Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Pulumi Insights (BYOK) — connector documentation

  • MCP endpoint: https://byok-pulumi-insights.connectorbay.com/mcp
  • REST API: POST https://byok-pulumi-insights.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-pulumi-insights.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Pulumi Insights Pulumi access token (pul-...), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-pulumi-insights.connectorbay.com/health · Tool schemas: https://byok-pulumi-insights.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-pulumi-insights · agent@connectorbay.com

What Pulumi Insights (BYOK) is for

Pulumi Insights (BYOK) lets an AI assistant read your own Pulumi Insights data through the Pulumi Insights API with a key you supply (Pulumi access token (pul-...)). Read-only: 9 tools (list_insights_accounts, get_insights_account, get_insights_scan_settings, list_insights_scans, get_insights_scan, list_insights_account_policy_packs, get_insights_account_tags, get_resources_under_management, get_discovered_resources_usage). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.pulumi.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Pulumi Insights. Pulumi Insights and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which cloud accounts are connected to Pulumi Insights in acme?"
  • "When did the aws-prod Insights account last finish a scan?"
  • "How often does the aws-prod Insights account scan?"
  • "Did the recent scans of the aws-prod Insights account succeed?"
  • "What was the result of Insights scan s1 for aws-prod?"
  • "Which policy packs scan the aws-prod Insights account?"

What it does

  • list_insights_accounts: List the cloud accounts connected to Pulumi Insights with provider and whether scheduled discovery is on. Filter by parent account.
  • get_insights_account: Get one Insights account: provider, whether scheduled scans are on and the status of its last discovery scan.
  • get_insights_scan_settings: Get the scheduled discovery scan settings of an Insights account: cron schedule, paused flag and concurrency.
  • list_insights_scans: List the discovery scan history of an Insights account with status, resource count and start and finish times.
  • get_insights_scan: Get one Insights discovery scan: status, resource count and timestamps.
  • list_insights_account_policy_packs: List the policy packs that analyze resources in an Insights account, with version and version tag.
  • get_insights_account_tags: Get the tags set on an Insights account as a name to value map.
  • get_resources_under_management: Get resources under management (RUM) and resource hours (Pulumi credits) per time bucket for an organization.
  • get_discovered_resources_usage: Get discovered resources (Insights) per time bucket for an organization.

BYOK key

You bring your own Pulumi Insights Pulumi access token (pul-...) (https://app.pulumi.com/account/tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.pulumi.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Pulumi Insights API (api.pulumi.com) with a BYOK key; documentation: https://www.pulumi.com/docs/reference/cloud-rest-api/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Pulumi Insights. Pulumi Insights and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Pulumi Insights account.

Built for: Worldwide. Languages: English.