Control Plane agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Control Plane work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Control Plane

Connect Control Plane once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Control Plane skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing16 Control Plane tools

Use Control Plane safely with AI

Confirms your organisation and GVC first, picks the right tool for the job, and asks before any change to your resources. Nothing is created, deployed or deleted without your yes.

Use it when

You have just connected Control Plane and want to know what the assistant can do safely.
You are about to create or deploy something and want to be sure it lands in the right GVC.
A permission or rate-limit error stopped a task and you want to know what to do next.

Tools it uses

deploy_app
create_workload
add_domain_route
create_domain
add_domain_port
create_identity
create_policy
allow_workload_access
export_terraform
convert_to_terraform
browse_templates
diagnose_workload
get_command
get_cpln_rules
create_app_files_upload_link
get_app_files

Example

Show me the workloads in my prod GVC and tell me if anything is misconfigured. Don't change anything.

I'll work in org acme-platform, GVC prod-eu. Confirm that's the right scope? Once you do, I found 12 workloads: 9 are healthy, 2 have no firewall rules set, and 1 is using an image tag that hasn't changed in 180 days. I haven't changed anything. Want me to draft fixes for the two firewall items for your review?

Use in RevampKeyRead the full skill →

Asks before writing6 Control Plane tools

Route a custom domain and TLS to a Control Plane workload

Puts your own hostname in front of a running workload, checking DNS and existing routes first and confirming the certificate after. It asks before adding routes or clearing TLS.

Use it when

You want app.example.com to serve a workload running in Control Plane.
A custom domain returns the wrong site or a certificate error.
You need to add a second path prefix to an existing domain.

Tools it uses

create_domain
get_cpln_rules
get_command
add_domain_port
add_domain_route
clear_domain_tls

Example

Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.

Checked DNS first: app.example.com has a CNAME to the platform target, so it is set. The checkout workload runs on port 8080 with HTTP. I need your yes before I add the port and the route. Once they are added, the certificate is pending and should be issued within a few minutes.

Use in RevampKeyRead the full skill →

Asks before writing4 Control Plane tools

Audit secrets and access in Control Plane

Traces which workloads can read which secrets through identities and policies, flags over-broad or stale access, and reports findings without changing anything. It asks before any change is made.

Use it when

A security review asks who can read a production database secret
A workload needs credentials and you want to confirm its access is no broader than necessary
Cleaning up old policies and identities after a service was retired

Tools it uses

create_secret
create_policy
create_identity
create_workload

Example

Who can read the payments-db secret in the prod GVC, and is any of that access broader than it needs to be?

I traced payments-db through its policies and found it reachable by 3 workloads via 2 identities. One identity, payments-shared, is bound GVC-wide, so it can also read the staging secrets. Two workloads (invoice-cron and reporting-api) reference the secret but do not use the identity that grants it. I have not changed anything; I can draft a narrower binding for your approval.

Use in RevampKeyRead the full skill →

Read-only1 Control Plane tools

Diagnose a failing workload on Control Plane

Works through a crashing, unreachable or slow workload in a fixed order: spec, replicas, then logs. It proposes the smallest fix and waits for your approval before changing anything.

Use it when

A workload keeps restarting or crashing after a deploy
Traffic returns 502 or 503 even though the container looks up
A deploy is stuck and the old version is still serving

Tools it uses

get_command

Example

My checkout workload in the prod GVC is returning 502s since this morning's deploy. Why, and what's the smallest fix?

The container listens on port 8080, but the workload's container port is set to 3000, so the route can't reach the app and returns 502 while the replicas show as running. The first log line at 09:14 reads "Error: listen EADDRINUSE" only from an old revision, so the new revision never became ready. I propose changing the container port to 8080 and redeploying. Nothing has been changed yet; say yes and I'll apply it.

Use in RevampKeyRead the full skill →

Asks before writing8 Control Plane tools

Roll out a Control Plane workload safely

Plans and carries out a workload create or update on Control Plane, checking location, pinned image, scaling and firewall before changing anything. It asks for your explicit yes before each change and verifies replicas and logs afterwards.

Use it when

A new image needs to go live in a GVC without breaking traffic
You want to scale a serverless workload or add a location, with the impact shown first
A deploy went green but you need to confirm the workload is actually healthy

Tools it uses

get_command
browse_templates
build_image
create_app_files_upload_link
get_app_files
create_workload
deploy_app
allow_workload_access

Example

Roll out image tag v2.4.1 of the checkout workload in the prod GVC, keeping it in aws-us-east-1 and eu-west-1, and tell me what changes first.

Current checkout runs v2.3.0 with 2 to 6 replicas in both locations. Proposed change: image to v2.4.1, replicas unchanged, firewall unchanged. I found no secret or identity changes. Waiting for your explicit yes before I apply it; after the change I will check replicas and logs in both locations.

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Control Plane, updates them for you and removes them when you disconnect.

Download RevampKey

How Control Plane skills work

Connect Control Plane
The Control Plane MCP server gives the agent its tools.
Ask in plain words
“Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Control Plane skills

In RevampKey the skills install themselves when you connect Control Plane. In other tools each skill is one folder with a SKILL.md file, and you also need the Control Plane MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Control Plane. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.”
Download RevampKeyConnect Control Plane · 1 click
Get RevampKey to connect Control Plane
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Control Plane is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials domain-and-tls-setup secrets-and-access-audit workload-diagnosis workload-rollout; do curl -fsSL --create-dirs -o .claude/skills/controlplane-$s/SKILL.md https://revampkey.com/marketplace/controlplane/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Control Plane MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials domain-and-tls-setup secrets-and-access-audit workload-diagnosis workload-rollout; do
  curl -fsSL --create-dirs -o .claude/skills/controlplane-$s/SKILL.md https://revampkey.com/marketplace/controlplane/skills/$s/SKILL.md
done

Ask in plain language, for example “Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.”

Into the shared .agents/skills folder

Connect the Control Plane MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials domain-and-tls-setup secrets-and-access-audit workload-diagnosis workload-rollout; do
  curl -fsSL --create-dirs -o .agents/skills/controlplane-$s/SKILL.md https://revampkey.com/marketplace/controlplane/skills/$s/SKILL.md
done

Ask in plain language, for example “Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.”

Into the shared .agents/skills folder

Connect the Control Plane MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials domain-and-tls-setup secrets-and-access-audit workload-diagnosis workload-rollout; do
  curl -fsSL --create-dirs -o .agents/skills/controlplane-$s/SKILL.md https://revampkey.com/marketplace/controlplane/skills/$s/SKILL.md
done

Ask in plain language, for example “Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.”

Into the shared .agents/skills folder

Connect the Control Plane MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials domain-and-tls-setup secrets-and-access-audit workload-diagnosis workload-rollout; do
  curl -fsSL --create-dirs -o .agents/skills/controlplane-$s/SKILL.md https://revampkey.com/marketplace/controlplane/skills/$s/SKILL.md
done

Ask in plain language, for example “Point app.example.com at my checkout workload on port 8080 and make sure the certificate is issued.”

RevampKey or copy the files?

In RevampKey

One click when you connect Control Plane
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Control Plane MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Control Plane skills FAQ

What is a Control Plane agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Control Plane skill describes one job, which Control Plane tools to use in which order, what to check first and when to stop and ask you.

Do the Control Plane skills change anything on their own?

1 of the 5 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Control Plane.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Control Plane; elsewhere you copy the folders into your project or skills directory.

Do I need the Control Plane MCP server too?

Yes. The skills tell the agent how to do the work; the Control Plane MCP server gives it the tools to do it. The Control Plane MCP setup guide covers every client.

Control Plane MCP server setup · This page as Markdown

Put Control Plane’s best workflows in your agent

Download RevampKey, connect Control Plane and ask your first question in about a minute.

Download RevampKey Connect Control Plane · 1 click

All 5 Control Plane skills

Use Control Plane safely with AI

Use it when

Tools it uses

Route a custom domain and TLS to a Control Plane workload

Use it when

Tools it uses

Audit secrets and access in Control Plane

Use it when

Tools it uses

Diagnose a failing workload on Control Plane

Use it when

Tools it uses

Roll out a Control Plane workload safely

Use it when

Tools it uses

Get all 5 without copying a file

How Control Plane skills work

How to install Control Plane skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Control Plane skills FAQ

Put Control Plane’s best workflows in your agent

Skills for related tools