create-service
Create a service in the Illumio PCE by defining ports/protocols or Windows processes/services. Supports inbound and outbound qualifiers, including egress process matching for Windows endpoints.
Instructions
Create a service in the PCE. Supply at least one of service_ports, windows_services or windows_egress_services. windows_egress_services matches a process on the consumer side and needs a Windows VEN there. WRITE OPERATION: changes PCE state. In clients that gate tool calls (Claude Desktop, Claude Code), this pauses for the user to approve it -- the call has not failed and must not be retried while waiting.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Name of the service | |
| description | No | Description of the service | |
| service_ports | No | Array of port/protocol definitions | |
| windows_services | No | Inbound Windows process/service qualifiers. Each entry needs at least one of port, process_name, service_name. | |
| windows_egress_services | No | Outbound process qualifiers, matched on the CONSUMER side. Takes process_name/service_name ONLY — the PCE rejects port/proto here, so pair it with service_ports for the port. Requires a Windows VEN on the consumer; non-Windows consumers ignore the process and match on port alone. |