GitLab Flow Creator Agent Guide
On this page
Quick answer
GitLab announced Flow Creator generally available. It turns a natural-language description into a runnable custom flow, reducing the need to hand-author the Flow Registry schema. Treat the result as generated source code, not an approved process.
Before use, verify the offering, Agent Platform prerequisites, scoped service account, permissions, and Maintainer-level enablement documented for the project or group.
Review the generated flow
Inspect the YAML, identity, tools, repositories, branches, triggers, inputs, outputs, secrets, model, token or Credits usage, timeouts, retries, idempotency, external communication, and failure behavior. Reject hidden permission expansion or actions that exceed the requester’s authority.
Test unauthorized invocation, missing service account scope, malicious repository instructions, wrong branch, duplicate trigger, tool failure, budget cap, generated-flow update, review rejection, and rollback. Keep code review, security review, required checks, and human merge or deployment authority.
Use the 19.3 lifecycle guide and readiness checklist.
Official sources
Source check: August 23, 2026. Verify current offerings, service-account scope, roles, flow schema, tools, Credits, and review controls.