HuaweiCloud DevKit plugin
An agent works with Huawei Cloud through guidance for two dozen services, and cloud writes go through checks and approval
- 70 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- AK/SK keys open the cloud account, and the agent can create and delete paid resources
- Protection rests on approval of writes and pre-execution checks, and the final decision stays with the person
- Telemetry is on by default and sends anonymous events to a Huawei Cloud server
Install
- Works in
Manual install
npx --yes huaweicloud-devkit install --target codexNeeds Codex CLI in PATH, otherwise use the `codex-desktop` target. Restart the session after installing.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- AK/SK keys open the cloud account, and the agent can create and delete paid resources
- Protection rests on approval of writes and pre-execution checks, and the final decision stays with the person
- Telemetry is on by default and sends anonymous events to a Huawei Cloud server
This is third-party code. Review the repository files before installing.
What it does
The official Huawei Cloud plugin for AI agents combines three layers: knowledge of cloud services, the KooCLI command-line client and safety rules. The agent gets step-by-step guidance for ECS, OBS, VPC, RDS, GaussDB, FunctionGraph, APIG, CCE and other services, more than twenty in all. Every write to the cloud needs explicit approval from a person. Secrets are hidden in output, and before execution the plugin checks for public exposure, leaked keys and destructive operations. Before creating resources, the agent discovers the available regions and checks that the service exists in them. The `huaweicloud-devkit` installer finds the agents on the machine and installs the plugin for the chosen one: OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness, OfficeAce, Hermes, OpenClaw or AtomCode. For other MCP-capable agents there is a generic `huaweicloud-devkit-mcp` server. AK/SK keys are set up with one `auth init` command.
Who it is for. Engineers and administrators on Huawei Cloud who hand an agent the creation of resources and the study of cloud services while keeping control over writes.
Good fit when
- An agent brings up an ECS virtual machine and a VPC network, and a person approves every write to the cloud
- A team configures the cloud through OpenCode or Codex and wants service guidance instead of searching the documentation
- Before creating resources, you must find out in which regions a service is available
- In a CodeArts environment you need a ready set for cloud work that installs with one command
Not a fit when
- The project runs on another cloud: the plugin knows only Huawei Cloud services
- The agent runs in Claude Code: it is not among the installer's targets, so the generic MCP server has to be connected by hand
- You need an autonomous agent without confirmations: the plugin lets write operations through only after a person approves
Example request
Show in which regions GaussDB is available and draft a plan for creating a database. Start writing to the cloud only after I confirm.Limitations
The project is in beta and requires Node.js 22 or newer. AK/SK keys are set with the `auth init` command and are not put into the MCP configuration, because it is stored in plain text.
The remote server mode (`--transport remote`) has no built-in access control, so it must not be exposed to the public internet. Telemetry is on by default and is switched off with `HUAWEICLOUD_DEVKIT_TELEMETRY=off`. If the npm mirror lags, run the installer against the official registry.
How to disable. `npx --yes huaweicloud-devkit uninstall --target <agent>` removes the plugin from one agent, and `--target all --clean-global` removes it from all and also clears the KooCLI and OBS settings.
FAQ
How do I install HuaweiCloud DevKit for Codex?
With `npx --yes huaweicloud-devkit install --target codex`, with Codex CLI installed. Then restart the session and check `codex plugin list`. If Codex came from the Microsoft Store, the target is `codex-desktop`.
Which agents are supported?
OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness, OfficeAce, Hermes, OpenClaw and AtomCode. Other MCP agents connect with a generic configuration snippet using the command `npx -y -p huaweicloud-devkit huaweicloud-devkit-mcp`.
Where should AK/SK keys be stored?
`npx --yes huaweicloud-devkit auth init` syncs them to KooCLI, OBS and the sandbox API. Keys do not belong in the `env` field of an MCP configuration: it is stored in plain text and the file can end up in git.
What if the npm mirror serves an old version?
Run the installer against the official registry: `npx --yes --registry=https://registry.npmjs.org huaweicloud-devkit install --target <target>`. Mirrors can lag by hours after a release.
How do I turn telemetry off?
Set the environment variable `HUAWEICLOUD_DEVKIT_TELEMETRY=off`. Without it the plugin sends anonymous events: plugin version, agent type, operating system and the names of invoked tools. The authors do not collect keys, prompts or code.
Discussion
No questions or reviews yet.
Related
PluginsAWS's official set of MCP servers, skills and plugins so an agent can build, deploy and operate on AWS
A Docker sandbox for coding agents: a Debian image with Copilot CLI, Codex and Pi, and SSH, RDP and Docker enabled by flags.
A self-hosted control center for coding agents: Claude Code, Codex, Copilot, OpenCode and Pi from your phone, desktop and terminal
Cloud.ru Skills for AI Agents
Cloud.ru Skills для AI-агентов
Official Cloud.ru skills: account setup, Foundation Models, ML Inference, virtual machines, RAG and Evolution AI Agents
Google's plugin with six skills and two MCP servers for Cloud Storage: buckets, objects, access errors and security audits
Containarium: isolated boxes for AI agents
Containarium
A platform on your own server that gives each agent its own Linux box with SSH and MCP tools for commands and files
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| HuaweiCloud DevKit (this card) | yes | 70 | |
| Alibaba Cloud Skills | yes | 287 | the same idea for Alibaba Cloud, and it does not know Huawei Cloud services |
| Agent Plugins for AWS | no | 937 | plugins for AWS, a different cloud vendor |
| Azure Skills | no | 1,622 | a plugin for Azure, a different cloud vendor |
README in short
The documentation lists, for each agent, the install target and the `doctor`, `status`, `update` and `uninstall` commands, plus notes on Windows and the CodeArts sandbox. Separate sections describe the order in which credentials are chosen, proxy setup and telemetry.