@ankraai in a pull request, a push that needs a review, a failed build that needs a diagnosis: each arrives through one gateway, is answered by the same AI with the same knowledge of your clusters and pipelines, and goes back to where it came from.
Every connection has a profile
Each connection (a Slack workspace, a Teams tenant, a GitHub App installation, a GitLab token, a Bitbucket workspace) carries a profile: a safety mode, and the capabilities switched on for it.
Source-control connections start off because a pull request is a shared, public place. Nothing should post there until someone decides it should.
Ask and Agent
The mode bounds how far an answer may go. The capability switches decide whether the AI answers at all.- Ask is the default, and the fallback for a connection with no mode set.
- Automatic events stay read-only in either mode. A review comments. A proposed fix arrives as a separate pull request you review like any other.
- An unconfigured chat connection inherits the organisation’s default mode:
ankra chat --mode ask|agent in the CLI, and mcp:read and mcp:write tokens on the MCP server.
From a Slack question to an answer
- The AI answers as you. Each person links their Slack or Teams account to their Ankra account once. From then on the AI has exactly that person’s permissions, never more.
- Threads are conversations. Mention the bot to start one, and reply in the thread to continue it.
- Ticket threads sync with the board. A reply that starts with
Decision:answers a pending choice on a board ticket. /ankra status,/ankra logoutand/ankra helpwork in Slack.
@Ankra is the pipeline for my-org/my-repo green on main, and if not, what broke?
@Ankra show me the failing step’s log for the last pipeline run on pull request 412 in my-org/my-repo.
@Ankra the nightly e2e failed again. Is it the same test as yesterday?
From a pull request event to a review
Provider webhooks feed separate lanes, each with its own switch. Every event is deduplicated, so a redelivered webhook never reviews twice. What each lane does is on AI in pull requests. What each switch means is on AI Code Review.The staging cluster
Workspaces, pull request previews and PR demos run on one cluster your organisation nominates for AI work: the staging cluster. If your organisation has no separate CI cluster, Ankra Pipelines runs there too.- Workspaces are locked-down, time-limited pods that shallow-clone a repository so the AI can read and test code.
--workspace-ttl-hourstakes 1 to 168. - Previews and demos run in their own namespace with a public https URL.
--demo-ttl-hourstakes 1 to 720, and--demo-ttl-role-capcaps it per role. - The preview domain is yours. Ankra publishes no DNS for
--demo-base-domain: point a wildcard record at the staging cluster’s ingress. The command tells you when a setting would leave previews on plain http.
Who can change what
Related
- AI connections: connecting Slack and Teams step by step.
- GitHub, GitLab and Bitbucket Cloud: the source-control integrations and their permissions.
- AI workspaces: what a workspace can and cannot do.