Tunnel Manager
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Bind host for HTTP transports | 0.0.0.0 |
| PORT | No | Bind port for HTTP transports | 8000 |
| DEBUG | No | Verbose logging | False |
| TRANSPORT | No | Transport protocol (stdio, streamable-http, sse) | stdio |
| TUNNEL_PASSWORD | No | SSH password (when not using a key) | |
| TUNNEL_USERNAME | No | SSH username | |
| PYTHONUNBUFFERED | No | Unbuffered stdout | 1 |
| TUNNEL_INVENTORY | No | Path to the shared inventory | ~/.config/agent-utilities/inventory.yml |
| TUNNEL_CERTIFICATE | No | Path to an SSH certificate | |
| TUNNEL_REMOTE_HOST | No | Default remote host | |
| TUNNEL_REMOTE_PORT | No | Default remote SSH port | 22 |
| TUNNEL_IDENTITY_FILE | Yes | Path to the SSH private key (default ~/.ssh/id_ed25519) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| extensions | {
"io.modelcontextprotocol/ui": {}
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| tm_hostsC | Manage the local host alias inventory. |
| tm_remoteC | Single-host SSH operations with shared connection params. |
| tm_inventoryC | Bulk inventory operations against YAML host groups. |
| tm_operationsC | Operation lifecycle and session management. |
| tm_systemA | Remote system intelligence via SSH. |
| tm_filesC | Advanced file operations on remote hosts. |
| tm_securityC | Security scanning and compliance. |
| tunnel_ingest_hostsC | List the managed SSH inventory and push it into the epistemic-graph KG. Maps each alias → a typed |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 8 tools
Most tools have distinct purposes (e.g., files, security, system intelligence), but tm_hosts and tm_inventory overlap in managing host inventory, and tm_remote may conflict with tm_files and tm_system. The outlier tunnel_ingest_hosts is distinct but not clearly related.
Seven tools use the 'tm_' prefix, but one uses 'tunnel_', breaking consistency. The naming pattern is noun-based without clear verb-noun structure, which is acceptable but not ideal.
Eight tools is a well-scoped set for remote host management, covering operations, inventory, security, and system intelligence without being overwhelming.
Covers file operations, SSH sessions, inventory, security, and system intelligence. Minor gaps like individual host CRUD (e.g., create/delete alias) might exist, but bulk operations and KG ingestion fill some needs.