Skip to content
vops

Agent control

The controlled agent surface separates public product knowledge from private inventory and mutations. People configure clients and own sessions and approvals; agents call the scoped semantic tools.

Client adapters

Terminal window
vops agent clients --project .
vops agent setup codex --scope project --project .
vops agent setup claude-code --scope project --project .
vops agent setup opencode --scope project --project .
vops agent setup antigravity --scope project --project .
vops agent setup all --scope project --project .
vops agent status --project .
vops agent uninstall codex --scope project --project .

Supported scopes are project and user. Setup merges managed configuration, backs up files before changing them and is safe to repeat. Uninstall removes only vops-managed material.

Sessions

Terminal window
vops agent session create \
  --client codex \
  --objective "Deploy the repository" \
  --repository . \
  --target web-1 \
  --environment staging \
  --expires 60 \
  --max-operations 30 \
  --max-spend-eur 0


vops agent session list
vops agent session show <session-id>
vops agent session pause <session-id>
vops agent session resume <session-id>
vops agent session revoke <session-id>
vops agent session stop-all

Expiry accepts 1–720 minutes. Operation and spend limits are evaluated by the local controller before execution.

Approvals

Terminal window
vops agent approvals list
vops agent approvals list --status pending
vops agent approvals approve <approval-id> --reason "Plan reviewed"
vops agent approvals deny <approval-id> --reason "Wrong target"

Approval binds to an immutable plan. Changing its material inputs requires a new decision.

Operations

Terminal window
vops agent operations list
vops agent operations list --session <session-id>
vops agent operations show <operation-id>
vops agent operations cancel <operation-id>

Cancellation is a request. An underlying provider or SSH action may have already reached a non-interruptible point; inspect the operation events and result rather than assuming cancellation implies rollback.

Capability and knowledge inspection

Terminal window
vops capability list
vops capability describe application.deploy
vops knowledge search deployment
vops knowledge read <resource-id>

These commands expose the same versioned registry and knowledge pack used to generate MCP tools and client skill references.

MCP server

Standard input/output is the default:

Terminal window
vops mcp serve
vops mcp serve --transport stdio

Authenticated loopback HTTP is available for clients that need a persistent endpoint:

Terminal window
VOPS_MCP_HTTP_TOKEN=... \
  vops mcp serve --transport http --port 4737

The HTTP endpoint is http://127.0.0.1:4737/mcp. It validates loopback access and bearer authentication; the MVP does not expose it to the internet.