Honua
// operate with agents

Agents propose.
Policy decides.

honua-devops is a private-beta commercial operator surface for one environment. Register its MCP server with a compatible client to inspect health, diagnose incidents, plan deployments, and draft GitOps changes. In plan mode, tools return evidence and a proposal without applying it. PR-first routes eligible configuration changes through review instead of applying them directly. Explicit policy can allow a narrow set of deterministic actions; fleet-wide control remains planned.

mcp://honua-devopsoperations · plan mode · pr-first● EXAMPLE
USER
Plan a deployment of Honua to AWS Lambda.
AGENT · tool_call
deploy_service_gitops({
  target: "staging",
  environment: "staging"
})
HONUA-DEVOPS · result
{
  status: "plan-ready",
  applied: false,
  approval: "pr-first",
  evidence: ["topology", "policy-gates"],
  audit: "recorded"
}
AGENT
Plan ready for staging — nothing applied. The change goes out as a GitOps proposal for your team to review and merge. Coordinated dev → staging → prod promotion remains planned.
// private-beta setup

Connect your agent to a bounded operator surface.

honua-devops --mcp exposes the private-beta tools as an MCP stdio server. Access requires the beta software and a narrowly scoped Honua credential. Configure the redacted action-record sink before using the tools.

~/honua · register the operator MCP server
# register honua-devops with Claude Code
$ claude mcp add honua-devops \
--env HONUA_DEVOPS_HONUA_API_BASE_URL=http://localhost:8080 \
--env HONUA_DEVOPS_HONUA_API_KEY=<scoped-api-key> \
--env HONUA_DEVOPS_AUDIT_HOOK_TARGET=file:///abs/path/audit.jsonl \
-- /abs/path/honua-devops/artifacts/mcp/Honua.DevOps.Agent --mcp
 
# verify the configured mode, action tier, and approval flow
$ claude mcp list
honua-devops · 24 tools
honua-devops MCP stdio server ready
(tools=24, mode=plan, tier=plan, approval=pr-first, ...)
 
# Codex CLI works the same way
$ codex mcp add honua-devops -- <same command>
$ _
claude code · honua-devopsworked session● EXAMPLE
USER
describe my environment
AGENT · tool_call
describe_environment()
AGENT
Pro edition, healthy. 14 services live, deploy targets eks · lambda, environments dev / staging / prod.
USER
diagnose slow tiles
AGENT · tool_call
honua_diagnose() → honua_explain_slow_queries()
AGENT
Read-only diagnostics over health, metrics, and error telemetry: the p95 regression traces to a cold tile cache after the style change. Remediation steps ranked, validation checks included — and every call above is in the audit journal.

// These products have different jobs: honua-devops is the private-beta commercial operator surface; the open geospatial-mcp specification covers Community data discovery and query. In MCP mode, the client supplies the model reasoning.

// control model

Controls live below the model.

The operator configures credentials, tool permissions, action policy, and approval flow before a session. The tool handlers and engine enforce those boundaries; model instructions do not change them mid-conversation.

01 · Plans before actions
Plan mode is the default. Planning tools return plans and evidence bundles without applying manifests. Any deterministic action uses a separate path that requires explicit policy and passes through configured release controls.
02 · Reviewable proposals first
Configuration and metadata changes default to GitOps proposals for human review. Operators can explicitly permit a narrow set of deterministic actions. Broader autonomy remains disabled until Honua can verify outcomes after each action.
03 · Audit by default
Every operator tool call emits a structured record with argument redaction. Configure durable storage and retention externally; Honua does not claim a tamper-evident compliance audit store today.
04 · No direct feature writes
The private-beta operator tools do not write feature data directly. Supported data or configuration changes use validated specifications and dry runs before an approved or explicitly permitted action can apply.
05 · Scoped credentials
The private-beta operator currently uses a narrowly scoped Honua API key — never the admin password. Bearer/session identity is still being completed and should be treated as pending. The configured credential bounds what a conversation can reach.
06 · Local-model option
A compatible MCP client can use a model served through vLLM or Ollama on hardware you control. That keeps model prompts and responses within the network boundary you configure; review the client and telemetry configuration separately.
// available in private beta

Inspect. Diagnose. Plan. Propose.

The table separates the private-beta operator tools from the Community discovery and query surface. Planned fleet behavior is not included.

Current Honua agent capabilities and controls
SurfaceWhat agents do todayThe guardrail
OperateDescribe the environment — edition, services, deploy targets, allowed environments — and track recent operations.Read-only · audit-logged
DiagnoseAnalyze logs and metrics, triage incidents, explain slow-query signatures with prioritized remediation and validation checks.Read-only diagnostics · audit-logged
DeployPlan upgrades and deployments and recommend a topology for one environment.Plan mode — evidence out, nothing applied
ProposeDraft GitOps proposals for configuration and metadata changes against one deploy target.PR-first by default; explicitly permitted actions only
Discover & queryService discovery, schema inspection, filtered queries and statistics, bounded spatial analysis on the open MCP data surface.Read-only · cited sources · Community
Change configurationPrepare a specification and dry run. The engine validates and plans before an approved or explicitly permitted deterministic action.Validated spec + dry run · private beta

// The honua-devops MCP server exposes 24 operator tools in private beta. MCP discovery & query are Community; commercial operator automation remains private beta until release and rollback evidence is complete. The edition split →

// planned, not available

What must exist before fleet automation.

The private-beta operator starts in plan mode, routes eligible changes through pull requests, and records tool actions. Fleet automation will require verification after each action, recovery when an automated action or rollback fails, signed cross-repository promotion, and coordinated fleet control. Honua does not claim a self-healing production loop today. Review the current evidence →

// next

Bring an agent into the loop.
Keep policy in control.