---
title: "SUSE Rancher Manager MCP server for AI agents - actionlake"
description: "Give Claude 232 SUSE Rancher Manager actions through one MCP server: V3, MGMT, ext, auditlog. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/suse-rancher-manager
updated: 2026-10-23
---

Connectors · MSP & PSA

# SUSE Rancher Manager MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SUSE Rancher Manager and the rest of your systems. It gives your agent 232 SUSE Rancher Manager actions (91 reads, 93 writes and 48 that wait for a confirmation) and holds the SUSE Rancher Manager credential itself, so the agent never does. It paces SUSE Rancher Manager's limits and records every call.

[Connect SUSE Rancher Manager free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "rancher.v3.users_list",
  intent: "check which SUSE Rancher Manager account is connected"
}
# List users · read · 1 upstream call
```

- 232 actions in one signed file
- 91 read look, never change
- 93 write create and update
- 48 wait for a yes destructive, confirmed first

Set up

## Connect SUSE Rancher Manager in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect SUSE Rancher Manager.
   Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `token` Rancher API key as one bearer token, `token-xxxxx:secret` (the access key and secret key joined by a colon)
   - `ca_cert` Your SUSE Rancher Manager ca cert
   - `host` Where your SUSE Rancher Manager lives: your host
   ```
   account { op: "connections.requirements", service: "rancher" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "rancher.v3.users_list" }
   # list users · read · 1 upstream call
   check { action: "rancher.v3.users_create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

SUSE Rancher Manager at a glance

**Sign-in**

Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`token`

**Setup fields**

`ca_cert` `host`

**Limits we pace to**

600 calls a minute, per connection

**API covered**

Rancher Kubernetes API (RK-API, docs swagger for Rancher 2.12+) and the v3 API, at your SUSE Rancher Manager instance's API base URL, which you enter when connecting

**Built from**

SUSE Rancher Manager's documentation, read 23 October 2026[ranchermanager.docs.rancher.com](https://ranchermanager.docs.rancher.com/_attachments/swagger.json) [ranchermanager.docs.rancher.com](https://ranchermanager.docs.rancher.com/api/v3-rancher-api-guide) [GitHub](https://github.com/rancher/rancher/blob/main/pkg/schemas/management.cattle.io/v3/schema.go)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

81 of 91 reads, for up to an hour; a write clears what it affects

**Shared entities**

4, so ask can line SUSE Rancher Manager up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in SUSE Rancher Manager.

232 actions in 5 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **91** read look, never change
- **93** write create and update
- **48** destructive wait for a confirmation

1. ### V3
   139
   61 read · 55 write · 23 destructive
   List users · List groups · List global roles · Create a user
2. ### MGMT
   61
   20 read · 24 write · 17 destructive
   List users · Create a user · List global roles · List role templates
3. ### Ext
   14
   4 read · 6 write · 4 destructive
   Create a token · List tokens · Get a token · Delete a token
4. ### Auditlog
   10
   3 read · 5 write · 2 destructive
   Create an audit policy · List audit policies · Get an audit policy · Get an audit policy's status
5. ### Provisioning
   8
   3 read · 3 write · 2 destructive
   Create a cluster · List clusters in a namespace · List clusters across all namespaces · Get a cluster

Top actions

## The SUSE Rancher Manager API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 35 of SUSE Rancher Manager's 35 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `rancher.v3.users_list` List users | List users (v3 API). | read | `identity.user.list` 474 connectors |
| `rancher.v3.groups_list` List groups | List groups (v3 API). | read | `identity.group.list` 262 connectors |
| `rancher.v3.global_roles_list` List global roles | List global roles (v3 API). | read | `identity.role.list` 184 connectors |
| `rancher.mgmt.users_list` List users | List users | read | `identity.user.list` 474 connectors |
| `rancher.v3.users_create` Create a user | Create a user (v3 API). | write | `identity.user.create` 262 connectors |
| `rancher.mgmt.global_roles_list` List global roles | List global roles | read | `identity.role.list` 184 connectors |
| `rancher.v3.groups_get` Get a group | Get a group by id (v3 API). | read | `identity.group.get` 212 connectors |
| `rancher.v3.users_delete` Delete a user | Delete a user (v3 API). | destructive | `identity.user.delete` 253 connectors |
| `rancher.v3.nodes_list` List nodes | List nodes (v3 API). | read | `infra.instance.list` 18 connectors |
| `rancher.v3.users_me` Get the current user | Get the user the API key belongs to (v3 API). | read | `identity.current_user.get` 307 connectors |
| `rancher.v3.tokens_create` Create an API token | Create a API token (v3 API). | write | `identity.api_key.create` 100 connectors |
| `rancher.ext.tokens_create` Create a token | Create a token | write | `identity.api_key.create` 100 connectors |

Try it

## Prompts to paste into Claude.

Each one names the SUSE Rancher Manager actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Who has access in SUSE Rancher Manager? List every user and their role.
   calls `rancher.v3.users_list`
2. Write write
   Create a user in SUSE Rancher Manager. Show me exactly what you will send before you save it.
   calls `rancher.v3.users_create`

Governance for SUSE Rancher Manager

## Destructive actions wait for a yes.

48 SUSE Rancher Manager actions are destructive. The first 10:

- Delete a user `rancher.v3.users_delete`
- Delete a user `rancher.mgmt.users_delete`
- Delete a global role `rancher.v3.global_roles_delete`
- Delete a global role `rancher.mgmt.global_roles_delete`
- Delete a role template `rancher.v3.role_templates_delete`
- Delete a role template `rancher.mgmt.role_templates_delete`
- Delete an API token `rancher.v3.tokens_delete`
- Delete a token `rancher.ext.tokens_delete`
- Delete a node `rancher.v3.nodes_delete`
- Delete a global role binding `rancher.v3.global_role_bindings_delete`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do rancher.v3.users_delete confirm_policy: **human**

Delete a user?

**intent:** the user asked me to delete a user

run suspended · waiting for a named person · key _rancher-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "rancher-agent",
  allowed_actions: ["rancher.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "rancher.v3.users_delete", approver: "lead@example.com" },
    { match: "rancher.mgmt.users_delete", approver: "lead@example.com" },
    { match: "rancher.v3.global_roles_delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to SUSE Rancher Manager only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What SUSE Rancher Manager costs on actionlake.

Every SUSE Rancher Manager action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call SUSE Rancher Manager refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 232 SUSE Rancher Manager actions
- 232 actions page each page of a long list is one call
- 81 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every SUSE Rancher Manager action.

232 actions by area: the id your agent calls, what it does, and its effect.

**V3 139**

- `rancher.v3.auth_configs_configure_test` Start testing an auth provider configuration write
- `rancher.v3.auth_configs_disable` Disable an auth provider write
- `rancher.v3.auth_configs_get` Get an auth provider configuration read
- `rancher.v3.auth_configs_list` List auth provider configurations read
- `rancher.v3.auth_configs_test_and_apply` Test and apply an auth provider configuration write
- `rancher.v3.auth_configs_test_and_enable` Test and enable a SAML auth provider write
- `rancher.v3.auth_configs_update` Update an auth provider configuration write
- `rancher.v3.auth_configs_upgrade` Upgrade the Azure AD auth provider write
- `rancher.v3.auth_providers_list` List login auth providers read
- `rancher.v3.cloud_credentials_create` Create a cloud credential write
- `rancher.v3.cloud_credentials_delete` Delete a cloud credential destructive
- `rancher.v3.cloud_credentials_get` Get a cloud credential read
- `rancher.v3.cloud_credentials_list` List cloud credentials read
- `rancher.v3.cloud_credentials_update` Update a cloud credential write
- `rancher.v3.cluster_registration_tokens_create` Create a cluster registration token write
- `rancher.v3.cluster_registration_tokens_delete` Delete a cluster registration token destructive
- `rancher.v3.cluster_registration_tokens_get` Get a cluster registration token read
- `rancher.v3.cluster_registration_tokens_list` List cluster registration tokens read
- `rancher.v3.cluster_registration_tokens_update` Update a cluster registration token write
- `rancher.v3.cluster_role_template_bindings_create` Create a cluster role template binding destructive
- `rancher.v3.cluster_role_template_bindings_delete` Delete a cluster role template binding destructive
- `rancher.v3.cluster_role_template_bindings_get` Get a cluster role template binding read
- `rancher.v3.cluster_role_template_bindings_list` List cluster role template bindings read
- `rancher.v3.cluster_role_template_bindings_update` Update a cluster role template binding write
- `rancher.v3.clusters_create` Create a cluster write
- `rancher.v3.clusters_delete` Delete a cluster destructive
- `rancher.v3.clusters_export_yaml` Export a cluster as YAML read
- `rancher.v3.clusters_generate_kubeconfig` Generate a kubeconfig for a cluster write
- `rancher.v3.clusters_get` Get a cluster read
- `rancher.v3.clusters_import_yaml` Apply YAML to a cluster write
- `rancher.v3.clusters_list` List clusters read
- `rancher.v3.clusters_update` Update a cluster write
- `rancher.v3.dynamic_schemas_get` Get a dynamic schema read
- `rancher.v3.dynamic_schemas_list` List dynamic schemas read
- `rancher.v3.features_get` Get a feature flag read
- `rancher.v3.features_list` List feature flags read
- `rancher.v3.features_update` Update a feature flag write
- `rancher.v3.fleet_workspaces_create` Create a Fleet workspace write
- `rancher.v3.fleet_workspaces_delete` Delete a Fleet workspace destructive
- `rancher.v3.fleet_workspaces_get` Get a Fleet workspace read
- `rancher.v3.fleet_workspaces_list` List Fleet workspaces read
- `rancher.v3.fleet_workspaces_update` Update a Fleet workspace write
- `rancher.v3.global_role_bindings_create` Create a global role binding destructive
- `rancher.v3.global_role_bindings_delete` Delete a global role binding destructive
- `rancher.v3.global_role_bindings_get` Get a global role binding read
- `rancher.v3.global_role_bindings_list` List global role bindings read
- `rancher.v3.global_role_bindings_update` Update a global role binding write
- `rancher.v3.global_roles_create` Create a global role write
- `rancher.v3.global_roles_delete` Delete a global role destructive
- `rancher.v3.global_roles_get` Get a global role read
- `rancher.v3.global_roles_list` List global roles read
- `rancher.v3.global_roles_update` Update a global role write
- `rancher.v3.group_members_get` Get a group member read
- `rancher.v3.group_members_list` List group members read
- `rancher.v3.groups_get` Get a group read
- `rancher.v3.groups_list` List groups read
- `rancher.v3.kontainer_drivers_activate` Activate a Kontainer driver write
- `rancher.v3.kontainer_drivers_create` Create a Kontainer driver write
- `rancher.v3.kontainer_drivers_deactivate` Deactivate a Kontainer driver write
- `rancher.v3.kontainer_drivers_delete` Delete a Kontainer driver destructive
- `rancher.v3.kontainer_drivers_get` Get a Kontainer driver read
- `rancher.v3.kontainer_drivers_list` List Kontainer drivers read
- `rancher.v3.kontainer_drivers_refresh` Refresh Kontainer drivers write
- `rancher.v3.kontainer_drivers_update` Update a Kontainer driver write
- `rancher.v3.node_drivers_activate` Activate a node driver write
- `rancher.v3.node_drivers_create` Create a node driver write
- `rancher.v3.node_drivers_deactivate` Deactivate a node driver write
- `rancher.v3.node_drivers_delete` Delete a node driver destructive
- `rancher.v3.node_drivers_get` Get a node driver read
- `rancher.v3.node_drivers_list` List node drivers read
- `rancher.v3.node_drivers_update` Update a node driver write
- `rancher.v3.nodes_cordon` Cordon a node write
- `rancher.v3.nodes_delete` Delete a node destructive
- `rancher.v3.nodes_drain` Drain a node write
- `rancher.v3.nodes_get` Get a node read
- `rancher.v3.nodes_list` List nodes read
- `rancher.v3.nodes_scaledown` Scale down a node destructive
- `rancher.v3.nodes_stop_drain` Stop draining a node write
- `rancher.v3.nodes_uncordon` Uncordon a node write
- `rancher.v3.nodes_update` Update a node write
- `rancher.v3.oidc_clients_create` Create an OIDC client write
- `rancher.v3.oidc_clients_delete` Delete an OIDC client destructive
- `rancher.v3.oidc_clients_get` Get an OIDC client read
- `rancher.v3.oidc_clients_list` List OIDC clients read
- `rancher.v3.oidc_clients_update` Update an OIDC client write
- `rancher.v3.pod_security_admission_templates_create` Create a pod security admission configuration template write
- `rancher.v3.pod_security_admission_templates_delete` Delete a pod security admission configuration template destructive
- `rancher.v3.pod_security_admission_templates_get` Get a pod security admission configuration template read
- `rancher.v3.pod_security_admission_templates_list` List pod security admission configuration templates read
- `rancher.v3.pod_security_admission_templates_update` Update a pod security admission configuration template write
- `rancher.v3.preferences_create` Create a user preference write
- `rancher.v3.preferences_delete` Delete a user preference destructive
- `rancher.v3.preferences_get` Get a user preference read
- `rancher.v3.preferences_list` List user preferences read
- `rancher.v3.preferences_update` Update a user preference write
- `rancher.v3.principals_get` Get a principal read
- `rancher.v3.principals_list` List principals read
- `rancher.v3.principals_search` Search principals read
- `rancher.v3.project_network_policies_get` Get a project network policy read
- `rancher.v3.project_network_policies_list` List project network policys read
- `rancher.v3.project_role_template_bindings_create` Create a project role template binding destructive
- `rancher.v3.project_role_template_bindings_delete` Delete a project role template binding destructive
- `rancher.v3.project_role_template_bindings_get` Get a project role template binding read
- `rancher.v3.project_role_template_bindings_list` List project role template bindings read
- `rancher.v3.project_role_template_bindings_update` Update a project role template binding write
- `rancher.v3.projects_create` Create a project write
- `rancher.v3.projects_delete` Delete a project destructive
- `rancher.v3.projects_export_yaml` Export a project as YAML read
- `rancher.v3.projects_get` Get a project read
- `rancher.v3.projects_list` List projects read
- `rancher.v3.projects_update` Update a project write
- `rancher.v3.role_templates_create` Create a role template write
- `rancher.v3.role_templates_delete` Delete a role template destructive
- `rancher.v3.role_templates_get` Get a role template read
- `rancher.v3.role_templates_list` List role templates read
- `rancher.v3.role_templates_update` Update a role template write
- `rancher.v3.schemas_get` Get a v3 API schema read
- `rancher.v3.schemas_list` List v3 API schemas read
- `rancher.v3.settings_create` Create a setting write
- `rancher.v3.settings_delete` Delete a setting destructive
- `rancher.v3.settings_get` Get a setting read
- `rancher.v3.settings_list` List settings read
- `rancher.v3.settings_update` Update a setting write
- `rancher.v3.tokens_create` Create an API token write
- `rancher.v3.tokens_delete` Delete an API token destructive
- `rancher.v3.tokens_get` Get an API token read
- `rancher.v3.tokens_list` List API tokens read
- `rancher.v3.user_notifications_get` Get a user notification read
- `rancher.v3.user_notifications_list` List user notifications read
- `rancher.v3.users_change_password` Change the current user's password write
- `rancher.v3.users_create` Create a user write
- `rancher.v3.users_delete` Delete a user destructive
- `rancher.v3.users_get` Get a user read
- `rancher.v3.users_list` List users read
- `rancher.v3.users_me` Get the current user read
- `rancher.v3.users_refresh_all_auth_provider_access` Refresh auth provider access for all users write
- `rancher.v3.users_refresh_auth_provider_access` Refresh a user's auth provider access write
- `rancher.v3.users_set_password` Set a user's password write
- `rancher.v3.users_update` Update a user write

**MGMT 61**

- `rancher.mgmt.cluster_role_template_bindings_create` Create a cluster role template binding destructive
- `rancher.mgmt.cluster_role_template_bindings_delete` Delete a cluster role template binding destructive
- `rancher.mgmt.cluster_role_template_bindings_delete_collection` Delete cluster role template bindings matching a selector destructive
- `rancher.mgmt.cluster_role_template_bindings_get` Get a cluster role template binding read
- `rancher.mgmt.cluster_role_template_bindings_get_status` Get a cluster role template binding's status read
- `rancher.mgmt.cluster_role_template_bindings_list` List cluster role template bindings in a namespace read
- `rancher.mgmt.cluster_role_template_bindings_list_all` List cluster role template bindings across all namespaces read
- `rancher.mgmt.cluster_role_template_bindings_patch` Patch a cluster role template binding write
- `rancher.mgmt.cluster_role_template_bindings_patch_status` Patch a cluster role template binding's status write
- `rancher.mgmt.cluster_role_template_bindings_replace` Replace a cluster role template binding write
- `rancher.mgmt.cluster_role_template_bindings_replace_status` Replace a cluster role template binding's status write
- `rancher.mgmt.global_role_bindings_create` Create a global role binding destructive
- `rancher.mgmt.global_role_bindings_delete` Delete a global role binding destructive
- `rancher.mgmt.global_role_bindings_delete_collection` Delete global role bindings matching a selector destructive
- `rancher.mgmt.global_role_bindings_get` Get a global role binding read
- `rancher.mgmt.global_role_bindings_get_status` Get a global role binding's status read
- `rancher.mgmt.global_role_bindings_list` List global role bindings read
- `rancher.mgmt.global_role_bindings_patch` Patch a global role binding write
- `rancher.mgmt.global_role_bindings_patch_status` Patch a global role binding's status write
- `rancher.mgmt.global_role_bindings_replace` Replace a global role binding write
- `rancher.mgmt.global_role_bindings_replace_status` Replace a global role binding's status write
- `rancher.mgmt.global_roles_create` Create a global role write
- `rancher.mgmt.global_roles_delete` Delete a global role destructive
- `rancher.mgmt.global_roles_delete_collection` Delete global roles matching a selector destructive
- `rancher.mgmt.global_roles_get` Get a global role read
- `rancher.mgmt.global_roles_get_status` Get a global role's status read
- `rancher.mgmt.global_roles_list` List global roles read
- `rancher.mgmt.global_roles_patch` Patch a global role write
- `rancher.mgmt.global_roles_patch_status` Patch a global role's status write
- `rancher.mgmt.global_roles_replace` Replace a global role write
- `rancher.mgmt.global_roles_replace_status` Replace a global role's status write
- `rancher.mgmt.project_role_template_bindings_create` Create a project role template binding destructive
- `rancher.mgmt.project_role_template_bindings_delete` Delete a project role template binding destructive
- `rancher.mgmt.project_role_template_bindings_delete_collection` Delete project role template bindings matching a selector destructive
- `rancher.mgmt.project_role_template_bindings_get` Get a project role template binding read
- `rancher.mgmt.project_role_template_bindings_list` List project role template bindings in a namespace read
- `rancher.mgmt.project_role_template_bindings_list_all` List project role template bindings across all namespaces read
- `rancher.mgmt.project_role_template_bindings_patch` Patch a project role template binding write
- `rancher.mgmt.project_role_template_bindings_replace` Replace a project role template binding write
- `rancher.mgmt.projects_create` Create a project write
- `rancher.mgmt.projects_delete` Delete a project destructive
- `rancher.mgmt.projects_delete_collection` Delete projects matching a selector destructive
- `rancher.mgmt.projects_get` Get a project read
- `rancher.mgmt.projects_list` List projects in a namespace read
- `rancher.mgmt.projects_list_all` List projects across all namespaces read
- `rancher.mgmt.projects_patch` Patch a project write
- `rancher.mgmt.projects_replace` Replace a project write
- `rancher.mgmt.role_templates_create` Create a role template write
- `rancher.mgmt.role_templates_delete` Delete a role template destructive
- `rancher.mgmt.role_templates_delete_collection` Delete role templates matching a selector destructive
- `rancher.mgmt.role_templates_get` Get a role template read
- `rancher.mgmt.role_templates_list` List role templates read
- `rancher.mgmt.role_templates_patch` Patch a role template write
- `rancher.mgmt.role_templates_replace` Replace a role template write
- `rancher.mgmt.users_create` Create a user write
- `rancher.mgmt.users_delete` Delete a user destructive
- `rancher.mgmt.users_delete_collection` Delete users matching a selector destructive
- `rancher.mgmt.users_get` Get a user read
- `rancher.mgmt.users_list` List users read
- `rancher.mgmt.users_patch` Patch a user write
- `rancher.mgmt.users_replace` Replace a user write

**Ext 14**

- `rancher.ext.kubeconfigs_create` Create a kubeconfig write
- `rancher.ext.kubeconfigs_delete` Delete a kubeconfig destructive
- `rancher.ext.kubeconfigs_delete_collection` Delete kubeconfigs matching a selector destructive
- `rancher.ext.kubeconfigs_get` Get a kubeconfig read
- `rancher.ext.kubeconfigs_list` List kubeconfigs read
- `rancher.ext.kubeconfigs_patch` Patch a kubeconfig write
- `rancher.ext.kubeconfigs_replace` Replace a kubeconfig write
- `rancher.ext.tokens_create` Create a token write
- `rancher.ext.tokens_delete` Delete a token destructive
- `rancher.ext.tokens_delete_collection` Delete tokens matching a selector destructive
- `rancher.ext.tokens_get` Get a token read
- `rancher.ext.tokens_list` List tokens read
- `rancher.ext.tokens_patch` Patch a token write
- `rancher.ext.tokens_replace` Replace a token write

**Auditlog 10**

- `rancher.auditlog.audit_policies_create` Create an audit policy write
- `rancher.auditlog.audit_policies_delete` Delete an audit policy destructive
- `rancher.auditlog.audit_policies_delete_collection` Delete audit policies matching a selector destructive
- `rancher.auditlog.audit_policies_get` Get an audit policy read
- `rancher.auditlog.audit_policies_get_status` Get an audit policy's status read
- `rancher.auditlog.audit_policies_list` List audit policies read
- `rancher.auditlog.audit_policies_patch` Patch an audit policy write
- `rancher.auditlog.audit_policies_patch_status` Patch an audit policy's status write
- `rancher.auditlog.audit_policies_replace` Replace an audit policy write
- `rancher.auditlog.audit_policies_replace_status` Replace an audit policy's status write

**Provisioning 8**

- `rancher.provisioning.clusters_create` Create a cluster write
- `rancher.provisioning.clusters_delete` Delete a cluster destructive
- `rancher.provisioning.clusters_delete_collection` Delete clusters matching a selector destructive
- `rancher.provisioning.clusters_get` Get a cluster read
- `rancher.provisioning.clusters_list` List clusters in a namespace read
- `rancher.provisioning.clusters_list_all` List clusters across all namespaces read
- `rancher.provisioning.clusters_patch` Patch a cluster write
- `rancher.provisioning.clusters_replace` Replace a cluster write

Questions

## The SUSE Rancher Manager MCP server, answered.

**Is there an SUSE Rancher Manager MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 232 SUSE Rancher Manager actions across v3, MGMT, ext and auditlog, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SUSE Rancher Manager.

**What do I need to connect SUSE Rancher Manager?**

Rancher API key as one bearer token, `token-xxxxx:secret` (the access key and secret key joined by a colon). Plus your ca cert and your host. The free call account { op: "connections.requirements", service: "rancher" } lists exactly what to paste.

**Can an AI agent delete or change things in SUSE Rancher Manager?**

Only if its key allows it, and only with an explicit confirmation. 48 SUSE Rancher Manager actions are destructive, including delete a user, delete a global role and delete a role template. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my SUSE Rancher Manager API limit?**

actionlake paces every call to the limits in the SUSE Rancher Manager service file: 600 calls a minute per connection. Repeated reads are answered from cache (81 SUSE Rancher Manager actions can be), which never reaches SUSE Rancher Manager.

**What does an SUSE Rancher Manager action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (232 SUSE Rancher Manager actions page). Cache hits, searches, dry runs and calls SUSE Rancher Manager refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which SUSE Rancher Manager API does it cover?**

The Rancher Kubernetes API (RK-API, docs swagger for Rancher 2.12+) and the v3 API at your SUSE Rancher Manager instance's API base URL, which you enter when connecting. It is built from SUSE Rancher Manager's documentation as read on 23 October 2026. 232 actions in 5 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my SUSE Rancher Manager data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SUSE Rancher Manager credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like SUSE Rancher Manager

Shares the most action names with

- [authentik 19](https://actionlake.com/connectors/authentik)
- [NetBox 17](https://actionlake.com/connectors/netbox)
- [Imperva Cloud Application Security 14](https://actionlake.com/connectors/imperva-cloud-application-security)
- [Tactical RMM 14](https://actionlake.com/connectors/tactical-rmm)
- [Commvault Cloud 12](https://actionlake.com/connectors/commvault-cloud)
- [Action1 10](https://actionlake.com/connectors/action1)

Joins with, on shared entities

- [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users)
- [Genesys Cloud CX 3](https://actionlake.com/connectors/genesys-cloud-cx)
- [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud)
- [Cloudflare 3](https://actionlake.com/connectors/cloudflare)
- [Canvas LMS 3](https://actionlake.com/connectors/canvas-lms)
- [D2L Brightspace 3](https://actionlake.com/connectors/d2l-brightspace)

Browse

- [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by SUSE Rancher Manager; the name is the vendor's own. Counts are from the SUSE Rancher Manager service file, version 1.0.0.

## Give your agent SUSE Rancher Manager today.

[Connect SUSE Rancher Manager free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/suse-rancher-manager
More: https://actionlake.com/llms.txt
