Nutanix Aiops

Use this skill whenever the user needs to operate a Nutanix estate through Prism Central (v4 REST API) — an estate/cluster health overview, cluster & host inventory and utilization, VM lifecycle across AHV and ESXi (list/get/power/create/update/clone/delete/migrate), storage containers, subnets/network, images & categories, data protection / DR (snapshots, recovery points, protection domains, VM protect, failover), alerts & events with alert RCA (analyze_alert), LCM firmware/software upgrades, and capacity runway forecasting. Always use this skill for "Nutanix", "Prism Central", "AHV", "cluster health", "list VMs", "power on/off a VM", "clone/migrate a VM", "delete a VM", "snapshot", "recovery point", "protection domain", "failover", "why did this alert fire" / "root cause this alert", "LCM upgrade / firmware", "days until storage is full" / "capacity runway", when the context is a Nutanix cluster or Prism Central. Do NOT use when the target is a non-Nutanix platform — those belong to their own AIops-tools sibling; this skill is Prism Central v4 only. Preview — governed Nutanix Prism Central operations with a built-in governance harness (audit, policy, token budget, undo, risk-tiers). Mock-validated only, not yet verified against a live Prism Central.

Nutanix AIops (preview)

Disclaimer: Community-maintained open-source project, not affiliated with, endorsed by, or sponsored by Nutanix. Product and trademark names belong to their owners. Source at github.com/AIops-tools/Nutanix-AIops under the MIT license.

Governed Nutanix Prism Central (v4 REST API) operations — 47 MCP tools, every one wrapped with the bundled @governed_tool harness: a local unified audit log under ~/.nutanix-aiops/, policy engine, token/runaway budget guard, undo-token recording, and graduated-autonomy risk tiers. The Prism Central password is stored encrypted (~/.nutanix-aiops/secrets.enc, Fernet + scrypt) — never plaintext on disk.

What sets it apart from read-only Nutanix MCPs: (1) automatic ETag / If-Match on every mutation — the v4 footgun handled for you; (2) automatic pagination; (3) mixed-hypervisor VM listing (AHV + ESXi, relevant to Broadcom→Nutanix migration estates); and (4) the governance harness with dry-run + double-confirm on destructive writes.

Standalone: the governance harness is bundled in the package (nutanix_aiops.governance) — no external skill-family dependency. Preview / mock-only: not yet validated against a live Prism Central.

What This Skill Does

Group	Tools	Count	Read / Write
Clusters	cluster_list, cluster_health, host_list, cluster_utilization	4	4 read
VMs	list, get, power_on, guest_shutdown, power_off, reboot, create, update, clone, delete, migrate	11	2 read · 9 write
Storage	container list / create / update / delete	4	1 read · 3 write
Network	subnet list / get / create / delete	4	2 read · 2 write
Catalog	image list / delete, category list / create / assign	5	2 read · 3 write
Data protection / DR	snapshot list/create/delete/restore, recovery_point_list, protection_domain_list, vm_protect, pd_failover	8	3 read · 5 write
Alerts	alert_list, event_list, audit_list, analyze_alert (RCA), alert_acknowledge, alert_resolve	6	4 read · 2 write
LCM (upgrades)	lcm_inventory, lcm_precheck, lcm_update	3	1 read · 2 write
Capacity	task_list, capacity_runway	2	2 read
Total		47	21 read · 26 write

The CLI is a convenience subset; the full 47-tool surface is via the MCP server. See references/capabilities.md for the tool → API-path → returns map.

Quick Install

bash

uv tool install nutanix-aiops
nutanix-aiops init       # interactive wizard: PC host/port 9440/username + encrypted password
nutanix-aiops doctor     # connectivity + REST-RBAC preflight

When to Use This Skill

• Triage the estate (overview, cluster health, cluster util): clusters, hosts, resiliency, utilization
• VM lifecycle across AHV + ESXi (vm list/get/power/create/update/clone), and guarded destructive ops (vm delete, vm migrate) with dry-run + double-confirm
• Root-cause an alert (analyze_alert) — correlate it with related events into a probable-cause + suggested-actions summary
• Data protection: snapshots, recovery points, protection domains, vm_protect, pd_failover
• Upgrades (lcm_inventory → lcm_precheck → lcm_update) and capacity forecasting (capacity_runway)

Do NOT use when the target is a non-Nutanix platform — this skill is Prism Central v4 only. For other infrastructure, use the appropriate other AIops-tools sibling.

Common Workflows

Triage a cluster alert (RCA)

1. alert_list (optionally filter by severity) → find the firing alert's extId
2. analyze_alert <alert_ext_id> → probable cause + suggested actions, built by correlating the alert with related event_list records
3. Confirm blast radius with cluster_health / cluster_utilization, then alert_acknowledge (or alert_resolve once fixed)

Safely delete a VM (high-risk, approved)

1. vm_get <vm_ext_id> → confirm it's the right VM (and see its ETag)
2. nutanix-aiops vm delete <vm_ext_id> --dry-run → preview the exact DELETE call
3. Set an approver: export NUTANIX_AUDIT_APPROVED_BY=… NUTANIX_AUDIT_RATIONALE=…
4. Re-run without --dry-run (double-confirm at the CLI); the call is audited with tier, approver, and rationale

Snapshot sprawl cleanup

1. recovery_point_list (or per-VM snapshot_list <vm_ext_id>) → find stale / redundant snapshots
2. snapshot_delete <…> --dry-run on each candidate → preview
3. Re-run without dry-run (HIGH risk, approver + double-confirm) to reclaim space; each deletion is audited

Capacity runway

1. cluster_utilization <cluster_ext_id> → current CPU / memory / storage / IOPS
2. capacity_runway → days-to-full forecast per resource; use it to schedule an lcm expansion or storage add before you hit the wall

Migrate a VM to another host (reversible)

1. host_list → pick the destination host extId
2. nutanix-aiops vm migrate <vm_ext_id> <target_host_ext_id> --dry-run → preview
3. Re-run without dry-run (HIGH, double-confirm); the prior host is captured as an undo descriptor so a regression can be reversed

Governance & Safety

• Every tool is audited to ~/.nutanix-aiops/audit.db (relocatable via NUTANIX_AIOPS_HOME).
• Every mutation auto-handles ETag / If-Match; every list auto-paginates.
• High-risk ops can require a named approver: set NUTANIX_AUDIT_APPROVED_BY and NUTANIX_AUDIT_RATIONALE.
• Destructive writes support dry_run and, at the CLI, double confirmation.
• Reversible writes record an undo descriptor (vm_update → prior CPU/memory, vm_migrate → prior host).

References

• references/capabilities.md — full 47-tool + API-path reference
• references/cli-reference.md — CLI command reference
• references/setup-guide.md — onboarding, credentials, REST-RBAC, CE self-test