• NETWORK
  • KEYS
  • RISK
  • HUMAN

How to audit cluster security with your AI

Connect CockroachDB Cloud to your AI client once. After that, you can check your security settings using plain English.

Ask AI about this page

Short answer

How can I audit my cluster security with AI?

Your AI client pulls network allowlists and encryption key details directly from your CockroachDB Cloud account. You'll see exactly what's permitted and what keys are active. This breakdown shows how to find those details.

Security audit outcomes.

What you'll find.

The AI pulls specific configuration data to help you spot risks.

NETWORK

Check access control

The AI lists every IP address in your allowlist. You can see if any unexpected ranges have access to your cluster.

KEYS

Verify encryption

Get a clear view of your current encryption keys. This confirms your data is protected by the right keys.

RISK

Identify gaps

The AI compares your settings against your questions. It helps you find missing keys or overly broad network rules.

HUMAN

Fixing issues

The AI finds the problems, but you have to log in to the CockroachDB Cloud console to actually change any settings.

The workflow

What your AI does when the request arrives.

The AI acts as a bridge between your chat and your database configuration.

  1. Pull network rules

    The AI retrieves the current list of permitted IP addresses and CIDR blocks.

    list_network_allowlist

  2. Check key status

    The AI pulls metadata and status for your encryption keys.

    list_encryption_keys

  3. Compare settings

    The AI uses the retrieved data to answer your specific security questions.

    list_network_allowlistlist_encryption_keys

  4. Report findings

    The AI summarizes the network and key data into a readable format.

    list_network_allowlist

Try it

Copy these to start.

Paste these into your chat to begin.

Starting points

These are opening lines. Replace the cluster names with your actual CockroachDB Cloud cluster IDs.

CockroachDB Cloud Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_lXJMfvTxkQ8roFLANT9KKH5ZXboI6KmNc6teoSqs/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — CockroachDB Cloud capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "cockroachdb-cloud-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_lXJMfvTxkQ8roFLANT9KKH5ZXboI6KmNc6teoSqs/mcp"
    }
  }
}
Copy into chat04

  • Show me the network allowlist for my production-cluster-123.

  • List all encryption keys for my cluster named data-cluster.

  • Are there any wide-open IP ranges in my allowlist for cluster-abc?

  • Check the status of my encryption keys for the primary cluster.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect CockroachDB Cloud once, then ask.

Connect your account via the link below. Your credentials stay encrypted on our side, and you can start auditing immediately.

Connect CockroachDB Cloud to your AI

FAQ

How this task behaves.

  • 01

    Can the AI change my network allowlists?

    No. The AI can only read your current settings. You must make all configuration changes manually in the CockroachDB Cloud console.

  • 02

    Can the AI rotate my encryption keys?

    No. The AI can list your keys and their status, but it cannot perform any write operations or key rotations.

  • 03

    Does the AI see my actual database data?

    No. This MCP only accesses cluster configuration and security metadata, not the rows or tables inside your database.

  • 04

    Can I delete an allowlist entry through the chat?

    No. The tools only allow the AI to list existing allowlists. You must use the CockroachDB Cloud console to delete or add entries.

  • 05

    How does the AI know which cluster to check?

    You tell the AI which cluster to look at in your prompt, and it uses that name to pull the right data.

  • More questions about CockroachDB Cloud? The Connector page answers them. See everything the CockroachDB Cloud Connector can do

Connect CockroachDB Cloud to Claude, Cursor, ChatGPT & more