Connecting AI assistants safely to Coolify deployments, n8n workflows, and GitHub CI without exposing master infrastructure tokens

Infrastructure Observability with Ops Hub MCP and Out-of-Band Telegram Approvals

When a deployment stalls or an automation workflow fails, engineers shouldn't have to jump across five dashboards. Here is how we engineered Ops Hub MCP with deep-frozen policy pipelines, automatic secret redaction, and Telegram approval gates.

28 octobre 2026• 8 lecture min.• Mots par Sajjad Samaei

Sajjad Samaei, product designer and full-stack engineer — Six-stage Ops Hub policy pipeline with allowlist target resolution and 20 KB redacted envelopes

Table des matières

Debugging a production incident across multiple apps usually means jumping between Coolify deployment logs, n8n workflow executions, and GitHub Actions runs. Handing raw master API tokens for those services to an AI assistant is a major security risk. We built Ops Hub MCP (`packages/ops-hub`) and Ops Proxy (`packages/ops-proxy`) to give AI assistants a read-only, secret-redacted view of our entire infrastructure.

The Six-Stage Policy Pipeline

Every tool call in ops-hub passes through createPolicy: strict Zod validation, deepFreeze argument cloning, friendly-name allowlist resolution (never raw UUIDs), sliding-window rate limits, out-of-band Telegram approval for action tools (with a 5-minute lockout after two denials), and automatic secret redaction capped at 20 KB.

Learn how we build secure infrastructure and AI tooling on our services page.

partager l'article

Articles connexes

Continuez à lire sur la fabrication et l'exécution des produits.

24 oct. 2026 · 8 min

Connecting AI Agents Safely to Production Databases with MCP

Giving an LLM direct SQL execution access is the fastest way to leak cross-tenant data or lock up production tables. Here is how Model Context Protocol (MCP) creates an auditable, rate-limited security boundary.

Lire

22 oct. 2026 · 6 min

Resilient B2B App Shell Architecture in Next.js 16

Enterprise operators spending eight hours a day in a financial or operations dashboard shouldn't see repeated sidebar skeletons or layout shifts on every tab switch. Here is how we engineer desktop-grade app shells in Next.js 16.