Connectors · Developer & infrastructure
Neon MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Neon and the rest of your systems. It gives your agent 191 Neon actions (81 reads, 66 writes and 44 that wait for a confirmation) and holds the Neon credential itself, so the agent never does. It paces Neon's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "neon.projects.list", intent: "check which Neon account is connected"}# List projects · read · 1 upstream call- 191actionsin one signed file
- 81readlook, never change
- 66writecreate and update
- 44wait for a yesdestructive, confirmed first
Set up
Connect Neon in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Neon.
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
api_keyNeon API key
account { op: "connections.requirements", service: "neon" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "neon.projects.list" }# list projects · read · 1 upstream callcheck { action: "neon.databases.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Neon at a glance
- Sign-in
- Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
api_key- Limits we pace to
- 700 calls a minute, per connection
- API covered
- Neon API v2 (OpenAPI 3.0.3, 191 of 193 operations)
console.neon.tech/api/v2 - Built from
- Neon's documentation, read 22 October 2026neon.comapi-docs.neon.tech
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 71 of 81 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 4, so ask can line Neon up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Neon.
191 actions in 24 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 81readlook, never change
- 66writecreate and update
- 44destructivewait for a confirmation
Auth
3712 read · 19 write · 6 destructive
Add an OAuth provider · Add domain to redirect_uri whitelist · Enable Neon Auth for the branch · Create new auth user
Projects
2511 read · 6 write · 8 destructive
List projects · Add JWKS URL · Create project · Get advisor issues
Organizations
199 read · 5 write · 5 destructive
List organization members · Create organization API key · Create organization invitations · List organization invitations
Branches
178 read · 8 write · 1 destructive
List branches · Create branch · Retrieve branch details · Delete branch
Auth legacy
164 read · 7 write · 5 destructive
Add trusted redirect URI domain · Add an OAuth provider · Create Neon Auth integration · Create new auth user
Endpoints
82 read · 4 write · 2 destructive
Create compute endpoint · List compute endpoints · Retrieve compute endpoint details · Start compute endpoint
Buckets
73 read · 1 write · 3 destructive
Create a bucket on the branch · List buckets on the branch · List objects in a bucket · Presign an upload or download for an object in a bucket
Snapshots
72 read · 4 write · 1 destructive
Create snapshot · Retrieve backup schedule · List project snapshots · Restore snapshot
16 more areas · 55 actions
- Roles 6
- Credentials 5
- Databases 5
- Function triggers 5
- Realtime 5
- Data API 4
- Functions 4
- Users 4
- API keys 3
- Consumption 3
- Function custom domains 3
- Logs 3
- Operations 2
- AI gateway 1
- Regions 1
- Storage 1
Top actions
The Neon API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 10 of Neon's 12 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
neon.databases.listList databases | List databases. | read | content.database.list12 connectors |
neon.databases.createCreate database | Create database. | write | content.database.create15 connectors |
neon.branches.listList branches | List branches. | read | devops.branch.list12 connectors |
neon.branches.createCreate branch | Create branch. | write | devops.branch.create9 connectors |
neon.databases.deleteDelete database | Delete database. | destructive | content.database.delete12 connectors |
neon.projects.listList projects | List projects. | read | this connector |
neon.organizations.get_membersList organization members | List organization members. | read | this connector |
neon.users.get_current_userRetrieve current user details | Retrieve current user details. | read | this connector |
neon.roles.listList roles | List roles. | read | this connector |
neon.roles.createCreate role | Create role. | write | this connector |
neon.endpoints.listList compute endpoints | List compute endpoints. | read | this connector |
neon.snapshots.listList project snapshots | List project snapshots. | read | this connector |
Try it
Prompts to paste into Claude.
Each one names the Neon actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Give me a one-line status for every active Neon project.
calls
neon.projects.list - Writewrite
Create database in Neon. Show me exactly what you will send before you save it.
calls
neon.databases.create
Governance for Neon
Destructive actions wait for a yes.
44 Neon actions are destructive. The first 10:
- Delete database
neon.databases.delete - Delete branch
neon.branches.delete - Delete role
neon.roles.delete - Delete project
neon.projects.delete - Delete compute endpoint
neon.endpoints.delete - Delete snapshot
neon.snapshots.delete - Restart compute endpoint
neon.endpoints.restart - Delete JWKS URL
neon.projects.delete_jwks - Reset role password
neon.roles.reset_password - Set an org member's role on a project
neon.projects.set_member_role
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete database?
intent: the user asked me to delete database
account { op: "keys.create", name: "neon-agent", allowed_actions: ["neon.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "neon.databases.delete", approver: "[email protected]" }, { match: "neon.branches.delete", approver: "[email protected]" }, { match: "neon.roles.delete", approver: "[email protected]" } ]}Cost
What Neon costs on actionlake.
Every Neon action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Neon refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 191 Neon actions
- 191actions pageeach page of a long list is one call
- 71reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Neon action.
191 actions by area: the id your agent calls, what it does, and its effect.
Auth37
neon.auth.add_branch_oauth_providerAdd an OAuth providerwriteneon.auth.add_branch_trusted_domainAdd domain to redirect_uri whitelistwriteneon.auth.createEnable Neon Auth for the branchwriteneon.auth.create_branch_new_userCreate new auth userwriteneon.auth.create_oauth_clientCreate an OAuth clientwriteneon.auth.delete_branch_oauth_providerDelete OAuth providerdestructiveneon.auth.delete_branch_trusted_domainDelete domain from redirect_uri whitelistdestructiveneon.auth.delete_branch_userDelete auth userdestructiveneon.auth.delete_oauth_clientDelete an OAuth clientdestructiveneon.auth.disableDisable Neon Auth for the branchdestructiveneon.auth.getRetrieve Neon Auth details for the branchreadneon.auth.get_allow_localhostRetrieve localhost allow settingreadneon.auth.get_email_and_password_configRetrieve email and password configurationreadneon.auth.get_email_providerRetrieve email provider configurationreadneon.auth.get_oauth_clientRetrieve an OAuth clientreadneon.auth.get_oauth_provider_pluginRetrieve OAuth provider plugin configurationreadneon.auth.get_phone_number_pluginRetrieve phone number plugin configurationreadneon.auth.get_plugin_configsRetrieve Neon Auth plugin configurationsreadneon.auth.get_webhook_configRetrieve Neon Auth webhook configurationreadneon.auth.list_branch_oauth_providersList OAuth providers for the branchreadneon.auth.list_branch_trusted_domainsList domains in redirect_uri whitelistreadneon.auth.list_oauth_clientsList OAuth clientsreadneon.auth.rotate_oauth_client_secretRotate an OAuth client secretdestructiveneon.auth.send_email_provider_testSend test email using the saved email providerwriteneon.auth.send_test_emailSend test emailwriteneon.auth.update_allow_localhostUpdate localhost allow settingwriteneon.auth.update_branch_oauth_providerUpdate OAuth providerwriteneon.auth.update_configUpdate auth configurationwriteneon.auth.update_email_and_password_configUpdate email and password configurationwriteneon.auth.update_email_providerUpdate email provider configurationwriteneon.auth.update_magic_link_pluginUpdate magic link plugin configurationwriteneon.auth.update_oauth_clientUpdate an OAuth clientwriteneon.auth.update_oauth_provider_pluginUpdate OAuth provider plugin configurationwriteneon.auth.update_organization_pluginUpdate organization plugin configurationwriteneon.auth.update_phone_number_pluginUpdate phone number plugin configurationwriteneon.auth.update_user_roleUpdate auth user rolewriteneon.auth.update_webhook_configUpdate Neon Auth webhook configurationwrite
Projects25
neon.projects.accept_transfer_requestAccept a project transfer requestdestructiveneon.projects.add_jwksAdd JWKS URLwriteneon.projects.assign_vpc_endpointSet VPC endpoint restrictionwriteneon.projects.countRetrieve projects countreadneon.projects.createCreate projectwriteneon.projects.create_transfer_requestCreate a project transfer requestdestructiveneon.projects.deleteDelete projectdestructiveneon.projects.delete_jwksDelete JWKS URLdestructiveneon.projects.delete_vpc_endpointDelete VPC endpoint restrictiondestructiveneon.projects.getRetrieve project detailsreadneon.projects.get_advisor_security_issuesGet advisor issuesreadneon.projects.get_available_preload_librariesList available shared preload librariesreadneon.projects.get_connection_uriRetrieve connection URIreadneon.projects.get_jwksList JWKS URLsreadneon.projects.grant_permissionGrant project accesswriteneon.projects.listList projectsreadneon.projects.list_membersList org members and their project rolesreadneon.projects.list_permissionsList project accessreadneon.projects.list_sharedList shared projectsreadneon.projects.list_vpc_endpointsList VPC endpoint restrictionsreadneon.projects.recoverRecover a deleted projectwriteneon.projects.remove_member_roleRemove an org member's role on a projectdestructiveneon.projects.revoke_permissionRevoke project accessdestructiveneon.projects.set_member_roleSet an org member's role on a projectdestructiveneon.projects.updateUpdate projectwrite
Organizations19
neon.organizations.assign_vpc_endpointAssign or update VPC endpointwriteneon.organizations.create_api_keyCreate organization API keywriteneon.organizations.create_invitationsCreate organization invitationswriteneon.organizations.delete_spending_limitRemove organization spending limitdestructiveneon.organizations.delete_vpc_endpointDelete VPC endpointdestructiveneon.organizations.getRetrieve organization detailsreadneon.organizations.get_invitationsList organization invitationsreadneon.organizations.get_memberRetrieve organization member detailsreadneon.organizations.get_membersList organization membersreadneon.organizations.get_spending_limitRetrieve organization spending limitreadneon.organizations.get_vpc_endpoint_detailsRetrieve VPC endpoint detailsreadneon.organizations.list_api_keysList organization API keysreadneon.organizations.list_vpc_endpointsList VPC endpointsreadneon.organizations.list_vpc_endpoints_all_regionsList VPC endpoints across all regionsreadneon.organizations.remove_memberRemove organization memberdestructiveneon.organizations.revoke_api_keyRevoke organization API keydestructiveneon.organizations.set_spending_limitSet organization spending limitwriteneon.organizations.transfer_projectsTransfer projects between organizationsdestructiveneon.organizations.update_memberUpdate role for organization memberwrite
Branches17
neon.branches.countRetrieve number of branchesreadneon.branches.createCreate branchwriteneon.branches.create_anonymizedCreate anonymized branchwriteneon.branches.deleteDelete branchdestructiveneon.branches.finalize_restoreFinalize branch restore from snapshotwriteneon.branches.getRetrieve branch detailsreadneon.branches.get_anonymized_statusRetrieve anonymized branch statusreadneon.branches.get_masking_rulesRetrieve masking rulesreadneon.branches.get_schemaRetrieve database schemareadneon.branches.get_schema_comparisonCompare database schemareadneon.branches.listList branchesreadneon.branches.list_endpointsList branch endpointsreadneon.branches.restoreRestore branch to a historical statewriteneon.branches.set_defaultSet branch as defaultwriteneon.branches.start_anonymizationStart anonymizationwriteneon.branches.updateUpdate branchwriteneon.branches.update_masking_rulesUpdate masking ruleswrite
Auth legacy16
neon.auth_legacy.add_domain_to_redirect_uri_whitelistAdd trusted redirect URI domainwriteneon.auth_legacy.add_oauth_providerAdd an OAuth providerwriteneon.auth_legacy.create_integrationCreate Neon Auth integrationwriteneon.auth_legacy.create_new_userCreate new auth userwriteneon.auth_legacy.create_provider_sdk_keysCreate Auth Provider SDK keyswriteneon.auth_legacy.delete_domain_from_redirect_uri_whitelistDelete trusted redirect URI domaindestructiveneon.auth_legacy.delete_integrationDelete integration with auth providerdestructiveneon.auth_legacy.delete_oauth_providerDelete OAuth providerdestructiveneon.auth_legacy.delete_userDelete auth userdestructiveneon.auth_legacy.get_email_serverRetrieve email server configurationreadneon.auth_legacy.list_integrationsList active integrations with auth providersreadneon.auth_legacy.list_oauth_providersList OAuth providersreadneon.auth_legacy.list_redirect_uri_whitelist_domainsList trusted redirect URI domainsreadneon.auth_legacy.transfer_provider_projectTransfer Neon-managed auth project to your own accountdestructiveneon.auth_legacy.update_email_serverUpdate email server configurationwriteneon.auth_legacy.update_oauth_providerUpdate OAuth providerwrite
Endpoints8
neon.endpoints.createCreate compute endpointwriteneon.endpoints.deleteDelete compute endpointdestructiveneon.endpoints.getRetrieve compute endpoint detailsreadneon.endpoints.listList compute endpointsreadneon.endpoints.restartRestart compute endpointdestructiveneon.endpoints.startStart compute endpointwriteneon.endpoints.suspendSuspend compute endpointwriteneon.endpoints.updateUpdate compute endpointwrite
Buckets7
neon.buckets.createCreate a bucket on the branchwriteneon.buckets.deleteDelete a bucket on the branchdestructiveneon.buckets.delete_objectDelete an object in a bucketdestructiveneon.buckets.delete_objects_by_prefixDelete every object under a key prefix (folder) in a bucketdestructiveneon.buckets.listList buckets on the branchreadneon.buckets.list_objectsList objects in a bucketreadneon.buckets.presign_objectPresign an upload or download for an object in a bucketread
Snapshots7
neon.snapshots.createCreate snapshotwriteneon.snapshots.deleteDelete snapshotdestructiveneon.snapshots.get_scheduleRetrieve backup schedulereadneon.snapshots.listList project snapshotsreadneon.snapshots.restoreRestore snapshotwriteneon.snapshots.set_scheduleUpdate backup schedulewriteneon.snapshots.updateUpdate snapshotwrite
Roles6
neon.roles.createCreate rolewriteneon.roles.deleteDelete roledestructiveneon.roles.getRetrieve role detailsreadneon.roles.listList rolesreadneon.roles.reset_passwordReset role passworddestructiveneon.roles.reveal_passwordRetrieve role passwordread
Credentials5
neon.credentials.createIssue a scoped credential on the branchwriteneon.credentials.listList credentials on the branchreadneon.credentials.revealReveal a credential's secretsreadneon.credentials.revokeRevoke a credentialdestructiveneon.credentials.rotateRotate a credential's secretsdestructive
Databases5
neon.databases.createCreate databasewriteneon.databases.deleteDelete databasedestructiveneon.databases.getRetrieve database detailsreadneon.databases.listList databasesreadneon.databases.updateUpdate databasewrite
Function triggers5
neon.function_triggers.createCreate a triggerwriteneon.function_triggers.deleteDelete a triggerdestructiveneon.function_triggers.getGet a triggerreadneon.function_triggers.listList triggers on the branchreadneon.function_triggers.updateUpdate a triggerwrite
Realtime5
neon.realtime.disableDisable Realtimedestructiveneon.realtime.enableEnable Realtimewriteneon.realtime.getRetrieve Realtime statereadneon.realtime.get_secretRetrieve the Realtime shared secretreadneon.realtime.rotate_secretRotate the Realtime shared secretdestructive
Data API4
neon.data_api.createCreate Neon Data APIwriteneon.data_api.deleteDelete Neon Data APIdestructiveneon.data_api.getRetrieve Neon Data API configurationreadneon.data_api.updateUpdate Neon Data APIwrite
Functions4
neon.functions.deleteDelete a function on the branchdestructiveneon.functions.getGet function detailsreadneon.functions.listList functions on the branchreadneon.functions.updateUpdate a functionwrite
Users4
neon.users.get_auth_detailsRetrieve request authentication detailsreadneon.users.get_current_userRetrieve current user detailsreadneon.users.list_current_user_organizationsList organizations for the current userreadneon.users.transfer_projects_to_organizationTransfer projects from personal account to organizationdestructive
API keys3
neon.api_keys.createCreate API keywriteneon.api_keys.listList API keysreadneon.api_keys.revokeRevoke API keydestructive
Consumption3
neon.consumption.list_per_branch_v2Retrieve branch consumption metricsreadneon.consumption.list_per_projectRetrieve project consumption metrics (legacy plans)readneon.consumption.list_per_project_v2Retrieve project consumption metricsread
Function custom domains3
neon.function_custom_domains.createRegister a custom domain on a branchwriteneon.function_custom_domains.deleteDelete a custom domain from a branchdestructiveneon.function_custom_domains.listList the custom domains on a branchread
Logs3
neon.logs.list_field_valuesList branch log field valuesreadneon.logs.list_fieldsList branch log fieldsreadneon.logs.queryQuery branch logsread
Operations2
neon.operations.getRetrieve operation detailsreadneon.operations.listList operationsread
AI gateway1
neon.ai_gateway.getGet branch AI Gateway endpointread
Regions1
neon.regions.listList supported regionsread
Storage1
neon.storage.getGet branch object storage stateread
Questions
The Neon MCP server, answered.
Is there a Neon MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 191 Neon actions across auth, projects, organizations and branches, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Neon.
What do I need to connect Neon?
Neon API key. The free call account { op: "connections.requirements", service: "neon" } lists exactly what to paste.
Can an AI agent delete or change things in Neon?
Only if its key allows it, and only with an explicit confirmation. 44 Neon actions are destructive, including delete database, delete branch and delete role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Neon API limit?
actionlake paces every call to the limits in the Neon service file: 700 calls a minute per connection. Repeated reads are answered from cache (71 Neon actions can be), which never reaches Neon.
What does a Neon action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (191 Neon actions page). Cache hits, searches, dry runs and calls Neon refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Neon API does it cover?
The Neon API v2 (OpenAPI 3.0.3, 191 of 193 operations) at console.neon.tech/api/v2. It is built from Neon's documentation as read on 22 October 2026. 191 actions in 24 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Neon data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Neon credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Neon today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
