List the Scaleway products this server exposes and whether each is enabled.

List compute instances (servers) in a zone.

Get details of a single compute instance by ID.

Create a compute instance.

The instance is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

Perform a power or lifecycle action on an instance.

List instance images available in a zone.

List instance volumes in a zone.

List Elastic Metal servers in a zone.

Get details of a single Elastic Metal server by ID.

List available Elastic Metal offers (server hardware configurations).

Create (order) an Elastic Metal server.

The server is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

Start (power on) an Elastic Metal server.

Stop (power off) an Elastic Metal server.

Reboot an Elastic Metal server.

List Kubernetes (Kapsule) clusters in a region.

Get details of a single Kubernetes cluster by ID.

Create a Kubernetes (Kapsule) cluster.

The cluster is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server. Pools are added separately once the cluster exists.

List the Kubernetes versions available for new clusters in a region.

List the node pools of a Kubernetes cluster.

Get the kubeconfig file for a Kubernetes cluster.

Returns the Scaleway file descriptor whose content is the base64-encoded kubeconfig YAML.

Sensitive: the kubeconfig contains cluster-admin credentials. Only expose the k8s product to agents you trust with full control of the cluster.

List Serverless Containers namespaces in a region.

Get details of a single namespace by ID.

Create a Serverless Containers namespace.

The namespace is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List containers within a namespace.

Get details of a single container by ID.

Create a container within a namespace.

The container is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

Deploy (start rolling out) a container.

List Serverless Functions namespaces in a region.

Get details of a single namespace by ID.

Create a Serverless Functions namespace.

The namespace is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List functions within a namespace.

Get details of a single function by ID.

List function runtimes available in a region.

List container registry namespaces in a region.

Get details of a single registry namespace by ID.

Create a container registry namespace.

The Container Registry API does not support resource-level tags, so unlike other products this namespace is not marked with the managed tag.

List container images, optionally scoped to a namespace.

Get details of a single container image by ID.

List the tags of a container image.

List Object Storage buckets in a region.

List objects in a bucket (one page).

S3 returns at most 1000 objects per page. When the result is truncated, is_truncated is true and next_continuation_token can be passed back in to fetch the next page.

Get metadata for a single object (HEAD request).

Create a bucket and tag it created_by=scaleway-mcp.

The managed tag lets this server safely delete the bucket later.

Upload a text object to a bucket.

Generate a temporary presigned GET URL for an object.

List block volumes in a zone.

Get details of a single block volume by ID.

Create an empty block volume.

The volume is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List block snapshots in a zone.

Create a snapshot of a block volume.

The snapshot is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List Managed Database instances in a region.

Get details of a single Managed Database instance by ID.

Create a Managed Database instance.

The instance is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List logical databases within a Managed Database instance.

List users of a Managed Database instance.

Create a manual backup of a database in a Managed Database instance.

List Managed Redis clusters in a zone.

Get details of a single Managed Redis cluster by ID.

Create a Managed Redis cluster.

The cluster is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List Redis node types available in a zone.

List Virtual Private Clouds in a region.

Get details of a single Virtual Private Cloud by ID.

Create a Virtual Private Cloud.

The VPC is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List Private Networks in a region.

Get details of a single Private Network by ID.

Create a Private Network.

The Private Network is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List load balancers in a zone.

Get details of a single load balancer by ID.

Create a load balancer.

The load balancer is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List the backends of a load balancer.

List the frontends of a load balancer.

List load balancer flexible IPs in a zone.

List Public Gateways in a zone.

Get details of a single Public Gateway by ID.

Create a Public Gateway.

The gateway is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

List gateway-to-Private-Network attachments (gateway networks) in a zone.

List the DNS zones (subdomains) managed under a domain.

This is a global service, so no region or zone applies.

List the DNS records in a DNS zone.

This is a global service, so no region or zone applies.

List the domain names registered in the account (registrar).

This is a global service, so no region or zone applies.

Apply a changeset to the records of a DNS zone.

Records have no tags, so nothing created here carries the managed marker.

Each entry in changes is a Scaleway record-change object with exactly one of the keys add, set, delete or clear. For example::

[{"add": {"records": [
    {"name": "www", "type": "A", "data": "1.2.3.4", "ttl": 3600}
]}}]

List flexible IPs in a zone.

Get details of a single flexible IP by ID.

Create a flexible IP.

The IP is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server.

Attach a flexible IP to an Elastic Metal server.

Detach a flexible IP from its server.

List IAM users in an organization.

List IAM applications in an organization.

List IAM groups in an organization.

List IAM policies in an organization.

List IAM API keys.

List IAM SSH keys.

Create an IAM application.

Unlike compute resources, this server does not inject a managed tag onto IAM applications; any tags you pass are stored verbatim. As a result, delete_application cannot recognise applications as server-created and requires SCW_ALLOW_DELETE_UNTAGGED=true to remove them.

Create an IAM API key for an application or a user.

Sensitive and persistent: this mints long-lived credentials that outlive the session and are not removed by disabling deletes. The secret key is returned only once in the response. Only expose the iam product to trusted agents.

Exactly one of application_id or user_id identifies the bearer.

API keys carry no tags, so delete_api_key requires SCW_ALLOW_DELETE_UNTAGGED=true to remove them.

List secrets in a region.

Only secrets that are not scheduled for deletion are returned.

Get metadata of a single secret by ID.

This returns metadata only (name, tags, version count, ...), never the stored secret value. Use access_secret_version to read a value.

Create a secret.

The secret is tagged created_by=scaleway-mcp so it can later be identified and safely deleted by this server. Creating a secret only provisions the container; add a value with create_secret_version.

List the versions of a secret.

Returns version metadata (revision, status, timestamps) only, never the stored values.

Access the value stored in a secret's version.

WARNING: this returns SENSITIVE DATA. The data field of the result is the base64-encoded secret payload. Handle and log the result with care.

Add a new version (value) to an existing secret.

List Cockpit data sources (metrics, logs, traces) in a region.