JupiterOne agent skills for Claude Code, Cursor and RevampKey

4 ready-made playbooks that teach an AI agent how to do real JupiterOne work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect JupiterOne

Connect JupiterOne once and all 4 skills install themselves and stay up to date. Mac, Windows and Linux.

All 4 JupiterOne skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing24 JupiterOne tools

Use JupiterOne with AI, safely

Gives an AI assistant a careful way into your JupiterOne account: it confirms which account and region you mean, picks the right query, rule or dashboard tool, keeps results small, and asks before changing anything.

Use it when

You have just connected JupiterOne and want to know what to ask first
You manage more than one JupiterOne account and need to stay on the right one
You want a quick answer from the graph without the assistant changing a rule or dashboard

Tools it uses

list-accounts
execute-j1ql-query
list-entity-types
get-active-alerts
get-rule-details
list-rule-evaluations
get-rule-evaluation-details
get-rule-evaluation-query-results
list-rules
evaluate-rule
get-integration-instances
get-integration-jobs
get-integration-job
get-integration-events
get-integration-definitions
get-dashboards
get-dashboard-details
create-dashboard
create-dashboard-widget
update-dashboard
create-inline-question-rule
update-inline-question-rule
get-raw-data-download-url
test-connection

Example

Which JupiterOne account am I in, and how many active alerts does it have right now?

You are in the production account (us region). There are 12 active alerts: 7 are on the stale-laptop rule and 5 are on the public-bucket rule. I have not changed anything in the account.

Use in RevampKeyRead the full skill →

Read-only5 JupiterOne tools

Answer asset inventory questions in JupiterOne

Turns a plain question about assets into a scoped J1QL query, checks the count before pulling samples, and reports the number with its caveats. Read-only; it never changes the account.

Use it when

You need to know how many hosts, accounts or resources the graph holds for a platform.
You want the list of assets missing an owner, tag or integration.
You are checking whether an asset class is covered at all before an audit.

Tools it uses

list-accounts
list-entity-types
execute-j1ql-query
get-raw-data-download-url
get-integration-instances

Example

How many AWS EC2 instances do we have that have no owner tag?

Across the production account, 214 EC2 instances have no owner tag. I checked that the entity type matches and that one sample record returns the tag field. Caveat: two cloud integrations ingest the same hosts, so I counted distinct instance IDs, and the AWS integration last synced 3 days ago, so the count may be slightly stale.

Use in RevampKeyRead the full skill →

Asks before writing12 JupiterOne tools

Build a JupiterOne dashboard widget or inline rule

Turns a security control goal into a J1QL query, tests it against your real data, and proposes the dashboard widget or inline rule. Asks for explicit approval before creating or changing anything.

Use it when

You want a control you care about to run continuously as a rule.
You want a dashboard widget showing open findings grouped by team.
You need to check whether an existing rule already covers a condition before adding another.

Tools it uses

create-dashboard-widget
create-dashboard
create-inline-question-rule
list-rules
get-dashboards
list-entity-types
execute-j1ql-query
get-dashboard-details
update-dashboard
update-inline-question-rule
get-rule-details
evaluate-rule

Example

Create a rule that flags production servers with no owner, and test it on the query first.

I'll write the query and run it against your data first. The test returned 14 production servers with no owner, all in the prod-eu account, and I checked a sample of five. Proposed: a new inline rule that evaluates hourly, with missing owner counted as a violation. I'll create it only after you say yes.

Use in RevampKeyRead the full skill →

Read-only9 JupiterOne tools

Investigate a JupiterOne alert and its rule with AI

Traces one active JupiterOne alert back to the rule that raised it, reads that rule's evaluation history and matched results, and gives a verdict: real, noisy or misconfigured. It only reads, and never changes a rule without asking.

Use it when

An alert fired and you need to know if it is a true positive or noise
You want to see which rule produced an alert and what it matched
A rule keeps alerting and you need to decide whether to tune it

Tools it uses

get-active-alerts
list-accounts
get-rule-details
list-rule-evaluations
get-rule-evaluation-details
get-rule-evaluation-query-results
execute-j1ql-query
get-integration-jobs
get-integration-job

Example

Why did the 'MFA disabled on admin users' alert fire this morning? Is it real or a false positive?

The alert fired on 3 admin entities in the last evaluation. The rule matches users where MFA is not enabled, and 2 of the 3 have the MFA field absent rather than set to false, so the integration never reported it. That points to a data gap, not a real exposure. Verdict: misconfigured or data-caused, medium confidence. I have not changed the rule; I can check the integration job that feeds those users if you want.

Use in RevampKeyRead the full skill →

Get all 4 without copying a file

RevampKey adds the skills when you connect JupiterOne, updates them for you and removes them when you disconnect.

Download RevampKey

How JupiterOne skills work

Connect JupiterOne
The JupiterOne MCP server gives the agent its tools.
Ask in plain words
“How many AWS EC2 instances do we have that have no owner tag?” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install JupiterOne skills

In RevampKey the skills install themselves when you connect JupiterOne. In other tools each skill is one folder with a SKILL.md file, and you also need the JupiterOne MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect JupiterOne. All 4 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “How many AWS EC2 instances do we have that have no owner tag?”
Download RevampKeyConnect JupiterOne · 1 click
Get RevampKey to connect JupiterOne
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and JupiterOne is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials asset-inventory-query dashboard-and-rule-authoring investigate-alert-and-rule; do curl -fsSL --create-dirs -o .claude/skills/jupiterone-$s/SKILL.md https://revampkey.com/marketplace/jupiterone/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the JupiterOne MCP server in Claude Code.

Run this in your project folder to add all 4 skills:

for s in essentials asset-inventory-query dashboard-and-rule-authoring investigate-alert-and-rule; do
  curl -fsSL --create-dirs -o .claude/skills/jupiterone-$s/SKILL.md https://revampkey.com/marketplace/jupiterone/skills/$s/SKILL.md
done

Ask in plain language, for example “How many AWS EC2 instances do we have that have no owner tag?”

Into the shared .agents/skills folder

Connect the JupiterOne MCP server in Cursor.

Run this in your project folder to add all 4 skills:

for s in essentials asset-inventory-query dashboard-and-rule-authoring investigate-alert-and-rule; do
  curl -fsSL --create-dirs -o .agents/skills/jupiterone-$s/SKILL.md https://revampkey.com/marketplace/jupiterone/skills/$s/SKILL.md
done

Ask in plain language, for example “How many AWS EC2 instances do we have that have no owner tag?”

Into the shared .agents/skills folder

Connect the JupiterOne MCP server in Codex.

Run this in your project folder to add all 4 skills:

for s in essentials asset-inventory-query dashboard-and-rule-authoring investigate-alert-and-rule; do
  curl -fsSL --create-dirs -o .agents/skills/jupiterone-$s/SKILL.md https://revampkey.com/marketplace/jupiterone/skills/$s/SKILL.md
done

Ask in plain language, for example “How many AWS EC2 instances do we have that have no owner tag?”

Into the shared .agents/skills folder

Connect the JupiterOne MCP server in VS Code.

Run this in your project folder to add all 4 skills:

for s in essentials asset-inventory-query dashboard-and-rule-authoring investigate-alert-and-rule; do
  curl -fsSL --create-dirs -o .agents/skills/jupiterone-$s/SKILL.md https://revampkey.com/marketplace/jupiterone/skills/$s/SKILL.md
done

Ask in plain language, for example “How many AWS EC2 instances do we have that have no owner tag?”

RevampKey or copy the files?

In RevampKey

One click when you connect JupiterOne
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the JupiterOne MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

JupiterOne skills FAQ

What is a JupiterOne agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each JupiterOne skill describes one job, which JupiterOne tools to use in which order, what to check first and when to stop and ask you.

Do the JupiterOne skills change anything on their own?

2 of the 4 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in JupiterOne.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect JupiterOne; elsewhere you copy the folders into your project or skills directory.

Do I need the JupiterOne MCP server too?

Yes. The skills tell the agent how to do the work; the JupiterOne MCP server gives it the tools to do it. The JupiterOne MCP setup guide covers every client.

JupiterOne MCP server setup · This page as Markdown

Put JupiterOne’s best workflows in your agent

Download RevampKey, connect JupiterOne and ask your first question in about a minute.

Download RevampKey Connect JupiterOne · 1 click

All 4 JupiterOne skills

Use JupiterOne with AI, safely

Use it when

Tools it uses

Answer asset inventory questions in JupiterOne

Use it when

Tools it uses

Build a JupiterOne dashboard widget or inline rule

Use it when

Tools it uses

Investigate a JupiterOne alert and its rule with AI

Use it when

Tools it uses

Get all 4 without copying a file

How JupiterOne skills work

How to install JupiterOne skills

RevampKey or copy the files?

In RevampKey

Copy into your project

JupiterOne skills FAQ

Put JupiterOne’s best workflows in your agent

Skills for related tools