mcp-remote-control
The mcp-remote-control server provides comprehensive remote host management and automation through seven MCP tools:
Host Endpoint Management (
endpoint): List, open, and close connections to local, SSH, or WinRM endpoints using named profiles.Remote Command Execution (
exec): Run non-interactive commands, scripts, or argument vectors on an open endpoint, with support for working directory, timeout, and runtime options.Filesystem Operations (
fs): Perform file and directory operations on any connected endpoint: list, stat, read, write, upload, download, create directories, and delete.Interactive PTY Sessions (
screen): Open true PTY terminals on local/SSH endpoints, send keystrokes, capture screen frames, and manage active sessions.Persistent PowerShell (
ps): Manage stateful PowerShell runspaces over WinRM: open, invoke scripts, and close.Serial Console (
console): List local serial devices, open sessions with configurable baud rate, send data, and capture/view output (separate from PTY/SSH).Self-Configuration (
config): Programmatically manage profiles, secrets, and settings without manual TOML editing; secrets are stored securely and never echoed back.
A parallel CLI (mcp-remote-control-cli) offers the same core functionality plus diagnostic tools (doctor, selftest, replay) for local debugging, scripting, and CI.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-remote-controlRunuptimeon the staging server"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-remote-control
通过 MCP 管理本机 / SSH / WinRM 远端主机;业务在 Core,MCP / CLI 只做薄壳。会话与 endpoint 均为进程内状态。
入口 | 作用 |
| MCP stdio 服务(Claude Code / Cursor / Claude Desktop 等 Host) |
| 同构 CLI harness(doctor / 调试 / 与 MCP 共用 Core) |
MCP 工具(7):
类 | 工具 |
主机 |
|
设备 |
|
自助配置 |
|
要求: Python ≥ 3.11 · 依赖 asyncssh · pyte · pypsrp · mcp · pyserial
名称 | 值 |
发行包 / MCP 服务名 |
|
import |
|
配置根(默认) |
|
Git / 工程根 | 本目录(含 |
许可证 | Apache-2.0(可商用;再分发须保留版权/许可与 |
目录
Related MCP server: CommandBridge MCP
Agent 输出形态(MCP wire)
规范上 tools/call 应返回 纯文本 content,例如:
{
"content": [{ "type": "text", "text": "@exec ok ep=lab exit=0 …\n\n$ whoami\n…" }],
"isError": false
}本项目默认 Agent 轨(语义文本,见设计 002):
@exec ok ep=lab exit=0 ms=12 form=command cwd=/home/deploy
$ whoami
deploy不是默认把正文塞进:
{ "result": "@exec ok …" }那一层 {"result":…} 来自 MCP SDK 对 -> str 的自动 structured 包装(v1 FastMCP / v2 MCPServer)。本仓库在 tool 注册时使用 structured_output=False,只暴露 Agent 文本,避免 Host UI 显示 JSON 外壳。要求 mcp SDK ≥ 2(MCPServer)。
CLI 默认同样是 Agent 文本;加 --json 才走机器轨。
三种装法(先选场景)
你想做什么 | 命令形态 | 改 | README 小节 |
只使用(Host 挂公开/私有 GitHub,不改源码) |
| 否(吃 cache;远端更新要 | |
改源码开发(editable) | 先 clone 到本地,再 | 是(仍须重启 MCP 进程) | |
长期本机 CLI |
| tool 安装否 / |
重要:editable 不能直接挂 GitHub URL。
# ❌ 不要这样想:把 GitHub 地址当 editable
uvx --with-editable "git+https://github.com/shiharuharu/mcp-remote-control.git" ...
# uv 的 --with-editable / pip -e 需要的是「本地目录」
# (含 pyproject.toml 的 checkout),不是远程 URL。想「对着 GitHub 上的仓改代码」时,正确路径是:
git clone https://github.com/shiharuharu/mcp-remote-control.git
cd mcp-remote-control # 本仓库:含 pyproject.toml 的根(即本目录)
REPO="$(pwd)"
uvx --python 3.12 --with-editable "$REPO" --from "$REPO" mcp-remote-control快速部署(推荐:uvx + Git)
uv 的 uvx 按需拉包并在隔离环境运行入口,适合 MCP Host 的 command / args。
1. 配置目录
mkdir -p ~/.config/mcp-remote-control/{profiles,secrets,state,logs}
export MRC_HOME="$HOME/.config/mcp-remote-control"最小 config.toml / profile 见 配置 MRC_HOME。也可交给 Agent:config ensure_home → put_secret → put_profile。
2. 从 Git 运行(只用)
本目录即仓库根。官方地址:https://github.com/shiharuharu/mcp-remote-control(**不要** #subdirectory=)。
这是 「Host 直接挂 GitHub」 的用法:--from git+…,不是 editable。
FROM="git+https://github.com/shiharuharu/mcp-remote-control.git@main"
# MCP stdio(由 Host 拉起;前台会等待协议输入)
uvx --python 3.12 --from "$FROM" mcp-remote-control
# CLI 自检
uvx --python 3.12 --from "$FROM" mcp-remote-control-cli doctor
uvx --python 3.12 --from "$FROM" mcp-remote-control-cli endpoint list分支 / tag / commit / 私有仓:
uvx --python 3.12 --from "git+https://github.com/shiharuharu/mcp-remote-control.git@v0.2.0" mcp-remote-control
uvx --python 3.12 --from "git+https://github.com/shiharuharu/mcp-remote-control.git@abcdef1" mcp-remote-control
uvx --python 3.12 --from "git+ssh://git@github.com/shiharuharu/mcp-remote-control.git@main" mcp-remote-control
uvx会缓存环境。 远端或本地源码更新后工具列表仍旧(例如缺config、仍有{"result":…})时:
加
--refresh,或pin 新 commit/tag,或
开发期 clone 后 用下面的
--with-editable本地路径 / 直接跑.venv入口。
3. 固定安装(可选)
uv tool install --python 3.12 --from "git+https://github.com/shiharuharu/mcp-remote-control.git@main" mcp-remote-control
# 入口常在 ~/.local/bin/mcp-remote-control
uv tool upgrade mcp-remote-control本地开发(必读:--with-editable)
开发时若只用:
uvx --from /path/to/this-repo mcp-remote-control
# 或:uvx --from "git+https://github.com/shiharuharu/mcp-remote-control.git@main" …uvx 会把包拷进 cache,不会随你改 src/ 自动更新 → Host 可能仍是旧 6 tools(无 config)、旧 structured 包装。
推荐 A:clone 后 uvx --with-editable(跟源码联动)
从 GitHub 拉到本地(或已有 fork/checkout)。
--with-editable/--from都填本地绝对路径(含pyproject.toml的目录 = 本仓库根)。
# 若还没有本地树:
git clone https://github.com/shiharuharu/mcp-remote-control.git
cd mcp-remote-control # 仓库根(本目录)
REPO="$(pwd)" # 或 /abs/path/to/mcp-remote-control
# 每次从源码可编辑安装再跑入口(改代码后重启 MCP 进程即可)
uvx --python 3.12 \
--with-editable "$REPO" \
--from "$REPO" \
mcp-remote-control
# CLI
uvx --python 3.12 \
--with-editable "$REPO" \
--from "$REPO" \
mcp-remote-control-cli doctor参数 | 作用 |
| 用本地项目提供 console script( |
| 以 editable 装本包,改 |
| 满足 |
| 丢掉 uv 缓存元数据后重装(排障时用) |
也可:
cd "$REPO"
uvx --python 3.12 --with-editable . --from . mcp-remote-control-cli config home推荐 B:venv 入口(最稳、Host 配置最简单)
cd /path/to/this-repo
uv venv --python 3.12
source .venv/bin/activate # Windows: .venv\Scripts\activate
uv pip install -e ".[dev]"
export MRC_HOME="$HOME/.config/mcp-remote-control"
mcp-remote-control-cli doctor
mcp-remote-control # stdioHost 直接指向:
/path/to/this-repo/.venv/bin/mcp-remote-control推荐 C:uv run(在项目目录内)
cd /path/to/this-repo
uv run --python 3.12 mcp-remote-control-cli doctor
uv run --python 3.12 mcp-remote-control不要这样做(开发)
做法 | 问题 |
仅 | 易吃 旧 cache 快照,新工具/修复不出现 |
改完代码不重连 MCP | stdio 进程仍是旧内存;需 Host 重连 |
系统 Python 3.9 调 |
|
MCP Host 配置
command = 本机可执行文件(which uvx 或 venv 的绝对路径)。
配置根默认为用户目录下的 ~/.config/mcp-remote-control;一般不必在 Host JSON 里写 MRC_HOME。
若一定要指定,请用本机真实绝对路径(在终端 echo "$HOME/.config/mcp-remote-control" 后粘贴结果)。
不要照抄文档里的示例用户名,也不要写 ~/Users/... 这类叠路径。
生产 / 只用:远端 GitHub(非 editable)
Host 里写 Git URL,用 --from git+…。不要在 args 里写 --with-editable + git+https://…。
{
"mcpServers": {
"mcp-remote-control": {
"command": "uvx",
"args": [
"--python", "3.12",
"--from",
"git+https://github.com/shiharuharu/mcp-remote-control.git@main",
"mcp-remote-control"
]
}
}
}需要自定义配置根时再加 env.MRC_HOME(绝对路径)。强制刷新缓存可在 args 最前加 "--refresh"。
开发:本地 checkout + --with-editable(推荐)
先 git clone,在含 pyproject.toml 的仓库根取绝对路径(pwd -P),填入下面两处(不是 git+https://…):
{
"mcpServers": {
"mcp-remote-control": {
"command": "uvx",
"args": [
"--python", "3.12",
"--with-editable",
"/absolute/path/to/mcp-remote-control",
"--from",
"/absolute/path/to/mcp-remote-control",
"mcp-remote-control"
]
}
}
}改代码后 重连 MCP。
开发:venv 绝对路径(最简单)
{
"mcpServers": {
"mcp-remote-control": {
"command": "/absolute/path/to/mcp-remote-control/.venv/bin/mcp-remote-control",
"args": []
}
}
}Claude Desktop
编辑 mcpServers(macOS 常见:~/Library/Application Support/Claude/claude_desktop_config.json),键名建议 mcp-remote-control,结构同上。
Claude Code(全局示例)
常见:~/.claude.json → mcpServers(字段同上)。改完后 重连 MCP,确认 tools 为 7 个且含 config。
部署后自检
export MRC_HOME="$HOME/.config/mcp-remote-control"
# 应列出 7 名:endpoint,exec,fs,screen,ps,console,config
uvx --python 3.12 --with-editable . --from . mcp-remote-control-cli doctorHost 侧:重连后工具列表须含 config;调用结果应为 @kind … 文本,不应再被 {"result":…} 包一层。
配置 MRC_HOME
路径 | 含义 |
| 全局默认 |
| 每个 endpoint 一个 profile( |
| 密钥/密码文件(勿提交 Git) |
| 运行时状态 |
| 日志 |
环境变量 | 含义 |
| 配置根(优先) |
| 次选别名 |
(皆未设) |
|
transport:local | ssh | winrm
local / ssh ≈
exec+fs+screenwinrm ≈
exec+fs+ps(screen→ UNSUPPORTED)
手写示例
# $MRC_HOME/config.toml
[defaults]
verbosity = "normal"
[logging]
level = "info"
dir = "logs"# $MRC_HOME/profiles/local.toml
name = "local"
transport = "local"
label = "this machine"# $MRC_HOME/profiles/lab-ssh.toml
name = "lab-ssh"
transport = "ssh"
host = "10.0.0.5"
port = 22
username = "deploy"
label = "lab"
[auth]
method = "private_key_path"
key_path = "secrets/id_ed25519" # 相对 MRC_HOME 或绝对路径
[ssh]
connect_timeout_ms = 15000
keepalive_interval_s = 30
known_hosts = "none" # 仅实验室;生产请用 known_hosts 文件
encoding = "utf-8"
[defaults]
cwd = "/home/deploy"密钥:chmod 600 $MRC_HOME/secrets/*。密码可用 password_path = "secrets/lab_pass"。
Agent 自助配置(优先)
config op=ensure_home
config op=put_secret name=id_ed25519 content=<pem 或密码>
config op=put_profile name=lab transport=ssh host=… username=…
auth={"method":"private_key_path","key_path":"secrets/id_ed25519"}
endpoint op=open profile=lab
| 作用 |
| 查看 / 创建布局 + 默认 |
| 读配置(无密钥正文) |
| 写/删 |
| 写密钥(只回路径)/ 列文件名 |
密钥 只 进 secrets/,响应永不回 body。
工具面(给 Agent)
主机
Tool | 作用 |
|
|
| 非交互: |
|
|
| 真 PTY(需 |
| WinRM 持久 PowerShell(需 |
典型:endpoint open → exec / fs / screen → close。
Console(独立 — 嵌入式串口)
与 endpoint 完全分离。不是 PTY、不是 SSH。open 即后台 CapturePump;views 查大缓冲。
console op=list
console op=open path=<device> baud=115200
console op=views id=con_01 mode=tail|since|contains
console op=send id=con_01 data=… newline=true
console op=close id=con_01op | 含义 |
| 系统 console 设备名(禁止扫 |
|
|
|
|
|
|
| 关闭 / 列会话 |
Config
见上一节 Agent 自助配置。
CLI
mcp-remote-control-cli 是 MCP 的平行入口:同一套 Core,无 MCP 依赖;适合本地调试、脚本和 CI harness。业务逻辑不在 CLI 里重写。
入口 | 命令 | 进程模型 |
MCP Host |
| Host 拉起一个长进程,会话挂在该进程内 |
CLI harness |
| 每次调用通常是新进程(见下方进程内限制) |
默认输出与 MCP 相同的 Agent 文本;加全局 --json 走机器轨。
MCP tool ↔ CLI 对照
MCP 侧是「一个 tool + op=」;CLI 侧是「子命令 + 二级 op」。语义对齐,参数名多为 --flag 形式。
MCP tool | CLI | 典型 op / 子命令 | 说明 |
|
|
| 主机生命周期; |
|
|
| 非交互执行;也可用 |
|
|
| 需已 open 的 |
|
|
| 真 PTY;见进程内限制 |
|
|
| WinRM 持久 PS;会话进程内 |
|
|
| 串口,非 PTY/SSH |
|
|
| 写 |
仅 CLI / harness(MCP 无对应 tool):
CLI | 用途 |
| 离线:配置根、依赖、profile 语法;可选 |
| 离线 smoke:render 往返 + fixture 配置加载 |
| PTY fixture 回放(CI;无真 TUI)。例: |
进程内状态限制(必读)
endpoint / screen / ps / console 的打开会话只存在于当前 Python 进程。
场景 | 结果 |
MCP:Host 同一 stdio 进程内 | 正常 |
CLI:同一次命令里完成的操作 | 正常(单进程) |
CLI: |
|
多进程 CLI 接力 endpoint/ps/console 会话 | 同样失败 |
因此:
人工调试 screen:用 MCP Host 一次会话;或仓库内
scripts/harness/local_screen_smoke.py/smoke_local.sh(进程内 open→send→close)。CI:
ci.sh用 in-process smoke +replay,不用跨进程 CLI 拼 screen。
# ❌ 不要这样(两次进程,第二次找不到 session)
mcp-remote-control-cli screen open --ep local
mcp-remote-control-cli screen send --id scr_01 --text 'ls'
# ✅ MCP 同一连接内连续 tool call;或:
./scripts/harness/smoke_local.sh示例
export MRC_HOME="$HOME/.config/mcp-remote-control"
# harness 专用
mcp-remote-control-cli doctor
mcp-remote-control-cli selftest
mcp-remote-control-cli replay --fixture bash_prompt --check
# 与 MCP 同构
mcp-remote-control-cli endpoint list
mcp-remote-control-cli endpoint open --profile local
mcp-remote-control-cli exec --ep local --command 'uname -a'
mcp-remote-control-cli fs list --ep local --path /tmp
mcp-remote-control-cli console list
mcp-remote-control-cli config home
mcp-remote-control-cli config ensure-home
mcp-remote-control-cli config list-profiles
mcp-remote-control-cli config put-secret --name id_ed25519 --content "$(cat ./id_ed25519)"
mcp-remote-control-cli config put-profile --name lab --transport ssh \
--host 10.0.0.5 --username deploy \
--auth-json '{"method":"private_key_path","key_path":"secrets/id_ed25519"}'
# 机器轨
mcp-remote-control-cli --json endpoint list完整 flag:mcp-remote-control-cli <cmd> -h / … <cmd> <op> -h。
开发与 harness
工程根 = 本目录(pyproject.toml / src/ / tests/)。
export MRC_HOME="$(pwd)/tests/fixtures/config"
uv venv --python 3.12 && source .venv/bin/activate
uv pip install --python .venv/bin/python -e ".[dev]" # 含 pytest + ruff==0.15.12
ruff check src tests
./scripts/harness/ci.shci.sh:pytest(无 integration)→ doctor/selftest → smoke_local / smoke_mcp → replay。
GitHub Actions(已写好,推仓后生效): .github/workflows/ci.yml
Job | 内容 |
| 矩阵 Python 3.11 / 3.12 / 3.13: |
|
|
触发:push/pull_request 到 main/master,以及 workflow_dispatch。
本地等价:./scripts/harness/ci.sh(单版本;全量矩阵靠 Actions)。
可选 | 说明 |
| 真机集成测 |
| Docker 方言矩阵 |
.
├── LICENSE # Apache-2.0
├── NOTICE # attribution (must travel with redistributions)
├── pyproject.toml # name = mcp-remote-control
├── README.md
├── .github/workflows/ci.yml
├── src/mcp_remote_control/
├── tests/
└── scripts/harness/其它安装:
pip install "git+https://github.com/shiharuharu/mcp-remote-control.git@main"
python -m mcp_remote_control.mcp_server故障排查
现象 | 原因 / 处理 |
找不到 | Host 仍在跑 旧 uvx 缓存(仅 6 tools)。改用 本地 |
想 editable 却写了 | uv 的 editable 只接受本地路径。先 |
输出被 | 旧 SDK structured 包装;当前源码已 |
| 装到了 MCP SDK v1 API 路径但环境是旧缓存,或反过来。本项目 0.2+ 需要 |
| 旧 probe 把 |
| 加 |
私有仓认证失败 |
|
| 检查配置根与 |
| Host 里 |
| 会话仅在当前 Python 进程内。勿跨两次 CLI 进程接力 |
远端/源码已更新 Host 仍旧 |
|
WinRM | 预期 |
GitHub Actions 不跑 | 工作流在 本目录 |
验证 tools 是否最新(在仓库根):
uvx --python 3.12 --with-editable . --from . python -c \
"from mcp_remote_control.mcp_server import tool_names; print(tool_names())"
# 期望: ['endpoint', 'exec', 'fs', 'screen', 'ps', 'console', 'config']安全提示
密钥只放
$MRC_HOME/secrets/,勿写进 profile 明文、勿提交 Git。Agent 轨会 redact 常见敏感字段;不要把私钥/密码当普通日志贴出。
put_secret的 content 只应在 tool 参数中传递一次,响应里不会回显 body。生产 SSH 慎用
known_hosts = "none"。仓库内
tests/fixtures/config/secrets/*仅为 dummy 测试夹具(见该目录README.md),不是可用密钥。
许可证
本项目以 Apache License 2.0 发布,归属说明见 NOTICE。
可以 | 约束(再分发时「必须带上」) |
商用、闭源产品内嵌、SaaS 使用 | 附带本 LICENSE 副本 |
修改源码并再分发 | 修改过的文件标明已变更 |
申请专利交叉许可(见协议正文) | 保留 原有版权 / 专利 / 商标 / 归属声明 |
若附带 NOTICE,衍生作品须按 4(d) 继续携带 其中的归属信息 |
不是 GPL: 你的专有代码不必开源;Apache-2.0 不强制衍生作品整体以同一许可证发布,但不能剥掉本项目自带的许可与 NOTICE 要求。
名称对照
用途 | 名称 |
产品 / 发行包 / MCP 服务 | mcp-remote-control |
MCP console script |
|
CLI console script |
|
Python 包 / import |
|
配置根默认 |
|
环境变量 |
|
Available Tools
7 toolsconfigA
Complete self-config for profiles. Do NOT shell-edit config files. ops: help|home|ensure_home|get|list_profiles|get_profile|put_profile|delete_profile|put_secret|list_secrets. Password is NOT private — write it inline: put_profile name=lab transport=ssh host=… username=… auth={"method":"password","password":""} ssh={"known_hosts":"none"} then endpoint open profile=lab. SSH key still uses put_secret + key_path=secrets/…. WinRM: auth password=plain + winrm={scheme,auth}; optional defaults/caps. op=help for recipes.
| Name | Required | Description | Default |
|---|---|---|---|
| op | No | home | |
| ssh | No | ||
| auth | No | ||
| body | No | ||
| caps | No | ||
| host | No | ||
| name | No | ||
| port | No | ||
| label | No | ||
| winrm | No | ||
| content | No | ||
| defaults | No | ||
| username | No | ||
| transport | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose important behavior: passwords are not private and must be written inline, and shell-editing config files is forbidden. It also clarifies the relationship between put_profile and put_secret for SSH keys. However, it does not mention return values, persistence, or side effects of operations like delete_profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense paragraph that front-loads the core purpose and follows with a warning, operation list, and examples. Every sentence adds value, though the examples create a run-on feel; a structured layout would improve scannability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex tool with 14 parameters, no output schema, and no annotations, the description covers common operations and gives recipes but leaves several parameters undocumented and omits return/error behavior. The 'op=help for recipes' pointer mitigates this, but the agent is still left guessing about body, content, port, and label.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains several parameters through examples: name, transport, host, username, auth, ssh, winrm, defaults, caps, and key_path (though key_path is not in the schema). However, parameters like body, content, port, and label remain unexplained, and the phantom key_path adds confusion.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Complete self-config for profiles', immediately identifying the tool's purpose as managing profile configuration. It enumerates a clear list of operations (ops) and gives concrete examples, distinguishing itself from sibling tools like exec or endpoint by focusing on profile setup rather than execution or connection.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit do-not usage ('Do NOT shell-edit config files') and directs to 'op=help for recipes'. It includes concrete recipes for SSH password, SSH key, and WinRM profiles, making it clear when and how to use the tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
consoleA
Serial Console (embedded device link on this host; not PTY/SSH). op=list|open|send|views|close|sessions. list: system device= names (do not scan /dev or drivers). open: path= or device= from list, optional baud=, max_lines= (default huge buffer; background capture starts immediately). send: id= + data= or data_b64=, optional newline=. views: id= + mode=tail|since|contains; n=; since=; contains=; context=; settle_ms=; with_seq=; queries capture buffer (not driver recv). close/sessions: id= / list open sessions.
| Name | Required | Description | Default |
|---|---|---|---|
| n | No | ||
| id | No | ||
| op | No | list | |
| baud | No | ||
| data | No | ||
| mode | No | ||
| path | No | ||
| since | No | ||
| device | No | ||
| context | No | ||
| newline | No | ||
| contains | No | ||
| data_b64 | No | ||
| with_seq | No | ||
| max_lines | No | ||
| settle_ms | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral disclosure burden. It goes beyond basic invocation by revealing that opening a console starts background capture immediately, that max_lines defaults to a huge buffer, and that view queries operate on the captured buffer rather than driver receive. These are meaningful behavioral traits not derivable from the schema, though it doesn't discuss close/send side effects or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense paragraph but is efficiently organized by operation with semicolon-separated sub-specifications. Every clause provides necessary information for a complex multi-op tool; however, some formatting (e.g., line breaks per op) could improve scanability without adding length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 16 parameters, no output schema, and multiple operation modes, the description is highly complete: it covers op-specific parameter requirements, default behaviors, and capture semantics. Minor gaps remain around return value shapes, error conditions, and lifecycle side effects, but for the tool's complexity, this is a strong profile.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 0% schema description coverage, the description names and contextualizes every parameter: op, path/device, baud, max_lines, id, data/data_b64, newline, mode, n, since, contains, context, settle_ms, with_seq, and sessions. It explains parameter combinations per operation and even specifies value vocabularies like mode=tail|since|contains. This fully compensates for the otherwise opaque schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a Serial Console for embedded device links, distinguishing it from PTY/SSH interfaces. It enumerates the specific operations (list, open, send, views, close, sessions) and their scopes, making the purpose unambiguous and differentiating it from sibling tools like 'screen' or 'exec'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides operation-specific usage instructions, including which parameters apply to each op and constraints like 'do not scan /dev or drivers' and 'queries capture buffer (not driver recv)'. It lacks explicit 'when to use vs alternatives', but the 'not PTY/SSH' and embedded-device context provide clear situational guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
endpointA
Host endpoint lifecycle only: op=list|open|close. open uses profile=; close uses ep=. Not for serial ports — use the console tool.
| Name | Required | Description | Default |
|---|---|---|---|
| ep | No | ||
| op | No | list | |
| profile | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose side effects and safety. It doesn't mention whether close is destructive, if operations are reversible, or what happens to existing endpoints. It only scopes the tool to 'lifecycle' and gives parameter usage, but lacks behavioral detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, dense with relevant details, and no filler. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter tool with no annotations and no output schema, this description covers operation semantics and parameter mapping but omits return values, error conditions, and side-effect details. It's sufficient for a basic understanding but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It does map op values to parameters (open uses profile, close uses ep), which adds meaning beyond the bare schema, but it doesn't define what ep or profile actually represent or the behavior of the default op=list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool handles 'Host endpoint lifecycle only' and enumerates the specific operations (list, open, close). It distinguishes itself from the console tool for serial ports, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit usage guidance is provided: it says when to use profile= (for open) and ep= (for close), and it directly says 'Not for serial ports — use the console tool,' which gives both an exclusion and an alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execC
Remote non-interactive exec on ep=. Provide command= or argv= or script=/script_path=; optional runtime=, script_args=, cwd=, timeout=.
| Name | Required | Description | Default |
|---|---|---|---|
| ep | No | ||
| cwd | No | ||
| argv | No | ||
| script | No | ||
| command | No | ||
| runtime | No | ||
| timeout | No | ||
| script_args | No | ||
| script_path | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It mentions 'non-interactive' and 'remote' but omits important behaviors such as output handling, exit codes, side effects, privilege requirements, or failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense sentence, front-loaded with the core action and parameter alternatives. No filler words; every element adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex 9-parameter tool with no annotations, output schema, or parameter descriptions, this is thin. It does not mention return values, error behavior, environment context, or prerequisites, leaving significant gaps for an agent to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 9 parameters are referenced in the description with usage patterns (alternatives like command/argv/script, optional runtime/script_args/cwd/timeout), adding structural meaning beyond the bare schema. However, it does not explain individual semantics like timeout units or what 'runtime' means.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Remote non-interactive exec on ep=' using a specific verb (exec) and resource (ep). It conveys remote command execution and is distinguishable from sibling tools like fs or ps, though it does not explicitly differentiate itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides parameter invocation patterns but no guidance on when to use this tool versus alternatives like console or screen. It lacks exclusions, recommended use cases, or contextual selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fsC
Filesystem on ep=: op=list|stat|read|write|put|get|mkdir|rm; path= absolute preferred.
| Name | Required | Description | Default |
|---|---|---|---|
| ep | No | ||
| op | Yes | ||
| path | No | ||
| local | No | ||
| content | No | ||
| recursive | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden for behavioral disclosure. It mentions 'path= absolute preferred' but does not disclose side effects (destructive ops like rm, write), permissions, error handling, or return behavior. Minimal transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise and front-loaded with the operation list. No wasted words, but the terse style (ep=, path=) reduces readability and requires inference.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex multi-operation tool with 6 parameters, no output schema, and no annotations. The description covers only the op list and path preference, leaving most operational semantics unexplained. Inadequate for safe and correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains 'op' values and hints that 'path' should be absolute, but 'ep', 'local', 'content', and 'recursive' are left undefined. Partial compensation at best.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies this as a filesystem tool by listing operations (list|stat|read|write|put|get|mkdir|rm). This distinguishes it from sibling tools like exec and config, though the verb 'operate' is implied rather than explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool vs alternatives like exec or endpoint. The op list implies filesystem tasks, but there are no exclusions, prerequisites, or alternative tool references.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
psB
Persistent PowerShell runspace (WinRM): op=open|invoke|close. open needs ep=; invoke/close need id=; invoke uses script=.
| Name | Required | Description | Default |
|---|---|---|---|
| ep | No | ||
| id | No | ||
| op | Yes | ||
| script | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses that the runspace is persistent and uses WinRM, but it does not explain side effects, cleanup obligations, authentication requirements, error behavior, or what happens to state across calls. Key behavioral aspects like the need to close the runspace or the output of invoke are omitted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence. It front-loads the core purpose and then provides the operation-parameter mapping. Every phrase contributes necessary information, with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool managing persistent remote sessions, the description is incomplete. It lacks information about return values, authentication, error handling, resource cleanup if close is never called, and the format of endpoint (ep). The absence of an output schema makes this more critical, but the description does not compensate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, and the description compensates by explaining the conditional parameter requirements: 'open needs ep=; invoke/close need id=; invoke uses script='. This adds meaning beyond the raw schema by mapping parameters to operations, though it does not define each parameter's full purpose or format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool manages a 'Persistent PowerShell runspace (WinRM)' and enumerates the operations (open/invoke/close), which gives a specific verb-resource mapping. It is distinct from siblings by naming the resource, but it does not explicitly differentiate itself from sibling tools like 'exec' or 'endpoint'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage through the term 'Persistent' and lists operation-specific parameter requirements, which gives some context on when to use each operation. However, it does not explicitly state when this tool should be preferred over siblings or mention exclusions/alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screenA
Interactive PTY screen on host ep=: op=open|send|close|list. Loop: open → frame → send(actions) → frame → close. Not for serial hardware — use the console tool.
| Name | Required | Description | Default |
|---|---|---|---|
| ep | No | ||
| id | No | ||
| op | Yes | ||
| shot | No | ||
| wait | No | ||
| actions | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that the tool is an interactive PTY session with a structured lifecycle (open, send, close) and a framing step. However, it omits details on what 'frame' means, error behavior, or authentication requirements, so it is not fully transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally concise—two sentences that pack in the operation set, usage pattern, and sibling exclusion without any fluff. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an interactive PTY tool with six parameters and no output schema or annotations, the description provides a useful high-level workflow and the key constraint about serial hardware, but lacks details on parameter semantics, expected output, and edge cases. It is moderately complete but leaves significant gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only explains 'ep' and 'op' (the latter with its enum values). It mentions 'actions' in the loop but does not clarify the structure of 'actions', and entirely omits 'id', 'shot', and 'wait'. Thus, it adds some meaning but does not compensate for the lack of parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies the tool's resource ('Interactive PTY screen'), the host parameter 'ep=', and the supported operations 'open|send|close|list'. It also distinguishes itself from the sibling 'console' tool by explicitly stating it is not for serial hardware.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides an explicit usage loop ('open → frame → send(actions) → frame → close') and a clear exclusion/alternative ('Not for serial hardware — use the console tool'). This gives strong guidance on when to use this tool versus the 'console' sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.1.0- First observed
config - First observed
console - First observed
endpoint - First observed
exec - First observed
fs - First observed
ps - First observed
screen
TDQS
Scored across 7 tools
Each tool targets a distinct resource or action: endpoint manages host lifecycle, exec runs non-interactive commands, fs handles filesystem operations, screen provides interactive PTY, ps manages PowerShell runspaces, console handles serial devices, and config manages profiles. Overlapping tools like screen and console are explicitly differentiated by hardware type, while exec and ps differ in interactivity and persistence.
All tool names are single lowercase words (endpoint, exec, fs, screen, ps, console, config) following a consistent, predictable pattern. There is no mixing of conventions such as camelCase or snake_case.
Seven tools is well-scoped for a remote control server, covering all major operation areas (connection, command execution, files, terminal, PowerShell, serial, configuration) without unnecessary overlap or bloat.
The tool set provides comprehensive coverage of remote management workflows: endpoint lifecycle, command/script execution, file transfer and manipulation, interactive sessions, persistent PowerShell, serial console access, and profile/secret configuration. There are no obvious dead ends or missing critical operations.
Maintenance
Related MCP Connectors
Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Manage CloudPepper servers, Odoo instances, backups, and deployments over MCP.
MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
Remote MCP server to read and manage your Atako AI agents, messages, files, and integrations.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceMCP server for infrastructure discovery and remote management, enabling SSH command execution, file transfer, log tailing, and machine/service inventory with a companion web dashboard.2-
- FlicenseAqualityBmaintenanceCross-platform MCP server for policy-controlled command execution on Linux and Windows, with no SSH dependency.3-
- AlicenseBqualityCmaintenanceMCP server for administering Linux/Unix hosts via SSH and Windows hosts via WinRM/PowerShell Remoting, supporting persistent inventory, sessions, jobs, and command groups.29MIT
- AlicenseNot gradedqualityAmaintenanceMCP server and CLI for host and container operations, enabling Docker and Compose control, SSH, host inspection, logs, ZFS, and safe file transfer. It exposes flux and scout MCP tools with parity from the original TypeScript server.2AGPL 3.0