> ## Documentation Index
> Fetch the complete documentation index at: https://docs.airctrl.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP prompt catalog

> Natural-language requests for every AIRCTRL MCP capability.

export function AirctrlWordmark() {
  return <span className="airctrl-wordmark" aria-label="AIRCTRL">
      <span aria-hidden="true" className="airctrl-wordmark-air">AIR</span>
      <span aria-hidden="true" className="airctrl-wordmark-ctrl">CTRL</span>
    </span>;
}

These prompts describe what you want in everyday language. Replace the sample IDs with IDs you obtained from <AirctrlWordmark />. For write operations, the prompt asks the agent to show the final input before execution. The tool names appear below each prompt only as a technical reference.

## How to use this catalog

1. Ask <AirctrlWordmark /> to check its configuration when identity mode is uncertain.
2. Replace every sample ID with an ID returned by <AirctrlWordmark />; do not ask the agent to invent one.
3. Keep discovery and mutation as separate steps.
4. Require a preview before a write or destructive tool.
5. Tell the agent whether plaintext may enter its context.
6. Stop on `403` instead of asking the agent to search for broader access.

Each heading lets you find the matching MCP capability. You do not need to include that heading or any tool name in your request. [MCP workflows](/mcp/workflows) combines these prompts into complete tasks with explicit review points.

## Status and projects

### Check <AirctrlWordmark /> configuration

<div className="section-help">
  Use this first when you are unsure which profile MCP loaded.
</div>

```text theme={}
Check how AIRCTRL is currently configured. Tell me which API environment and identity type are active. Do not reveal tokens, private keys or local file paths.
```

<div className="technical-reference">
  **MCP tool used:** `airctrl_status`
</div>

### List accessible accounts

<div className="section-help">
  This tool requires a human PAT.
</div>

```text theme={}
Show me every AIRCTRL account I can access, including each name and ID. Do not change anything.
```

<div className="technical-reference">
  **MCP tool used:** `list_accounts`
</div>

### List projects

```text theme={}
Show the active projects in account "00000000-0000-4000-8000-000000000001". Include each project name, ID and current state. Leave archived projects out.
```

<div className="technical-reference">
  **MCP tool used:** `list_projects`
</div>

### View a project

```text theme={}
Show me project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001". Summarize it without changing anything.
```

<div className="technical-reference">
  **MCP tool used:** `get_project`
</div>

### Create a project

<div className="section-help">
  The result includes the new project ID.
</div>

```text theme={}
Create a project named "Payments" in account "00000000-0000-4000-8000-000000000001" with the description "Credentials used by the payments service". Show me the exact details and wait for my confirmation before creating it.
```

<div className="technical-reference">
  **MCP tool used:** `create_project`
</div>

### Update a project

```text theme={}
Update project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001". Its name should be "Payments production", its description "Production credentials", and it should remain active. Show every resulting value and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `update_project`
</div>

### Archive or restore a project

<div className="section-help">
  Use `archived: false` to restore it.
</div>

```text theme={}
Archive project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001". Show me its name and ID, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `set_project_archive`
</div>

## Service Account metadata

### List Service Accounts

```text theme={}
Show me the Service Accounts in account "00000000-0000-4000-8000-000000000001". Return only their names, IDs, providers and states.
```

<div className="technical-reference">
  **MCP tool used:** `list_service_accounts`
</div>

### View a Service Account

<div className="section-help">
  Both metadata tools require a human PAT.
</div>

```text theme={}
Show me Service Account "00000000-0000-4000-8000-000000000040" in account "00000000-0000-4000-8000-000000000001". Only return safe metadata; do not change its state or credentials.
```

<div className="technical-reference">
  **MCP tool used:** `get_service_account`
</div>

## Record reading and local generation

### List record metadata

```text theme={}
Show the first 25 active records in project "00000000-0000-4000-8000-000000000010". Return only names, formats, tags and IDs. Do not decrypt any values.
```

<div className="technical-reference">
  **MCP tool used:** `list_records`
</div>

### Read a complete record

```text theme={}
Read record "00000000-0000-4000-8000-000000000020" locally. Use its decrypted fields only for this task. Do not print, log or repeat them in your response.
```

<div className="technical-reference">
  **MCP tool used:** `get_secret`
</div>

### Read selected record fields

```text theme={}
From record "00000000-0000-4000-8000-000000000020", read only the "username" and "password" fields for the production environment. Do not request any other field.
```

<div className="technical-reference">
  **MCP tool used:** `read_record`
</div>

### Load all project records

<div className="section-help">
  This can expose many records to the agent. Prefer `read_record` when one record is enough.
</div>

```text theme={}
Load every accessible record from project "00000000-0000-4000-8000-000000000010" for this task. Use decrypted values only as environment input and never include them in chat output.
```

<div className="technical-reference">
  **MCP tool used:** `get_all`
</div>

### View supported record formats

<div className="section-help">
  This helper is local and does not call the API.
</div>

```text theme={}
Show me the record formats AIRCTRL supports, their required fields and which ones AIRCTRL can generate. Do not create anything.
```

<div className="technical-reference">
  **MCP tool used:** `list_secret_types`
</div>

### Generate a secret locally

<div className="section-help">
  This helper generates values locally and stores nothing.
</div>

```text theme={}
Generate a 32-character password locally. Do not store or print its value. Tell me only whether generation succeeded.
```

<div className="technical-reference">
  **MCP tool used:** `generate_secret`
</div>

### Create an encrypted record

```text theme={}
Create a password record named "Generated database password" in project "00000000-0000-4000-8000-000000000010" and generate a 32-character value locally. Show the non-secret details and wait for my confirmation. Never print the generated value.
```

<div className="technical-reference">
  **MCP tool used:** `create_record`
</div>

### Replace record fields

<div className="section-help">
  When no `recordId` is used, supply `projectId`, `name` and `secretFormat` to create or update by name.
</div>

```text theme={}
Replace the "password" field in record "00000000-0000-4000-8000-000000000020" using the value from the trusted local environment. Confirm the record ID and field name, but never display the value.
```

<div className="technical-reference">
  **MCP tool used:** `set_secret`
</div>

## Record lifecycle

### Update record details

```text theme={}
Update record "00000000-0000-4000-8000-000000000020" with the tags "payments" and "production", a due date of "2026-12-01T00:00:00Z", and a 90-day rotation interval. Show the changes and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `update_record_metadata`
</div>

### Archive or restore a record

```text theme={}
Archive record "00000000-0000-4000-8000-000000000020". Show me its name and ID, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `set_record_archive`
</div>

### Transfer record ownership

```text theme={}
Transfer ownership of record "00000000-0000-4000-8000-000000000020" to user "00000000-0000-4000-8000-000000000050". Show the current and new owner, then wait for my explicit confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `transfer_record_ownership`
</div>

### View record version history

```text theme={}
Show the version history for record "00000000-0000-4000-8000-000000000020", including version IDs, creation times and which version is current. Do not change anything.
```

<div className="technical-reference">
  **MCP tool used:** `list_record_versions`
</div>

### Restore a previous record version

```text theme={}
Restore record "00000000-0000-4000-8000-000000000020" from version "00000000-0000-4000-8000-000000000021". Explain what the rollback creates, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `rollback_record`
</div>

### Rotate a record

```text theme={}
Rotate record "00000000-0000-4000-8000-000000000020". Confirm its name and explain what will change, without exposing its value, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `rotate_record`
</div>

## Record sharing

### Share a record with a user

```text theme={}
Give user "00000000-0000-4000-8000-000000000050" read access to record "00000000-0000-4000-8000-000000000020". Verify that the user is eligible and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `share_record_user`
</div>

### Share a record with a Service Account

```text theme={}
Give Service Account "00000000-0000-4000-8000-000000000040" access to record "00000000-0000-4000-8000-000000000020" in account "00000000-0000-4000-8000-000000000001". Show the target names and IDs, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `share_record_service_account`
</div>

### Share a record with a group

```text theme={}
Share record "00000000-0000-4000-8000-000000000020" with group "00000000-0000-4000-8000-000000000060". Verify that both belong to the same account and project, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `share_record_group`
</div>

### Remove a user's record access

```text theme={}
Remove user "00000000-0000-4000-8000-000000000050" from record "00000000-0000-4000-8000-000000000020". Explain that access ends immediately, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `revoke_record_user`
</div>

### Remove a Service Account's record access

```text theme={}
Remove Service Account "00000000-0000-4000-8000-000000000040" from record "00000000-0000-4000-8000-000000000020". Confirm that grants for other Service Accounts will remain unchanged, then wait for my approval.
```

<div className="technical-reference">
  **MCP tool used:** `revoke_record_service_account`
</div>

### Remove a group's record access

```text theme={}
Remove group "00000000-0000-4000-8000-000000000060" from record "00000000-0000-4000-8000-000000000020". Show the target names and IDs, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `revoke_record_group`
</div>

## Record audit

### Review one record's audit history

```text theme={}
Show the 25 most recent audit events for record "00000000-0000-4000-8000-000000000020". Summarize actions, actors and timestamps without exposing secret fields.
```

<div className="technical-reference">
  **MCP tool used:** `read_record_audit`
</div>

### Find unusual record activity

```text theme={}
Show unusual record activity in project "00000000-0000-4000-8000-000000000010" under account "00000000-0000-4000-8000-000000000001". Group the results by severity.
```

<div className="technical-reference">
  **MCP tool used:** `list_record_anomalies`
</div>

### Review daily record activity

```text theme={}
Summarize record activity for project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001" on the UTC day "2026-09-10".
```

<div className="technical-reference">
  **MCP tool used:** `list_record_activity`
</div>

### Review record alerts

```text theme={}
Show the first 25 record alerts for project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001". Do not take corrective action.
```

<div className="technical-reference">
  **MCP tool used:** `list_record_alerts`
</div>

### Review secret access events

```text theme={}
Show the first 25 secret-access events for records in project "00000000-0000-4000-8000-000000000010" under account "00000000-0000-4000-8000-000000000001".
```

<div className="technical-reference">
  **MCP tool used:** `list_record_access`
</div>

## Providers and credentials

### List supported AI providers

```text theme={}
Show the AI providers AIRCTRL supports, including their names, IDs and available configuration. Do not add any credentials.
```

<div className="technical-reference">
  **MCP tool used:** `list_providers`
</div>

### List provider credentials

```text theme={}
Show the provider credentials in account "00000000-0000-4000-8000-000000000001". Return labels, IDs, providers and validation status, but never request secret values.
```

<div className="technical-reference">
  **MCP tool used:** `list_provider_credentials`
</div>

### Add a provider credential

```text theme={}
Add a provider credential named "Production OpenAI" to account "00000000-0000-4000-8000-000000000001" for provider "00000000-0000-4000-8000-000000000070". Read the key from environment variable "AIRCTRL_MCP_KEY_OPENAI_PRODUCTION". Confirm only the variable name, never its value, then wait for my approval.
```

<div className="technical-reference">
  **MCP tool used:** `add_provider_key`
</div>

### List models for a credential

```text theme={}
Show the model IDs available through provider credential "00000000-0000-4000-8000-000000000071" in account "00000000-0000-4000-8000-000000000001".
```

<div className="technical-reference">
  **MCP tool used:** `list_provider_models`
</div>

### Replace a provider key

```text theme={}
Replace provider credential "00000000-0000-4000-8000-000000000071" in account "00000000-0000-4000-8000-000000000001" using the replacement from the trusted local secret source. Never echo the key. Wait for my confirmation before changing it.
```

<div className="technical-reference">
  **MCP tool used:** `rotate_provider_key`
</div>

### Rename a provider credential

```text theme={}
Rename provider credential "00000000-0000-4000-8000-000000000071" in account "00000000-0000-4000-8000-000000000001" to "Primary OpenAI". Show the current and new labels, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `rename_provider_credential`
</div>

### Revoke a provider credential

```text theme={}
Revoke provider credential "00000000-0000-4000-8000-000000000071" in account "00000000-0000-4000-8000-000000000001". First show every gateway that depends on it, then wait for my explicit confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `revoke_provider_credential`
</div>

## Gateway setup and routing

### List gateways

```text theme={}
Show the gateways in project "00000000-0000-4000-8000-000000000010", including each name, ID, provider and active state.
```

<div className="technical-reference">
  **MCP tool used:** `list_gateways`
</div>

### Create a gateway

```text theme={}
Create a bare gateway named "Payments AI" in project "00000000-0000-4000-8000-000000000010" under account "00000000-0000-4000-8000-000000000001". Do not attach a provider key yet. Show the details and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `create_gateway`
</div>

### Set up a complete gateway

<div className="section-help">
  This workflow can add a provider credential, create a gateway and create a one-time gateway token.
</div>

```text theme={}
Set up an OpenAI gateway named "Payments AI" in project "00000000-0000-4000-8000-000000000010". Read the provider key from "AIRCTRL_MCP_KEY_OPENAI_PRODUCTION", use "gpt-5" by default, and name the first gateway token "Local development". Explain every resource that will be created and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `setup_gateway`
</div>

### View gateway connection settings

```text theme={}
Show me how to connect to gateway "00000000-0000-4000-8000-000000000030", including compatible base URLs and required header names. Do not create a new token.
```

<div className="technical-reference">
  **MCP tool used:** `get_connection_config`
</div>

### Change gateway routing

```text theme={}
Attach provider credential "00000000-0000-4000-8000-000000000200" to model "gpt-5" on gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001", and make provider "00000000-0000-4000-8000-000000000070" with that model the default route. Show the current and proposed routing, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `set_routing`
</div>

### Change gateway limits and behavior

```text theme={}
For gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001", set a monthly spend limit of 100, a rate limit of 120 requests per minute, metadata logging without bodies, guardrails in flag mode, and a five-minute cache. Show every proposed change and wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `set_gateway_settings`
</div>

### Detach a provider credential

```text theme={}
Detach provider credential "00000000-0000-4000-8000-000000000071" from gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". Confirm that another route will remain usable, then wait for my approval.
```

<div className="technical-reference">
  **MCP tool used:** `detach_gateway_credential`
</div>

### Delete a gateway

```text theme={}
Delete gateway "00000000-0000-4000-8000-000000000030" from account "00000000-0000-4000-8000-000000000001". Explain which gateway tokens will stop working, then wait for my explicit confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `delete_gateway`
</div>

## Gateway tokens

### List gateway tokens

```text theme={}
Show the tokens for gateway "00000000-0000-4000-8000-000000000030", including IDs, labels, status and expiration. Never request their secret values.
```

<div className="technical-reference">
  **MCP tool used:** `list_gateway_tokens`
</div>

### Create a gateway token

```text theme={}
Create a token named "Local development" for gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". It should expire in 30 days. Wait for my confirmation and send the one-time value only to the approved storage step.
```

<div className="technical-reference">
  **MCP tool used:** `create_gateway_token`
</div>

### Rename a gateway token

```text theme={}
Rename token "00000000-0000-4000-8000-000000000031" on gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001" to "CI production". Show the current and new names, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `rename_gateway_token`
</div>

### Revoke a gateway token

```text theme={}
Revoke token "00000000-0000-4000-8000-000000000031" on gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". Explain that authentication will stop immediately, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `revoke_gateway_token`
</div>

### Delete a gateway token

```text theme={}
Permanently delete token "00000000-0000-4000-8000-000000000031" from gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". Confirm that it is already revoked, then wait for my approval.
```

<div className="technical-reference">
  **MCP tool used:** `delete_gateway_token`
</div>

## Logs, usage and OpenTelemetry

### Review gateway requests

```text theme={}
Summarize up to 50 requests handled by gateway "00000000-0000-4000-8000-000000000030" since "2026-09-01T00:00:00Z". Do not read request or response bodies.
```

<div className="technical-reference">
  **MCP tool used:** `read_usage`
</div>

### Inspect one gateway request

```text theme={}
Inspect log "00000000-0000-4000-8000-000000000080" from gateway "00000000-0000-4000-8000-000000000030". Read stored bodies only to diagnose this request and do not repeat sensitive content.
```

<div className="technical-reference">
  **MCP tool used:** `read_gateway_log`
</div>

### Review provider-key access

```text theme={}
Show up to 50 denied provider-key access events for gateway "00000000-0000-4000-8000-000000000030" since "2026-09-01T00:00:00Z". Group the denials by reason.
```

<div className="technical-reference">
  **MCP tool used:** `read_gateway_key_access`
</div>

### Review project usage logs

```text theme={}
Show up to 50 usage logs for gateway "00000000-0000-4000-8000-000000000030" in project "00000000-0000-4000-8000-000000000010" since "2026-09-01T00:00:00Z". Return metadata only.
```

<div className="technical-reference">
  **MCP tool used:** `list_usage_logs`
</div>

### Inspect one project usage log

```text theme={}
Inspect usage log "00000000-0000-4000-8000-000000000080" in project "00000000-0000-4000-8000-000000000010". Do not quote request or response bodies in the final answer.
```

<div className="technical-reference">
  **MCP tool used:** `read_usage_log`
</div>

### Review project spend

```text theme={}
Compare current spend in project "00000000-0000-4000-8000-000000000010" with its effective limit. Do not change any settings.
```

<div className="technical-reference">
  **MCP tool used:** `read_usage_spend`
</div>

### Review project usage metrics

```text theme={}
Summarize daily requests, errors, tokens, latency and spend for project "00000000-0000-4000-8000-000000000010" since "2026-09-01T00:00:00Z".
```

<div className="technical-reference">
  **MCP tool used:** `read_usage_metrics`
</div>

### View OpenTelemetry settings

```text theme={}
Show the OpenTelemetry export settings for gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". Return only safe settings and never request stored header values.
```

<div className="technical-reference">
  **MCP tool used:** `get_otel_export`
</div>

### Change OpenTelemetry settings

```text theme={}
Enable OpenTelemetry metrics and traces for gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". Send them to "https://otel.example.com/v1/traces" and read headers from "OTEL_EXPORT_HEADERS". Show the destination and enabled data, then wait for my confirmation.
```

<div className="technical-reference">
  **MCP tool used:** `set_otel_export`
</div>

## When a prompt fails

If a tool returns validation, permission or not-found errors, stop and explain the exact code. Do not try neighboring IDs or broader scopes. Retry only temporary `rate_limited`, `internal_error` or `service_unavailable` failures, with a short bounded backoff.