Tying It All Together
The tools on this site are designed to work together. Each one covers a different layer of performing AI-first headless identity operations, and when combined, they form a complete AI-first developer workflow.
The layers
| Layer | Problem it solves | Tool |
|---|---|---|
Discovery |
AI agents can’t navigate traditional documentation efficiently |
|
Domain expertise |
Agents lack context about the Ping Identity platform, SDKs, and identity patterns |
|
Interactive configuration |
Configuring Ping Identity platforms requires clicking through consoles |
|
Workflow execution |
Scripting, promoting, and automating configuration changes requires a headless execution layer |
How the layers connect
A complete AI-first identity workflow typically moves through these layers in sequence, though you can enter at any point depending on what you’re doing.
1. Your AI agent gets its bearings.
Before you prompt anything, your AI coding agent (Claude Code, Copilot, Cursor, Gemini CLI, etc.) can discover Ping Identity documentation through the llms.txt endpoint and Markdown alternates.
It knows what documentation exists, where it is, and how to navigate it without you having to copy-paste reference material.
2. You install domain expertise.
Ping Identity Agent Plugins give your AI agent pre-loaded knowledge of Ping Identity platforms: which product to use, how to configure it, how to integrate it, and how to secure AI agents against it.
Composable skills cover a range of identity work, and they are designed to be used together.
ping-quickstart routes you to the right combination automatically.
3. Your agent configures and inspects the platform. The AIC MCP Server connects your AI agent to your Ping Identity tenant so you can configure journeys, themes, and more through natural language. The DaVinci MCP Server gives your agent read access to DaVinci flows for inspection and troubleshooting, without leaving your IDE.
4. Your agent scripts, promotes, and automates. Ping CLI and Terraform handle the execution layer: exporting and promoting configuration across environments, running commands in CI/CD pipelines, and maintaining declared infrastructure state. In development, agents use the CLI directly as a tool. In production, agents operate pipelines, and the pipeline applies changes through a governed review process.
Example: end to end
The following shows how the layers combine in a single workflow:
-
Install the Ping Identity Agent Plugins in your AI coding agent. The MCP servers register automatically.
-
Use the DaVinci MCP Server to inspect your DaVinci flows and validate their configuration.
-
Make any necessary changes to your DaVinci flows, guided by
ping-orchestration. -
Use the
ping-app-integrationskill to integrate the Ping Orchestration SDK into your iOS and Android apps. -
Use Ping CLI to export the validated flow configuration and promote it to a staging environment for testing.
Each step uses a different tool, but none of them require you to leave your terminal or IDE.
Where to go next
Agent Skills
Install Ping Identity platform expertise into your AI coding assistant, from tenant setup and orchestration to app integration and securing AI agents.
AIC MCP Server
Configure PingOne Advanced Identity Cloud journeys, apps, themes, and more through natural language.
DaVinci MCP Server
Explore and troubleshoot DaVinci flows from your AI agent.
Ping CLI
Script, automate, and promote Ping Identity configuration from agent harnesses and CI/CD pipelines.
Terraform
Declare and maintain Ping Identity infrastructure configuration as code, applied through governed pipelines.