Skip to content

Connectors · MSP & PSA

SUSE Rancher Manager MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SUSE Rancher Manager and the rest of your systems. It gives your agent 232 SUSE Rancher Manager actions (91 reads, 93 writes and 48 that wait for a confirmation) and holds the SUSE Rancher Manager credential itself, so the agent never does. It paces SUSE Rancher Manager's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "rancher.v3.users_list",  intent: "check which SUSE Rancher Manager account is connected"}# List users · read · 1 upstream call
  • 232actionsin one signed file
  • 91readlook, never change
  • 93writecreate and update
  • 48wait for a yesdestructive, confirmed first

Set up

Connect SUSE Rancher Manager in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect SUSE Rancher Manager.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • tokenRancher API key as one bearer token, `token-xxxxx:secret` (the access key and secret key joined by a colon)
    • ca_certYour SUSE Rancher Manager ca cert
    • hostWhere your SUSE Rancher Manager lives: your host
    account { op: "connections.requirements", service: "rancher" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "rancher.v3.users_list" }# list users · read · 1 upstream callcheck { action: "rancher.v3.users_create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

SUSE Rancher Manager at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
token
Setup fields
ca_certhost
Limits we pace to
600 calls a minute, per connection
API covered
Rancher Kubernetes API (RK-API, docs swagger for Rancher 2.12+) and the v3 API, at your SUSE Rancher Manager instance's API base URL, which you enter when connecting
Built from
SUSE Rancher Manager's documentation, read 23 October 2026ranchermanager.docs.rancher.comranchermanager.docs.rancher.comGitHub
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
81 of 91 reads, for up to an hour; a write clears what it affects
Shared entities
4, so ask can line SUSE Rancher Manager up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in SUSE Rancher Manager.

232 actions in 5 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 91readlook, never change
  • 93writecreate and update
  • 48destructivewait for a confirmation
  1. V3

    139

    61 read · 55 write · 23 destructive

    List users · List groups · List global roles · Create a user

  2. MGMT

    61

    20 read · 24 write · 17 destructive

    List users · Create a user · List global roles · List role templates

  3. Ext

    14

    4 read · 6 write · 4 destructive

    Create a token · List tokens · Get a token · Delete a token

  4. Auditlog

    10

    3 read · 5 write · 2 destructive

    Create an audit policy · List audit policies · Get an audit policy · Get an audit policy's status

  5. Provisioning

    8

    3 read · 3 write · 2 destructive

    Create a cluster · List clusters in a namespace · List clusters across all namespaces · Get a cluster

Top actions

The SUSE Rancher Manager API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 35 of SUSE Rancher Manager's 35 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
rancher.v3.users_listList usersList users (v3 API).readidentity.user.list474 connectors
rancher.v3.groups_listList groupsList groups (v3 API).readidentity.group.list262 connectors
rancher.v3.global_roles_listList global rolesList global roles (v3 API).readidentity.role.list184 connectors
rancher.mgmt.users_listList usersList usersreadidentity.user.list474 connectors
rancher.v3.users_createCreate a userCreate a user (v3 API).writeidentity.user.create262 connectors
rancher.mgmt.global_roles_listList global rolesList global rolesreadidentity.role.list184 connectors
rancher.v3.groups_getGet a groupGet a group by id (v3 API).readidentity.group.get212 connectors
rancher.v3.users_deleteDelete a userDelete a user (v3 API).destructiveidentity.user.delete253 connectors
rancher.v3.nodes_listList nodesList nodes (v3 API).readinfra.instance.list18 connectors
rancher.v3.users_meGet the current userGet the user the API key belongs to (v3 API).readidentity.current_user.get307 connectors
rancher.v3.tokens_createCreate an API tokenCreate a API token (v3 API).writeidentity.api_key.create100 connectors
rancher.ext.tokens_createCreate a tokenCreate a tokenwriteidentity.api_key.create100 connectors

Try it

Prompts to paste into Claude.

Each one names the SUSE Rancher Manager actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in SUSE Rancher Manager? List every user and their role.

    callsrancher.v3.users_list

  2. Writewrite

    Create a user in SUSE Rancher Manager. Show me exactly what you will send before you save it.

    callsrancher.v3.users_create

Governance for SUSE Rancher Manager

Destructive actions wait for a yes.

48 SUSE Rancher Manager actions are destructive. The first 10:

  • Delete a userrancher.v3.users_delete
  • Delete a userrancher.mgmt.users_delete
  • Delete a global rolerancher.v3.global_roles_delete
  • Delete a global rolerancher.mgmt.global_roles_delete
  • Delete a role templaterancher.v3.role_templates_delete
  • Delete a role templaterancher.mgmt.role_templates_delete
  • Delete an API tokenrancher.v3.tokens_delete
  • Delete a tokenrancher.ext.tokens_delete
  • Delete a noderancher.v3.nodes_delete
  • Delete a global role bindingrancher.v3.global_role_bindings_delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dorancher.v3.users_deleteconfirm_policy: human

Delete a user?

intent: the user asked me to delete a user

run suspended · waiting for a named person · key rancher-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "rancher-agent",  allowed_actions: ["rancher.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "rancher.v3.users_delete", approver: "[email protected]" },    { match: "rancher.mgmt.users_delete", approver: "[email protected]" },    { match: "rancher.v3.global_roles_delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to SUSE Rancher Manager only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What SUSE Rancher Manager costs on actionlake.

Every SUSE Rancher Manager action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call SUSE Rancher Manager refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 232 SUSE Rancher Manager actions
  • 232actions pageeach page of a long list is one call
  • 81reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every SUSE Rancher Manager action.

232 actions by area: the id your agent calls, what it does, and its effect.

V3139
  • rancher.v3.auth_configs_configure_testStart testing an auth provider configurationwrite
  • rancher.v3.auth_configs_disableDisable an auth providerwrite
  • rancher.v3.auth_configs_getGet an auth provider configurationread
  • rancher.v3.auth_configs_listList auth provider configurationsread
  • rancher.v3.auth_configs_test_and_applyTest and apply an auth provider configurationwrite
  • rancher.v3.auth_configs_test_and_enableTest and enable a SAML auth providerwrite
  • rancher.v3.auth_configs_updateUpdate an auth provider configurationwrite
  • rancher.v3.auth_configs_upgradeUpgrade the Azure AD auth providerwrite
  • rancher.v3.auth_providers_listList login auth providersread
  • rancher.v3.cloud_credentials_createCreate a cloud credentialwrite
  • rancher.v3.cloud_credentials_deleteDelete a cloud credentialdestructive
  • rancher.v3.cloud_credentials_getGet a cloud credentialread
  • rancher.v3.cloud_credentials_listList cloud credentialsread
  • rancher.v3.cloud_credentials_updateUpdate a cloud credentialwrite
  • rancher.v3.cluster_registration_tokens_createCreate a cluster registration tokenwrite
  • rancher.v3.cluster_registration_tokens_deleteDelete a cluster registration tokendestructive
  • rancher.v3.cluster_registration_tokens_getGet a cluster registration tokenread
  • rancher.v3.cluster_registration_tokens_listList cluster registration tokensread
  • rancher.v3.cluster_registration_tokens_updateUpdate a cluster registration tokenwrite
  • rancher.v3.cluster_role_template_bindings_createCreate a cluster role template bindingdestructive
  • rancher.v3.cluster_role_template_bindings_deleteDelete a cluster role template bindingdestructive
  • rancher.v3.cluster_role_template_bindings_getGet a cluster role template bindingread
  • rancher.v3.cluster_role_template_bindings_listList cluster role template bindingsread
  • rancher.v3.cluster_role_template_bindings_updateUpdate a cluster role template bindingwrite
  • rancher.v3.clusters_createCreate a clusterwrite
  • rancher.v3.clusters_deleteDelete a clusterdestructive
  • rancher.v3.clusters_export_yamlExport a cluster as YAMLread
  • rancher.v3.clusters_generate_kubeconfigGenerate a kubeconfig for a clusterwrite
  • rancher.v3.clusters_getGet a clusterread
  • rancher.v3.clusters_import_yamlApply YAML to a clusterwrite
  • rancher.v3.clusters_listList clustersread
  • rancher.v3.clusters_updateUpdate a clusterwrite
  • rancher.v3.dynamic_schemas_getGet a dynamic schemaread
  • rancher.v3.dynamic_schemas_listList dynamic schemasread
  • rancher.v3.features_getGet a feature flagread
  • rancher.v3.features_listList feature flagsread
  • rancher.v3.features_updateUpdate a feature flagwrite
  • rancher.v3.fleet_workspaces_createCreate a Fleet workspacewrite
  • rancher.v3.fleet_workspaces_deleteDelete a Fleet workspacedestructive
  • rancher.v3.fleet_workspaces_getGet a Fleet workspaceread
  • rancher.v3.fleet_workspaces_listList Fleet workspacesread
  • rancher.v3.fleet_workspaces_updateUpdate a Fleet workspacewrite
  • rancher.v3.global_role_bindings_createCreate a global role bindingdestructive
  • rancher.v3.global_role_bindings_deleteDelete a global role bindingdestructive
  • rancher.v3.global_role_bindings_getGet a global role bindingread
  • rancher.v3.global_role_bindings_listList global role bindingsread
  • rancher.v3.global_role_bindings_updateUpdate a global role bindingwrite
  • rancher.v3.global_roles_createCreate a global rolewrite
  • rancher.v3.global_roles_deleteDelete a global roledestructive
  • rancher.v3.global_roles_getGet a global roleread
  • rancher.v3.global_roles_listList global rolesread
  • rancher.v3.global_roles_updateUpdate a global rolewrite
  • rancher.v3.group_members_getGet a group memberread
  • rancher.v3.group_members_listList group membersread
  • rancher.v3.groups_getGet a groupread
  • rancher.v3.groups_listList groupsread
  • rancher.v3.kontainer_drivers_activateActivate a Kontainer driverwrite
  • rancher.v3.kontainer_drivers_createCreate a Kontainer driverwrite
  • rancher.v3.kontainer_drivers_deactivateDeactivate a Kontainer driverwrite
  • rancher.v3.kontainer_drivers_deleteDelete a Kontainer driverdestructive
  • rancher.v3.kontainer_drivers_getGet a Kontainer driverread
  • rancher.v3.kontainer_drivers_listList Kontainer driversread
  • rancher.v3.kontainer_drivers_refreshRefresh Kontainer driverswrite
  • rancher.v3.kontainer_drivers_updateUpdate a Kontainer driverwrite
  • rancher.v3.node_drivers_activateActivate a node driverwrite
  • rancher.v3.node_drivers_createCreate a node driverwrite
  • rancher.v3.node_drivers_deactivateDeactivate a node driverwrite
  • rancher.v3.node_drivers_deleteDelete a node driverdestructive
  • rancher.v3.node_drivers_getGet a node driverread
  • rancher.v3.node_drivers_listList node driversread
  • rancher.v3.node_drivers_updateUpdate a node driverwrite
  • rancher.v3.nodes_cordonCordon a nodewrite
  • rancher.v3.nodes_deleteDelete a nodedestructive
  • rancher.v3.nodes_drainDrain a nodewrite
  • rancher.v3.nodes_getGet a noderead
  • rancher.v3.nodes_listList nodesread
  • rancher.v3.nodes_scaledownScale down a nodedestructive
  • rancher.v3.nodes_stop_drainStop draining a nodewrite
  • rancher.v3.nodes_uncordonUncordon a nodewrite
  • rancher.v3.nodes_updateUpdate a nodewrite
  • rancher.v3.oidc_clients_createCreate an OIDC clientwrite
  • rancher.v3.oidc_clients_deleteDelete an OIDC clientdestructive
  • rancher.v3.oidc_clients_getGet an OIDC clientread
  • rancher.v3.oidc_clients_listList OIDC clientsread
  • rancher.v3.oidc_clients_updateUpdate an OIDC clientwrite
  • rancher.v3.pod_security_admission_templates_createCreate a pod security admission configuration templatewrite
  • rancher.v3.pod_security_admission_templates_deleteDelete a pod security admission configuration templatedestructive
  • rancher.v3.pod_security_admission_templates_getGet a pod security admission configuration templateread
  • rancher.v3.pod_security_admission_templates_listList pod security admission configuration templatesread
  • rancher.v3.pod_security_admission_templates_updateUpdate a pod security admission configuration templatewrite
  • rancher.v3.preferences_createCreate a user preferencewrite
  • rancher.v3.preferences_deleteDelete a user preferencedestructive
  • rancher.v3.preferences_getGet a user preferenceread
  • rancher.v3.preferences_listList user preferencesread
  • rancher.v3.preferences_updateUpdate a user preferencewrite
  • rancher.v3.principals_getGet a principalread
  • rancher.v3.principals_listList principalsread
  • rancher.v3.principals_searchSearch principalsread
  • rancher.v3.project_network_policies_getGet a project network policyread
  • rancher.v3.project_network_policies_listList project network policysread
  • rancher.v3.project_role_template_bindings_createCreate a project role template bindingdestructive
  • rancher.v3.project_role_template_bindings_deleteDelete a project role template bindingdestructive
  • rancher.v3.project_role_template_bindings_getGet a project role template bindingread
  • rancher.v3.project_role_template_bindings_listList project role template bindingsread
  • rancher.v3.project_role_template_bindings_updateUpdate a project role template bindingwrite
  • rancher.v3.projects_createCreate a projectwrite
  • rancher.v3.projects_deleteDelete a projectdestructive
  • rancher.v3.projects_export_yamlExport a project as YAMLread
  • rancher.v3.projects_getGet a projectread
  • rancher.v3.projects_listList projectsread
  • rancher.v3.projects_updateUpdate a projectwrite
  • rancher.v3.role_templates_createCreate a role templatewrite
  • rancher.v3.role_templates_deleteDelete a role templatedestructive
  • rancher.v3.role_templates_getGet a role templateread
  • rancher.v3.role_templates_listList role templatesread
  • rancher.v3.role_templates_updateUpdate a role templatewrite
  • rancher.v3.schemas_getGet a v3 API schemaread
  • rancher.v3.schemas_listList v3 API schemasread
  • rancher.v3.settings_createCreate a settingwrite
  • rancher.v3.settings_deleteDelete a settingdestructive
  • rancher.v3.settings_getGet a settingread
  • rancher.v3.settings_listList settingsread
  • rancher.v3.settings_updateUpdate a settingwrite
  • rancher.v3.tokens_createCreate an API tokenwrite
  • rancher.v3.tokens_deleteDelete an API tokendestructive
  • rancher.v3.tokens_getGet an API tokenread
  • rancher.v3.tokens_listList API tokensread
  • rancher.v3.user_notifications_getGet a user notificationread
  • rancher.v3.user_notifications_listList user notificationsread
  • rancher.v3.users_change_passwordChange the current user's passwordwrite
  • rancher.v3.users_createCreate a userwrite
  • rancher.v3.users_deleteDelete a userdestructive
  • rancher.v3.users_getGet a userread
  • rancher.v3.users_listList usersread
  • rancher.v3.users_meGet the current userread
  • rancher.v3.users_refresh_all_auth_provider_accessRefresh auth provider access for all userswrite
  • rancher.v3.users_refresh_auth_provider_accessRefresh a user's auth provider accesswrite
  • rancher.v3.users_set_passwordSet a user's passwordwrite
  • rancher.v3.users_updateUpdate a userwrite
MGMT61
  • rancher.mgmt.cluster_role_template_bindings_createCreate a cluster role template bindingdestructive
  • rancher.mgmt.cluster_role_template_bindings_deleteDelete a cluster role template bindingdestructive
  • rancher.mgmt.cluster_role_template_bindings_delete_collectionDelete cluster role template bindings matching a selectordestructive
  • rancher.mgmt.cluster_role_template_bindings_getGet a cluster role template bindingread
  • rancher.mgmt.cluster_role_template_bindings_get_statusGet a cluster role template binding's statusread
  • rancher.mgmt.cluster_role_template_bindings_listList cluster role template bindings in a namespaceread
  • rancher.mgmt.cluster_role_template_bindings_list_allList cluster role template bindings across all namespacesread
  • rancher.mgmt.cluster_role_template_bindings_patchPatch a cluster role template bindingwrite
  • rancher.mgmt.cluster_role_template_bindings_patch_statusPatch a cluster role template binding's statuswrite
  • rancher.mgmt.cluster_role_template_bindings_replaceReplace a cluster role template bindingwrite
  • rancher.mgmt.cluster_role_template_bindings_replace_statusReplace a cluster role template binding's statuswrite
  • rancher.mgmt.global_role_bindings_createCreate a global role bindingdestructive
  • rancher.mgmt.global_role_bindings_deleteDelete a global role bindingdestructive
  • rancher.mgmt.global_role_bindings_delete_collectionDelete global role bindings matching a selectordestructive
  • rancher.mgmt.global_role_bindings_getGet a global role bindingread
  • rancher.mgmt.global_role_bindings_get_statusGet a global role binding's statusread
  • rancher.mgmt.global_role_bindings_listList global role bindingsread
  • rancher.mgmt.global_role_bindings_patchPatch a global role bindingwrite
  • rancher.mgmt.global_role_bindings_patch_statusPatch a global role binding's statuswrite
  • rancher.mgmt.global_role_bindings_replaceReplace a global role bindingwrite
  • rancher.mgmt.global_role_bindings_replace_statusReplace a global role binding's statuswrite
  • rancher.mgmt.global_roles_createCreate a global rolewrite
  • rancher.mgmt.global_roles_deleteDelete a global roledestructive
  • rancher.mgmt.global_roles_delete_collectionDelete global roles matching a selectordestructive
  • rancher.mgmt.global_roles_getGet a global roleread
  • rancher.mgmt.global_roles_get_statusGet a global role's statusread
  • rancher.mgmt.global_roles_listList global rolesread
  • rancher.mgmt.global_roles_patchPatch a global rolewrite
  • rancher.mgmt.global_roles_patch_statusPatch a global role's statuswrite
  • rancher.mgmt.global_roles_replaceReplace a global rolewrite
  • rancher.mgmt.global_roles_replace_statusReplace a global role's statuswrite
  • rancher.mgmt.project_role_template_bindings_createCreate a project role template bindingdestructive
  • rancher.mgmt.project_role_template_bindings_deleteDelete a project role template bindingdestructive
  • rancher.mgmt.project_role_template_bindings_delete_collectionDelete project role template bindings matching a selectordestructive
  • rancher.mgmt.project_role_template_bindings_getGet a project role template bindingread
  • rancher.mgmt.project_role_template_bindings_listList project role template bindings in a namespaceread
  • rancher.mgmt.project_role_template_bindings_list_allList project role template bindings across all namespacesread
  • rancher.mgmt.project_role_template_bindings_patchPatch a project role template bindingwrite
  • rancher.mgmt.project_role_template_bindings_replaceReplace a project role template bindingwrite
  • rancher.mgmt.projects_createCreate a projectwrite
  • rancher.mgmt.projects_deleteDelete a projectdestructive
  • rancher.mgmt.projects_delete_collectionDelete projects matching a selectordestructive
  • rancher.mgmt.projects_getGet a projectread
  • rancher.mgmt.projects_listList projects in a namespaceread
  • rancher.mgmt.projects_list_allList projects across all namespacesread
  • rancher.mgmt.projects_patchPatch a projectwrite
  • rancher.mgmt.projects_replaceReplace a projectwrite
  • rancher.mgmt.role_templates_createCreate a role templatewrite
  • rancher.mgmt.role_templates_deleteDelete a role templatedestructive
  • rancher.mgmt.role_templates_delete_collectionDelete role templates matching a selectordestructive
  • rancher.mgmt.role_templates_getGet a role templateread
  • rancher.mgmt.role_templates_listList role templatesread
  • rancher.mgmt.role_templates_patchPatch a role templatewrite
  • rancher.mgmt.role_templates_replaceReplace a role templatewrite
  • rancher.mgmt.users_createCreate a userwrite
  • rancher.mgmt.users_deleteDelete a userdestructive
  • rancher.mgmt.users_delete_collectionDelete users matching a selectordestructive
  • rancher.mgmt.users_getGet a userread
  • rancher.mgmt.users_listList usersread
  • rancher.mgmt.users_patchPatch a userwrite
  • rancher.mgmt.users_replaceReplace a userwrite
Ext14
  • rancher.ext.kubeconfigs_createCreate a kubeconfigwrite
  • rancher.ext.kubeconfigs_deleteDelete a kubeconfigdestructive
  • rancher.ext.kubeconfigs_delete_collectionDelete kubeconfigs matching a selectordestructive
  • rancher.ext.kubeconfigs_getGet a kubeconfigread
  • rancher.ext.kubeconfigs_listList kubeconfigsread
  • rancher.ext.kubeconfigs_patchPatch a kubeconfigwrite
  • rancher.ext.kubeconfigs_replaceReplace a kubeconfigwrite
  • rancher.ext.tokens_createCreate a tokenwrite
  • rancher.ext.tokens_deleteDelete a tokendestructive
  • rancher.ext.tokens_delete_collectionDelete tokens matching a selectordestructive
  • rancher.ext.tokens_getGet a tokenread
  • rancher.ext.tokens_listList tokensread
  • rancher.ext.tokens_patchPatch a tokenwrite
  • rancher.ext.tokens_replaceReplace a tokenwrite
Auditlog10
  • rancher.auditlog.audit_policies_createCreate an audit policywrite
  • rancher.auditlog.audit_policies_deleteDelete an audit policydestructive
  • rancher.auditlog.audit_policies_delete_collectionDelete audit policies matching a selectordestructive
  • rancher.auditlog.audit_policies_getGet an audit policyread
  • rancher.auditlog.audit_policies_get_statusGet an audit policy's statusread
  • rancher.auditlog.audit_policies_listList audit policiesread
  • rancher.auditlog.audit_policies_patchPatch an audit policywrite
  • rancher.auditlog.audit_policies_patch_statusPatch an audit policy's statuswrite
  • rancher.auditlog.audit_policies_replaceReplace an audit policywrite
  • rancher.auditlog.audit_policies_replace_statusReplace an audit policy's statuswrite
Provisioning8
  • rancher.provisioning.clusters_createCreate a clusterwrite
  • rancher.provisioning.clusters_deleteDelete a clusterdestructive
  • rancher.provisioning.clusters_delete_collectionDelete clusters matching a selectordestructive
  • rancher.provisioning.clusters_getGet a clusterread
  • rancher.provisioning.clusters_listList clusters in a namespaceread
  • rancher.provisioning.clusters_list_allList clusters across all namespacesread
  • rancher.provisioning.clusters_patchPatch a clusterwrite
  • rancher.provisioning.clusters_replaceReplace a clusterwrite

Questions

The SUSE Rancher Manager MCP server, answered.

Is there an SUSE Rancher Manager MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 232 SUSE Rancher Manager actions across v3, MGMT, ext and auditlog, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SUSE Rancher Manager.

What do I need to connect SUSE Rancher Manager?

Rancher API key as one bearer token, `token-xxxxx:secret` (the access key and secret key joined by a colon). Plus your ca cert and your host. The free call account { op: "connections.requirements", service: "rancher" } lists exactly what to paste.

Can an AI agent delete or change things in SUSE Rancher Manager?

Only if its key allows it, and only with an explicit confirmation. 48 SUSE Rancher Manager actions are destructive, including delete a user, delete a global role and delete a role template. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my SUSE Rancher Manager API limit?

actionlake paces every call to the limits in the SUSE Rancher Manager service file: 600 calls a minute per connection. Repeated reads are answered from cache (81 SUSE Rancher Manager actions can be), which never reaches SUSE Rancher Manager.

What does an SUSE Rancher Manager action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (232 SUSE Rancher Manager actions page). Cache hits, searches, dry runs and calls SUSE Rancher Manager refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which SUSE Rancher Manager API does it cover?

The Rancher Kubernetes API (RK-API, docs swagger for Rancher 2.12+) and the v3 API at your SUSE Rancher Manager instance's API base URL, which you enter when connecting. It is built from SUSE Rancher Manager's documentation as read on 23 October 2026. 232 actions in 5 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my SUSE Rancher Manager data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SUSE Rancher Manager credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent SUSE Rancher Manager today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.