Question 1

What is CloudThinker Connections?

Accepted Answer

CloudThinker Connections is the secure production-connection layer that lets AI agents reach your infrastructure without lowering your security posture. It supports four network tiers — public HTTPS, IP allowlist, AWS PrivateLink VPC endpoint, and site-to-site VPN — each with brokered identity, scoped credentials issued at task time, and tamper-evident audit.

Question 2

What network tiers does Connections support?

Accepted Answer

Four tiers, picked per workload: public HTTPS (cloud APIs, SaaS), IP allowlist (IP-gated databases), AWS PrivateLink VPC endpoint ("no public internet" workloads), and site-to-site VPN (on-prem and hybrid). You pick the tier that matches the security floor your security team has already approved — Connections does not ask you to lower it for an AI tool.

Question 3

Does CloudThinker hold long-lived production credentials?

Accepted Answer

No. Connections brokers a short-lived, scoped token at task time. The credential lives in the execution environment (the sandbox), not in the prompt and not in a static config. Once the task completes, the credential is revoked. There is no .env on a developer laptop with admin access to production.

Question 4

Which connections does CloudThinker support?

Accepted Answer

35+ native connections live today across six areas: cloud and platforms (AWS, Google Cloud, Azure, Vercel), databases and streaming (PostgreSQL, MySQL, MongoDB, Redis, Neon, Apache Kafka, RabbitMQ, Elasticsearch), observability (Datadog, Grafana, Prometheus, New Relic, Dynatrace, AppDynamics, Zabbix, Better Stack, Coralogix, SigNoz, Rollbar), infrastructure and DevOps (Kubernetes, Cloudflare, Argo CD, Jenkins, CircleCI, AWX, SonarQube, Vault, SSH), incident and ticketing (PagerDuty, ServiceNow, Atlassian, Backlog), and IoT (Flespi). On the roadmap: observability (Sentry, Honeycomb, Chronosphere, Sumo Logic, Splunk, Moogsoft), infrastructure and IaC (Terraform, Ansible, Spacelift, env0, Firefly, Backstage), security and DevSecOps (Wiz, Orca Security, Prisma Cloud, Lacework, Aqua Security, Sysdig, Snyk, GitGuardian, CrowdStrike, Keycloak, Firebase), cost and FinOps (Kubecost, CloudHealth, Cloudability, Vantage, Spot.io, ProsperOps, nOps, CAST AI), and more incident tooling (incident.io, Rootly, FireHydrant, Opsgenie, BigPanda). Beyond the native catalog, any tool that exposes an MCP server connects through the Model Context Protocol, so net new connections land in minutes rather than weeks of platform engineering.

Connect your stack. Give every agent the full picture.