Frequently asked questions
Direct technical answers about the TalkOps framework, multi-agent architecture, Model Context Protocol (MCP) servers, security guardrails, and local setup.
General
What is TalkOps?
TalkOps is an open-source, multi-agent framework built for DevOps, platform engineering, and Site Reliability Engineering (SRE). Rather than running unconstrained bash scripts or relying on generic chat assistants, TalkOps coordinates specialized agents that plan, generate, validate, and troubleshoot infrastructure code, Kubernetes manifests, CI/CD pipelines, and observability stacks. See the TalkOps Framework Overview.
Is TalkOps open source? What license does it use?
Yes. TalkOps, its specialized agents, and its suite of Model Context Protocol (MCP) servers are open source under the Apache 2.0 License. You can inspect, modify, self-host, and deploy TalkOps across commercial and air-gapped environments. Browse the repositories on GitHub.
What LLM providers does TalkOps support?
TalkOps is model-agnostic and supports 26+ built-in LLM providers:
- Frontier Model Labs: Anthropic (
claude-opus-5-5,claude-sonnet-5,claude-haiku-4-5), OpenAI (gpt-6-astra,gpt-5.6-luna,o3-pro), Google GenAI (gemini-3.8-flash,gemini-3.1-pro-preview), DeepSeek (deepseek-v4-pro), xAI (grok-4.5), Mistral AI, Meta, Cohere, and Perplexity - Enterprise Cloud & Managed Platforms: AWS Bedrock, Azure OpenAI, Google Vertex AI, Anthropic on Vertex AI, IBM watsonx, and NVIDIA NIM
- Fast Routers & Aggregators: OpenRouter (
300+models), Groq, Fireworks AI, Together AI, DeepInfra, Cerebras, Sambanova, Cloudflare Workers AI, and Hugging Face - Local & Self-Hosted Engines: Ollama, vLLM, LM Studio, and any OpenAI-compatible endpoint
See the Framework Model Providers Guide, OpsCode Model Providers Guide, and Kubernetes Agent Model Providers Guide for configuration details.
How is TalkOps different from ChatGPT or GitHub Copilot?
General-purpose coding assistants focus on single-file autocomplete or stateless chat. TalkOps is built specifically for multi-step infrastructure engineering where live cluster state, schema validation, and blast-radius control matter:
| Capability | Generic Coding Assistants | TalkOps Framework |
|---|---|---|
| Execution Model | Single-turn or monolithic prompt loop | Hierarchical LangGraph state machine (Supervisor → Coordinator → Subagent) |
| State Awareness | Blind to live cluster state and remote Terraform locks | Inspects live resources and state locks via read-only MCP resources |
| Tool Interface | Ad-hoc shell commands | 10 domain-specific MCP servers with strict JSON Schema validation |
| Context Management | Single context window prone to log overflow | Isolated subagent memory branches (BranchMemoryStore) |
| Safety Governance | Optimistic execution | Jev Smart Mode (<100ms blast-radius classifier) and Human-in-the-Loop approval gates |
What infrastructure does TalkOps manage?
- Kubernetes & GitOps: Helm charts, ArgoCD applications, Argo Rollouts canary/blue-green releases, Traefik
IngressRouteCRDs, and Pod Security Standards (Restricted). - Infrastructure as Code: AWS, Azure, and GCP Terraform/OpenTofu modules, CloudFormation, and Ansible playbooks with sandbox
init/validate/planverification. - CI/CD Pipelines: GitHub Actions workflows and Jenkins pipelines with automated diagnostics and PR reviews.
- Observability & Incident Response: Prometheus metrics, Alertmanager silences, OpenTelemetry Collector pipelines, Loki LogQL queries, Tempo TraceQL traces, and 9 built-in incident webhook adapters (PagerDuty, Datadog, ServiceNow, AWS SNS).
Can I use TalkOps without Kubernetes?
Yes. Every component in TalkOps is modular. You can run the TalkOps Framework (talkops) or OpsCode (ops) directly in your terminal, CI/CD pipelines, or central server to manage cloud infrastructure, Terraform modules, and CI/CD pipelines without a Kubernetes cluster.
What is the pricing model for TalkOps?
TalkOps and its MCP servers are free and open source. There are no license fees or seat tiers—you only pay your chosen LLM provider for API token usage and your cloud provider for the infrastructure you provision.
Agents and architecture
What agents are currently available?
- TalkOps Framework (Available): Universal autonomous DevOps operations framework supporting interactive terminal sessions (
talkops), headless CI/CD pipelines (talkops -p), and multi-tenant central server execution (talkops serve) with Jev Smart Mode, 9 webhook adapters, and dynamic plugin subagents. - OpsCode (Available): Terminal-native DevOps coding agent (
ops) with 6 specialized subagents, goal rubrics, and remote sandboxes. - Kubernetes Agent (
k8s-autopilot) (Available): Multi-domain Kubernetes supervisor coordinating 13 subagents and 8 MCP servers.
Can I use agents independently or do I need the full framework?
All agents and MCP servers are decoupled. You can run talkops or ops as a standalone CLI on your laptop, deploy talkops serve or k8s-autopilot in your cluster, or connect individual TalkOps MCP servers to Claude Code or Cursor without installing the rest of the ecosystem.
How do agents communicate with each other?
Distributed agents communicate over the Agent-to-Agent (A2A) Protocol using JSON-RPC 2.0 over HTTPS, advertising their capabilities via /.well-known/agent.json Agent Cards.
What is the Deep Agent pattern?
The Deep Agent pattern structures complex engineering work into a hierarchical graph: a top-level Supervisor decomposes the user's goal and delegates domain tasks to Coordinators and Subagents running in isolated memory scopes (BranchMemoryStore). Noisy intermediate outputs (such as 500-line Terraform plans or raw pod logs) stay inside the subagent's context, and only verified diffs and summaries return to the supervisor:
Model Context Protocol (MCP) servers
What is the Model Context Protocol (MCP)?
The Model Context Protocol (MCP) is an open standard that normalizes how AI agents discover and invoke external tools and read-only data resources. TalkOps uses MCP servers to give agents safe, schema-validated access to DevOps tools instead of brittle bash scripts. See the MCP Ecosystem Overview.
What MCP servers does TalkOps provide?
TalkOps maintains 10 MCP servers across four infrastructure domains:
- Helm MCP Server — 18 tools for chart discovery, template rendering, dry-run installs, and rollbacks.
- Terraform MCP Server — Provider documentation search and sandboxed
init/validate/plan/applyworkflows. - ArgoCD MCP Server — 29 tools for GitOps application sync, diff inspection, and rollback.
- Argo Rollouts MCP Server — Canary and blue-green progressive delivery automation.
- Traefik MCP Server — 11 tools for
IngressRoutetraffic splitting, middlewares, and NGINX migration. - Prometheus MCP Server — 28 tools for PromQL queries, exporter management, and TSDB cardinality analysis.
- Alertmanager MCP Server — 14 tools for alert triage, maintenance silences, and routing tree inspection.
- OpenTelemetry MCP Server — 19 tools for Collector pipeline synthesis and polyglot auto-instrumentation.
- Loki MCP Server — 9 tools for discovery-first LogQL queries and byte-scan cost guardrails.
- Tempo MCP Server — 16 tools for TraceQL search, critical-path latency breakdown, and RED metrics.
Can I use TalkOps MCP servers with Claude Desktop, Cursor, or Windsurf?
Yes. Every TalkOps MCP server implements the standard MCP stdio and streamable-http transports and works out of the box with OpsCode, Claude Desktop, Claude Code, Cursor, and Windsurf.
Security and governance
Does TalkOps execute commands automatically in production?
No. TalkOps enforces a strict "Produce Diffs, Not Deployments" model. Mutating operations default to dry-run validation (--dry-run=server or terraform plan) and pause at a Human-in-the-Loop approval gate before applying changes.
How does TalkOps classify command risk?
TalkOps classifies tool executions across a 4-Tier Security Guard:
- Tier 1 (
SAFE): Read-only queries, metric reads, log searches, and dry-run validations—executed automatically. - Tier 2 (
MUTATING_SAFE): Reversible local edits or non-destructive configuration updates. - Tier 3 (
MUTATING_DESTRUCTIVE): Resource deletions, production rollouts, or state modifications—requires explicit human confirmation. - Tier 4 (
PRIVILEGED): IAM policy changes, secret access, or destructive system commands—requires explicit operator authorization or is blocked by policy.
What is Jev Smart Mode and how does it reduce LLM cost and latency?
Jev Smart Mode (--smart / --approval-mode smart) is TalkOps's dual-engine runtime controller powered by the TypeSafe AI Jev engine:
<70msDynamic Model & Reasoning Router: Classifies each turn across three model tiers (fast,standard,powerful) and reasoning effort levels (off,low,medium,high,max), cutting token spend by 80–90% on routine lookups while reserving frontier reasoning for complex outages.<100msSystem One Pre-Execution Safety Gate: Evaluates every shell command, file edit, and MCP tool call for mutation, blast radius (0.0–2.0), and intent alignment with zero LLM prompt token overhead, failing closed to Human-in-the-Loop approval on production changes. See Approval Modes & Jev Smart Mode.
How does TalkOps automate webhook incident triage and root cause analysis (RCA)?
When running talkops serve, TalkOps listens on 9 built-in webhook adapters (PagerDuty, Prometheus Alertmanager, Datadog, AWS SNS, CloudEvents, ServiceNow, Jenkins, GitHub, and Azure Monitor). It collapses alert storms via fingerprint deduplication, correlates Kubernetes events, Prometheus metrics, Loki logs, Tempo traces, and recent deployments, and writes a structured Root Cause Analysis (RCA) back to PagerDuty, ServiceNow, Slack, or GitHub PRs. See Webhooks & Event-Driven Automation.
What is the TalkOps DevOps Plugins Marketplace?
The TalkOps DevOps Plugins Marketplace is a catalog of 40 production-grade plugins following the open Agent Plugins 1.0.0 specification (compatible with TalkOps, OpsCode, Claude Code, and OpenAI Codex):
- 17 AWS Specialist Agent Plugins (IaC, Serverless, Containers, SRE, Security, FinOps, Solutions Architect, Data/AI, Modernization)
- 21 AWS Vertical Plugins & 2 Partner Plugins (245 progressive-disclosure skills and 109 slash-command playbooks, plus HashiCorp Terraform and Crossplane AWS)
- 3-Layer Safety & AWS IAM Guardrails and a 62-Server AWS MCP Coverage Matrix.
How do Remote Sandboxes isolate command execution in TalkOps?
TalkOps supports the sandbox-as-tool pattern (--sandbox), allowing the orchestrator to run on your laptop or server while executing shell and filesystem operations inside isolated Docker containers, Kubernetes pods, Modal, Daytona, or Runloop sandboxes. See Remote Sandboxes.
Getting started
How do I install TalkOps locally?
Install the TalkOps Framework CLI (talkops and ops) in under 60 seconds:
curl -LsSf https://raw.githubusercontent.com/talkops-ai/talkops/main/scripts/install.sh | bash
# or via uv:
uv tool install --prerelease=allow talkops-ai
talkops doctor
talkops --smart
For full walkthroughs, see the TalkOps Framework Quickstart, OpsCode Quickstart, or the Kubernetes Agent Quickstart.