---
title: "Northflank MCP server for AI agents - actionlake"
description: "Give Claude 435 Northflank actions through one MCP server: services, jobs, integrations. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/northflank
updated: 2026-10-23
---

Connectors · Developer & infrastructure

# Northflank MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Northflank and the rest of your systems. It gives your agent 435 Northflank actions (184 reads, 169 writes and 82 that wait for a confirmation) and holds the Northflank credential itself, so the agent never does. It paces Northflank's limits and records every call.

[Connect Northflank free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "northflank.projects.list_projects",
  intent: "check which Northflank account is connected"
}
# List projects · read · 1 upstream call
```

- 435 actions in one signed file
- 184 read look, never change
- 169 write create and update
- 82 wait for a yes destructive, confirmed first

Set up

## Connect Northflank in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Northflank.
   Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_token` Northflank API token
   ```
   account { op: "connections.requirements", service: "northflank" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "northflank.projects.list_projects" }
   # list projects · read · 1 upstream call
   check { action: "northflank.projects.create_project", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Northflank at a glance

**Sign-in**

Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_token`

**Limits we pace to**

1,000 calls an hour, per connection

**API covered**

Northflank REST API v1 (OpenAPI 3.0.1)`api.northflank.com`

**Built from**

Northflank's documentation, read 23 October 2026[api.northflank.com](https://api.northflank.com/v1/swagger-json) [northflank.com](https://northflank.com/docs/v1/api/use-the-api)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

159 of 184 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

3, so ask can line Northflank up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Northflank.

435 actions in 35 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **184** read look, never change
- **169** write create and update
- **82** destructive wait for a confirmation

1. ### Services
   50
   23 read · 21 write · 6 destructive
   List services · Get service · Delete service · Restart service
2. ### Jobs
   47
   22 read · 20 write · 5 destructive
   List jobs · Get job · Delete job · Create cron job
3. ### Integrations
   46
   18 read · 20 write · 8 destructive
   List repositories · Add registry · Add SSH identity · Create audit log sink
4. ### Addons
   42
   19 read · 14 write · 9 destructive
   Backup addon · Create addon · Create addon backup schedule · Import addon backup
5. ### Domains
   27
   6 read · 14 write · 7 destructive
   Add subdomain · Add subdomain path · Create new domain · Import domain certificate
6. ### Cloud providers
   20
   9 read · 7 write · 4 destructive
   Create cluster · Create integration · List cluster nodes · List clusters
7. ### Secrets
   18
   6 read · 9 write · 3 destructive
   Create global secret · Create project secret · List global secrets · List project secrets
8. ### Pipelines
   15
   9 read · 2 write · 4 destructive
   List pipelines · List preview environments · List preview template runs · List release flow runs

**27 more areas · 170 actions**

- Preview blueprints **14**
- Volumes **14**
- Org roles **11**
- Encryption configurations **10**
- Harnesses **10**
- Rollout strategies **10**
- Templates **10**
- Team roles **9**
- Workflows **8**
- Projects **7**
- Backup destinations **6**
- Egress i PS **6**
- Load balancers **6**
- Tags **6**
- AI models **5**
- Billing **5**
- External addons **5**
- Teams **5**
- Miscellaneous **4**
- Network policies **4**
- API tokens **3**
- Container scans **3**
- Container snapshots **3**
- Team members **3**
- Auth **1**
- Opentofu **1**
- Org members **1**

Top actions

## The Northflank API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 20 of Northflank's 20 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `northflank.jobs.list_jobs` List jobs | List jobs. | read | `infra.job.list` 12 connectors |
| `northflank.services.list_services` List services | List services. | read | `infra.container_service.list` 11 connectors |
| `northflank.projects.list_projects` List projects | List projects. | read | `infra.namespace.list` 3 connectors |
| `northflank.team_members.list_team_members` List team members | List team members. | read | `identity.user.list` 474 connectors |
| `northflank.team_roles.list_team_roles` List team roles | List team roles. | read | `identity.role.list` 184 connectors |
| `northflank.jobs.get_job` Get job | Get job. | read | `infra.job.get` 11 connectors |
| `northflank.services.get_service` Get service | Get service. | read | `infra.container_service.get` 11 connectors |
| `northflank.auth.get_current_authentication_info` Get current authentication info | Get current authentication info. | read | `identity.current_user.get` 307 connectors |
| `northflank.projects.create_project` Create project | Create project. | write | `infra.namespace.create` 3 connectors |
| `northflank.services.delete_service` Delete service | Delete service. | destructive | `infra.container_service.delete` 11 connectors |
| `northflank.services.restart_service` Restart service | Restart service. | write | `infra.container_service.restart` 4 connectors |
| `northflank.jobs.run_job` Run job | Run job. | write | this connector |

Try it

## Prompts to paste into Claude.

Each one names the Northflank actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   List projects in Northflank and tell me what stands out.
   calls `northflank.projects.list_projects`
2. Write write
   Create project in Northflank. Show me exactly what you will send before you save it.
   calls `northflank.projects.create_project`

Governance for Northflank

## Destructive actions wait for a yes.

82 Northflank actions are destructive. The first 10:

- Delete service `northflank.services.delete_service`
- Delete job `northflank.jobs.delete_job`
- Delete team role `northflank.team_roles.delete_team_role`
- Delete project `northflank.projects.delete_project`
- Delete volume `northflank.volumes.delete_volume`
- Delete tag `northflank.tags.delete_tag`
- Delete team `northflank.teams.delete_team`
- Reset addon `northflank.addons.reset_addon`
- Delete addon `northflank.addons.delete_addon`
- Delete domain `northflank.domains.delete_domain`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do northflank.services.delete_service confirm_policy: **human**

Delete service?

**intent:** the user asked me to delete service

run suspended · waiting for a named person · key _northflank-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "northflank-agent",
  allowed_actions: ["northflank.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "northflank.services.delete_service", approver: "lead@example.com" },
    { match: "northflank.jobs.delete_job", approver: "lead@example.com" },
    { match: "northflank.team_roles.delete_team_role", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Northflank only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Northflank costs on actionlake.

Every Northflank action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Northflank refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 435 Northflank actions
- 435 actions page each page of a long list is one call
- 159 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Northflank action.

435 actions by area: the id your agent calls, what it does, and its effect.

**Services 50**

- `northflank.services.abort_service_build` Abort service build destructive
- `northflank.services.check_repository_access_for_services` Check repository access for services read
- `northflank.services.clear_the_build_cache_of_a_service` Clear the build cache of a service destructive
- `northflank.services.create_build_service` Create build service write
- `northflank.services.create_combined_service` Create combined service write
- `northflank.services.create_container_snapshot` Create container snapshot write
- `northflank.services.create_deployment_service` Create deployment service write
- `northflank.services.delete_service` Delete service destructive
- `northflank.services.delete_service_per_replica_volume_group` Delete service per-replica volume group destructive
- `northflank.services.delete_service_per_replica_volume_pvc` Delete service per-replica volume PVC destructive
- `northflank.services.edit_service_build_arguments` Edit service build arguments write
- `northflank.services.edit_service_runtime_environment` Edit service runtime environment write
- `northflank.services.get_service` Get service read
- `northflank.services.get_service_branches` Get service branches read
- `northflank.services.get_service_build` Get service build read
- `northflank.services.get_service_build_arguments` Get service build arguments read
- `northflank.services.get_service_build_arguments_details` Get service build arguments details read
- `northflank.services.get_service_build_logs` Get service build logs read
- `northflank.services.get_service_build_metrics` Get service build metrics read
- `northflank.services.get_service_deployment` Get service deployment read
- `northflank.services.get_service_health_checks` Get service health checks read
- `northflank.services.get_service_infrastructure_events` Get service infrastructure events read
- `northflank.services.get_service_instance_health` Get service instance health read
- `northflank.services.get_service_logs` Get service logs read
- `northflank.services.get_service_metrics` Get service metrics read
- `northflank.services.get_service_per_replica_volumes` Get service per-replica volumes read
- `northflank.services.get_service_ports` Get service ports read
- `northflank.services.get_service_pull_requests` Get service pull requests read
- `northflank.services.get_service_runtime_environment` Get service runtime environment read
- `northflank.services.get_service_runtime_environment_details` Get service runtime environment details read
- `northflank.services.list_service_builds` List service builds read
- `northflank.services.list_service_containers` List service containers read
- `northflank.services.list_service_deployments` List service deployments read
- `northflank.services.list_services` List services read
- `northflank.services.patch_build_service` Patch build service write
- `northflank.services.patch_combined_service` Patch combined service write
- `northflank.services.patch_deployment_service` Patch deployment service write
- `northflank.services.pause_service` Pause service destructive
- `northflank.services.put_build_service` Put build service write
- `northflank.services.put_combined_service` Put combined service write
- `northflank.services.put_deployment_service` Put deployment service write
- `northflank.services.restart_service` Restart service write
- `northflank.services.resume_service` Resume service write
- `northflank.services.scale_service` Scale service write
- `northflank.services.start_service_build` Start service build write
- `northflank.services.update_service_build_options` Update service build options write
- `northflank.services.update_service_build_source` Update service build source write
- `northflank.services.update_service_deployment` Update service deployment write
- `northflank.services.update_service_health_checks` Update service health checks write
- `northflank.services.update_service_ports` Update service ports write

**Jobs 47**

- `northflank.jobs.abort_job_build` Abort job build destructive
- `northflank.jobs.abort_job_run` Abort job run destructive
- `northflank.jobs.check_repository_access_for_jobs` Check repository access for jobs read
- `northflank.jobs.create_cron_job` Create cron job write
- `northflank.jobs.create_job` Create job write
- `northflank.jobs.create_manual_job` Create manual job write
- `northflank.jobs.delete_job` Delete job destructive
- `northflank.jobs.edit_job_build_arguments` Edit job build arguments write
- `northflank.jobs.edit_job_runtime_environment` Edit job runtime environment write
- `northflank.jobs.get_job` Get job read
- `northflank.jobs.get_job_branches` Get job branches read
- `northflank.jobs.get_job_build` Get job build read
- `northflank.jobs.get_job_build_argument_details` Get job build argument details read
- `northflank.jobs.get_job_build_arguments` Get job build arguments read
- `northflank.jobs.get_job_build_logs` Get job build logs read
- `northflank.jobs.get_job_build_metrics` Get job build metrics read
- `northflank.jobs.get_job_deployment` Get job deployment read
- `northflank.jobs.get_job_health_checks` Get job health checks read
- `northflank.jobs.get_job_infrastructure_events` Get job infrastructure events read
- `northflank.jobs.get_job_instance_health` Get job instance health read
- `northflank.jobs.get_job_logs` Get job logs read
- `northflank.jobs.get_job_metrics` Get job metrics read
- `northflank.jobs.get_job_pull_requests` Get job pull requests read
- `northflank.jobs.get_job_runs` Get job runs read
- `northflank.jobs.get_job_runtime_environment` Get job runtime environment read
- `northflank.jobs.get_job_runtime_environment_details` Get job runtime environment details read
- `northflank.jobs.get_run_details` Get run details read
- `northflank.jobs.list_job_builds` List job builds read
- `northflank.jobs.list_job_containers` List job containers read
- `northflank.jobs.list_jobs` List jobs read
- `northflank.jobs.patch_cron_job` Patch cron job write
- `northflank.jobs.patch_job` Patch job write
- `northflank.jobs.patch_manual_job` Patch manual job write
- `northflank.jobs.pause_job` Pause job destructive
- `northflank.jobs.put_cron_job` Put cron job write
- `northflank.jobs.put_job` Put job write
- `northflank.jobs.put_manual_job` Put manual job write
- `northflank.jobs.resume_job` Resume job write
- `northflank.jobs.run_job` Run job write
- `northflank.jobs.scale_job` Scale job write
- `northflank.jobs.start_job_build` Start job build write
- `northflank.jobs.suspend_job` Suspend job destructive
- `northflank.jobs.update_job_build_options` Update job build options write
- `northflank.jobs.update_job_build_source` Update job build source write
- `northflank.jobs.update_job_deployment` Update job deployment write
- `northflank.jobs.update_job_health_checks` Update job health checks write
- `northflank.jobs.update_job_settings` Update job settings write

**Integrations 46**

- `northflank.integrations.add_registry` Add registry write
- `northflank.integrations.add_ssh_identity` Add SSH identity write
- `northflank.integrations.check_repository_access` Check repository access read
- `northflank.integrations.create_audit_log_sink` Create audit log sink write
- `northflank.integrations.create_log_sink` Create log sink write
- `northflank.integrations.create_notification_integration` Create notification integration write
- `northflank.integrations.create_or_update_ssh_identity` Create or update SSH identity write
- `northflank.integrations.create_vcs_link_session` Create VCS link session write
- `northflank.integrations.create_workload_identity` Create workload identity write
- `northflank.integrations.delete_audit_log_sink` Delete audit log sink destructive
- `northflank.integrations.delete_log_sink` Delete log sink destructive
- `northflank.integrations.delete_notification_integration` Delete notification integration destructive
- `northflank.integrations.delete_registry` Delete registry destructive
- `northflank.integrations.delete_ssh_identity` Delete SSH identity destructive
- `northflank.integrations.delete_workload_identity` Delete workload identity destructive
- `northflank.integrations.generate_vcs_token` Generate VCS token write
- `northflank.integrations.get_audit_log_sink_details` Get audit log sink details read
- `northflank.integrations.get_log_sink_details` Get log sink details read
- `northflank.integrations.get_notification_integration` Get notification integration read
- `northflank.integrations.get_registry` Get registry read
- `northflank.integrations.get_ssh_identity` Get SSH identity read
- `northflank.integrations.get_vcs_link_session` Get VCS link session read
- `northflank.integrations.get_workload_identity` Get workload identity read
- `northflank.integrations.get_workload_identity_provider_status` Get workload identity provider status read
- `northflank.integrations.install_workload_identity` Install workload identity write
- `northflank.integrations.install_workload_identity_provider` Install workload identity provider write
- `northflank.integrations.list_audit_log_sinks` List audit log sinks read
- `northflank.integrations.list_branches` List branches read
- `northflank.integrations.list_log_sinks` List log sinks read
- `northflank.integrations.list_notification_integrations` List notification integrations read
- `northflank.integrations.list_registries` List registries read
- `northflank.integrations.list_repositories` List repositories read
- `northflank.integrations.list_ssh_identities` List SSH identities read
- `northflank.integrations.list_vcs_providers` List VCS providers read
- `northflank.integrations.list_workload_identities` List workload identities read
- `northflank.integrations.patch_audit_log_sink` Patch audit log sink write
- `northflank.integrations.pause_audit_log_sink` Pause audit log sink destructive
- `northflank.integrations.pause_log_sink` Pause log sink destructive
- `northflank.integrations.put_audit_log_sink` Put audit log sink write
- `northflank.integrations.resume_audit_log_sink` Resume audit log sink write
- `northflank.integrations.resume_log_sink` Resume log sink write
- `northflank.integrations.update_log_sink` Update log sink write
- `northflank.integrations.update_notification_integration` Update notification integration write
- `northflank.integrations.update_registry` Update registry write
- `northflank.integrations.update_ssh_identity` Update SSH identity write
- `northflank.integrations.update_workload_identity` Update workload identity write

**Addons 42**

- `northflank.addons.abort_backup` Abort backup destructive
- `northflank.addons.abort_backup_restore` Abort backup restore destructive
- `northflank.addons.backup_addon` Backup addon write
- `northflank.addons.create_addon` Create addon write
- `northflank.addons.create_addon_backup_schedule` Create addon backup schedule write
- `northflank.addons.delete_addon` Delete addon destructive
- `northflank.addons.delete_addon_backup` Delete addon backup destructive
- `northflank.addons.delete_addon_backup_schedule` Delete addon backup schedule destructive
- `northflank.addons.finalise_addon_secret_rotation` Finalise addon secret rotation write
- `northflank.addons.get_addon` Get addon read
- `northflank.addons.get_addon_backup` Get addon backup read
- `northflank.addons.get_addon_backup_logs` Get addon backup logs read
- `northflank.addons.get_addon_backup_schedules` Get addon backup schedules read
- `northflank.addons.get_addon_credentials` Get addon credentials read
- `northflank.addons.get_addon_infrastructure_events` Get addon infrastructure events read
- `northflank.addons.get_addon_instance_health` Get addon instance health read
- `northflank.addons.get_addon_logs` Get addon logs read
- `northflank.addons.get_addon_metrics` Get addon metrics read
- `northflank.addons.get_addon_restore_logs` Get addon restore logs read
- `northflank.addons.get_addon_version_details` Get addon version details read
- `northflank.addons.get_backup_download_link` Get backup download link read
- `northflank.addons.get_logs_for_a_resource` Get logs for a resource read
- `northflank.addons.import_addon_backup` Import addon backup write
- `northflank.addons.list_addon_backup_restores` List addon backup restores read
- `northflank.addons.list_addon_backups` List addon backups read
- `northflank.addons.list_addon_containers` List addon containers read
- `northflank.addons.list_addon_restores` List addon restores read
- `northflank.addons.list_addon_types` List addon types read
- `northflank.addons.list_addons` List addons read
- `northflank.addons.patch_addon` Patch addon write
- `northflank.addons.pause_addon` Pause addon destructive
- `northflank.addons.put_addon` Put addon write
- `northflank.addons.reset_addon` Reset addon destructive
- `northflank.addons.restart_addon` Restart addon write
- `northflank.addons.restore_addon_backup` Restore addon backup destructive
- `northflank.addons.resume_addon` Resume addon write
- `northflank.addons.retain_backup` Retain backup write
- `northflank.addons.rotate_addon_secrets` Rotate addon secrets destructive
- `northflank.addons.scale_addon_resources` Scale addon resources write
- `northflank.addons.update_addon_network_settings` Update addon network settings write
- `northflank.addons.update_addon_security_rules` Update addon security rules write
- `northflank.addons.upgrade_addon_version` Upgrade addon version write

**Domains 27**

- `northflank.domains.add_subdomain` Add subdomain write
- `northflank.domains.add_subdomain_path` Add subdomain path write
- `northflank.domains.assign_service_to_subdomain` Assign service to subdomain write
- `northflank.domains.assign_subdomain_path` Assign subdomain path write
- `northflank.domains.create_new_domain` Create new domain write
- `northflank.domains.delete_domain` Delete domain destructive
- `northflank.domains.delete_subdomain` Delete subdomain destructive
- `northflank.domains.delete_subdomain_path` Delete subdomain path destructive
- `northflank.domains.enable_cdn_on_a_subdomain` Enable CDN on a subdomain write
- `northflank.domains.get_domain` Get domain read
- `northflank.domains.get_domain_certificate` Get domain certificate read
- `northflank.domains.get_subdomain` Get subdomain read
- `northflank.domains.get_subdomain_path` Get subdomain path read
- `northflank.domains.import_domain_certificate` Import domain certificate write
- `northflank.domains.import_subdomain_certificate` Import subdomain certificate write
- `northflank.domains.list_domains` List domains read
- `northflank.domains.list_subdomain_paths` List subdomain paths read
- `northflank.domains.purge_cdn_cache_for_a_subdomain` Purge CDN cache for a subdomain destructive
- `northflank.domains.put_subdomain` Put subdomain write
- `northflank.domains.remove_cdn_from_a_subdomain` Remove CDN from a subdomain destructive
- `northflank.domains.unassign_subdomain` Unassign subdomain destructive
- `northflank.domains.unassign_subdomain_path` Unassign subdomain path destructive
- `northflank.domains.update_domain` Update domain write
- `northflank.domains.update_geo_routing_configuration` Update geo routing configuration write
- `northflank.domains.update_subdomain_path` Update subdomain path write
- `northflank.domains.verify_domain` Verify domain write
- `northflank.domains.verify_subdomain` Verify subdomain write

**Cloud providers 20**

- `northflank.cloud_providers.cordon_cluster_node` Cordon cluster node destructive
- `northflank.cloud_providers.create_cluster` Create cluster write
- `northflank.cloud_providers.create_integration` Create integration write
- `northflank.cloud_providers.delete_cluster` Delete cluster destructive
- `northflank.cloud_providers.delete_integration` Delete integration destructive
- `northflank.cloud_providers.drain_cluster_node` Drain cluster node destructive
- `northflank.cloud_providers.get_cluster` Get cluster read
- `northflank.cloud_providers.get_integration` Get integration read
- `northflank.cloud_providers.list_cluster_nodes` List cluster nodes read
- `northflank.cloud_providers.list_clusters` List clusters read
- `northflank.cloud_providers.list_integrations` List integrations read
- `northflank.cloud_providers.list_provider_node_types` List provider node types read
- `northflank.cloud_providers.list_provider_permissions` List provider permissions read
- `northflank.cloud_providers.list_provider_regions` List provider regions read
- `northflank.cloud_providers.list_providers` List providers read
- `northflank.cloud_providers.patch_cluster` Patch cluster write
- `northflank.cloud_providers.patch_integration` Patch integration write
- `northflank.cloud_providers.put_cluster` Put cluster write
- `northflank.cloud_providers.put_integration` Put integration write
- `northflank.cloud_providers.uncordon_cluster_node` Uncordon cluster node write

**Secrets 18**

- `northflank.secrets.create_global_secret` Create global secret write
- `northflank.secrets.create_project_secret` Create project secret write
- `northflank.secrets.delete_global_secret` Delete global secret destructive
- `northflank.secrets.delete_project_secret` Delete project secret destructive
- `northflank.secrets.get_global_secret` Get global secret read
- `northflank.secrets.get_project_secret` Get project secret read
- `northflank.secrets.get_project_secret_addon_link_details` Get project secret addon link details read
- `northflank.secrets.get_project_secret_details` Get project secret details read
- `northflank.secrets.list_global_secrets` List global secrets read
- `northflank.secrets.list_project_secrets` List project secrets read
- `northflank.secrets.patch_global_secret` Patch global secret write
- `northflank.secrets.patch_project_secret` Patch project secret write
- `northflank.secrets.put_global_secret` Put global secret write
- `northflank.secrets.put_project_secret` Put project secret write
- `northflank.secrets.trigger_global_secret_dependents` Trigger global secret dependents write
- `northflank.secrets.unlink_addon_from_project_secret` Unlink addon from project secret destructive
- `northflank.secrets.update_project_secret` Update project secret write
- `northflank.secrets.update_project_secret_addon_link` Update project secret addon link write

**Pipelines 15**

- `northflank.pipelines.abort_release_flow_run` Abort release flow run destructive
- `northflank.pipelines.delete_preview_environment` Delete preview environment destructive
- `northflank.pipelines.get_pipeline` Get pipeline read
- `northflank.pipelines.get_preview_template` Get preview template read
- `northflank.pipelines.get_preview_template_run` Get preview template run read
- `northflank.pipelines.get_release_flow` Get release flow read
- `northflank.pipelines.get_release_flow_run_details` Get release flow run details read
- `northflank.pipelines.list_pipelines` List pipelines read
- `northflank.pipelines.list_preview_environments` List preview environments read
- `northflank.pipelines.list_preview_template_runs` List preview template runs read
- `northflank.pipelines.list_release_flow_runs` List release flow runs read
- `northflank.pipelines.run_preview_environment` Run preview environment destructive
- `northflank.pipelines.run_release_flow` Run release flow destructive
- `northflank.pipelines.update_preview_template` Update preview template write
- `northflank.pipelines.update_release_flow` Update release flow write

**Preview blueprints 14**

- `northflank.preview_blueprints.abort_preview_blueprint_run` Abort preview blueprint run destructive
- `northflank.preview_blueprints.create_preview_blueprint` Create preview blueprint write
- `northflank.preview_blueprints.delete_preview_blueprint` Delete preview blueprint destructive
- `northflank.preview_blueprints.delete_preview_environment` Delete preview environment destructive
- `northflank.preview_blueprints.get_preview_blueprint` Get preview blueprint read
- `northflank.preview_blueprints.get_preview_blueprint_run_details` Get preview blueprint run details read
- `northflank.preview_blueprints.list_preview_blueprint_runs` List preview blueprint runs read
- `northflank.preview_blueprints.list_preview_blueprints` List preview blueprints read
- `northflank.preview_blueprints.list_preview_environments` List preview environments read
- `northflank.preview_blueprints.pause_preview_environment` Pause preview environment destructive
- `northflank.preview_blueprints.reset_preview_environment_expiry` Reset preview environment expiry write
- `northflank.preview_blueprints.resume_preview_environment` Resume preview environment write
- `northflank.preview_blueprints.run_preview_blueprint` Run preview blueprint write
- `northflank.preview_blueprints.update_preview_blueprint` Update preview blueprint write

**Volumes 14**

- `northflank.volumes.attach_volume` Attach volume write
- `northflank.volumes.backup_volume` Backup volume write
- `northflank.volumes.create_volume` Create volume write
- `northflank.volumes.create_volume_backup_schedule` Create volume backup schedule write
- `northflank.volumes.delete_volume` Delete volume destructive
- `northflank.volumes.delete_volume_backup` Delete volume backup destructive
- `northflank.volumes.delete_volume_backup_schedule` Delete volume backup schedule destructive
- `northflank.volumes.detach_volume` Detach volume destructive
- `northflank.volumes.get_volume` Get volume read
- `northflank.volumes.get_volume_backup_details` Get volume backup details read
- `northflank.volumes.get_volume_backup_schedules` Get volume backup schedules read
- `northflank.volumes.get_volume_backups` Get volume backups read
- `northflank.volumes.list_volumes` List volumes read
- `northflank.volumes.update_volume` Update volume write

**Org roles 11**

- `northflank.org_roles.add_member_to_org_role` Add member to org role destructive
- `northflank.org_roles.create_or_update_org_role` Create or update org role write
- `northflank.org_roles.create_org_role` Create org role write
- `northflank.org_roles.delete_org_role` Delete org role destructive
- `northflank.org_roles.get_org_role` Get org role read
- `northflank.org_roles.list_directory_group_members` List directory group members read
- `northflank.org_roles.list_org_directory_groups` List org directory groups read
- `northflank.org_roles.list_org_role_members` List org role members read
- `northflank.org_roles.list_org_roles` List org roles read
- `northflank.org_roles.remove_member_from_org_role` Remove member from org role destructive
- `northflank.org_roles.update_org_role` Update org role write

**Encryption configurations 10**

- `northflank.encryption_configurations.activate_encryption_configuration` Activate encryption configuration write
- `northflank.encryption_configurations.create_encryption_configuration` Create encryption configuration write
- `northflank.encryption_configurations.deactivate_encryption_configuration` Deactivate encryption configuration destructive
- `northflank.encryption_configurations.enable_northflank_managed_envelope_encryption` Enable Northflank-managed envelope encryption write
- `northflank.encryption_configurations.get_encryption_configuration` Get encryption configuration read
- `northflank.encryption_configurations.get_encryption_configuration_usage` Get encryption configuration usage read
- `northflank.encryption_configurations.list_encryption_configurations` List encryption configurations read
- `northflank.encryption_configurations.update_encryption_configuration_options` Update encryption configuration options write
- `northflank.encryption_configurations.update_encryption_configuration_settings` Update encryption configuration settings write
- `northflank.encryption_configurations.verify_encryption_configuration` Verify encryption configuration write

**Harnesses 10**

- `northflank.harnesses.create_harness` Create harness write
- `northflank.harnesses.delete_harness` Delete harness destructive
- `northflank.harnesses.get_harness` Get harness read
- `northflank.harnesses.get_harness_logs` Get harness logs read
- `northflank.harnesses.list_harnesses` List harnesses read
- `northflank.harnesses.patch_harness` Patch harness write
- `northflank.harnesses.pause_harness` Pause harness destructive
- `northflank.harnesses.put_harness` Put harness write
- `northflank.harnesses.restart_harness` Restart harness write
- `northflank.harnesses.resume_harness` Resume harness write

**Rollout strategies 10**

- `northflank.rollout_strategies.create_gradual_rollout_strategy` Create gradual rollout strategy write
- `northflank.rollout_strategies.create_or_update_gradual_rollout_strategy` Create or update gradual rollout strategy write
- `northflank.rollout_strategies.delete_gradual_rollout_strategy` Delete gradual rollout strategy destructive
- `northflank.rollout_strategies.get_gradual_rollout_strategy` Get gradual rollout strategy read
- `northflank.rollout_strategies.get_service_rollout` Get service rollout read
- `northflank.rollout_strategies.list_gradual_rollout_strategies` List gradual rollout strategies read
- `northflank.rollout_strategies.promote_service_rollout` Promote service rollout write
- `northflank.rollout_strategies.roll_back_service_rollout` Roll back service rollout destructive
- `northflank.rollout_strategies.update_gradual_rollout_strategy` Update gradual rollout strategy write
- `northflank.rollout_strategies.update_service_rollout_configuration` Update service rollout configuration write

**Templates 10**

- `northflank.templates.abort_template_run` Abort template run destructive
- `northflank.templates.create_template` Create template write
- `northflank.templates.delete_template` Delete template destructive
- `northflank.templates.get_template` Get template read
- `northflank.templates.get_template_run` Get template run read
- `northflank.templates.import_open_tofu_state` Import OpenTofu state write
- `northflank.templates.list_template_runs` List template runs read
- `northflank.templates.list_templates` List templates read
- `northflank.templates.run_template` Run template write
- `northflank.templates.update_template` Update template write

**Team roles 9**

- `northflank.team_roles.add_member_to_team_role` Add member to team role destructive
- `northflank.team_roles.create_or_update_role` Create or update role write
- `northflank.team_roles.create_team_role` Create team role write
- `northflank.team_roles.delete_team_role` Delete team role destructive
- `northflank.team_roles.get_team_role` Get team role read
- `northflank.team_roles.list_team_role_members` List team role members read
- `northflank.team_roles.list_team_roles` List team roles read
- `northflank.team_roles.remove_member_from_team_role` Remove member from team role destructive
- `northflank.team_roles.update_team_role` Update team role write

**Workflows 8**

- `northflank.workflows.abort_workflow_run` Abort workflow run destructive
- `northflank.workflows.create_workflow` Create workflow write
- `northflank.workflows.get_workflow` Get workflow read
- `northflank.workflows.get_workflow_run_details` Get workflow run details read
- `northflank.workflows.list_workflow_runs` List workflow runs read
- `northflank.workflows.list_workflows` List workflows read
- `northflank.workflows.run_workflow` Run workflow destructive
- `northflank.workflows.update_workflow` Update workflow write

**Projects 7**

- `northflank.projects.create_or_update_project` Create or update project write
- `northflank.projects.create_project` Create project write
- `northflank.projects.delete_project` Delete project destructive
- `northflank.projects.get_project` Get project read
- `northflank.projects.initialize_project` Initialize project write
- `northflank.projects.list_projects` List projects read
- `northflank.projects.update_project` Update project write

**Backup destinations 6**

- `northflank.backup_destinations.add_backup_destination` Add backup destination write
- `northflank.backup_destinations.delete_backup_destination` Delete backup destination destructive
- `northflank.backup_destinations.get_backup_destination` Get backup destination read
- `northflank.backup_destinations.list_backup_destinations` List backup destinations read
- `northflank.backup_destinations.list_destinations_backups` List destinations backups read
- `northflank.backup_destinations.patch_backup_destination` Patch backup destination write

**Egress i PS 6**

- `northflank.egress_i_ps.create_egress_ip` Create egress IP write
- `northflank.egress_i_ps.delete_egress_ip` Delete egress IP destructive
- `northflank.egress_i_ps.get_egress_ip` Get egress IP read
- `northflank.egress_i_ps.list_egress_i_ps` List egress IPs read
- `northflank.egress_i_ps.patch_egress_ip` Patch egress IP write
- `northflank.egress_i_ps.put_egress_ip` Put egress IP write

**Load balancers 6**

- `northflank.load_balancers.create_load_balancer` Create load balancer write
- `northflank.load_balancers.delete_load_balancer` Delete load balancer destructive
- `northflank.load_balancers.get_load_balancer` Get load balancer read
- `northflank.load_balancers.list_load_balancers` List load balancers read
- `northflank.load_balancers.patch_load_balancer` Patch load balancer write
- `northflank.load_balancers.put_load_balancer` Put load balancer write

**Tags 6**

- `northflank.tags.add_tag` Add tag write
- `northflank.tags.delete_tag` Delete tag destructive
- `northflank.tags.get_tag` Get tag read
- `northflank.tags.list_tags` List tags read
- `northflank.tags.put_tag` Put tag write
- `northflank.tags.update_tag` Update tag write

**AI models 5**

- `northflank.ai_models.create_ai_model` Create AI model write
- `northflank.ai_models.delete_ai_model` Delete AI model destructive
- `northflank.ai_models.get_ai_model` Get AI model read
- `northflank.ai_models.list_ai_models` List AI models read
- `northflank.ai_models.update_ai_model` Update AI model write

**Billing 5**

- `northflank.billing.get_credit_balance` Get credit balance read
- `northflank.billing.get_invoice` Get invoice read
- `northflank.billing.get_usage` Get usage read
- `northflank.billing.list_invoices` List invoices read
- `northflank.billing.list_usage` List usage read

**External addons 5**

- `northflank.external_addons.create_external_addon` Create external addon write
- `northflank.external_addons.delete_external_addon` Delete external addon destructive
- `northflank.external_addons.get_external_addon` Get external addon read
- `northflank.external_addons.list_external_addons` List external addons read
- `northflank.external_addons.update_external_addon` Update external addon write

**Teams 5**

- `northflank.teams.create_team` Create team write
- `northflank.teams.delete_team` Delete team destructive
- `northflank.teams.get_team` Get team read
- `northflank.teams.list_teams` List teams read
- `northflank.teams.update_team` Update team write

**Miscellaneous 4**

- `northflank.miscellaneous.get_dns_id` Get DNS ID read
- `northflank.miscellaneous.health_check` Health check read
- `northflank.miscellaneous.list_plans` List plans read
- `northflank.miscellaneous.list_regions` List regions read

**Network policies 4**

- `northflank.network_policies.create_network_policy` Create network policy write
- `northflank.network_policies.delete_network_policy` Delete network policy destructive
- `northflank.network_policies.get_network_policy` Get network policy read
- `northflank.network_policies.update_network_policy` Update network policy write

**API tokens 3**

- `northflank.api_tokens.delete_a_key_from_an_api_token` Delete a key from an API token destructive
- `northflank.api_tokens.list_api_tokens` List API tokens read
- `northflank.api_tokens.rotate_a_key_on_an_api_token` Rotate a key on an API token destructive

**Container scans 3**

- `northflank.container_scans.get_container_scan` Get container scan read
- `northflank.container_scans.get_container_scan_logs` Get container scan logs read
- `northflank.container_scans.list_container_scans` List container scans read

**Container snapshots 3**

- `northflank.container_snapshots.delete_container_snapshot` Delete container snapshot destructive
- `northflank.container_snapshots.get_container_snapshot` Get container snapshot read
- `northflank.container_snapshots.list_container_snapshots` List container snapshots read

**Team members 3**

- `northflank.team_members.invite_team_member` Invite team member write
- `northflank.team_members.list_team_members` List team members read
- `northflank.team_members.remove_team_member` Remove team member destructive

**Auth 1**

- `northflank.auth.get_current_authentication_info` Get current authentication info read

**Opentofu 1**

- `northflank.opentofu.get_open_tofu_job_logs` Get OpenTofu job logs read

**Org members 1**

- `northflank.org_members.list_org_members` List org members read

Questions

## The Northflank MCP server, answered.

**Is there a Northflank MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 435 Northflank actions across services, jobs, integrations and addons, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Northflank.

**What do I need to connect Northflank?**

Northflank API token. The free call account { op: "connections.requirements", service: "northflank" } lists exactly what to paste.

**Can an AI agent delete or change things in Northflank?**

Only if its key allows it, and only with an explicit confirmation. 82 Northflank actions are destructive, including delete service, delete job and delete team role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Northflank API limit?**

actionlake paces every call to the limits in the Northflank service file: 1,000 calls an hour per connection. Repeated reads are answered from cache (159 Northflank actions can be), which never reaches Northflank.

**What does a Northflank action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (435 Northflank actions page). Cache hits, searches, dry runs and calls Northflank refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Northflank API does it cover?**

The Northflank REST API v1 (OpenAPI 3.0.1) at api.northflank.com. It is built from Northflank's documentation as read on 23 October 2026. 435 actions in 35 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Northflank data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Northflank credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Northflank

Shares the most action names with

- [Google Cloud Run 6](https://actionlake.com/connectors/google-cloud-run)
- [Veeam Backup & Replication 6](https://actionlake.com/connectors/veeam-backup-and-replication)
- [Veeam Backup for Microsoft 365 6](https://actionlake.com/connectors/veeam-backup-for-microsoft-365)
- [Spacelift 5](https://actionlake.com/connectors/spacelift)
- [Coolify 5](https://actionlake.com/connectors/coolify)
- [Red Hat OpenShift Cluster Manager 4](https://actionlake.com/connectors/red-hat-openshift-cluster-manager)

Joins with, on shared entities

- [Azure Container Apps 2](https://actionlake.com/connectors/azure-container-apps)
- [Google Cloud Document AI 2](https://actionlake.com/connectors/google-cloud-document-ai)
- [Azure AI Document Intelligence 2](https://actionlake.com/connectors/azure-ai-document-intelligence)
- [Google Vertex AI 1](https://actionlake.com/connectors/google-vertex-ai)
- [DigitalOcean 1](https://actionlake.com/connectors/digitalocean)
- [Azure App Service (Web Apps and Functions) 1](https://actionlake.com/connectors/azure-app-service-web-apps-and-functions)

Browse

- [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Northflank; the name is the vendor's own. Counts are from the Northflank service file, version 1.0.0.

## Give your agent Northflank today.

[Connect Northflank free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/northflank
More: https://actionlake.com/llms.txt
