An agent’s permissions change in review.
Agents, environments, egress rules, networks, groups, and images are Terraform resources — twenty-five of them. Import what the Console created, plan on a pull request, apply on merge.
25 resources
Not a thin wrapper over a couple of objects. Environments, egress rules, private resources, groups, and images are all declarable — which is what makes it possible to review an agent’s reach in a pull request rather than reconstruct it later.
CLI & Terraform · 5 features →agentmcpskillenvinit_scriptvolumeenvironmentimagerunneregress_ruleegress_rule_attachmentnetworkprivate_resourceprivate_resource_accesstunnel_credentialorganizationgroupgroup_membershipuserllm_providermodelsecretsecret_providerappapp_installationStart by clicking. Keep going by declaring.
You do not have to choose between clicking to get started and declaring for the long run. Import what the Console created, write the matching block, and the plan shows you the drift.
Secrets are the exception — the value is not retrievable, by design, so they cannot be imported.
The review step is the control
Plan on the pull request, apply on merge, with a dedicated token per environment. Granting an agent access to a new internal database becomes a diff somebody approved.
Treat the state file as production secret material — a secret’s value is stored in it, so use an encrypted remote backend.
See it on your own cluster.
Thirty minutes, your infrastructure, your stack. Or skip the call — it is one Helm release onto a cluster you already run.