Ansible MCP Server

Instructions

Implementation Reference

• src/sysoperator/operations/vault.ts:12-65 (handler)

  Handler function that spawns ansible-vault encrypt_string process, pipes the input string to stdin, and returns the encrypted output.

  export async function encryptString(options: VaultEncryptStringOptions): Promise<string> {
    return new Promise((resolve, reject) => {
      const args = ['encrypt_string'];
      
      // Add vault ID if specified
      if (options.vault_id) {
        args.push(`--vault-id=${options.vault_id}`);
      }
      
      // Add vault password file if specified
      if (options.vault_password_file) {
        args.push(`--vault-password-file=${options.vault_password_file}`);
      }
      
      // Add name if specified
      if (options.name) {
        args.push(`--name=${options.name}`);
      }
      
      // Add --stdin flag to read from stdin
      args.push('--stdin');
  
      console.error(`Executing: ansible-vault ${args.join(' ')} (with string piped to stdin)`);
      const vaultProcess = spawn('ansible-vault', args, { stdio: ['pipe', 'pipe', 'pipe'] });
  
      let stdoutData = '';
      let stderrData = '';
  
      vaultProcess.stdout.on('data', (data) => {
        stdoutData += data.toString();
      });
  
      vaultProcess.stderr.on('data', (data) => {
        stderrData += data.toString();
      });
  
      vaultProcess.on('close', (code) => {
        if (code === 0) {
          resolve(stdoutData.trim());
        } else {
          const errorMessage = stderrData || `ansible-vault exited with code ${code}`;
          reject(new AnsibleExecutionError(`Error encrypting string: ${errorMessage}`, stderrData));
        }
      });
  
      vaultProcess.on('error', (err) => {
        reject(new AnsibleExecutionError(`Failed to start ansible-vault: ${err.message}`));
      });
  
      // Write the string to encrypt to stdin
      vaultProcess.stdin.write(options.string);
      vaultProcess.stdin.end();
    });
  }

• src/sysoperator/common/types.ts:223-230 (schema)

  Zod schema defining input parameters for the vault_encrypt_string tool: string to encrypt, optional vault_id, vault_password_file, and name.

  export const VaultEncryptStringSchema = z.object({
    string: z.string().min(1, 'String to encrypt is required'),
    vault_id: z.string().optional(),
    vault_password_file: z.string().optional(),
    name: z.string().optional(),
  });
  
  export type VaultEncryptStringOptions = z.infer<typeof VaultEncryptStringSchema>;

• src/sysoperator/index.ts:80-84 (registration)

  Registration of the 'vault_encrypt_string' tool in the toolDefinitions map, linking schema and handler.

  vault_encrypt_string: {
    description: 'Encrypt a string using Ansible Vault',
    schema: VaultEncryptStringSchema,
    handler: vault.encryptString,
  },