Skip to main content
Glama
TMYTiMidlY

portal-mcp-server

by TMYTiMidlY

portal_local_exec

Run commands locally on the server machine with secret injection from stored credentials. Set a timeout to control execution duration.

Instructions

Run a command on the MCP SERVER's OWN machine (local), NOT over SSH — for anything on a remote host use portal_exec instead. Off by default (local execution is a larger threat surface): the operator must set PORTAL_ALLOW_LOCAL_EXEC=1 in the server process's env to enable it.

★ credentials: if the command needs a secret, don't have the user paste it into the chat — they run portal secret set <name> in their own terminal; you pass secrets=[""] and reference it as the uppercased env var ($NAME), injected into the local child's env and redacted from output. This lets a local script use an API token without the value ever entering this conversation.

No sudo here — for a privileged command, sudo is remote-only via portal_exec(use_sudo=True).

timeout (seconds, default 1h, operator-lowerable via PORTAL_DEFAULT_TIMEOUT): held open until the command exits or timeout elapses. Keepalive pings stop the client aborting a hung call, so for an exploratory / re-runnable command pass a SMALL one first (e.g. 10–30) to fail fast, raising it only for slow commands.

★ secrets flags the result "high_risk": briefly tell the user you ran a local command with their stored credential, or only do so with prior permission.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
commandYes
secretsNo
timeoutNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. Discloses that local execution is a larger threat surface, off by default, no sudo, timeout behavior, secrets handling (redacted, injected as env var), and high_risk flagging. Also mentions keepalive pings.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is somewhat lengthy but every sentence adds value. Well-structured with sections for credentials and timeout. Could be slightly more concise without losing information, but still good.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given complexity (3 params, no annotations, output schema exists but not needed), description covers purpose, usage, behavior, parameters well. Explains high-risk aspect and secrets handling. Complete for an agent to use correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% (no parameter descriptions in schema). Description adds meaning for all three parameters: command, secrets, timeout. Explains secrets parameter purpose and usage, timeout default and behavior. Adds significant value beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs a command on the MCP server's own machine (local), not over SSH, and distinguishes from sibling portal_exec for remote hosts. The verb 'run' and resource 'command on local machine' are specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use (local execution) and when not (use portal_exec for remote hosts). Provides guidelines about credentials, timeout, and no sudo. Advises against pasting secrets into chat. Tells about environment variable requirement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/TMYTiMidlY/portal-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server