Starts or stops the Lemon iOS VPN. Wait for success or error response.

Opens an HTTP or HTTPS URL inside the Lemon iOS app's embedded WKWebView.

Closes the Lemon iOS embedded WKWebView.

Reloads the current page in the Lemon iOS embedded WKWebView.

Navigates back in the Lemon iOS embedded WKWebView history.

Navigates forward in the Lemon iOS embedded WKWebView history.

Lists locally stored Cron or millisecond-interval JavaScript tasks, including runtime state and next run time.

Fetches one locally stored Cron or interval JavaScript task by id.

Returns the current PacketTunnel scheduled-task runtime state without exposing script source.

Creates a locally stored Cron or millisecond-interval JavaScript task. Use script_type=single with script for one file, or script_type=package with script_package for a validated ESM package. Packages must export onSchedule(input) from their manifest entry. Interval values must be 250..86400000 ms. It is enabled by default unless enabled=false is provided.

Updates a locally stored Cron or millisecond-interval JavaScript task. Use script_type=single with script for one file, or script_type=package with script_package for a validated ESM package. Packages must export onSchedule(input) from their manifest entry.

Enables or disables one scheduled task. Enabling scheduled execution requires the configured schedule entitlement.

Deletes one locally stored scheduled task by id.

Clears all captured HTTP traffics and body binaries from the device.

Safely reads the tail (end) of the Lemon core engine (lemoncore.log) to analyze system or runtime network errors. Suitable for large log files.

Empties the Lemon core engine root logs (lemoncore.log). Useful to clean up logs before starting a fresh capture to isolate issues.

Lists the native DNS custom Host mappings currently applied by Lemon.

Creates a native DNS Host mapping, or updates one when an existing mapping id is provided. Writes are applied immediately and do not require a second confirmation.

Deletes a native DNS custom Host mapping by UUID. The change is applied immediately without a second confirmation.

Find HTTP traffic targeting specific keywords or hosts across recent logs.

Reads one complete captured request/response by transaction_id, trace_id, or the legacy database id returned by search_traffic_previews. Body metadata distinguishes missing, empty, text, and binary-file payloads.

Lists saved HTTP replay items stored in Lemon's local runtime database.

Reads one saved HTTP replay item by UUID, including its request headers and body.

Saves a new HTTP replay item in Lemon's local runtime database. The item can later be executed with execute_replay_item.

Updates a saved HTTP replay item without changing its execution history.

Deletes one saved HTTP replay item by UUID.

Executes one saved HTTP replay item through Lemon's native URLSession/runtime path and returns the response preview. Saved execution status is updated.

Executes a one-shot HTTP replay without saving it. Use this for a captured request after inspecting it with get_captured_request, or for an ad-hoc request.

Deep-dives into a specific HTTP payload by fetching its full request/response bodies.

Executes a raw SQL diagnostic query on the Lemon SQLite database (Read-Only queries advised).

Manually override the target IP address of the iOS Lemon device. Use this if mDNS/Bonjour discovery fails or if the device relies on a different network IP.

Retrieves the current network URL/IP that the MCP is using to communicate with the iOS device.

Fetches a specific non-database file from the iOS device's AppGroup container. ESM rewrite script packages are stored in runtime.sqlite; use get_rewrite_script_package instead of looking for RewriteScripts/*.js files.

Lists ESM rewrite script packages with their ids, active revisions, and enabled state. Use get_rewrite_script_package to read source modules.

Fetches the complete manifest and source modules for an active or historical ESM rewrite script revision.

Lists immutable revisions for a rewrite script package, including content hashes, byte sizes, and the active revision.

Validates an ESM rewrite package with the same iOS-side manifest, module-path, and size rules used before persistence. It does not write anything.

Creates a new ESM rewrite script package or publishes a new immutable revision. Provide manifest/modules for multi-file packages, or content as a one-file shorthand. Set reload=true to request an immediate runtime snapshot reload after persistence.

Makes an existing immutable revision the active revision for a rewrite script package. Historical revisions are retained.

Reports whether rewrite and JavaScript execution are enabled, runtime resource limits, sync state, and script counts.

Reads the independent structured rewrite-debug event projection. Filter by trace, rewrite phase, or severity instead of scanning generic trace events.

Clears structured rewrite-debug events. Provide trace_id to clear only one request; omit it only when intentionally clearing the whole debug projection.

Requests the active rewrite snapshot to reload from runtime.sqlite. This may fail when the VPN runtime is not running; persisted scripts are unaffected.

Delete a rewrite script by its numeric ID.

Fetches all existing rewrite policies and their MatchGroups.

Add or update a rewrite policy with ordered MatchGroups. To update, ensure the rule object has an 'id'.

Delete a rewrite rule by its numeric ID.

Returns the exact JSON schema and accepted enum values for creating or updating Rewrite Rules and Actions.

Lists installed host-side UI Modules, active revisions, and enabled state.

Fetches the complete manifest and ESM sources for an active or historical Module revision.

Lists immutable Module revisions, hashes, and the active revision.

Validates a Module package using the iOS validator without persisting it.

Installs a new Module or publishes a new immutable revision. Optionally reloads the host runtime.

Switches a Module to an immutable historical revision; history is retained.

Enables or disables one installed UI Module.

Deletes an installed UI Module and all of its immutable revisions.

Reports active Module workers, leases, and runtime limits.

Releases one Module worker or all workers so the next activation loads the active revision.

Fetches the active manifest, UI schema, and ESM sources of one installed Module.

Compatibility alias for installing or publishing a Module package.

Compatibility alias for enabling or disabling one UI Module.