Control Plane

Create a Global Virtual Cloud (GVC)

create_gvc

Create a new GVC (Global Virtual Cloud) — the deployment scope workloads live in. Configure placement in this call through locations or locationQuery: a GVC without placement cannot run workloads (locationOptions is DNS geo-routing tuning for placed locations, not placement). If the user did not specify placement, ask first (list_resources kind="location" shows the options); when they leave it to you, pick one location that fits their users and say which. Never create an empty GVC. Custom domains are configured with the Domain resource (create_domain), not on the GVC.

Input Schema

TableJSON Schema

Name	Required	Description
`env`	No	Environment variables defined on the GVC. Workloads with inheritEnv=true redeploy when these values change.
`org`	No	Organization slug.
`keda`	No	KEDA autoscaling configuration for the GVC.
`name`	Yes	Resource name. Immutable: renaming is delete and recreate.
`tags`	No	Optional tags (key-value pairs such as env=prod). Use them like Kubernetes labels for governance and search.
`tracing`	No	Distributed tracing configuration.
`locations`	No	Locations the GVC deploys to — any location the org has: a built-in cloud region ("aws-eu-central-1"), a BYOK location registered from your own cluster, or a friendly name like "frankfurt" (resolved server-side against the org's own list). REQUIRED unless locationQuery provides placement instead. If the user has not named one, ASK which location(s) to use (list_resources kind="location" shows the options); when they leave it to you, pick one that fits their users and say which.
`description`	No	Description (surfaced in tooling similar to a Kubernetes annotation).
`loadBalancer`	No	GVC load balancer configuration.
`sidecarEnvoy`	No	Advanced Envoy sidecar filters (maps to spec.sidecar.envoy).
`locationQuery`	No	Dynamic placement: a query that selects locations.
`locationOptions`	No	Per-location DNS geo-routing options (routingTier priority, latency bias/cutoff) for locations already placed via `locations` or `locationQuery`. Routing only — it does NOT place the GVC anywhere.
`pullSecretLinks`	No	Secret links for docker/ecr/gcp secrets so workloads can pull from private registries (e.g., /org/{org}/secret/{secret} or //secret/{secret}).
`aliasWorkloadLink`	No	Link to a workload in this GVC whose canonical endpoint backs the GVC alias DNS record (e.g. //gvc/{gvc}/workload/{name}). NOTE: the alias is INERT while the target workload is suspended (suspend=true or maxScale=0) — it takes effect only while the workload runs.
`endpointNamingFormat`	No	Subdomain format for the canonical workload endpoint. "default": {workload}-{gvc}.cpln.app; "org": {workload}-{gvc}.{org}.cpln.app; "legacy": legacy scheme. When omitted on create, the platform defaults to "org".

Output Schema

TableJSON Schema

Name	Required	Description
`ok`	Yes
`data`	No	The full result. Read this, not only the summary.
`details`	No
`summary`	Yes
`nextSteps`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed67 schema fields changedSep 30, 2026
- removedInput schema / $schema
```
Removed value: -"http://json-schema.org/draft-07/schema#"
```
- removedInput schema / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / aliasWorkloadLink / pattern
```
Removed value: -"^(\\/\\/workload\\/|\\/\\/gvc\\/[a-z0-9-]+\\/workload\\/|\\/org\\/[a-z0-9-]+\\/gvc\\/[a-z0-9-]+\\/workload\\/)[a-z]([-a-z0-9])*[a-z0-9]$"
```
- removedInput schema / properties / description / maxLength
```
Removed value: -250
```
- removedInput schema / properties / env / items / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / env / items / properties / name / maxLength
```
Removed value: -120
```
- removedInput schema / properties / env / items / properties / name / minLength
```
Removed value: -1
```
- removedInput schema / properties / env / items / properties / name / pattern
```
Removed value: -"^[-._a-zA-Z][-._a-zA-Z0-9]*$"
```
- removedInput schema / properties / env / items / properties / value / maxLength
```
Removed value: -4096
```
- removedInput schema / properties / keda / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / keda / properties / identityLink / pattern
```
Removed value: -"^(\\/\\/identity\\/|\\/\\/gvc\\/[a-z0-9-]+\\/identity\\/|\\/org\\/[a-z0-9-]+\\/gvc\\/[a-z0-9-]+\\/identity\\/)[a-z]([-a-z0-9])*[a-z0-9]$"
```
- removedInput schema / properties / keda / properties / secrets / items / pattern
```
Removed value: -"^(\\/\\/secret\\/|\\/org\\/[a-z0-9-]+\\/secret\\/)[a-z]([-a-z0-9])*[a-z0-9]$"
```
- removedInput schema / properties / loadBalancer / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / loadBalancer / properties / ipSet / pattern
```
Removed value: -"^(\\/\\/ipset\\/|\\/org\\/[a-z0-9-]+\\/ipset\\/)[a-z]([-a-z0-9])*[a-z0-9]$"
```
- removedInput schema / properties / loadBalancer / properties / multiZone / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / loadBalancer / properties / redirect / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / loadBalancer / properties / redirect / properties / class / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / locationOptions / items / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / locationOptions / items / properties / location / minLength
```
Removed value: -1
```
- removedInput schema / properties / locationQuery / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / locationQuery / properties / kind / minLength
```
Removed value: -1
```
- removedInput schema / properties / locationQuery / properties / spec / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / locationQuery / properties / spec / properties / sort / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / locationQuery / properties / spec / properties / sort / properties / by / minLength
```
Removed value: -1
```
- removedInput schema / properties / locationQuery / properties / spec / properties / terms / items / additionalProperties
```
Removed value: -false
```
- changedInput schema / properties / locations / description
```
Previous value: -"Locations the GVC deploys to — any location the org has: a built-in cloud region (\"aws-eu-central-1\"), a BYOK location registered from your own cluster, or a friendly name like \"frankfurt\" (resolved server-side against the org's own list). REQUIRED unless locationQuery provides placement instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); never pick one silently."New value: +"Locations the GVC deploys to — any location the org has: a built-in cloud region (\"aws-eu-central-1\"), a BYOK location registered from your own cluster, or a friendly name like \"frankfurt\" (resolved server-side against the org's own list). REQUIRED unless locationQuery provides placement instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); when they leave it to you, pick one that fits their users and say which."
```
- removedInput schema / properties / locations / items / minLength
```
Removed value: -1
```
- removedInput schema / properties / locations / minItems
```
Removed value: -1
```
- changedInput schema / properties / name / description
```
Previous value: -"Resource name (lowercase kebab-case, starts with a letter, 2-64 chars). Names are IMMUTABLE — renaming = delete + recreate (loses URL, DNS, policy links)."New value: +"Resource name. Immutable: renaming is delete and recreate."
```
- removedInput schema / properties / name / maxLength
```
Removed value: -64
```
- removedInput schema / properties / name / minLength
```
Removed value: -2
```
- removedInput schema / properties / name / pattern
```
Removed value: -"^[a-z]([-a-z0-9])*[a-z0-9]$"
```
- changedInput schema / properties / org / description
```
Previous value: -"Organization slug (lowercase kebab-case). NEVER guess — if the user has not named one, ask. On org-not-found, stop and ask; do not retry variants."New value: +"Organization slug."
```
- removedInput schema / properties / org / maxLength
```
Removed value: -63
```
- removedInput schema / properties / org / minLength
```
Removed value: -1
```
- removedInput schema / properties / org / pattern
```
Removed value: -"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$"
```
- removedInput schema / properties / pullSecretLinks / items / pattern
```
Removed value: -"^(\\/\\/secret\\/|\\/org\\/[a-z0-9-]+\\/secret\\/)[a-z]([-a-z0-9])*[a-z0-9]$"
```
- removedInput schema / properties / sidecarEnvoy / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / sidecarEnvoy / properties / accessLog / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / clusters / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / excludedExternalAuth / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / excludedRateLimit / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / http / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / network / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / sidecarEnvoy / properties / volumes / items / additionalProperties
```
Removed value: -{}
```
- removedInput schema / properties / tags / items / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tags / items / properties / key / minLength
```
Removed value: -1
```
- removedInput schema / properties / tags / maxItems
```
Removed value: -50
```
- removedInput schema / properties / tracing / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / customTags / additionalProperties / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / customTags / additionalProperties / properties / literal / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / customTags / additionalProperties / properties / literal / properties / value / maxLength
```
Removed value: -50
```
- removedInput schema / properties / tracing / properties / provider / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / provider / properties / controlplane / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / provider / properties / lightstep / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / provider / properties / lightstep / properties / credentials / minLength
```
Removed value: -1
```
- removedInput schema / properties / tracing / properties / provider / properties / lightstep / properties / endpoint / minLength
```
Removed value: -1
```
- removedInput schema / properties / tracing / properties / provider / properties / otel / additionalProperties
```
Removed value: -false
```
- removedInput schema / properties / tracing / properties / provider / properties / otel / properties / endpoint / minLength
```
Removed value: -1
```
- changedInput schema / required
```
Previous value: -[
-  "org",
-  "name"
-]New value: +[
+  "name"
+]
```
- removedOutput schema / $schema
```
Removed value: -"http://json-schema.org/draft-07/schema#"
```
- removedOutput schema / additionalProperties
```
Removed value: -false
```
- changedOutput schema / properties / data / description
```
Previous value: -"The full machine-readable result — list rows, the resource object, query results. Read THIS, not just the summary."New value: +"The full result. Read this, not only the summary."
```
- addedOutput schema / properties / details
```
Added value: +{
+  "type": "string"
+}
```
- removedOutput schema / properties / nextSteps / description
```
Removed value: -"Recommended follow-up actions for this task, in order."
```
- removedOutput schema / properties / ok / description
```
Removed value: -"Whether the call succeeded."
```
- removedOutput schema / properties / summary / description
```
Removed value: -"One-line summary of the result."
```

Changed2 schema fields changedAug 21, 2026

changedInput schema / properties / locationOptions / description

Previous value: -"Per-location DNS geo-routing options (priority/latency). An alternative to `locations` for advanced routing."New value: +"Per-location DNS geo-routing options (routingTier priority, latency bias/cutoff) for locations already placed via `locations` or `locationQuery`. Routing only — it does NOT place the GVC anywhere."

changedInput schema / properties / locations / description

Previous value: -"Locations the GVC deploys to — any location the org has: a built-in cloud region (\"aws-eu-central-1\"), a BYOK location registered from your own cluster, or a friendly name like \"frankfurt\" (resolved server-side against the org's own list). REQUIRED unless locationOptions or locationQuery is used instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); never pick one silently."New value: +"Locations the GVC deploys to — any location the org has: a built-in cloud region (\"aws-eu-central-1\"), a BYOK location registered from your own cluster, or a friendly name like \"frankfurt\" (resolved server-side against the org's own list). REQUIRED unless locationQuery provides placement instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); never pick one silently."

Changed1 schema field changedAug 14, 2026

changedInput schema / properties / locations / description

Previous value: -"Locations the GVC deploys to (friendly names like \"frankfurt\" or IDs like \"aws-eu-central-1\" — resolved server-side). REQUIRED unless locationOptions or locationQuery is used instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); never pick one silently."New value: +"Locations the GVC deploys to — any location the org has: a built-in cloud region (\"aws-eu-central-1\"), a BYOK location registered from your own cluster, or a friendly name like \"frankfurt\" (resolved server-side against the org's own list). REQUIRED unless locationOptions or locationQuery is used instead. If the user has not named one, ASK which location(s) to use (list_resources kind=\"location\" shows the options); never pick one silently."

First observedJun 28, 2026

TDQS

A4.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare the write/open-world/non-destructive profile, and the description adds genuinely useful constraints beyond that: a GVC without placement cannot run workloads, locationOptions is routing-only, and the alias is inert while its target is suspended. It doesn't cover permissions or rate limits, but for a create tool this is strong added context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose, then placement rules and the domain caveat. It is dense but each sentence carries a distinct instruction, though the placement-asking guidance is partially duplicated in the schema and could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 15-parameter create tool with an output schema and annotations, the description covers the highest-risk decision (placement) and the main cross-resource pitfall (domains). Given the schema already documents the remaining fields in detail, nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds semantic value the schema alone leaves ambiguous: the locations vs locationQuery mutual requirement for placement, and the warning that locationOptions tunes routing rather than placing the GVC. That is meaning beyond the field descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Create a new GVC') and immediately defines the resource's role as the deployment scope. It explicitly distinguishes itself from siblings by naming create_domain for custom domains and clarifying that locationOptions is not placement.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit conditional guidance: if placement is unspecified, ask the user first; when left to the agent, pick one location and state it; never create an empty GVC. It also names list_resources kind="location" as the way to discover options.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Control Plane tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.