# Equinix Metal MCP for AI Agents AI Agent Connect > Equinix Metal MCP. Manage your Equinix Metal infrastructure access, API keys, and account settings directly through your AI agent. Handle project invitations and email configurations without switching tabs. Perfect for DevOps and security teams who need to rotate keys or manage team access quickly via natural language. ## Overview - **Category:** ship-it - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_PCLKoMBRiDuqocULBdhP3vVp3zouG0zUhlY0D0XK/ai-agent-connect - **Tags:** bare-metal, infrastructure-as-code, api-management, server-provisioning, cloud-computing, access-control ## Description This Equinix Metal MCP lets you manage your bare-metal infrastructure access and account settings directly through your AI agent. It handles the tedious administrative tasks like API key rotation, email configuration, and project invitations without making you switch tabs. Instead of hunting through a web portal to find the right security page, you just tell your agent what needs to happen. You can spin up new project-level keys for specific CI/CD pipelines, swap out old user keys that have reached their expiration, or clean up old email addresses from your account to keep your team directory accurate. It also handles the friction of project invitations, letting you see exactly who is trying to join your environment and whether you want to grant them access. You no longer have to copy and paste long strings between different tabs or worry about missing a step in a multi-page setup. By connecting this to the Vinkius catalog, you get a centralized way to manage your Equinix Metal permissions alongside your other infrastructure tools. It turns a series of manual, click-heavy tasks into a few quick commands. You get to stay focused on actually deploying workloads and scaling your hardware rather than spending your time on the manual overhead of managing the keys that let you do it. This means faster response times when a key needs rotating and less friction when onboarding new team members to your bare-metal projects. ## Tools ### create_email Add a new email address to your account. This keeps your team's contact info current. ### create_project_api_key Generate a new API key for a specific project. This helps isolate permissions for different workloads. ### create_user_api_key Create a unique API key for a specific user. It's the best way to manage individual access levels. ### decline_invitation Reject a pending project invitation. Use this to keep your project members private and controlled. ### delete_api_key Remove an old or compromised API key. This is your first step in a security cleanup. ### delete_email Remove an old email address from your account. Use this to keep your contact list clean. ### delete_user_api_key Delete a specific user's API key. Use this when offboarding team members or rotating credentials. ### get_invitation View the details of a pending invitation. Check who is asking for access before you hit accept. ### update_email Update your account's email address or set a new default. Use this when your team's primary contact changes. ## Prompt Examples **Prompt:** ``` Create a read-only key for our new 'staging-deploy' project. ``` **Response:** ``` I've created a project API key for 'staging-deploy' with read-only permissions. The key ID is `metal-key-8821`. ``` **Prompt:** ``` Who's trying to join the production project? ``` **Response:** ``` You have one pending invitation: **User: dev-team-lead** wants to join the 'Production-Cluster' project. It was sent 2 hours ago. ``` **Prompt:** ``` Update my account email to admin@newcorp.com. ``` **Response:** ``` I've updated your primary account email to admin@newcorp.com. You'll receive a confirmation email at that address shortly. ``` ## Capabilities ### Create project-specific API keys Generate new project-level keys with custom descriptions to isolate access for different workloads. ### Rotate user API keys Delete old user keys and generate fresh ones to keep your credentials secure. ### Manage account emails Add or update the primary contact email for your account without leaving your chat. ### Handle project invitations View pending invites and decline access requests from unauthorized users. ### Set read-only permissions Create keys that only have read access to limit the blast radius of your CI/CD tools. ## Use Cases ### Rotating keys for a CI/CD runner A dev realizes a key was leaked and needs to swap it. They ask the agent to delete the old one and make a new read-only one. ### Offboarding a contractor An admin needs to remove a contractor's access. They tell the agent to delete the user's specific API key. ### Updating team contact info A company changes its primary dev email. The admin asks the agent to update the default email in Equinix Metal. ### Auditing pending invites A lead wants to see who is trying to join the production project. They ask the agent to list invitation details. ## Benefits - Stop manual key rotation: Use delete_api_key and create_user_api_key to refresh credentials in seconds. - Secure CI/CD pipelines: Create project-specific keys with create_project_api_key to limit access to only what's needed. - Faster team onboarding: Use get_invitation and decline_invitation to manage project access without leaving your chat. - Clean contact management: Keep your account current by using create_email and update_email to sync with your team's directory. - Reduced context switching: Handle all Equinix Metal admin tasks within your AI client instead of the web console. ## How It Works The bottom line is you get a natural language interface for managing your Equinix Metal account permissions and access. 1. Subscribe to the Equinix Metal MCP via the Vinkius catalog. 2. Enter your Equinix Metal API Key into your AI client configuration. 3. Ask your agent to rotate keys, update emails, or check invitations in plain English. ## Frequently Asked Questions **Can I use Equinix Metal MCP to provision new servers?** No, this Connector manages access and keys, not hardware provisioning. **How do I rotate my API keys with Equinix Metal MCP?** Just ask your agent to delete the old key and create a new one. **Can I manage my team's email addresses?** Yes, you can add, update, or remove emails from your account. **Is Equinix Metal MCP safe for production keys?** Yes, it allows you to create project-specific keys with limited permissions. **What happens if I get a suspicious invitation?** You can use the tool to view the details and then decline it immediately. **Does Equinix Metal MCP work with Claude?** Yes, it works with any MCP-compatible client like Claude, Cursor, or Windsurf. **Can I create a read-only API key for a specific project?** Yes! Use the `create_project_api_key` tool. You can specify the `project_id`, a description, and set the `read_only` flag to true to ensure the key has restricted permissions. **How do I manage the email addresses associated with my account?** You can use `create_email` to add a new address, `update_email` to change settings like the default status, and `delete_email` to remove an address from your profile. **Is it possible to view and decline project invitations via AI?** Yes. Use `get_invitation` to see the details of a pending invite and `decline_invitation` if you do not wish to join that specific project.