---
title: "Imperva Cloud Application Security MCP server - actionlake"
description: "Give Claude 788 Imperva Cloud Application Security actions through one MCP server: DNS. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/imperva-cloud-application-security
updated: 2026-10-23
---

Connectors · MSP & PSA

# Imperva Cloud Application Security MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Imperva Cloud Application Security and the rest of your systems. It gives your agent 788 Imperva Cloud Application Security actions (379 reads, 296 writes and 113 that wait for a confirmation) and holds the Imperva Cloud Application Security credential itself, so the agent never does. It paces Imperva Cloud Application Security's limits and records every call.

[Connect Imperva Cloud Application Security free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "imperva_cloud_waf.idm_users.get_account_users",
  intent: "check which Imperva Cloud Application Security account is connected"
}
# Retrieve the list of users for a given account · read · 1 upstream call
```

- 788 actions in one signed file
- 379 read look, never change
- 296 write create and update
- 113 wait for a yes destructive, confirmed first

Set up

## Connect Imperva Cloud Application Security in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Imperva Cloud Application Security.
   Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_id` Imperva API ID: in the Cloud Security Console open Account > Account Management > API Keys and add an API key; copy…
   - `api_key` Imperva API key, shown once beside the API ID when the key is created
   ```
   account { op: "connections.requirements", service: "imperva_cloud_waf" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "imperva_cloud_waf.idm_users.get_account_users" }
   # retrieve the list of users for a given account · read · 1 upstream call
   check { action: "imperva_cloud_waf.idm_users.create_user", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Imperva Cloud Application Security at a glance

**Sign-in**

Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_id` `api_key`

**Limits we pace to**

10 calls a second, per connection

**API covered**

Imperva Cloud API v1/v2/v3 (58 published API definitions)`api.imperva.com`

**Built from**

Imperva Cloud Application Security's documentation, read 23 October 2026[docs-cybersec.thalesgroup.com](https://docs-cybersec.thalesgroup.com/bundle/api-docs/page/api/api-overview.htm) [docs-cybersec.thalesgroup.com](https://docs-cybersec.thalesgroup.com/bundle/api-docs/attach/api-clients-api.yaml) [docs-cybersec.thalesgroup.com](https://docs-cybersec.thalesgroup.com/bundle/api-docs/attach/id-management-api.yaml)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

292 of 379 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

4, so ask can line Imperva Cloud Application Security up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Imperva Cloud Application Security.

788 actions in 56 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **379** read look, never change
- **296** write create and update
- **113** destructive wait for a confirmation

1. ### DNS
   111
   46 read · 45 write · 20 destructive
   Retrieve details of all domains · Add new domain (manual configuration) · Retrieve domain details · Remove domain
2. ### API security
   92
   53 read · 26 write · 13 destructive
   Add Authentication Location · add bola manual risk to endpoints · Add Category · Add Data Label
3. ### Sites
   76
   28 read · 39 write · 9 destructive
   Add a cache rule · Add rule · Add data center · Add server
4. ### Bot protection
   57
   29 read · 18 write · 10 destructive
   Search for Conditions · Retrieve children of a Condition List · Validate a Condition literal · Create a new Campaign
5. ### CSP
   57
   33 read · 17 write · 7 destructive
   Bulk add a justification note to multiple scripts · Add notes to a discovered domain for specific path · Add an email address to the notification list · Add a domain to pre-approved list
6. ### Ato
   40
   31 read · 6 write · 3 destructive
   Update the allowlist for a specific site · Copy a single login endpoint, or all of them, from the "source" website to the "target" website under the same account ID · Retrieve aggregated login report · Get aggregators successful requests of unique users for the current time period compared to previous time period
7. ### AI app security
   22
   11 read · 8 write · 3 destructive
   Create a new API key · Create a new Application · Create a default policy · Create a new policy
8. ### Certificates
   22
   11 read · 6 write · 5 destructive
   Add domain to the SSL validation delegation settings · Trigger SSL domain validation · Get HSM latency · Get account SSL settings

**48 more areas · 311 actions**

- Policies **21**
- Websites **18**
- API security tags **14**
- Accounts **13**
- Ddos test alerts **12**
- Network connections **12**
- Client certificates **11**
- Ddos ip protection **11**
- Siem **11**
- Site domains **11**
- User management **11**
- Cache **10**
- Netsec policies **10**
- Netsec performance **9**
- Ddos network acl **8**
- Protected ips **8**
- Idm users **7**
- Login protect **7**
- Notification settings **7**
- Runtime protection **7**
- Traffic stats **7**
- Waf settings **7**
- Waiting rooms **7**
- Integrations **5**
- Rules **5**
- API clients **4**
- Attack analytics **4**
- Cloud origins **4**
- Ddos policy visibility **4**
- Flow exporters **4**
- Network subaccounts **4**
- Account export **3**
- Ddos divert **3**
- Ddos pop monitoring **3**
- Delivery **3**
- HSM certificates **3**
- Load balancing **3**
- Site monitoring **3**
- Subscriptions **3**
- Audit trail **2**
- Custom certificates **2**
- Ddos assets **2**
- Usage **2**
- Usage report legacy **2**
- Ip reputation **1**
- Performance stats **1**
- Session release **1**
- Troubleshooting **1**

Top actions

## The Imperva Cloud Application Security API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 28 of Imperva Cloud Application Security's 28 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `imperva_cloud_waf.idm_users.get_account_users` Retrieve the list of users for a given account | Retrieve the list of users for a given account. | read | `identity.user.list` 474 connectors |
| `imperva_cloud_waf.user_management.get_roles_details` Get role details by account ID, user email, or role name | Get role details by account ID, user email, or role name. | read | `identity.role.list` 184 connectors |
| `imperva_cloud_waf.idm_users.create_user` Create new user | Create new user. | write | `identity.user.create` 262 connectors |
| `imperva_cloud_waf.user_management.create_role` Create new role | Create new role. | write | `identity.role.create` 105 connectors |
| `imperva_cloud_waf.idm_users.delete_users_by_emails` Delete user by user email | Delete user by user email. | destructive | `identity.user.delete` 253 connectors |
| `imperva_cloud_waf.policies.get_all_policies_by_account` Retrieve all policies in account | Retrieve all policies in account. | read | `security.policy.list` 36 connectors |
| `imperva_cloud_waf.api_clients.create` Create API Client | Create API Client. | write | `identity.api_key.create` 100 connectors |
| `imperva_cloud_waf.api_clients.fetch_api_key_metadata` Fetch API Client metadata | Fetch API Client metadata. | read | `identity.api_key.list` 96 connectors |
| `imperva_cloud_waf.policies.create_new_policy` Add a new policy or copy an existing policy | Add a new policy or copy an existing policy. | write | `security.policy.create` 25 connectors |
| `imperva_cloud_waf.audit_trail.get_audit_events_v2` Get account audit events | Get account audit events. | read | `security.audit_log.list` 69 connectors |
| `imperva_cloud_waf.accounts.list_accounts` List managed accounts | List managed accounts. | read | `platform.tenant.list` 70 connectors |
| `imperva_cloud_waf.attack_analytics.get_incidents_by_account` Retrieve a list of incidents | Retrieve a list of incidents. | read | `security.incident.list` 17 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Imperva Cloud Application Security actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in Imperva Cloud Application Security? List every user and their role.
   calls `imperva_cloud_waf.idm_users.get_account_users`
2. Write write
   Create new user in Imperva Cloud Application Security. Show me exactly what you will send before you save it.
   calls `imperva_cloud_waf.idm_users.create_user`

Governance for Imperva Cloud Application Security

## Destructive actions wait for a yes.

113 Imperva Cloud Application Security actions are destructive. The first 10:

- Delete user by user email `imperva_cloud_waf.idm_users.delete_users_by_emails`
- Delete role by role ID `imperva_cloud_waf.user_management.delete_role_by_role_id`
- Delete API Client `imperva_cloud_waf.api_clients.delete`
- Delete an existing policy `imperva_cloud_waf.policies.delete_policy`
- Remove domain `imperva_cloud_waf.dns.remove_domain`
- Purge a site's cache `imperva_cloud_waf.cache.purge`
- Delete rule - must contain valid rule id `imperva_cloud_waf.rules.delete`
- Delete an email address from the notification list `imperva_cloud_waf.csp.remove_email`
- Delete site `imperva_cloud_waf.sites.delete_site`
- Delete domain records `imperva_cloud_waf.dns.delete_records`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do imperva_cloud_waf.idm_users.delete_users_by_emails confirm_policy: **human**

Delete user by user email?

**intent:** the user asked me to delete user by user email

run suspended · waiting for a named person · key _imperva-cloud-waf-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "imperva-cloud-waf-agent",
  allowed_actions: ["imperva_cloud_waf.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "imperva_cloud_waf.idm_users.delete_users_by_emails", approver: "lead@example.com" },
    { match: "imperva_cloud_waf.user_management.delete_role_by_role_id", approver: "lead@example.com" },
    { match: "imperva_cloud_waf.api_clients.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Imperva Cloud Application Security only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Imperva Cloud Application Security costs on actionlake.

Every Imperva Cloud Application Security action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Imperva Cloud Application Security refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 788 Imperva Cloud Application Security actions
- 788 actions page each page of a long list is one call
- 292 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Imperva Cloud Application Security action.

788 actions by area: the id your agent calls, what it does, and its effect.

**DNS 111**

- `imperva_cloud_waf.dns.add_domain` Add new domain (manual configuration) write
- `imperva_cloud_waf.dns.get_all_account_domains` Retrieve details of all domains read
- `imperva_cloud_waf.dns.get_all_domains` Retrieve details of all domains read
- `imperva_cloud_waf.dns.get_domain` Retrieve domain details read
- `imperva_cloud_waf.dns.remove_domain` Remove domain destructive
- `imperva_cloud_waf.dns.abort_cancellation` Stop DNSSEC cancellation process write
- and 105 more in this area

**API security 92**

- `imperva_cloud_waf.api_security.add_auth_location` Add Authentication Location write
- `imperva_cloud_waf.api_security.add_bola_manual_risk_to_endpoints` add bola manual risk to endpoints write
- `imperva_cloud_waf.api_security.add_category` Add Category write
- `imperva_cloud_waf.api_security.add_data_label` Add Data Label write
- `imperva_cloud_waf.api_security.create_console` Create a console write
- `imperva_cloud_waf.api_security.create_controllers` Create a controller write
- and 86 more in this area

**Sites 76**

- `imperva_cloud_waf.sites.add_cache_rule` Add a cache rule write
- `imperva_cloud_waf.sites.add_custom_rule` Add rule write
- `imperva_cloud_waf.sites.add_data_center` Add data center write
- `imperva_cloud_waf.sites.add_dc_server` Add server write
- `imperva_cloud_waf.sites.add_site` Add a site write
- `imperva_cloud_waf.sites.check_caa_compliance` Check CAA compliance read
- and 70 more in this area

**Bot protection 57**

- `imperva_cloud_waf.bot_protection.account_condition_search` Search for Conditions read
- `imperva_cloud_waf.bot_protection.condition_children` Retrieve children of a Condition List read
- `imperva_cloud_waf.bot_protection.condition_validate` Validate a Condition literal read
- `imperva_cloud_waf.bot_protection.create_account_campaign` Create a new Campaign write
- `imperva_cloud_waf.bot_protection.create_account_condition` Create a new Condition write
- `imperva_cloud_waf.bot_protection.create_account_credential` Create new Account credentials write
- and 51 more in this area

**CSP 57**

- `imperva_cloud_waf.csp.add_bulk_script_notes` Bulk add a justification note to multiple scripts write
- `imperva_cloud_waf.csp.add_domain_note_for_path` Add notes to a discovered domain for specific path write
- `imperva_cloud_waf.csp.add_email` Add an email address to the notification list write
- `imperva_cloud_waf.csp.add_pre_approved_domain` Add a domain to pre-approved list write
- `imperva_cloud_waf.csp.add_pre_approved_script` Add a script to pre-approved list write
- `imperva_cloud_waf.csp.add_script_group_notes_for_path` Add notes to a discovered script group. write
- and 51 more in this area

**Ato 40**

- `imperva_cloud_waf.ato.add_to_allow_list` Update the allowlist for a specific site write
- `imperva_cloud_waf.ato.copy_endpoint_configuration_from_site_to_another_site` Copy a single login endpoint, or all of them, from the "source" website to the "target" website under the same account ID write
- `imperva_cloud_waf.ato.get_aggregators_evidence` Retrieve aggregated login report read
- `imperva_cloud_waf.ato.get_aggregators_stats` Get aggregators successful requests of unique users for the current time period compared to previous time period read
- `imperva_cloud_waf.ato.delete_endpoint` Delete an endpoint for this website destructive
- `imperva_cloud_waf.ato.delete_pii_password` Reset the PII password destructive
- and 34 more in this area

**AI app security 22**

- `imperva_cloud_waf.ai_app_security.create_api_key` Create a new API key write
- `imperva_cloud_waf.ai_app_security.create_application` Create a new Application write
- `imperva_cloud_waf.ai_app_security.create_default_policy` Create a default policy write
- `imperva_cloud_waf.ai_app_security.create_policy` Create a new policy write
- `imperva_cloud_waf.ai_app_security.count_active_policies` Count active policies read
- `imperva_cloud_waf.ai_app_security.delete_api_key` Delete an API key by ID destructive
- and 16 more in this area

**Certificates 22**

- `imperva_cloud_waf.certificates.add_domain_to_ssl_validation_delegation_settings` Add domain to the SSL validation delegation settings write
- `imperva_cloud_waf.certificates.check_site_certificate_domain_status` Trigger SSL domain validation read
- `imperva_cloud_waf.certificates.get_latency` Get HSM latency read
- `imperva_cloud_waf.certificates.get_ssl_validation_delegation_settings` Get account SSL settings read
- `imperva_cloud_waf.certificates.assign_certificate_to_site` Assign an mTLS client certificate to websites write
- `imperva_cloud_waf.certificates.change_san_validation_method` Change SAN validation method write
- and 16 more in this area

**Policies 21**

- `imperva_cloud_waf.policies.create_new_policy` Add a new policy or copy an existing policy write
- `imperva_cloud_waf.policies.get_all_policies_by_account` Retrieve all policies in account read
- `imperva_cloud_waf.policies.get_policy_by_id` Retrieve policy details read
- `imperva_cloud_waf.policies.modify_policy` Modify an existing policy (partial update) write
- `imperva_cloud_waf.policies.add_available_account_to_policy` Enables an account to access a policy write
- `imperva_cloud_waf.policies.apply_asset_to_policy` Apply a single policy to a single asset write
- and 15 more in this area

**Websites 18**

- `imperva_cloud_waf.websites.extended_get_sites` Extended get sites read
- `imperva_cloud_waf.websites.get_account_default_inbound_tls_configuration` Get account default TLS configuration settings. read
- `imperva_cloud_waf.websites.get_site_spa_data_full` Get site SPA settings read
- `imperva_cloud_waf.websites.get_site_spa_settings` Get site SPA settings read
- `imperva_cloud_waf.websites.get_site_statistics` Get statistics for site(s) read
- `imperva_cloud_waf.websites.delete_site` Delete site destructive
- and 12 more in this area

**API security tags 14**

- `imperva_cloud_waf.api_security_tags.create_tag` Create a tag with the given name and the given info write
- `imperva_cloud_waf.api_security_tags.get_all_resource_supported_filters` Get all the supported filters for tags, these filters are applicable for auto tagging read
- `imperva_cloud_waf.api_security_tags.get_all_resources_with_tags` Get all resources and their associated tags for a specific resource type read
- `imperva_cloud_waf.api_security_tags.get_all_tags_for_account` Get all tag info for a given account read
- `imperva_cloud_waf.api_security_tags.delete_tag` Delete the tag with given tag id destructive
- `imperva_cloud_waf.api_security_tags.get_resource_with_tags` Get all tags for a specific resource Id of a specific resource type read
- and 8 more in this area

**Accounts 13**

- `imperva_cloud_waf.accounts.add_account` Add a new managed account write
- `imperva_cloud_waf.accounts.add_sub_account` Add a new sub account write
- `imperva_cloud_waf.accounts.get_account_status` Get account status read
- `imperva_cloud_waf.accounts.list_accounts` List managed accounts read
- `imperva_cloud_waf.accounts.delete_account` Delete managed account destructive
- `imperva_cloud_waf.accounts.delete_sub_account` Delete sub account destructive
- and 7 more in this area

**Ddos test alerts 12**

- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_bgp_down` bgp down write
- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_bgp_up` Bgp up write
- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_ddos_start` DDoS start write
- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_ddos_stop` DDoS stop write
- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_monitoring_attack_start_critical_alert` Monitoring attack start write
- `imperva_cloud_waf.ddos_test_alerts.post_infra_protect_net_flow_bad_data` Monitoring bad data write
- and 6 more in this area

**Network connections 12**

- `imperva_cloud_waf.network_connections.add_asn` Add ASN write
- `imperva_cloud_waf.network_connections.add_connection` Add connection (GRE tunnel) write
- `imperva_cloud_waf.network_connections.add_policy` Add routing policy write
- `imperva_cloud_waf.network_connections.edit_connection` Edit connection (GRE tunnel) write
- `imperva_cloud_waf.network_connections.delete_asn` Delete ASN destructive
- `imperva_cloud_waf.network_connections.delete_connection` Delete connection (GRE tunnel) destructive
- and 6 more in this area

**Client certificates 11**

- `imperva_cloud_waf.client_certificates.assign_site_to_certificate` Assign client CA certificate of the account to site write
- `imperva_cloud_waf.client_certificates.full_update_site_configuration` Overwrite the client CA certificate configuration (full update) write
- `imperva_cloud_waf.client_certificates.get_all_certs_for_site` List all client CA certificates assigned to site read
- `imperva_cloud_waf.client_certificates.list_client_ca_certs_by_account` List client CA certificates in account read
- `imperva_cloud_waf.client_certificates.deassign_cert_from_site` Remove client CA certificate from site destructive
- `imperva_cloud_waf.client_certificates.delete_client_ca_cert` Delete client CA certificate from account destructive
- and 5 more in this area

**Ddos ip protection 11**

- `imperva_cloud_waf.ddos_ip_protection.add_sip_by_cname` Protected IP over TCP - add by CNAME write
- `imperva_cloud_waf.ddos_ip_protection.add_sip_by_dns_and_cname` Protected IP over TCP - add by DNS and CNAME write
- `imperva_cloud_waf.ddos_ip_protection.add_sip_by_dns_and_ip` Protected IP over TCP - add by DNS and origin IP write
- `imperva_cloud_waf.ddos_ip_protection.add_sip_by_ip` Protected IP over TCP - add by origin IP write
- `imperva_cloud_waf.ddos_ip_protection.edit_sip_by_cname` Protected IP over TCP - edit by CNAME write
- `imperva_cloud_waf.ddos_ip_protection.edit_sip_by_dns_and_cname` Protected IP over TCP - edit by DNS and CNAME write
- and 5 more in this area

**Siem 11**

- `imperva_cloud_waf.siem.create_connection` Create connection write
- `imperva_cloud_waf.siem.create_log_configuration` Create log configuration write
- `imperva_cloud_waf.siem.list_connections` Retrieve all connections read
- `imperva_cloud_waf.siem.list_log_configurations` Retrieve all log configurations read
- `imperva_cloud_waf.siem.delete_connection` Delete connection destructive
- `imperva_cloud_waf.siem.delete_log_configuration` Delete log configuration destructive
- and 5 more in this area

**Site domains 11**

- `imperva_cloud_waf.site_domains.add_site_domain` Add domain to a given website write
- `imperva_cloud_waf.site_domains.add_site_domain_v2` Add domain to a given website write
- `imperva_cloud_waf.site_domains.get_account_domains_by_filter` List domains for a given account read
- `imperva_cloud_waf.site_domains.get_site_domains` List domains for a given website read
- `imperva_cloud_waf.site_domains.list_site_domains` List domains for a given website read
- `imperva_cloud_waf.site_domains.delete_site_domain` Delete a domain from a website destructive
- and 5 more in this area

**User management 11**

- `imperva_cloud_waf.user_management.create_role` Create new role write
- `imperva_cloud_waf.user_management.get_role_details_by_role_id` Get role details by role ID read
- `imperva_cloud_waf.user_management.get_roles_details` Get role details by account ID, user email, or role name read
- `imperva_cloud_waf.user_management.update_role` Update role details by role ID write
- `imperva_cloud_waf.user_management.create_user` Create new user write
- `imperva_cloud_waf.user_management.delete_role_by_role_id` Delete role by role ID destructive
- and 5 more in this area

**Cache 10**

- `imperva_cloud_waf.cache.create_cache_rules` Create cache rules write
- `imperva_cloud_waf.cache.get` Get cache settings read
- `imperva_cloud_waf.cache.get_cache_rules` Retrieve cache rule details read
- `imperva_cloud_waf.cache.list_cache_rules` List all cache rules for specific site read
- `imperva_cloud_waf.cache.delete_cache_rules` Delete cache rule destructive
- `imperva_cloud_waf.cache.get_xray_link` Refresh and get a site's XRAY access URL. read
- and 4 more in this area

**Netsec policies 10**

- `imperva_cloud_waf.netsec_policies.add_allowlist` Add allowlist write
- `imperva_cloud_waf.netsec_policies.add_network` Add network range write
- `imperva_cloud_waf.netsec_policies.clone_allow_list` Clone allowlist write
- `imperva_cloud_waf.netsec_policies.get_allowlist` Get allowlist read
- `imperva_cloud_waf.netsec_policies.delete_allowlist` Remove allowlist destructive
- `imperva_cloud_waf.netsec_policies.edit_allowlist` Edit allowlist write
- and 4 more in this area

**Netsec performance 9**

- `imperva_cloud_waf.netsec_performance.get_per_sec_series_stats` Get infrastructure protection statistics (high resolution) read
- `imperva_cloud_waf.netsec_performance.get_rt_stats` Get real-time security statistics for an asset read
- `imperva_cloud_waf.netsec_performance.get_security_series_stats` Get infrastructure protection statistics read
- `imperva_cloud_waf.netsec_performance.get_series_stats` Get a series of performance metrics for a specified time range read
- `imperva_cloud_waf.netsec_performance.get_histogram_stats` Get infrastructure protection histogram read
- `imperva_cloud_waf.netsec_performance.get_performance_threshold_by_connection_id_external_api` get performance threshold read
- and 3 more in this area

**Ddos network acl 8**

- `imperva_cloud_waf.ddos_network_acl.add_or_duplicate_acl_policy` Add or duplicate an ACL policy write
- `imperva_cloud_waf.ddos_network_acl.edit_acl_policy` Edit ACL policy settings (full update) write
- `imperva_cloud_waf.ddos_network_acl.get_account_acl_policies` Get all the ACL policies of the account read
- `imperva_cloud_waf.ddos_network_acl.get_acl_policy_assets` Get the assets on which the policy is applied read
- `imperva_cloud_waf.ddos_network_acl.get_policy_details` Get details of an ACL policy read
- `imperva_cloud_waf.ddos_network_acl.is_policy_applied_on_the_asset` Returns true if the policy is applied on the asset, otherwise false read
- and 2 more in this area

**Protected ips 8**

- `imperva_cloud_waf.protected_ips.add_protected_ip` Add protected IP over GRE/IPinIP write
- `imperva_cloud_waf.protected_ips.add_sip` Add protected IP over TCP Proxy write
- `imperva_cloud_waf.protected_ips.edit_protected_ip` Edit protected IP over GRE/IPinIP write
- `imperva_cloud_waf.protected_ips.edit_sip` Edit protected IP over TCP Proxy write
- `imperva_cloud_waf.protected_ips.delete_protected_ip` Remove protected IP over GRE/IPinIP destructive
- `imperva_cloud_waf.protected_ips.delete_sip` Delete protected IP over TCP Proxy destructive
- and 2 more in this area

**Idm users 7**

- `imperva_cloud_waf.idm_users.create_user` Create new user write
- `imperva_cloud_waf.idm_users.get_account_users` Retrieve the list of users for a given account read
- `imperva_cloud_waf.idm_users.get_current_account_users` Retrieve the list of users for a given account read
- `imperva_cloud_waf.idm_users.get_user_by_user_email` Retrieve user details by user email and account ID read
- `imperva_cloud_waf.idm_users.update_user` Update user settings for a specific account write
- `imperva_cloud_waf.idm_users.add_user_to_sub_account` Assign user to a specific sub-account write
- and 1 more in this area

**Login protect 7**

- `imperva_cloud_waf.login_protect.add_lp_user` Add login protect user write
- `imperva_cloud_waf.login_protect.configure_protected_app_by_lp` Configure login protect on admin areas write
- `imperva_cloud_waf.login_protect.edit_lp_user` Edit login protect user write
- `imperva_cloud_waf.login_protect.get_lp_users` Get login protect users read
- `imperva_cloud_waf.login_protect.modify_lp_site_configuration` Modify Site Login Protect Configuration write
- `imperva_cloud_waf.login_protect.remove_lp_user` Remove login protect user destructive
- and 1 more in this area

**Notification settings 7**

- `imperva_cloud_waf.notification_settings.create` Create a notification policy write
- `imperva_cloud_waf.notification_settings.get` Retrieve a notification policy read
- `imperva_cloud_waf.notification_settings.get_allowed_sub_category_templates` Retrieve all allowed notification subtypes read
- `imperva_cloud_waf.notification_settings.get_notification_policy_lite_list` Get account notification policies read
- `imperva_cloud_waf.notification_settings.delete` Delete a notification policy destructive
- `imperva_cloud_waf.notification_settings.update` Update a notification policy write
- and 1 more in this area

**Runtime protection 7**

- `imperva_cloud_waf.runtime_protection.add_agent_package` Create a new agent package write
- `imperva_cloud_waf.runtime_protection.download_agent_package` Download agent package installer read
- `imperva_cloud_waf.runtime_protection.get_agent_versions` Retrieve agent versions read
- `imperva_cloud_waf.runtime_protection.get_all_packages` List all agent packages read
- `imperva_cloud_waf.runtime_protection.delete_agent_package` Delete runtime agent package destructive
- `imperva_cloud_waf.runtime_protection.get_agent_package_by_id` Get agent package by ID read
- and 1 more in this area

**Traffic stats 7**

- `imperva_cloud_waf.traffic_stats.get_infra_events` Get infrastructure protection events read
- `imperva_cloud_waf.traffic_stats.get_infra_protect_histogram` Get infrastructure protection histogram read
- `imperva_cloud_waf.traffic_stats.get_infra_protect_top_data` Get infrastructure protection top items (graph view) read
- `imperva_cloud_waf.traffic_stats.get_infra_protect_top_table` Get infrastructure protection top items (table view) read
- `imperva_cloud_waf.traffic_stats.get_infra_stats` Get infrastructure protection statistics read
- `imperva_cloud_waf.traffic_stats.get_stats` Get statistics read
- and 1 more in this area

**Waf settings 7**

- `imperva_cloud_waf.waf_settings.create_additional_txt_records` Create or modify one or more of the TXT records defined for the site in Cloud WAF (partial update) write
- `imperva_cloud_waf.waf_settings.get_masking` Returns a masking setting for the given site. read
- `imperva_cloud_waf.waf_settings.list_additional_txt_records` Return all TXT records defined for the site in Cloud WAF read
- `imperva_cloud_waf.waf_settings.update_additional_txt_records` Overwrite a specific TXT record that is defined for the site in Cloud WAF (full update) write
- `imperva_cloud_waf.waf_settings.delete_additional_txt_records` Delete a specific TXT record that is defined for the site in Cloud WAF destructive
- `imperva_cloud_waf.waf_settings.delete_all_additional_txt_records` Delete all TXT records that are defined for the site in Cloud WAF destructive
- and 1 more in this area

Waiting rooms **7** Integrations **5** Rules **5** API clients **4** Attack analytics **4** Cloud origins **4** Ddos policy visibility **4** Flow exporters **4** Network subaccounts **4** Account export **3** Ddos divert **3** Ddos pop monitoring **3** Delivery **3** HSM certificates **3** Load balancing **3** Site monitoring **3** Subscriptions **3** Audit trail **2** Custom certificates **2** Ddos assets **2** Usage **2** Usage report legacy **2** Ip reputation **1** Performance stats **1** Session release **1** Troubleshooting **1**

This index shows a sample of each area. All 788 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The Imperva Cloud Application Security MCP server, answered.

**Is there an Imperva Cloud Application Security MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 788 Imperva Cloud Application Security actions across DNS, API security, sites and bot protection, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Imperva Cloud Application Security.

**What do I need to connect Imperva Cloud Application Security?**

Imperva API ID: in the Cloud Security Console open Account > Account Management > API Keys and add an API key; copy… and Imperva API key, shown once beside the API ID when the key is created. The free call account { op: "connections.requirements", service: "imperva_cloud_waf" } lists exactly what to paste.

**Can an AI agent delete or change things in Imperva Cloud Application Security?**

Only if its key allows it, and only with an explicit confirmation. 113 Imperva Cloud Application Security actions are destructive, including delete user by user email, delete role by role ID and delete API Client. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Imperva Cloud Application Security API limit?**

actionlake paces every call to the limits in the Imperva Cloud Application Security service file: 10 calls a second per connection. Repeated reads are answered from cache (292 Imperva Cloud Application Security actions can be), which never reaches Imperva Cloud Application Security.

**What does an Imperva Cloud Application Security action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (788 Imperva Cloud Application Security actions page). Cache hits, searches, dry runs and calls Imperva Cloud Application Security refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Imperva Cloud Application Security API does it cover?**

The Imperva Cloud API v1/v2/v3 (58 published API definitions) at api.imperva.com. It is built from Imperva Cloud Application Security's documentation as read on 23 October 2026. 788 actions in 56 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Imperva Cloud Application Security data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Imperva Cloud Application Security credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Imperva Cloud Application Security

Shares the most action names with

- [Automox 14](https://actionlake.com/connectors/automox)
- [Tactical RMM 14](https://actionlake.com/connectors/tactical-rmm)
- [Wazuh 12](https://actionlake.com/connectors/wazuh)
- [Sublime Security 10](https://actionlake.com/connectors/sublime-security)
- [Action1 10](https://actionlake.com/connectors/action1)
- [Cisco Umbrella 10](https://actionlake.com/connectors/cisco-umbrella)

Joins with, on shared entities

- [Cloudflare 4](https://actionlake.com/connectors/cloudflare)
- [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users)
- [Flagsmith 3](https://actionlake.com/connectors/flagsmith)
- [JumpCloud 3](https://actionlake.com/connectors/jumpcloud)
- [Tenable Vulnerability Management 3](https://actionlake.com/connectors/tenable-vulnerability-management)
- [Grafana 3](https://actionlake.com/connectors/grafana)

Browse

- [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Imperva Cloud Application Security; the name is the vendor's own. Counts are from the Imperva Cloud Application Security service file, version 1.0.0.

## Give your agent Imperva Cloud Application Security today.

[Connect Imperva Cloud Application Security free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/imperva-cloud-application-security
More: https://actionlake.com/llms.txt