Integration

Pulumi Cloud integration

Pulumi Cloud is the managed backend of Pulumi infrastructure as code. List and inspect stacks, their update history, resources, tags and stack references; start, schedule, cancel and pause Pulumi Deployments runs (preview, update, refresh, destroy, drift detection, TTL); manage organization members, teams, roles, webhooks, policy groups and services; work with change requests, Pulumi ESC environments (metadata, revisions, tags, clones, secret rotation), registry packages and templates, Insights cloud accounts and scans, and Neo agent tasks. Not exposed: the CLI's internal update protocol (checkpoints, journal and engine event recording), value encryption and decryption, routes that open or decrypt ESC environment values or return environment YAML, stack state export and import, stack outputs, deployment logs and settings, access token and cloud setup routes, audit logs, SAML, OIDC, customer-managed keys and invites. Resource inputs and outputs, environment variables, webhook URLs and secrets, and email addresses are left out of every response. Authentication is a Pulumi access token (personal, team or organization) sent as Authorization: token <value>; create one under Access Tokens in Pulumi Cloud. Self-hosted Pulumi Cloud is not supported by this integration (fixed host api.pulumi.com).

Connect Pulumi Cloud How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Pulumi Cloud.Built from the 136 Pulumi Cloud tools below, on the connection you add once.

What you can do with Pulumi Cloud

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Hook, 8 operations

create_organization_webhookCreate organization webhookPOSTCreates an organization webhook. Pulumi POSTs stack, deployment, drift and policy events to payloadUrl. The optional secret signs deliveries (Pulumi-Webhook-Signature, HMAC-SHA256); Pulumi never returns it.
create_stack_webhookCreate stack webhookPOSTCreates a webhook on a stack. Pulumi POSTs event payloads (raw JSON, slack, ms_teams or pulumi_deployments format) to payloadUrl. The optional secret signs deliveries (Pulumi-Webhook-Signature, HMAC-SHA256); Pulumi never returns it.
delete_organization_webhookDelete organization webhookDELETEDeletes an organization webhook; it stops receiving event deliveries. Cannot be undone.
delete_stack_webhookDelete stack webhookDELETEDeletes a webhook from a stack; it stops receiving deliveries.
get_organization_webhookGet organization webhookGETReturns the configuration of a specific organization-level webhook, including its name, destination URL, format (generic JSON, Slack, or Microsoft Teams), active status.
get_stack_webhookGet stack webhookGETReturns the details of a single webhook identified by its name, including its configuration, filters, groups, and active status. Returns 404 if the webhook does not exist.
list_organization_webhooksList organization webhooksGETReturns all webhooks configured at the organization level.
list_stack_webhooksList stack webhooksGETReturns all webhooks configured for the specified stack. Each webhook in the response includes its name, display name, payload URL, format, filters, and active status.

Tag, 7 operations

add_stack_tagAdd stack tagPOSTAdds a tag (name and value) to a stack. Fails if the tag already exists; use update_stack_tag to change its value.
create_environment_revision_tagCreate environment revision tagPOSTCreates a new revision tag for a Pulumi ESC environment. Revision tags are named references that point to specific revision numbers, similar to Git tags.
create_environment_tagCreate environment tagPOSTAdds a new user-defined tag to a Pulumi ESC environment.
delete_environment_tagDelete environment tagDELETERemoves a user-defined tag from a Pulumi ESC environment. The tag is identified by its name in the URL path. Returns 204 on success with no response body.
delete_stack_tagDelete stack tagDELETEDeletes one tag from a stack.
list_environment_revision_tagsList environment revision tagsGETReturns a paginated list of revision tags for a Pulumi ESC environment. Revision tags are named references pointing to specific revision numbers (e.g., 'latest', 'prod', 'stable').
list_environment_tagsList environment tagsGETReturns a paginated list of user-defined tags for a Pulumi ESC environment. Tags are key-value pairs used for organizing and categorizing environments.

Schedule, 6 operations

create_deployment_scheduleCreate deployment schedulePOSTSchedules a Pulumi Deployments run: set exactly one of scheduleCron (recurring) or scheduleOnce (ISO 8601 time), and request (operation and options). When it fires it runs that operation for real.
create_drift_scheduleCreate drift schedulePOSTCreates a drift detection schedule on a stack (scheduleCron). With autoRemediate=true each detected drift triggers a real update that changes infrastructure back to the program's state.
create_ttl_scheduleCreate ttl schedulePOSTSets a time-to-live on a stack: at timestamp Pulumi Deployments DESTROYS all of the stack's cloud resources (and deletes the stack if deleteAfterDestroy=true).
delete_deployment_scheduleDelete deployment scheduleDELETEDeletes a scheduled action from a stack. Cannot be undone.
get_deployment_scheduleGet deployment scheduleGETRetrieves the full configuration and metadata for a specific scheduled deployment action.
list_deployment_schedulesList deployment schedulesGETLists the scheduled actions of a stack (custom deployment, drift detection and TTL schedules) with cron or one-time timing and next run.

Policygroup, 5 operations

create_policy_groupCreate policy groupPOSTCreates a policy group: a set of stacks or Insights accounts on which chosen policy packs are enforced. Add stacks and packs afterwards with update_policy_group.
delete_policy_groupDelete policy groupDELETEDeletes a policy group; its policy packs stop being enforced on its stacks.
get_policy_groupGet policy groupGETReturns the details of a specific Policy Group, including the list of Policy Packs applied to it and their enforcement levels (advisory, mandatory, or disabled).
list_policy_groupsList policy groupsGETReturns a list of all Policy Groups for the organization.
list_stack_policy_groupsList stack policy groupsGETReturns the list of policy groups that include the specified stack. Policy groups define which policy packs are enforced on a set of stacks.

Team, 5 operations

delete_teamDelete teamDELETEDeletes a team. Its stack and environment permissions are revoked, so members lose any access granted only through it.
get_teamGet teamGETRetrieves detailed information about a specific team within an organization.
list_organization_member_teamsList organization member teamsGETLists the teams a member belongs to in the organization.
list_stack_teamsList stack teamsGETLists all teams within the organization that have been granted access to the specified stack.
list_teamsList teamsGETRetrieves all teams within an organization. Teams provide a centralized way to manage stack access permissions for groups of users.

Version, 5 operations

get_cli_versionGet cli versionGETReturns version information about the Pulumi CLI: the latest and oldest recommended versions.
get_policy_pack_versionGet policy pack versionGETReturns the metadata and list of individual policies for a specific version of a Policy Pack.
get_registry_package_versionGet registry package versionGETRetrieves metadata for a specific version of a registry package. The package is identified by its source, publisher organization, and name.
get_registry_template_versionGet registry template versionGETRetrieves metadata for a specific version of a registry template.
list_environment_revisionsList environment revisionsGETReturns a paginated list of revisions for a Pulumi ESC environment.

Deployment, 4 operations

create_deploymentCreate deploymentPOSTStarts a Pulumi Deployments run. operation=update, destroy or remediate-drift CHANGES REAL CLOUD INFRASTRUCTURE; preview and detect-drift only plan; refresh rewrites recorded state. Follow the id with get_deployment.
get_deploymentGet deploymentGETReturns one Pulumi Deployments run: status, operation, jobs and steps, source revision and who requested it. Environment variables of the run are not returned.
list_org_deploymentsList org deploymentsGETReturns a paginated list of all Pulumi Deployments executions across an organization, filtered to only include deployments for stacks the requesting user has access to.
list_stack_deploymentsList stack deploymentsGETReturns a paginated list of Pulumi Deployments executions for a specific stack.

Environment, 4 operations

create_environmentCreate environmentPOSTCreates an empty Pulumi ESC environment (project and name). Its YAML definition is edited in Pulumi Cloud or with the esc CLI.
delete_environmentDelete environmentDELETEDeletes an ESC environment with its revisions and tags. Blocked when deletion protection is on; can be restored within the retention window with restore_environment.
list_all_environmentsList all environmentsGETReturns a paginated list of all Pulumi ESC environments accessible to the authenticated user across all organizations they belong to.
list_environmentsList environmentsGETReturns a paginated list of all Pulumi ESC environments within a specific organization. Each entry includes the project, environment name, and creation/modification timestamps.

Service, 4 operations

create_serviceCreate servicePOSTCreates a service, a Pulumi Cloud grouping of stacks, environments and other items under shared metadata.
delete_serviceDelete serviceDELETEDeletes a service (the grouping and its metadata). The stacks and environments it grouped are not deleted.
get_serviceGet serviceGETReturns the details of a specific service, including its name, owner, description, members, and the stacks, environments, and other items it groups together.
list_servicesList servicesGETReturns the services in an organization that the authenticated user has access to.

Stack, 4 operations

create_stackCreate stackPOSTCreates a new, empty stack in a project (the project is created if it does not exist). Pass stackName; tags, teams and config are optional. Creates a real stack record in Pulumi Cloud.
delete_stackDelete stackDELETEDeletes a stack from Pulumi Cloud. Fails while the stack still manages resources unless force=true, which removes the stack record and leaves its cloud resources running unmanaged. Cannot be undone from this tool.
get_stackGet stackGETRetrieves detailed information about a specific stack: its organization, project, and stack name, the current version number, all associated tags.
list_stacksList stacksGETLists all stacks accessible to the authenticated user. Results can be filtered by organization, project, and stack tags (tagName/tagValue).

Update, 4 operations

get_stack_updateGet stack updateGETReturns detailed information about a specific stack update identified by its version number.
get_update_statusGet update statusGETReturns the status of one update (pulumi up) by its update id: not started, requested, running, failed, succeeded or cancelled. The update's console output is not returned.
list_deployment_updatesList deployment updatesGETRetrieves all stack updates (program updates) associated with a specific Pulumi Deployments execution.
list_stack_updatesList stack updatesGETLists the update history of a stack (pulumi up, preview, refresh, destroy, import), newest first. Use page and pageSize to paginate; page=0 returns everything.

Latest, 3 operations

get_latest_stack_updateGet latest stack updateGETReturns information about the most recent update to the stack, including the update kind (update, preview, refresh, destroy, import), start and end times, result status.
get_stack_resourceGet stack resourceGETReturns one resource of a stack, identified by its URN (from list_stack_resources), as of the most recent update. Resource inputs and outputs are not returned.
list_stack_resourcesList stack resourcesGETLists the resources a stack manages after its most recent update: URN, type, cloud id, parent, provider and dependencies. Resource inputs and outputs are not returned.

Member, 3 operations

add_organization_memberAdd organization memberPOSTAdds an existing Pulumi user (by login) to the organization with a role, granting them access to its resources. The user must already have a Pulumi account.
list_organization_membersList organization membersGETLists the members of an organization with their role and login. Use type=backend for members synced from the identity provider; paginate with continuationToken. Email addresses are not returned.
remove_organization_memberRemove organization memberDELETERemoves a user from the organization and from all its teams: they lose access to its stacks, environments and projects. The caller cannot remove themselves.

Pause, 3 operations

pause_deployment_schedulePause deployment schedulePOSTTemporarily suspends future executions of a scheduled deployment action without deleting the schedule configuration.
pause_org_deploymentsPause org deploymentsPOSTPauses Pulumi Deployments for the WHOLE organization: every new run is queued until resume_org_deployments.
pause_stack_deploymentsPause stack deploymentsPOSTPauses Pulumi Deployments for a stack: new runs (pushes, schedules, API calls) are queued instead of run until resume_stack_deployments.

Account, 2 operations

get_insights_accountGet insights accountGETReturns an Insights account: cloud provider, owner, ESC environment reference, scan schedule and the latest scan status. Provider configuration is not returned.
list_insights_accountsList insights accountsGETLists the Insights cloud accounts (AWS, Azure, Google Cloud and others) of an organization with their latest scan status. Paginate with continuationToken.

Change request, 2 operations

get_change_requestGet change requestGETRetrieves the details of a specific change request, including its current status, description, approvals, and the proposed infrastructure changes.
list_change_requestsList change requestsGETLists change requests for an organization with support for pagination and filtering by entity type and entity ID.

Delivery, 2 operations

list_organization_webhook_deliveriesList organization webhook deliveriesGETReturns the recent delivery history for a specific webhook, including the HTTP status code, response time, request payload, and delivery timestamp for each attempt.
list_stack_webhook_deliveriesList stack webhook deliveriesGETReturns the recent delivery history for a specific webhook.

History, 2 operations

list_deployment_schedule_historyList deployment schedule historyGETReturns the execution history for a specific scheduled deployment action.
list_environment_rotation_historyList environment rotation historyGETReturns the secret rotation history for a Pulumi ESC environment.

Metadata, 2 operations

get_environment_metadataGet environment metadataGETReturns metadata for a Pulumi ESC environment, including the calling user's effective permission level (read, open, write, admin), creation and modification timestamps.
get_stack_metadataGet stack metadataGETReturns metadata about a stack including the requesting user's permission level and the stack's notification settings (such as whether to notify on update success or failure).

Ping, 2 operations

ping_organization_webhookPing organization webhookPOSTSends a real test delivery to the organization webhook's payload URL, bypassing the queue, and returns the delivery record.
ping_stack_webhookPing stack webhookPOSTSends a real test delivery to the webhook's payload URL and returns the delivery record (status code, response time).

Policypack, 2 operations

list_policy_packsList policy packsGETLists the policy packs published to the organization with their versions and version tags. Set policypack to list only one pack.
list_stack_policy_packsList stack policy packsGETReturns the policy packs currently enforced on the specified stack through its policy group memberships.

Restore, 2 operations

list_deleted_environmentsList deleted environmentsGETLists deleted ESC environments still within the retention window, with the deletion timestamp restore_environment needs.
restore_environmentRestore environmentPUTRestores a deleted ESC environment (project, name and deletionTimestamp from list_deleted_environments).

Restore stack, 2 operations

list_deleted_stacksList deleted stacksGETLists the last 25 deleted stacks of the organization, with the programID that restore_deleted_stack needs.
restore_deleted_stackRestore deleted stackPOSTRestores a deleted stack (programID from list_deleted_stacks) under stackName. Requires the organization's restore stacks feature.

Resume, 2 operations

resume_deployment_scheduleResume deployment schedulePOSTReactivates a paused deployment schedule: its next runs execute the scheduled operation for real against the stack's cloud infrastructure.
resume_org_deploymentsResume org deploymentsPOSTResumes Pulumi Deployments for an organization paused with pause_org_deployments.

Role, 2 operations

get_roleGet roleGETReturns the details of a specific custom role, including its name, description, and the set of permission scopes it grants.
list_rolesList rolesGETLists the organization's roles for one UX purpose. uxPurpose=role returns the assignable roles, built-in (defaultIdentifier member, admin or billing-manager) and custom, each with the id update_organization_member takes.

Run, 2 operations

get_drift_runGet drift runGETReturns a single drift detection run by its unique identifier. The response includes whether drift was detected and details about the detection and any remediation updates.
list_drift_runsList drift runsGETReturns a paginated list of all drift detection runs for a stack.

Scan, 2 operations

get_insights_scanGet insights scanGETReturns details for a specific Insights scan, including its status, timestamps, and resource counts.
list_insights_scansList insights scansGETReturns the scan history for an Insights account, including child accounts for parent accounts.

Task, 2 operations

get_neo_taskGet neo taskGETRetrieves metadata for a specific agent task, including its ID, name, status, creation timestamp, and associated entities. Returns 404 if the task does not exist.
list_neo_tasksList neo tasksGETLists Neo (Pulumi's AI agent) tasks of the organization: name, status, token usage, creator. Filter by status, type or text; paginate with continuationToken.

Activity, 1 operation

list_stack_activityList stack activityGETReturns the activity history for a stack, including updates, configuration changes, and other operations.

Approve, 1 operation

approve_change_requestApprove change requestPOSTRecords the caller's approval of a change request revision (revisionNumber). Once enough approvals are in, the change can be applied.

Cancel, 1 operation

cancel_deploymentCancel deploymentPOSTCancels a running or queued Pulumi Deployments run. A run stopped mid-update can leave the stack partially updated.

Capability, 1 operation

get_capabilitiesGet capabilitiesGETReturns the capabilities this Pulumi Cloud service supports (feature flags the CLI checks, with their versions).

Clone, 1 operation

clone_environmentClone environmentPOSTCopies an ESC environment to a new name and/or project, optionally with its history, tags and access settings.

Close, 1 operation

close_change_requestClose change requestPOSTCloses a change request without applying it; its proposed changes are discarded.

Comment, 1 operation

comment_on_change_requestComment on change requestPOSTAdds a comment to a change request, visible to its reviewers, without approving or closing it.

Config, 1 operation

get_stack_configGet stack configGETReturns the service-managed configuration of a stack: the ESC environment it points at and its secrets provider. Answers 404 when the stack has no service-managed configuration.

Count, 1 operation

get_stack_resource_countGet stack resource countGETReturns the total number of resources currently managed by the stack, based on the most recent update. The response includes the resource count and the stack version number.

Default, 1 operation

get_default_organizationGet default organizationGETReturns the default organization of the current user, the one the Pulumi CLI uses when no organization is named.

Downstreamreference, 1 operation

list_downstream_stack_referencesList downstream stack referencesGETReturns all stacks that reference the specified stack as a dependency in their Pulumi programs (via StackReference).

Event, 1 operation

list_change_request_eventsList change request eventsGETLists the event log for a change request, including approvals, status changes, and other lifecycle events. Supports pagination via continuation token.

Integration, 1 operation

list_vcs_integrationsList vcs integrationsGETReturns a summary of all VCS integrations across all providers (GitHub, GitLab, Azure DevOps, Custom) for an organization.

Org, 1 operation

get_organizationGet organizationGETReturns detailed information about the specified organization, including its name, display name, avatar URL, enabled features, subscription tier, and access control settings.

Package, 1 operation

list_registry_packagesList registry packagesGETRetrieves all registry packages accessible to the caller, with support for filtering, sorting, and pagination.

Provider, 1 operation

list_esc_providersList esc providersGETReturns a list of all available Pulumi ESC providers.

Pulumi, 1 operation

create_teamCreate teamPOSTCreates a Pulumi-managed team (membership managed in Pulumi Cloud, not synced from GitHub or GitLab).

Referrer, 1 operation

list_environment_referrersList environment referrersGETReturns a paginated list of entities that reference a Pulumi ESC environment, including other environments that import it and Pulumi stacks that use it in their configuration.

Rename, 1 operation

rename_stackRename stackPOSTRenames a stack, and can move it to another project. Pass newName and newProject (send the current project to keep it). Changes the stack's identity: its URL and stack references change.

Resource, 1 operation

list_stack_resources_at_versionList stack resources at versionGETLists the resources a stack managed at a given update version (from list_stack_updates). Resource inputs and outputs are not returned.

Rotator, 1 operation

list_esc_rotatorsList esc rotatorsGETReturns a list of all available Pulumi ESC secret rotators.

Status, 1 operation

get_stack_drift_statusGet stack drift statusGETRetrieves the current drift detection status and associated metadata for a stack.

Summary, 1 operation

get_stack_update_summaryGet stack update summaryGETReturns a concise summary of a specific stack update by version number, including the update kind, result status, start and end times, and resource change counts.

Template, 1 operation

list_registry_templatesList registry templatesGETLists templates with optional filtering, search, and pagination.

Terraform module, 1 operation

list_terraform_modulesList terraform modulesGETBrowses Terraform modules hosted in the Pulumi Cloud registry.

Upstreamreference, 1 operation

list_upstream_stack_referencesList upstream stack referencesGETReturns all stacks that the specified stack references as dependencies in its Pulumi program (via StackReference).

User, 1 operation

get_current_userGet current userGETReturns the profile of the user who owns the access token: login, display name, MFA status and the organizations they belong to. Use it to find the orgName other tools need.

Showing the first 120 of 136 endpoints. The rest are in the product, searchable from the workflow builder and from chat.

Use Pulumi Cloud from Claude Code, Cursor or Codex

Connect Pulumi Cloud in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Pulumi Cloud operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Pulumi Cloud

Create your workspace
Sign up free. Nothing to install.
Connect Pulumi Cloud once
Add your Pulumi Cloud connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.