| alert_listA | [READ] List alerts (extId, title, severity, impact, ack/resolved, affected entity). Args:
severity: Filter to one severity (e.g. CRITICAL); omit for all severities.
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| event_listA | [READ] List events (extId, title, creation time, source entity). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| audit_listA | [READ] List config audit records (extId, operation type, user, creation time). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| analyze_alertA | [READ] Root-cause analysis: correlate an alert with recent same-entity events. Returns a probable cause and suggested actions plus the related events. Resilient
and deterministic — safe to run on a live, alerting cluster.
Args:
alert_ext_id: Alert extId as returned by alert_list.
target: Prism Central target name from config; omit for the default.
|
| alert_acknowledgeA | [WRITE][risk=medium] Acknowledge an alert. Auto-handles ETag; captures prior state. Args:
alert_ext_id: Alert extId as returned by alert_list.
target: Prism Central target name from config; omit for the default.
|
| alert_resolveA | [WRITE][risk=medium] Resolve an alert. Auto-handles ETag; captures prior state. Args:
alert_ext_id: Alert extId as returned by alert_list.
target: Prism Central target name from config; omit for the default.
|
| task_listA | [READ] List Prism Central tasks (extId, operation, status, %complete, entity). Args:
status: Optional status filter, e.g. RUNNING / SUCCEEDED / FAILED.
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| capacity_runwayA | [READ] Deterministic storage-runway estimate for a cluster (days-to-full). Supply daily_growth_bytes (bytes/day) to project daysToFull; without it the
forecast is 'insufficient-data'. No clock or randomness — same inputs, same
answer.
Args:
cluster_ext_id: Cluster extId as returned by cluster_list.
daily_growth_bytes: Assumed daily storage growth in bytes (omit to skip forecast).
target: Prism Central target name from config; omit for the default.
|
| image_listA | [READ] List content-library images (extId, name, type, size, cluster placement). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| category_listA | [READ] List categories (extId, key, value, description). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| image_deleteA | [WRITE][risk=high] Delete an image. Destructive — pass dry_run=True to preview first. Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why. Captures the image's
prior name on the audit trail.
Args:
ext_id: Image extId as returned by image_list.
dry_run: If True, return what WOULD be deleted without deleting.
target: Prism Central target name from config; omit for the default.
|
| category_createA | [WRITE][risk=medium] Create a category key/value pair. Args:
key: Category key (e.g. "Environment").
value: Category value (e.g. "Production").
description: Optional human-readable description.
target: Prism Central target name from config; omit for the default.
|
| category_assignA | [WRITE][risk=medium] Bulk-associate a category to a set of VMs. Args:
category_ext_id: Category extId as returned by category_list.
vm_ext_ids: VM extIds (from vm_list) to associate the category with.
target: Prism Central target name from config; omit for the default.
|
| cluster_listA | [READ] List registered clusters (extId, name, AOS version, hypervisors, nodes). Call this first — most other tools need a clusterExtId from here.
Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| cluster_healthA | [READ] One cluster's health: services, resiliency/fault-tolerance, upgrade state. Args:
cluster_ext_id: Cluster extId as returned by cluster_list.
target: Prism Central target name from config; omit for the default.
|
| host_listA | [READ] List hosts across all clusters (extId, cluster, hypervisor, CPU/mem). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| cluster_utilizationA | [READ] Point-in-time CPU / memory / storage / IOPS utilization for a cluster. Args:
cluster_ext_id: Cluster extId as returned by cluster_list.
target: Prism Central target name from config; omit for the default.
|
| snapshot_listA | [READ] List a VM's snapshots (extId, name, createTime) — spot lingering snapshots. Args:
vm_ext_id: VM extId as returned by vm_list.
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| recovery_point_listA | [READ] List recovery points (extId, vmExtId, create/expiration time, locationType). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| protection_domain_listA | [READ] List protection domains / policies (extId, name, replicationType). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| snapshot_createA | [WRITE][risk=medium] Snapshot a VM (reversible → delete the snapshot). Auto-handles ETag. Args:
vm_ext_id: VM extId as returned by vm_list.
name: Name for the new snapshot.
target: Prism Central target name from config; omit for the default.
|
| snapshot_deleteA | [WRITE][risk=high] Delete a VM snapshot. Destructive — pass dry_run=True to preview. Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why. Captures the
snapshot's prior name on the audit trail.
Args:
vm_ext_id: VM extId as returned by vm_list.
snapshot_ext_id: Snapshot extId as returned by snapshot_list.
dry_run: If True, return what WOULD be deleted without deleting.
target: Prism Central target name from config; omit for the default.
|
| snapshot_restoreA | [WRITE][risk=high] Revert a VM to a snapshot. Destructive & NOT undoable — preview first. Reverting overwrites the VM's current state; pass dry_run=True to preview.
Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why.
Args:
vm_ext_id: VM extId as returned by vm_list.
snapshot_ext_id: Snapshot extId as returned by snapshot_list.
dry_run: If True, preview the revert without performing it.
target: Prism Central target name from config; omit for the default.
|
| vm_protectA | [WRITE][risk=medium] Associate a VM with a protection policy. Args:
vm_ext_id: VM extId as returned by vm_list.
policy_ext_id: Protection policy extId as returned by protection_domain_list.
target: Prism Central target name from config; omit for the default.
|
| pd_failoverA | [WRITE][risk=high] Fail a protection domain over to a target cluster (DR event). Destructive DR operation; pass dry_run=True to preview. Tagged risk=high
(audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY / NUTANIX_AUDIT_RATIONALE
optionally annotate who/why.
Args:
policy_ext_id: Protection policy extId as returned by protection_domain_list.
cluster_ext_id: Target cluster extId (from cluster_list).
dry_run: If True, preview the failover without performing it.
target: Prism Central target name from config; omit for the default.
|
| cluster_health_rcaA | [READ] Estate health RCA: resiliency state, storage headroom, nodes down. Collects every cluster's health + utilization, all hosts, and all storage
containers, then reports worst-first findings: degraded fault-tolerance
state, cluster storage pools or containers over 80% (warning) / 90%
(critical), hosts whose nodeStatus is not healthy, and clusters reporting
fewer visible hosts than their nodeCount. Every finding cites the measured
percentage or the raw Prism state string that tripped it.
Args:
target: Prism Central target name from config; omit for the default.
|
| alert_triage_rcaA | [READ] Triage active Prism alerts: per-severity counts + oldest unresolved. Groups every unresolved alert by severity with a count per level, flags
critical alerts nobody has acknowledged, and surfaces the oldest unresolved
alert with its age in days (aged against the newest alert in the same feed,
so the analysis is clock-free and reproducible). Use analyze_alert on an
individual extId for the per-alert event correlation.
Args:
target: Prism Central target name from config; omit for the default.
|
| lcm_inventoryA | [READ] List LCM-managed entities: current/available versions and updateAvailable. Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| lcm_precheckB | [WRITE][risk=medium] Run LCM prechecks for entities on a cluster (read-safe validation). Args:
cluster_ext_id: Cluster extId as returned by cluster_list.
entity_ext_ids: LCM entity extIds (from lcm_inventory) to precheck.
target: Prism Central target name from config; omit for the default.
|
| lcm_updateA | [WRITE][risk=high] Perform an LCM firmware/software update. Pass dry_run=True to preview. Destructive and NOT undoable — tagged risk=high (audit tier 'review');
NUTANIX_AUDIT_APPROVED_BY / NUTANIX_AUDIT_RATIONALE optionally annotate
who/why. Requires a precheck that passed: run lcm_precheck first and pass
the taskExtId it returned. The update is refused without it. The dry_run
preview enforces the same requirement, so a preview can never report an
update the real call would refuse.
Args:
cluster_ext_id: Cluster extId as returned by cluster_list.
entity_ext_ids: LCM entity extIds (from lcm_inventory) to update.
precheck_task_ext_id: taskExtId returned by lcm_precheck for these entities,
once that task has reached SUCCEEDED (check with task_list). Required —
the update is refused without it.
dry_run: If True, return what WOULD be updated without updating.
target: Prism Central target name from config; omit for the default.
|
| subnet_listA | [READ] List subnets (extId, name, type, VLAN, cluster, IP config). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| subnet_getA | [READ] One subnet by extId, with its current ETag surfaced for downstream writes. Args:
ext_id: Subnet extId as returned by subnet_list.
target: Prism Central target name from config; omit for the default.
|
| subnet_createA | [WRITE][risk=medium] Create a subnet on a cluster. Args:
name: New subnet name.
cluster_ext_id: Target cluster extId (from cluster_list).
vlan_id: VLAN / network id for the subnet.
subnet_type: Subnet type (default VLAN).
target: Prism Central target name from config; omit for the default.
|
| subnet_deleteA | [WRITE][risk=high] Delete a subnet. Destructive — pass dry_run=True to preview first. Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why. Irreversible, so the
audit trail captures the subnet's full prior state (name, description, type,
VLAN id, cluster, IP config and pools).
Args:
ext_id: Subnet extId as returned by subnet_list.
dry_run: If True, return what WOULD be deleted without deleting.
target: Prism Central target name from config; omit for the default.
|
| storage_container_listA | [READ] List storage containers (extId, name, cluster, capacity, usage, RF). Args:
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| storage_container_createB | [WRITE][risk=medium] Create a storage container on a cluster. Args:
name: New storage container name.
cluster_ext_id: Target cluster extId (from cluster_list).
replication_factor: Copies kept per block (default 2).
target: Prism Central target name from config; omit for the default.
|
| storage_container_updateA | [WRITE][risk=medium] Resize a container's capacity / replication (reversible → prior). Args:
ext_id: Storage container extId as returned by storage_container_list.
max_capacity_bytes: New max capacity in bytes (omit to leave unchanged).
replication_factor: New replication factor (omit to leave unchanged).
target: Prism Central target name from config; omit for the default.
|
| storage_container_deleteA | [WRITE][risk=high] Delete a storage container. Destructive — pass dry_run=True first. Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why. Captures the
container's prior capacity/RF on the audit trail.
Args:
ext_id: Storage container extId as returned by storage_container_list.
dry_run: If True, return what WOULD be deleted without deleting.
target: Prism Central target name from config; omit for the default.
|
| undo_listA | [READ] List recorded, not-yet-applied undo tokens (most recent first). Each entry names the original tool, the inverse tool that ``undo_apply``
would run, and a human note. Use the ``undoId`` with ``undo_apply``.
``truncated`` is measured — one extra row is fetched — so a capped listing
announces itself instead of looking like the complete set.
Each entry carries ``effectVerified``. False means the original write
lost its response, so the change it reverses is PROBABLE, not confirmed —
check the live state before applying, and do not report the result as a
restore of a state that may never have been reached.
Args:
limit: Max rows to return (default 50). Re-run with a higher limit when
the result reports ``truncated: true``.
target: Unused (undo state is host-local); accepted for CLI uniformity.
|
| undo_applyA | [WRITE][risk=medium] Apply a recorded undo by dispatching its inverse tool. The inverse runs through its own governed tool, so its real risk tier is
tagged on its own audit row there. Pass dry_run=True to preview the
inverse call without executing it. A token can only be applied once.
Args:
undo_id: The undoId from undo_list (or an ``_undo_id`` in a write result).
dry_run: If True, preview the inverse tool + params without running it.
target: Passed through to the inverse tool when it accepts a target.
|
| vm_listA | [READ] List VMs — AHV and (by default) ESXi-backed too; hypervisor field distinguishes. Args:
include_esxi: Include ESXi-backed VMs Prism Central can see (default True).
limit: Max rows to return (default 500). The result reports
`returned`, `limit`, and `truncated` so a capped read is visible.
target: Prism Central target name from config; omit for the default.
|
| vm_getA | [READ] One VM by extId, with its current ETag surfaced for downstream writes. Args:
vm_ext_id: VM extId as returned by vm_list.
target: Prism Central target name from config; omit for the default.
|
| vm_power_onA | [WRITE][risk=medium] Power on a VM (reversible → power-off). Auto-handles ETag. Args:
vm_ext_id: VM extId as returned by vm_list.
dry_run: If True, return what WOULD be powered on without doing it.
target: Prism Central target name from config; omit for the default.
|
| vm_guest_shutdownA | [WRITE][risk=medium] Graceful in-guest shutdown (reversible → power-on). Args:
vm_ext_id: VM extId as returned by vm_list.
dry_run: If True, preview it (runs the self-lockout guard) without shutting down.
target: Prism Central target name from config; omit for the default.
|
| vm_power_offA | [WRITE][risk=medium] Hard power off a VM (reversible → power-on). Args:
vm_ext_id: VM extId as returned by vm_list.
dry_run: If True, preview it (runs the self-lockout guard) without powering off.
target: Prism Central target name from config; omit for the default.
|
| vm_rebootA | [WRITE][risk=medium] Reboot a VM (no distinct inverse). Args:
vm_ext_id: VM extId as returned by vm_list.
dry_run: If True, return what WOULD be rebooted without doing it.
target: Prism Central target name from config; omit for the default.
|
| vm_createA | [WRITE][risk=medium] Create a minimal VM on a cluster. Args:
name: New VM name.
cluster_ext_id: Target cluster extId (from cluster_list).
num_sockets: vCPU sockets (default 1).
memory_bytes: RAM in bytes (default 4 GiB).
target: Prism Central target name from config; omit for the default.
|
| vm_updateA | [WRITE][risk=medium] Resize a VM's CPU sockets / memory (reversible → prior values). Args:
vm_ext_id: VM extId as returned by vm_list.
num_sockets: New vCPU socket count (omit to leave unchanged).
memory_bytes: New RAM in bytes (omit to leave unchanged).
target: Prism Central target name from config; omit for the default.
|
| vm_cloneA | [WRITE][risk=medium] Clone a VM to a new name. Args:
vm_ext_id: Source VM extId as returned by vm_list.
new_name: Name for the clone.
target: Prism Central target name from config; omit for the default.
|
| vm_deleteA | [WRITE][risk=high] Delete a VM. Destructive — pass dry_run=True to preview first. Tagged risk=high (audit tier 'review'); NUTANIX_AUDIT_APPROVED_BY /
NUTANIX_AUDIT_RATIONALE optionally annotate who/why. Captures the VM's
prior name/power state on the audit trail.
Args:
vm_ext_id: VM extId as returned by vm_list.
dry_run: If True, return what WOULD be deleted without deleting.
target: Prism Central target name from config; omit for the default.
|
| vm_migrateA | [WRITE][risk=high] Live-migrate a VM to another host (reversible → prior host). Pass dry_run=True to preview. Tagged risk=high (audit tier 'review');
NUTANIX_AUDIT_APPROVED_BY / NUTANIX_AUDIT_RATIONALE optionally annotate
who/why.
Args:
vm_ext_id: VM extId as returned by vm_list.
target_host_ext_id: Destination host extId (from host_list).
dry_run: If True, preview the migration without performing it.
target: Prism Central target name from config; omit for the default.
|
