--- title: "Red Hat OpenShift Cluster Manager MCP server - actionlake" description: "Give Claude 454 Red Hat OpenShift Cluster Manager actions through one MCP server. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/red-hat-openshift-cluster-manager updated: 2026-10-23 --- Connectors · Developer & infrastructure # Red Hat OpenShift Cluster Manager MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Red Hat OpenShift Cluster Manager and the rest of your systems. It gives your agent 454 Red Hat OpenShift Cluster Manager actions (255 reads, 132 writes and 67 that wait for a confirmation) and holds the Red Hat OpenShift Cluster Manager credential itself, so the agent never does. It paces Red Hat OpenShift Cluster Manager's limits and records every call. [Connect Red Hat OpenShift Cluster Manager free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "openshift_cluster_manager.accounts.list", intent: "check which Red Hat OpenShift Cluster Manager account is connected" } # Returns a list of accounts · read · 1 upstream call ``` - 454 actions in one signed file - 255 read look, never change - 132 write create and update - 67 wait for a yes destructive, confirmed first Set up ## Connect Red Hat OpenShift Cluster Manager in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Red Hat OpenShift Cluster Manager. OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Red Hat service account client ID: console.redhat.com > (gear) Service Accounts > Create service account - `client_secret` The service account's client secret, shown once when the service account is created ``` account { op: "connections.requirements", service: "openshift_cluster_manager" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "openshift_cluster_manager.accounts.list" } # returns a list of accounts · read · 1 upstream call check { action: "openshift_cluster_manager.addons.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Red Hat OpenShift Cluster Manager at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Limits we pace to** 10 calls a second, per connection **API covered** Red Hat OpenShift Cluster Manager (OCM API: ROSA, OSD, ARO and registered OpenShift clusters, machine and node pools, identity providers, upgrades, add-ons, subscriptions, quota, organizations, accounts, role bindings, service logs) API OCM clusters_mgmt, accounts_mgmt, authorizations, service_logs, addons_mgmt, access_transparency and upgrades_info v1 (OpenAPI 3.0)`api.openshift.com` **Built from** Red Hat OpenShift Cluster Manager's documentation, read 23 October 2026[api.openshift.com](https://api.openshift.com/api/clusters_mgmt/v1/openapi) [api.openshift.com](https://api.openshift.com/api/accounts_mgmt/v1/openapi) [api.openshift.com](https://api.openshift.com/api/authorizations/v1/openapi) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 219 of 255 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 4, so ask can line Red Hat OpenShift Cluster Manager up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Red Hat OpenShift Cluster Manager. 454 actions in 7 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **255** read look, never change - **132** write create and update - **67** destructive wait for a confirmation 1. ### Clusters MGMT 279 155 read · 84 write · 40 destructive Create a new add-on and add it to the collection of add-ons · Retrieves the list of add-ons · Create a new add-on version and add it to the collection of add-ons · Retrieves the list of add-on versions 2. ### Accounts MGMT 141 75 read · 42 write · 24 destructive Returns a list of accounts · Returns a list of roles · Get the authenticated account · Returns a list of organizations 3. ### Authorizations 10 10 read · 0 write · 0 destructive Review an account's access to perform an action on a particular resource or resource type · Review an account's capabilities · Determine whether a user is restricted from downloading Red Hat software based on export control compliance · Review feature to perform an action on it such as toggle a feature on/off 4. ### Service logs 9 6 read · 1 write · 2 destructive Create a new log record · Get all service logs · Get all service logs for a specific cluster · Get all service logs for a cluster specified by cluster_id and/or cluster_uuid 5. ### Access transparency 7 5 read · 2 write · 0 destructive Create a new Access Request · Returns a list of Access Requests · Create a new Decision for a given Access Request · Returns a list of Decisions for a given Access Request 6. ### Addons MGMT 7 3 read · 3 write · 1 destructive Create a new addon and add it to the collection of addons · Get all addons · Create a new addon version and add it to the collection of addon versions · Get all addon versions 7. ### Upgrades info 1 1 read · 0 write · 0 destructive Get the update graph Top actions ## The Red Hat OpenShift Cluster Manager API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 7 of Red Hat OpenShift Cluster Manager's 7 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `openshift_cluster_manager.accounts.list` Returns a list of accounts | Returns a list of accounts. | read | `identity.user.list` 474 connectors | | `openshift_cluster_manager.roles.list` Returns a list of roles | Returns a list of roles. | read | `identity.role.list` 184 connectors | | `openshift_cluster_manager.current_account.get` Get the authenticated account | Get the authenticated account. | read | `identity.current_user.get` 307 connectors | | `openshift_cluster_manager.organizations.list` Returns a list of organizations | Returns a list of organizations. | read | `crm.company.list` 162 connectors | | `openshift_cluster_manager.accounts.get` Get an account by id | Get an account by id. | read | `identity.user.get` 399 connectors | | `openshift_cluster_manager.roles.get` Get a role by id | Get a role by id. | read | `identity.role.get` 127 connectors | | `openshift_cluster_manager.organizations.get` Get an organization by id | Get an organization by id. | read | `crm.company.get` 162 connectors | | `openshift_cluster_manager.skus.list` Returns a list of UHC product SKUs | Returns a list of UHC product SKUs. | read | this connector | | `openshift_cluster_manager.addons.create` Create a new add-on and add it to the collection of add-ons | Create a new add-on and add it to the collection of add-ons. | write | this connector | | `openshift_cluster_manager.events.create` Adds a new event to be tracked. When sending a new event request, it gets tracked in Prometheus, Pendo, CloudWatch, or whichever analytics client is configured as part of clusters service. This allow… | Adds a new event to be tracked. When sending a new event request, it gets tracked in Prometheus, Pendo, CloudWatch, or whichever analytics client is… | write | this connector | | `openshift_cluster_manager.quotas.create` Create a new quota | Create a new quota. | write | this connector | | `openshift_cluster_manager.addons.delete` Deletes the add-on | Deletes the add-on. | destructive | this connector | Try it ## Prompts to paste into Claude. Each one names the Red Hat OpenShift Cluster Manager actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List the companies in Red Hat OpenShift Cluster Manager and flag likely duplicates by name or domain. calls `openshift_cluster_manager.organizations.list` 2. Write write Create a new add-on and add it to the collection of add-ons in Red Hat OpenShift Cluster Manager. Show me exactly what you will send before you save it. calls `openshift_cluster_manager.addons.create` 3. Across systems read Which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each? calls `openshift_cluster_manager.organizations.list` `connectwise_manage.invoices.list` Across your systems ## Red Hat OpenShift Cluster Manager, joined to the rest of your business. One `ask` fetches from Red Hat OpenShift Cluster Manager and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row. - Which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each? `openshift_cluster_manager.organizations.list` + `connectwise_manage.invoices.list`, on `crm.company` · [ConnectWise PSA](https://actionlake.com/connectors/connectwise-psa) - Which Red Hat OpenShift Cluster Manager companies have invoices in NetSuite, and how many each? `openshift_cluster_manager.organizations.list` + `netsuite.views.invoices`, on `crm.company` · [NetSuite](https://actionlake.com/connectors/netsuite) Also mapped by other connectors `identity.user` **517** `crm.company` **227** `identity.current_user` **142** `identity.role` **107** ask ``` ask { intent: "which Red Hat OpenShift Cluster Manager companies have invoices in ConnectWise PSA, and how many each", steps: [ { action: "openshift_cluster_manager.organizations.list", as: "co", input: {}, limit: 100, max_pages: 5 }, { action: "connectwise_manage.invoices.list", as: "inv", input: {}, limit: 100, max_pages: 5 }, { join: { left: "co", right: "inv", on: "crm.company", group_by: "co.name", select: ["co.name", "count(inv.id) as invoices"] } } ] } ``` Example. Run it through check first: it validates the steps and prices them, and it is free. Governance for Red Hat OpenShift Cluster Manager ## Destructive actions wait for a yes. 67 Red Hat OpenShift Cluster Manager actions are destructive. The first 10: - Deletes the add-on `openshift_cluster_manager.addons.delete` - Delete a quota `openshift_cluster_manager.quotas.delete` - Delete an account by id `openshift_cluster_manager.accounts.delete` - Deletes the cluster `openshift_cluster_manager.clusters.delete` - Delete a sku rule `openshift_cluster_manager.sku_rules.delete` - Delete a sku `openshift_cluster_manager.config_skus.delete` - Delete the DNS domain `openshift_cluster_manager.dns_domains.delete` - Deletes the OidcConfig `openshift_cluster_manager.oidc_configs.delete` - Delete a pull secret `openshift_cluster_manager.pull_secrets.delete` - Create a new role binding `openshift_cluster_manager.role_bindings.create` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do openshift_cluster_manager.addons.delete confirm_policy: **human** Deletes the add-on? **intent:** the user asked me to deletes the add-on run suspended · waiting for a named person · key _openshift-cluster-manager-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "openshift-cluster-manager-agent", allowed_actions: ["openshift_cluster_manager.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "openshift_cluster_manager.addons.delete", approver: "lead@example.com" }, { match: "openshift_cluster_manager.quotas.delete", approver: "lead@example.com" }, { match: "openshift_cluster_manager.accounts.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Red Hat OpenShift Cluster Manager only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Red Hat OpenShift Cluster Manager costs on actionlake. Every Red Hat OpenShift Cluster Manager action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Red Hat OpenShift Cluster Manager refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 454 Red Hat OpenShift Cluster Manager actions - 454 actions page each page of a long list is one call - 219 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Red Hat OpenShift Cluster Manager action. 454 actions by area: the id your agent calls, what it does, and its effect. **Clusters MGMT 279** - `openshift_cluster_manager.addons.create` Create a new add-on and add it to the collection of add-ons write - `openshift_cluster_manager.addons.list` Retrieves the list of add-ons read - `openshift_cluster_manager.addons_versions.create` Create a new add-on version and add it to the collection of add-ons write - `openshift_cluster_manager.addons_versions.list` Retrieves the list of add-on versions read - `openshift_cluster_manager.addons.delete` Deletes the add-on destructive - `openshift_cluster_manager.addons.get` Retrieves the details of the add-on read - and 273 more in this area **Accounts MGMT 141** - `openshift_cluster_manager.accounts.list` Returns a list of accounts read - `openshift_cluster_manager.current_account.get` Get the authenticated account read - `openshift_cluster_manager.organizations.list` Returns a list of organizations read - `openshift_cluster_manager.roles.list` Returns a list of roles read - `openshift_cluster_manager.access_token.create` Return access token generated from registries in docker format write - `openshift_cluster_manager.accounts.create` Create a new account write - and 135 more in this area **Authorizations 10** - `openshift_cluster_manager.authorizations.access_review` Review an account's access to perform an action on a particular resource or resource type read - `openshift_cluster_manager.authorizations.capability_review` Review an account's capabilities read - `openshift_cluster_manager.authorizations.export_control_review` Determine whether a user is restricted from downloading Red Hat software based on export control compliance read - `openshift_cluster_manager.authorizations.feature_review` Review feature to perform an action on it such as toggle a feature on/off read - `openshift_cluster_manager.authorizations.resource_review` Obtain resource ids for resources an account may perform the specified action upon. Resource ids returned as ["*"] is shorthand for all ids read - `openshift_cluster_manager.authorizations.self_access_review` Review your ability to perform an action on a particular resource or resource type read - and 4 more in this area **Service logs 9** - `openshift_cluster_manager.service_logs_cluster_logs.create` Create a new log record write - `openshift_cluster_manager.service_logs_cluster_logs.list` Get all service logs read - `openshift_cluster_manager.service_logs_cluster_logs.list_by_cluster` Get all service logs for a specific cluster read - `openshift_cluster_manager.service_logs_cluster_logs.list_for_clusters` Get all service logs for a cluster specified by cluster_id and/or cluster_uuid read - `openshift_cluster_manager.service_logs_cluster_logs.delete` Delete log record by record id destructive - `openshift_cluster_manager.service_logs_cluster_logs.get` Get log by record id read - and 3 more in this area **Access transparency 7** - `openshift_cluster_manager.access_transparency_access_requests.create` Create a new Access Request write - `openshift_cluster_manager.access_transparency_access_requests.list` Returns a list of Access Requests read - `openshift_cluster_manager.access_transparency_access_requests_decisions.create` Create a new Decision for a given Access Request write - `openshift_cluster_manager.access_transparency_access_requests_decisions.list` Returns a list of Decisions for a given Access Request read - `openshift_cluster_manager.access_transparency_access_protection.get` Returns the status of Access Protection determined by the Organization id, Subscription id or Cluster id read - `openshift_cluster_manager.access_transparency_access_requests.get` Get an Access Request by id read - and 1 more in this area **Addons MGMT 7** - `openshift_cluster_manager.addons_mgmt_addons.create` Create a new addon and add it to the collection of addons write - `openshift_cluster_manager.addons_mgmt_addons.list` Get all addons read - `openshift_cluster_manager.addons_mgmt_addons_versions.create` Create a new addon version and add it to the collection of addon versions write - `openshift_cluster_manager.addons_mgmt_addons_versions.list` Get all addon versions read - `openshift_cluster_manager.addons_mgmt_addons.delete` Delete the addon destructive - `openshift_cluster_manager.addons_mgmt_addons.get` Get the addon read - and 1 more in this area **Upgrades info 1** - `openshift_cluster_manager.upgrades_info_graph.get` Get the update graph read This index shows a sample of each area. All 454 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Red Hat OpenShift Cluster Manager MCP server, answered. **Is there a Red Hat OpenShift Cluster Manager MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 454 Red Hat OpenShift Cluster Manager actions across clusters MGMT, accounts MGMT, authorizations and service logs, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Red Hat OpenShift Cluster Manager. **What do I need to connect Red Hat OpenShift Cluster Manager?** Red Hat service account client ID: console.redhat.com > (gear) Service Accounts > Create service account and The service account's client secret, shown once when the service account is created. The free call account { op: "connections.requirements", service: "openshift_cluster_manager" } lists exactly what to paste. **Can an AI agent delete or change things in Red Hat OpenShift Cluster Manager?** Only if its key allows it, and only with an explicit confirmation. 67 Red Hat OpenShift Cluster Manager actions are destructive, including deletes the add-on, delete a quota and delete an account by id. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Red Hat OpenShift Cluster Manager API limit?** actionlake paces every call to the limits in the Red Hat OpenShift Cluster Manager service file: 10 calls a second per connection. Repeated reads are answered from cache (219 Red Hat OpenShift Cluster Manager actions can be), which never reaches Red Hat OpenShift Cluster Manager. **What does a Red Hat OpenShift Cluster Manager action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (454 Red Hat OpenShift Cluster Manager actions page). Cache hits, searches, dry runs and calls Red Hat OpenShift Cluster Manager refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Red Hat OpenShift Cluster Manager API does it cover?** The Red Hat OpenShift Cluster Manager (OCM API: ROSA, OSD, ARO and registered OpenShift clusters, machine and node pools, identity providers, upgrades, add-ons, subscriptions, quota, organizations, accounts, role bindings, service logs) API OCM clusters_mgmt, accounts_mgmt, authorizations, service_logs, addons_mgmt, access_transparency and upgrades_info v1 (OpenAPI 3.0) at api.openshift.com. It is built from Red Hat OpenShift Cluster Manager's documentation as read on 23 October 2026. 454 actions in 7 areas, each one in the signed service file (version 1.0.0). **Can I combine Red Hat OpenShift Cluster Manager with my other systems?** Yes. ask joins Red Hat OpenShift Cluster Manager to ConnectWise PSA or NetSuite on the same customer and returns the answer rather than every row. Red Hat OpenShift Cluster Manager maps crm.company, which 227 other connectors also map. **Does actionlake keep my Red Hat OpenShift Cluster Manager data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Red Hat OpenShift Cluster Manager credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Red Hat OpenShift Cluster Manager Shares the most action names with - [Veeam Backup for Microsoft 365 6](https://actionlake.com/connectors/veeam-backup-for-microsoft-365) - [Spacelift 5](https://actionlake.com/connectors/spacelift) - [Splunk Platform 5](https://actionlake.com/connectors/splunk-platform) - [Veeam Backup & Replication 4](https://actionlake.com/connectors/veeam-backup-and-replication) - [Devin (Cognition) 3](https://actionlake.com/connectors/devin-cognition) - [Unleash 2](https://actionlake.com/connectors/unleash) Joins with, on shared entities - [Harvest 4](https://actionlake.com/connectors/harvest) - [HaloPSA 3](https://actionlake.com/connectors/halopsa) - [Genesys Cloud CX 3](https://actionlake.com/connectors/genesys-cloud-cx) - [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud) - [Commvault Cloud 3](https://actionlake.com/connectors/commvault-cloud) - [Cloudflare 3](https://actionlake.com/connectors/cloudflare) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Red Hat OpenShift Cluster Manager; the name is the vendor's own. Counts are from the Red Hat OpenShift Cluster Manager service file, version 1.0.0. ## Give your agent Red Hat OpenShift Cluster Manager today. [Connect Red Hat OpenShift Cluster Manager free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/red-hat-openshift-cluster-manager More: https://actionlake.com/llms.txt