processes/list
List Linux processes with PID, user, state, RSS, and command from /proc, then filter by user or PID and sort by memory to find or inspect a running process.
Instructions
Lists processes (PID, PPID, user, state, RSS, command) read from /proc. Read-only. Use it to find a PID, filter by user or one pid, or sort by memory. For the CPU/memory header and %CPU on every row use processes/top; for the process that owns a port network/connections; to signal a process processes/delete; for deep per-PID metrics the process://<pid>/<target> resource. Sorted by PID unless sort_by is mem (RSS, largest first) or cpu (samples for 0.5 s, so the call takes at least that long, and only then does cpu_percent appear); limit applies after sorting. Kernel threads appear as [name]. Command lines can contain secrets passed as arguments. Text output is a table; output_format: json returns an array of objects (pid, user, comm, state, ppid, rss_bytes, cmdline, cpu_percent). Sizes are bytes unless human_readable.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pid | No | Filter to a single specific PID | |
| user | No | Exact username | |
| limit | No | Maximum rows returned, applied after sorting | |
| sort_by | No | pid (default), mem (RSS, largest first) or cpu (samples for 0.5 s) | |
| privileged | No | Run as root. Needs a grant for this tool in mcp-sudo.yaml, otherwise refused | |
| output_format | No | Use json for structured output (yaml, table and wide return the same JSON); default is text | |
| human_readable | No | RSS like 10Mi; default is bytes |