Bring your own agent.
The boundary stays the same.
Qovery does not care which coding agent you run. Eight skills install with one command and work across 30+ tools, because what an agent is allowed to do is decided in the API underneath rather than in the agent itself. Swap Claude Code for Codex tomorrow and your guardrails do not move.
Set up in one command.
Same install, same eight skills, same boundary. These pages cover the connection details and what changes per agent.
Claude Code
Gemini CLI
OpenAI Codex
Cursor · OpenCode · VS Code Copilot · Roo Code · Goose · Amp · Junie · Kiro · OpenHands · Mistral Vibe · TRAE - and any tool that discovers skills from .claude/skills/, .config/opencode/skills/ or .agents/skills/.
Eight skills, every agent.
The installer places all eight skills, with their reference material and slash commands, wherever your tools look for them. Re-run it to update.
# Install all eight skills, globally $ curl -fsSL https://skill.qovery.com/install.sh | bash # Or scope them to the current project only $ curl -fsSL https://skill.qovery.com/install.sh | bash -s -- --project
Agnostic about the agent.
Specific about what it may do.
Swapping agents changes the interface. It does not change any of this, because none of it is something the model is asked to respect.
Read-only by default
The Qovery MCP Server connects in read-only mode unless you say otherwise. Your agent can list environments, read service state, and tail logs. It cannot change anything.
Write access is two deliberate switches
Writes require read_write=true on the connection URL and a separate write-access setting enabled in the Qovery Console. Neither one is something a model can talk its way into.
Scoped by the RBAC you already run
An agent authenticates with its own API token and inherits the permissions of the role that token was issued under. Agents do not get a parallel access model, and they do not consume user seats.
Every action lands in the audit log
MCP tool calls and API operations are recorded in the Qovery Console audit trail against the token that made them, which is what turns "an agent did something" into an answerable question.
Agents and Qovery.
Which AI coding agents work with Qovery?
Do I need a different setup for each agent?
What is the difference between the Qovery skills and the MCP Server?
How do I stop an agent doing something destructive?
Do AI agents consume Qovery user seats?
Get started
Your agent already knows how to deploy.
Point it at infrastructure you own.
One install command, your own AWS, GCP, Azure or Scaleway account, and a boundary you set once instead of restating in every prompt.