Teaching Copilot to Write: How NetBox Copilot Goes Beyond Read-Only

Last month we announced the general availability of NetBox Copilot – our AI assistant for managing infrastructure operations through natural language, embedded directly in NetBox. Hundreds of organizations across dozens of countries have used Copilot to query data, trace cable paths, audit configurations, and build automation scripts.

But querying data is only half the story. One of the most requested capabilities during the preview – and a key part of the GA release – is write operations. NetBox Cloud and Enterprise customers can now create, update, and delete objects in NetBox through natural language.

What Write Operations Enable

Think about the everyday tasks that eat up time in NetBox. A new branch office comes online and you need to create the site, add devices, and assign IPs. A field tech replaces a switch and you need to update the serial number. An audit reveals dozens of devices missing descriptions or management IPs.

Copilot can now handle all of these through a simple conversation.

Say your organization follows a standard branch office pattern – a router, an access switch, and a PDU at each site. Standing up a new branch looks like this:

“Create a new site called DM-Hartford in Connecticut, assigned to the Branch Offices group and the Dunder-Mifflin tenant.”

Copilot shows you exactly what it’s about to do. You approve, and the site is created. Then:

“Now create the standard branch devices – a Cisco ISR 1111-8P router, a C9200-48P access switch, and an APC AP7901 PDU – using our naming convention.”

Copilot proposes three device records following the patterns it sees in your existing data. You review, approve, and they’re created. The same approach works for day-2 operations – updating descriptions, reassigning IPs, removing decommissioned VMs. Small tasks individually, but they add up across hundreds or thousands of objects.

Making changes in NetBox with Copilot is quick and safe

Safety by Design

NetBox is your source of truth for infrastructure data. Writes need to be right.

Every write operation requires explicit human approval before it executes. This isn’t a setting you can toggle off – it’s how the system works. When Copilot proposes a change, you see a detailed review card:

• Creates: the full set of fields and values for the new object
• Updates: a side-by-side diff of current versus proposed values
• Deletes: warnings about dependent objects that could be affected

You can approve, reject, or edit proposed values before approving. Copilot handles the tedious parts – looking up IDs, formatting API calls, resolving required fields – while you stay in control of what actually changes. And because writes execute using your existing NetBox session, all changes are logged under your username with a full audit trail. Your RBAC policies are enforced. No service accounts, no elevated privileges.

What’s Next

Human-in-the-loop approval is the right starting point. But for low-risk operations – updating a description, adding a tag – explicit approval for every change can slow things down. We’re exploring ways to streamline routine operations while maintaining strict controls for higher-risk changes like deletes.

Over time, Copilot will enable larger bulk operations, where a single request can apply changes across dozens or hundreds of objects – “update the description on all access switches in the northeast region” – with summary-level approval. The bigger picture: as the trust model matures, the balance shifts from “review every operation” to “review by exception,” where Copilot handles routine work autonomously and surfaces only the decisions that need human judgment.

Try It Today

Copilot is available across all NetBox editions. Read-only access is free. Write operations are available to NetBox Cloud and Enterprise customers – just start a conversation and ask Copilot to make a change.

Want to learn more about write capabilities, data governance, and what Copilot can do for your team? Get in touch for a demo.