--- title: "env zero (env0) MCP server for AI agents - actionlake" description: "Give Claude 350 env zero (env0) actions through one MCP server: environments, deployments. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/env-zero-env0 updated: 2026-10-23 --- Connectors · Developer & infrastructure # env zero (env0) MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to env zero (env0) and the rest of your systems. It gives your agent 350 env zero (env0) actions (168 reads, 124 writes and 58 that wait for a confirmation) and holds the env zero (env0) credential itself, so the agent never does. It paces env zero (env0)'s limits and records every call. [Connect env zero (env0) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "env0.environments.list", intent: "check which env zero (env0) account is connected" } # List Environments · read · 1 upstream call ``` - 350 actions in one signed file - 168 read look, never change - 124 write create and update - 58 wait for a yes destructive, confirmed first Set up ## Connect env zero (env0) in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect env zero (env0). Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key_id` env zero API Key ID (Organization Settings > API Keys > Add API Key, or a Personal API Key from your avatar >… - `api_key_secret` env zero API Key secret, shown once when the key is created ``` account { op: "connections.requirements", service: "env0" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "env0.environments.list" } # list environments · read · 1 upstream call check { action: "env0.teams.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` env zero (env0) at a glance **Sign-in** Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key_id` `api_key_secret` **Limits we pace to** 1,000 calls a minute, per connection **API covered** Env zero API 1.0.0 (OpenAPI 3.1.0)`api.env0.com` **Built from** env zero (env0)'s documentation, read 23 October 2026[docs.envzero.com](https://docs.envzero.com/api-reference) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 153 of 168 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 3, so ask can line env zero (env0) up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in env zero (env0). 350 actions in 67 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **168** read look, never change - **124** write create and update - **58** destructive wait for a confirmation 1. ### Environments 19 7 read · 11 write · 1 destructive Create Environment · Create an Environment Without Template · Get downstream environments that will be triggered by this environment deployment · List Environments 2. ### Deployments 17 9 read · 5 write · 3 destructive List Deployments · Deploy Environment · Get Deployment · Cancel Deployment 3. ### Migrations 14 5 read · 8 write · 1 destructive Start migration for selected workspaces · Connect to migration source · Find Selection Issues · Get migration inventory for a session 4. ### Bulk operations 12 1 read · 7 write · 4 destructive Bulk add environment tags · Bulk approve · Bulk deploy · Bulk lock 5. ### Projects 11 7 read · 3 write · 1 destructive Create a new Project · List Direct Sub-Projects · List Projects (slim tree) · List Organization Projects Tags 6. ### Templates 11 6 read · 3 write · 2 destructive Create Template · Get Assignable Templates · Generate Terraform Variables from Repository · List Templates 7. ### Scim 10 4 read · 3 write · 3 destructive Create SCIM Configuration · Get SCIM Group Mappings · Reconcile SCIM State · Get SCIM Configuration 8. ### Approval policies 9 3 read · 3 write · 3 destructive Assign Approval Policy To Scope · Create Approval Policy · List Approval Policies · Get Approval Policy By Name **59 more areas · 247 actions** - Agents **8** - Code optimizer **8** - Configuration sets **8** - Providers **8** - Cloud compass credentials **7** - Custom flows **7** - Modules **7** - Notifications **7** - VCS connections **7** - Cloud accounts **6** - Cloud assets **6** - Costs **6** - Organizations **6** - Cloud compass drafts **5** - Cloud insights **5** - Drift causes **5** - Project budgets **5** - Roles **5** - Scheduling **5** - Teams **5** - VCS user mappings **5** - API keys **4** - Cloud environment resources **4** - Cloud resource lists **4** - Cloud resources **4** - Cloud unmanaged **4** - Credentials **4** - Environment import **4** - Git tokens **4** - Personal API keys **4** - Project policies **4** - Project role assignments **4** - SSH keys **4** - SSO **4** - Team project assignments **4** - Variables **4** - Agent project assignments **3** - Agent secrets **3** - Cloudquery integrations **3** - Environment discovery **3** - Environment state access **3** - GPG keys **3** - Log forwarding **3** - Module tests **3** - Organization users **3** - Project cost credentials **3** - Project deployment credentials **3** - Remote state access **3** - Team role assignments **3** - User role assignments **3** - Cloud compass **2** - Cloud events **2** - Deployment steps **2** - Environment outputs **2** - Module usage **2** - Audit events **1** - Cloud filters **1** - Dashboards **1** - Invites **1** Top actions ## The env zero (env0) API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 20 of env zero (env0)'s 20 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `env0.organization_users.list` List Users | List Users. | read | `identity.user.list` 474 connectors | | `env0.teams.list` List Teams | List Teams. | read | `identity.group.list` 262 connectors | | `env0.roles.list` Get All Roles | Get All Roles. | read | `identity.role.list` 184 connectors | | `env0.teams.create` Create Team | Create Team. | write | `identity.group.create` 205 connectors | | `env0.roles.create` Create a Role | Create a Role. | write | `identity.role.create` 105 connectors | | `env0.organization_users.remove_user_from_organization` Remove User | Remove User. | destructive | `identity.user.delete` 253 connectors | | `env0.api_keys.create` Create API Key | Create API Key. | write | `identity.api_key.create` 100 connectors | | `env0.api_keys.list` List Organization API Keys | List Organization API Keys. | read | `identity.api_key.list` 96 connectors | | `env0.deployments.list` List Deployments | List Deployments. | read | `devops.deployment.list` 22 connectors | | `env0.deployments.deploy` Deploy Environment | Deploy Environment. | write | `devops.deployment.create` 17 connectors | | `env0.audit_events.list` Fetch Audit Logs | Fetch Audit Logs. | read | `security.audit_log.list` 69 connectors | | `env0.projects.list` List Projects | List Projects. | read | this connector | Try it ## Prompts to paste into Claude. Each one names the env zero (env0) actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in env zero (env0)? List every user and their role. calls `env0.organization_users.list` 2. Write write Create Team in env zero (env0). Show me exactly what you will send before you save it. calls `env0.teams.create` Governance for env zero (env0) ## Destructive actions wait for a yes. 58 env zero (env0) actions are destructive. The first 10: - Remove User `env0.organization_users.remove_user_from_organization` - Delete Team `env0.teams.delete` - Delete a Role `env0.roles.delete` - Delete an API Key `env0.api_keys.delete` - Cancel Deployment `env0.deployments.cancel` - Archive a Project `env0.projects.archive` - Delete Template `env0.templates.delete` - Destroy Environment `env0.environments.destroy` - Remove Template from Project `env0.templates.remove_blueprint_from_project` - Abort Deployment `env0.deployments.abort` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do env0.organization_users.remove_user_from_organization confirm_policy: **human** Remove User? **intent:** the user asked me to remove User run suspended · waiting for a named person · key _env0-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "env0-agent", allowed_actions: ["env0.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "env0.organization_users.remove_user_from_organization", approver: "lead@example.com" }, { match: "env0.teams.delete", approver: "lead@example.com" }, { match: "env0.roles.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to env zero (env0) only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What env zero (env0) costs on actionlake. Every env zero (env0) action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call env zero (env0) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 350 env zero (env0) actions - 350 actions page each page of a long list is one call - 153 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every env zero (env0) action. 350 actions by area: the id your agent calls, what it does, and its effect. **Environments 19** - `env0.environments.create` Create Environment write - `env0.environments.create_environment_without_template` Create an Environment Without Template write - `env0.environments.find_downstream_environments` Get downstream environments that will be triggered by this environment deployment read - `env0.environments.list` List Environments read - `env0.environments.count_by_project` Count Environments read - `env0.environments.destroy` Destroy Environment destructive - and 13 more in this area **Deployments 17** - `env0.deployments.cancel` Cancel Deployment destructive - `env0.deployments.deploy` Deploy Environment write - `env0.deployments.get` Get Deployment read - `env0.deployments.list` List Deployments read - `env0.deployments.abort` Abort Deployment destructive - `env0.deployments.batch_cancel` Batch Cancel Deployments destructive - and 11 more in this area **Migrations 14** - `env0.migrations.batch_migrate` Start migration for selected workspaces write - `env0.migrations.connect` Connect to migration source write - `env0.migrations.find_selection_issues` Find Selection Issues read - `env0.migrations.get_inventory` Get migration inventory for a session read - `env0.migrations.delete_session` Delete a migration session destructive - `env0.migrations.finish_session` Finish a migration session write - and 8 more in this area **Bulk operations 12** - `env0.bulk_operations.bulk_add_tags` Bulk add environment tags write - `env0.bulk_operations.bulk_approve` Bulk approve write - `env0.bulk_operations.bulk_cancel` Bulk deploy destructive - `env0.bulk_operations.bulk_deploy` Bulk deploy write - `env0.bulk_operations.bulk_lock` Bulk lock write - `env0.bulk_operations.bulk_archive` Bulk archive destructive - and 6 more in this area **Projects 11** - `env0.projects.create` Create a new Project write - `env0.projects.find_children` List Direct Sub-Projects read - `env0.projects.find_project_tree_by_organization_id` List Projects (slim tree) read - `env0.projects.find_tags_by_organization_id` List Organization Projects Tags read - `env0.projects.archive` Archive a Project destructive - `env0.projects.get` Get a Project By ID read - and 5 more in this area **Templates 11** - `env0.templates.create` Create Template write - `env0.templates.get_assignable_templates` Get Assignable Templates read - `env0.templates.get_variables_from_repository` Generate Terraform Variables from Repository read - `env0.templates.list` List Templates read - `env0.templates.add_blueprint_to_project` Add Template to Project write - `env0.templates.delete` Delete Template destructive - and 5 more in this area **Scim 10** - `env0.scim.create_scim_configuration` Create SCIM Configuration write - `env0.scim.get_scim_configuration` Get SCIM Configuration read - `env0.scim.get_scim_group_mappings` Get SCIM Group Mappings read - `env0.scim.reconcile_scim` Reconcile SCIM State write - `env0.scim.delete_scim_configuration` Delete SCIM Configuration destructive - `env0.scim.delete_scim_group_mapping` Unlink SCIM Group Mapping destructive - and 4 more in this area **Approval policies 9** - `env0.approval_policies.templates_assign_approval_policy` Assign Approval Policy To Scope write - `env0.approval_policies.templates_create_approval_policy` Create Approval Policy write - `env0.approval_policies.templates_find_all_approval_policies` List Approval Policies read - `env0.approval_policies.templates_get_approval_policy_by_name` Get Approval Policy By Name read - `env0.approval_policies.templates_delete_approval_policy` Delete Approval Policy destructive - `env0.approval_policies.templates_get_approval_policy_by_scope` Get Approval Policy Assignments By Scope read - and 3 more in this area **Agents 8** - `env0.agents.create_agent` Create agent write - `env0.agents.get_agent` Get agent read - `env0.agents.get_agent_values` Get agent values file content (Deprecated) read - `env0.agents.list_agents` List agents read - `env0.agents.delete_agent` Delete agent destructive - `env0.agents.get_docker_agent_dot_env` Get agent .env file content (Deprecated) read - and 2 more in this area **Code optimizer 8** - `env0.code_optimizer.generate_code_for_issue` Generate Code For Issue write - `env0.code_optimizer.get_repository_states` Get Repository States read - `env0.code_optimizer.ignore_issue` Ignore Issue write - `env0.code_optimizer.trigger_code_scan` Trigger Code Scan write - `env0.code_optimizer.get_issue` Get Issue read - `env0.code_optimizer.get_issues` Get Issues read - and 2 more in this area **Configuration sets 8** - `env0.configuration_sets.assign_configuration_sets_to_scope` Assign sets to entity write - `env0.configuration_sets.create_configuration_set` Create a configuration set write - `env0.configuration_sets.find_set_assignments_by_scope` Find sets assigned to scope read - `env0.configuration_sets.find_sets_by_creation_scope` List Sets created by Scope read - `env0.configuration_sets.delete_configuration_set` Delete a configuration set destructive - `env0.configuration_sets.find_configuration_set_by_id` Get configuration set by its ID read - and 2 more in this area **Providers 8** - `env0.providers.create_provider` Create a new provider write - `env0.providers.create_version` Create a new provider version write - `env0.providers.download_version` Get a download url for a specific version read - `env0.providers.find_providers_by_organization_id` Find all providers in an organization read - `env0.providers.delete_provider` Delete a provider destructive - `env0.providers.find_provider_by_id` Find a provider by id read - and 2 more in this area **Cloud compass credentials 7** - `env0.cloud_compass_credentials.create_cloud_compass_credential` Create a Cloud Compass credential from a verified draft write - `env0.cloud_compass_credentials.get_cloud_compass_credential` Get a Cloud Compass credential with its features and syncs read - `env0.cloud_compass_credentials.get_cloud_compass_credential_logs` Get the log of the last run of a Cloud Compass sync read - `env0.cloud_compass_credentials.list_cloud_compass_cred_org_units` List the OUs and accounts of a Cloud Compass credential AWS Organization read - `env0.cloud_compass_credentials.delete_cloud_compass_credential` Delete a Cloud Compass credential destructive - `env0.cloud_compass_credentials.list_cloud_compass_credentials` List the Cloud Compass credentials and open drafts of an organization read - and 1 more in this area **Custom flows 7** - `env0.custom_flows.templates_assign_custom_flow` Assign Custom Flow write - `env0.custom_flows.templates_create_custom_flow` Create Custom Flow write - `env0.custom_flows.templates_find_custom_flows` Find Custom Flows read - `env0.custom_flows.templates_get_custom_flow_assignments` Get Custom Flow Assignments read - `env0.custom_flows.templates_delete_custom_flow` Delete Custom Flow destructive - `env0.custom_flows.templates_unassign_custom_flow` Unassign Custom Flow write - and 1 more in this area **Modules 7** - `env0.modules.create` Create module write - `env0.modules.get` Get module read - `env0.modules.list` List Modules read - `env0.modules.templates_get_module_versions` List Module Versions read - `env0.modules.delete` Delete module destructive - `env0.modules.templates_get_module_readme` Get Module README read - and 1 more in this area **Notifications 7** - `env0.notifications.create_notification_endpoint` Create Notification Endpoint write - `env0.notifications.find_notification_endpoints` List Notification Endpoints read - `env0.notifications.find_project_notification_settings` Get Notification Endpoint settings read - `env0.notifications.test_webhook_notification_endpoint` Test webhook notification target write - `env0.notifications.delete_notification_endpoint` Delete Notification Endpoint destructive - `env0.notifications.update_notification_endpoint` Update Notification Endpoint write - and 1 more in this area **VCS connections 7** - `env0.vcs_connections.create_vcs_connection` Create VCS Connection write - `env0.vcs_connections.get_vcs_connection` Get VCS Connection read - `env0.vcs_connections.get_vcs_repositories` Get VCS Repositories read - `env0.vcs_connections.list_vcs_connections` List VCS Connections read - `env0.vcs_connections.delete_vcs_connection` Delete VCS Connection destructive - `env0.vcs_connections.get_vcs_connection_dependents` List the entities that use a VCS connection read - and 1 more in this area **Cloud accounts 6** - `env0.cloud_accounts.create_cloud_configuration` Create Cloud Account write - `env0.cloud_accounts.find_cloud_configuration_by_id` Find Cloud Account by id read - `env0.cloud_accounts.find_cloud_configuration_by_org_id` List Organization's Cloud Accounts read - `env0.cloud_accounts.test_cloud_configuration` Test Cloud Account write - `env0.cloud_accounts.delete_cloud_configuration` Delete Cloud Account destructive - `env0.cloud_accounts.update_cloud_configuration` Update Cloud Account write **Cloud assets 6** - `env0.cloud_assets.check_cloud_compass_managed_status` Check Which Cloud Compass Resources env zero Manages read - `env0.cloud_assets.get_cloud_compass_asset_counts` Count Cloud Compass Resources By Group read - `env0.cloud_assets.get_cloud_compass_assets` List Cloud Compass Resources read - `env0.cloud_assets.read_cloud_compass_metadata_rows` Read Cloud Compass Metadata Rows read - `env0.cloud_assets.get_cloud_compass_asset_details` Get Cloud Compass Resource Details read - `env0.cloud_assets.get_cloud_compass_asset_related` List Cloud Compass Connected Resources read **Costs 6** - `env0.costs.get_environment_costs` Get costs for an Environment read - `env0.costs.get_organization_costs` Get costs for an Organization read - `env0.costs.get_project_costs` Get costs for a Project read - `env0.costs.get_projects_with_cost_credentials` List projects with cost credentials associated to organization read - `env0.costs.get_weekly_costs` Get weekly costs for projects or environments read - `env0.costs.is_cost_enabled` Return wether or not cost is enabled for a project read **Organizations 6** - `env0.organizations.create_organization` Create a new Organization write - `env0.organizations.get` Get Organization read - `env0.organizations.list` List Organizations read - `env0.organizations.update_policy` Update Policy write - `env0.organizations.get_organization_limits` Get Organization Limits read - `env0.organizations.update_organization` Update Organization write **Cloud compass drafts 5** - `env0.cloud_compass_drafts.create_cloud_compass_draft` Start a Cloud Compass credential wizard draft write - `env0.cloud_compass_drafts.get_cloud_compass_draft` Get a Cloud Compass credential wizard draft read - `env0.cloud_compass_drafts.list_cloud_compass_org_units` List the OUs and accounts of a Cloud Compass draft AWS Organization read - `env0.cloud_compass_drafts.verify_cloud_compass_draft` Start the CloudQuery test connections of a Cloud Compass draft write - `env0.cloud_compass_drafts.delete_cloud_compass_draft` Discard a Cloud Compass credential wizard draft destructive **Cloud insights 5** - `env0.cloud_insights.get_cloud_compass_insight_details` Get Cloud Compass Insight Details read - `env0.cloud_insights.get_cloud_compass_insight_list` List Cloud Compass Insights read - `env0.cloud_insights.get_cloud_compass_insights` Count Cloud Compass Insights read - `env0.cloud_insights.silence_cloud_compass_insight` Silence A Cloud Compass Insight write - `env0.cloud_insights.unsilence_cloud_compass_insight` Unsilence A Cloud Compass Insight destructive **Drift causes 5** - `env0.drift_causes.get_drift_causes` Get Drift Causes read - `env0.drift_causes.get_drift_fix_stats` Get Drift Fix Stats read - `env0.drift_causes.ignore_drift_cause` Ignore Drift Cause write - `env0.drift_causes.un_ignore_drift_cause` Un-ignore Drift Cause write - `env0.drift_causes.get_ignored_drift_causes` Get Ignored Drift Causes read **Project budgets 5** - `env0.project_budgets.get_accumulated_project_costs` Get a project's accumulated costs read - `env0.project_budgets.get_budget_summary` Get projects' budget summary of the current period read - `env0.project_budgets.get_project_budget` Get a project's budget read - `env0.project_budgets.upsert_project_budget` Upsert a project's budget write - `env0.project_budgets.remove_project_budget` Remove a project's budget destructive **Roles 5** - `env0.roles.create` Create a Role write - `env0.roles.get` Get a Role read - `env0.roles.list` Get All Roles read - `env0.roles.update` Update a Role write - `env0.roles.delete` Delete a Role destructive **Scheduling 5** - `env0.scheduling.get_drift_detection_by_environment_id` Get Drift Detection Environment Scheduling read - `env0.scheduling.get_schedule_by_environment_id` Get Environment Scheduling read - `env0.scheduling.get_schedule_by_project_id` Get Project Scheduling read - `env0.scheduling.set_drift_detection` Set Drift Detection Environment Scheduling write - `env0.scheduling.set_environment_schedule` Set Environment Scheduling write **Teams 5** - `env0.teams.create` Create Team write - `env0.teams.get` Get Team read - `env0.teams.list` List Teams read - `env0.teams.update` Update Team write - `env0.teams.delete` Delete Team destructive **VCS user mappings 5** - `env0.vcs_user_mappings.connect_verified_vcs_provider_user_mapping` Connect a Verified VCS Provider User Mapping write - `env0.vcs_user_mappings.create_vcs_provider_user_mapping` Create VCS Provider User Mapping write - `env0.vcs_user_mappings.get_organization_vcs_provider_user_mappings` List Organization's VCS ID Mappings read - `env0.vcs_user_mappings.get_vcs_provider_user_mappings` List User's VCS ID Mappings read - `env0.vcs_user_mappings.update_vcs_provider_user_mappings` Update a User's VCS ID Mapping write **API keys 4** - `env0.api_keys.create` Create API Key write - `env0.api_keys.delete` Delete an API Key destructive - `env0.api_keys.list` List Organization API Keys read - `env0.api_keys.update_api_key_ip_allowlist` Update an API Key IP allowlist write **Cloud environment resources 4** - `env0.cloud_environment_resources.get_cloud_compass_environment_graph` Get Cloud Compass Resource Graph Of An Environment read - `env0.cloud_environment_resources.get_cloud_compass_managed_resources` List Cloud Compass Managed Resources Of An Environment read - `env0.cloud_environment_resources.get_cloud_compass_unmanaged_resources` List Cloud Compass Unmanaged Resources Of An Environment read - `env0.cloud_environment_resources.list_environment_state_resources` List Environment State Resources read **Cloud resource lists 4** - `env0.cloud_resource_lists.get_cloud_compass_list_export` Get A Cloud Compass Resource List Export read - `env0.cloud_resource_lists.get_cloud_compass_list_groups` Group A Cloud Compass Resource List read - `env0.cloud_resource_lists.get_cloud_compass_list_values` List The Values Of A Cloud Compass Resource List Column read - `env0.cloud_resource_lists.start_cloud_compass_list_export` Export A Cloud Compass Resource List write **Cloud resources 4** - `env0.cloud_resources.codify` Generate IaC for Cloud Resources read - `env0.cloud_resources.find_cloud_resources` Find Cloud Resources read - `env0.cloud_resources.get_resource_events` Get Resource Events read - `env0.cloud_resources.update_cloud_resources` Update Cloud Resources write **Cloud unmanaged 4** - `env0.cloud_unmanaged.get_cloud_compass_unmanaged_counts` Count Cloud Compass Unmanaged Resources Per Environment read - `env0.cloud_unmanaged.get_cloud_compass_unmanaged_env_assets` List Cloud Compass Resources Of An Unmanaged Environment read - `env0.cloud_unmanaged.get_cloud_compass_unmanaged_remainder` List Cloud Compass Unmanaged Resources In No Environment read - `env0.cloud_unmanaged.get_compass_unmanaged_environments` List Cloud Compass Unmanaged Environments read **Credentials 4** - `env0.credentials.create_credential` Create Credentials write - `env0.credentials.delete_credential` Delete Credentials destructive - `env0.credentials.find_credentials` List Organization credentials read - `env0.credentials.update_credential` Update Credentials write **Environment import 4** - `env0.environment_import.batch_import` Import Discovered Environments write - `env0.environment_import.discover_environments` Discover Unimported Environments write - `env0.environment_import.find_discovered_environments` Find Discovered Environments read - `env0.environment_import.rerun_import` Rerun environments which failed to import write **Git tokens 4** - `env0.git_tokens.create_token` Create a git token write - `env0.git_tokens.delete_token` Delete a git token destructive - `env0.git_tokens.find_token_by_id` Get git token by id read - `env0.git_tokens.find_token_by_type` List git tokens read **Personal API keys 4** - `env0.personal_api_keys.create_personal_api_key` Create personal API Key write - `env0.personal_api_keys.delete_personal_api_key` Delete a User's personal API Key endpoint destructive - `env0.personal_api_keys.find_all_personal_api_keys` List User's personal API Keys endpoint read - `env0.personal_api_keys.update_personal_api_key_ip_allowlist` Update a personal API Key IP allowlist write **Project policies 4** - `env0.project_policies.check_limit` Check Environment meets Project limits read - `env0.project_policies.environments_get_policies` Get Policy read - `env0.project_policies.environments_update_policies` Update Policy write - `env0.project_policies.templates_get_policy_catalog` Get Policy Catalog read **Project role assignments 4** - `env0.project_role_assignments.add_user_role_assignment_in_project` Assign a role to a user in a project destructive - `env0.project_role_assignments.get_user_role_assignments_in_project` Get the user's role assignments in a project read - `env0.project_role_assignments.remove_user_role_assignment_in_project` Remove user's role assignment on project destructive - `env0.project_role_assignments.update_user_role_assignment_in_project` Update user's role assignment on project destructive **SSH keys 4** - `env0.ssh_keys.create_ssh_key` Create a new SSH key write - `env0.ssh_keys.delete_ssh_key` Delete SSH key destructive - `env0.ssh_keys.find_ssh_keys_by_organization` List all available SSH keys read - `env0.ssh_keys.update_ssh_key` Update an existing SSH key write **SSO 4** - `env0.sso.create_sso_edit_ticket` Create SSO Edit Ticket write - `env0.sso.create_sso_ticket` Create SSO Ticket write - `env0.sso.delete_sso_connection` Delete SSO Connection destructive - `env0.sso.get_sso_config` Get SSO Configuration read **Team project assignments 4** - `env0.team_project_assignments.deprecated_create_or_update_single_assignment` Create or Update a single Team to Project Assignment write - `env0.team_project_assignments.deprecated_delete_single_assignment` Delete a single Team to Project Assignment destructive - `env0.team_project_assignments.deprecated_get_assignments` List Project Teams Permissions read - `env0.team_project_assignments.deprecated_update_assignments` Update Teams Assignments write **Variables 4** - `env0.variables.delete` Delete a variable destructive - `env0.variables.get` Query configuration variable by id read - `env0.variables.list` List Variables by Scope read - `env0.variables.upsert` Create or update variable write **Agent project assignments 3** - `env0.agent_project_assignments.assign_agents` Assign agents to projects write - `env0.agent_project_assignments.find_project_agent_by_id` Get the agent assignment of a project read - `env0.agent_project_assignments.get_agent_assignments` Get agent assignments of projects read **Agent secrets 3** - `env0.agent_secrets.create_agent_secret` Create agent secret write - `env0.agent_secrets.get_agent_secrets` Get agent secrets metadata read - `env0.agent_secrets.revoke_agent_secret` Revoke agent secret destructive **Cloudquery integrations 3** - `env0.cloudquery_integrations.delete_cloud_query_integration` Delete an organization CloudQuery integration destructive - `env0.cloudquery_integrations.find_cloud_query_integration` Get an organization CloudQuery integration read - `env0.cloudquery_integrations.upsert_cloud_query_integration` Create or update an organization CloudQuery integration write **Environment discovery 3** - `env0.environment_discovery.delete_environment_discovery` Delete Environment Discovery Configuration for a Project destructive - `env0.environment_discovery.enable_environment_discovery` Enable/Update Environment Discovery Configuration write - `env0.environment_discovery.get_environment_discovery` Get Environment Discovery Configuration for a Project read **Environment state access 3** - `env0.environment_state_access.delete_state_access_config` Delete environment state access configuration destructive - `env0.environment_state_access.get_state_access_config` Get environment state access configuration read - `env0.environment_state_access.put_state_access_config` Create and update environment state access configuration write **GPG keys 3** - `env0.gpg_keys.create_gpg_key` Create a new GPG key write - `env0.gpg_keys.delete_gpg_key` Delete a GPG key destructive - `env0.gpg_keys.find_gpg_keys_by_organization` List all available GPG keys read **Log forwarding 3** - `env0.log_forwarding.delete_log_forwarding_conflguration` For deleting log forwarding configuration destructive - `env0.log_forwarding.find_log_forwarding_configurations` For finding log forwarding configuration read - `env0.log_forwarding.upsert_log_forwarding_configuration` For creating or updating log forwarding configuration write **Module tests 3** - `env0.module_tests.get_module_test_run_by_id` Get Module Test Run by ID read - `env0.module_tests.get_module_test_runs` List Module Test Runs read - `env0.module_tests.trigger_module_test_run` Trigger Module Test Run write **Organization users 3** - `env0.organization_users.list` List Users read - `env0.organization_users.remove_user_from_organization` Remove User destructive - `env0.organization_users.update_role` Update User's Organization Role Assignment write **Project cost credentials 3** - `env0.project_cost_credentials.add_project_costs_credentials` Associate Cost Credentials with Project write - `env0.project_cost_credentials.get_project_costs_credentials` List Cost Credentials associated to Project read - `env0.project_cost_credentials.remove_project_costs_credentials` Dissociate Cost Credentials from Project destructive **Project deployment credentials 3** - `env0.project_deployment_credentials.add_deploy_creds_to_project` Associate credentials with project write - `env0.project_deployment_credentials.get_deploy_creds_for_project` List deployment credentials by project id read - `env0.project_deployment_credentials.remove_deploy_creds_from_project` Dissociate credentials with project destructive **Remote state access 3** - `env0.remote_state_access.delete_state_access_configuration` Delete remote state access configuration destructive - `env0.remote_state_access.get_state_access_configuration` Get remote state access configuration read - `env0.remote_state_access.put_state_access_configuration` Create remote state access configuration write **Team role assignments 3** - `env0.team_role_assignments.get_team_role_assignments` Get Team Role Assignments read - `env0.team_role_assignments.remove_team_role_assignment` Remove a Role Assignment for a Team destructive - `env0.team_role_assignments.upsert_team_role_assignment` Create or Update a Role Assignment for a Team destructive **User role assignments 3** - `env0.user_role_assignments.get_user_role_assignments` Get User Role Assignments read - `env0.user_role_assignments.remove_user_role_assignment` Remove a Role Assignment for a User destructive - `env0.user_role_assignments.upsert_user_role_assignment` Create or Update a Role Assignment for a User destructive **Cloud compass 2** - `env0.cloud_compass.find_trend_data` Find Trends Data read - `env0.cloud_compass.get_cloud_compass_tree` Get Cloud Compass Project Tree read **Cloud events 2** - `env0.cloud_events.get_change_event_url` Get a link to resource's change event read - `env0.cloud_events.get_event_by_id` Get Event By ID read **Deployment steps 2** - `env0.deployment_steps.find_by_deployment_log_id` Find all steps by Deployment Id read - `env0.deployment_steps.find_step_log` Get logs for specific step read **Environment outputs 2** - `env0.environment_outputs.get_environments_outputs` Get Environments Outputs read - `env0.environment_outputs.get_environments_with_outputs` Get Environments With Outputs read **Module usage 2** - `env0.module_usage.registry_metrics_find_module_usage` Get Module Usage read - `env0.module_usage.registry_metrics_find_module_usage_sources` List Module Usage Sources read **Audit events 1** - `env0.audit_events.list` Fetch Audit Logs read **Cloud filters 1** - `env0.cloud_filters.get_cloud_compass_filter_values` List Cloud Compass Filter Values read **Dashboards 1** - `env0.dashboards.query` Get query result read **Invites 1** - `env0.invites.create_invite` Invite User write This index shows a sample of each area. All 350 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The env zero (env0) MCP server, answered. **Is there an env zero (env0) MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 350 env zero (env0) actions across environments, deployments, migrations and bulk operations, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by env zero (env0). **What do I need to connect env zero (env0)?** Env zero API Key ID (Organization Settings > API Keys > Add API Key, or a Personal API Key from your avatar >… and env zero API Key secret, shown once when the key is created. The free call account { op: "connections.requirements", service: "env0" } lists exactly what to paste. **Can an AI agent delete or change things in env zero (env0)?** Only if its key allows it, and only with an explicit confirmation. 58 env zero (env0) actions are destructive, including remove User, delete Team and delete a Role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my env zero (env0) API limit?** actionlake paces every call to the limits in the env zero (env0) service file: 1,000 calls a minute per connection. Repeated reads are answered from cache (153 env zero (env0) actions can be), which never reaches env zero (env0). **What does an env zero (env0) action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (350 env zero (env0) actions page). Cache hits, searches, dry runs and calls env zero (env0) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which env zero (env0) API does it cover?** The env zero API 1.0.0 (OpenAPI 3.1.0) at api.env0.com. It is built from env zero (env0)'s documentation as read on 23 October 2026. 350 actions in 67 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my env zero (env0) data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your env zero (env0) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like env zero (env0) Shares the most action names with - [LaunchDarkly 16](https://actionlake.com/connectors/launchdarkly) - [Pulumi Cloud 13](https://actionlake.com/connectors/pulumi-cloud) - [Spacelift 12](https://actionlake.com/connectors/spacelift) - [Harbor 12](https://actionlake.com/connectors/harbor) - [Sourcegraph 10](https://actionlake.com/connectors/sourcegraph) - [ClickHouse Cloud 10](https://actionlake.com/connectors/clickhouse-cloud) Joins with, on shared entities - [HaloPSA 3](https://actionlake.com/connectors/halopsa) - [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users) - [Fortinet FortiGate 3](https://actionlake.com/connectors/fortinet-fortigate) - [Genesys Cloud CX 3](https://actionlake.com/connectors/genesys-cloud-cx) - [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud) - [Commvault Cloud 3](https://actionlake.com/connectors/commvault-cloud) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by env zero (env0); the name is the vendor's own. Counts are from the env zero (env0) service file, version 1.0.0. ## Give your agent env zero (env0) today. [Connect env zero (env0) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/env-zero-env0 More: https://actionlake.com/llms.txt