HuaweiCloud DevKit

中文 | English

Help AI coding agents use Huawei Cloud safely and accurately — skills guidance, KooCLI tooling, and safety policies in one integration.

HuaweiCloud DevKit provides AI coding agents with the knowledge, tools, and safety guardrails they need to work with Huawei Cloud. It supports mainstream agents including OpenCode, Codex, and CodeArts Agent.

Quick Start

OpenCode

npx --yes huaweicloud-devkit install

Installs 27 skills, the MCP server, and safety policies, and updates your OpenCode config. Restart the session after installation for the MCP tools to take effect.

npx --yes huaweicloud-devkit doctor    # self-check: hcloud, MCP, skills, auth
npx --yes huaweicloud-devkit status    # show installation status
npx --yes huaweicloud-devkit update    # update to the latest version
npx --yes huaweicloud-devkit uninstall # uninstall

Codex

npx --yes huaweicloud-devkit install --target codex

The Codex CLI must be installed first. --target all skips Codex when the Codex CLI is missing.

CodeArts Agent

CodeArts has no plugin marketplace; it is adapted through skills + MCP:

npx --yes huaweicloud-devkit install --target codearts

Installs 27 skills to ~/.codeartsdoer/skills/ and project-level .codeartsdoer/skills/, and registers the MCP server in user- and project-level .codeartsdoer/mcp/mcp_settings.json. If KooCLI already exists locally (~/hcloud/hcloud.exe), HCLOUD_BIN is injected into the MCP config automatically. Restart the session after installation.

npx --yes huaweicloud-devkit install-hcloud   # install KooCLI
npx --yes huaweicloud-devkit doctor           # self-check
npx --yes huaweicloud-devkit status --target codearts
npx --yes huaweicloud-devkit uninstall --target codearts

Sandbox mode: CodeArts defaults to bash_mode: sandbox, which blocks KooCLI from writing to config directories (e.g. ~/.hcloud/root), preventing the privacy agreement from persisting and KooCLI from running. install-hcloud detects sandbox mode and gives clear guidance — install and use KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Permissions → Bash mode).

Authentication: After KooCLI is ready, run hcloud configure init outside the sandbox terminal to configure AK/SK and region before describing your Huawei Cloud tasks.

Other Agents

For agents that support the Model Context Protocol (MCP), configure the MCP server manually:

{
  "mcp": {
    "huaweicloud-devkit": {
      "type": "local",
      "command": ["node", "<path>/plugins/huaweicloud-core/src/mcp-server.mjs"],
      "enabled": true
    }
  }
}

Then install the skills:

npx --yes huaweicloud-devkit install

Prerequisites: KooCLI (hcloud) installed and authenticated. The MCP server requires Node.js >= 20. If hcloud is not on PATH, set the HCLOUD_BIN environment variable to the full path.

What's Included

Plugin

The huaweicloud-core plugin bundles the MCP server config, 27 agent skills, and safety policies into a single install.

Skills

Agent skills are curated packages of instructions and reference materials that help agents complete specific Huawei Cloud tasks. Skills load on demand — agents only discover and retrieve what is relevant to the current task.

Includes 6 meta-skills (routing, discovery, CLI/auth, API/SDK, safety, troubleshooting) and 20 service skills (covering ECS, OBS, VPC, IAM, RDS, GaussDB, FunctionGraph, APIG, CCE, SMN/DMS, ModelArts, Cloud Eye, CTS, DEW, Billing, CBR, WAF/AAD, DDS/DCS, Deployment, Getting Started).

Browse the skills/ directory for all available skills.

Rules Files

Recommended project-level config files that tell agents how to use Huawei Cloud effectively — for example, preferring the MCP server, discovering available skills, and following least-privilege IAM principles.

See rules/huawei-agent-rules.md.

MCP Server

A local MCP server (plugins/huaweicloud-core/src/mcp-server.mjs) provides secure KooCLI access to agents over the Model Context Protocol.

• Safety-first execution — every hcloud command is classified (read/write/secret) before execution; write operations require explicit user approval.
• Output redaction — credential-shaped values (AK/SK, tokens, passwords) are automatically replaced with ***REDACTED***.
• 16 structured tools — skill search, CLI checks, read-only commands, region discovery, error explanation, hook risk checks, and more.
• Zero runtime dependencies — pure Node.js (>= 20), no npm install needed.

See the MCP tools table.

Safety Model

Three-layer defense:

See docs/safety-model.md.

MCP Tools

Documentation

• Architecture
• Safety Model
• Open Source Positioning
• Changelog
• KooCLI official docs

License

This project is licensed under the Apache-2.0 License. See LICENSE.