Skip to main content
A custom agent is a named agent you create in your workspace, next to the built-in assistant CloudThinker, with its own instructions and connections, and you talk to it by its @mention. Once AWS is connected, in about 10 minutes you’ll build one, @ec2-triage, that investigates high CPU on your EC2 instances by following your team’s runbook and asks you before it changes anything.
What you’ll need
  • The workspace Admin role for step 1 as written (the + button in Skills). Developers can do every other step. If you’re a Developer, create the same skill by typing /create-skill in chat and giving it the name, description, and instructions below. See custom skills.
  • An AWS connection that shows Connected. If you don’t have one yet, set it up first: the 10 minutes don’t include it. Its role needs to describe instances and read CloudWatch metrics; the ReadOnlyAccess policy the setup script attaches covers both (see required permissions). Any other connection works too: swap the names in the examples.
  • A free custom agent slot on your plan (Free includes 1). See Customize. On Free, pick Light as the agent’s Model Tier in step 2: Free runs Light only. Chatting with a custom agent in web chat counts as direct chat, so the test in step 5 works on Free.
1

Add your runbook as a skill

A skill is a set of instructions agents follow when the task matches. Open More → Workspace settings → Skills, click the + button next to Search skills (or New Skill if the list is empty), and pick Write skill instructions. Fill in:
  • Skill name: ec2-high-cpu-runbook
  • Description: Steps to investigate an EC2 instance with high CPU
  • Instructions:
Skills steer what an agent does; they don’t block anything. Rule 5 is guidance only. What actually stops a write is the Manual mode you set in step 4, plus any Approval Rules.Click Create. New skills start enabled and available in Chat, which is where you test in step 5.Skills apply to every agent in the workspace, not only the @ec2-triage agent you create next, so CloudThinker also follows this runbook when a chat asks about high CPU. See Customize.Success state: ec2-high-cpu-runbook appears in the skills list with its switch on and Chat checked under Available in.
2

Create the agent

Open More → Workspace settings → Agents, click Create agent, and pick Build with form. On the Identity step, fill in all four fields (each is required):Role and Goal go at the top of the agent’s prompt, ahead of the Instructions you add next, so the agent reads them on every request. Keep them short and specific.
Create Custom Agent dialog, Identity step, with Avatar, Name, @mention, Role, and Goal fields
Click Next. The dialog moves to the Configuration step. There, keep Model Tier on Pro (on Free, pick Light), leave Language on Match the user (the agent replies in the language of your message), set Learning Mode to Offer, and paste these Instructions:
Create Custom Agent dialog, Configuration step, with Model Tier, Instructions, Language, and Learning Mode
Naming the skill in the instructions helps the agent pick it. It doesn’t stop other agents from using the skill.Offer asks you in chat before saving a repeated workflow as a skill. The default, Auto, saves without asking. If the agent offers to save a workflow as a skill during the test, reply no. See Learning Mode. Click Next.Success state: the dialog moves to the Connect step.
3

Give it a connection

On the Connect step, open the Builtin tab and click Add next to your AWS connection. Builtin lists connections that show Connected in More → Workspace settings → Connections; MCP lists the MCP servers you’ve added. Click Create Agent.
Create Custom Agent dialog, Connect step, with Builtin and MCP tabs and a list of connections to attach
An agent reaches only the connections you attach, so attach only what its job needs. You can add more later on the agent’s Connections tab.Success state: EC2 Triage appears under Custom in More → Workspace settings → Agents, showing 1 connection.
Settings, Agents page listing custom agents with name, @mention, role, goal, and model tier

Agents: each custom agent has a name, @mention, role, goal and model tier

4

Make it ask before any change

Approvals decide whether a write (any call that changes something) runs, waits for a person, or is refused. Reads always run. For this test, make every write wait for you.
New workspaces default to Auto, where AI judgment can let a safe write run without asking. An Allow Rule can do the same once CloudThinker turns on Rule enforcement for your workspace, which is off by default. Switch this chat to Manual before testing.
Start a new chat. The approval control sits on the right of the chat prompt box, next to the model picker, and shows the chat’s current mode, Manual or Auto. A new chat starts on the workspace mode. Open the control, or type / and pick Approval, and select Manual.Success state: the approval control shows Manual. This applies to this chat only; your workspace mode doesn’t change. Developers can do this step too.New chats start on the workspace mode again. Automations use their own mode: by default Rules decide first, AI judges the rest, and a write that still needs a person is refused instead of waiting. Rules decide only once CloudThinker turns on Rule enforcement for your workspace; until then they record the verdict they would give and the Approval mode alone decides. See Rules in preview. See Approvals. To make prod changes always wait for a person, add an Ask first Rule.
5

Test the agent

In the same chat, mention the agent. Send one of these prompts.If you have an instance ID, replace the example one:
If you don’t:
The agent describes the instance, reads its CloudWatch metrics, and answers with a metric table and one recommended fix, in the order your runbook sets. A good answer has this shape (your values will differ):Followed by one recommendation, such as moving the instance to unlimited mode, with the reason and no change applied.If the agent wants to change the instance, the chat shows an approval card with Approve and Decline. Click Decline if you only wanted the diagnosis. With ReadOnlyAccess, the agent can’t change anything even if you approve: the card shows approvals work, but the write itself fails in AWS.If CPU turns out to be normal, expect a table that shows it and a recommendation to wait or look elsewhere. That still counts as success.On Pro, the run draws from bonus, then premium, credits: the free daily credits cover Light chat only. On Free with a Light agent, it draws daily credits. See usage.Success state: the agent’s reply shows a collapsed activity summary line that includes “read 1 skill”. Click it to expand the steps and find the Load Skill step. The answer follows your runbook steps without you restating them, and nothing changed in AWS without your approval.

​
Clean up

If this was only a trial, delete the agent in More → Workspace settings → Agents (it frees the slot right away; Free includes one) and the skill in More → Workspace settings → Skills. Until you delete the skill, every agent, including CloudThinker, follows it for high-CPU questions.

​
Troubleshooting

Your workspace reached its custom agent limit. Hover the button: the tooltip says Custom agent limit reached. with an Upgrade plan link. Delete an unused agent in More → Workspace settings → Agents, or see plans.
It must start with a lowercase letter and use only lowercase letters, numbers, dots, underscores, and hyphens, up to 63 characters. It also can’t match a name already in use or reserved by CloudThinker.
Check that EC2 Triage appears under Custom in More → Workspace settings → Agents. If you created it in another tab, refresh the chat page, then type @ again.
Check that the chat’s approval control shows Manual. In Manual mode every write asks a person, even one an Allow Rule covers, so a missing card usually means the chat was on Auto. An Allow Rule only decides once CloudThinker turns on Rule enforcement for your workspace; Manual is the control that holds every write today. Reads (describe, list, metrics) never show a card. See Approvals.
Open the agent in More → Workspace settings → Agents, go to the Connections tab, and check that your AWS connection is attached. Then check the connection itself shows Connected on the Connections page.
Open More → Workspace settings → Skills and check that the skill’s switch is on and Chat is checked. Then make the request match the skill’s description, for example by saying “high CPU”. Agents apply a skill only when it fits the task.
The + button and New Skill need the workspace Admin role. As a Developer, type /create-skill in chat to create the runbook skill instead, or ask a workspace admin to add it.

​
Next steps

Custom skills

Attach skills to Review and Incident, edit them with AI, or upload a package

Approval Rules

Name each write agents may run alone and each one that waits for a person

Automations

Run your agent on a schedule, a webhook, or a repository event

Customize

See every setting you can change and where it lives