vmware-storage
This MCP server provides 16 vSphere storage tools for inspecting and safely managing datastores, iSCSI, vSAN, and Fibre Channel/multipath storage.
Datastores: list datastores, browse files, scan for deployable images (OVA/ISO/OVF/VMDK), list cached images, and see which VMs use datastore space.
iSCSI: check software iSCSI status; enable the adapter; add/remove send targets; rescan HBAs and VMFS volumes. Writes preview blast radius first and require
confirm=true; target removal is destructive and refuses unsafe path loss.vSAN: check overall and per-group health, disk-group layout, capacity/usage, and deduplication/compression status.
Fibre Channel/multipath: list FC/FCoE adapters with WWPN/WWNN details and inspect SCSI device paths, path states, policies, adapters, datastores, and host differences.
Access and safety: check which vSphere account the server uses and its privileges; operations are read-heavy, audited, input-validated, and cannot create, delete, or modify VMs.
Provides tools for managing VMware vSphere storage infrastructure, allowing users to list and browse datastores, manage iSCSI adapters and targets, and monitor vSAN health and capacity across vCenter and ESXi hosts.
VMware Storage
For a read-only check of this skill with your model and agent host, use the shared model-fit self-test in the marketplace root.
Author: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com This is a community-driven project by a VMware engineer, not an official VMware product. For official VMware developer tools see developer.broadcom.com.
VMware vSphere storage management: datastores, iSCSI, vSAN, and read-only Fibre Channel / multipath diagnostics — 16 MCP tools, domain-focused and lightweight.
Split from vmware-aiops for lighter context and local model compatibility.
Upgrading to 2.0
2.0 renames 10 of its MCP tools (all but the four that already started with a verb) so every name starts with a verb (e.g. fc_adapter_list → list_fc_adapters, storage_device_paths → list_storage_device_paths, storage_iscsi_add_target → add_iscsi_target). The full old → new table is in
RELEASE_NOTES.md. Three tools also change a parameter: browse_datastore and scan_datastore_images take
datastore_name (was ds_name, now the same as vmware-aiops' browse_datastore), and list_all_datastores gains an
optional limit (same as vmware-monitor's). Everything else stays: same tools, safety gates and CLI commands (the CLI
still takes the datastore name as before). If an agent prompt, script or ~/.vmware/rules.yaml names a tool, update it — though deny
rules written with the old names keep working with vmware-policy ≥ 1.18 (vmware-audit policy lists any rule the
renames widened), and vmware-pilot ≥ 1.13 translates old names in saved workflows.
If an install older than 2.0 shares that rules.yaml, give it vmware-policy ≥ 1.18.2 too: it matches each rule
against both the old and the new name, so one file serves both.
Related MCP server: vmware-nsx
Companion Skills
Skill | Scope | Tools | Install |
vmware-aiops ⭐ entry point | VM lifecycle, deployment, guest ops, clusters | 49 |
|
Read-only monitoring, alarms, events, VM info | 27 |
| |
Tanzu Namespaces, TKC cluster lifecycle | 20 |
| |
NSX networking: segments, gateways, NAT, IPAM | 33 |
| |
DFW microsegmentation, security groups, Traceflow | 21 |
| |
Aria Ops metrics, alerts, capacity planning | 28 |
|
Quick Install
# Via PyPI
uv tool install vmware-storage
# Or pip
pip install vmware-storageOffline / Air-Gapped Install (from source)
This project uses the modern PEP 517 build system (hatchling), so there is no
setup.py by design — that is expected, not a missing file. If you cloned the
source and hit ERROR: File "setup.py" or "setup.cfg" not found ... editable mode currently requires a setuptools-based build, your pip is older than 21.3 and
cannot do an editable (-e) install with a non-setuptools backend. Editable
mode is a developer convenience, not needed to run the tool — do one of:
# From the source tree — a normal (non-editable) install builds a wheel:
pip install . # NOT pip install -e .
# ...or upgrade pip first, and editable works too:
pip install --upgrade pip && pip install -e .For a truly air-gapped host, build the wheels on a connected machine and copy them over — the target then needs no network:
# On a connected machine, collect this package + its dependencies as wheels:
pip wheel . -w dist # → dist/*.whl (or: uv build, for just this package)
# Copy dist/ to the air-gapped host, then install offline:
pip install --no-index --find-links dist vmware-storageConfiguration
mkdir -p ~/.vmware-storage
cp config.example.yaml ~/.vmware-storage/config.yaml
# Edit with your vCenter/ESXi credentials
echo "VMWARE_MY_VCENTER_PASSWORD=your_password" > ~/.vmware-storage/.env
chmod 600 ~/.vmware-storage/.env
# Verify
vmware-storage doctorMCP Tools (16)
Category | Tools | Type |
Datastore |
| Read |
iSCSI |
| Read/Write |
vSAN |
| Read |
FC / multipath |
| Read |
Access |
| Read |
Auto-Remediation Patterns (PoC)
The patterns/ directory hosts L5 auto-remediation candidate patterns from the Enterprise Harness Engineering framework. The first PoC pattern, patterns/iscsi-target-stale-rescan.yaml, describes an iSCSI HBA rescan as a low-risk, reversible, repeatable operation. The pattern schema is documented here only — runtime enforcement is not yet wired up, so this is a reference design, not production auto-remediation.
Common Workflows
Set Up iSCSI Storage on a Host
Enable iSCSI adapter:
vmware-storage iscsi enable esxi-01Add target:
vmware-storage iscsi add-target esxi-01 10.0.0.100Verify:
vmware-storage iscsi status esxi-01
The add-target command automatically rescans storage. Use --dry-run to preview any write command first.
Find Deployable Images Across Datastores
List all datastores:
vmware-storage datastore listScan for images:
vmware-storage datastore scan-images datastore01Browse with a pattern:
vmware-storage datastore browse datastore01 --pattern "*.iso"
vSAN Health Assessment
Check health:
vmware-storage vsan health Cluster-ProdCheck capacity:
vmware-storage vsan capacity Cluster-ProdIf issues found, investigate with
vmware-monitorfor alarms and events
Check Fibre Channel Paths
Dead or disabled paths behind a datastore:
vmware-storage paths devices --datastore ds-fc-01Hosts that see a shared device through a different number of paths than their peers, or not at all:
vmware-storage paths devices --cluster Cluster-Prod --only-differencesWWPNs for the SAN team:
vmware-storage paths fc-adapters --cluster Cluster-Prod
Hosts that could not be read are listed in hosts_not_read and are never reported as missing a device. Path states are reported as vSphere reports them — standby is not flagged.
CLI
# Datastore
vmware-storage datastore list
vmware-storage datastore browse datastore01
vmware-storage datastore scan-images datastore01
# iSCSI
vmware-storage iscsi status esxi-01
vmware-storage iscsi enable esxi-01
vmware-storage iscsi add-target esxi-01 192.168.1.100
vmware-storage iscsi remove-target esxi-01 192.168.1.100
vmware-storage iscsi rescan esxi-01
# vSAN
vmware-storage vsan health Cluster-Prod
vmware-storage vsan capacity Cluster-Prod
# Fibre Channel / multipath (read-only)
vmware-storage paths fc-adapters --cluster Cluster-Prod
vmware-storage paths devices --datastore ds-fc-01
# Diagnostics
vmware-storage doctorMCP Server
After uv tool install vmware-storage, start the MCP server with one command (v1.5.15+):
# Recommended — single command, no network re-resolve
vmware-storage mcp
# With a custom config path
VMWARE_STORAGE_CONFIG=/path/to/config.yaml vmware-storage mcp
# Or via Docker
docker compose up -dAgent Configuration
Add to your AI agent's MCP config:
{
"mcpServers": {
"vmware-storage": {
"command": "vmware-storage",
"args": ["mcp"],
"env": {
"VMWARE_STORAGE_CONFIG": "~/.vmware-storage/config.yaml"
}
}
}
}# Run without installing (requires PyPI access each launch)
uvx --from vmware-storage vmware-storage mcp
# Legacy entry point (still works, kept for backward compatibility)
vmware-storage-mcpBehind a corporate TLS proxy? uvx may fail with
invalid peer certificate: UnknownIssuer. Use the recommendedvmware-storage mcpform above (no network needed), or setUV_NATIVE_TLS=true.
Why a Separate Skill?
vmware-aiops has 61 MCP tools — too heavy for local LLMs (7B-14B). By splitting storage into its own skill:
16 tools — fits comfortably in small model context windows
Domain-focused — storage admins get only what they need
Least privilege — can run under a vCenter service account with storage read-only permissions
Composable — use alongside vmware-monitor or vmware-aiops as needed
Version Compatibility
Python: 3.10+ (since v1.5.27 — previously 3.11+). Tested on 3.10 / 3.11 / 3.12.
vSphere / VCF | Support | Notes |
VCF 9.1 / vSphere 9.1 | Full | Released 2026-05-12. pyVmomi+vSAN SDK |
VCF 9.0 / vSphere 9.0 | Full | pyVmomi 8.0.3+ with bundled vSAN SDK connects to vSphere 9. |
8.0 | Full | vSAN SDK built into pyVmomi 8.0.3+ |
7.0 | Full | All storage APIs work |
6.7 | Compatible | iSCSI + datastore features work; vSAN limited |
Official Broadcom References
SDKs: https://developer.broadcom.com/sdks — VCF Python SDK, vSAN Management SDK (bundled in pyVmomi)
REST APIs: https://developer.broadcom.com/xapis — vSAN Management API, VCF API
CLI Tools: https://developer.broadcom.com/tools — PowerCLI 9.1, ESXCLI
Safety
Feature | Description |
Read-heavy | 12/16 tools are read-only |
Preview by default (MCP) | The 4 write tools take |
Input validation | IP addresses and ports validated before iSCSI operations |
Audit logging | All operations logged to |
No VM operations | Cannot create, delete, or modify VMs |
Credential safety | Passwords only from environment variables, never config files |
Troubleshooting
Problem | Cause & Fix |
iSCSI enable fails with "already enabled" | Not an error — adapter is already active. Run |
"Datastore not found" when browsing | Datastore names are case-sensitive. Run |
|
|
Rescan doesn't discover new LUNs | Wait 15-30 seconds after adding targets, then rescan again. Verify target IP is reachable from ESXi. |
"Password not found" error | Variable names follow |
| The login works but the account has no vSphere role. Assign one (Read-Only or higher) on the vCenter root folder (Administration > Access Control > Global Permissions). Mid-run, the same fault can be an expired session: run the command again. |
Connection timeout to vCenter | Use |
"Datastore browse did not finish within Ns" | The datastore is very large or busy. Narrow the search with a sub-path and a specific pattern (e.g. |
Remote access (HTTPS) and limiting tools
By default vmware-storage mcp speaks stdio to one local client and offers every tool. Two options change that
(vmware-policy ≥ 1.21.0).
Serve over HTTPS so clients on other machines can connect. Every caller needs a bearer token:
vmware-audit token create alice # prints the token once; give it to alice
vmware-audit token list # names only
vmware-audit token revoke alice # refused from its next request, no restart
vmware-storage mcp --transport https --host 0.0.0.0 --port 8443 \
--cert /etc/vmware-mcp/server.pem --key /etc/vmware-mcp/server-key.pem \
--public-name mcp.example.comConnect a client (Claude Code shown; any MCP client that supports streamable HTTP and custom headers works):
claude mcp add --transport http vmware-storage https://mcp.example.com:8443/mcp \
--header "Authorization: Bearer $VMWARE_MCP_TOKEN"{
"mcpServers": {
"vmware-storage": {
"type": "http",
"url": "https://mcp.example.com:8443/mcp",
"headers": { "Authorization": "Bearer ${VMWARE_MCP_TOKEN}" }
}
}
}The server will not start without a token, refuses Host/Origin values outside
--public-name, and checks before it binds that unauthenticated requests get 401. Use a certificate your clients trust for those names.Behind a TLS-terminating reverse proxy on the same machine use
--transport http --host 127.0.0.1 --public-name mcp.example.comand pass theAuthorizationheader through.Behind a load balancer or gateway on another machine, keep
--transport https(a self-signed certificate is fine), list in--public-namethe host name the balancer sends asHost, and have it forwardAuthorization. Its health probe can useGET /healthz, which needs no token and returns only{"status": "ok"}(vmware-policy ≥ 1.23.0).Send
traceparentorX-Request-IDwith each request to have it stored on the audit row;vmware-audit log --correlation-id IDthen finds the calls behind one platform request.The audit log records each caller as
token:<name>. Calls run side by side, also on the same target: the server keeps up toVMWARE_MCP_POOL_SIZE(default 2) sessions per target, each one a login on that target, and a call waits at most 300 s for a free session (vmware-policy ≥ 1.22.0).Everyone who can reach the endpoint acts with this server's account. Tokens identify callers; they grant nothing on the platform. Run one endpoint per privilege level.
vmware-storage access-infoshows which account that is and what it may do.Several people or roles on one endpoint: run
vmware-audit roles enableonce, then give each token a role (vmware-audit token create NAME --role reader, or a role inroles.yamlnaming tools and targets; vmware-policy ≥ 1.24.0). A role limits what the token may call on this endpoint; it cannot grant more than the account has. See vmware-policy's README, "Roles for network callers".
Offer only read tools, plus the writes you choose:
vmware-storage mcp --expose read --allow-write enable_iscsi
# or: VMWARE_STORAGE_MCP_EXPOSE=read VMWARE_STORAGE_MCP_ALLOW_WRITE=enable_iscsi vmware-storage mcpTools not offered do not appear in the client's tool list. A bad value or an unknown write tool stops the server (exit 2). This limits what clients are offered; it is not authorization, so the account itself should be least-privilege.
Details: skills/vmware-storage/references/setup-guide.md ("Serving MCP over HTTPS", "Limiting which tools are offered").
License
Available Tools
16 toolsadd_iscsi_targetA
[WRITE] Add an iSCSI send (dynamic discovery) target to an ESXi host's software iSCSI adapter, then automatically rescan all HBAs and VMFS volumes to discover new LUNs.
Without confirm=True this only previews: it returns blast_radius (the adapter, the send targets configured now, and the adapters the rescan touches) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Refused when software iSCSI is not enabled (run enable_iscsi first) or the host's storage view cannot be read. A duplicate address:port returns action "noop". No separate rescan_storage call is needed afterwards. Returns a dict.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | iSCSI TCP port, 1-65535 (default 3260). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| address | Yes | iSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error). | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses the two-phase preview/apply behavior, the contents of blast_radius, the refusal conditions, duplicate handling, and the automatic HBA/VMFS rescan. It makes the tool's side effects and safety workflow clear even without relying solely on the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the write operation and its main side effect, then proceeds to preview/confirm guidance and failure cases. Despite its length, every sentence carries relevant operational information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
It covers the critical context for a complex write tool: prerequisites, preview behavior, confirmation caution, automatic rescan, duplicate noop, and refusal conditions. It is slightly incomplete on the full shape of the returned dict, but the preview return contents are described.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all five parameters are already documented. The description adds operational meaning for confirm and address:port duplicate handling, though it does not add much beyond the schema for host_name, target, or port.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: add an iSCSI send/dynamic discovery target to an ESXi host's software iSCSI adapter. It also names the automatic rescan side effect, so an agent can distinguish this from sibling tools like rescan_storage or enable_iscsi.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit usage conditions: call enable_iscsi first if software iSCSI is disabled, use confirm=True only after showing the preview, and do not make a separate rescan_storage call afterward. It also states that duplicate address:port calls return noop, which clarifies an important edge case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
browse_datastoreARead-onlyIdempotent
[READ] Search a datastore folder and all its subfolders for files.
Use this for arbitrary files or a glob; prefer scan_datastore_images for deployable images. datastore_name comes from list_all_datastores.
Returns the list envelope: 'items' holds one row per file, and 'returned'/'total'/'truncated' state whether the listing is complete. All matches are returned, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Datastore-relative folder to start from (empty for root); a leading '/' or '..' is refused. The search is recursive, so the root returns matches from every folder; each row's ds_path is "[ds] dir/file". | |
| target | No | Optional vCenter/ESXi target name from config. | |
| pattern | No | Glob pattern to filter files (e.g. "*.ova", "*.iso"). | * |
| datastore_name | Yes | Datastore name. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld), so the bar is lower. The description still adds real behavioral context beyond them: the search is recursive by default, the response is a list envelope with items/returned/total/truncated, and truncation never occurs because all matches are returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the '[READ]' marker and the core action, then the routing guidance, then the setup hint, then the return contract. Four short sentences, no filler, nothing repeated from the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the burden of explaining return values — and it does, describing the list envelope fields and the truncation invariant. With 4 params at full schema coverage and declared annotations, nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the path/pattern/target semantics are already documented in the schema and the baseline is 3. The description adds provenance meaning beyond the schema by stating datastore_name comes from list_all_datastores, and reinforces the recursive-glob behavior that ties pattern usage together.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource+scope: '[READ] Search a datastore folder and all its subfolders for files.' It explicitly distinguishes itself from the sibling scan_datastore_images by naming it, so an agent can route without opening a second schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states when to use this tool ('arbitrary files or a glob') and names the preferred alternative for the other case ('prefer scan_datastore_images for deployable images'). It also tells the agent where the required datastore_name value comes from (list_all_datastores), closing the setup loop.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
enable_iscsiA
[WRITE] Enable the software iSCSI adapter (vmhba) on an ESXi host.
Required prerequisite before add_iscsi_target. Without confirm=True this only previews: it returns blast_radius (the host, its current adapters, whether the software adapter already exists) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Already enabled returns action "noop" with the HBA device and IQN. Non-disruptive (no reboot, no impact on existing datastores). Refused when the host's storage view cannot be read. Returns a dict; check state first with get_iscsi_status.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| host_name | Yes | ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare write and non-destructive traits, but the description adds substantial operational detail: preview-only default, blast_radius return, noop when already enabled, non-disruptive behavior, and refusal when the storage view is unreadable. None of this is present in structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core action and prerequisite, and every sentence carries useful safety or behavioral information. It repeats the confirm preview guidance slightly, preventing a full 5, but contains no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description explains the return shape (blast_radius, noop, dict) and tells the agent to check state first via get_iscsi_status. It covers the prerequisite, safety gate, and operational caveats needed to call the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With schema description coverage at 100%, the schema already documents host_name, target, and confirm. The description reinforces confirm's preview semantics but does not add much parameter-specific syntax or edge cases beyond what the schema provides, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Enable the software iSCSI adapter (vmhba) on an ESXi host.' It distinguishes the tool from siblings by naming add_iscsi_target as the dependent operation and get_iscsi_status as the pre-check.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use this tool (required before add_iscsi_target, after checking get_iscsi_status) and gives a strong when-not rule: do not set confirm=True on your own before showing the preview. The workflow routing is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_access_infoARead-onlyIdempotent
[READ] Which account this server uses, and whether it holds each tool's vSphere privileges.
Use this when a tool fails with NoPermission, or before a write, to check what the configured account may do. Asks vCenter/ESXi about the current session (needs only System.View, so any account can ask about itself). Returns target, account, the privilege states, and for one tool its requires/verdict/meaning; without tool, every tool grouped by verdict. Gotchas: privileges are checked on the root folder only. A verdict of not_granted_at_root is NOT "no access" — the privilege may be granted on a specific cluster, host or datastore, where the tool then works. undetermined means vCenter did not answer; never read it as granted.
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | One tool name on this server, e.g. "add_iscsi_target". Omit to summarize every tool. | |
| target | No | Optional vCenter/ESXi target name from config. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), and the description adds substantial context beyond them: the required privilege, what is returned (target, account, privilege states per tool or grouped by verdict), and three concrete gotchas about root-folder checking, not_granted_at_root, and undetermined.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the purpose, then usage, then return shape, then a labeled 'Gotchas' block. Despite its length, every sentence carries distinct information an agent needs (privilege requirement, verdict semantics, undetermined handling) with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the return-value burden and does so thoroughly, describing both output modes and the meaning of each verdict. An agent has everything needed to call it and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaning the schema does not: passing tool yields that tool's requires/verdict/meaning, while omitting it returns every tool grouped by verdict. This clarifies the behavioral difference between the two modes rather than just restating parameter names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening line states a specific verb and resource: it reports which account the server uses and whether that account holds each tool's vSphere privileges. This is clearly distinct from every sibling (storage/datastore tools), so an agent can route to it without ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit triggering conditions: 'when a tool fails with NoPermission, or before a write.' It even notes the low privilege requirement (System.View), removing any doubt about whether it is safe or possible to call in a failing state.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_datastore_vm_usageARead-onlyIdempotent
[READ] Which VMs take the space on one datastore, largest first.
Use this for "is this datastore filling up, and who is using it?". datastore_name comes from list_all_datastores. Reads vCenter's own per-VM accounting (storage.perDatastoreUsage), so it is space on disk, not the provisioned VMDK sizes browse_datastore shows.
Returns {datastore: {name, type, total_gb, used_gb, free_gb, usage_pct}, items, returned, total, truncated, attributed_gb, unattributed_gb, unmeasured_vms, note}. Each item: name, vm_id, template, committed_gb (on disk), uncommitted_gb (thin headroom it may still grow into), unshared_gb, measured_at. unattributed_gb is used space no VM accounts for: unregistered VMs, orphaned disks, ISOs; find those files with browse_datastore. unmeasured_vms list the datastore but have no usage row, so their space is unknown, not zero.
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No | How many VMs to return, largest committed first (default 10). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| datastore_name | Yes | Datastore name exactly as shown in vCenter. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, but the description adds substantial behavioral context: it reads vCenter's storage.perDatastoreUsage, reports on-disk space rather than provisioned size, and explains unattributed_gb and unmeasured_vms. This is exactly the kind of semantic detail an agent needs to interpret results correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core question and then structured into usage, data-source distinction, return shape, and caveats. Despite its length, every section adds operational value for a tool with a rich return payload and no output schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, but the description fully documents the return object, item fields, truncation behavior, and the meaning of unattributed_gb and unmeasured_vms. Combined with annotations covering safety, an agent has everything needed to call and interpret this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents all three parameters. The description adds useful provenance for datastore_name by pointing to list_all_datastores, and its 'largest first' wording reinforces top_n behavior, though it does not add much beyond the schema for target or top_n.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific query: which VMs consume space on one datastore, ordered largest first. It explicitly distinguishes this from browse_datastore by noting that it reads vCenter per-VM accounting rather than provisioned VMDK sizes, so an agent can select it confidently.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear use case ('is this datastore filling up, and who is using it?') and names the alternative browse_datastore for provisioned VMDK sizes. It also tells the agent where datastore_name comes from (list_all_datastores), removing ambiguity about the required parameter.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_iscsi_statusARead-onlyIdempotent
[READ] Get the software iSCSI adapter state and configured send targets for an ESXi host.
Returns {host, enabled, hba_device, iqn, send_targets: [{address, port}]}; when the adapter is disabled, enabled=false with null device/IQN and an empty target list. Use this before enable_iscsi / add_iscsi_target / remove_iscsi_target to check prerequisites, and afterwards to verify the change took effect.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| host_name | Yes | ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), but the description adds meaningful behavior beyond them: the exact return shape and the disabled-adapter edge case (enabled=false with null device/IQN and empty target list). This is real disclosure the annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the action, then the return contract, then the routing guidance. No filler; every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by specifying the return structure and the disabled-state behavior, and it points to the sibling tools for the follow-up actions. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters (target, host_name) are already documented, including the pointer to list_esxi_hosts for valid names. The description adds no parameter-level detail, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: 'Get the software iSCSI adapter state and configured send targets for an ESXi host.' It clearly distinguishes itself from adjacent siblings such as list_fc_adapters (different adapter type) and the mutating enable_iscsi/add_iscsi_target tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: before enable_iscsi / add_iscsi_target / remove_iscsi_target to check prerequisites, and afterwards to verify the change. Names the specific alternatives and the conditions that select them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vsan_capacityARead-onlyIdempotent
[READ] Get space usage of a cluster's vSAN datastore for capacity planning.
Returns {cluster_name, vsan_enabled, datastore_name, accessible, total_gb, used_gb, free_gb, usage_pct}. When the vSAN datastore is inaccessible (accessible=false) the four figures are null with a message, not 0 — vCenter answers 0 for a datastore it cannot reach, and 0 GB used reads as a healthy empty datastore. accessible=null means the summary did not say. If vSAN is not enabled on the cluster, returns vsan_enabled=false with an explanatory message rather than an error; errors only if the cluster name is not found. Use get_vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage. No side effects.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter. Errors if the cluster is not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, idempotent, non-destructive), and the description adds substantial beyond-annotation behavior: null vs 0 for inaccessible datastores with the explicit rationale that vCenter returns 0 and '0 GB used reads as a healthy empty datastore', accessible=null meaning the summary was silent, and vsan_enabled=false rather than an error. This is exactly the kind of guidance an agent cannot infer from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the read tag and purpose, then the return shape, then the non-obvious failure semantics, then sibling routing. Every sentence carries information; the only near-redundancy is the trailing 'No side effects.'
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description carries the return contract itself by enumerating the fields and the three accessible states. Combined with the stated error condition and sibling alternatives, nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and both parameters are documented in the schema, including the 'errors if the cluster is not found' note that the description repeats. The description adds no new parameter-level syntax or format detail, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get space usage of a cluster's vSAN datastore for capacity planning') with the exact scope named. It clearly separates itself from get_vsan_health and list_all_datastores by naming both and their domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit routing: 'Use get_vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage.' It also states the one error condition (cluster name not found), so an agent knows the boundary of valid use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vsan_efficiencyARead-onlyIdempotent
[READ] Get vSAN data-efficiency (deduplication + compression) status for a cluster.
Returns {cluster_name, vsan_enabled, dedup_enabled, compression_enabled}. Reads it via the vSAN Management SDK (VsanVcClusterConfigSystem), not base pyVmomi. When vSAN reports no data-efficiency config (space efficiency off, or an OSA cluster without it), dedup_enabled/compression_enabled come back null with a message rather than a fabricated false. Errors only if the cluster name is not found. Use get_vsan_capacity for space usage and get_vsan_health for disk-group layout. No side effects.
Note: vSAN Global Deduplication and vSAN-to-vSAN replication are NOT exposed here — neither has a verified SDK object (global dedup has no distinct field; v2v replication lives in the separate vSAN Data Protection plane). Use the vCenter/vSAN UI for those.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, but the description goes well beyond: it discloses the SDK path used, the null-with-message semantics when space efficiency is off (avoiding a fabricated false), the exact error trigger, and the two capabilities deliberately NOT exposed. This is precisely the behavioral context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the READ marker, purpose, and return shape, then constraints and limits in a trailing note. Dense and well-organized, though the final note is slightly long for two capabilities that are simply unavailable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description supplies the return fields, the null-vs-false edge case, the error condition, the SDK provenance, and cross-references to related tools. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already documents both target and cluster_name (including the case-sensitivity and error-on-not-found note). The description adds little parameter-specific meaning beyond restating the error condition, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get vSAN data-efficiency (deduplication + compression) status for a cluster') and immediately distinguishes itself from siblings get_vsan_capacity and get_vsan_health. An agent can tell exactly what this returns without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes the agent: use get_vsan_capacity for space usage and get_vsan_health for disk-group layout, and use the vCenter/vSAN UI for Global Dedup and v2v replication. It also states the sole error condition (cluster name not found), so when-to-use and when-not-to-use are both covered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vsan_healthARead-onlyIdempotent
[READ] Get vSAN overall health, per-check-group health, and per-host disk-group layout for a cluster.
Returns {cluster_name, vsan_enabled, overall_health, overall_health_description, health_queried, health_not_queried_reason, health_checked_at, test_groups: [{group_id, group_name, group_health}], host_count, hosts_read, hosts_not_read: [{host, reason}], disk_groups_complete, disk_groups: [{host, cache_disk, cache_size_gb, capacity_disks}]}. overall_health is what vSAN reports — green / yellow / red, and sometimes "unknown", which is vSAN's own answer. When the health service could not be asked at all, overall_health is null and health_queried is false with the reason: a null is "not measured", never a measurement. health_checked_at is the age of vCenter's cached summary (the same one Skyline Health shows); this tool reads the cache rather than triggering a full health run. Check disk_groups_complete before treating disk_groups as the cluster's inventory: vCenter cannot read a disconnected or notResponding host, and an empty disk_groups on such a cluster does NOT mean it has none — the unread hosts are named in hosts_not_read and in the message. If vSAN is not enabled, returns vsan_enabled=false with a message rather than an error. Use get_vsan_capacity for space usage instead. No side effects.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter. Errors if the cluster is not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), yet the description adds substantial context: it reads the cache rather than running a full health check, explains that a null overall_health means 'not measured' and never a measurement, warns that disk_groups is incomplete when hosts are unread, and notes vSAN-disabled returns a message rather than an error.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads purpose, then the return shape, then the important caveats (null semantics, disk_groups_complete, vsan-disabled path). It is dense and each sentence earns its place, though the return-shape enumeration is lengthy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description fully carries the burden: it enumerates the return shape and explains the semantics of the ambiguous fields (overall_health nulls, health_checked_at, disk_groups_complete). Nothing an agent needs to interpret the result is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (both target and cluster_name are documented, including the 'errors if not found' behavior), so the schema carries the parameter burden. The description adds no parameter-specific detail beyond what the schema states, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Get) plus resource (vSAN health) and scope: overall health, per-check-group health, and per-host disk-group layout for a cluster. It explicitly distinguishes itself from the sibling get_vsan_capacity, so an agent can route between them without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names an alternative explicitly ('Use get_vsan_capacity for space usage instead') and clarifies that it reads vCenter's cached summary rather than triggering a full health run, which tells the agent when this is the cheap option. It lacks broader when-not guidance, but the routing context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_all_datastoresARead-onlyIdempotent
[READ] List all datastores with capacity, usage percentage, and accessibility.
Use this first for the datastore_name that browse_datastore and scan_datastore_images require.
Returns the list envelope: 'items' holds one row per datastore, and 'returned'/'total'/'truncated' state whether the listing is complete. Every datastore is enumerated before limit is applied, so total is the real count and truncated is true only when limit cut rows off.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max datastores to return (None = all). | |
| target | No | Optional vCenter/ESXi target name from config. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the safety profile is covered. The description adds genuinely non-obvious behavior: enumeration happens before limit is applied, so 'total' is the real count and 'truncated' is only true when limit cut rows off. That pagination semantics is real value beyond the annotations, though it stops short of explaining default limit or the accessibility field's meaning.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the [READ] marker and the core action, then the workflow routing, then return-shape semantics. Three tight sentences with no filler; every clause carries information the agent uses.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, and the description compensates by documenting the list envelope (items, returned, total, truncated). Combined with the routing guidance and the 100%-covered input schema, an agent has everything needed to call this correctly and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (both params documented), so the baseline would be 3, but the description goes further by explaining the interaction between 'limit' and the returned total/truncated values. It clarifies that total reflects the full enumeration rather than the truncated list, which meaningfully disambiguates the limit parameter. It adds nothing about 'target', hence not a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (List) and resource (datastores), and names the exact fields returned (capacity, usage percentage, accessibility). It also distinguishes itself from siblings by naming browse_datastore and scan_datastore_images as downstream consumers, so an agent can place it in the workflow without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this first for the datastore_name that browse_datastore and scan_datastore_images require', which names both the alternative tools and the condition that selects this one. The sequencing guidance (call this before the others) is exactly the when-to-use signal an agent needs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_cached_imagesARead-onlyIdempotent
[READ] List deployable images (OVA/OVF/ISO/VMDK) from the local cache registry — instant, no vCenter connection or datastore I/O.
Reads ~/.vmware-storage/image_registry.json, which scan_datastore_images fills; results may be stale, and are empty until a scan has run. For a live listing use scan_datastore_images instead. Returns the list envelope: 'items' holds {target, datastore, name, ds_path, size_mb, type, modified} and is empty if nothing matches, while 'returned'/'total'/'truncated' state whether the listing is complete. The whole registry is filtered in memory, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Only rows scanned from this vCenter/ESXi target (a name from config, as scan_datastore_images takes; an unknown name is refused with the configured ones). Rows cached before rows recorded their target appear only when this is omitted. Omit for every target. | |
| datastore | No | Filter by exact datastore name. Omit for all datastores. | |
| image_type | No | Filter by file extension without the dot, e.g. "ova", "iso", "ovf", "vmdk" (case-insensitive). Omit for all types. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive), so the bar is lower. The description nonetheless adds real behavior: it reads ~/.vmware-storage/image_registry.json, may be stale, is empty until a scan runs, and is filtered entirely in memory so 'truncated' is always false. This is substantially more than the annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded '[READ]' tag and one-line purpose, followed by the data-source caveat and the return-envelope semantics. Every sentence carries distinct information; nothing is redundant with the name or schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, but the description supplies the return contract (items holding {target, datastore, name, ds_path, size_mb, type, modified}, plus returned/total/truncated). Combined with full param coverage and annotations, an agent has everything needed to call and interpret it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents target/datastore/image_type in depth. The description adds only an indirect note that the whole registry is filtered in memory, which does not add per-parameter meaning beyond the schema. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (List) plus resource (deployable images OVA/OVF/ISO/VMDK) and scope (from the local cache registry). It explicitly distinguishes itself from the sibling scan_datastore_images, so an agent can route correctly without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names the alternative (scan_datastore_images) and the condition that selects it ('For a live listing use scan_datastore_images instead'). It also states the cache is populated by a prior scan and may be stale/empty until one has run, giving clear when-and-when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_fc_adaptersARead-onlyIdempotent
[READ] List Fibre Channel HBAs (FC and FCoE) per ESXi host: vmhba, model, driver, status, port type, WWPN/WWNN and reported link speed.
Use this for "which FC adapters does each host have" or to find a host's WWPNs; use list_storage_device_paths for devices and paths behind them. Scope with cluster OR host; with neither, every host on the target is read (only the adapter list is fetched, so this stays cheap).
Returns the list envelope ('items', 'returned', 'total', 'truncated', 'next_offset') plus hosts_without_fc (read, no FC HBA) and hosts_not_read [{host, reason}]. A host in hosts_not_read was NOT read — never report it as having no FC adapters. speed_reported is the raw vSphere value: the API documents bits per second, but hosts commonly report Gbit/s, so it is not converted. Reads host config only; no rescans.
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | ESXi host name exactly as in vCenter inventory (FQDN or IP). | |
| limit | No | Rows per page, 1-200 (default 50). | |
| offset | No | Rows to skip; pass the previous page's next_offset. | |
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster | No | Cluster name exactly as in vCenter. Omit to use host or the whole target. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, yet the description adds substantial context beyond them: the hosts_not_read contract ('never report it as having no FC adapters'), the speed_reported caveat that vSphere reports Gbit/s despite documented bits-per-second, and that it reads host config only with no rescans. These are exactly the behavioral traps an agent needs to avoid misreporting.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose and usage in the first two sentences, then the return-shape and caveat details. Dense and mostly waste-free, though the block is long enough that the hosts_not_read and speed_reported caveats could be tightened slightly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description carries the return burden and does so: it documents the list envelope (items, returned, total, truncated, next_offset) plus the two non-obvious extra fields (hosts_without_fc, hosts_not_read with reason). Nothing an agent needs to call and interpret this tool correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the documented parameters already stand on their own (limit, offset, next_offset paging, exact-match naming). The description still adds value by clarifying the precedence between cluster, host, and target ('with neither, every host on the target is read') and by noting the operation stays cheap at that scope.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource ('List Fibre Channel HBAs (FC and FCoE) per ESXi host') and enumerates the returned fields (vmhba, model, driver, status, port type, WWPN/WWNN, link speed). It explicitly distinguishes itself from the sibling list_storage_device_paths, so an agent can route correctly without reading either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives concrete use cases in the user's own words ('which FC adapters does each host have', 'to find a host's WWPNs') and names the alternative (list_storage_device_paths) with the condition that selects it (devices and paths behind the adapters). Scope semantics (cluster OR host; neither = all hosts on target) are also spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_storage_device_pathsARead-onlyIdempotent
[READ] SCSI multipath state per device (NAA) across the hosts of one scope: which hosts see it, path counts and states, working paths, adapters, target WWPN, PSP/SATP policy, and the VMFS datastores on it.
Use for: "does datastore X have dead or disabled paths on any host" (datastore=X), "which hosts see naa.… and through which adapters" (cluster + device), "do hosts see different numbers of paths" (cluster + only_differences=true), "which devices and datastores depend on vmhba2" (host + adapter). Exactly one of cluster, host or datastore is required — this tool will not read every host at once.
Per device: shared (reached over FC/iSCSI or seen by 2+ hosts), seen_by, not_seen_on (hosts that WERE read and do not see a shared device; a disk inside one host is never listed), path_count_differs, states_needing_attention (dead/disabled only) and per-host {paths_total, by_state, working_paths, policy, satp, adapters}; with adapter set, also paths_via_adapter and only_paths_via_adapter (matched by vmhba name, which can be a different card on each host of a cluster). Per-path detail is included when device or datastore is given. Devices needing attention sort first; 'summary' counts the whole result, not just this page.
Gotchas: hosts in hosts_not_read were NOT read (refused, not connected — vCenter's copy of a lost host's config may be stale — or missing from the reply) and are never in not_seen_on — when complete is false, say which hosts are unknown instead of concluding a device is missing. States are as vSphere reports them: 'standby' can be normal (active/passive arrays), and a path count does not prove independent fabrics. NFS/vSAN/vVol datastores have no SCSI paths (scope_note says so). NVMe-oF namespaces may not appear. No rescans.
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | ESXi host name exactly as in vCenter inventory. | |
| limit | No | Devices per page, 1-200 (default 50). | |
| device | No | Canonical name (e.g. naa.60060e80...) or display name; case-insensitive. | |
| offset | No | Devices to skip; pass the previous page's next_offset. | |
| target | No | Optional vCenter/ESXi target name from config. | |
| adapter | No | vmhba name (e.g. vmhba2) to keep devices with a path through it. | |
| cluster | No | Cluster name exactly as in vCenter. | |
| datastore | No | Datastore name; scopes to the hosts that mount it and its VMFS extents. | |
| only_differences | No | Keep only devices whose visibility or path count differs across the hosts that were read. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), yet the description adds substantial behavior: hosts_not_read semantics ('refused, not connected... vCenter's copy may be stale'), how to interpret 'complete: false', that 'standby' can be normal on active/passive arrays, that a path count does not prove independent fabrics, and 'No rescans.' This is exactly the value-add the description should provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Content is organized under clear signposts ('Use for:', 'Per device:', 'Gotchas:') and front-loads purpose before detail. It is dense, and the long per-device field enumeration is heavier than strictly necessary, but for a 9-parameter tool most sentences carry real information rather than padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description accepts the full burden of describing returns — it lists per-device fields, per-path detail conditions, and the 'summary counts the whole result, not just this page' pagination note — plus caveats about NFS/vSAN/vVol and NVMe-oF. Nothing an agent needs to invoke or interpret the result correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema: it enforces the 'exactly one of cluster/host/datastore' mutual-exclusion rule, clarifies that adapter matches by vmhba name which 'can be a different card on each host', and explains only_differences scoping. These semantics are not present in the schema fields.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence gives a specific verb ([READ]), resource (SCSI multipath state per device/NAA), and scope (across hosts of one scope), then enumerates what it reports (path counts/states, adapters, target WWPN, PSP/SATP, VMFS datastores). This lets an agent distinguish it from siblings like list_fc_adapters or list_all_datastores without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Four concrete 'Use for:' scenarios map directly to parameter combinations (datastore=X; cluster+device; cluster+only_differences=true; host+adapter). The constraint 'Exactly one of cluster, host or datastore is required — this tool will not read every host at once' is an explicit when-not rule, leaving nothing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
remove_iscsi_targetADestructive
[WRITE] Remove an iSCSI send target from an ESXi host's software iSCSI adapter, then rescan all HBAs and VMFS volumes.
Destructive: LUNs served only through this target become inaccessible after the rescan. Without confirm=True this only previews: it returns blast_radius (the static targets it discovered, the paths that go with them, the devices and VMFS datastores that lose all or some paths) and changes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user asked earlier — they have not seen what it cuts off yet. Refused when a datastore would lose every path (unmount it first), when the address:port is not configured or software iSCSI is disabled, and when any path or static target cannot be attributed. Reversible only by re-adding via add_iscsi_target. Returns a dict.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | Configured iSCSI TCP port, 1-65535 (default 3260). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| address | Yes | Configured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructive/openWorld/non-idempotent, but the description adds substantial context: what becomes inaccessible after the rescan, the exact refusal conditions (all-paths-loss datastore, unconfigured address, disabled iSCSI, unattributable paths), reversibility limits, and return type.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the action, then the destructive warning and confirm protocol. Dense but nearly every sentence carries decision-relevant information; minor verbosity in the blast_radius enumeration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, yet the description fills that gap by describing the returned dict's blast_radius contents (targets, paths, devices, datastores losing paths). Complete for an agent to call and interpret this destructive tool safely.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all five parameters are already documented in the schema. The description reinforces the confirm semantics but adds no new per-parameter meaning beyond what the schema provides; baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Remove) and resource (iSCSI send target from an ESXi software iSCSI adapter) and includes the immediate side effect (rescan HBAs/VMFS). This clearly separates it from add_iscsi_target and rescan_storage among the siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly describes the preview-then-confirm workflow, warns against setting confirm=True on the user's prior request, and tells the agent to surface blast_radius for an explicit decision. It also names the alternative recovery path (re-add via add_iscsi_target).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
rescan_storageA
[WRITE] Rescan all HBAs and VMFS volumes on an ESXi host to discover newly presented LUNs and datastores.
Use this when a storage array presents new LUNs, or after out-of-band SAN changes. Not needed after add_iscsi_target / remove_iscsi_target — those rescan automatically. Without confirm=True this only previews: it returns blast_radius (the host, every adapter the rescan touches, the mounted VMFS volumes) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Deletes nothing, but it is I/O-visible on the host and may take a minute or two with many paths. Refused when the host's storage view cannot be read. Returns a dict.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations, it discloses the two-step preview/apply behavior, the exact blast-radius contents, the I/O visibility and possible duration, the fact that nothing is deleted, and the refusal condition. The guardrail against setting confirm=True without showing the preview is especially valuable for a write operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with a [WRITE] tag and the core action, then proceeds through usage, preview behavior, safety warnings, and failure conditions. Despite its length, every section earns its place for a risky storage operation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description explains the preview return as a blast_radius containing host, adapters, and mounted VMFS volumes, but the confirmed/apply return is only summarized as a dict. The optional target parameter is also left to the schema, but overall the definition is complete enough to call correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so host_name and confirm are already documented. The description adds useful meaning around confirm by explaining the preview return contents and the interaction policy of showing the blast radius to the user before applying, though it does not discuss the optional target parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: rescan HBAs and VMFS volumes on an ESXi host to discover new LUNs and datastores. It also distinguishes itself from sibling operations by noting that add_iscsi_target/remove_iscsi_target rescan automatically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use guidance: after a storage array presents new LUNs or after out-of-band SAN changes. It also states when the tool is not needed and explains the confirm-preview workflow that must be shown to the user before applying.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scan_datastore_imagesARead-onlyIdempotent
[READ] Scan a datastore for deployable images (OVA, ISO, OVF, VMDK).
Use this for a live scan of one datastore; prefer list_cached_images for a cached answer. datastore_name comes from list_all_datastores.
Returns the list envelope: 'items' holds one row per image, and 'returned'/'total'/'truncated' state whether the listing is complete. All patterns are browsed, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Datastore-relative subdirectory (empty for root); a leading '/' or '..' is refused. The images found replace this datastore's cached entries under that folder, for list_cached_images. | |
| target | No | Optional vCenter/ESXi target name from config. | |
| datastore_name | Yes | Datastore name. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive, but the description adds live-vs-cached semantics and describes the return envelope ('items', 'returned'/'total'/'truncated') that no output schema provides. It also discloses that 'all patterns are browsed, so truncated is always false', a behavioral guarantee not derivable from annotations. It does not mention that the scan repopulates cached entries (that detail lives only in the schema).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short blocks: purpose, routing guidance, return contract. Front-loaded with the verb and resource, no filler, and every sentence carries information an agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description fills the gap by explaining the list envelope and truncation semantics, and it covers the live-vs-cached decision plus parameter provenance. For a 3-parameter read tool this is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3; the description nudges above it by explaining that datastore_name is sourced from list_all_datastores, tying the parameter to a concrete workflow step. It does not elaborate on 'path' or 'target', which the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (scan) and resource (datastore images) and enumerates the artifact types it finds (OVA, ISO, OVF, VMDK). The '[READ]' prefix plus the explicit contrast with list_cached_images makes it immediately distinguishable from its closest sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly scopes usage: 'live scan of one datastore; prefer list_cached_images for a cached answer' names the alternative and the condition that selects it. It also tells the agent where the required datastore_name value comes from (list_all_datastores).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v2.5.0- Changed
add_iscsi_target1 field changed- removed
Input schema / properties / dry_runRemoved value: -{ - "anyOf": [ - { - "type": "boolean" - }, - { - "type": "null" - } - ], - "default": null, - "description": "Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.", - "title": "Dry Run" -}
- Changed
enable_iscsi1 field changed- removed
Input schema / properties / dry_runRemoved value: -{ - "anyOf": [ - { - "type": "boolean" - }, - { - "type": "null" - } - ], - "default": null, - "description": "Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.", - "title": "Dry Run" -}
- Added
get_datastore_vm_usage - Changed
remove_iscsi_target1 field changed- removed
Input schema / properties / dry_runRemoved value: -{ - "anyOf": [ - { - "type": "boolean" - }, - { - "type": "null" - } - ], - "default": null, - "description": "Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.", - "title": "Dry Run" -}
- Changed
rescan_storage1 field changed- removed
Input schema / properties / dry_runRemoved value: -{ - "anyOf": [ - { - "type": "boolean" - }, - { - "type": "null" - } - ], - "default": null, - "description": "Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.", - "title": "Dry Run" -}
3 tool updates
v2.4.2- Changed
browse_datastore1 field changed- changed
Input schema / properties / path / descriptionPrevious value: -"Subdirectory path (empty for root)."New value: +"Datastore-relative folder to start from (empty for root); a leading '/' or '..' is refused. The search is recursive, so the root returns matches from every folder; each row's ds_path is \"[ds] dir/file\"."
- Changed
list_cached_images1 field changed- added
Input schema / properties / targetAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Only rows scanned from this vCenter/ESXi target (a name from config, as scan_datastore_images takes; an unknown name is refused with the configured ones). Rows cached before rows recorded their target appear only when this is omitted. Omit for every target.", + "title": "Target" +}
- Changed
scan_datastore_images1 field changed- changed
Input schema / properties / path / descriptionPrevious value: -"Subdirectory path (empty for root)."New value: +"Datastore-relative subdirectory (empty for root); a leading '/' or '..' is refused. The images found replace this datastore's cached entries under that folder, for list_cached_images."
1 tool update
v2.3.0- Added
get_access_info
23 tool updates
v2.0.0- Added
add_iscsi_target - Changed
browse_datastore3 fields changed- added
Input schema / properties / datastore_nameAdded value: +{ + "description": "Datastore name.", + "title": "Datastore Name", + "type": "string" +} - removed
Input schema / properties / ds_nameRemoved value: -{ - "description": "Datastore name.", - "title": "Ds Name", - "type": "string" -} - changed
Input schema / requiredPrevious value: -[ - "ds_name" -]New value: +[ + "datastore_name" +]
- Added
enable_iscsi - Removed
fc_adapter_list - Added
get_iscsi_status - Added
get_vsan_capacity - Added
get_vsan_efficiency - Added
get_vsan_health - Changed
list_all_datastores1 field changed- added
Input schema / properties / limitAdded value: +{ + "anyOf": [ + { + "type": "integer" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Max datastores to return (None = all).", + "title": "Limit" +}
- Added
list_fc_adapters - Added
list_storage_device_paths - Added
remove_iscsi_target - Added
rescan_storage - Changed
scan_datastore_images3 fields changed- added
Input schema / properties / datastore_nameAdded value: +{ + "description": "Datastore name.", + "title": "Datastore Name", + "type": "string" +} - removed
Input schema / properties / ds_nameRemoved value: -{ - "description": "Datastore name.", - "title": "Ds Name", - "type": "string" -} - changed
Input schema / requiredPrevious value: -[ - "ds_name" -]New value: +[ + "datastore_name" +]
- Removed
storage_device_paths - Removed
storage_iscsi_add_target - Removed
storage_iscsi_enable - Removed
storage_iscsi_remove_target - Removed
storage_iscsi_status - Removed
storage_rescan - Removed
vsan_capacity - Removed
vsan_efficiency - Removed
vsan_health
4 tool updates
v1.11.0- Changed
storage_iscsi_add_target6 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean" - changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "title": "Result", - "type": "string" - } - }, - "required": [ - "result" - ], - "title": "storage_iscsi_add_targetOutput", - "type": "object" -}New value: +null
- Changed
storage_iscsi_enable6 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean" - changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "title": "Result", - "type": "string" - } - }, - "required": [ - "result" - ], - "title": "storage_iscsi_enableOutput", - "type": "object" -}New value: +null
- Changed
storage_iscsi_remove_target6 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean" - changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "title": "Result", - "type": "string" - } - }, - "required": [ - "result" - ], - "title": "storage_iscsi_remove_targetOutput", - "type": "object" -}New value: +null
- Changed
storage_rescan6 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean" - changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "title": "Result", - "type": "string" - } - }, - "required": [ - "result" - ], - "title": "storage_rescanOutput", - "type": "object" -}New value: +null
2 tool updates
v1.10.0- Added
fc_adapter_list - Added
storage_device_paths
12 tool updates
v1.8.15- Changed
browse_datastore5 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / ds_name / descriptionAdded value: +"Datastore name." - added
Input schema / properties / path / descriptionAdded value: +"Subdirectory path (empty for root)." - added
Input schema / properties / pattern / descriptionAdded value: +"Glob pattern to filter files (e.g. \"*.ova\", \"*.iso\")." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
list_all_datastores2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
list_cached_images3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / datastore / descriptionAdded value: +"Filter by exact datastore name. Omit for all datastores." - added
Input schema / properties / image_type / descriptionAdded value: +"Filter by file extension without the dot, e.g. \"ova\", \"iso\", \"ovf\", \"vmdk\" (case-insensitive). Omit for all types."
- Changed
scan_datastore_images4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / ds_name / descriptionAdded value: +"Datastore name." - added
Input schema / properties / path / descriptionAdded value: +"Subdirectory path (empty for root)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_add_target6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / address / descriptionAdded value: +"iSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error)." - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory." - added
Input schema / properties / port / descriptionAdded value: +"iSCSI TCP port, 1-65535 (default 3260)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_enable4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_remove_target6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / address / descriptionAdded value: +"Configured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly." - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory." - added
Input schema / properties / port / descriptionAdded value: +"Configured iSCSI TCP port, 1-65535 (default 3260)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_status3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_rescan4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_capacity3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_efficiency3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_health3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
1 tool update
v1.8.10- Added
vsan_efficiency
4 tool updates
v1.8.9- Changed
browse_datastore1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "browse_datastoreOutput", - "type": "object" -}New value: +null
- Changed
list_all_datastores1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "list_all_datastoresOutput", - "type": "object" -}New value: +null
- Changed
list_cached_images1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "list_cached_imagesOutput", - "type": "object" -}New value: +null
- Changed
scan_datastore_images1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "scan_datastore_imagesOutput", - "type": "object" -}New value: +null
TDQS
Scored across 16 tools
Each tool targets a distinct resource/action, and the descriptions explicitly cross-reference neighbors (browse_datastore vs scan_datastore_images vs list_cached_images; get_vsan_health vs capacity vs efficiency). The only mild overlap is between enumeration-style reads (list_all_datastores vs list_fc_adapters vs get_datastore_vm_usage), but the scoping text makes selection straightforward.
Everything is snake_case verb_noun, which is a consistent, predictable pattern. Minor deviation: the verbs get_ vs list_ are used somewhat arbitrarily for enumeration results (list_fc_adapters vs get_vsan_health both return lists), and list_all_datastores carries a stray 'all' infix.
16 tools for a broad storage domain (iSCSI, datastores, images, vSAN, FC, multipath, permissions) is defensible and each tool maps to a real task. It is at the upper edge of comfortable without feeling padded.
Read coverage is strong (iSCSI, datastores, images, vSAN trio, FC, paths, access), and the iSCSI write path is coherent. However, the write surface is asymmetric: enable_iscsi has no disable_iscsi, and remove_iscsi_target explicitly refuses when a datastore would lose every path ('unmount it first') yet no unmount/rescan-datastore tool exists — a hard dead end for the agent.
Maintenance
Related MCP Connectors
214 tools for AI agents over one MCP endpoint: image, video, audio, 3D, data, storage, mail, GPUs.
- mcpOAuthcom.gibsonai
GibsonAI MCP server: manage your databases with natural language
Egnyte's remote MCP server for secure AI access, search, upload and file management in your account.
Shared long-term memory vault for AI agents with 20 MCP tools.
Related MCP Servers
- AlicenseAqualityAmaintenanceAI-powered VMware vCenter/ESXi monitoring and operations. 20 MCP tools for inventory queries, health monitoring, VM lifecycle management, fast provisioning (Linked Clone, OVA, template deploy), snapshot management, and datastore browsing. Supports vSphere 6.5–8.0. Works with local models via Ollama/LM Studio.44211 PyPI82MIT
- AlicenseAqualityAmaintenanceAI-powered VMware NSX networking management. Configure segments, gateways, NAT, routing, and IPAM via natural language with 31 MCP tools.33186 PyPI5MIT
- AlicenseAqualityAmaintenanceAI-powered VMware vSphere with Tanzu (VKS) management. Create and manage Supervisor Namespaces and TanzuKubernetesClusters with 20 MCP tools.24477 PyPI5MIT
- AlicenseAqualityAmaintenanceAI-powered VMware Aria Operations monitoring and capacity planning. Query metrics, manage alerts, detect anomalies, and plan capacity with 18 MCP tools.246282 PyPI3MIT