Agentic Data Plane

rpk ai

The rpk ai commands target an Agentic Data Plane environment. To install the plugin, sign in, and select an environment, see Use the Agentic Data Plane CLI.

Manage the Redpanda AI Gateway.

Usage

rpk ai [flags]

Subcommands

Command Description

rpk ai agent

Manage agents registered with the Redpanda AI platform. Agents are either managed (adp runs them; configured via a model, LLM provider, system prompt and MCP servers) or self-managed (a metadata-only record tracking a user-hosted agent).

rpk ai auditlog

Read the ADP audit log: who did what, to which resource, from where, and which policy allowed or denied it, across the management API, the LLM proxy, the MCP gateway and agents. The log is read-only.

rpk ai auth

Manage rpk ai authentication (login, logout, token, status).

rpk ai connection

List and revoke the OAuth connections you hold to third-party providers. A connection is your personal grant to a provider (created by signing in through the consent flow) that lets user_oauth MCP servers act on your behalf.

rpk ai env

Manage rpk ai environments (list, use, add, show, rename, delete).

rpk ai install

Install the Redpanda AI CLI. This command installs the latest version by default.

rpk ai kill-switch-policy

Manage Kill switch policies (create, get, list, update, delete).

rpk ai llm-provider

Manage LLM providers (create, get, list, update, delete).

rpk ai mcp-server

Manage MCP servers (create, get, list, update, delete).

rpk ai model

Discover the models the Redpanda AI gateway exposes. The catalog is read-only; model list and model get are the only verbs.

rpk ai oauth-client

Manage OAuth clients registered with the AI gateway’s OAuth Authorization Server. An OAuth client is an external tool (such as Claude AI, ChatGPT, or Cursor) that requests access tokens for an MCP server.

rpk ai oauth-provider

Manage OAuth authorization-server configurations registered with the Redpanda AI gateway. OAuth providers describe third-party authorization servers that user-facing MCP servers can authenticate against via the device-consent flow.

rpk ai policy

Manage Cedar authorization policies (create, get, list, update, delete).

rpk ai run

Launch a third-party coding agent configured to send its model traffic through the Redpanda AI gateway for the current environment. Sessions authenticate with an API key, so a running session keeps working when your login token expires (starting one still needs a valid login).

rpk ai trigger

Manage the triggers on an agent: the configured ways an agent is invoked from the outside (Microsoft Teams, or a cron schedule). A trigger belongs to exactly one agent, and its resource name carries that parent: agents/{agent}/triggers/{trigger}.

rpk ai uninstall

Uninstall the Redpanda AI CLI.

rpk ai upgrade

Upgrade to the latest Redpanda AI CLI version.

rpk ai version

Print rpk ai version and commit.

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.