ops

Use DPD labels via /ops:package. Requires dpd_delis_id + dpd_password.

Pull GA4 traffic + conversion data. Requires ga4_property_id and gcloud ADC.

Pull SEO + organic search data. Requires google_search_console_site and gcloud ADC.

Default Linear team key e.g. 'HEA' (optional)

Use UPS labels via /ops:package. Requires ups_client_id/secret + shipper_number.

DelisID from MyDPD / DPD eSolutions. Paired with dpd_password.

Password for the DelisID. Exchanged at login for a short-lived token. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

API key from https://console.groq.com — used for /ops:ops-voice transcribe (Whisper) If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Fast inference (Whisper, LLaMA) via Groq. Requires groq_api_key.

Use ntfy.sh for free phone-push alerts. Requires ntfy_topic.

Send ops traces/metrics to OTEL collector. Requires otel_endpoint.

Doppler service or personal token for the @dopplerhq/mcp-server MCP integration. Generated by /ops:setup or paste manually. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Use FedEx labels via /ops:package. Requires fedex_client_id/secret + account_number.

Base URL of your OpenTelemetry-compatible backend (e.g., https://otlp.grafana.net)

Maps owner/repo:base → health/version URLs. Project .claude/post-merge-services.json overrides.

Client ID from developer.ups.com apps. Paired with ups_client_secret and ups_shipper_number.

PreToolUse hook forces user confirmation when pushing directly to a protected branch (main/master/production), either via explicit destination or while currently on the branch.

API key from My DHL Parcel → User settings → API settings. Paired with dhl_parcel_user_id.

Default Doppler config name. Used by the Doppler MCP server. Allowed values: dev, stg, prd, ci.

Use Linear MCP for issue/sprint workflows. Requires linear_team.

Meta Marketing API access token from Facebook Business If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Where to push failure alerts. Allowed values: macos, ntfy, pushover, discord, telegram, none.

apikey from developer.postnl.nl. Required together with postnl_customer_code and postnl_customer_number.

Use PostNL labels via /ops:package. Requires postnl_customer_code + customer_number.

Use Sentry MCP for error/issue triage. Requires sentry_org.

Query Stripe for MRR/charges/disputes. Requires stripe_secret_key.

Your phone number in E.164 format. Optional — run /ops:setup telegram to auto-configure.

Pass --dangerously-skip-permissions to the headless fixer (required for unattended autonomy).

From Datadog Organization Settings > API Keys — used for /ops:monitor If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

From Datadog Organization Settings > Application Keys If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Use Datadog for APM + monitor pulls. Requires datadog_api_key + datadog_app_key.

Use Discord for outbound webhooks + bot reads. Requires discord_bot_token or discord_default_webhook_url.

Use Doppler for secret resolution + MCP server. Requires doppler_token + doppler_project.

Default Doppler project slug (e.g. 'my-app'). Used by the Doppler MCP server.

API Key from developer.fedex.com projects. Paired with fedex_client_secret and fedex_account_number.

Numeric GA4 property ID. Find in GA4 Admin > Property Settings.

Pull email/SMS marketing data. Requires klaviyo_private_key.

PreToolUse hook denies `rm -rf` targeting /, ~, $HOME, .., or . — protecting against catastrophic filesystem wipes. Specific subpaths (./node_modules, /tmp/foo) are allowed.

Pull fulfillment + inventory data from ShipBob. Requires shipbob_access_token.

Use Shopify Admin API for orders/inventory. Requires shopify_store_url + shopify_admin_token.

Numeric API ID from https://my.telegram.org/apps. Optional — run /ops:setup telegram to auto-configure.

API key from https://app.bland.ai — used for /ops:ops-voice call If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Outbound AI phone calls via Bland AI. Requires bland_ai_api_key.

Absolute path to a desktop-act marketplace checkout. Used when the plugin is installed outside the standard Claude Code marketplace tree.

Git URL the launcher clones from when bootstrapping a fresh install. Defaults to the public your-org/desktop-act repo.

Server/guild ID (right-click server in Discord → Copy ID with Developer Mode enabled)

Pull Facebook/Instagram ad spend + ROAS. Requires meta_ads_token + meta_ad_account_id.

Plain API key from backoffice.myparcel.nl → Settings → API. Used by /ops:ops-package. Script base64-encodes it at runtime — do NOT pre-encode.

User API Key from one.newrelic.com/api-keys — used for /ops:monitor If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Use New Relic for APM + alerts. Requires newrelic_api_key + newrelic_account_id.

Use Pushover for failure alerts. Requires pushover_user_key + pushover_app_token.

Use Telegram for inbox + notifications. Requires telegram_api_id/hash/phone/session — run /ops:setup telegram.

gram.js StringSession. Optional — run /ops:setup telegram to auto-configure. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Bot token from Discord Developer Portal — used for channel reads and DMs. Prefer Doppler reference. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Single TCP port to authorize (default 22 for SSH).

From https://pushover.net/ — paired with pushover_app_token. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Colon-separated dirs to find a repo on disk. Example: ~/Projects:~/work

Your Shopify store URL (e.g., mystore.myshopify.com)

Stripe secret key (sk_live_... or sk_test_...) for revenue tracking. Prefer Doppler reference. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

API hash from https://my.telegram.org/apps. Optional — run /ops:setup telegram to auto-configure. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Your personal Telegram chat ID (numeric). DMs and fire alerts are sent to this ID. Run /ops:setup telegram to auto-detect.

Client secret for the UPS app. Used for OAuth2 client_credentials. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Master switch for the post-merge + build-failure auto-fix subsystem. Spacebar toggles.

Branch or tag to clone when bootstrapping. Defaults to main.

User ID issued in My DHL Parcel → User settings → API settings. Paired with dhl_parcel_key.

API key from https://elevenlabs.io — used for /ops:ops-voice tts If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Text-to-speech + voice cloning via ElevenLabs. Requires elevenlabs_api_key.

AWS Security Group ID (sg-...) that aws-sg-ip-whitelist.sh keeps in sync with your current public IPv4. Leave blank to disable the feature.

Cap on auto-fix dispatches per repo per hour. Suggested values: 1, 3, 5, 10.

Ad account ID (format: act_XXXXXXXXX)

After `gh pr merge` to dev/main, watch the deploy workflow + audit service health.

App-specific token from https://pushover.net/apps/build If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

RevenueCat API key for mobile subscription revenue tracking (V2 API). If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Query RevenueCat for mobile sub MRR. Requires revenuecat_api_key + revenuecat_project_id.

Bot token for outbound notifications + channel-mcp DM polling. From @BotFather. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Six-character UPS shipper/account number used for billing shipments.

When off, failures are logged + notified only — no agent runs.

Absolute path to a custom desktop-act MCP server executable. Leave blank to auto-discover the desktop-act plugin or bootstrap into the per-user cache.

Secret Key for the FedEx project. Used for OAuth2 client_credentials. If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Region containing ip_whitelist_sg_id. Defaults to us-east-1.

Private API key from Klaviyo Settings > API Keys (starts with pk_ or ck_) If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Numeric account ID from one.newrelic.com admin portal.

Admin API access token from Shopify Partners or custom app If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Nine-digit FedEx shipping account number used as the billing party.

Three-letter customer code from your PostNL contract (e.g. DEVC).

Public key from Sendcloud Panel → Settings → Integrations → Sendcloud API. Paired with sendcloud_private_key.

ShipBob Personal Access Token for fulfillment tracking (optional) If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

Hit /version and check served SHA equals merged SHA.

Detect npm/gh-actions/network blips and `gh run rerun` instead of dispatching an agent.

PreToolUse hook scans `git diff --cached` for high-confidence secret patterns (Stripe, AWS, GitHub tokens, JWTs, hardcoded passwords) and denies the commit if a match is found.

Run the daemon that synthesizes a one-line digest across all parallel Claude sessions, displayed in tmux status-right.

RevenueCat project ID (from app.revenuecat.com URL)

Private key from Sendcloud Panel → Settings → Integrations → Sendcloud API. Paired with sendcloud_public_key.

PostToolUse hook nudging Claude to use TaskCreate/TaskUpdate every N tool calls without one.

After a local build script fails, dispatch a Haiku build-fixer.

Eight-digit customer number from your PostNL contract.

Identifies which GitHub Actions run is the deploy.

Number of non-Task tool calls before the reminder fires. Suggested values: 5, 10, 20, 50.

Chat ID to receive fire alerts. Defaults to telegram_phone's DM if unset.

Max wait for deploy workflow completion. Suggested values: 300, 600, 900, 1800, 3600.

Run the launchd daemon that rotates between Claude Max accounts as quotas approach the cap.

Description prefix for managed rules — e.g. 'mylaptop'. Defaults to <hostname>-laptop. Rules with this prefix are reaped when older than ip_whitelist_keep_recent.

Newest N managed rules retained before pruning. Default 2.

curl service health URL once deploy succeeds. Failure dispatches a fixer.

Site URL as registered in Search Console (e.g., https://example.com)

PreToolUse hook on Agent — when subagent_type=general-purpose, asks if a domain-specific agent fits better.

Optional default webhook URL (https://discord.com/api/webhooks/…) for /ops:comms discord send. Shared with the ops-fires notification sink (which also reads discord_webhook_url). If already configured via /ops:setup or stored in keychain/Doppler, leave blank — runtime resolves automatically.

During /ops:setup, walk through OAuth init for every configured Claude account that doesn't have a keychain token yet.

Append the marquee source to ~/.tmux.conf during /ops:setup.