Skip to main content
Glama

host_inspect

Inspect a Linux host and retrieve system, updates, units, network, firewall, Tailscale, Docker, services, tuning, audit findings, and its panel node in one call. Use for auditing or troubleshooting.

Instructions

Everything about one host in one call: system, pending updates, systemd units, listening sockets, firewall, Tailscale, docker, remnanode (compose, certificate, geo files), inventory services, tuning — plus audit findings and the matching panel node.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
hostYeshost name from the inventory (fleet_hosts)
sectionsNosubset of: system, updates, units, network, firewall, tailscale, docker, remnanode, services, tuning (default all)

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full load and 'inspect' plus the itemized contents make the read-only, broad-scan nature clear. However it says nothing about permission requirements, the potentially large response payload, latency of an all-in-one collection, or how the 'sections' filter affects returned data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence with the scope front-loaded ('Everything about one host in one call') and no filler. The long enumeration is justified because it is literally the payload contract, though the dash-appended 'audit findings and matching panel node' items are easy to miss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description sensibly enumerates returned contents, which is the most important information an agent needs for an aggregate read tool. It is close to complete, missing only operational notes such as read-only status, expected response volume, and how omitted sections behave.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented, establishing a baseline of 3. The description does expand a couple of cryptic section names (e.g., remnanode includes compose, certificate, geo files) and notes audit findings and panel node are included even though they are not valid 'sections' values, which is mildly useful but not a substitute for parameter syntax detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States the resource precisely (one host) and enumerates the exact material returned — system, updates, units, sockets, firewall, Tailscale, docker, remnanode, services, tuning — so an agent knows this is a single-host aggregate read. It does not explicitly name the granular siblings (host_ports, host_docker, host_firewall), though 'in one call' implicitly contrasts with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance, no conditions, and no mention of the per-topic alternatives that overlap heavily with this tool. The phrase 'in one call' hints at the trade-off versus host_ports/host_docker/host_firewall, but the agent has to infer it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.