Show the server version and the operator's security policy: allowed hosts, whether ad-hoc connections are allowed, which environment variables *_env fields may read, and the local directory that file and script tools are confined to.

Show the automatic local inventory path and whether it already exists.

Create an empty local inventory. A config path is not required to start the server.

Validate the inventory JSON and every stored SSH/WinRM profile.

List saved profiles with secrets redacted; optionally filter by protocol or tag.

Read one saved connection profile with secrets redacted.

Create a saved profile. Prefer password_env and passphrase environment references.

Update a profile by merging changes, or fully replace it with replace=true.

Use remove_fields to delete optional settings. Required fields must remain valid.

Rename a saved profile.

Delete a saved connection profile.

Test a saved or ad-hoc connection by executing a harmless marker command.

For WinRM HTTPS on port 5986, keep ssl=true. If the server uses a self-signed certificate, also set cert_validation=false; ssl=false selects plain HTTP instead of disabling certificate verification.

Execute one command using a short-lived SSH or WinRM connection.

connection may override a profile or fully describe an ad-hoc target, for example: {"protocol":"ssh","host":"server","username":"root","password":"..."}. For self-signed WinRM HTTPS use ssl=true and cert_validation=false. WinRM shell may be powershell or cmd. SSH executes through the remote user's shell.

Run an executable with a safely quoted argument list on a saved or ad-hoc target.

Upload and run an inline or local script. Supports bash/sh, PowerShell, batch, Python, and executables.

Copy a local file or directory to a remote host. Set recursive=true for directories.

Copy a remote file or directory to the MCP server. Set recursive=true for directories.

Open a named persistent SSH shell or WinRM PowerShell runspace.

Sessions remain alive until closed or until the MCP server process exits. SSH shell state such as cwd and exported variables persists. WinRM uses one reusable PSRP runspace.

List active named sessions and their health.

Run a command inside a named persistent session and wait for completion.

Close one named session and its remote shell/runspace.

Close every active session.

Close named sessions which have been idle for at least the requested number of seconds.

Start a long-running command in a named session and return immediately with a job ID.

List asynchronous jobs, optionally restricted to one session.

Get the current state of a long-running job.

Get a job result. Set wait=true to wait, optionally bounded by timeout seconds.

Interrupt and cancel a running job. SSH cancellation closes that named shell session.

List command groups and the persistent local plug-in directory.

Set create_directory=true once to create the folder. Set reload=true after adding or editing a module.

Describe the actions and parameters available in a specialized command group.

Build and run a specialized action, such as user management, services, reboot, or system inventory.

Use either session_name or profile/connection. dry_run returns the generated command without executing it.