# CockroachDB Cloud MCP for AI Agents MCP

> CockroachDB Cloud MCP lets you manage your distributed SQL infrastructure entirely through natural conversation with your AI agent. You can list every cluster, check node health, audit network rules, and review management operations without ever opening the cloud console. It gives you full control over globally-scalable databases directly from your chat interface.

## Overview
- **Category:** fort-knox
- **Price:** Free
- **Tags:** distributed-sql, cluster-management, high-availability, scalability, database-monitoring, cloud-native

## Description

Connecting your CockroachDB Cloud account to an AI client means taking back time spent clicking through complex database dashboards. Instead of navigating provider consoles to check cluster status or network rules, you just talk to your agent. You can ask it to list all clusters across regions or pull up the details for specific nodes to see if they're running correctly. Need to verify who has access? Your agent pulls up user profile data instantly. If you need to audit recent changes, simply request a review of cluster operations. This MCP handles everything from checking encryption key metadata to reviewing network allowlist rules—all in plain language. For the full scope of connectivity, check out the Vinkius catalog; it connects your AI client to thousands of services like this one. It's about getting answers and taking actions without ever leaving your chat window.

## Tools

### get_cluster_cloud_details
Retrieves detailed information about a single specific cluster you own.

### get_my_cockroach_profile
Pulls up basic details about your organization and user account settings.

### list_network_allowlist
Provides a list of current network allowlist rules for a specified cluster.

### list_encryption_keys
Lists all Customer Managed Keys (CMKs) used to encrypt your database data at the cluster level.

### list_supported_cloud_providers
Returns a list of cloud providers that CockroachDB Cloud supports in various regions.

### list_cockroach_clusters
Generates an exhaustive list containing all your existing CockroachDB Cloud clusters.

### list_cluster_nodes
Shows a detailed list of every node that belongs to a specific cluster, including its status.

### list_cluster_operations
Lists recent management operations performed on a cluster, such as scaling or version upgrades.

## Prompt Examples

**Prompt:** 
```
What are all my active clusters and what region are they in?
```

**Response:** 
```
**Cluster Inventory Report**

I found 4 distinct CockroachDB Cloud clusters:

*   **Prod-US-East:** AWS, us-east-1. Status: **RUNNING**. Last check: 2 minutes ago.
*   **Dev-Europe:** GCP, europe-west1. Status: **ACTIVE**. Last check: 5 minutes ago.
*   **Sandbox-Asia:** Azure, eastasia. Status: **STANDBY**. Last check: 1 hour ago.
*   **Global-Main:** AWS, us-east-1. Status: **RUNNING**. Last check: 2 minutes ago.
```

**Prompt:** 
```
Show me the last three changes made to the Global-Main cluster.
```

**Response:** 
```
**Cluster Operations Audit: Global-Main**

Here are the most recent management operations:

1.  **Type:** `CLUSTER_SCALE` | **Details:** Increased node count from 5 to 7. | **Time:** Oct 24, 2023 @ 10:00 AM EST.
2.  **Type:** `VERSION_UPDATE` | **Details:** Minor version upgrade applied (v23.1 to v23.2). | **Time:** Oct 24, 2023 @ 8:30 AM EST.
3.  **Type:** `NETWORK_RULE_ADD` | **Details:** Added rule for IP range 192.168.1.0/24. | **Time:** Oct 24, 2023 @ 7:00 AM EST.
```

**Prompt:** 
```
What are all the supported providers and my user profile?
```

**Response:** 
```
**Cloud Support & User Profile**

*Supported Providers:* AWS, GCP, Azure, Oracle Cloud.

**Your Account Details:**
*   Organization: GlobalTech Solutions Inc.
*   User ID: jsmith@globaltech.com
*   Role: Senior DBA
*   Last Login: Today.
```

## Capabilities

### Get Cluster Details
Retrieve detailed information for any specific CockroachDB cluster.

### View User Profile
Fetch basic details about your authenticated user and organization.

### Audit Network Rules
List all network allowlist rules for a specific cluster to check connectivity security.

### Check Encryption Keys
List the Customer Managed Keys (CMKs) used to encrypt your cluster data.

### Identify Cloud Providers
See which cloud providers CockroachDB supports globally.

### List All Clusters
Get a complete list of every CockroachDB cluster you manage.

### Monitor Cluster Nodes
View all individual nodes within a specified cluster to assess their health and status.

## Use Cases

### A new team member needs a cluster overview
Instead of spending an hour walking through the provider console to find all active databases, the engineer asks their agent to `list_cockroach_clusters`. The response immediately gives them a comprehensive list of every environment (Dev, Prod, Sandbox) and its region.

### Investigating unusual network access
The security team suspects unauthorized external connections. They ask the agent to `list_network_allowlist` for the production cluster. The agent returns a concise list of IP ranges, allowing them to verify if the suspicious activity originated from an unlisted source.

### Post-incident review of database changes
After performance issues are reported, the DBA needs to know what changed. They use `list_cluster_operations` to pull up a timeline of recent management tasks, determining if a specific scaling event or upgrade was responsible.

### Verifying data compliance in different regions
A platform team needs to know what encryption methods are used across all deployments. They run the key listing tool (`list_encryption_keys`) and receive a clear inventory of CMKs, ensuring every cluster meets regulatory standards.

## Benefits

- Check cluster health instantly: Use the `list_cluster_nodes` tool to assess node status without logging into a dashboard.
- Audit security rules easily: The `list_network_allowlist` tool lets you check connectivity rules in seconds, critical for security teams.
- Track changes accurately: Running `list_cluster_operations` provides an audit trail of every scaling or upgrade action taken on your database.
- Manage secrets without hassle: You can use `list_encryption_keys` to quickly view all Customer Managed Keys used for data encryption.
- Understand scale: The ability to run `list_cockroach_clusters` gives you an immediate, comprehensive overview of your entire global footprint.

## How It Works

The bottom line is that you manage complex, distributed databases using simple conversation and no manual console clicks.

1. Subscribe to the CockroachDB Cloud MCP in Vinkius and provide your API Secret Key.
2. Your AI client securely connects using the provided credentials, establishing a direct line to your database infrastructure.
3. You simply ask your agent questions—like 'Show me all clusters' or 'What are the current network rules?'—and it delivers structured data instantly.

## Frequently Asked Questions

**How does the CockroachDB Cloud MCP help me monitor cluster nodes?**
You ask your agent to list all nodes for a specific cluster. It gives you a real-time status report on every single node, telling you if they are healthy or struggling without opening any dashboards.

**Can I use the CockroachDB Cloud MCP to check my network security rules?**
Yes. You can run a command via your agent that lists all network allowlist rules for a cluster, letting you audit connectivity from one place in your chat window.

**Is the CockroachDB Cloud MCP better than checking the cloud console?**
It's much faster. Instead of switching between AWS and GCP consoles to find details, this MCP aggregates all that information into a single, conversational response for you.

**What kinds of operational history can I check with CockroachDB Cloud MCP?**
You can pull up the full audit trail. This includes records of cluster scaling events, version upgrades, and any other management task that occurred on your database.

**Does this help me manage encryption keys in CockroachDB Cloud?**
Absolutely. You can use the MCP to list all Customer Managed Keys (CMKs) used across your clusters, which is vital for compliance and security audits.