Register a Pterodactyl panel by name with its base URL and API key(s). Persisted locally (chmod 600). Re-adding the same name updates it.

Delete a registered panel by name.

Set the active panel for this session. Tools called without an explicit panel arg use it.

List registered panels. API keys are masked.

Check which API keys work for a panel by making a lightweight request to each API.

List servers the client API key can access on the selected panel.

Get details for one server by its short identifier or UUID.

Current state and CPU / memory / disk / network usage for a server.

Send a power signal to a server: start, stop, restart, or kill.

Send a command to a running server's console. The server must be online.

Get the server's activity log.

Get the server's startup command and configurable variables.

Set the value of a startup environment variable.

Change the server's name and optionally its description.

Trigger a server reinstall. This can wipe server files; use with care.

Change the server's Docker image (must be one allowed by its egg).

List files and directories at a path on the server.

Read the raw contents of a file. Use for text/config files; large or binary files are better downloaded.

Write raw content to a file, creating or overwriting it.

Rename or move a file/directory within the server. Paths are relative to root.

Copy a file or directory. The copy is placed next to the original.

Create a new folder under a root directory.

Delete one or more files/directories under a root directory.

Create an archive from one or more files/directories under a root.

Extract an archive file under a root directory.

Set the mode (e.g. 644, 755) of a file under a root directory.

Download a remote URL directly onto the server.

Return a one-time signed URL to download a file (binary-safe). Fetch it outside the model context.

Return a one-time signed URL to upload files to the server. directory is appended to the signed URL, because Wings reads the target folder from it and the panel's own response ignores it.

List the server's databases.

Create a new database on the server.

Generate a new password for a database.

Delete a database from the server.

List the server's scheduled tasks.

Get one schedule and its tasks.

Create a schedule with a cron expression.

Update a schedule. Pterodactyl requires the full cron expression and name on update.

Delete a schedule and its tasks.

Trigger a schedule to run immediately.

Add a task. action is command, power, or backup; payload is the command, power signal, or ignored globs.

Update a task within a schedule.

Remove a task from a schedule.

List the server's network allocations (IP/port assignments).

Request a new allocation. With no ip/port the next available one is auto-assigned.

Mark an allocation as the server's primary.

Update the notes on an allocation.

Unassign an allocation from the server.

List the server's backups.

Start a new backup. ignored is a newline-separated list of glob patterns to exclude.

Get details for one backup.

Return a one-time signed URL to download a backup. Fetch it outside the model context.

Restore a backup to the server. truncate wipes existing files first.

Lock or unlock a backup (locked backups cannot be deleted or rotated out).

Delete a backup from the server.

List users with access to the server.

Get one subuser and their permissions.

Add a user to the server by email with a set of permission keys (see permissions_list).

Replace a subuser's permission set.

Set which files and directories a subuser may not touch, on panels carrying the sftp-permissions addon. This is a route of its own: the fields are read back by subuser_list but sending them to subuser_update does nothing. Patterns are gitignore syntax, matched by wings — '.jar' matches at any depth, a trailing slash means a directory, and '!' re-allows a path. Note that wings anchors every negation to the server root, so an exception has to name its full path: '!/plugins/AxVaults/messages.yml' works where '!/messages.yml' does not. A root admin bypasses the list entirely.

Remove a user's access to the server.

Get the authenticated user's account details.

Get the account activity log.

List all available subuser permission keys (use with subuser_create).

Get the TOTP secret / QR image URL to enable two-factor authentication.

Enable two-factor authentication by confirming a TOTP code. Returns recovery tokens.

Disable two-factor authentication with the account password.

Change the account email. Requires the current password.

Change the account password.

List the account's client API keys.

Create a new client API key. The secret is only returned once.

Revoke a client API key by its identifier.

List the account's SSH keys.

Add an SSH public key to the account.

Remove an SSH key from the account by fingerprint.

Open the console WebSocket, replay recent output and collect live output for a few seconds, then return it as text. The server should be running.