Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cockroach Org Access (BYOK) — connector documentation

  • MCP endpoint: https://byok-cockroach-org-iam.connectorbay.com/mcp
  • REST API: POST https://byok-cockroach-org-iam.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cockroach-org-iam.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cockroach Org Access service account API key secret, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cockroach-org-iam.connectorbay.com/health · Tool schemas: https://byok-cockroach-org-iam.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cockroach-org-iam · agent@connectorbay.com

What Cockroach Org Access (BYOK) is for

Cockroach Org Access (BYOK) lets an AI assistant read your own Cockroach Org Access data through the Cockroach Org Access API with a key you supply (service account API key secret). Read-only: 10 tools (list_api_keys, get_api_key, list_service_accounts, get_service_account, list_folders, get_folder, list_jwt_issuers, get_jwt_issuer, list_workspaces, get_workspace). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to cockroachlabs.cloud. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cockroach Org Access. Cockroach Org Access and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which API keys exist for my CockroachDB Cloud service accounts?"
  • "Who owns CockroachDB API key k1?"
  • "Which service accounts does my CockroachDB Cloud organization have and what roles do they hold?"
  • "What roles does CockroachDB service account sa1 hold?"
  • "Which folders organize my CockroachDB Cloud clusters?"
  • "Show the CockroachDB Cloud folder f1."

What it does

  • list_api_keys: List the organization's API keys with id, name, owning service account and creation time. Key secrets are never part of the answer.
  • get_api_key: Get one API key's metadata by id: name, owning service account and creation time. The secret is not returned.
  • list_service_accounts: List service accounts with description, creator, role grants (direct and from groups) and creation time.
  • get_service_account: Get one service account by id: description, creator, role grants and creation time.
  • list_folders: List folders of the organization with name, parent, path, labels and resource type. Can filter by absolute folder path.
  • get_folder: Get one folder by id: name, parent, full path, labels and resource type.
  • list_jwt_issuers: List the JWT issuers trusted for single sign-on to CockroachDB Cloud with issuer URL, audience, claim and identity mapping. Key sets are not returned.
  • get_jwt_issuer: Get one JWT issuer by id: issuer URL, audience, claim and identity mapping. The key set is not returned.
  • list_workspaces: List virtual cluster workspaces with cloud provider, regions, default CPU burst limit and dates.
  • get_workspace: Get one virtual cluster workspace by id: cloud provider, regions, default CPU burst limit and dates.

BYOK key

You bring your own Cockroach Org Access service account API key secret (https://www.cockroachlabs.com/docs/cockroachcloud/managing-access). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to cockroachlabs.cloud over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cockroach Org Access API (cockroachlabs.cloud) with a BYOK key; documentation: https://www.cockroachlabs.com/docs/cockroachcloud/cloud-api. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cockroach Org Access. Cockroach Org Access and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cockroach Org Access account.

Built for: Worldwide. Languages: English.