Skip to content

Connectors · Developer & infrastructure

Scalr MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Scalr and the rest of your systems. It gives your agent 351 Scalr actions (160 reads, 132 writes and 59 that wait for a confirmation) and holds the Scalr credential itself, so the agent never does. It paces Scalr's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "scalr.users.list",  intent: "check which Scalr account is connected"}# List Users · read · 1 upstream call
  • 351actionsin one signed file
  • 160readlook, never change
  • 132writecreate and update
  • 59wait for a yesdestructive, confirmed first

Set up

Connect Scalr in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Scalr.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • access_tokenScalr API token: a personal token (User profile > Personal API tokens) or a service account token (Account > IAM >…
    • hostWhere your Scalr lives: your host
    account { op: "connections.requirements", service: "scalr" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "scalr.users.list" }# list users · read · 1 upstream callcheck { action: "scalr.runs.force", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Scalr at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
access_token
Setup fields
host
Limits we pace to
300 calls a minute, per connection
API covered
Scalr IACP API v3 (OpenAPI 3.0, JSON:API), at your Scalr instance's API base URL, which you enter when connecting
Built from
Scalr's documentation, read 23 October 2026scalr.iodocs.scalr.io
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
153 of 160 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line Scalr up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Scalr.

351 actions in 68 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 160readlook, never change
  • 132writecreate and update
  • 59destructivewait for a confirmation
  1. Workspaces

    29

    8 read · 16 write · 5 destructive

    List Workspaces · List workspace's outputs. · List Provider configuration workspace links · List remote state consumers

  2. Reports

    22

    22 read · 0 write · 0 destructive

    Get Access Token Usage · Get AI Usage · List billing usages. · List drifted workspaces.

  3. Environments

    17

    4 read · 10 write · 3 destructive

    List Environments · List environment's federated environments relationship · List environment's tags · Get an Environment

  4. Agent pools

    12

    4 read · 6 write · 2 destructive

    List Agent Pools · List Agent Pool Access Tokens · List Agent Pool mTLS Certificates · Get an Agent Pool

  5. Provider configurations

    12

    5 read · 5 write · 2 destructive

    List Provider configurations · List Provider configuration parameters for specific provider configurations · List provider configuration's tags · Get provider configuration usage

  6. Service accounts

    12

    4 read · 6 write · 2 destructive

    List Service Accounts · List access tokens of a service account · Get a Service Account · Get an assume service account policy

  7. Accounts

    10

    4 read · 4 write · 2 destructive

    List Accounts · List SSO bypass users of the account · Get an Account · Shows Account Metrics

  8. Policy groups

    10

    3 read · 5 write · 2 destructive

    List Policy Groups · List of policy group check results for pull requests. · Get a Policy Group · Create a Policy Group

60 more areas · 227 actions
  • Slack integrations 9
  • Runs 8
  • Checkov integrations 6
  • Hooks 6
  • Modules 6
  • Access policies 5
  • Access tokens 5
  • Aws event bridge integrations 5
  • Container images 5
  • Datadog integrations 5
  • Docker integrations 5
  • GPG keys 5
  • Hook environment links 5
  • Infracost integrations 5
  • Module namespaces 5
  • Providers 5
  • Roles 5
  • Run schedule rules 5
  • Saml integrations 5
  • SSH keys 5
  • Storage profiles 5
  • Tags 5
  • Teams 5
  • Users 5
  • Var set variables 5
  • Var sets 5
  • Vars 5
  • VCS providers 5
  • Webhook integrations 5
  • Wiz integrations 5
  • Workload identity providers 5
  • Drift detection schedules 4
  • Provider versions 4
  • Agents 3
  • Configuration versions 3
  • Module test provider configuration links 3
  • Module versions 3
  • Plans 3
  • Provider configuration links 3
  • Provider configuration parameters 3
  • Run triggers 3
  • State versions 3
  • Test configurations 3
  • Container image versions 2
  • MCP connections 2
  • Permissions 2
  • Policy checks 2
  • Security rules 2
  • Software versions 2
  • Webhook deliveries 2
  • Account users 1
  • Applies 1
  • Assume service account policies 1
  • Cost estimates 1
  • Event definitions 1
  • Policies 1
  • Policy group checks 1
  • Runs queue 1
  • Usage statistics 1
  • VCS tasks 1

Top actions

The Scalr API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 2 of Scalr's 2 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
scalr.users.listList UsersThis endpoint returns a list of [IAM](https://docs.scalr.io/docs/identity-and-access-management) users.readidentity.user.list474 connectors
scalr.teams.listList TeamsThe endpoint returns a list of [IAM](https://docs.scalr.io/docs/identity-and-access-management) teams.readidentity.group.list262 connectors
scalr.environments.listList EnvironmentsThis endpoint lists account environments.readthis connector
scalr.runs.listList RunsThis endpoint lists runs for a specific workspace.readthis connector
scalr.tags.listList TagsThis endpoint returns a list of tags.readthis connector
scalr.vars.listList VariablesThis endpoint returns a list of variables.readthis connector
scalr.hooks.listList HooksThis endpoint returns a list of hooks by various filters.readthis connector
scalr.roles.listList RolesThis endpoint returns a list of [IAM](https://docs.scalr.io/docs/identity-and-access-management) roles.readthis connector
scalr.runs.forceForce RunCancel all previous runs in pending or waiting for confirmation statuses.writethis connector
scalr.runs.createCreate a RunA run performs terraform plan and apply using a configuration version and the workspace's current variables.writethis connector
scalr.tags.createCreate a TagCreate a new tag in the account.writethis connector
scalr.runs.cancelCancel a RunInterrupt a run that is currently planning or applying.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the Scalr actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Give me a one-line status for every active Scalr project.

    callsscalr.environments.list

  2. Writewrite

    Force Run in Scalr. Show me exactly what you will send before you save it.

    callsscalr.runs.force

Governance for Scalr

Destructive actions wait for a yes.

59 Scalr actions are destructive. The first 10:

  • Cancel a Runscalr.runs.cancel
  • Delete a Tagscalr.tags.delete
  • Delete a Variablescalr.vars.delete
  • Delete Hookscalr.hooks.delete
  • Delete a Rolescalr.roles.delete
  • Discard a Runscalr.runs.discard
  • Delete a Teamscalr.teams.delete
  • Delete a Userscalr.users.delete
  • Delete an Agentscalr.agents.delete
  • Unpublish a Modulescalr.modules.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

doscalr.runs.cancelconfirm_policy: human

Cancel a Run?

intent: the user asked me to cancel a Run

run suspended · waiting for a named person · key scalr-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "scalr-agent",  allowed_actions: ["scalr.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "scalr.runs.cancel", approver: "[email protected]" },    { match: "scalr.tags.delete", approver: "[email protected]" },    { match: "scalr.vars.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Scalr only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Scalr costs on actionlake.

Every Scalr action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Scalr refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 351 Scalr actions
  • 351actions pageeach page of a long list is one call
  • 153reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Scalr action.

351 actions by area: the id your agent calls, what it does, and its effect.

Workspaces29
  • scalr.workspaces.add_remote_state_consumersAdd remote state consumerswrite
  • scalr.workspaces.add_tagsAdd tags to the workspacewrite
  • scalr.workspaces.add_to_favoritesFavorite a workspacewrite
  • scalr.workspaces.add_variable_setsAssign variable sets to the workspacewrite
  • scalr.workspaces.createCreate a Workspacewrite
  • scalr.workspaces.create_provider_configuration_linkAttach a Provider configuration to the workspacewrite
  • scalr.workspaces.create_ssh_key_linkCreate a link between a workspace and an SSH keywrite
  • scalr.workspaces.deleteDelete a Workspacedestructive
  • scalr.workspaces.delete_remote_state_consumersDelete remote state consumersdestructive
  • scalr.workspaces.delete_ssh_key_linkDelete a link between a workspace and an SSH keydestructive
  • scalr.workspaces.delete_tagsDelete workspace's tagsdestructive
  • scalr.workspaces.delete_variable_setsDelete assigned variable sets from the workspacedestructive
  • scalr.workspaces.getGet a Workspaceread
  • scalr.workspaces.get_current_state_versionGet Workspace's Current State Versionread
  • scalr.workspaces.listList Workspacesread
  • scalr.workspaces.list_outputsList workspace's outputs.read
  • scalr.workspaces.list_provider_configuration_linksList Provider configuration workspace linksread
  • scalr.workspaces.list_remote_state_consumersList remote state consumersread
  • scalr.workspaces.list_tagsList workspace's tagsread
  • scalr.workspaces.list_variable_setsList workspaces variable setsread
  • scalr.workspaces.lockLock a Workspacewrite
  • scalr.workspaces.remove_from_favoritesUnfavorite a workspacewrite
  • scalr.workspaces.replace_remote_state_consumersReplace remote state consumerswrite
  • scalr.workspaces.replace_tagsReplace workspace's tagswrite
  • scalr.workspaces.replace_variable_setsReplace assigned variable sets on the workspacewrite
  • scalr.workspaces.resyncResync a Workspacewrite
  • scalr.workspaces.set_scheduleSet scheduled runs for the workspacewrite
  • scalr.workspaces.unlockUnlock a Workspacewrite
  • scalr.workspaces.updateUpdate a Workspacewrite
Reports22
  • scalr.reports.get_ai_usageGet AI usageread
  • scalr.reports.get_module_usageGet module usageread
  • scalr.reports.get_provider_usageGet provider usageread
  • scalr.reports.get_resource_usageGet resource usageread
  • scalr.reports.list_access_token_usageGet Access Token Usageread
  • scalr.reports.list_ai_usageGet AI Usageread
  • scalr.reports.list_billing_usageList billing usages.read
  • scalr.reports.list_drifted_workspaces_for_environmentList drifted workspaces.read
  • scalr.reports.list_module_usage_namespacesList terraform module usage namespacesread
  • scalr.reports.list_terraform_module_sourcesList terraform module sourcesread
  • scalr.reports.list_terraform_module_usageList terraform module usageread
  • scalr.reports.list_terraform_module_usagesList terraform module usagesread
  • scalr.reports.list_terraform_module_versions_usageList unique terraform module versionsread
  • scalr.reports.list_terraform_provider_sourcesList unique terraform provider sourcesread
  • scalr.reports.list_terraform_provider_usageList terraform provider version usagesread
  • scalr.reports.list_terraform_provider_usagesList terraform provider usagesread
  • scalr.reports.list_terraform_provider_versions_usageList unique terraform provider versionsread
  • scalr.reports.list_terraform_resource_instances_usageList terraform resource instances usageread
  • scalr.reports.list_terraform_resource_providersList unique terraform resource provider typesread
  • scalr.reports.list_terraform_resource_usagesList terraform resource usagesread
  • scalr.reports.list_terraform_versions_usageList terraform versions usageread
  • scalr.reports.list_terraform_versions_usage_versionsList unique terraform versions in useread
Environments17
  • scalr.environments.add_federated_environmentsCreate environment's federated environments relationshipswrite
  • scalr.environments.add_tagsAdd tags to the environmentwrite
  • scalr.environments.add_to_favoritesFavorite an environmentwrite
  • scalr.environments.createCreate an Environmentwrite
  • scalr.environments.deleteDelete an Environmentdestructive
  • scalr.environments.delete_federated_environmentDelete federated environment relationshipdestructive
  • scalr.environments.delete_tagsDelete environment's tagsdestructive
  • scalr.environments.getGet an Environmentread
  • scalr.environments.listList Environmentsread
  • scalr.environments.list_federated_environmentsList environment's federated environments relationshipread
  • scalr.environments.list_tagsList environment's tagsread
  • scalr.environments.lockLock an Environmentwrite
  • scalr.environments.remove_from_favoritesUnfavorite an environmentwrite
  • scalr.environments.replace_federated_environmentsUpdate federated environments relationshipswrite
  • scalr.environments.replace_tagsReplace environment's tagswrite
  • scalr.environments.unlockUnlock an Environmentwrite
  • scalr.environments.updateUpdate Environmentwrite
Agent pools12
  • scalr.agent_pools.createCreate an Agent Poolwrite
  • scalr.agent_pools.create_tokenCreate an Agent Pool Access Tokenwrite
  • scalr.agent_pools.deleteDelete an Agent Pooldestructive
  • scalr.agent_pools.disable_mtls_enforcementDisable mTLS Enforcement for an Agent Poolwrite
  • scalr.agent_pools.enable_mtls_enforcementEnable mTLS Enforcement for an Agent Poolwrite
  • scalr.agent_pools.getGet an Agent Poolread
  • scalr.agent_pools.listList Agent Poolsread
  • scalr.agent_pools.list_access_tokensList Agent Pool Access Tokensread
  • scalr.agent_pools.list_mtls_certificatesList Agent Pool mTLS Certificatesread
  • scalr.agent_pools.revoke_mtls_certificateRevoke an Agent Pool mTLS Certificatedestructive
  • scalr.agent_pools.sign_csrSign an Agent Pool Certificatewrite
  • scalr.agent_pools.updateUpdate an Agent Poolwrite
Provider configurations12
  • scalr.provider_configurations.add_tagsAdd tags to the provider configurationwrite
  • scalr.provider_configurations.createCreate a Provider configurationwrite
  • scalr.provider_configurations.create_parameterCreate a Provider configuration parameterwrite
  • scalr.provider_configurations.deleteDelete a Provider configurationdestructive
  • scalr.provider_configurations.delete_tagsDelete provider configuration's tagsdestructive
  • scalr.provider_configurations.getGet a Provider configurationread
  • scalr.provider_configurations.listList Provider configurationsread
  • scalr.provider_configurations.list_parametersList Provider configuration parameters for specific provider configurationsread
  • scalr.provider_configurations.list_tagsList provider configuration's tagsread
  • scalr.provider_configurations.list_workspace_usageGet provider configuration usageread
  • scalr.provider_configurations.replace_tagsReplace provider configuration's tagswrite
  • scalr.provider_configurations.updateUpdate a Provider configurationwrite
Service accounts12
  • scalr.service_accounts.assumeExchange OIDC ID token for ephemeral service account access tokenwrite
  • scalr.service_accounts.createCreate a Service Accountwrite
  • scalr.service_accounts.create_assume_service_account_policyCreate an assume service account policywrite
  • scalr.service_accounts.create_tokenCreate access token for service accountwrite
  • scalr.service_accounts.deleteDelete a Service Accountdestructive
  • scalr.service_accounts.delete_assume_service_account_policyDelete an assume service account policydestructive
  • scalr.service_accounts.getGet a Service Accountread
  • scalr.service_accounts.get_assume_service_account_policyGet an assume service account policyread
  • scalr.service_accounts.listList Service Accountsread
  • scalr.service_accounts.list_access_tokensList access tokens of a service accountread
  • scalr.service_accounts.updateUpdate a Service Accountwrite
  • scalr.service_accounts.update_assume_service_account_policyUpdate an assume service account policywrite
Accounts10
  • scalr.accounts.add_sso_bypass_usersAdd SSO bypass users to the accountwrite
  • scalr.accounts.delete_sso_bypass_usersDelete SSO bypass users of the accountdestructive
  • scalr.accounts.getGet an Accountread
  • scalr.accounts.get_metricsShows Account Metricsread
  • scalr.accounts.invite_user_to_accountInvite a User to the Accountwrite
  • scalr.accounts.listList Accountsread
  • scalr.accounts.list_sso_bypass_usersList SSO bypass users of the accountread
  • scalr.accounts.remove_user_from_accountRemove a User from the Accountdestructive
  • scalr.accounts.replace_sso_bypass_usersReplace SSO bypass users of the accountwrite
  • scalr.accounts.updateUpdate Accountwrite
Policy groups10
  • scalr.policy_groups.createCreate a Policy Groupwrite
  • scalr.policy_groups.create_environmentsCreate policy group environments relationshipswrite
  • scalr.policy_groups.deleteDelete a Policy Groupdestructive
  • scalr.policy_groups.delete_environmentsDelete policy group's environment relationshipdestructive
  • scalr.policy_groups.getGet a Policy Groupread
  • scalr.policy_groups.listList Policy Groupsread
  • scalr.policy_groups.list_pull_request_policy_check_resultsList of policy group check results for pull requests.read
  • scalr.policy_groups.resyncResync a Policy Groupwrite
  • scalr.policy_groups.updateUpdate a Policy Groupwrite
  • scalr.policy_groups.update_environmentsUpdate policy group environments relationshipswrite
Slack integrations9
  • scalr.slack_integrations.createCreate Slack Integrationwrite
  • scalr.slack_integrations.deleteDelete the Slack integrationdestructive
  • scalr.slack_integrations.delete_slack_connectionDelete Slack connectiondestructive
  • scalr.slack_integrations.getGet Slack Integrationread
  • scalr.slack_integrations.get_slack_channelGet Slack channelread
  • scalr.slack_integrations.get_slack_connectionGet Slack connectionread
  • scalr.slack_integrations.listList Slack Integrationsread
  • scalr.slack_integrations.list_slack_channelsList Slack channelsread
  • scalr.slack_integrations.updateUpdate Slack Integrationwrite
Runs8
  • scalr.runs.cancelCancel a Rundestructive
  • scalr.runs.confirmApply a Runwrite
  • scalr.runs.createCreate a Runwrite
  • scalr.runs.discardDiscard a Rundestructive
  • scalr.runs.forceForce Runwrite
  • scalr.runs.getGet a Runread
  • scalr.runs.listList Runsread
  • scalr.runs.list_policy_checksList Policy Checksread
Checkov integrations6
  • scalr.checkov_integrations.createCreate Checkov integrationwrite
  • scalr.checkov_integrations.deleteDelete the Checkov integration.destructive
  • scalr.checkov_integrations.getGet Checkov integrationread
  • scalr.checkov_integrations.listList Checkov integrationsread
  • scalr.checkov_integrations.resyncResync Checkov external checks.write
  • scalr.checkov_integrations.updateUpdate Checkov integrationwrite
Hooks6
  • scalr.hooks.createCreate Hookwrite
  • scalr.hooks.deleteDelete Hookdestructive
  • scalr.hooks.getGet Hookread
  • scalr.hooks.listList Hooksread
  • scalr.hooks.resyncResync Hookwrite
  • scalr.hooks.updateUpdate Hookwrite
Modules6
  • scalr.modules.createPublish a Modulewrite
  • scalr.modules.deleteUnpublish a Moduledestructive
  • scalr.modules.getGet a Moduleread
  • scalr.modules.listList Modulesread
  • scalr.modules.resyncResync a Modulewrite
  • scalr.modules.update_test_configurationUpdate Test Configurationwrite
Access policies5
  • scalr.access_policies.createCreate an Access Policywrite
  • scalr.access_policies.deleteDelete Access Policydestructive
  • scalr.access_policies.getGet an Access Policyread
  • scalr.access_policies.listList Access Policiesread
  • scalr.access_policies.updateUpdate an Access Policywrite
Access tokens5
  • scalr.access_tokens.createCreate an Access Tokenwrite
  • scalr.access_tokens.deleteDelete an Access Tokendestructive
  • scalr.access_tokens.getGet an Access Tokenread
  • scalr.access_tokens.listList access tokensread
  • scalr.access_tokens.updateUpdate an Access Tokenwrite
Aws event bridge integrations5
  • scalr.aws_event_bridge_integrations.createCreate AWS EventBridge Integrationwrite
  • scalr.aws_event_bridge_integrations.deleteDelete the AWS EventBridge integrationdestructive
  • scalr.aws_event_bridge_integrations.getGet AWS EventBridge Integrationread
  • scalr.aws_event_bridge_integrations.listList AWS EventBridge Integrationsread
  • scalr.aws_event_bridge_integrations.updateUpdate AWS EventBridge Integrationswrite
Container images5
  • scalr.container_images.createCreate a container imagewrite
  • scalr.container_images.deleteDelete a container imagedestructive
  • scalr.container_images.getGet a container imageread
  • scalr.container_images.listList container imagesread
  • scalr.container_images.syncSynchronize a container imagewrite
Datadog integrations5
  • scalr.datadog_integrations.createCreate Datadog Integrationswrite
  • scalr.datadog_integrations.deleteDelete the Datadog integrationdestructive
  • scalr.datadog_integrations.getGet Datadog Integrationread
  • scalr.datadog_integrations.listList Datadog Integrationsread
  • scalr.datadog_integrations.updateUpdate Datadog Integrationswrite
Docker integrations5
  • scalr.docker_integrations.createCreate a Docker integrationwrite
  • scalr.docker_integrations.deleteDelete a Docker integrationdestructive
  • scalr.docker_integrations.getGet a Docker integrationread
  • scalr.docker_integrations.listList Docker integrationsread
  • scalr.docker_integrations.updateUpdate a Docker integrationwrite
GPG keys5
  • scalr.gpg_keys.createCreate a GPG Keywrite
  • scalr.gpg_keys.deleteDelete a GPG keydestructive
  • scalr.gpg_keys.getGet a GPG Keyread
  • scalr.gpg_keys.listList GPG keysread
  • scalr.gpg_keys.updateUpdate a GPG Keywrite
Hook environment links5
  • scalr.hook_environment_links.createCreate Hook Environment Linkwrite
  • scalr.hook_environment_links.deleteDelete Hook Environment Linkdestructive
  • scalr.hook_environment_links.getGet Hook Environment Linkread
  • scalr.hook_environment_links.listList Hook Environment Linksread
  • scalr.hook_environment_links.updateUpdate Hook Environment Linkwrite
Infracost integrations5
  • scalr.infracost_integrations.createCreate Infracost integrationwrite
  • scalr.infracost_integrations.deleteDelete the Infracost integration.destructive
  • scalr.infracost_integrations.getGet Infracost integrationread
  • scalr.infracost_integrations.listList Infracost integrationsread
  • scalr.infracost_integrations.updateUpdate Infracost integrationwrite
Module namespaces5
  • scalr.module_namespaces.createCreate a Module Namespacewrite
  • scalr.module_namespaces.deleteDelete a Module Namespacedestructive
  • scalr.module_namespaces.getGet a Module Namespaceread
  • scalr.module_namespaces.listList Module Namespacesread
  • scalr.module_namespaces.updateUpdate a Module Namespacewrite
Providers5
  • scalr.providers.createCreate a registry providerwrite
  • scalr.providers.deleteDelete a registry providerdestructive
  • scalr.providers.getGet a registry providerread
  • scalr.providers.listList registry providersread
  • scalr.providers.updateUpdate a registry providerwrite
Roles5
  • scalr.roles.createCreate a Rolewrite
  • scalr.roles.deleteDelete a Roledestructive
  • scalr.roles.getGet a Roleread
  • scalr.roles.listList Rolesread
  • scalr.roles.updateUpdate a Rolewrite
Run schedule rules5
  • scalr.run_schedule_rules.createCreate a Run schedule rule.write
  • scalr.run_schedule_rules.deleteDelete a Schedule Rule.destructive
  • scalr.run_schedule_rules.getGet a Run schedule rule.read
  • scalr.run_schedule_rules.listList all run schedule rules.read
  • scalr.run_schedule_rules.updateUpdate a Run schedule rule.write
Saml integrations5
  • scalr.saml_integrations.createCreate SAML Integrationwrite
  • scalr.saml_integrations.deleteDelete SAML Integrationdestructive
  • scalr.saml_integrations.getGet SAML Integrationread
  • scalr.saml_integrations.listList SAML Integrationsread
  • scalr.saml_integrations.updateUpdate SAML Integrationwrite
SSH keys5
  • scalr.ssh_keys.createCreate an SSH Keywrite
  • scalr.ssh_keys.deleteDelete an SSH Keydestructive
  • scalr.ssh_keys.getGet an SSH Keyread
  • scalr.ssh_keys.listList SSH keysread
  • scalr.ssh_keys.updateUpdate an SSH Keywrite
Storage profiles5
  • scalr.storage_profiles.createCreate Storage Profilewrite
  • scalr.storage_profiles.deleteDelete Storage Profiledestructive
  • scalr.storage_profiles.getGet Storage Profileread
  • scalr.storage_profiles.listList Storage Profilesread
  • scalr.storage_profiles.updateUpdate Storage Profilewrite
Tags5
  • scalr.tags.createCreate a Tagwrite
  • scalr.tags.deleteDelete a Tagdestructive
  • scalr.tags.getGet a Tagread
  • scalr.tags.listList Tagsread
  • scalr.tags.updateUpdate a Tagwrite
Teams5
  • scalr.teams.createCreate a Teamwrite
  • scalr.teams.deleteDelete a Teamdestructive
  • scalr.teams.getGet a Teamread
  • scalr.teams.listList Teamsread
  • scalr.teams.updateUpdate a Teamwrite
Users5
  • scalr.users.createCreate a Userwrite
  • scalr.users.deleteDelete a Userdestructive
  • scalr.users.getGet a Userread
  • scalr.users.listList Usersread
  • scalr.users.updateUpdate a Userwrite
Var set variables5
  • scalr.var_set_variables.createCreate a variable set variablewrite
  • scalr.var_set_variables.deleteDelete a variable set variabledestructive
  • scalr.var_set_variables.getGet a variable set variableread
  • scalr.var_set_variables.listList variable set variablesread
  • scalr.var_set_variables.updateUpdate a variable set variablewrite
Var sets5
  • scalr.var_sets.createCreate a variable setwrite
  • scalr.var_sets.deleteDelete a variable setdestructive
  • scalr.var_sets.getGet a variable setread
  • scalr.var_sets.listList variable setsread
  • scalr.var_sets.updateUpdate a variable setwrite
Vars5
  • scalr.vars.createCreate a Variablewrite
  • scalr.vars.deleteDelete a Variabledestructive
  • scalr.vars.getGet a Variableread
  • scalr.vars.listList Variablesread
  • scalr.vars.updateUpdate a Variablewrite
VCS providers5
  • scalr.vcs_providers.createCreate a VCS Providerwrite
  • scalr.vcs_providers.deleteDelete a VCS Providerdestructive
  • scalr.vcs_providers.getGet a VCS Providerread
  • scalr.vcs_providers.listList VCS Providersread
  • scalr.vcs_providers.updateUpdate a VCS Providerwrite
Webhook integrations5
  • scalr.webhook_integrations.createCreate Webhook integrationwrite
  • scalr.webhook_integrations.deleteDelete a Webhook integrationdestructive
  • scalr.webhook_integrations.getGet a Webhookread
  • scalr.webhook_integrations.listList Webhooksread
  • scalr.webhook_integrations.updateUpdate Webhook integrationwrite
Wiz integrations5
  • scalr.wiz_integrations.createCreate Wiz integrationwrite
  • scalr.wiz_integrations.deleteDelete the Wiz integration.destructive
  • scalr.wiz_integrations.getGet Wiz integrationread
  • scalr.wiz_integrations.listList Wiz integrationsread
  • scalr.wiz_integrations.updateUpdate Wiz integrationwrite
Workload identity providers5
  • scalr.workload_identity_providers.createCreate a Workload Identity Providerwrite
  • scalr.workload_identity_providers.deleteDelete a Workload identity providerdestructive
  • scalr.workload_identity_providers.getGet Workload Identity Providerread
  • scalr.workload_identity_providers.listList Workload Identity Providersread
  • scalr.workload_identity_providers.updateUpdate a Workload Identity Providerwrite
Drift detection schedules4
  • scalr.drift_detection_schedules.createCreate Drift Detection Schedulewrite
  • scalr.drift_detection_schedules.deleteDelete a drift detection scheduledestructive
  • scalr.drift_detection_schedules.getGet a drift detection scheduleread
  • scalr.drift_detection_schedules.updateUpdate a drift detection schedulewrite
Provider versions4
  • scalr.provider_versions.createCreate a registry provider versionwrite
  • scalr.provider_versions.deleteDelete a provider versiondestructive
  • scalr.provider_versions.getGet a provider versionread
  • scalr.provider_versions.listList registry provider versionsread
Agents3
  • scalr.agents.deleteDelete an Agentdestructive
  • scalr.agents.getGet an Agentread
  • scalr.agents.listList Agentsread
Configuration versions3
  • scalr.configuration_versions.createCreate a Configuration Versionwrite
  • scalr.configuration_versions.getGet a Configuration Versionread
  • scalr.configuration_versions.listList Configuration Versionsread
Module test provider configuration links3
  • scalr.module_test_provider_configuration_links.deleteDelete a Module Test Provider Configuration Linkdestructive
  • scalr.module_test_provider_configuration_links.getGet a Module Test Provider Configuration Linkread
  • scalr.module_test_provider_configuration_links.updateUpdate a Module Test Provider Configuration Linkwrite
Module versions3
  • scalr.module_versions.getGet a Module Versionread
  • scalr.module_versions.listList Module Versionsread
  • scalr.module_versions.resyncResync a Module Versionwrite
Plans3
  • scalr.plans.getGet a Planread
  • scalr.plans.get_json_outputJSON Outputread
  • scalr.plans.get_sanitized_json_outputSanitized JSON Outputread
Provider configuration links3
  • scalr.provider_configuration_links.delete_provider_configuration_workspace_linkDelete a Provider configuration workspace linkdestructive
  • scalr.provider_configuration_links.getGet a Provider configuration linkread
  • scalr.provider_configuration_links.updateUpdate a Provider configuration linkwrite
Provider configuration parameters3
  • scalr.provider_configuration_parameters.deleteDelete a Provider configuration parameterdestructive
  • scalr.provider_configuration_parameters.getGet a Provider configuration parameterread
  • scalr.provider_configuration_parameters.updateUpdate a Provider configuration parameterwrite
Run triggers3
  • scalr.run_triggers.createCreate a Run Trigger.write
  • scalr.run_triggers.deleteDelete a Run Triggerdestructive
  • scalr.run_triggers.getGet a Run Triggerread
State versions3
  • scalr.state_versions.createCreate a State Versionwrite
  • scalr.state_versions.getGet a State Versionread
  • scalr.state_versions.listList Workspace's State Versionsread
Test configurations3
  • scalr.test_configurations.create_module_test_provider_configuration_linkAttach a Provider Configuration to the Module Test Configurationwrite
  • scalr.test_configurations.getGet Test Configurationread
  • scalr.test_configurations.list_module_test_provider_configuration_linksList Module Test Provider Configuration Linksread
Container image versions2
  • scalr.container_image_versions.getGet a container image versionread
  • scalr.container_image_versions.listList container image versionsread
MCP connections2
  • scalr.mcp_connections.listList MCP connectionsread
  • scalr.mcp_connections.terminateTerminate MCP connectiondestructive
Permissions2
  • scalr.permissions.getGet a Permissionread
  • scalr.permissions.listList Permissionsread
Policy checks2
  • scalr.policy_checks.getGet a Policy Checkread
  • scalr.policy_checks.override_policyOverride Policywrite
Security rules2
  • scalr.security_rules.getGet Security Rulesread
  • scalr.security_rules.updateUpdate Security Ruleswrite
Software versions2
  • scalr.software_versions.getGet a Software Versionread
  • scalr.software_versions.listList software versionsread
Webhook deliveries2
  • scalr.webhook_deliveries.get_webhook_integration_deliveryGet Webhook Integration Deliveryread
  • scalr.webhook_deliveries.list_webhook_integration_deliveriesList Webhook Integration Deliveriesread
Account users1
  • scalr.account_users.listList Account to User relationshipsread
Applies1
  • scalr.applies.getGet an Applyread
Assume service account policies1
  • scalr.assume_service_account_policies.listList service account assume policiesread
Cost estimates1
  • scalr.cost_estimates.getGet a Cost Estimateread
Event definitions1
  • scalr.event_definitions.listList Event Definitionsread
Policies1
  • scalr.policies.getGet a Policyread
Policy group checks1
  • scalr.policy_group_checks.list_resultsList Policy Group Check resultsread
Runs queue1
  • scalr.runs_queue.listList Runs Queueread
Usage statistics1
  • scalr.usage_statistics.listList Scalr Usage Statisticsread
VCS tasks1
  • scalr.vcs_tasks.createCreate a task to queue runs from the commit for VCS-driven workspaces.write

Questions

The Scalr MCP server, answered.

Is there a Scalr MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 351 Scalr actions across workspaces, reports, environments and agent pools, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Scalr.

What do I need to connect Scalr?

Scalr API token: a personal token (User profile > Personal API tokens) or a service account token (Account > IAM >…. Plus your host. The free call account { op: "connections.requirements", service: "scalr" } lists exactly what to paste.

Can an AI agent delete or change things in Scalr?

Only if its key allows it, and only with an explicit confirmation. 59 Scalr actions are destructive, including cancel a Run, delete a Tag and delete a Variable. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Scalr API limit?

actionlake paces every call to the limits in the Scalr service file: 300 calls a minute per connection. Repeated reads are answered from cache (153 Scalr actions can be), which never reaches Scalr.

What does a Scalr action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (351 Scalr actions page). Cache hits, searches, dry runs and calls Scalr refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Scalr API does it cover?

The Scalr IACP API v3 (OpenAPI 3.0, JSON:API) at your Scalr instance's API base URL, which you enter when connecting. It is built from Scalr's documentation as read on 23 October 2026. 351 actions in 68 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Scalr data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Scalr credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Scalr today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.