Skip to content
actionlake
Start free

Connectors · MSP & PSA

Imperva Cloud Application Security MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Imperva Cloud Application Security and the rest of your systems. It gives your agent 788 Imperva Cloud Application Security actions (379 reads, 296 writes and 113 that wait for a confirmation) and holds the Imperva Cloud Application Security credential itself, so the agent never does. It paces Imperva Cloud Application Security's limits and records every call.

Connect Imperva Cloud Application Security freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "imperva_cloud_waf.idm_users.get_account_users",  intent: "check which Imperva Cloud Application Security account is connected"}# Retrieve the list of users for a given account · read · 1 upstream call
  • 788actionsin one signed file
  • 379readlook, never change
  • 296writecreate and update
  • 113wait for a yesdestructive, confirmed first

Set up

Connect Imperva Cloud Application Security in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Imperva Cloud Application Security.

    Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_idImperva API ID: in the Cloud Security Console open Account > Account Management > API Keys and add an API key; copy…
    • api_keyImperva API key, shown once beside the API ID when the key is created
    account { op: "connections.requirements", service: "imperva_cloud_waf" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "imperva_cloud_waf.idm_users.get_account_users" }# retrieve the list of users for a given account · read · 1 upstream callcheck { action: "imperva_cloud_waf.idm_users.create_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Imperva Cloud Application Security at a glance

Sign-in
Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_idapi_key
Limits we pace to
10 calls a second, per connection
API covered
Imperva Cloud API v1/v2/v3 (58 published API definitions)api.imperva.com
Built from
Imperva Cloud Application Security's documentation, read 23 October 2026docs-cybersec.thalesgroup.comdocs-cybersec.thalesgroup.comdocs-cybersec.thalesgroup.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
292 of 379 reads, for up to 5 minutes; a write clears what it affects
Shared entities
4, so ask can line Imperva Cloud Application Security up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Imperva Cloud Application Security.

788 actions in 56 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 379readlook, never change
  • 296writecreate and update
  • 113destructivewait for a confirmation

  1. DNS

    111

    46 read · 45 write · 20 destructive

    Retrieve details of all domains · Add new domain (manual configuration) · Retrieve domain details · Remove domain

  2. API security

    92

    53 read · 26 write · 13 destructive

    Add Authentication Location · add bola manual risk to endpoints · Add Category · Add Data Label

  3. Sites

    76

    28 read · 39 write · 9 destructive

    Add a cache rule · Add rule · Add data center · Add server

  4. Bot protection

    57

    29 read · 18 write · 10 destructive

    Search for Conditions · Retrieve children of a Condition List · Validate a Condition literal · Create a new Campaign

  5. CSP

    57

    33 read · 17 write · 7 destructive

    Bulk add a justification note to multiple scripts · Add notes to a discovered domain for specific path · Add an email address to the notification list · Add a domain to pre-approved list

  6. Ato

    40

    31 read · 6 write · 3 destructive

    Update the allowlist for a specific site · Copy a single login endpoint, or all of them, from the "source" website to the "target" website under the same account ID · Retrieve aggregated login report · Get aggregators successful requests of unique users for the current time period compared to previous time period

  7. AI app security

    22

    11 read · 8 write · 3 destructive

    Create a new API key · Create a new Application · Create a default policy · Create a new policy

  8. Certificates

    22

    11 read · 6 write · 5 destructive

    Add domain to the SSL validation delegation settings · Trigger SSL domain validation · Get HSM latency · Get account SSL settings

48 more areas · 311 actions
  • Policies 21
  • Websites 18
  • API security tags 14
  • Accounts 13
  • Ddos test alerts 12
  • Network connections 12
  • Client certificates 11
  • Ddos ip protection 11
  • Siem 11
  • Site domains 11
  • User management 11
  • Cache 10
  • Netsec policies 10
  • Netsec performance 9
  • Ddos network acl 8
  • Protected ips 8
  • Idm users 7
  • Login protect 7
  • Notification settings 7
  • Runtime protection 7
  • Traffic stats 7
  • Waf settings 7
  • Waiting rooms 7
  • Integrations 5
  • Rules 5
  • API clients 4
  • Attack analytics 4
  • Cloud origins 4
  • Ddos policy visibility 4
  • Flow exporters 4
  • Network subaccounts 4
  • Account export 3
  • Ddos divert 3
  • Ddos pop monitoring 3
  • Delivery 3
  • HSM certificates 3
  • Load balancing 3
  • Site monitoring 3
  • Subscriptions 3
  • Audit trail 2
  • Custom certificates 2
  • Ddos assets 2
  • Usage 2
  • Usage report legacy 2
  • Ip reputation 1
  • Performance stats 1
  • Session release 1
  • Troubleshooting 1

Top actions

The Imperva Cloud Application Security API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 28 of Imperva Cloud Application Security's 28 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
imperva_cloud_waf.idm_users.get_account_usersRetrieve the list of users for a given accountRetrieve the list of users for a given account.readidentity.user.list474 connectors
imperva_cloud_waf.user_management.get_roles_detailsGet role details by account ID, user email, or role nameGet role details by account ID, user email, or role name.readidentity.role.list184 connectors
imperva_cloud_waf.idm_users.create_userCreate new userCreate new user.writeidentity.user.create262 connectors
imperva_cloud_waf.user_management.create_roleCreate new roleCreate new role.writeidentity.role.create105 connectors
imperva_cloud_waf.idm_users.delete_users_by_emailsDelete user by user emailDelete user by user email.destructiveidentity.user.delete253 connectors
imperva_cloud_waf.policies.get_all_policies_by_accountRetrieve all policies in accountRetrieve all policies in account.readsecurity.policy.list36 connectors
imperva_cloud_waf.api_clients.createCreate API ClientCreate API Client.writeidentity.api_key.create100 connectors
imperva_cloud_waf.api_clients.fetch_api_key_metadataFetch API Client metadataFetch API Client metadata.readidentity.api_key.list96 connectors
imperva_cloud_waf.policies.create_new_policyAdd a new policy or copy an existing policyAdd a new policy or copy an existing policy.writesecurity.policy.create25 connectors
imperva_cloud_waf.audit_trail.get_audit_events_v2Get account audit eventsGet account audit events.readsecurity.audit_log.list69 connectors
imperva_cloud_waf.accounts.list_accountsList managed accountsList managed accounts.readplatform.tenant.list70 connectors
imperva_cloud_waf.attack_analytics.get_incidents_by_accountRetrieve a list of incidentsRetrieve a list of incidents.readsecurity.incident.list17 connectors

Try it

Prompts to paste into Claude.

Each one names the Imperva Cloud Application Security actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Imperva Cloud Application Security? List every user and their role.

    callsimperva_cloud_waf.idm_users.get_account_users

  2. Writewrite

    Create new user in Imperva Cloud Application Security. Show me exactly what you will send before you save it.

    callsimperva_cloud_waf.idm_users.create_user

Governance for Imperva Cloud Application Security

Destructive actions wait for a yes.

113 Imperva Cloud Application Security actions are destructive. The first 10:

  • Delete user by user emailimperva_cloud_waf.idm_users.delete_users_by_emails
  • Delete role by role IDimperva_cloud_waf.user_management.delete_role_by_role_id
  • Delete API Clientimperva_cloud_waf.api_clients.delete
  • Delete an existing policyimperva_cloud_waf.policies.delete_policy
  • Remove domainimperva_cloud_waf.dns.remove_domain
  • Purge a site's cacheimperva_cloud_waf.cache.purge
  • Delete rule - must contain valid rule idimperva_cloud_waf.rules.delete
  • Delete an email address from the notification listimperva_cloud_waf.csp.remove_email
  • Delete siteimperva_cloud_waf.sites.delete_site
  • Delete domain recordsimperva_cloud_waf.dns.delete_records

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doimperva_cloud_waf.idm_users.delete_users_by_emailsconfirm_policy: human

Delete user by user email?

intent: the user asked me to delete user by user email

run suspended · waiting for a named person · key imperva-cloud-waf-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "imperva-cloud-waf-agent",  allowed_actions: ["imperva_cloud_waf.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "imperva_cloud_waf.idm_users.delete_users_by_emails", approver: "[email protected]" },    { match: "imperva_cloud_waf.user_management.delete_role_by_role_id", approver: "[email protected]" },    { match: "imperva_cloud_waf.api_clients.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Imperva Cloud Application Security only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Imperva Cloud Application Security costs on actionlake.

Every Imperva Cloud Application Security action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Imperva Cloud Application Security refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 788 Imperva Cloud Application Security actions
  • 788actions pageeach page of a long list is one call
  • 292reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Imperva Cloud Application Security action.

788 actions by area: the id your agent calls, what it does, and its effect.

DNS111
  • imperva_cloud_waf.dns.add_domainAdd new domain (manual configuration)write
  • imperva_cloud_waf.dns.get_all_account_domainsRetrieve details of all domainsread
  • imperva_cloud_waf.dns.get_all_domainsRetrieve details of all domainsread
  • imperva_cloud_waf.dns.get_domainRetrieve domain detailsread
  • imperva_cloud_waf.dns.remove_domainRemove domaindestructive
  • imperva_cloud_waf.dns.abort_cancellationStop DNSSEC cancellation processwrite
  • and 105 more in this area
API security92
  • imperva_cloud_waf.api_security.add_auth_locationAdd Authentication Locationwrite
  • imperva_cloud_waf.api_security.add_bola_manual_risk_to_endpointsadd bola manual risk to endpointswrite
  • imperva_cloud_waf.api_security.add_categoryAdd Categorywrite
  • imperva_cloud_waf.api_security.add_data_labelAdd Data Labelwrite
  • imperva_cloud_waf.api_security.create_consoleCreate a consolewrite
  • imperva_cloud_waf.api_security.create_controllersCreate a controllerwrite
  • and 86 more in this area
Sites76
  • imperva_cloud_waf.sites.add_cache_ruleAdd a cache rulewrite
  • imperva_cloud_waf.sites.add_custom_ruleAdd rulewrite
  • imperva_cloud_waf.sites.add_data_centerAdd data centerwrite
  • imperva_cloud_waf.sites.add_dc_serverAdd serverwrite
  • imperva_cloud_waf.sites.add_siteAdd a sitewrite
  • imperva_cloud_waf.sites.check_caa_complianceCheck CAA complianceread
  • and 70 more in this area
Bot protection57
  • imperva_cloud_waf.bot_protection.account_condition_searchSearch for Conditionsread
  • imperva_cloud_waf.bot_protection.condition_childrenRetrieve children of a Condition Listread
  • imperva_cloud_waf.bot_protection.condition_validateValidate a Condition literalread
  • imperva_cloud_waf.bot_protection.create_account_campaignCreate a new Campaignwrite
  • imperva_cloud_waf.bot_protection.create_account_conditionCreate a new Conditionwrite
  • imperva_cloud_waf.bot_protection.create_account_credentialCreate new Account credentialswrite
  • and 51 more in this area
CSP57
  • imperva_cloud_waf.csp.add_bulk_script_notesBulk add a justification note to multiple scriptswrite
  • imperva_cloud_waf.csp.add_domain_note_for_pathAdd notes to a discovered domain for specific pathwrite
  • imperva_cloud_waf.csp.add_emailAdd an email address to the notification listwrite
  • imperva_cloud_waf.csp.add_pre_approved_domainAdd a domain to pre-approved listwrite
  • imperva_cloud_waf.csp.add_pre_approved_scriptAdd a script to pre-approved listwrite
  • imperva_cloud_waf.csp.add_script_group_notes_for_pathAdd notes to a discovered script group.write
  • and 51 more in this area
Ato40
  • imperva_cloud_waf.ato.add_to_allow_listUpdate the allowlist for a specific sitewrite
  • imperva_cloud_waf.ato.copy_endpoint_configuration_from_site_to_another_siteCopy a single login endpoint, or all of them, from the "source" website to the "target" website under the same account IDwrite
  • imperva_cloud_waf.ato.get_aggregators_evidenceRetrieve aggregated login reportread
  • imperva_cloud_waf.ato.get_aggregators_statsGet aggregators successful requests of unique users for the current time period compared to previous time periodread
  • imperva_cloud_waf.ato.delete_endpointDelete an endpoint for this websitedestructive
  • imperva_cloud_waf.ato.delete_pii_passwordReset the PII passworddestructive
  • and 34 more in this area
AI app security22
  • imperva_cloud_waf.ai_app_security.create_api_keyCreate a new API keywrite
  • imperva_cloud_waf.ai_app_security.create_applicationCreate a new Applicationwrite
  • imperva_cloud_waf.ai_app_security.create_default_policyCreate a default policywrite
  • imperva_cloud_waf.ai_app_security.create_policyCreate a new policywrite
  • imperva_cloud_waf.ai_app_security.count_active_policiesCount active policiesread
  • imperva_cloud_waf.ai_app_security.delete_api_keyDelete an API key by IDdestructive
  • and 16 more in this area
Certificates22
  • imperva_cloud_waf.certificates.add_domain_to_ssl_validation_delegation_settingsAdd domain to the SSL validation delegation settingswrite
  • imperva_cloud_waf.certificates.check_site_certificate_domain_statusTrigger SSL domain validationread
  • imperva_cloud_waf.certificates.get_latencyGet HSM latencyread
  • imperva_cloud_waf.certificates.get_ssl_validation_delegation_settingsGet account SSL settingsread
  • imperva_cloud_waf.certificates.assign_certificate_to_siteAssign an mTLS client certificate to websiteswrite
  • imperva_cloud_waf.certificates.change_san_validation_methodChange SAN validation methodwrite
  • and 16 more in this area
Policies21
  • imperva_cloud_waf.policies.create_new_policyAdd a new policy or copy an existing policywrite
  • imperva_cloud_waf.policies.get_all_policies_by_accountRetrieve all policies in accountread
  • imperva_cloud_waf.policies.get_policy_by_idRetrieve policy detailsread
  • imperva_cloud_waf.policies.modify_policyModify an existing policy (partial update)write
  • imperva_cloud_waf.policies.add_available_account_to_policyEnables an account to access a policywrite
  • imperva_cloud_waf.policies.apply_asset_to_policyApply a single policy to a single assetwrite
  • and 15 more in this area
Websites18
  • imperva_cloud_waf.websites.extended_get_sitesExtended get sitesread
  • imperva_cloud_waf.websites.get_account_default_inbound_tls_configurationGet account default TLS configuration settings.read
  • imperva_cloud_waf.websites.get_site_spa_data_fullGet site SPA settingsread
  • imperva_cloud_waf.websites.get_site_spa_settingsGet site SPA settingsread
  • imperva_cloud_waf.websites.get_site_statisticsGet statistics for site(s)read
  • imperva_cloud_waf.websites.delete_siteDelete sitedestructive
  • and 12 more in this area
API security tags14
  • imperva_cloud_waf.api_security_tags.create_tagCreate a tag with the given name and the given infowrite
  • imperva_cloud_waf.api_security_tags.get_all_resource_supported_filtersGet all the supported filters for tags, these filters are applicable for auto taggingread
  • imperva_cloud_waf.api_security_tags.get_all_resources_with_tagsGet all resources and their associated tags for a specific resource typeread
  • imperva_cloud_waf.api_security_tags.get_all_tags_for_accountGet all tag info for a given accountread
  • imperva_cloud_waf.api_security_tags.delete_tagDelete the tag with given tag iddestructive
  • imperva_cloud_waf.api_security_tags.get_resource_with_tagsGet all tags for a specific resource Id of a specific resource typeread
  • and 8 more in this area
Accounts13
  • imperva_cloud_waf.accounts.add_accountAdd a new managed accountwrite
  • imperva_cloud_waf.accounts.add_sub_accountAdd a new sub accountwrite
  • imperva_cloud_waf.accounts.get_account_statusGet account statusread
  • imperva_cloud_waf.accounts.list_accountsList managed accountsread
  • imperva_cloud_waf.accounts.delete_accountDelete managed accountdestructive
  • imperva_cloud_waf.accounts.delete_sub_accountDelete sub accountdestructive
  • and 7 more in this area
Ddos test alerts12
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_bgp_downbgp downwrite
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_bgp_upBgp upwrite
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_ddos_startDDoS startwrite
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_ddos_stopDDoS stopwrite
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_monitoring_attack_start_critical_alertMonitoring attack startwrite
  • imperva_cloud_waf.ddos_test_alerts.post_infra_protect_net_flow_bad_dataMonitoring bad datawrite
  • and 6 more in this area
Network connections12
  • imperva_cloud_waf.network_connections.add_asnAdd ASNwrite
  • imperva_cloud_waf.network_connections.add_connectionAdd connection (GRE tunnel)write
  • imperva_cloud_waf.network_connections.add_policyAdd routing policywrite
  • imperva_cloud_waf.network_connections.edit_connectionEdit connection (GRE tunnel)write
  • imperva_cloud_waf.network_connections.delete_asnDelete ASNdestructive
  • imperva_cloud_waf.network_connections.delete_connectionDelete connection (GRE tunnel)destructive
  • and 6 more in this area
Client certificates11
  • imperva_cloud_waf.client_certificates.assign_site_to_certificateAssign client CA certificate of the account to sitewrite
  • imperva_cloud_waf.client_certificates.full_update_site_configurationOverwrite the client CA certificate configuration (full update)write
  • imperva_cloud_waf.client_certificates.get_all_certs_for_siteList all client CA certificates assigned to siteread
  • imperva_cloud_waf.client_certificates.list_client_ca_certs_by_accountList client CA certificates in accountread
  • imperva_cloud_waf.client_certificates.deassign_cert_from_siteRemove client CA certificate from sitedestructive
  • imperva_cloud_waf.client_certificates.delete_client_ca_certDelete client CA certificate from accountdestructive
  • and 5 more in this area
Ddos ip protection11
  • imperva_cloud_waf.ddos_ip_protection.add_sip_by_cnameProtected IP over TCP - add by CNAMEwrite
  • imperva_cloud_waf.ddos_ip_protection.add_sip_by_dns_and_cnameProtected IP over TCP - add by DNS and CNAMEwrite
  • imperva_cloud_waf.ddos_ip_protection.add_sip_by_dns_and_ipProtected IP over TCP - add by DNS and origin IPwrite
  • imperva_cloud_waf.ddos_ip_protection.add_sip_by_ipProtected IP over TCP - add by origin IPwrite
  • imperva_cloud_waf.ddos_ip_protection.edit_sip_by_cnameProtected IP over TCP - edit by CNAMEwrite
  • imperva_cloud_waf.ddos_ip_protection.edit_sip_by_dns_and_cnameProtected IP over TCP - edit by DNS and CNAMEwrite
  • and 5 more in this area
Siem11
  • imperva_cloud_waf.siem.create_connectionCreate connectionwrite
  • imperva_cloud_waf.siem.create_log_configurationCreate log configurationwrite
  • imperva_cloud_waf.siem.list_connectionsRetrieve all connectionsread
  • imperva_cloud_waf.siem.list_log_configurationsRetrieve all log configurationsread
  • imperva_cloud_waf.siem.delete_connectionDelete connectiondestructive
  • imperva_cloud_waf.siem.delete_log_configurationDelete log configurationdestructive
  • and 5 more in this area
Site domains11
  • imperva_cloud_waf.site_domains.add_site_domainAdd domain to a given websitewrite
  • imperva_cloud_waf.site_domains.add_site_domain_v2Add domain to a given websitewrite
  • imperva_cloud_waf.site_domains.get_account_domains_by_filterList domains for a given accountread
  • imperva_cloud_waf.site_domains.get_site_domainsList domains for a given websiteread
  • imperva_cloud_waf.site_domains.list_site_domainsList domains for a given websiteread
  • imperva_cloud_waf.site_domains.delete_site_domainDelete a domain from a websitedestructive
  • and 5 more in this area
User management11
  • imperva_cloud_waf.user_management.create_roleCreate new rolewrite
  • imperva_cloud_waf.user_management.get_role_details_by_role_idGet role details by role IDread
  • imperva_cloud_waf.user_management.get_roles_detailsGet role details by account ID, user email, or role nameread
  • imperva_cloud_waf.user_management.update_roleUpdate role details by role IDwrite
  • imperva_cloud_waf.user_management.create_userCreate new userwrite
  • imperva_cloud_waf.user_management.delete_role_by_role_idDelete role by role IDdestructive
  • and 5 more in this area
Cache10
  • imperva_cloud_waf.cache.create_cache_rulesCreate cache ruleswrite
  • imperva_cloud_waf.cache.getGet cache settingsread
  • imperva_cloud_waf.cache.get_cache_rulesRetrieve cache rule detailsread
  • imperva_cloud_waf.cache.list_cache_rulesList all cache rules for specific siteread
  • imperva_cloud_waf.cache.delete_cache_rulesDelete cache ruledestructive
  • imperva_cloud_waf.cache.get_xray_linkRefresh and get a site's XRAY access URL.read
  • and 4 more in this area
Netsec policies10
  • imperva_cloud_waf.netsec_policies.add_allowlistAdd allowlistwrite
  • imperva_cloud_waf.netsec_policies.add_networkAdd network rangewrite
  • imperva_cloud_waf.netsec_policies.clone_allow_listClone allowlistwrite
  • imperva_cloud_waf.netsec_policies.get_allowlistGet allowlistread
  • imperva_cloud_waf.netsec_policies.delete_allowlistRemove allowlistdestructive
  • imperva_cloud_waf.netsec_policies.edit_allowlistEdit allowlistwrite
  • and 4 more in this area
Netsec performance9
  • imperva_cloud_waf.netsec_performance.get_per_sec_series_statsGet infrastructure protection statistics (high resolution)read
  • imperva_cloud_waf.netsec_performance.get_rt_statsGet real-time security statistics for an assetread
  • imperva_cloud_waf.netsec_performance.get_security_series_statsGet infrastructure protection statisticsread
  • imperva_cloud_waf.netsec_performance.get_series_statsGet a series of performance metrics for a specified time rangeread
  • imperva_cloud_waf.netsec_performance.get_histogram_statsGet infrastructure protection histogramread
  • imperva_cloud_waf.netsec_performance.get_performance_threshold_by_connection_id_external_apiget performance thresholdread
  • and 3 more in this area
Ddos network acl8
  • imperva_cloud_waf.ddos_network_acl.add_or_duplicate_acl_policyAdd or duplicate an ACL policywrite
  • imperva_cloud_waf.ddos_network_acl.edit_acl_policyEdit ACL policy settings (full update)write
  • imperva_cloud_waf.ddos_network_acl.get_account_acl_policiesGet all the ACL policies of the accountread
  • imperva_cloud_waf.ddos_network_acl.get_acl_policy_assetsGet the assets on which the policy is appliedread
  • imperva_cloud_waf.ddos_network_acl.get_policy_detailsGet details of an ACL policyread
  • imperva_cloud_waf.ddos_network_acl.is_policy_applied_on_the_assetReturns true if the policy is applied on the asset, otherwise falseread
  • and 2 more in this area
Protected ips8
  • imperva_cloud_waf.protected_ips.add_protected_ipAdd protected IP over GRE/IPinIPwrite
  • imperva_cloud_waf.protected_ips.add_sipAdd protected IP over TCP Proxywrite
  • imperva_cloud_waf.protected_ips.edit_protected_ipEdit protected IP over GRE/IPinIPwrite
  • imperva_cloud_waf.protected_ips.edit_sipEdit protected IP over TCP Proxywrite
  • imperva_cloud_waf.protected_ips.delete_protected_ipRemove protected IP over GRE/IPinIPdestructive
  • imperva_cloud_waf.protected_ips.delete_sipDelete protected IP over TCP Proxydestructive
  • and 2 more in this area
Idm users7
  • imperva_cloud_waf.idm_users.create_userCreate new userwrite
  • imperva_cloud_waf.idm_users.get_account_usersRetrieve the list of users for a given accountread
  • imperva_cloud_waf.idm_users.get_current_account_usersRetrieve the list of users for a given accountread
  • imperva_cloud_waf.idm_users.get_user_by_user_emailRetrieve user details by user email and account IDread
  • imperva_cloud_waf.idm_users.update_userUpdate user settings for a specific accountwrite
  • imperva_cloud_waf.idm_users.add_user_to_sub_accountAssign user to a specific sub-accountwrite
  • and 1 more in this area
Login protect7
  • imperva_cloud_waf.login_protect.add_lp_userAdd login protect userwrite
  • imperva_cloud_waf.login_protect.configure_protected_app_by_lpConfigure login protect on admin areaswrite
  • imperva_cloud_waf.login_protect.edit_lp_userEdit login protect userwrite
  • imperva_cloud_waf.login_protect.get_lp_usersGet login protect usersread
  • imperva_cloud_waf.login_protect.modify_lp_site_configurationModify Site Login Protect Configurationwrite
  • imperva_cloud_waf.login_protect.remove_lp_userRemove login protect userdestructive
  • and 1 more in this area
Notification settings7
  • imperva_cloud_waf.notification_settings.createCreate a notification policywrite
  • imperva_cloud_waf.notification_settings.getRetrieve a notification policyread
  • imperva_cloud_waf.notification_settings.get_allowed_sub_category_templatesRetrieve all allowed notification subtypesread
  • imperva_cloud_waf.notification_settings.get_notification_policy_lite_listGet account notification policiesread
  • imperva_cloud_waf.notification_settings.deleteDelete a notification policydestructive
  • imperva_cloud_waf.notification_settings.updateUpdate a notification policywrite
  • and 1 more in this area
Runtime protection7
  • imperva_cloud_waf.runtime_protection.add_agent_packageCreate a new agent packagewrite
  • imperva_cloud_waf.runtime_protection.download_agent_packageDownload agent package installerread
  • imperva_cloud_waf.runtime_protection.get_agent_versionsRetrieve agent versionsread
  • imperva_cloud_waf.runtime_protection.get_all_packagesList all agent packagesread
  • imperva_cloud_waf.runtime_protection.delete_agent_packageDelete runtime agent packagedestructive
  • imperva_cloud_waf.runtime_protection.get_agent_package_by_idGet agent package by IDread
  • and 1 more in this area
Traffic stats7
  • imperva_cloud_waf.traffic_stats.get_infra_eventsGet infrastructure protection eventsread
  • imperva_cloud_waf.traffic_stats.get_infra_protect_histogramGet infrastructure protection histogramread
  • imperva_cloud_waf.traffic_stats.get_infra_protect_top_dataGet infrastructure protection top items (graph view)read
  • imperva_cloud_waf.traffic_stats.get_infra_protect_top_tableGet infrastructure protection top items (table view)read
  • imperva_cloud_waf.traffic_stats.get_infra_statsGet infrastructure protection statisticsread
  • imperva_cloud_waf.traffic_stats.get_statsGet statisticsread
  • and 1 more in this area
Waf settings7
  • imperva_cloud_waf.waf_settings.create_additional_txt_recordsCreate or modify one or more of the TXT records defined for the site in Cloud WAF (partial update)write
  • imperva_cloud_waf.waf_settings.get_maskingReturns a masking setting for the given site.read
  • imperva_cloud_waf.waf_settings.list_additional_txt_recordsReturn all TXT records defined for the site in Cloud WAFread
  • imperva_cloud_waf.waf_settings.update_additional_txt_recordsOverwrite a specific TXT record that is defined for the site in Cloud WAF (full update)write
  • imperva_cloud_waf.waf_settings.delete_additional_txt_recordsDelete a specific TXT record that is defined for the site in Cloud WAFdestructive
  • imperva_cloud_waf.waf_settings.delete_all_additional_txt_recordsDelete all TXT records that are defined for the site in Cloud WAFdestructive
  • and 1 more in this area

Waiting rooms 7Integrations 5Rules 5API clients 4Attack analytics 4Cloud origins 4Ddos policy visibility 4Flow exporters 4Network subaccounts 4Account export 3Ddos divert 3Ddos pop monitoring 3Delivery 3HSM certificates 3Load balancing 3Site monitoring 3Subscriptions 3Audit trail 2Custom certificates 2Ddos assets 2Usage 2Usage report legacy 2Ip reputation 1Performance stats 1Session release 1Troubleshooting 1

This index shows a sample of each area. All 788 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Imperva Cloud Application Security MCP server, answered.

Is there an Imperva Cloud Application Security MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 788 Imperva Cloud Application Security actions across DNS, API security, sites and bot protection, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Imperva Cloud Application Security.

What do I need to connect Imperva Cloud Application Security?

Imperva API ID: in the Cloud Security Console open Account > Account Management > API Keys and add an API key; copy… and Imperva API key, shown once beside the API ID when the key is created. The free call account { op: "connections.requirements", service: "imperva_cloud_waf" } lists exactly what to paste.

Can an AI agent delete or change things in Imperva Cloud Application Security?

Only if its key allows it, and only with an explicit confirmation. 113 Imperva Cloud Application Security actions are destructive, including delete user by user email, delete role by role ID and delete API Client. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Imperva Cloud Application Security API limit?

actionlake paces every call to the limits in the Imperva Cloud Application Security service file: 10 calls a second per connection. Repeated reads are answered from cache (292 Imperva Cloud Application Security actions can be), which never reaches Imperva Cloud Application Security.

What does an Imperva Cloud Application Security action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (788 Imperva Cloud Application Security actions page). Cache hits, searches, dry runs and calls Imperva Cloud Application Security refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Imperva Cloud Application Security API does it cover?

The Imperva Cloud API v1/v2/v3 (58 published API definitions) at api.imperva.com. It is built from Imperva Cloud Application Security's documentation as read on 23 October 2026. 788 actions in 56 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Imperva Cloud Application Security data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Imperva Cloud Application Security credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Imperva Cloud Application Security

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Imperva Cloud Application Security; the name is the vendor's own. Counts are from the Imperva Cloud Application Security service file, version 1.0.0.

Give your agent Imperva Cloud Application Security today.

Connect Imperva Cloud Application Security freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.