--- title: "Neon MCP server for AI agents - actionlake" description: "Give Claude 191 Neon actions through one MCP server: auth, projects, organizations, branches. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/neon updated: 2026-10-22 --- Connectors · Developer & infrastructure # Neon MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Neon and the rest of your systems. It gives your agent 191 Neon actions (81 reads, 66 writes and 44 that wait for a confirmation) and holds the Neon credential itself, so the agent never does. It paces Neon's limits and records every call. [Connect Neon free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "neon.projects.list", intent: "check which Neon account is connected" } # List projects · read · 1 upstream call ``` - 191 actions in one signed file - 81 read look, never change - 66 write create and update - 44 wait for a yes destructive, confirmed first Set up ## Connect Neon in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Neon. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` Neon API key ``` account { op: "connections.requirements", service: "neon" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "neon.projects.list" } # list projects · read · 1 upstream call check { action: "neon.databases.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Neon at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` **Limits we pace to** 700 calls a minute, per connection **API covered** Neon API v2 (OpenAPI 3.0.3, 191 of 193 operations)`console.neon.tech/api/v2` **Built from** Neon's documentation, read 22 October 2026[neon.com](https://neon.com/api_spec/release/v2.json) [api-docs.neon.tech](https://api-docs.neon.tech/reference/getting-started-with-neon-api) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 71 of 81 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 4, so ask can line Neon up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Neon. 191 actions in 24 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **81** read look, never change - **66** write create and update - **44** destructive wait for a confirmation 1. ### Auth 37 12 read · 19 write · 6 destructive Add an OAuth provider · Add domain to redirect_uri whitelist · Enable Neon Auth for the branch · Create new auth user 2. ### Projects 25 11 read · 6 write · 8 destructive List projects · Add JWKS URL · Create project · Get advisor issues 3. ### Organizations 19 9 read · 5 write · 5 destructive List organization members · Create organization API key · Create organization invitations · List organization invitations 4. ### Branches 17 8 read · 8 write · 1 destructive List branches · Create branch · Retrieve branch details · Delete branch 5. ### Auth legacy 16 4 read · 7 write · 5 destructive Add trusted redirect URI domain · Add an OAuth provider · Create Neon Auth integration · Create new auth user 6. ### Endpoints 8 2 read · 4 write · 2 destructive Create compute endpoint · List compute endpoints · Retrieve compute endpoint details · Start compute endpoint 7. ### Buckets 7 3 read · 1 write · 3 destructive Create a bucket on the branch · List buckets on the branch · List objects in a bucket · Presign an upload or download for an object in a bucket 8. ### Snapshots 7 2 read · 4 write · 1 destructive Create snapshot · Retrieve backup schedule · List project snapshots · Restore snapshot **16 more areas · 55 actions** - Roles **6** - Credentials **5** - Databases **5** - Function triggers **5** - Realtime **5** - Data API **4** - Functions **4** - Users **4** - API keys **3** - Consumption **3** - Function custom domains **3** - Logs **3** - Operations **2** - AI gateway **1** - Regions **1** - Storage **1** Top actions ## The Neon API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 10 of Neon's 12 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `neon.databases.list` List databases | List databases. | read | `content.database.list` 12 connectors | | `neon.databases.create` Create database | Create database. | write | `content.database.create` 15 connectors | | `neon.branches.list` List branches | List branches. | read | `devops.branch.list` 12 connectors | | `neon.branches.create` Create branch | Create branch. | write | `devops.branch.create` 9 connectors | | `neon.databases.delete` Delete database | Delete database. | destructive | `content.database.delete` 12 connectors | | `neon.projects.list` List projects | List projects. | read | this connector | | `neon.organizations.get_members` List organization members | List organization members. | read | this connector | | `neon.users.get_current_user` Retrieve current user details | Retrieve current user details. | read | this connector | | `neon.roles.list` List roles | List roles. | read | this connector | | `neon.roles.create` Create role | Create role. | write | this connector | | `neon.endpoints.list` List compute endpoints | List compute endpoints. | read | this connector | | `neon.snapshots.list` List project snapshots | List project snapshots. | read | this connector | Try it ## Prompts to paste into Claude. Each one names the Neon actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Give me a one-line status for every active Neon project. calls `neon.projects.list` 2. Write write Create database in Neon. Show me exactly what you will send before you save it. calls `neon.databases.create` Governance for Neon ## Destructive actions wait for a yes. 44 Neon actions are destructive. The first 10: - Delete database `neon.databases.delete` - Delete branch `neon.branches.delete` - Delete role `neon.roles.delete` - Delete project `neon.projects.delete` - Delete compute endpoint `neon.endpoints.delete` - Delete snapshot `neon.snapshots.delete` - Restart compute endpoint `neon.endpoints.restart` - Delete JWKS URL `neon.projects.delete_jwks` - Reset role password `neon.roles.reset_password` - Set an org member's role on a project `neon.projects.set_member_role` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do neon.databases.delete confirm_policy: **human** Delete database? **intent:** the user asked me to delete database run suspended · waiting for a named person · key _neon-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "neon-agent", allowed_actions: ["neon.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "neon.databases.delete", approver: "lead@example.com" }, { match: "neon.branches.delete", approver: "lead@example.com" }, { match: "neon.roles.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Neon only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Neon costs on actionlake. Every Neon action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Neon refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 191 Neon actions - 191 actions page each page of a long list is one call - 71 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Neon action. 191 actions by area: the id your agent calls, what it does, and its effect. **Auth 37** - `neon.auth.add_branch_oauth_provider` Add an OAuth provider write - `neon.auth.add_branch_trusted_domain` Add domain to redirect_uri whitelist write - `neon.auth.create` Enable Neon Auth for the branch write - `neon.auth.create_branch_new_user` Create new auth user write - `neon.auth.create_oauth_client` Create an OAuth client write - `neon.auth.delete_branch_oauth_provider` Delete OAuth provider destructive - `neon.auth.delete_branch_trusted_domain` Delete domain from redirect_uri whitelist destructive - `neon.auth.delete_branch_user` Delete auth user destructive - `neon.auth.delete_oauth_client` Delete an OAuth client destructive - `neon.auth.disable` Disable Neon Auth for the branch destructive - `neon.auth.get` Retrieve Neon Auth details for the branch read - `neon.auth.get_allow_localhost` Retrieve localhost allow setting read - `neon.auth.get_email_and_password_config` Retrieve email and password configuration read - `neon.auth.get_email_provider` Retrieve email provider configuration read - `neon.auth.get_oauth_client` Retrieve an OAuth client read - `neon.auth.get_oauth_provider_plugin` Retrieve OAuth provider plugin configuration read - `neon.auth.get_phone_number_plugin` Retrieve phone number plugin configuration read - `neon.auth.get_plugin_configs` Retrieve Neon Auth plugin configurations read - `neon.auth.get_webhook_config` Retrieve Neon Auth webhook configuration read - `neon.auth.list_branch_oauth_providers` List OAuth providers for the branch read - `neon.auth.list_branch_trusted_domains` List domains in redirect_uri whitelist read - `neon.auth.list_oauth_clients` List OAuth clients read - `neon.auth.rotate_oauth_client_secret` Rotate an OAuth client secret destructive - `neon.auth.send_email_provider_test` Send test email using the saved email provider write - `neon.auth.send_test_email` Send test email write - `neon.auth.update_allow_localhost` Update localhost allow setting write - `neon.auth.update_branch_oauth_provider` Update OAuth provider write - `neon.auth.update_config` Update auth configuration write - `neon.auth.update_email_and_password_config` Update email and password configuration write - `neon.auth.update_email_provider` Update email provider configuration write - `neon.auth.update_magic_link_plugin` Update magic link plugin configuration write - `neon.auth.update_oauth_client` Update an OAuth client write - `neon.auth.update_oauth_provider_plugin` Update OAuth provider plugin configuration write - `neon.auth.update_organization_plugin` Update organization plugin configuration write - `neon.auth.update_phone_number_plugin` Update phone number plugin configuration write - `neon.auth.update_user_role` Update auth user role write - `neon.auth.update_webhook_config` Update Neon Auth webhook configuration write **Projects 25** - `neon.projects.accept_transfer_request` Accept a project transfer request destructive - `neon.projects.add_jwks` Add JWKS URL write - `neon.projects.assign_vpc_endpoint` Set VPC endpoint restriction write - `neon.projects.count` Retrieve projects count read - `neon.projects.create` Create project write - `neon.projects.create_transfer_request` Create a project transfer request destructive - `neon.projects.delete` Delete project destructive - `neon.projects.delete_jwks` Delete JWKS URL destructive - `neon.projects.delete_vpc_endpoint` Delete VPC endpoint restriction destructive - `neon.projects.get` Retrieve project details read - `neon.projects.get_advisor_security_issues` Get advisor issues read - `neon.projects.get_available_preload_libraries` List available shared preload libraries read - `neon.projects.get_connection_uri` Retrieve connection URI read - `neon.projects.get_jwks` List JWKS URLs read - `neon.projects.grant_permission` Grant project access write - `neon.projects.list` List projects read - `neon.projects.list_members` List org members and their project roles read - `neon.projects.list_permissions` List project access read - `neon.projects.list_shared` List shared projects read - `neon.projects.list_vpc_endpoints` List VPC endpoint restrictions read - `neon.projects.recover` Recover a deleted project write - `neon.projects.remove_member_role` Remove an org member's role on a project destructive - `neon.projects.revoke_permission` Revoke project access destructive - `neon.projects.set_member_role` Set an org member's role on a project destructive - `neon.projects.update` Update project write **Organizations 19** - `neon.organizations.assign_vpc_endpoint` Assign or update VPC endpoint write - `neon.organizations.create_api_key` Create organization API key write - `neon.organizations.create_invitations` Create organization invitations write - `neon.organizations.delete_spending_limit` Remove organization spending limit destructive - `neon.organizations.delete_vpc_endpoint` Delete VPC endpoint destructive - `neon.organizations.get` Retrieve organization details read - `neon.organizations.get_invitations` List organization invitations read - `neon.organizations.get_member` Retrieve organization member details read - `neon.organizations.get_members` List organization members read - `neon.organizations.get_spending_limit` Retrieve organization spending limit read - `neon.organizations.get_vpc_endpoint_details` Retrieve VPC endpoint details read - `neon.organizations.list_api_keys` List organization API keys read - `neon.organizations.list_vpc_endpoints` List VPC endpoints read - `neon.organizations.list_vpc_endpoints_all_regions` List VPC endpoints across all regions read - `neon.organizations.remove_member` Remove organization member destructive - `neon.organizations.revoke_api_key` Revoke organization API key destructive - `neon.organizations.set_spending_limit` Set organization spending limit write - `neon.organizations.transfer_projects` Transfer projects between organizations destructive - `neon.organizations.update_member` Update role for organization member write **Branches 17** - `neon.branches.count` Retrieve number of branches read - `neon.branches.create` Create branch write - `neon.branches.create_anonymized` Create anonymized branch write - `neon.branches.delete` Delete branch destructive - `neon.branches.finalize_restore` Finalize branch restore from snapshot write - `neon.branches.get` Retrieve branch details read - `neon.branches.get_anonymized_status` Retrieve anonymized branch status read - `neon.branches.get_masking_rules` Retrieve masking rules read - `neon.branches.get_schema` Retrieve database schema read - `neon.branches.get_schema_comparison` Compare database schema read - `neon.branches.list` List branches read - `neon.branches.list_endpoints` List branch endpoints read - `neon.branches.restore` Restore branch to a historical state write - `neon.branches.set_default` Set branch as default write - `neon.branches.start_anonymization` Start anonymization write - `neon.branches.update` Update branch write - `neon.branches.update_masking_rules` Update masking rules write **Auth legacy 16** - `neon.auth_legacy.add_domain_to_redirect_uri_whitelist` Add trusted redirect URI domain write - `neon.auth_legacy.add_oauth_provider` Add an OAuth provider write - `neon.auth_legacy.create_integration` Create Neon Auth integration write - `neon.auth_legacy.create_new_user` Create new auth user write - `neon.auth_legacy.create_provider_sdk_keys` Create Auth Provider SDK keys write - `neon.auth_legacy.delete_domain_from_redirect_uri_whitelist` Delete trusted redirect URI domain destructive - `neon.auth_legacy.delete_integration` Delete integration with auth provider destructive - `neon.auth_legacy.delete_oauth_provider` Delete OAuth provider destructive - `neon.auth_legacy.delete_user` Delete auth user destructive - `neon.auth_legacy.get_email_server` Retrieve email server configuration read - `neon.auth_legacy.list_integrations` List active integrations with auth providers read - `neon.auth_legacy.list_oauth_providers` List OAuth providers read - `neon.auth_legacy.list_redirect_uri_whitelist_domains` List trusted redirect URI domains read - `neon.auth_legacy.transfer_provider_project` Transfer Neon-managed auth project to your own account destructive - `neon.auth_legacy.update_email_server` Update email server configuration write - `neon.auth_legacy.update_oauth_provider` Update OAuth provider write **Endpoints 8** - `neon.endpoints.create` Create compute endpoint write - `neon.endpoints.delete` Delete compute endpoint destructive - `neon.endpoints.get` Retrieve compute endpoint details read - `neon.endpoints.list` List compute endpoints read - `neon.endpoints.restart` Restart compute endpoint destructive - `neon.endpoints.start` Start compute endpoint write - `neon.endpoints.suspend` Suspend compute endpoint write - `neon.endpoints.update` Update compute endpoint write **Buckets 7** - `neon.buckets.create` Create a bucket on the branch write - `neon.buckets.delete` Delete a bucket on the branch destructive - `neon.buckets.delete_object` Delete an object in a bucket destructive - `neon.buckets.delete_objects_by_prefix` Delete every object under a key prefix (folder) in a bucket destructive - `neon.buckets.list` List buckets on the branch read - `neon.buckets.list_objects` List objects in a bucket read - `neon.buckets.presign_object` Presign an upload or download for an object in a bucket read **Snapshots 7** - `neon.snapshots.create` Create snapshot write - `neon.snapshots.delete` Delete snapshot destructive - `neon.snapshots.get_schedule` Retrieve backup schedule read - `neon.snapshots.list` List project snapshots read - `neon.snapshots.restore` Restore snapshot write - `neon.snapshots.set_schedule` Update backup schedule write - `neon.snapshots.update` Update snapshot write **Roles 6** - `neon.roles.create` Create role write - `neon.roles.delete` Delete role destructive - `neon.roles.get` Retrieve role details read - `neon.roles.list` List roles read - `neon.roles.reset_password` Reset role password destructive - `neon.roles.reveal_password` Retrieve role password read **Credentials 5** - `neon.credentials.create` Issue a scoped credential on the branch write - `neon.credentials.list` List credentials on the branch read - `neon.credentials.reveal` Reveal a credential's secrets read - `neon.credentials.revoke` Revoke a credential destructive - `neon.credentials.rotate` Rotate a credential's secrets destructive **Databases 5** - `neon.databases.create` Create database write - `neon.databases.delete` Delete database destructive - `neon.databases.get` Retrieve database details read - `neon.databases.list` List databases read - `neon.databases.update` Update database write **Function triggers 5** - `neon.function_triggers.create` Create a trigger write - `neon.function_triggers.delete` Delete a trigger destructive - `neon.function_triggers.get` Get a trigger read - `neon.function_triggers.list` List triggers on the branch read - `neon.function_triggers.update` Update a trigger write **Realtime 5** - `neon.realtime.disable` Disable Realtime destructive - `neon.realtime.enable` Enable Realtime write - `neon.realtime.get` Retrieve Realtime state read - `neon.realtime.get_secret` Retrieve the Realtime shared secret read - `neon.realtime.rotate_secret` Rotate the Realtime shared secret destructive **Data API 4** - `neon.data_api.create` Create Neon Data API write - `neon.data_api.delete` Delete Neon Data API destructive - `neon.data_api.get` Retrieve Neon Data API configuration read - `neon.data_api.update` Update Neon Data API write **Functions 4** - `neon.functions.delete` Delete a function on the branch destructive - `neon.functions.get` Get function details read - `neon.functions.list` List functions on the branch read - `neon.functions.update` Update a function write **Users 4** - `neon.users.get_auth_details` Retrieve request authentication details read - `neon.users.get_current_user` Retrieve current user details read - `neon.users.list_current_user_organizations` List organizations for the current user read - `neon.users.transfer_projects_to_organization` Transfer projects from personal account to organization destructive **API keys 3** - `neon.api_keys.create` Create API key write - `neon.api_keys.list` List API keys read - `neon.api_keys.revoke` Revoke API key destructive **Consumption 3** - `neon.consumption.list_per_branch_v2` Retrieve branch consumption metrics read - `neon.consumption.list_per_project` Retrieve project consumption metrics (legacy plans) read - `neon.consumption.list_per_project_v2` Retrieve project consumption metrics read **Function custom domains 3** - `neon.function_custom_domains.create` Register a custom domain on a branch write - `neon.function_custom_domains.delete` Delete a custom domain from a branch destructive - `neon.function_custom_domains.list` List the custom domains on a branch read **Logs 3** - `neon.logs.list_field_values` List branch log field values read - `neon.logs.list_fields` List branch log fields read - `neon.logs.query` Query branch logs read **Operations 2** - `neon.operations.get` Retrieve operation details read - `neon.operations.list` List operations read **AI gateway 1** - `neon.ai_gateway.get` Get branch AI Gateway endpoint read **Regions 1** - `neon.regions.list` List supported regions read **Storage 1** - `neon.storage.get` Get branch object storage state read Questions ## The Neon MCP server, answered. **Is there a Neon MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 191 Neon actions across auth, projects, organizations and branches, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Neon. **What do I need to connect Neon?** Neon API key. The free call account { op: "connections.requirements", service: "neon" } lists exactly what to paste. **Can an AI agent delete or change things in Neon?** Only if its key allows it, and only with an explicit confirmation. 44 Neon actions are destructive, including delete database, delete branch and delete role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Neon API limit?** actionlake paces every call to the limits in the Neon service file: 700 calls a minute per connection. Repeated reads are answered from cache (71 Neon actions can be), which never reaches Neon. **What does a Neon action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (191 Neon actions page). Cache hits, searches, dry runs and calls Neon refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Neon API does it cover?** The Neon API v2 (OpenAPI 3.0.3, 191 of 193 operations) at console.neon.tech/api/v2. It is built from Neon's documentation as read on 22 October 2026. 191 actions in 24 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Neon data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Neon credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Neon Shares the most action names with - [Airtable 5](https://actionlake.com/connectors/airtable) - [Quickbase 4](https://actionlake.com/connectors/quickbase) - [SmartSuite 3](https://actionlake.com/connectors/smartsuite) - [LaunchDarkly 2](https://actionlake.com/connectors/launchdarkly) - [NocoDB 1](https://actionlake.com/connectors/nocodb) - [Zoho Creator 1](https://actionlake.com/connectors/zoho-creator) Joins with, on shared entities - [Lightdash 3](https://actionlake.com/connectors/lightdash) - [Metabase 3](https://actionlake.com/connectors/metabase) - [Tableau 3](https://actionlake.com/connectors/tableau) - [Aiven 3](https://actionlake.com/connectors/aiven) - [Autodesk Construction Cloud 3](https://actionlake.com/connectors/autodesk-construction-cloud) - [Kantata 3](https://actionlake.com/connectors/kantata) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Neon; the name is the vendor's own. Counts are from the Neon service file, version 1.0.0. ## Give your agent Neon today. [Connect Neon free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/neon More: https://actionlake.com/llms.txt