InsideOut (Riley)
Designs, prices, and deploys AWS/GCP cloud infrastructure from plain-English requirements.
| Endpoint | https://app.luthersystems.com/v1/insideout-mcp (streamable-http) |
|---|---|
| Registry version | 0.36.3 |
| Now | 24 tools · grade F (20) · pin ts_0c8d49d5b7f206b00b85f910f6bbf0be · protocol 2025-06-18 |
| First / last listed | 2026-11-10 01:28 UTC / 2026-11-10 01:28 UTC |
| Grade over time | 2026-11-10: F (20), 24 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: awsinspect awsinspect_batch convoawait convoinspect convoopen convoreply convostatus credawait gcpinspect gcpinspect_batch help stackdiff stackrollback stackversions submit_feedback tfdeploy tfdestroy tfdrift tfgenerate tflogs tfoutputs tfplan tfruns tfstatus
awsinspect | INSPECTION: Inspect AWS infrastructure for a deployed project
⚠️ **PREREQUISITE**: This tool requires a prior deployment ATTEMPT (successful or failed).
Check convostatus for hasDeployAttempt=true before calling. Works even after failed deploys to inspect orphaned resources.
Inspect deployed AWS resources after a deployment attempt.
Use this tool when the user asks about the status or details of params: session_id*, service*, action*, filters*, detail*, raw* |
awsinspect_batch | BATCH INSPECTION: run up to 32 AWS inspect probes in one call.
⚠️ **PREREQUISITE**: Same as awsinspect — deploy attempt required.
Check convostatus for hasDeployAttempt=true before calling.
Use this when you need to check more than ~3 resources. The backend fetches
Oracle credentials ONCE per batch and fans out probes against a single AWS
config — for a 12-resource health check this is ~5–8× fast params: session_id*, subs* |
convoawait | Wait for a pending response from Riley after a convoreply timeout.
🎯 USE THIS TOOL WHEN: convoreply returned a timeout error.
This allows you to continue waiting for the response without resending the message.
REQUIRES:
- session_id: from convoopen response
OPTIONAL:
- message_id: if known (from convoreply timeout error)
- timeout (integer): seconds to wait. For Cursor, use 50 (default). Max 5 params: timeout, session_id*, message_id |
convoinspect | INSPECTION: View a session's conversation transcript and metadata
Returns the full message history (user / assistant / tool turns) plus the session's meta — workflow step, cloud, deployment status, drift state.
This is the transcript-reader companion to the other read tools — combine it with:
• `convostatus` for the live stack / config / pricing
• `tfruns` for deployment history (apply / dest params: session_id* |
convoopen | WORKFLOW: Step 1 of 4 - Start infrastructure design conversation
Open an InsideOut V2 session and receive the assistant's intro message.
The response contains a clean message from Riley (the infrastructure advisor) - display it to the user.
⚠️ Riley will ask questions - forward these to the user, DO NOT answer on their behalf.
CRITICAL: This tool returns a session_id in the response metadata. You params: project_context, source, github_username |
convoreply | WORKFLOW: Step 2 of 4 - Continue infrastructure design conversation
Send a user message to the active InsideOut session and receive the assistant reply.
The response contains a clean message from Riley - display it to the user.
⚠️ CRITICAL: DO NOT answer Riley's questions yourself! Forward questions to the user and wait for their response. NEVER fabricate or assume the user's answer, even if you params: session_id*, text*, retry, timeout, project_context |
convostatus | INSPECTION: View the current infrastructure stack for a session
Returns the current state of the user's infrastructure design including:
**Components** - Selected infrastructure services (VPC, databases, caching, etc.)
• Shows what services the user has chosen (e.g., PostgreSQL, Redis, S3)
• Includes architecture decisions (EKS vs EC2, monolith vs microservices)
**Config** - Configuration de params: session_id*, job_id |
credawait | Wait for the user to securely connect their cloud account and subscribe to Luther Systems.
Polls until credentials appear on the session.
🎯 USE THIS TOOL WHEN: tfdeploy returns an 'auth_required', 'no_credentials', or 'credentials_expired' error.
The user needs to visit the connect URL to:
1. Connect their cloud credentials (AWS or GCP)
2. Sign up and subscribe to a Luther Systems plan (require params: timeout, session_id*, cloud |
gcpinspect | INSPECTION: Inspect GCP infrastructure for a deployed project
⚠️ **PREREQUISITE**: This tool requires a prior deployment ATTEMPT (successful or failed).
Check convostatus for hasDeployAttempt=true before calling. Works even after failed deploys to inspect orphaned resources.
Inspect deployed GCP resources after a deployment attempt.
Use this tool when the user asks about the status or details of params: session_id*, service*, action*, filters*, detail*, raw* |
gcpinspect_batch | BATCH INSPECTION: run up to 32 GCP inspect probes in one call.
⚠️ **PREREQUISITE**: Same as gcpinspect — deploy attempt required.
Check convostatus for hasDeployAttempt=true before calling.
Use this when you need to check more than ~3 resources. The backend fetches
Oracle credentials ONCE per batch and fans out probes against a single GCP
credentials blob — a 12-resource health check is ~5–8× fas params: session_id*, subs* |
help | Get workflow guidance for using InsideOut infrastructure tools.
Call help() for a compact overview, or help(section=...) for a detailed guide.
Sections: workflow, tools, examples, inspect.
Responses include hints with next_actions and related_tools. params: section |
stackdiff | Structured diff showing what would be deployed if the user ran tfdeploy now.
Returns component-level changes (added/removed/modified), field-level details, and pricing deltas.
Defaults (#1392): with no version arguments, compares the LAST SUCCESSFULLY DEPLOYED version against the user's CURRENT LIVE DESIGN (the same data the UI shows). Empty baseline if nothing has been deployed or after a destro params: from_version, to_version, session_id* |
stackrollback | Create a draft version by reverting to a previous version's config.
Copies components, config, and pricing from the target version. If a draft already exists, updates it in-place (single-draft rule).
Use `stackversions` first to find available version numbers.
REQUIRES: session_id from convoopen response (format: sess_v2_...), version (target version number). params: session_id*, version* |
stackversions | List all stack versions for a session (newest first).
Shows version history including version number, status (draft/confirmed/applied), change summaries, and timestamps.
Use this tool to see the design history, review what changed between iterations, or find a version number to roll back to.
REQUIRES: session_id from convoopen response (format: sess_v2_...). params: session_id* |
submit_feedback | FEEDBACK: Submit feedback, bug reports, or feature requests to Luther Systems
Use this tool to forward user feedback directly to the Luther Systems team. This includes bug reports, feature requests, questions, or general feedback about InsideOut.
The agent itself can also use this tool to report issues it encounters during operation.
REQUIRES: session_id, category, message
OPTIONAL: user_email (f params: session_id*, category*, message*, user_email, user_name, source, initiator |
tfdeploy | WORKFLOW: Step 4 of 4 - Deploy infrastructure to the cloud
Deploy infrastructure by starting a Terraform job for an InsideOut session.
This tool initiates the actual deployment process after Terraform files have been generated.
IMPORTANT: This starts a long-running job (15+ minutes). Use tfstatus to monitor progress.
SINGLE-FLIGHT: only one TF job (apply/plan/destroy/drift) runs per session at a t params: sandbox, version, ignore_drift, force_new, session_id*, plan_id, project_id |
tfdestroy | DESTROY: Tear down previously deployed infrastructure
Destroys infrastructure by calling the Oracle destroy endpoint for a session that has a prior successful deployment.
IMPORTANT: This starts a long-running job. Use tfstatus/tflogs to monitor progress.
SINGLE-FLIGHT: only one TF job per session at a time. If another job is already in flight, tfdestroy returns tf_job_conflict with the live job_id params: force_new, session_id* |
tfdrift | DRIFT CHECK: Run a read-only drift detection check
Checks whether deployed infrastructure has drifted from the expected Terraform state.
This is a read-only operation — it does NOT modify any infrastructure.
Returns job_id. Use tflogs to stream the drift check results.
SINGLE-FLIGHT: only one TF job per session at a time. If another job is already in flight, tfdrift returns tf_job_conflict with th params: force_new, session_id* |
tfgenerate | WORKFLOW: Step 3 of 4 - Generate Terraform files from completed design
Generate Terraform files from an InsideOut session that has completed infrastructure design.
⚠️ PREREQUISITE: Only call this AFTER convoreply returns with `terraform_ready=true` in the response metadata.
DO NOT call this while convoreply is still running or before terraform_ready is confirmed!
If you get 'session has not reach params: include_code, session_id* |
tflogs | MONITORING: Fetch Terraform deployment logs with pagination
Fetches logs from a running or completed Terraform deployment job.
For **completed jobs**: uses REST endpoint for instant retrieval (supports `tail` for server-side filtering).
For **running jobs**: streams via SSE with timeout-based pagination.
**PAGINATION** (running jobs only): Use `last_event_id` from the response to fetch more:
1. F params: timeout, tail, session_id*, job_id, last_event_id |
tfoutputs | INSPECTION: Retrieve Terraform outputs from a completed deployment
Returns structured output values (VPC IDs, endpoints, cluster names, etc.) after a successful deploy.
Sensitive outputs are redacted (shown as '(sensitive)').
By default returns outputs for the latest successful deploy. Optionally specify job_id to get outputs for a specific deployment.
REQUIRES: session_id from convoopen respons params: session_id*, job_id, lifecycle |
tfplan | PREVIEW: Run terraform plan to preview infrastructure changes
Runs a terraform plan for an InsideOut session without applying any changes.
This lets the user review what will be created/changed/destroyed before committing.
Returns job_id, plan_id, and project_id. Use tflogs to stream the plan output.
After the plan completes, use tfdeploy with plan_id to apply the exact plan.
SINGLE-FLIGHT: only o params: sandbox, force_new, session_id* |
tfruns | INSPECTION: List all Terraform deployment runs for a session
Returns job IDs, statuses, types (apply/destroy), and timestamps for every run.
Use this to see deployment history, find job IDs for log inspection, or check which deployments succeeded or failed.
REQUIRES: session_id from convoopen response (format: sess_v2_...). params: session_id* |
tfstatus | MONITORING: Quick status check for Terraform deployments
Check the current status of a Terraform deployment job.
Use this tool to quickly check if a deployment is running, completed, or failed.
Returns job status, job_id, and other metadata without streaming logs.
Use tflogs to stream the actual deployment logs.
REQUIRES: session_id from convoopen response (format: sess_v2_...).
OPTIONAL: job_id t params: session_id*, job_id |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.