Azure DevOps work items →
merged AI pull request
Agentopia by CynetIQ imports Azure Boards work items, runs an AI pipeline, opens a PR on Azure Repos, completes the PR on merge, and writes state and story points back to the work item. Reporter / area path / tag based routing for security tickets.
The flow, end to end
- 1Work item → Agentopia by CynetIQ taskAgentopia by CynetIQ syncs work items from Azure Boards via WIQL or area-path filter. Each work item becomes a Task with description, acceptance criteria, attachments, and a backlink to the work item.
- 2Integration Rules tag and routeRules match on Created By, Work Item Type, Area Path, or Tags. Example: Tag contains "security" → route to security_developer agent, priority = critical, repo = backend-api.
- 3AI Refinement (optional)Click ✨ Refine. The PM agent expands the description, adds acceptance criteria, estimates story points, suggests assignee. Story points written back to the Story Points field.
- 4AI pipeline runsanalyzer → planner → developer → reviewer. Code is generated against the right Azure repo, pushed to a feature branch, and the reviewer runs OWASP-aware AI review on the diff.
- 5PR opened, work item completed on mergePull request created on Azure Repos with the AI review attached. Work item state → Active. When the PR auto-completes, work item → Closed and the merged commit URL is added as a discussion comment.
What you get out of the box
Setup in 5 minutes
- Create a PAT at
dev.azure.com/yourorg/_usersSettings/tokenswith Code (R&W), Work Items (R&W), Build (R), Identity (R). - In Agentopia by CynetIQ → Integrations → Azure DevOps, paste the PAT and your org URL (
https://dev.azure.com/yourorg). - Pick the projects to sync. Agentopia by CynetIQ auto-discovers your repos and proposes mappings.
- Configure the work item filter (default:
State <> Closed AND AssignedTo = @Me). - Add an Integration Rule for security: Tag contains "security" → agent = security_developer, priority = critical.
Frequently asked
How does Agentopia by CynetIQ work with Azure DevOps?
Agentopia by CynetIQ connects to your Azure DevOps organization via PAT, syncs work items from selected projects, runs the AI agent pipeline, and creates pull requests on Azure Repos. The work item state transitions (To Do → Active → Resolved → Closed) are written back automatically as the AI runs and the PR merges.
Does Agentopia by CynetIQ support both Azure Repos and Azure Boards?
Yes. Boards (work items) is the source of truth for tasks; Repos is the target for PRs. You can also mix — pull work items from Azure Boards and open PRs on GitHub if your code lives there.
Can I auto-route security work items to a security reviewer agent?
Yes — define an Integration Rule that matches Created By, Work Item Type, Area Path, or Tags, and route to your security_developer agent. Same rule engine works for Jira, Azure DevOps, Sentry, and New Relic imports.
How is the PAT stored?
Personal Access Token is encrypted at rest with envelope encryption (org-level KMS-style key). Required scopes: Code (read & write), Work Items (read & write), Build (read), and Identity (read). Agentopia by CynetIQ never reads your code through Boards APIs.
Does Agentopia by CynetIQ write story points back to Azure DevOps?
Yes — when AI Refinement runs on an Azure-sourced task, Agentopia by CynetIQ updates the Story Points field on the work item, transitions state to "Refined", and posts the AI-generated acceptance criteria as a discussion comment.
How does it handle Azure DevOps Pipelines?
Agentopia by CynetIQ does not run your pipelines. When the AI opens a PR, your existing build/release pipelines run as normal. The reviewer agent runs an LLM code review independently before the PR is marked ready, so AI review and CI run in parallel.