DevOps Agent
Docs

Everything you need to connect your cloud infrastructure, automate deployments, and manage incidents — all through a natural language chat interface.

Getting Started

You can be up and running in under five minutes. Here's the full flow from registration to your first cloud command.

Chat Interface

The chat interface is the primary way to interact with DevOps Agent. You talk to the AI in plain English and it figures out which tools to call, in what order, and how to present the results.

Example commands

Confirmation for risky operations

Before executing any destructive action (deleting resources, terminating instances, modifying IAM policies), the agent will pause and ask you to confirm. This cannot be disabled — it is a core safety feature.

Model selector

Use the model toggle in the chat toolbar to switch between AI providers:

Credits

Each message deducts one credit. Your remaining credits are shown in the chat header. Free-tier users receive 20 credits per month. Paid plans include a monthly credit allocation — see the Billing section for details.

Dashboard

The Dashboard gives you a live overview of your cloud infrastructure without having to ask the agent. It auto-syncs every time you visit.

Learning Mode

Enable Learning Mode in Settings → Preferences to have the agent explain every action it takes as it takes it. Ideal if you're new to a cloud provider or want to build knowledge while getting work done.

Experience levels

Your proficiency per topic is tracked automatically. Check Settings → Learning → Proficiency Radar to see where you're strongest and where there are gaps.

Sandbox Mode

Sandbox Mode lets you experiment with any command without touching real cloud resources. All tool calls return simulated but realistic responses — perfect for demos, onboarding, or testing destructive workflows safely.

Sandbox Mode simulates realistic failure scenarios too — disk full, pod crash loops, service downtime — so you can practice incident response without manufacturing real outages.

Amazon Web Services

DevOps Agent supports 155 AWS tools covering EC2, VPC, IAM, RDS, Lambda, ECS, EKS, S3, DynamoDB, CloudFormation, Route53, SNS/SQS, CloudWatch, ElastiCache, and more.

Connecting AWS — Access Key mode

Best for individuals and small teams. Navigate to Settings → Cloud Credentials → AWS:

Connecting AWS — IAM Role mode (enterprise)

Best for enterprise setups and cross-account access. Instead of long-lived access keys, the agent assumes an IAM Role using STS. Under Settings → AWS → switch to Role ARN mode and provide:

Microsoft Azure

DevOps Agent supports 36 Azure tools covering Virtual Machines, Storage, SQL, NSGs, Container Instances, Disks, VNets, and Public IPs.

Connecting Azure

Navigate to Settings → Cloud Credentials → Azure and provide:

Google Cloud Platform

DevOps Agent supports 40 GCP tools covering Compute Engine, Cloud Storage, Cloud SQL, GKE, Cloud Run, Pub/Sub, Secret Manager, BigQuery, Cloud Functions, and Cloud Logs.

Connecting GCP

Kubernetes

DevOps Agent supports 28 Kubernetes tools covering pods, deployments, services, namespaces, ConfigMaps, secrets, ingress, nodes, and jobs.

Connecting a cluster

DevOps Agent uses your local kubeconfig file. Ensure the machine running the agent has a valid kubeconfig at ~/.kube/config (or the path set in KUBECONFIG) with credentials for the cluster you want to manage.

To use a specific context, include the context name in your message:

Supported operations

CI/CD — Jenkins & GitHub Actions

DevOps Agent supports 21 CI/CD tools — 11 for Jenkins and 10 for GitHub Actions — covering pipelines, builds, jobs, and workflow runs.

Jenkins (11 tools)

Set your Jenkins URL and credentials in Settings → CI/CD before using Jenkins tools. The agent uses the Jenkins REST API with Basic auth.

GitHub Actions (10 tools)

Set your GitHub token (GITHUB_TOKEN) in Settings. The token needs actions:read and actions:write scopes.

Example prompts

Docker

DevOps Agent supports 22 Docker tools covering container lifecycle, image management, volumes, networks, and Docker Compose.

Requirements

Docker must be installed and running on the machine where the agent runs. The agent communicates with the Docker daemon via the Docker SDK for Python (docker package).

Supported operations

Example prompts

Terraform

DevOps Agent supports 16 Terraform tools for managing infrastructure-as-code: workspaces, state, plans, and module operations.

How it works

Terraform tools operate on a working_dir — the directory containing your .tf files. Terraform must be installed on the machine where the agent runs.

Supported operations

Example prompts

SonarQube

DevOps Agent supports 12 SonarQube tools for code quality analysis, quality gate checks, and issue management.

Configuration

Set SONAR_TOKEN and SONAR_BASE_URL (e.g., https://sonarqube.yourcompany.com) in your environment. The token needs at minimum Browse permission on projects you want to inspect.

Supported operations

Example prompts

Nexus Repository

DevOps Agent supports 12 Nexus Repository Manager tools for artifact management, repository administration, and component search.

Configuration

Set NEXUS_BASE_URL, NEXUS_USERNAME, and NEXUS_PASSWORD in your environment. The agent uses the Nexus REST API v1 with Basic authentication.

Supported operations

Example prompts

Ansible

DevOps Agent supports 13 Ansible tools for playbook execution, inventory management, and role discovery.

Requirements

Ansible must be installed on the machine where the agent runs. Playbook tools operate on a working_dir containing your playbooks and inventory.

Supported operations

Example prompts

Alerting — PagerDuty & OpsGenie

DevOps Agent supports 16 alerting tools — 8 for PagerDuty and 8 for OpsGenie — for incident management, on-call schedules, and alert routing.

PagerDuty (8 tools)

Set PAGERDUTY_API_KEY in your environment. Requires a REST API key from PagerDuty's API Access section.

OpsGenie (8 tools)

Set OPSGENIE_API_KEY in your environment.

Example prompts

Tools Overview

The agent has access to 727 tools across 17 categories. You never call tools directly — the agent selects and chains the right ones based on your request.

Safety levels

Every tool is classified into one of three risk levels:

Monitoring & Alerts

The Monitoring tab lets you create threshold-based alerts on any metric exposed by your cloud provider or Prometheus.

Creating a monitor

Incident Response

The Incidents tab provides automated runbook execution. When an alert fires, you can trigger a playbook that diagnoses and remediates the issue automatically.

Built-in playbooks

REST API

The DevOps Agent REST API lets you integrate cloud automation directly into your own tools, scripts, and CI/CD pipelines. All endpoints require an API key — generate one from Settings → Developer → API Keys.

Authentication

Pass your API key in the Authorization header on every request:

Authorization: Bearer YOUR_API_KEY

Alternatively, use the api_key query parameter for clients that cannot set headers:

GET /api-gateway/v1/resources?api_key=YOUR_API_KEY

Base URL

https://devopsagent.io/api-gateway/v1

Endpoints

Rate limiting

Requests are rate-limited per API key. The current limit and remaining quota are returned on every response:

When the limit is exceeded the API returns 429 Too Many Requests.

Example — list resources

curl https://devopsagent.io/api-gateway/v1/resources \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "resources": [
    { "id": 1, "name": "prod-web-01", "type": "ec2", "status": "running", "region": "us-east-1" },
    { "id": 2, "name": "prod-db",     "type": "rds", "status": "available", "region": "us-east-1" }
  ]
}

MCP Server

DevOps Agent exposes all cloud tools as an MCP (Model Context Protocol) server registered on the official MCP Registry. Connect any MCP-compatible AI client — Claude Desktop, Claude.ai, or custom agents — and manage your infrastructure without leaving your AI assistant.

Registry

The server is published on the official MCP Registry and npm:

Connect via Claude.ai (Connectors)

Go to Claude.ai → Settings → Connectors → Add custom connector and fill in:

Click Add. Claude will open a DevOps Agent login page — sign in with your DevOps Agent credentials to authorize the connection. All your tools will be available in Claude immediately after.

Connect via Claude Desktop

Generate an API key at /api-gateway/keys, then edit your claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):

{
  "mcpServers": {
    "devops-agent": {
      "url": "https://devopsagent.io/mcp/sse",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Restart Claude Desktop — all DevOps Agent tools appear in the tool list automatically.

Endpoints

Authentication

Two authentication methods are supported:

Generate API keys at /api-gateway/keys.

OAuth 2.0 Endpoints

Supported JSON-RPC methods

Example — streamable HTTP (Claude.ai)

POST https://devopsagent.io/mcp
Authorization: Bearer YOUR_ACCESS_TOKEN
Content-Type: application/json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "list_ec2_instances",
    "arguments": { "region": "us-east-1" }
  }
}

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "content": [{ "type": "text", "text": "{ \"success\": true, \"instances\": [...] }" }],
    "isError": false
  }
}

Protocol

Implements MCP protocol version 2025-03-26. SSE sessions expire after 10 minutes of inactivity with keepalive comments every 15 seconds. OAuth access tokens are valid for 30 days.

Billing & Plans

DevOps Agent is billed per subscription tier. Each tier includes a monthly credit allocation that refreshes on your billing date.

Credit packs

Need more credits without upgrading your plan? Purchase one-time credit packs from the Billing page:

Payments are processed securely via Stripe. Both USD and NGN currencies are supported — the currency is auto-detected from your location and can be manually toggled on the billing page.

Security & 2FA

Two-factor authentication

Enable 2FA in Settings → Security → Two-Factor Authentication. DevOps Agent supports both:

Lost access to your authenticator?

If you can no longer access your authenticator app (deleted the app, got a new phone, etc.), you can reset 2FA from the login screen:

Credential encryption

All cloud credentials (AWS keys, Azure client secrets, GCP service account JSON) are encrypted at rest using AES-128 (Fernet) before being stored in the database. Credentials are decrypted only at request time, in memory, and never logged.

Guardrails

Every message passes through a three-layer guardrail stack before any credits are charged:

Teams

The Teams tab is available on Starter plans and above. It lets an admin invite colleagues to the same workspace so they share access to cloud integrations and conversations.

Roles

Settings

FAQ

Can the agent accidentally delete my cloud resources?

All delete and terminate operations require an explicit confirmation from you before executing. The agent will describe exactly what will be deleted and wait for your yes/no. You can always type "no" or "cancel" to abort.

Where are my cloud credentials stored?

Credentials are stored encrypted in our database using AES-128 encryption. They are decrypted in memory only when a tool call needs them, and are never written to logs or included in AI model context.

What happens when I run out of credits?

On the Free plan, you'll see an upgrade prompt when credits reach zero — no charge is made automatically. On paid plans, your subscription auto-renews monthly. You can also purchase credit packs any time from the Billing page.

Does the agent have access to my data inside cloud resources (e.g. database contents, S3 file contents)?

No. The agent can list, describe, start, stop, and manage the lifecycle of cloud resources — but it does not read the contents of databases, S3 objects, or secrets stored in Secrets Manager unless you explicitly paste content into the chat.

What regions are supported for AWS?

All AWS regions. The default region is set when you configure your credentials. You can override the region per-message by including it in your prompt, e.g. list EC2 instances in eu-west-1.

How do I cancel my subscription?

Go to Billing → Manage Subscription → Cancel plan. Your subscription stays active until the end of the current billing period, then downgrades to the Free plan. No refunds are issued for unused credits in the current period.

Is there an API I can call programmatically?

Not yet. API access for programmatic integration is on the roadmap. Watch the GitHub repo for updates.