ceven

DigitalOcean

Provisions cloud infrastructure on demand, automates DNS record updates, and manages the lifecycle of droplets and database clusters through natural language workflows.

Try DigitalOcean in Ceven

Ask Ceven anything
Standard

Why use Ceven?

  1. AI native DigitalOcean integration

    • Describe the outcome and Ceven picks the right DigitalOcean calls, fills the parameters, and checks the result.
    • Structured, agent friendly tool schemas so each call runs reliably instead of by guesswork.
    • Rich coverage for reading, writing, and querying your DigitalOcean data, across all 48 of its actions.

  2. Managed auth

    • Built in OAuth with automatic token refresh and rotation.
    • One place to manage, scope, and revoke DigitalOcean access.
    • Per user and per environment credentials instead of shared keys.

  3. Agent optimized design

    • Actions are tuned from real success and error rates so reliability climbs over time.
    • Full execution logs so you always know what ran in DigitalOcean, when, and on whose behalf.
    • The agent pauses and asks when DigitalOcean is unclear instead of plowing ahead.

  4. Enterprise grade security

    • Fine grained access so you control which agents and people can reach DigitalOcean.
    • Least privilege by default, read scopes first and only the writes a workflow needs.
    • A full audit trail of every DigitalOcean action to support review and sign off.

Supported tools

Every action Ceven's agents can run on DigitalOcean, and when to use it.

Create New Droplet
Use this when you need to provision a new VM. Specify the name, region, size, and image to get a server running.
Delete Existing Droplet
Use this to permanently remove a droplet by its ID. Confirm the ID first to avoid deleting the wrong server.
Create New Firewall
Use this to define a firewall name and custom rules. You must provide at least one inbound and one outbound rule.
Create Database Cluster
Use this to provision a managed database cluster. Define the engine, version, region, size, and node count.
List All Droplets
Pull a complete list of droplets in the account. Use this to audit active servers or filter by tag.
Create Domain Record
Use this to add a DNS record to an existing domain. Confirm the domain exists before adding the record.
Delete Domain Record
Use this to remove a specific DNS record using the record ID and domain name.
Create New Block Storage Volume
Use this to provision persistent block storage. Ensure the target region supports volumes before calling.
List All Volumes
Pull all block storage volumes. Use this to find available storage or filter by region.
Create New Kubernetes Cluster
Use this to deploy a Kubernetes cluster. Specify the name, region, version, and node pool configuration.
Create New Tag
Use this to create a custom tag for organizing resources. Ensure the tag name is valid before creation.
List All Firewalls
Pull a list of all active firewalls to audit security rules across the account.
Create Custom Image
Tool to create a new custom image by providing a url to a linux vm image. use when you need to import a vm image into digitalocean after specifying name, url, distribution, and region.
Create New Domain
Tool to create a new domain. use when you have the domain name and optionally an ip address to assign an a record.
Create New SSH Key
Tool to create a new ssh key. use when you need to register a public key to access droplets.
Create New VPC
Tool to create a new vpc. use when you need to provision a private network in a specific region.
Delete Block Storage Volume
Tool to delete a block storage volume by id. use when you need to permanently remove an existing block storage volume after confirming its id. returns http 204 no content on success.
Delete Database Cluster
Tool to delete a database cluster by uuid. use when you have confirmed the cluster is no longer needed. returns http 204 no content on success.
Delete Domain
Tool to delete a domain by name. use when you have confirmed the domain has no records assigned. returns 204 no content on success.
Delete Firewall
Tool to delete a firewall by id. use when you have confirmed the firewall is no longer needed.
Delete Image
Tool to delete a snapshot or custom image by id. use when cleaning up unused images after confirming there are no dependents.
Delete Load Balancer
Tool to delete a load balancer instance by id. use when you need to permanently remove an existing load balancer after confirming its id. returns 204 no content on success.
Delete SSH Key
Tool to delete a public ssh key. use when you need to remove an ssh key from your account by its id or fingerprint after confirming its ownership. returns 204 no content on success.
Delete Tag
Tool to delete a tag by name. use when you need to untag all resources previously tagged. returns 204 no content on success.
Delete VPC
Tool to delete a vpc by its id. use when you need to remove an existing virtual private cloud. returns 204 no content on success.
Create New Load Balancer
Tool to create a new load balancer. use after specifying region, forwarding rules, and targets.
List Domain Records
Tool to list all dns records for a domain. use when you need to inspect or filter a domain's dns configuration.
List All Databases
Tool to list all managed database clusters on your account. use when you need to retrieve clusters and support pagination or filtering by tag.
List All Domains
Tool to list all domains in your digitalocean account. use when you need to retrieve or iterate through domains, with optional pagination. use after authentication.
List All Images
Tool to list all images available on your account. use after obtaining a valid api token to retrieve images optionally filtered by type, private visibility, or tag name.

30 actions · scroll to see them all

Frequently asked questions

Ceven uses OAuth 2.0 to connect to your DigitalOcean account. When you initiate the connection, you are redirected to the DigitalOcean authorization page where you grant specific permissions to Ceven. DigitalOcean then issues a secure token that Ceven uses to make API requests on your behalf. We store these tokens encrypted at rest and never share them. You can revoke this access at any time through your DigitalOcean account settings under the API section, which will immediately stop all agent activity for that account. This ensures your raw API keys are never manually pasted into the platform.
Ceven can only manage DNS records for domains that are explicitly added to your DigitalOcean account. If your domain is registered elsewhere, you must first point the nameservers to DigitalOcean. Once the domain is active in the DigitalOcean dashboard, Ceven can use the Create Domain Record and Delete Domain Record actions to automate your DNS changes. The agent can verify the status of a domain using the Retrieve Domain action to ensure the zone file is correctly configured before attempting to push any record updates to the cloud.
If the DigitalOcean API returns an error, such as insufficient capacity in a specific region or an invalid image slug, Ceven captures the exact error message. The agent will then attempt to resolve the issue by suggesting an alternative region or checking the List Database Options tool for valid configurations. For example, if the NYC3 region is full for a specific droplet size, the agent will notify you and ask if you would like to try the SFO3 region instead. This prevents the workflow from simply crashing and provides a path to resolution.
Yes, DigitalOcean enforces a rate limit on its API to ensure platform stability. If a Ceven workflow triggers a massive burst of requests, such as deleting hundreds of droplets at once, you may encounter a 429 Too Many Requests response. Ceven handles this by implementing an exponential backoff strategy, meaning the agent will wait a few seconds before retrying the request. However, for extremely large scale operations, we recommend using tags to group resources so the agent can process them in smaller, manageable batches to avoid hitting these limits.
While the agent can delete droplets and manage snapshots, the process of creating a snapshot is asynchronous. The agent triggers the snapshot creation and then must poll the API to check when the snapshot is complete before it can safely issue the delete command. In your workflow, you can instruct the agent to wait until the snapshot status is available before proceeding. This ensures that your data is safely persisted in a snapshot image before the virtual machine is permanently destroyed and its local disk is wiped.
Ceven can provision a new VPC using the Create New VPC action, which creates a private network for your resources in a specific region. Once the VPC is active, the agent can assign new droplets to that network during the creation process. To ensure the network is secure, the agent typically follows this with a Create New Firewall call to define exactly which ports are open. This allows you to build a tiered architecture where your database cluster is only accessible from droplets within the same VPC, keeping your data off the public internet.
The agent can act as a cost auditor by running a List All Droplets and List All Volumes workflow to identify unused resources. You can ask the agent to find all droplets that have been tagged as temporary but have existed for more than seven days. Once the agent identifies these orphaned resources, it can present a list for your approval and then execute the delete commands. By automating the cleanup of forgotten snapshots and volumes, the agent ensures you only pay for the infrastructure that is actively contributing to your production or development environments.

Alternatives to DigitalOcean

Other tools that solve a similar problem. Ceven supports these too, so you can switch or run more than one at once.

Linode logoLinodeVultr logoVultrAWS logoAWS

Try Ceven on your stack

Plug Ceven on top of the tools you already run. Connect DigitalOcean and the rest of your stack, describe the outcome, and its agents handle the work end to end, days of it in minutes.

Get started for free