Skip to content

Connectors · Developer & infrastructure

Red Hat OpenShift Cluster Manager MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Red Hat OpenShift Cluster Manager and the rest of your systems. It gives your agent 454 Red Hat OpenShift Cluster Manager actions (255 reads, 132 writes and 67 that wait for a confirmation) and holds the Red Hat OpenShift Cluster Manager credential itself, so the agent never does. It paces Red Hat OpenShift Cluster Manager's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "openshift_cluster_manager.accounts.list",  intent: "check which Red Hat OpenShift Cluster Manager account is connected"}# Returns a list of accounts · read · 1 upstream call
  • 454actionsin one signed file
  • 255readlook, never change
  • 132writecreate and update
  • 67wait for a yesdestructive, confirmed first

Set up

Connect Red Hat OpenShift Cluster Manager in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Red Hat OpenShift Cluster Manager.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idRed Hat service account client ID: console.redhat.com > (gear) Service Accounts > Create service account
    • client_secretThe service account's client secret, shown once when the service account is created
    account { op: "connections.requirements", service: "openshift_cluster_manager" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "openshift_cluster_manager.accounts.list" }# returns a list of accounts · read · 1 upstream callcheck { action: "openshift_cluster_manager.addons.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Red Hat OpenShift Cluster Manager at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Limits we pace to
10 calls a second, per connection
API covered
Red Hat OpenShift Cluster Manager (OCM API: ROSA, OSD, ARO and registered OpenShift clusters, machine and node pools, identity providers, upgrades, add-ons, subscriptions, quota, organizations, accounts, role bindings, service logs) API OCM clusters_mgmt, accounts_mgmt, authorizations, service_logs, addons_mgmt, access_transparency and upgrades_info v1 (OpenAPI 3.0)api.openshift.com
Built from
Red Hat OpenShift Cluster Manager's documentation, read 23 October 2026api.openshift.comapi.openshift.comapi.openshift.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
219 of 255 reads, for up to 5 minutes; a write clears what it affects
Shared entities
4, so ask can line Red Hat OpenShift Cluster Manager up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Red Hat OpenShift Cluster Manager.

454 actions in 7 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 255readlook, never change
  • 132writecreate and update
  • 67destructivewait for a confirmation
  1. Clusters MGMT

    279

    155 read · 84 write · 40 destructive

    Create a new add-on and add it to the collection of add-ons · Retrieves the list of add-ons · Create a new add-on version and add it to the collection of add-ons · Retrieves the list of add-on versions

  2. Accounts MGMT

    141

    75 read · 42 write · 24 destructive

    Returns a list of accounts · Returns a list of roles · Get the authenticated account · Returns a list of organizations

  3. Authorizations

    10

    10 read · 0 write · 0 destructive

    Review an account's access to perform an action on a particular resource or resource type · Review an account's capabilities · Determine whether a user is restricted from downloading Red Hat software based on export control compliance · Review feature to perform an action on it such as toggle a feature on/off

  4. Service logs

    9

    6 read · 1 write · 2 destructive

    Create a new log record · Get all service logs · Get all service logs for a specific cluster · Get all service logs for a cluster specified by cluster_id and/or cluster_uuid

  5. Access transparency

    7

    5 read · 2 write · 0 destructive

    Create a new Access Request · Returns a list of Access Requests · Create a new Decision for a given Access Request · Returns a list of Decisions for a given Access Request

  6. Addons MGMT

    7

    3 read · 3 write · 1 destructive

    Create a new addon and add it to the collection of addons · Get all addons · Create a new addon version and add it to the collection of addon versions · Get all addon versions

  7. Upgrades info

    1

    1 read · 0 write · 0 destructive

    Get the update graph

Top actions

The Red Hat OpenShift Cluster Manager API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 7 of Red Hat OpenShift Cluster Manager's 7 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
openshift_cluster_manager.accounts.listReturns a list of accountsReturns a list of accounts.readidentity.user.list474 connectors
openshift_cluster_manager.roles.listReturns a list of rolesReturns a list of roles.readidentity.role.list184 connectors
openshift_cluster_manager.current_account.getGet the authenticated accountGet the authenticated account.readidentity.current_user.get307 connectors
openshift_cluster_manager.organizations.listReturns a list of organizationsReturns a list of organizations.readcrm.company.list162 connectors
openshift_cluster_manager.accounts.getGet an account by idGet an account by id.readidentity.user.get399 connectors
openshift_cluster_manager.roles.getGet a role by idGet a role by id.readidentity.role.get127 connectors
openshift_cluster_manager.organizations.getGet an organization by idGet an organization by id.readcrm.company.get162 connectors
openshift_cluster_manager.skus.listReturns a list of UHC product SKUsReturns a list of UHC product SKUs.readthis connector
openshift_cluster_manager.addons.createCreate a new add-on and add it to the collection of add-onsCreate a new add-on and add it to the collection of add-ons.writethis connector
openshift_cluster_manager.events.createAdds a new event to be tracked. When sending a new event request, it gets tracked in Prometheus, Pendo, CloudWatch, or whichever analytics client is configured as part of clusters service. This allow…Adds a new event to be tracked. When sending a new event request, it gets tracked in Prometheus, Pendo, CloudWatch, or whichever analytics client is…writethis connector
openshift_cluster_manager.quotas.createCreate a new quotaCreate a new quota.writethis connector
openshift_cluster_manager.addons.deleteDeletes the add-onDeletes the add-on.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the Red Hat OpenShift Cluster Manager actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List the companies in Red Hat OpenShift Cluster Manager and flag likely duplicates by name or domain.

    callsopenshift_cluster_manager.organizations.list

  2. Writewrite

    Create a new add-on and add it to the collection of add-ons in Red Hat OpenShift Cluster Manager. Show me exactly what you will send before you save it.

    callsopenshift_cluster_manager.addons.create

  3. Across systemsread

    Which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each?

    callsopenshift_cluster_manager.organizations.listconnectwise_manage.invoices.list

Across your systems

Red Hat OpenShift Cluster Manager, joined to the rest of your business.

One ask fetches from Red Hat OpenShift Cluster Manager and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each?

    openshift_cluster_manager.organizations.list + connectwise_manage.invoices.list, on crm.company · ConnectWise PSA

  • Which Red Hat OpenShift Cluster Manager companies have invoices in NetSuite, and how many each?

    openshift_cluster_manager.organizations.list + netsuite.views.invoices, on crm.company · NetSuite

Also mapped by other connectorsidentity.user 517crm.company 227identity.current_user 142identity.role 107
ask
ask {  intent: "which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each",  steps: [    { action: "openshift_cluster_manager.organizations.list", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "connectwise_manage.invoices.list", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Red Hat OpenShift Cluster Manager

Destructive actions wait for a yes.

67 Red Hat OpenShift Cluster Manager actions are destructive. The first 10:

  • Deletes the add-onopenshift_cluster_manager.addons.delete
  • Delete a quotaopenshift_cluster_manager.quotas.delete
  • Delete an account by idopenshift_cluster_manager.accounts.delete
  • Deletes the clusteropenshift_cluster_manager.clusters.delete
  • Delete a sku ruleopenshift_cluster_manager.sku_rules.delete
  • Delete a skuopenshift_cluster_manager.config_skus.delete
  • Delete the DNS domainopenshift_cluster_manager.dns_domains.delete
  • Deletes the OidcConfigopenshift_cluster_manager.oidc_configs.delete
  • Delete a pull secretopenshift_cluster_manager.pull_secrets.delete
  • Create a new role bindingopenshift_cluster_manager.role_bindings.create

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doopenshift_cluster_manager.addons.deleteconfirm_policy: human

Deletes the add-on?

intent: the user asked me to deletes the add-on

run suspended · waiting for a named person · key openshift-cluster-manager-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "openshift-cluster-manager-agent",  allowed_actions: ["openshift_cluster_manager.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "openshift_cluster_manager.addons.delete", approver: "[email protected]" },    { match: "openshift_cluster_manager.quotas.delete", approver: "[email protected]" },    { match: "openshift_cluster_manager.accounts.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Red Hat OpenShift Cluster Manager only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Red Hat OpenShift Cluster Manager costs on actionlake.

Every Red Hat OpenShift Cluster Manager action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Red Hat OpenShift Cluster Manager refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 454 Red Hat OpenShift Cluster Manager actions
  • 454actions pageeach page of a long list is one call
  • 219reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Red Hat OpenShift Cluster Manager action.

454 actions by area: the id your agent calls, what it does, and its effect.

Clusters MGMT279
  • openshift_cluster_manager.addons.createCreate a new add-on and add it to the collection of add-onswrite
  • openshift_cluster_manager.addons.listRetrieves the list of add-onsread
  • openshift_cluster_manager.addons_versions.createCreate a new add-on version and add it to the collection of add-onswrite
  • openshift_cluster_manager.addons_versions.listRetrieves the list of add-on versionsread
  • openshift_cluster_manager.addons.deleteDeletes the add-ondestructive
  • openshift_cluster_manager.addons.getRetrieves the details of the add-onread
  • and 273 more in this area
Accounts MGMT141
  • openshift_cluster_manager.accounts.listReturns a list of accountsread
  • openshift_cluster_manager.current_account.getGet the authenticated accountread
  • openshift_cluster_manager.organizations.listReturns a list of organizationsread
  • openshift_cluster_manager.roles.listReturns a list of rolesread
  • openshift_cluster_manager.access_token.createReturn access token generated from registries in docker formatwrite
  • openshift_cluster_manager.accounts.createCreate a new accountwrite
  • and 135 more in this area
Authorizations10
  • openshift_cluster_manager.authorizations.access_reviewReview an account's access to perform an action on a particular resource or resource typeread
  • openshift_cluster_manager.authorizations.capability_reviewReview an account's capabilitiesread
  • openshift_cluster_manager.authorizations.export_control_reviewDetermine whether a user is restricted from downloading Red Hat software based on export control complianceread
  • openshift_cluster_manager.authorizations.feature_reviewReview feature to perform an action on it such as toggle a feature on/offread
  • openshift_cluster_manager.authorizations.resource_reviewObtain resource ids for resources an account may perform the specified action upon. Resource ids returned as ["*"] is shorthand for all idsread
  • openshift_cluster_manager.authorizations.self_access_reviewReview your ability to perform an action on a particular resource or resource typeread
  • and 4 more in this area
Service logs9
  • openshift_cluster_manager.service_logs_cluster_logs.createCreate a new log recordwrite
  • openshift_cluster_manager.service_logs_cluster_logs.listGet all service logsread
  • openshift_cluster_manager.service_logs_cluster_logs.list_by_clusterGet all service logs for a specific clusterread
  • openshift_cluster_manager.service_logs_cluster_logs.list_for_clustersGet all service logs for a cluster specified by cluster_id and/or cluster_uuidread
  • openshift_cluster_manager.service_logs_cluster_logs.deleteDelete log record by record iddestructive
  • openshift_cluster_manager.service_logs_cluster_logs.getGet log by record idread
  • and 3 more in this area
Access transparency7
  • openshift_cluster_manager.access_transparency_access_requests.createCreate a new Access Requestwrite
  • openshift_cluster_manager.access_transparency_access_requests.listReturns a list of Access Requestsread
  • openshift_cluster_manager.access_transparency_access_requests_decisions.createCreate a new Decision for a given Access Requestwrite
  • openshift_cluster_manager.access_transparency_access_requests_decisions.listReturns a list of Decisions for a given Access Requestread
  • openshift_cluster_manager.access_transparency_access_protection.getReturns the status of Access Protection determined by the Organization id, Subscription id or Cluster idread
  • openshift_cluster_manager.access_transparency_access_requests.getGet an Access Request by idread
  • and 1 more in this area
Addons MGMT7
  • openshift_cluster_manager.addons_mgmt_addons.createCreate a new addon and add it to the collection of addonswrite
  • openshift_cluster_manager.addons_mgmt_addons.listGet all addonsread
  • openshift_cluster_manager.addons_mgmt_addons_versions.createCreate a new addon version and add it to the collection of addon versionswrite
  • openshift_cluster_manager.addons_mgmt_addons_versions.listGet all addon versionsread
  • openshift_cluster_manager.addons_mgmt_addons.deleteDelete the addondestructive
  • openshift_cluster_manager.addons_mgmt_addons.getGet the addonread
  • and 1 more in this area
Upgrades info1
  • openshift_cluster_manager.upgrades_info_graph.getGet the update graphread

This index shows a sample of each area. All 454 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Red Hat OpenShift Cluster Manager MCP server, answered.

Is there a Red Hat OpenShift Cluster Manager MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 454 Red Hat OpenShift Cluster Manager actions across clusters MGMT, accounts MGMT, authorizations and service logs, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Red Hat OpenShift Cluster Manager.

What do I need to connect Red Hat OpenShift Cluster Manager?

Red Hat service account client ID: console.redhat.com > (gear) Service Accounts > Create service account and The service account's client secret, shown once when the service account is created. The free call account { op: "connections.requirements", service: "openshift_cluster_manager" } lists exactly what to paste.

Can an AI agent delete or change things in Red Hat OpenShift Cluster Manager?

Only if its key allows it, and only with an explicit confirmation. 67 Red Hat OpenShift Cluster Manager actions are destructive, including deletes the add-on, delete a quota and delete an account by id. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Red Hat OpenShift Cluster Manager API limit?

actionlake paces every call to the limits in the Red Hat OpenShift Cluster Manager service file: 10 calls a second per connection. Repeated reads are answered from cache (219 Red Hat OpenShift Cluster Manager actions can be), which never reaches Red Hat OpenShift Cluster Manager.

What does a Red Hat OpenShift Cluster Manager action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (454 Red Hat OpenShift Cluster Manager actions page). Cache hits, searches, dry runs and calls Red Hat OpenShift Cluster Manager refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Red Hat OpenShift Cluster Manager API does it cover?

The Red Hat OpenShift Cluster Manager (OCM API: ROSA, OSD, ARO and registered OpenShift clusters, machine and node pools, identity providers, upgrades, add-ons, subscriptions, quota, organizations, accounts, role bindings, service logs) API OCM clusters_mgmt, accounts_mgmt, authorizations, service_logs, addons_mgmt, access_transparency and upgrades_info v1 (OpenAPI 3.0) at api.openshift.com. It is built from Red Hat OpenShift Cluster Manager's documentation as read on 23 October 2026. 454 actions in 7 areas, each one in the signed service file (version 1.0.0).

Can I combine Red Hat OpenShift Cluster Manager with my other systems?

Yes. ask joins Red Hat OpenShift Cluster Manager to ConnectWise PSA or NetSuite on the same customer and returns the answer rather than every row. Red Hat OpenShift Cluster Manager maps crm.company, which 227 other connectors also map.

Does actionlake keep my Red Hat OpenShift Cluster Manager data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Red Hat OpenShift Cluster Manager credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Red Hat OpenShift Cluster Manager today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.