Create an Azure DevOps work item

Let your AI file Azure DevOps work items (bugs, tasks) the model never holds credentials for.

Create a work item (Bug by default) in an Azure DevOps project via the Boards REST API. The org, project, and work-item type are fixed at install; the PAT is the secret, entered in the browser as an HTTP Basic credential.

The credential never enters the model context: it lives in the FlurryPORT secret store, deliveries are signed server-side, and every send returns a receipt your agent can quote.

npx flurryport mcp

Tools your agent gains

flry_azure_devops_workitem

Create an Azure DevOps work item in the configured org/project. Input: title (required), description (optional), tags (optional, semicolon-separated).

Setup walkthrough

1. AZURE_DEVOPS_PAT: In Azure DevOps: User settings, Personal access tokens, New Token, scope Work Items (Read & write). The value to paste in the FlurryPORT secret page is the HTTP Basic credential, NOT the raw token: run `printf ':YOUR_PAT' | base64` and paste the result. The recipe sends it as `Authorization: Basic <value>`.

Intent schema

{
  "type": "object",
  "required": [
    "title"
  ],
  "properties": {
    "title": {
      "type": "string",
      "maxLength": 255
    },
    "description": {
      "type": "string"
    },
    "tags": {
      "type": "string",
      "description": "Semicolon-separated tags."
    }
  }
}

Install-time parameters

org

install-time: Azure DevOps organization.

project

install-time: Project within the organization.

type

install-time: Work item type (Bug, Task, User Story...).

Transformation

[ { "op": "add", "path": "/fields/System.Title", "value": $body.title }, { "op": "add", "path": "/fields/System.Description", "value": ($exists($body.description) ? $body.description : "") }, { "op": "add", "path": "/fields/System.Tags", "value": ($exists($body.tags) ? $body.tags : "") } ]

Delivery target

POST https://dev.azure.com/$install.org/$install.project/_apis/wit/workitems/$$install.type?api-version=7.1

Placeholders like $secrets.NAME resolve server-side at delivery, never in the agent.

Where this fits

• Destination: Azure DevOps
• Project tracking recipes
• What agent tokens can and cannot do
• All recipes

Related recipes