Show runtime environment keys and resolved state paths.

Probe the local auth state and the current JumpServer session.

Return the recommended terminal workflow for coding agents using this MCP.

Return the recommended SFTP workflow and destructive-operation safety rules.

Return the current JumpServer user profile.

List assets through the observed perms endpoint used by the current GUI.

Fetch one asset detail through the observed perms endpoint.

List the observed JumpServer node tree exposed to the current user.

List observed JumpServer connect methods, optionally narrowed to one protocol.

Summarize accounts, protocols, and connect methods available for one asset.

Resolve user-facing asset and account references into the concrete IDs needed by terminal entrypoints.

List active connection tokens without exposing the token secret value.

Create a connection token using a concrete account ID or a user-facing account reference.

Expire one connection token explicitly.

Probe KoKo terminal access using a concrete account ID or a user-facing account reference.

Resolve a target and get or reuse one managed KoKo shell for that asset/account pair.

Refresh the persisted cookie-backed terminal session if it is still valid, or report that re-login is required.

List active managed KoKo terminal sessions in the current MCP server process.

Send raw input to a managed KoKo terminal session.

Read buffered output from a managed KoKo terminal session until idle or timeout.

Run one command through an already acquired managed KoKo shell.

Verify and return the effective operating-system user in a managed shell.

Switch to a verified remote user within the existing JumpServer shell.

Use sudo for sudo-policy authentication and su for target-account authentication. Supply password only when the remote host requires it. The MCP client or model may retain that tool argument in its trace history.

Exit one MCP-managed user shell and verify restoration of the previous user.

Interrupt a running command in a managed KoKo terminal session.

Resize a managed KoKo terminal session.

Close a managed KoKo terminal session and expire its underlying connection token.

Resolve a target and get or reuse one managed KoKo SFTP session.

List active managed KoKo SFTP sessions in the current MCP process.

Return metadata for one absolute remote path.

List one absolute remote directory path.

Create a remote directory, optionally creating missing parents.

Upload a local file; replacing a remote file requires overwrite=true.

Download a remote file; replacing a local file requires overwrite=true.

Rename one remote entry without overwriting an existing sibling.

Delete an approved path; directories additionally require recursive=true.

Close one managed KoKo SFTP session and clean up its connection token.