Connectors · Files & documents
Keboola MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Keboola and the rest of your systems. It gives your agent 176 Keboola actions (66 reads, 81 writes and 29 that wait for a confirmation) and holds the Keboola credential itself, so the agent never does. It paces Keboola's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "keboola.files.list", intent: "check which Keboola account is connected"}# List files · read · 1 upstream call- 176actionsin one signed file
- 66readlook, never change
- 81writecreate and update
- 29wait for a yesdestructive, confirmed first
Set up
Connect Keboola in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Keboola.
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
storage_api_tokenKeboola Storage API tokenhostWhere your Keboola lives: your host
account { op: "connections.requirements", service: "keboola" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "keboola.files.list" }# list files · read · 1 upstream callcheck { action: "keboola.files.delete", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Keboola at a glance
- Sign-in
- API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
storage_api_token- Setup fields
host- Limits we pace to
- 600 calls a minute, per connection
- API covered
- Keboola Storage API v2 (OpenAPI 3.0.0, document version 2.0)
connection.keboola.com - Built from
- Keboola's documentation, read 23 October 2026connection.keboola.comapi.keboola.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 61 of 66 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 3, so ask can line Keboola up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Keboola.
176 actions in 45 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 66readlook, never change
- 81writecreate and update
- 29destructivewait for a confirmation
Workspaces
154 read · 9 write · 2 destructive
Create a workspace · Load an input mapping into a workspace · List workspaces · Load tables into a workspace
Tables
144 read · 9 write · 1 destructive
List tables · Get a table · Update a table · Drop a table
Configurations
133 read · 7 write · 3 destructive
Create a configuration · List a component's configurations · Restore deleted configurations · Get a three-way diff of a branch configuration against the default branch
Buckets
113 read · 6 write · 2 destructive
List buckets · Create a bucket or link a shared bucket · Get a bucket · Update a bucket
Merge requests
93 read · 6 write · 0 destructive
Create a merge request · List merge requests · Approve a merge request · List a merge request's conflicts
Tokens
83 read · 4 write · 1 destructive
Verify the current token and get its project · Create a token · List tokens · Share a token by email
Bucket listings
63 read · 2 write · 1 destructive
Create a bucket listing · List bucket listings · List consumers subscribing to a bucket listing · Get a bucket listing
Bucket sharing
60 read · 5 write · 1 destructive
Share a bucket to the organization · Share a bucket to all organization projects · Share a bucket to selected projects · Share a bucket to selected users
37 more areas · 94 actions
- Configuration rows 6
- Dev branches 5
- Files 5
- Table aliases 5
- Triggers 5
- Configuration row versions 4
- Configuration versions 4
- Snapshots 4
- Branch metadata 3
- Bucket metadata 3
- Column metadata 3
- Configuration metadata 3
- Events 3
- Search 3
- Table columns 3
- Table metadata 3
- Workspace credentials 3
- Bucket owners 2
- Column names 2
- Components 2
- Configuration workspaces 2
- File tags 2
- Jobs 2
- Table primary keys 2
- Table profiles 2
- Workspace objects 2
- Bucket events 1
- Display names 1
- Scheduled tasks 1
- Shared buckets 1
- Sharing targets 1
- Stats 1
- Storage 1
- Table events 1
- Table rows 1
- Tickets 1
- Token events 1
Top actions
The Keboola API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 15 of Keboola's 15 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
keboola.files.listList files | List files. | read | content.file.list77 connectors |
keboola.tables.listList tables | List tables. | read | content.table.list21 connectors |
keboola.buckets.listList buckets | List buckets. | read | analytics.dataset.list28 connectors |
keboola.files.getGet a file (with optional download credentials) | Get a file (with optional download credentials). | read | content.file.get74 connectors |
keboola.files.deleteDelete a file | Delete a file. | destructive | content.file.delete68 connectors |
keboola.tables.getGet a table | Get a table. | read | content.table.get16 connectors |
keboola.tables.updateUpdate a table | Update a table. | write | content.table.update16 connectors |
keboola.buckets.createCreate a bucket or link a shared bucket | Create a bucket or link a shared bucket. | write | analytics.dataset.create21 connectors |
keboola.tokens.verifyVerify the current token and get its project | Verify the current token and get its project. | read | identity.current_user.get307 connectors |
keboola.jobs.listList storage jobs | List storage jobs. | read | automation.background_job.list34 connectors |
keboola.jobs.getGet a storage job (poll an asynchronous call) | Get a storage job (poll an asynchronous call). | read | automation.background_job.get48 connectors |
keboola.tables.pullPull a table from the default branch into a development branch | Pull a table from the default branch into a development branch. | write | this connector |
Try it
Prompts to paste into Claude.
Each one names the Keboola actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Which Keboola files changed this week, and who changed them?
calls
keboola.files.list - Writewrite
Update a table in Keboola. Show me exactly what you will send before you save it.
calls
keboola.tables.update
Governance for Keboola
Destructive actions wait for a yes.
29 Keboola actions are destructive. These are all of them:
- Delete a file
keboola.files.delete - Drop a table
keboola.tables.delete - Drop a bucket
keboola.buckets.delete - Delete a token
keboola.tokens.delete - Delete a trigger
keboola.triggers.delete - Remove a tag from a file
keboola.file_tags.delete - Delete a snapshot
keboola.snapshots.delete - Delete rows from a table
keboola.table_rows.delete - Delete a workspace
keboola.workspaces.delete - Delete a development branch
keboola.dev_branches.delete - Force unlink a shared bucket from a project
keboola.buckets.force_unlink - Permanently purge a deleted configuration
keboola.configurations.purge - Delete a column from a table
keboola.table_columns.delete - Stop sharing a bucket
keboola.bucket_sharing.delete - Delete a configuration (move to trash)
keboola.configurations.delete - Delete a table metadata entry
keboola.table_metadata.delete - Delete a development branch metadata entry
keboola.branch_metadata.delete - Delete a bucket listing
keboola.bucket_listings.delete - Delete a bucket metadata entry
keboola.bucket_metadata.delete - Delete a column metadata entry
keboola.column_metadata.delete - Delete a scheduled task
keboola.scheduled_tasks.delete - Delete a configuration row
keboola.configuration_rows.delete - Remove a table's primary key
keboola.table_primary_keys.delete - Reset a workspace's password
keboola.workspaces.reset_password - Permanently purge deleted configurations
keboola.configurations.batch_purge - Remove an alias table's filter
keboola.table_aliases.delete_filter - Delete workspace storage credentials
keboola.workspace_credentials.delete - Delete a configuration metadata entry
keboola.configuration_metadata.delete - Delete objects in a workspace
keboola.workspace_objects.batch_delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete a file?
intent: the user asked me to delete a file
account { op: "keys.create", name: "keboola-agent", allowed_actions: ["keboola.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "keboola.files.delete", approver: "[email protected]" }, { match: "keboola.tables.delete", approver: "[email protected]" }, { match: "keboola.buckets.delete", approver: "[email protected]" } ]}Cost
What Keboola costs on actionlake.
Every Keboola action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Keboola refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 176 Keboola actions
- 176actions pageeach page of a long list is one call
- 61reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Keboola action.
176 actions by area: the id your agent calls, what it does, and its effect.
Workspaces15
keboola.workspaces.createCreate a workspacewritekeboola.workspaces.deleteDelete a workspacedestructivekeboola.workspaces.getGet a workspacereadkeboola.workspaces.input_mapping_loadLoad an input mapping into a workspacewritekeboola.workspaces.input_mapping_previewPreview an input mapping loadreadkeboola.workspaces.listList workspacesreadkeboola.workspaces.loadLoad tables into a workspacewritekeboola.workspaces.load_cloneLoad tables into a workspace using CLONEwritekeboola.workspaces.queryExecute a SQL query in a workspacewritekeboola.workspaces.reset_passwordReset a workspace's passworddestructivekeboola.workspaces.set_named_public_keySet a named public key on a workspacewritekeboola.workspaces.set_public_keySet a workspace's public keywritekeboola.workspaces.sso_loginInitialize a workspace SSO (SAML2) loginreadkeboola.workspaces.table_exportExport a workspace table to a filewritekeboola.workspaces.unloadUnload a workspace table into a storage tablewrite
Tables14
keboola.tables.create_asyncCreate a table from a file asynchronouslywritekeboola.tables.create_definitionCreate a typed table from a column definitionwritekeboola.tables.create_not_allowedCreate a table at the project level (always refused; use a bucket)writekeboola.tables.data_previewPreview table data (JSON)readkeboola.tables.deleteDrop a tabledestructivekeboola.tables.export_asyncExport table data to a file asynchronouslywritekeboola.tables.getGet a tablereadkeboola.tables.import_asyncImport data into a table from a file or workspace asynchronouslywritekeboola.tables.listList tablesreadkeboola.tables.list_in_bucketList tables in a bucketreadkeboola.tables.pullPull a table from the default branch into a development branchwritekeboola.tables.swapSwap two tableswritekeboola.tables.updateUpdate a tablewritekeboola.tables.update_definitionUpdate a typed table's definitionwrite
Configurations13
keboola.configurations.batch_purgePermanently purge deleted configurationsdestructivekeboola.configurations.batch_restoreRestore deleted configurationswritekeboola.configurations.createCreate a configurationwritekeboola.configurations.deleteDelete a configuration (move to trash)destructivekeboola.configurations.diffGet a three-way diff of a branch configuration against the default branchreadkeboola.configurations.getGet a configurationreadkeboola.configurations.listList a component's configurationsreadkeboola.configurations.purgePermanently purge a deleted configurationdestructivekeboola.configurations.rebaseRebase a branch configuration onto the default branchwritekeboola.configurations.reset_to_defaultReset a development branch configuration to the default branch versionwritekeboola.configurations.restoreRestore a deleted configurationwritekeboola.configurations.updateUpdate a configurationwritekeboola.configurations.update_stateUpdate a configuration's statewrite
Buckets11
keboola.buckets.createCreate a bucket or link a shared bucketwritekeboola.buckets.deleteDrop a bucketdestructivekeboola.buckets.force_unlinkForce unlink a shared bucket from a projectdestructivekeboola.buckets.getGet a bucketreadkeboola.buckets.listList bucketsreadkeboola.buckets.refreshRefresh an external bucketwritekeboola.buckets.refresh_tables_infoRefresh table information in a bucketwritekeboola.buckets.registerRegister an existing external schema or dataset as a bucketwritekeboola.buckets.register_guideGet the guide for registering an external bucketreadkeboola.buckets.schedule_refreshSchedule a bucket refreshwritekeboola.buckets.updateUpdate a bucketwrite
Merge requests9
keboola.merge_requests.approveApprove a merge requestwritekeboola.merge_requests.conflictsList a merge request's conflictsreadkeboola.merge_requests.createCreate a merge requestwritekeboola.merge_requests.getGet a merge requestreadkeboola.merge_requests.listList merge requestsreadkeboola.merge_requests.mergeMerge a merge request into the default branchwritekeboola.merge_requests.request_changesRequest changes on a merge requestwritekeboola.merge_requests.request_reviewRequest review of a merge requestwritekeboola.merge_requests.updateUpdate a merge requestwrite
Tokens8
keboola.tokens.createCreate a tokenwritekeboola.tokens.deleteDelete a tokendestructivekeboola.tokens.getGet a tokenreadkeboola.tokens.listList tokensreadkeboola.tokens.refreshRefresh (rotate) a tokenwritekeboola.tokens.shareShare a token by emailwritekeboola.tokens.updateUpdate a tokenwritekeboola.tokens.verifyVerify the current token and get its projectread
Bucket listings6
keboola.bucket_listings.createCreate a bucket listingwritekeboola.bucket_listings.deleteDelete a bucket listingdestructivekeboola.bucket_listings.getGet a bucket listingreadkeboola.bucket_listings.listList bucket listingsreadkeboola.bucket_listings.list_subscriptionsList consumers subscribing to a bucket listingreadkeboola.bucket_listings.updateUpdate a bucket listingwrite
Bucket sharing6
keboola.bucket_sharing.deleteStop sharing a bucketdestructivekeboola.bucket_sharing.share_to_organizationShare a bucket to the organizationwritekeboola.bucket_sharing.share_to_organization_projectsShare a bucket to all organization projectswritekeboola.bucket_sharing.share_to_projectsShare a bucket to selected projectswritekeboola.bucket_sharing.share_to_usersShare a bucket to selected userswritekeboola.bucket_sharing.updateChange a bucket's sharing typewrite
Configuration rows6
keboola.configuration_rows.createCreate a configuration rowwritekeboola.configuration_rows.deleteDelete a configuration rowdestructivekeboola.configuration_rows.getGet a configuration rowreadkeboola.configuration_rows.listList configuration rowsreadkeboola.configuration_rows.updateUpdate a configuration rowwritekeboola.configuration_rows.update_stateUpdate a configuration row's statewrite
Dev branches5
keboola.dev_branches.createCreate a development branchwritekeboola.dev_branches.deleteDelete a development branchdestructivekeboola.dev_branches.getGet a development branchreadkeboola.dev_branches.listList development branchesreadkeboola.dev_branches.updateUpdate a development branchwrite
Files5
keboola.files.deleteDelete a filedestructivekeboola.files.getGet a file (with optional download credentials)readkeboola.files.listList filesreadkeboola.files.preparePrepare a file upload (returns upload parameters)writekeboola.files.refreshRefresh a file's credentialswrite
Table aliases5
keboola.table_aliases.createCreate a table alias in a bucketwritekeboola.table_aliases.delete_filterRemove an alias table's filterdestructivekeboola.table_aliases.disable_columns_auto_syncDisable automatic column sync for an alias tablewritekeboola.table_aliases.enable_columns_auto_syncEnable automatic column sync for an alias tablewritekeboola.table_aliases.set_filterSet an alias table's filterwrite
Triggers5
keboola.triggers.createCreate a triggerwritekeboola.triggers.deleteDelete a triggerdestructivekeboola.triggers.getGet a triggerreadkeboola.triggers.listList triggersreadkeboola.triggers.updateUpdate a triggerwrite
Configuration row versions4
keboola.configuration_row_versions.copyCopy a configuration row version into a configurationwritekeboola.configuration_row_versions.getGet a configuration row versionreadkeboola.configuration_row_versions.listList a configuration row's versionsreadkeboola.configuration_row_versions.rollbackRoll a configuration row back to a versionwrite
Configuration versions4
keboola.configuration_versions.copyCreate a new configuration from a versionwritekeboola.configuration_versions.getGet a configuration versionreadkeboola.configuration_versions.listList a configuration's versionsreadkeboola.configuration_versions.rollbackRoll a configuration back to a versionwrite
Snapshots4
keboola.snapshots.createCreate a table snapshotwritekeboola.snapshots.deleteDelete a snapshotdestructivekeboola.snapshots.getGet a snapshotreadkeboola.snapshots.listList a table's snapshotsread
Branch metadata3
keboola.branch_metadata.deleteDelete a development branch metadata entrydestructivekeboola.branch_metadata.listList development branch metadatareadkeboola.branch_metadata.upsertCreate or update development branch metadatawrite
Bucket metadata3
keboola.bucket_metadata.deleteDelete a bucket metadata entrydestructivekeboola.bucket_metadata.listList bucket metadatareadkeboola.bucket_metadata.upsertCreate or update bucket metadatawrite
Column metadata3
keboola.column_metadata.deleteDelete a column metadata entrydestructivekeboola.column_metadata.listList column metadatareadkeboola.column_metadata.upsertCreate or update column metadatawrite
Configuration metadata3
keboola.configuration_metadata.deleteDelete a configuration metadata entrydestructivekeboola.configuration_metadata.listList configuration metadatareadkeboola.configuration_metadata.upsertCreate or update configuration metadatawrite
Events3
keboola.events.createCreate an eventwritekeboola.events.getGet an eventreadkeboola.events.listList project eventsread
Search3
keboola.search.component_configurationsSearch component configurations by metadatareadkeboola.search.globalSearch storage objects across projectsreadkeboola.search.tablesSearch tables by metadataread
Table columns3
keboola.table_columns.createAdd a column to a tablewritekeboola.table_columns.deleteDelete a column from a tabledestructivekeboola.table_columns.update_definitionUpdate a typed column's definitionwrite
Table metadata3
keboola.table_metadata.deleteDelete a table metadata entrydestructivekeboola.table_metadata.listList table metadatareadkeboola.table_metadata.upsertCreate or update table and column metadatawrite
Workspace credentials3
keboola.workspace_credentials.createCreate workspace storage credentialswritekeboola.workspace_credentials.deleteDelete workspace storage credentialsdestructivekeboola.workspace_credentials.getGet workspace storage credentialsread
Bucket owners2
keboola.bucket_owners.getGet a bucket's ownerreadkeboola.bucket_owners.updateChange a bucket's ownerwrite
Column names2
keboola.column_names.validateValidate column namesreadkeboola.column_names.webalizeConvert column names to valid identifiersread
Components2
keboola.components.getGet a componentreadkeboola.components.listList components and their configurationsread
Configuration workspaces2
keboola.configuration_workspaces.createCreate a workspace for a configurationwritekeboola.configuration_workspaces.listList workspaces of a configurationread
File tags2
keboola.file_tags.createAdd a tag to a filewritekeboola.file_tags.deleteRemove a tag from a filedestructive
Jobs2
keboola.jobs.getGet a storage job (poll an asynchronous call)readkeboola.jobs.listList storage jobsread
Table primary keys2
keboola.table_primary_keys.createCreate a table's primary keywritekeboola.table_primary_keys.deleteRemove a table's primary keydestructive
Table profiles2
keboola.table_profiles.createStart a table data profilewritekeboola.table_profiles.getGet a table data profileread
Workspace objects2
keboola.workspace_objects.batch_deleteDelete objects in a workspacedestructivekeboola.workspace_objects.listList objects in a workspaceread
Bucket events1
keboola.bucket_events.listList events for a bucketread
Display names1
keboola.display_names.webalizeConvert a display name to a valid identifierread
Scheduled tasks1
keboola.scheduled_tasks.deleteDelete a scheduled taskdestructive
Shared buckets1
keboola.shared_buckets.listList buckets shared with this projectread
Sharing targets1
keboola.sharing_targets.listList projects and users a bucket can be shared toread
Stats1
keboola.stats.listGet project job statisticsread
Storage1
keboola.storage.indexGet the Storage API index (stack services, features, components)read
Table events1
keboola.table_events.listList events for a tableread
Table rows1
keboola.table_rows.deleteDelete rows from a tabledestructive
Tickets1
keboola.tickets.createGenerate a new unique IDwrite
Token events1
keboola.token_events.listList events for a tokenread
Questions
The Keboola MCP server, answered.
Is there a Keboola MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 176 Keboola actions across workspaces, tables, configurations and buckets, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Keboola.
What do I need to connect Keboola?
Keboola Storage API token. Plus your host. The free call account { op: "connections.requirements", service: "keboola" } lists exactly what to paste.
Can an AI agent delete or change things in Keboola?
Only if its key allows it, and only with an explicit confirmation. 29 Keboola actions are destructive, including delete a file, drop a table and drop a bucket. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Keboola API limit?
actionlake paces every call to the limits in the Keboola service file: 600 calls a minute per connection. Repeated reads are answered from cache (61 Keboola actions can be), which never reaches Keboola.
What does a Keboola action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (176 Keboola actions page). Cache hits, searches, dry runs and calls Keboola refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Keboola API does it cover?
The Keboola Storage API v2 (OpenAPI 3.0.0, document version 2.0) at connection.keboola.com by default, or the base URL set when you connect. It is built from Keboola's documentation as read on 23 October 2026. 176 actions in 45 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Keboola data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Keboola credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Keboola today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
