policies.check_limitCheck Environment meets Project limitsread
env0.project_policies.environments_get_policiesGet Policyread
env0.project_policies.environments_update_policiesUpdate Policywrite
env0.project_policies.templates_get_policy_catalogGet Policy Catalogread

Project role assignments4

env0.project_role_assignments.add_user_role_assignment_in_projectAssign a role to a user in a projectdestructive
env0.project_role_assignments.get_user_role_assignments_in_projectGet the user's role assignments in a projectread
env0.project_role_assignments.remove_user_role_assignment_in_projectRemove user's role assignment on projectdestructive
env0.project_role_assignments.update_user_role_assignment_in_projectUpdate user's role assignment on projectdestructive

SSH keys4

env0.ssh_keys.create_ssh_keyCreate a new SSH keywrite
env0.ssh_keys.delete_ssh_keyDelete SSH keydestructive
env0.ssh_keys.find_ssh_keys_by_organizationList all available SSH keysread
env0.ssh_keys.update_ssh_keyUpdate an existing SSH keywrite

SSO4

env0.sso.create_sso_edit_ticketCreate SSO Edit Ticketwrite
env0.sso.create_sso_ticketCreate SSO Ticketwrite
env0.sso.delete_sso_connectionDelete SSO Connectiondestructive
env0.sso.get_sso_configGet SSO Configurationread

Team project assignments4

env0.team_project_assignments.deprecated_create_or_update_single_assignmentCreate or Update a single Team to Project Assignmentwrite
env0.team_project_assignments.deprecated_delete_single_assignmentDelete a single Team to Project Assignmentdestructive
env0.team_project_assignments.deprecated_get_assignmentsList Project Teams Permissionsread
env0.team_project_assignments.deprecated_update_assignmentsUpdate Teams Assignmentswrite

Variables4

env0.variables.deleteDelete a variabledestructive
env0.variables.getQuery configuration variable by idread
env0.variables.listList Variables by Scoperead
env0.variables.upsertCreate or update variablewrite

Agent project assignments3

env0.agent_project_assignments.assign_agentsAssign agents to projectswrite
env0.agent_project_assignments.find_project_agent_by_idGet the agent assignment of a projectread
env0.agent_project_assignments.get_agent_assignmentsGet agent assignments of projectsread

Agent secrets3

env0.agent_secrets.create_agent_secretCreate agent secretwrite
env0.agent_secrets.get_agent_secretsGet agent secrets metadataread
env0.agent_secrets.revoke_agent_secretRevoke agent secretdestructive

Cloudquery integrations3

env0.cloudquery_integrations.delete_cloud_query_integrationDelete an organization CloudQuery integrationdestructive
env0.cloudquery_integrations.find_cloud_query_integrationGet an organization CloudQuery integrationread
env0.cloudquery_integrations.upsert_cloud_query_integrationCreate or update an organization CloudQuery integrationwrite

Environment discovery3

env0.environment_discovery.delete_environment_discoveryDelete Environment Discovery Configuration for a Projectdestructive
env0.environment_discovery.enable_environment_discoveryEnable/Update Environment Discovery Configurationwrite
env0.environment_discovery.get_environment_discoveryGet Environment Discovery Configuration for a Projectread

Environment state access3

env0.environment_state_access.delete_state_access_configDelete environment state access configurationdestructive
env0.environment_state_access.get_state_access_configGet environment state access configurationread
env0.environment_state_access.put_state_access_configCreate and update environment state access configurationwrite

GPG keys3

env0.gpg_keys.create_gpg_keyCreate a new GPG keywrite
env0.gpg_keys.delete_gpg_keyDelete a GPG keydestructive
env0.gpg_keys.find_gpg_keys_by_organizationList all available GPG keysread

Log forwarding3

env0.log_forwarding.delete_log_forwarding_conflgurationFor deleting log forwarding configurationdestructive
env0.log_forwarding.find_log_forwarding_configurationsFor finding log forwarding configurationread
env0.log_forwarding.upsert_log_forwarding_configurationFor creating or updating log forwarding configurationwrite

Module tests3

env0.module_tests.get_module_test_run_by_idGet Module Test Run by IDread
env0.module_tests.get_module_test_runsList Module Test Runsread
env0.module_tests.trigger_module_test_runTrigger Module Test Runwrite

Organization users3

env0.organization_users.listList Usersread
env0.organization_users.remove_user_from_organizationRemove Userdestructive
env0.organization_users.update_roleUpdate User's Organization Role Assignmentwrite

Project cost credentials3

env0.project_cost_credentials.add_project_costs_credentialsAssociate Cost Credentials with Projectwrite
env0.project_cost_credentials.get_project_costs_credentialsList Cost Credentials associated to Projectread
env0.project_cost_credentials.remove_project_costs_credentialsDissociate Cost Credentials from Projectdestructive

Project deployment credentials3

env0.project_deployment_credentials.add_deploy_creds_to_projectAssociate credentials with projectwrite
env0.project_deployment_credentials.get_deploy_creds_for_projectList deployment credentials by project idread
env0.project_deployment_credentials.remove_deploy_creds_from_projectDissociate credentials with projectdestructive

Remote state access3

env0.remote_state_access.delete_state_access_configurationDelete remote state access configurationdestructive
env0.remote_state_access.get_state_access_configurationGet remote state access configurationread
env0.remote_state_access.put_state_access_configurationCreate remote state access configurationwrite

Team role assignments3

env0.team_role_assignments.get_team_role_assignmentsGet Team Role Assignmentsread
env0.team_role_assignments.remove_team_role_assignmentRemove a Role Assignment for a Teamdestructive
env0.team_role_assignments.upsert_team_role_assignmentCreate or Update a Role Assignment for a Teamdestructive

User role assignments3

env0.user_role_assignments.get_user_role_assignmentsGet User Role Assignmentsread
env0.user_role_assignments.remove_user_role_assignmentRemove a Role Assignment for a Userdestructive
env0.user_role_assignments.upsert_user_role_assignmentCreate or Update a Role Assignment for a Userdestructive

Cloud compass2

env0.cloud_compass.find_trend_dataFind Trends Dataread
env0.cloud_compass.get_cloud_compass_treeGet Cloud Compass Project Treeread

Cloud events2

env0.cloud_events.get_change_event_urlGet a link to resource's change eventread
env0.cloud_events.get_event_by_idGet Event By IDread

Deployment steps2

env0.deployment_steps.find_by_deployment_log_idFind all steps by Deployment Idread
env0.deployment_steps.find_step_logGet logs for specific stepread

Environment outputs2

env0.environment_outputs.get_environments_outputsGet Environments Outputsread
env0.environment_outputs.get_environments_with_outputsGet Environments With Outputsread

Module usage2

env0.module_usage.registry_metrics_find_module_usageGet Module Usageread
env0.module_usage.registry_metrics_find_module_usage_sourcesList Module Usage Sourcesread

Audit events1

env0.audit_events.listFetch Audit Logsread

Cloud filters1

env0.cloud_filters.get_cloud_compass_filter_valuesList Cloud Compass Filter Valuesread

Dashboards1

env0.dashboards.queryGet query resultread

Invites1

env0.invites.create_inviteInvite Userwrite

This index shows a sample of each area. All 350 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The env zero (env0) MCP server, answered.

Is there an env zero (env0) MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 350 env zero (env0) actions across environments, deployments, migrations and bulk operations, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by env zero (env0).

What do I need to connect env zero (env0)?

Env zero API Key ID (Organization Settings > API Keys > Add API Key, or a Personal API Key from your avatar >… and env zero API Key secret, shown once when the key is created. The free call account { op: "connections.requirements", service: "env0" } lists exactly what to paste.

Can an AI agent delete or change things in env zero (env0)?

Only if its key allows it, and only with an explicit confirmation. 58 env zero (env0) actions are destructive, including remove User, delete Team and delete a Role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my env zero (env0) API limit?

actionlake paces every call to the limits in the env zero (env0) service file: 1,000 calls a minute per connection. Repeated reads are answered from cache (153 env zero (env0) actions can be), which never reaches env zero (env0).

What does an env zero (env0) action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (350 env zero (env0) actions page). Cache hits, searches, dry runs and calls env zero (env0) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which env zero (env0) API does it cover?

The env zero API 1.0.0 (OpenAPI 3.1.0) at api.env0.com. It is built from env zero (env0)'s documentation as read on 23 October 2026. 350 actions in 67 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my env zero (env0) data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your env zero (env0) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent env zero (env0) today.

Connect env zero (env0) free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

env zero (env0) MCP server for AI agents.

Connect env zero (env0) in three steps.

Add actionlake to Claude.

Connect env zero (env0).

Make the first call. Check before a write.

What an AI agent can do in env zero (env0).

Environments

Deployments

Migrations

Bulk operations

Projects

Templates

Scim

Approval policies