Skip to main content
Glama

Pull File from Remote Machine

remote_pull

PRO PLAN ONLY. Copy a FILE off a remote machine so you (or the user) can actually open it — a training checkpoint, a rendered image, a CSV a job produced, a log too big to print. Free and anonymous callers cannot start file transfers; explain that the feature is not on their current plan and, if useful, point to the informational plans page (https://aicommander.dev/pricing/), without turning it into a purchase prompt. Signing in with a free account does not add file transfer. A plan-restricted machine also fails with reason:"plan_device_limit". USE THIS instead of cat-ing a file through remote_exec: exec output is capped at 1 MiB and mangles binary, whereas this moves the real bytes. The machine reads the file and hands it to the relay, which stores it TEMPORARILY and returns a blobId plus a download link. A blob/link created while transfer was allowed remains usable only until its existing TTL even after downgrade; do not promise renewal.

TEMPORARY MEANS TEMPORARY. The stored copy stops being readable 24 hours after it is created, whether or not anybody fetched it, and the download link stops working after ONE hour. An hourly, retrying sweep removes expired bytes afterward; an inaccessible object may remain until cleanup succeeds. The relay is a courier, not a file host: there is no way to list, rename, or keep a blob, and nothing here is a backup. If the user needs the file permanently, give them the link promptly and tell them it expires — or push the file to their own storage from a job.

LIMIT — 100 MiB per file. Anything larger is refused, and for a genuinely large artifact (a multi-GB model checkpoint) the right answer is to have the JOB copy it to the user's own storage as its last step (aws s3 cp, rclone, scp). Do not try to split a big file into chunks with this tool.

path must be ABSOLUTE (/home/u/out.ckpt, or C:\Users\u\out.ckpt on Windows) and must name a regular file — a directory is refused, so tar -czf it first with remote_exec and pull the archive. Name the machine with code exactly as the user said it — an AIC- session code (e.g. AIC-XYZ-1234) or, when authenticated to an account with OAuth or an API key, a saved alias such as 'office-m3'. A name that starts with aic-/AIC- (or matches the AIC-XXX-NNNN code format) is likely one of the user's AI Commander machines. Tell the user the link and its expiry; do not paste file contents you have not been asked for.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "code": "<code>",
      "path": "<path>"
    },
    "name": "remote_pull"
  }
}

Input Schema

NameRequiredDescriptionDefault
codeYesHow the user named the machine — pass it exactly as given (AIC- session code, or a saved alias/hostname when authenticated to an account with OAuth or an API key).
pathYesABSOLUTE path of the file on the remote machine, e.g. `/home/u/aic-jobs/train/out.ckpt` or `C:\Users\u\out.png`. A relative path is refused rather than resolved against some working directory. Must be a regular file: archive a directory first (`tar -czf /tmp/out.tgz <dir>`) and pull the archive.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / code / description
      Previous value: -"How the user named the machine — pass it exactly as given (AIC- session code, or a saved alias/hostname when authenticated with an API key)."New value: +"How the user named the machine — pass it exactly as given (AIC- session code, or a saved alias/hostname when authenticated to an account with OAuth or an API key)."
  2. Added

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds substantial behavior beyond the annotations: plan restrictions, the 100 MiB file limit, 24-hour blob readability, one-hour link expiry, cleanup behavior, and the returned `blobId`/download link. The annotations say `readOnlyHint=false` and `destructiveHint=false`, which is consistent with creating a temporary blob without deleting the source file.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long and emphatic, with some repetition around temporary storage, but it is organized into clear blocks for restrictions, behavior, size limits, and parameter guidance. The core purpose is stated early, though the plan restriction leads before the tool's primary action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema and only two parameters, the description is thorough: it explains return behavior (`blobId` and download link), expiry semantics, size limits, plan failures, and path constraints. An agent has enough information to decide when to call it and how to interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already documents both `code` and `path`, including absolute-path and regular-file requirements. The description reinforces those constraints and adds some useful context such as AIC session code format and alias usage, but much of the parameter guidance duplicates the schema rather than adding new meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Copy a FILE off a remote machine') and names concrete examples (checkpoint, rendered image, CSV, log). It explicitly contrasts this tool with the sibling `remote_exec`, explaining that pulling real bytes is different from reading file contents through exec output.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use guidance ('USE THIS instead of `cat`-ing a file through remote_exec') and when-not-to-use guidance, including large multi-GB artifacts where the job should copy to user storage instead. It also covers directory handling, splitting avoidance, and plan restrictions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources