Read Render service metrics, then make configuration changes as approved steps.
Connect Render and Luumen can read the numbers behind your services: CPU and memory against their limits, disk usage, instance counts, active connections, bandwidth by source. When the fix is a configuration change — a custom domain, a header rule, a new environment group, a Postgres instance — Luumen previews it and asks before it writes.
ReadList RoutesList redirect/rewrite rules for a service.
ReadList Secret FilesList secret files for a Render service.
ReadList ServicesList all services.
ReadList Task RunsList task runs.
ReadList TasksList tasks.
ReadList WebhooksList all webhooks.
ReadList WorkflowsList workflows.
ReadList Workflow VersionsList workflow versions.
ReadRetrieve Custom DomainRetrieve a specific custom domain for a service.
ReadRetrieve deployRetrieve deploy
ReadRetrieve Environment GroupRetrieve a specific environment group by ID.
ReadRetrieve Environment VariableRetrieve a specific environment variable from a Render environment group.
ReadRetrieve Environment Group Secret FileRetrieve secret file from an environment group.
ReadRetrieve OwnerRetrieve a specific owner (workspace) by ID.
ReadRetrieve Owner Notification SettingsRetrieve notification settings for a specific owner (workspace).
ReadRetrieve Postgres InstanceRetrieve a specific Postgres instance.
ReadRetrieve ProjectRetrieve a specific project by ID.
ReadRetrieve Registry CredentialRetrieve a registry credential by ID.
ReadRetrieve Secret FileRetrieve a secret file from a Render service.
ReadRetrieve ServiceRetrieve a specific service by ID.
ReadStream Task Runs EventsStream real-time task run events via Server-Sent Events (SSE).
ReadSubscribe to LogsSubscribe to real-time logs via WebSocket connection.
WriteAdd Header RuleAdd a custom HTTP header rule to a Render service. Approval by default
WriteAdd or Update Secret FileAdd or update a secret file for a Render service. Approval by default
WriteAdd Resources to EnvironmentAdd resources to a Render environment. Approval by default
WriteAdd RouteAdd redirect or rewrite rules to a Render service. Approval by default
WriteCreate Custom DomainAdd a custom domain to a Render service. Approval by default
WriteCreate Environment GroupCreate a new environment group. Approval by default
WriteCreate EnvironmentCreate a new environment within a Render project. Approval by default
WriteCreate Postgres InstanceCreate a new Postgres instance on Render. Approval by default
WriteCreate Registry CredentialCreate a registry credential. Approval by default
WriteDelete Environment Group VariableRemove an environment variable from an environment group. Approval by default
WriteDelete Environment Group Secret FileRemove a secret file from an environment group. Approval by default
WriteDelete EnvironmentDelete a specified environment. Approval by default
WriteDelete Key ValueDelete a Key Value instance. Approval by default
WriteDelete Owner Log StreamDelete a log stream for an owner. Approval by default
WriteDelete Owner Metrics StreamDelete a metrics stream for a workspace. Approval by default
WriteDelete Registry CredentialDelete a registry credential. Approval by default
WriteDelete Secret FileDelete a secret file from a Render service. Approval by default
WriteDelete ServiceDelete a service. Approval by default
WriteDisconnect BlueprintDisconnect a blueprint from your Render account. Approval by default
WriteLink Service to Environment GroupLink a service to an environment group. Approval by default
WriteRestart ServiceRestart a service. Approval by default
WriteResume ServiceResume a suspended service. Approval by default
WriteSuspend ServiceSuspend a service. Approval by default
WriteTrigger DeployTrigger a new deploy for a specified service. Approval by default
WriteUpdate Environment GroupUpdate an environment group's name. Approval by default
WriteUpdate Environment Group VariableAdd or update an environment variable in an environment group. Approval by default
WriteUpdate Environment Group Secret FileAdd or update a secret file in an environment group. Approval by default
WriteUpdate Environment VariableAdd or update an environment variable for a Render service. Approval by default
WriteUpdate Environment Variables for ServiceUpdate environment variables for a Render service. Approval by default
WriteUpdate Header RulesReplace all header rules for a Render service. Approval by default
WriteUpdate Owner Log StreamUpdate log stream configuration for an owner. Approval by default
WriteUpdate Owner Notification SettingsUpdate notification settings for a specific owner (workspace). Approval by default
WriteUpdate Postgres InstanceUpdate a Postgres instance configuration. Approval by default
WriteUpdate ProjectUpdate a project's name. Approval by default
WriteUpdate Registry CredentialUpdate a registry credential. Approval by default
WriteUpdate Resource Log StreamUpdate log stream override for a resource. Approval by default
WriteUpdate RoutesUpdate redirect/rewrite rules for a service. Approval by default
WriteUpdate Secret Files for ServiceUpdate secret files for a Render service. Approval by default
WriteUpdate ServiceUpdate a service configuration. Approval by default
WriteVerify Custom DomainVerify DNS configuration for a custom domain. Approval by default
One prompt, start to finish
What a governed Render run looks like inside Luumen.
Questions
How does LuumenAI connect to Render?
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Can LuumenAI change things in Render on its own?
Read actions answer immediately. Anything that writes — add header rule, add or update secret file, add resources to environment, add route, and more — is shown as a plan and requires approval by default, including the 10 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
Who gets access to the integration?
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Is there an audit trail?
Every call to Render — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.