MCP workflow prompts

Review project "00000000-0000-4000-8000-000000000010" in account "00000000-0000-4000-8000-000000000001". Summarize its status and the first 50 active records, including names, formats, tags and due dates. Do not decrypt any values or change anything.

Find the record named "Payments environment" in project "00000000-0000-4000-8000-000000000010" and show only its safe metadata and ID. Wait for my confirmation. Then read only "API_URL" and "API_TOKEN" from its production environment, use them only for the active task, and never print or summarize their values.

Verify that AIRCTRL can generate passwords, then prepare a 32-character password record named "Payments database password" in project "00000000-0000-4000-8000-000000000010". Show only the non-secret details and wait for my confirmation. After creating it, confirm its name, format and ID without printing the generated value. Do not decrypt it unless I approve that separately.

Give Service Account "00000000-0000-4000-8000-000000000040" access to record "00000000-0000-4000-8000-000000000020" in project "00000000-0000-4000-8000-000000000010" under account "00000000-0000-4000-8000-000000000001". First confirm that the Service Account is active and the record exists. Show both names and IDs and wait for my confirmation. Change only this record grant; do not alter roles, project assignments or credentials.

Remove Service Account "00000000-0000-4000-8000-000000000040" from record "00000000-0000-4000-8000-000000000020". First confirm both resources and explain that only this record grant will be removed. Wait for my explicit confirmation. Do not pause, revoke or otherwise modify the Service Account.

Set up an OpenAI gateway named "Payments AI" in project "00000000-0000-4000-8000-000000000010". Use the key stored in "AIRCTRL_MCP_KEY_OPENAI_PRODUCTION", model "gpt-5", and name the first gateway token "Local development". Confirm that OpenAI is enabled, explain every resource that may be created, show only the environment variable name, and wait for my approval. Send the one-time token only to the approved storage step, then return the new gateway's compatible base URLs.

Replace the active token named "CI production" on gateway "00000000-0000-4000-8000-000000000030" with a token named "CI production replacement" that expires in 30 days. Show the old token's ID and expiration, then wait for my confirmation. Send the new one-time value only to the approved storage step and stop until I confirm the workload uses it. Only then revoke the old token and report both final states.

Diagnose gateway "00000000-0000-4000-8000-000000000030" in project "00000000-0000-4000-8000-000000000010" since "2026-09-01T00:00:00Z". Review daily metrics, up to 25 requests with status 500, and up to 25 denied provider-key access events. Summarize timing, provider, model, status and denial reasons. Do not read bodies or change routing, credentials, limits or tokens.

Find log "00000000-0000-4000-8000-000000000080" among the 25 most recent requests for gateway "00000000-0000-4000-8000-000000000030". Show its safe metadata and ask before reading stored bodies. After I approve, diagnose the failure without quoting credentials, authorization headers or sensitive body fields.

Review current spend, the effective limit, request rate and error rate for project "00000000-0000-4000-8000-000000000010". Propose a specific spend limit, time window and per-minute request limit for gateway "00000000-0000-4000-8000-000000000030", but do not change anything yet. After my explicit approval, apply only the approved values and confirm the resulting effective limit.

Replace provider credential "00000000-0000-4000-8000-000000000071" in account "00000000-0000-4000-8000-000000000001". First show its label and provider and verify that it currently returns models. Never request or display the current secret. Use the replacement from the trusted local secret source, wait for my confirmation, never echo the new value, and verify afterward that models remain available.

For gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001", show the current OpenTelemetry state, endpoint and export flags without requesting header values. Prepare to enable metrics and traces to "https://otel.example.com/v1/traces" using headers from "OTEL_EXPORT_HEADERS". Wait for my confirmation, apply the change, and report only the final safe settings.

Decommission gateway "00000000-0000-4000-8000-000000000030" in account "00000000-0000-4000-8000-000000000001". First review its connection settings, active tokens and 25 most recent requests. List every token that will stop working and wait for my explicit confirmation. Delete only the gateway; do not revoke provider credentials because other gateways may use them.