Can I limit what agents can do in DigitalOcean?

Yes, twice over. The connection itself has an access level (Read-only, Full access), and on top of that you can allow, scope, or deny each individual agent from the Integrations page.

Can I connect more than one DigitalOcean account?

Yes. Connect additional accounts from the same card and mark one as primary; agents use the primary unless a mission names a specific account.

How do I disconnect DigitalOcean?

Open Integrations, choose the account under DigitalOcean, and revoke it. Agents lose access immediately; nothing keeps working in the background.

Dev & Project Management

🌊 DigitalOcean integration

Access levels: Read-only · Full access · Verified July 15, 2026

Connect DigitalOcean once and every agent in your squad can work in it for you, with exactly as much access as you decide to give, and a receipt for every call it makes.

What your squad can do in DigitalOcean

Look things up, list all databases; list all domains; list all droplets, and more.
Do real work, create custom image; create database cluster; create new block storage volume; create new domain, and more.
Run it on a schedule: any of the 48 available tools below can be part of a scheduled task or a mission.

How to connect

In your dashboard, open Integrations and find DigitalOcean.
Click Connect and pick an access level (we recommend Full access): this is the ceiling for every agent.
Sign in to DigitalOcean in the window that opens and approve. You land back on the Integrations page with the account live.

You can change an account's access level any time under Manage. It applies instantly, no re-authorization. If the connection ever expires, the card shows Reconnect; one click re-authorizes the same account with the same settings.

Multiple accounts: connect as many as you need (say, yours and a client's). One is primary. Agents use it unless a mission says otherwise.

Access levels

The level you pick at connect time is enforced on our side for every agent call: an agent can never do more than the level allows, no matter what it's asked.

Level	What it allows
Read-only	Read droplets, apps, accounts, billing.
Full access	Create, modify, and delete any DigitalOcean resource.	Recommended

On top of the connection's level, every agent can be individually allowed, scoped down, or denied for this app from the Integrations page. Deny an agent and it doesn't even see the connection.

Every tool, in plain terms

The 48 tools agents use in DigitalOcean through Mission Control, and the lowest access level that includes each. Agents discover these themselves. You never have to name a tool; asking in plain language is enough.

Tool	What it does	Access level
Create custom image `DIGITAL_OCEAN_CREATE_CUSTOM_IMAGE`	Creates a custom image in DigitalOcean by importing a Linux VM disk image from a publicly accessible URL.	Full access
Create database cluster `DIGITAL_OCEAN_CREATE_DATABASE_CLUSTER`	Creates a new managed database cluster on DigitalOcean.	Full access
Create new block storage volume `DIGITAL_OCEAN_CREATE_NEW_BLOCK_STORAGE_VOLUME`	Create a new block storage volume. Use when you need to provision persistent block storage after confirming the target region supports volumes. Example: "Create a 100 GiB ext4 backup volume named 'db-backup' in nyc1."	Full access
Create new domain `DIGITAL_OCEAN_CREATE_NEW_DOMAIN`	Creates a new domain in DigitalOcean's DNS management system.	Full access
Create new domain record `DIGITAL_OCEAN_CREATE_NEW_DOMAIN_RECORD`	Create a new DNS record for a domain. Use after confirming domain exists and record specifics.	Full access
Create new droplet `DIGITAL_OCEAN_CREATE_NEW_DROPLET`	Create a new Droplet. Use when you need to provision a VM with name, region, size, and image. The `image`, `region`, and `size` must be mutually compatible, the chosen `region` must be listed in the image's available re…	Full access
Create new firewall `DIGITAL_OCEAN_CREATE_NEW_FIREWALL`	Creates a new cloud firewall with custom inbound and outbound rules.	Full access
Create new kubernetes cluster `DIGITAL_OCEAN_CREATE_NEW_KUBERNETES_CLUSTER`	Creates a new DigitalOcean Kubernetes (DOKS) cluster with managed control plane.	Full access
Create new load balancer `DIGITAL_OCEAN_CREATE_NEW_LOAD_BALANCER`	Create a new load balancer. Use after specifying region, forwarding rules, and targets.	Full access
Create new ssh key `DIGITAL_OCEAN_CREATE_NEW_SSH_KEY`	Registers a new SSH public key with your DigitalOcean account.	Full access
Create new tag `DIGITAL_OCEAN_CREATE_NEW_TAG`	Creates a new tag in DigitalOcean for organizing and grouping resources.	Full access
Create new vpc `DIGITAL_OCEAN_CREATE_NEW_VPC`	Creates a new Virtual Private Cloud (VPC) in a specified DigitalOcean region.	Full access
Delete block storage volume `DIGITAL_OCEAN_DELETE_BLOCK_STORAGE_VOLUME`	Permanently deletes a block storage volume by its unique ID.	Full access
Delete database cluster `DIGITAL_OCEAN_DELETE_DATABASE_CLUSTER`	Delete a database cluster by UUID. Use when you have confirmed the cluster is no longer needed. Returns HTTP 204 No Content on success.	Full access
Delete domain `DIGITAL_OCEAN_DELETE_DOMAIN`	Deletes a domain from DigitalOcean DNS. This action is permanent and cannot be undone. Note: If the domain is associated with a Let's Encrypt certificate, delete the certificate first and reconfigure any resources using…	Full access
Delete domain record `DIGITAL_OCEAN_DELETE_DOMAIN_RECORD`	Delete a DNS record by its record ID for a domain.	Full access
Delete existing droplet `DIGITAL_OCEAN_DELETE_EXISTING_DROPLET`	Delete a Droplet by ID. Deletion is irreversible, all data is permanently lost. Confirm droplet_id with the user and verify a backup or snapshot exists before proceeding.	Full access
Delete firewall `DIGITAL_OCEAN_DELETE_FIREWALL`	Delete a firewall by ID. Use when you have confirmed the firewall is no longer needed.	Full access
Delete image `DIGITAL_OCEAN_DELETE_IMAGE`	Deletes a user-created custom image or snapshot from your DigitalOcean account by its numeric ID.	Full access
Delete load balancer `DIGITAL_OCEAN_DELETE_LOAD_BALANCER`	Delete a load balancer instance by ID. Use when you need to permanently remove an existing load balancer after confirming its ID. Returns 204 No Content on success.	Full access
Delete ssh key `DIGITAL_OCEAN_DELETE_SSH_KEY`	Delete a public SSH key. Use when you need to remove an SSH key from your account by its ID or fingerprint after confirming its ownership. Returns 204 No Content on success.	Full access
Delete tag `DIGITAL_OCEAN_DELETE_TAG`	Deletes a tag from your DigitalOcean account.	Full access
Delete vpc `DIGITAL_OCEAN_DELETE_VPC`	Delete a VPC (Virtual Private Cloud) by its unique identifier.	Full access
List all databases `DIGITAL_OCEAN_LIST_ALL_DATABASES`	List all managed database clusters on your account.	All levels
List all domains `DIGITAL_OCEAN_LIST_ALL_DOMAINS`	Lists all DNS domains configured in your DigitalOcean account.	All levels
List all droplets `DIGITAL_OCEAN_LIST_ALL_DROPLETS`	Lists all Droplets (virtual machines) in your DigitalOcean account with pagination support.	All levels
List all firewalls `DIGITAL_OCEAN_LIST_ALL_FIREWALLS`	List all cloud firewalls configured in your DigitalOcean account.	All levels
List all images `DIGITAL_OCEAN_LIST_ALL_IMAGES`	List all images available on your account.	All levels
List all kubernetes clusters `DIGITAL_OCEAN_LIST_ALL_KUBERNETES_CLUSTERS`	List all Kubernetes clusters on your account.	All levels
List all load balancers `DIGITAL_OCEAN_LIST_ALL_LOAD_BALANCERS`	List all load balancers in your DigitalOcean account with pagination support.	All levels
List all snapshots `DIGITAL_OCEAN_LIST_ALL_SNAPSHOTS`	List all snapshots available on your DigitalOcean account.	All levels
List all ssh keys `DIGITAL_OCEAN_LIST_ALL_SSH_KEYS`	Lists all SSH keys associated with your DigitalOcean account.	All levels
List all tags `DIGITAL_OCEAN_LIST_ALL_TAGS`	List all tags in your account. Use when you need to retrieve available tags and pagination info. A single request returns only one page of results; iterate using `page` and `per_page` to retrieve all tags.	All levels
List all volumes `DIGITAL_OCEAN_LIST_ALL_VOLUMES`	List all block storage volumes available on your account.	All levels
List all vpcs `DIGITAL_OCEAN_LIST_ALL_VPCS`	List all VPCs on your account. Use when you need an inventory of your VPC resources. A single request returns only one page; iterate through all pages using `page` and `per_page` (max 200) to retrieve the complete set.	All levels
List apps `DIGITAL_OCEAN_LIST_APPS`	List all App Platform apps in your DigitalOcean account.	All levels
List database options `DIGITAL_OCEAN_LIST_DATABASE_OPTIONS`	Lists all available configuration options for DigitalOcean managed database clusters, including supported engines (PostgreSQL, MySQL, MongoDB, Valkey, Kafka, OpenSearch), versions, regions, and cluster sizes/layouts.	All levels
List domain records `DIGITAL_OCEAN_LIST_DOMAIN_RECORDS`	List all DNS records for a domain. Use when you need to inspect or filter a domain's DNS configuration.	All levels
Retrieve domain `DIGITAL_OCEAN_RETRIEVE_DOMAIN`	Retrieves complete details about a specific domain including its TTL and DNS zone file configuration.	All levels
Retrieve domain record `DIGITAL_OCEAN_RETRIEVE_DOMAIN_RECORD`	Retrieve a specific DNS record for a domain by its record ID.	All levels
Retrieve existing droplet `DIGITAL_OCEAN_RETRIEVE_EXISTING_DROPLET`	Retrieve detailed information about a specific DigitalOcean Droplet by its unique numeric ID.	All levels
Retrieve existing image `DIGITAL_OCEAN_RETRIEVE_EXISTING_IMAGE`	Retrieve information about an image by ID or slug.	All levels
Retrieve tag `DIGITAL_OCEAN_RETRIEVE_TAG`	Retrieve an individual tag by name. Use when you need to inspect the resources grouped under a specific tag.	All levels
Retrieve vpc `DIGITAL_OCEAN_RETRIEVE_VPC`	Retrieve details about a specific VPC by its ID.	All levels
Tag resource `DIGITAL_OCEAN_TAG_RESOURCE`	Tag resources by name. Use when you need to assign an existing tag to one or more resources. Returns 204 No Content on success.	Full access
Untag resource `DIGITAL_OCEAN_UNTAG_RESOURCE`	Untag resources by tag name. Use when you need to remove an existing tag from multiple resources in a single operation.	Full access
Update domain record `DIGITAL_OCEAN_UPDATE_DOMAIN_RECORD`	Update an existing DNS record for a domain.	Full access
Update vpc `DIGITAL_OCEAN_UPDATE_VPC`	Update information about a VPC. Use when you need to modify the name, description, or default status of an existing VPC.	Full access

What agents can't do in DigitalOcean (yet)

Anything not in the table above. The tools mirror what DigitalOcean makes available to connected apps. If DigitalOcean doesn't expose an operation, agents can't perform it either.
If something you need is missing, there's usually a path: add the service's API key under Settings → Custom integrations and your agents can call it directly. See custom integrations & secrets. You can also ask your lead agent to open a ticket describing what it needs.

Using it in missions

Just ask in plain language: “check DigitalOcean for …”, “create … in DigitalOcean”, “every Monday, … ”, and the agent finds the right tool, runs it, and reports back with a receipt in your Runs ledger. Anything outward-facing (sending, posting, publishing) that a mission didn't clearly authorize comes back to you as a ticket first.

Troubleshooting

Agent says	What's happening	Fix
"DigitalOcean isn't connected"	No active connection (or this agent is denied)	Connect on the Integrations page; check the agent's per-app policy
"The connection has expired"	DigitalOcean ended the authorization (they all do periodically)	Click Reconnect on the account, same settings, one click
"I'm not allowed to do that"	The action is above the account's access level, or the agent is scoped down	Raise the level under Manage, or adjust that agent's policy
It did something unexpected	The ask was ambiguous (e.g. matched an existing item)	Be explicit, "create a NEW …", and give agents a working folder where relevant