Oracle Cloud Infrastructure MCP integration for AI agents.
Connect AI agents to Oracle Cloud Infrastructure through 34 structured actions, including get compartment by name, create subnet, delete vcn, and instance ac…
- ACTION CONTRACTS
- 34
- AUTHENTICATION
- Custom credentials
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the Oracle Cloud Infrastructure integration exposes
The Oracle Cloud Infrastructure Agent App exposes 34 provider-backed actions for developer tools and infrastructure work. Its current contract lets an authorized agent find a direct child compartment by exact name, create a subnet in a vcn, and permanently delete an empty vcn. this is destructive. These operations are called through Working Machines as typed capabilities rather than through browser navigation or copied UI steps.
A connection uses Custom credentials. Before execution, the agent can inspect the selected action, its required fields, declared scopes, and expected output contract. Provider credentials remain inside the Working Machines runtime; the calling agent receives the capability and its structured result, not the underlying secret.
For reliable operation, start with the narrowest action that satisfies the task, resolve stable provider identifiers before changing state, and validate the returned object or status after execution. Availability still depends on the connected Oracle Cloud Infrastructure account, granted provider permissions, workspace policy, region, plan, and upstream API behavior.
VERIFIED ACTION SAMPLE
Real Oracle Cloud Infrastructure capabilities.
Showing 12 of 34 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
get_compartment_by_nameREADFind a direct child compartment by exact name.
INPUTS: name / parentCompartmentId
create_subnetWRITECreate a subnet in a VCN.
INPUTS: vcnId / compartmentId / cidrBlock / displayName
delete_vcnHIGH IMPACTPermanently delete an empty VCN. This is destructive.
INPUTS: vcnId
instance_actionREVIEWPerform one of the instance actions exposed by Oracle's official Compute MCP server.
INPUTS: instanceId / action
create_vcnWRITECreate a virtual cloud network.
INPUTS: compartmentId / cidrBlock / displayName
get_current_tenancyREADGet the tenancy configured on this connection.
get_current_userREADGet the IAM user configured on this connection.
get_imageREADGet a compute image by OCID.
INPUTS: imageId
get_instanceREADGet a compute instance by OCID.
INPUTS: instanceId
get_metrics_dataREADRetrieve aggregated OCI Monitoring metric data using an MQL expression.
INPUTS: compartmentId / query / namespace / startTime / endTime
get_network_security_groupREADGet a network security group by OCID.
INPUTS: networkSecurityGroupId
get_security_listREADGet a security list by OCID.
INPUTS: securityListId
INPUT CONTRACTS
Know what the action needs before it runs.
get_compartment_by_name
nameREQUIRED- Exact compartment name.
parentCompartmentIdREQUIRED- Compartment or tenancy OCID. Defaults to the connection's default compartment.
create_subnet
vcnIdREQUIRED- VCN OCID.
compartmentIdOPTIONAL- Compartment or tenancy OCID. Defaults to the connection's default compartment.
cidrBlockREQUIRED- Subnet IPv4 CIDR block.
displayNameREQUIRED- Subnet display name.
delete_vcn
vcnIdREQUIRED- VCN OCID.
instance_action
instanceIdREQUIRED- Compute instance OCID.
actionREQUIRED- Action to perform.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Inspect Get Compartment By Name
Find a direct child compartment by exact name. Use this as a bounded discovery step, retain the returned identifier, and avoid expanding the read beyond the task's stated scope.
get_compartment_by_nameControl Create Subnet
Create a subnet in a VCN. Resolve the target first, present material changes for confirmation, and make retries idempotent where the provider supports it.
create_subnetVerify with Get Current Tenancy
Get the tenancy configured on this connection. Compare the returned provider state with the intended outcome and preserve stable IDs or canonical links in the run record.
get_current_tenancySAFETY BOUNDARY
Operate Oracle Cloud Infrastructure with explicit limits
- Authorize Oracle Cloud Infrastructure with Custom credentials and grant only the provider access required by the selected actions.
- 6 actions are change-capable by name. Confirm the target identity and material parameters before allowing a write.
- Treat `delete_vcn` and `terminate_instance` as high-impact operations and require an explicit approval boundary.
- No provider scope string is declared on the sampled actions. Verify the connected account's actual permissions in Oracle Cloud Infrastructure rather than assuming unrestricted access.
- After a call, inspect the structured result and execution record before reporting that the Oracle Cloud Infrastructure task completed successfully.
CONNECTION MODEL
Custom credentials
Oracle Cloud Infrastructure uses Custom credentials. Connection requirements and availability are determined by the provider and the Working Machines deployment.
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 26
- WRITE SIGNALS
- 4
- HIGH IMPACT
- 2
- REVIEW SIGNALS
- 2
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by Oracle Cloud Infrastructure.