Alert Triage Agent (n8n) — AI First-15-Minutes Incident Triage
automation
# Alert Triage Agent (n8n)
Playbook Rack
Skills
Playbooks you can run the same way twice — not product pages. 106 on this shelf.
automation
Authorized User Check (Rewst form guard)
automation
Reusable Rewst subworkflow that authorizes users submitting forms (e.g., onboarding/offboarding request forms). Add "Check if Authorized" as a subworkflow in any parent workflow; it outputs the boolean variable `Authorized`.
Azure Tables Actions subworkflow (OAuth2 + GET/INSERT)
automation
Rewst subworkflow (designed to be called from parent workflows) that acquires a valid OAuth2.0 client-credentials token, stores it with an expiration value in Rewst org variables as a secret, then allows GET and INSERT actions on an Azure Table.
ImmyBot low-disk storage monitor to CWM ticket
automation
Rewst workflow that pulls all ImmyBot devices, queries their last reported volume storage metrics, builds a per-client list of devices needing attention, and creates a ConnectWise Manage ticket alerting on any device with a volume under 15% free space.
ImmyBot to ConnectWise Manage device assignment sync
automation
Rewst workflow that lists all ImmyBot devices, filters to devices with an Immy user assigned, then assigns the matching ConnectWise Manage contact to the corresponding CWM configuration.
Incident Response with AI Agents (12 Runbook-Driven Patterns)
automation
# AGENT-10: Incident Response with AI Agents
MSP Proactive Maintenance Operations Skill
automation
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
PSA agreement user-count sync (Additions)
automation
Pre-built Rewst automation that synchronizes user counts to "Additions" line items on PSA agreements (ConnectWise Manage, Datto, Kaseya), so agreement line items stay aligned with actual usage without manual data entry.
Run tool actions from inside a ConnectWise ticket
automation
Pre-built Rewst workflow that lets technicians execute common tool actions from inside a ConnectWise Manage ticket, removing the need to leave the PSA for routine tasks.
Teams approval card subworkflow (Approve/Deny)
automation
Rewst subworkflow that pauses a parent workflow for human approval: it intakes information on an activity to receive approval, then POSTs a Teams Adaptive Card with Approve and Deny buttons. Once a button is selected, the workflow outputs a boolean — True for approval, False for denial. If you use ConnectWise Manage PSA, an extra "view ticket" button is inserted when you provide a ticket number and company ID.
ThreatLocker application-request approval to Autotask
automation
Rewst workflow that eliminates the manual ticket cleanup on ThreatLocker application requests in Autotask (writing the note, logging time, closing the ticket). Demonstrated by Brendan McLeod of Vital Technology Solutions.
Rewst Community Creations — YouTube (Brendan McLeod, Vital Technology Solutions)
azure-mcp
.NET MCP demo on Azure Functions (local + remote VS Code config)
azure-mcp
# azure-functions-mcp-demo (.NET)
AKS MCP server via Helm with workload identity (Azure docs)
azure-mcp
# AKS Model Context Protocol server (Azure docs)
APIM as AI gateway to remote MCP servers (Functions + OAuth)
azure-mcp
# Azure API Management as AI Gateway to Remote MCP servers
APIM as MCP gateway with per-user Entra ID (OBO flow)
azure-mcp
# Azure API Management as MCP gateway — Microsoft Entra ID
Azure DevOps MCP server in Copilot Studio (Entra app recipe)
azure-mcp
# Azure DevOps MCP for Copilot Studio
Azure Functions MCP server as a ChatGPT app (Inspector + dev tunnels)
azure-mcp
# chatgpt-app-azure-function-mcp — turn an Azure Functions MCP server into a ChatGPT app
Build and register an MCP server on Azure Functions (Foundry)
azure-mcp
# Build and register a Model Context Protocol (MCP) server — Microsoft Foundry
Code-interpreter MCP on Azure Functions (azd + VNET + remote client)
azure-mcp
# azure-functions-code-interpreter-mcp
Connect an MCP server to Azure OpenAI with Semantic Kernel (.NET)
azure-mcp
# MCP Client Sample — Semantic Kernel + Azure OpenAI + MCP tools (.NET 9)
Connect APIM-hosted MCP servers to Copilot Studio
azure-mcp
# Configuring MCP Tools on Copilot Studio
Copilot Studio integration for a Container Apps MCP server
azure-mcp
# Copilot Studio integration — Azure MCP Blueprint
Deploy a remote MCP server to Azure (mcp-for-beginners practical)
azure-mcp
# Deploy Remote MCP Server to Azure — mcp-for-beginners practical implementation
Deploy an MCP server on AKS with workload identity
azure-mcp
# Deploy an MCP server on AKS with workload identity
Docs AI assistant on Container Apps + Azure OpenAI + MCP (Next.js)
azure-mcp
# Build your own Microsoft Docs AI assistant with Azure Container Apps and Azure OpenAI
Entra ID OAuth setup for an MCP server (app registration recipe)
azure-mcp
# Microsoft Entra ID (Azure AD) — OAuth Setup
Expose legacy APIs on Container Apps as MCP servers via APIM
azure-mcp
# Exposing Legacy APIs hosted on Azure Container Apps to AI Agents using MCP Servers
From local to Azure — production MCP server on Container Apps
azure-mcp
# From Local to Azure: Deploy Your MCP Server to Production
Host an MCP server on Azure Functions (MS Learn lab, step-by-step)
azure-mcp
# Lab: Azure Functions MCP server (Microsoft Learn exercise)
Host MCP SDK servers on Azure Functions via custom handlers
azure-mcp
# Host remote MCP servers built with official MCP SDKs on Azure Functions (early preview)
MCP auth options on Azure Functions (anonymous, function key, Entra)
azure-mcp
# yfinance MCP Server hosted on Azure Functions — authentication playbook
MCP server on Azure Container Apps with Node.js/TypeScript
azure-mcp
# mcp-container-ts — quick start for a remote MCP server on Azure Container Apps
MCP server on Azure Functions + Microsoft Foundry agent (end to end)
azure-mcp
# MCP Server + Foundry Agent: Football Statistics
MCP server on Azure Functions Flex Consumption (Terraform + func publish)
azure-mcp
# Deploying an MCP Server on Azure Functions Flex Consumption
MCP tools, resources, prompts on Azure Functions (Python samples)
azure-mcp
# FunctionsMcpTool / FunctionsMcpResources / FunctionsMcpPrompts — Python
MCP-on-Azure security and adoption patterns (APIM gateway, Entra, MI)
azure-mcp
# MCP + Azure security guide — migration/adoption patterns
OpenAI agent + MCP server on Azure Container Apps (.NET)
azure-mcp
# Sample: AI Agent using OpenAI models with any MCP server running on Azure Container Apps
Remote MCP on Azure Functions — language matrix (official quickstarts)
azure-mcp
# Getting Started with Remote MCP Servers using Azure Functions (Overview)
Remote MCP server on Azure Functions (Python) — official sample
azure-mcp
# Getting Started with Remote MCP Servers using Azure Functions (Python)
Semantic Kernel client for MCP tools + Azure OpenAI (.NET)
azure-mcp
# Semantic Kernel based client with MCP Client Tools and Azure OpenAI LLM Integration
ServiceNow MCP behind APIM with Entra OAuth (Bicep deploy)
azure-mcp
# ServiceNow MCP server behind Azure APIM with authentication (Entra OAuth / API key / URL-code)
backup-dr
Backup verify and restore playbook
backup-dr
Playbook: Backup Verify & Restore. Follow BEFORE data loss (not after — the correct time to test a backup is before the failure).
Core control baseline — backup testing (CERG)
backup-dr
From the Cragin Enterprise Risk & Governance framework's core control baseline. MSP relevance: control 4 — backup and recovery testing — is the control MSPs most often own for clients.
PostgreSQL Backup and Disaster Recovery Runbook (with Scripts)
backup-dr
# Backup and Recovery Guide
Servosity Fleet Backup CLI Playbook (QBR Reports, DR Watch, Billing Reconciliation)
backup-dr
# Servosity CLI
client-comms
Incident Comms (outage client communications)
client-comms
An MSP-authored agent skill that drafts client-facing incident communications during an outage or major event — initial notification, hourly updates, all-clear, and post-incident review. Trigger phrases: "we have an outage", "draft an update for clients", "M365 is down — what do we say", "send the all-clear", "write the PIR".
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
MSP Client Communications Playbook (10 Operational Templates)
client-comms
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
SMTP2Go email sender subworkflow
client-comms
Rewst subworkflow (designed to be called from parent workflows) that crafts and sends the required API call to SMTP2Go to send an email. Use it from any workflow that needs outbound email — alerts, client notifications, scheduled reports.
documentation
Fix the Foundation First: AI Readiness Checklist
documentation
From "The Real Reason AI Fails MSPs" — Steve from Advanced Global MSP Coaching explains why AI for MSPs flops when PSA data is unstructured, and what to fix first (Autotask-focused but applicable to any PSA).
Hudu Knowledge Base Articles Skill (Runbooks, Procedures, Documentation Health)
documentation
# Hudu Articles
Operational Runbook Generator (Copy-Paste Prompt + Quality Controls)
documentation
# Create Runbook
networking
"Auvik: Network Monitoring Maturity (OML) Readiness Checklist"
networking
Self-assess your MSP's network monitoring maturity against Operational Maturity Levels (OMLs) and invest at the right level — "an MSP at OML level 1 can [not] copy/paste an MSP at OML level 5's tooling and expect the same results."
All Network Infrastructure Posture Assessment (Switches, Routers, Wireless)
networking
# System-Type Assessment — All Network Infrastructure
UniFi Network Skill (Gateway Audits, Firewall Review, Change Detection)
networking
# UniFi Network - Claude Code Skill
onboarding
Client Onboarding (first-30-days runbook)
onboarding
An MSP-authored agent skill that runs a standardized new-client onboarding workflow — gathers tenant information, builds a kickoff pack, drafts welcome communications, and creates the initial documentation set. Trigger phrases: "onboard new client", "kickoff [client name]", "set up new tenant", "welcome pack for [company]", or when a new MSA signs.
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
Employee Onboarding (new-starter provisioning runbook)
onboarding
An MSP-authored agent skill that runs the new-starter provisioning workflow for an MSP client — creates the user, assigns licenses and groups, prepares hardware, schedules induction, and produces a welcome pack. Author's note: "The first day at a new job is the loudest test of the MSP relationship. A missed mailbox or a broken laptop on day 1 is what clients remember at renewal." Trigger phrases: "new starter for [client]", "set up [name] at [company]", "onboard [name] starting [date]", "provisi
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
MSP Client Onboarding 30-Day Runbook
onboarding
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
MSP client onboarding runbook (7 phases)
onboarding
MSP Client Onboarding Runbook: seven phases from kickoff to go-live, with guardrails on every privileged action.
New Customer Onboarding Assessment Recipe
onboarding
# New Customer Onboarding Assessment — Master Recipe
other
GRID Prompting Framework + 3-Step MSP AI Roadmap
other
From "MSP AI Strategy Start Internal, Fix Your Documentation & Build AI Capability First" — an MSP leadership AI-strategy video.
MSP Client Offboarding Runbook (Transition, Access Removal, Closure Letter)
other
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
Persistent System Prompt Rulebook for MSP Workflows
other
Playbook from SafePoint IT's ChatGPT Prompting Tips webinar:
reporting
"ScalePad: 8 Business Metrics MSPs Need to Manage"
reporting
The eight operational, service, and profitability metrics ScalePad's guide says every MSP should monitor — the guide's discipline: ask the right questions, establish a baseline (once you know what normal looks like, you can focus on outliers), and use the right tool. PDF is free with no form fill.
Automated billing reconciliation workflow (Rewst)
reporting
Repeatable billing-reconciliation workflow, as documented by Rewst (verbatim, lightly cleaned):
License Rightsizing (M365 audit)
reporting
An MSP-authored agent skill that audits a client's Microsoft 365 license assignments to find unused, oversized, or duplicated licenses, and produces a rightsizing recommendation with dollar savings. Author's note: "License waste is the easiest win in any MSP's commercial conversation. Most clients are paying for 10–25% more than they use." Trigger phrases: "license review for [client]", "are we over-licensed", "rightsize M365", "find unused licenses", "save money on M365".
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
MSP Monthly Metrics Review and Client Health Scorecard
reporting
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
sales
Anonymized PSA ticket-volume report for sales discovery
sales
Repeatable playbook for generating an anonymized ticket-volume-by-customer report from a prospect's PSA during sales discovery. Small, local, transparent tool: scripts run entirely on the prospect's own machine, talk only to their own PSA API with credentials they control, and write output only to local disk — nothing is sent to the vendor. It never calculates license recommendations; it only produces raw ticket counts per anonymized customer.
Copilot-as-managed-service playbook
sales
Forum-thread playbook for turning Microsoft 365 Copilot curiosity into chargeable recurring MSP services (verbatim, lightly trimmed):
Getting AI to Recommend Your MSP — Playbook
sales
From "Getting AI To Actually Recommend An MSP" — Paul Green (MSP marketing expert) with guest Jimi Gibson on getting AI tools (ChatGPT, etc.) to recommend the MSP as a lead source.
MSP Lead Generation Skill (Territory Sweeps, Desk Scoring, Prospect Dossiers)
sales
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
MSP Marketing Content Skill (Articles, Social, Newsletters, Channels)
sales
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
MSP Outbound Email Sequence with ChatGPT (5-step playbook)
sales
A step-by-step playbook from the JumpCloud community (MSP Discussions) for using ChatGPT to build outbound client-acquisition email sequences for an MSP. (Uses a fictional MSP, "ACME IT", as the worked example.)
MSP Pricing Configurator (Floor, Anchor, Open with Margin Protection)
sales
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
MSP Sales Expert Skill (Cold Outreach, Call Scripts, Pipeline, Negotiation)
sales
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
Pre-Sales Discovery Assessment Recipe
sales
# Pre-Sales Discovery — Master Recipe
Rewst automation consulting playbook (discovery, ROI, pricing)
sales
Full community playbook for scoping, pricing, and selling MSP automation work (verbatim from the community-contributed Claude skill; lightly trimmed for the staging library):
GitHub — adamhancock/claude-skills (Rewst community playbook)
Sales Persona Playbook (Zero-Credential Pre-Sales Discovery + Renewal Narratives)
sales
# Sales — Persona Index
security
"Huntress: Cloud Incident Response Starter Playbook"
security
A starter playbook for responding to incidents in cloud environments, from Huntress's cloud incident response guide.
15 Active Directory MSP prompt playbooks
security
Professional MSP prompt system: 15 specialized MSP prompts implemented as multi-step playbooks for AI assistants against an Active Directory MCP server (MCP protocol 2024-11-05 over Streamable HTTP). Architecture: multi-step aware (identifier resolution → LDAP lookups → result formatting); dual format (compact for fast ops, detailed for audit/compliance); tenant-aware (each MCP instance executes the playbook against its own AD). Exposed as MCP tools: `ad_list_msp_prompts` (lists the playbooks) a
CMMC NGFW compliance assessment workflow
security
System prompt: expert CMMC assessor + Palo Alto / Fortinet / Cisco firewall engineer + network security architect with deep CMMC 2.0 (L1/L2) knowledge.
Cyber Insurance Readiness Assessment Recipe (Evidence-Backed Questionnaire)
security
# Cyber Insurance Readiness — Master Recipe
Incident Response Playbook (Phishing to PowerShell to C2)
security
# Incident Response Playbook (Phishing → PowerShell → C2 Attack)
MSP Security Standards (Client Baseline and House Standard)
security
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
NIST SP 1353 CSF 2.0 assessment co-star prompt
security
NIST SP 1353 details AI prompts and use cases for Cybersecurity Framework 2.0 analysis, planning, and reporting. Three use cases (assessment, target-state profile, reporting); the guide's simplified executable **co-star prompt** supports a NIST CSF 2.0 assessment:
Operational Resilience IR Playbook
security
Huntress's operational resilience framework for turning an IR plan into a team that can execute it. Aligned to the NIST framework's five functions.
Security Baseline Check (M365 gap report)
security
An MSP-authored agent skill that runs a Microsoft 365 security baseline review against a defined standard (e.g., Essential Eight, CIS, MSP house standard) and produces a gap report with prioritized remediation. Trigger phrases: "security review for [client]", "are they Essential Eight compliant", "check the baseline", "what's [client]'s Secure Score story", "security gap analysis".
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
Security threat-data sync into PSA tickets (Rewst)
security
Repeatable workflow that syncs cybersecurity data into PSA tickets automatically, as documented by Rewst (verbatim, lightly cleaned):
ticketing
AI ticket sentiment triage workflow (Rewst)
ticketing
Repeatable AI-driven ticket triage workflow, as documented by Rewst (verbatim, lightly cleaned):
AI Ticket Triage Rules Playbook (Pro Tips)
ticketing
From "Ticketing Triage: Let AI Sort and Route Your Tickets" — hands-on tutorial with Ricky Cecchini on ServiceAI's intelligent triage (works with ConnectWise & Autotask).
Conversational ticket triage agent rules
ticketing
Custom rules for an AI triage agent that handles the first contact with a client on a new support ticket, one question at a time. (From a larger prompt library of triage-agent rules; this file is the initial-question ruleset.)
LLM + Autotask rate-limit survival playbook (autotask-mcp)
ticketing
Playbook for MSPs running LLM-driven workflows against Autotask without blowing through API limits. From the autotask-mcp server README (part of the MSP Claude Plugins ecosystem; gives an AI assistant 39 Autotask tools for natural-language ticket triage, time logging, company lookups, project management, and billing review).
wyre-technology/autotask-mcp — MSP Claude Plugins ecosystem (GitHub)
MSP AI Triage Agent — Full 7-Step Intake Process
ticketing
Expanded variant of the MSP triage-agent system prompt (friendly tone, allows safe guided troubleshooting). Replace [MSP] with your company name.
MSP AI Triage Agent — Intake-Only System Prompt (Simple)
ticketing
Deploy as the system prompt of an AI triage agent that is the first point of contact for MSP support requests. Replace [MSP] with your company name.
MSP Service Desk Operations Skill (Priorities, Targets, Escalation)
ticketing
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
Ticket Triage Skill (Impact x Urgency framework)
ticketing
An MSP-authored agent skill for triaging support tickets: classifies by urgency and impact, assigns priority, suggests queue and engineer tier, and drafts the first client response. Trigger phrases: "triage these tickets", "what should I work on next", "prioritize the queue", "is this a P1".
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
Why ChatGPT Fails Your MSP — Webinar Notes
ticketing
From "Why ChatGPT Fails Your MSP: The AI Strategy Your MSP Needs" — CloudRadial webinar with VP of Product Ricky Cecchini on the risks of generic AI on the service desk and how purpose-built MSP tooling differs.
vcio-qbr
"ScalePad: QBR Action Plan Framework"
vcio-qbr
ScalePad's three-part framework for running quarterly business reviews as strategic conversations — not an hour and a half of reading reports. "The quarterly business review is not a place to dump all the out-of-warranty servers and workstations into a spreadsheet and hand it over to the client."
Environment Quarterly Lookback / QBR Master Recipe
vcio-qbr
# Environment Quarterly Lookback — Master Recipe (PBR / QBR)
Modern vCIO AI + Asset Intelligence Workflow
vcio-qbr
Workflow from "How a Modern vCIO Uses AI + Asset Intelligence" — a day-in-the-life of a virtual CIO (Avery) using Liongard asset intelligence with AI across three client scenarios:
MSP QBR prep skill (ticket trends, security, licenses, roadmap)
vcio-qbr
Cowork skill: "Prepares a Quarterly Business Review (QBR) pack for an MSP client — pulls ticket trends, security posture, license utilization, project status, and strategic recommendations into a presentation-ready brief. Use when user says 'QBR for [client]', 'prep the quarterly review', 'build the business review deck', or 'what should I tell [client] this quarter'."
MSP Quarterly Business Review Playbook and Client Scorecard
vcio-qbr
Also seen at: https://github.com/cradixus/msp-claude-skills Also seen at: https://github.com/bc-rb/msp-claude-skills
QBR builder with ROI quantification and recovery playbook
vcio-qbr
QBR Builder Skill: customer health recap, ROI delivered, goals for next quarter, renewal and expansion discussion framework. Activates when a QBR is scheduled in the next 2 weeks, when you need to quantify ROI before a renewal, before an exec-level review, or when recovering an unhappy customer relationship.
QBR Prep (presentation-ready brief)
vcio-qbr
An MSP-authored agent skill that prepares a Quarterly Business Review pack for an MSP client — pulls ticket trends, security posture, license utilization, project status, and strategic recommendations into a presentation-ready brief. Trigger phrases: "QBR for [client]", "prep the quarterly review", "build the business review deck", "what should I tell [client] this quarter".
GitHub — directorcia/Office365 Cowork-Skills (MSP-authored skill)
QBR report builder (evidence-led, draft discipline)
vcio-qbr
Skill that builds a defensible QBR report where every claim traces to a specific note, ticket, or metric. Evidence, not adjectives.
Refresh & Lifecycle Roadmap Recipe (Hardware, EOL, License Renewal Calendar)
vcio-qbr
# Refresh & Lifecycle Roadmap — Master Recipe
Shadow AI QBR talk track
vcio-qbr
Verbatim client conversation script for MSP vCIOs/QBRs on shadow AI (a recurring billable service hook):