Return the full tool catalog grouped by category and risk, plus whether remote mutations are currently enabled. Back the /tools command with this.

Return non-sensitive metadata about this local Whatbox MCP server.

List implemented capabilities, planned Whatbox integrations, and safety boundaries.

Inspect fixed website-hosting readiness facts without reading Nginx configuration contents, process arguments, or private connection values.

Test fixed userland Nginx configuration syntax, optionally probe a configured loopback port without a response body, and summarize recent error severities without returning configuration or log contents.

Validate an explicitly allowlisted local static-site source and create a redacted, signed deployment plan. This tool never uploads files or changes Whatbox state.

Return one sanitized read-only assessment covering storage pressure, allowlisted services, website readiness, recommendations, and mutation safety state.

Check whether local Whatbox configuration is complete without returning configuration values or secrets.

Test a verified read-only SSH connection using local credentials without returning their values.

Return conservative advisory findings from service metadata and storage capacity without reading configuration contents or making changes.

Report conservative configured and running states for an allowlisted Whatbox service catalog without reading configuration contents or process arguments.

Create a bounded directory-only map and Mermaid diagram below an allowed root without reading file contents or traversing sensitive directories or symlinks.

Report whether allowlisted Whatbox torrent clients are running without returning torrent or unrelated process details.

Report capacity and usage for configured Whatbox storage roots using a fixed read-only query.

List a directory below an explicitly allowed Whatbox storage root. Absolute paths and path escapes are rejected.

Upload an allowlisted local file or directory into an allowed remote root without overwriting. Reversible; checks remote free space first.

Download a remote file or directory into the configured local download directory. Skips symlinks; checks local free space first.

Move or rename a path between allowed roots without overwriting an existing destination. Reversible.

Create a directory (and missing parents) below an allowed root. Reversible.

Move a path into a dated quarantine directory instead of deleting it. Requires explicit human approval. Reversible; reports storage headroom (quarantine does not free space).

List items currently in the quarantine directory, so a human can choose what to restore (move) or purge.

Permanently delete an item that already lives in the quarantine directory. This is the irreversible second step and requires its own explicit human approval.

Download allowlisted service configuration directories to the local download directory as a timestamped backup. Returns counts only; checks local free space first.

Control an allowlisted userland service using fixed start scripts and bounded process signals. Stop/restart require explicit human approval.

Stage a validated local static site into a new release, verify the remote manifest by checksum, atomically activate it via the current-release pointer, and health-check. Reversible via rollback. Checks remote free space first.

Atomically repoint the current-release pointer to an existing prior release and health-check it. Requires explicit human approval.

Report bounded torrent status (name, state, progress, ratio, label, totals) through an SSH loopback tunnel to the configured client RPC. Read-only.

Add a torrent from a bounded magnet or HTTP(S) URL through the configured client RPC. Reversible.

Pause, resume, set the label/category, or set the seed-ratio limit of one torrent. Reversible.

Remove a torrent from the client, optionally deleting its downloaded data. Requires explicit human approval; deleting data is irreversible.