Skip to main content
Glama

VMware Storage

Author: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com This is a community-driven project by a VMware engineer, not an official VMware product. For official VMware developer tools see developer.broadcom.com.

English | 中文

VMware vSphere storage management: datastores, iSCSI, vSAN, and read-only Fibre Channel / multipath diagnostics — 15 MCP tools, domain-focused and lightweight.

Split from vmware-aiops for lighter context and local model compatibility.

License: MIT

Upgrading to 2.0

2.0 renames 10 of its MCP tools (all but the four that already started with a verb) so every name starts with a verb (e.g. fc_adapter_list → list_fc_adapters, storage_device_paths → list_storage_device_paths, storage_iscsi_add_target → add_iscsi_target). The full old → new table is in RELEASE_NOTES.md. Three tools also change a parameter: browse_datastore and scan_datastore_images take datastore_name (was ds_name, now the same as vmware-aiops' browse_datastore), and list_all_datastores gains an optional limit (same as vmware-monitor's). Everything else stays: same tools, safety gates and CLI commands (the CLI still takes the datastore name as before). If an agent prompt, script or ~/.vmware/rules.yaml names a tool, update it — though deny rules written with the old names keep working with vmware-policy ≥ 1.18 (vmware-audit policy lists any rule the renames widened), and vmware-pilot ≥ 1.13 translates old names in saved workflows. If an install older than 2.0 shares that rules.yaml, give it vmware-policy ≥ 1.18.2 too: it matches each rule against both the old and the new name, so one file serves both.

Related MCP server: vmware-nsx

Companion Skills

Skill

Scope

Tools

Install

vmware-aiops ⭐ entry point

VM lifecycle, deployment, guest ops, clusters

49

uv tool install vmware-aiops

vmware-monitor

Read-only monitoring, alarms, events, VM info

27

uv tool install vmware-monitor

vmware-vks

Tanzu Namespaces, TKC cluster lifecycle

20

uv tool install vmware-vks

vmware-nsx

NSX networking: segments, gateways, NAT, IPAM

33

uv tool install vmware-nsx-mgmt

vmware-nsx-security

DFW microsegmentation, security groups, Traceflow

21

uv tool install vmware-nsx-security

vmware-aria

Aria Ops metrics, alerts, capacity planning

28

uv tool install vmware-aria

Quick Install

# Via PyPI
uv tool install vmware-storage

# Or pip
pip install vmware-storage

Offline / Air-Gapped Install (from source)

This project uses the modern PEP 517 build system (hatchling), so there is no setup.py by design — that is expected, not a missing file. If you cloned the source and hit ERROR: File "setup.py" or "setup.cfg" not found ... editable mode currently requires a setuptools-based build, your pip is older than 21.3 and cannot do an editable (-e) install with a non-setuptools backend. Editable mode is a developer convenience, not needed to run the tool — do one of:

# From the source tree — a normal (non-editable) install builds a wheel:
pip install .              # NOT  pip install -e .

# ...or upgrade pip first, and editable works too:
pip install --upgrade pip && pip install -e .

For a truly air-gapped host, build the wheels on a connected machine and copy them over — the target then needs no network:

# On a connected machine, collect this package + its dependencies as wheels:
pip wheel . -w dist        # → dist/*.whl   (or: uv build, for just this package)

# Copy dist/ to the air-gapped host, then install offline:
pip install --no-index --find-links dist vmware-storage

Configuration

mkdir -p ~/.vmware-storage
cp config.example.yaml ~/.vmware-storage/config.yaml
# Edit with your vCenter/ESXi credentials

echo "VMWARE_MY_VCENTER_PASSWORD=your_password" > ~/.vmware-storage/.env
chmod 600 ~/.vmware-storage/.env

# Verify
vmware-storage doctor

MCP Tools (15)

Category

Tools

Type

Datastore

list_all_datastores, browse_datastore, scan_datastore_images, list_cached_images

Read

iSCSI

enable_iscsi, get_iscsi_status, add_iscsi_target, remove_iscsi_target, rescan_storage

Read/Write

vSAN

get_vsan_health, get_vsan_capacity, get_vsan_efficiency

Read

FC / multipath

list_fc_adapters, list_storage_device_paths

Read

Access

get_access_info — which account the server uses and whether it holds each tool's vSphere privileges (root folder)

Read

Auto-Remediation Patterns (PoC)

The patterns/ directory hosts L5 auto-remediation candidate patterns from the Enterprise Harness Engineering framework. The first PoC pattern, patterns/iscsi-target-stale-rescan.yaml, describes an iSCSI HBA rescan as a low-risk, reversible, repeatable operation. The pattern schema is documented here only — runtime enforcement is not yet wired up, so this is a reference design, not production auto-remediation.

Common Workflows

Set Up iSCSI Storage on a Host

  1. Enable iSCSI adapter: vmware-storage iscsi enable esxi-01

  2. Add target: vmware-storage iscsi add-target esxi-01 10.0.0.100

  3. Verify: vmware-storage iscsi status esxi-01

The add-target command automatically rescans storage. Use --dry-run to preview any write command first.

Find Deployable Images Across Datastores

  1. List all datastores: vmware-storage datastore list

  2. Scan for images: vmware-storage datastore scan-images datastore01

  3. Browse with a pattern: vmware-storage datastore browse datastore01 --pattern "*.iso"

vSAN Health Assessment

  1. Check health: vmware-storage vsan health Cluster-Prod

  2. Check capacity: vmware-storage vsan capacity Cluster-Prod

  3. If issues found, investigate with vmware-monitor for alarms and events

Check Fibre Channel Paths

  1. Dead or disabled paths behind a datastore: vmware-storage paths devices --datastore ds-fc-01

  2. Hosts that see a shared device through a different number of paths than their peers, or not at all: vmware-storage paths devices --cluster Cluster-Prod --only-differences

  3. WWPNs for the SAN team: vmware-storage paths fc-adapters --cluster Cluster-Prod

Hosts that could not be read are listed in hosts_not_read and are never reported as missing a device. Path states are reported as vSphere reports them — standby is not flagged.

CLI

# Datastore
vmware-storage datastore list
vmware-storage datastore browse datastore01
vmware-storage datastore scan-images datastore01

# iSCSI
vmware-storage iscsi status esxi-01
vmware-storage iscsi enable esxi-01
vmware-storage iscsi add-target esxi-01 192.168.1.100
vmware-storage iscsi remove-target esxi-01 192.168.1.100
vmware-storage iscsi rescan esxi-01

# vSAN
vmware-storage vsan health Cluster-Prod
vmware-storage vsan capacity Cluster-Prod

# Fibre Channel / multipath (read-only)
vmware-storage paths fc-adapters --cluster Cluster-Prod
vmware-storage paths devices --datastore ds-fc-01

# Diagnostics
vmware-storage doctor

MCP Server

After uv tool install vmware-storage, start the MCP server with one command (v1.5.15+):

# Recommended — single command, no network re-resolve
vmware-storage mcp

# With a custom config path
VMWARE_STORAGE_CONFIG=/path/to/config.yaml vmware-storage mcp

# Or via Docker
docker compose up -d

Agent Configuration

Add to your AI agent's MCP config:

{
  "mcpServers": {
    "vmware-storage": {
      "command": "vmware-storage",
      "args": ["mcp"],
      "env": {
        "VMWARE_STORAGE_CONFIG": "~/.vmware-storage/config.yaml"
      }
    }
  }
}
# Run without installing (requires PyPI access each launch)
uvx --from vmware-storage vmware-storage mcp

# Legacy entry point (still works, kept for backward compatibility)
vmware-storage-mcp

Behind a corporate TLS proxy? uvx may fail with invalid peer certificate: UnknownIssuer. Use the recommended vmware-storage mcp form above (no network needed), or set UV_NATIVE_TLS=true.

Why a Separate Skill?

vmware-aiops has 61 MCP tools — too heavy for local LLMs (7B-14B). By splitting storage into its own skill:

  • 15 tools — fits comfortably in small model context windows

  • Domain-focused — storage admins get only what they need

  • Least privilege — can run under a vCenter service account with storage read-only permissions

  • Composable — use alongside vmware-monitor or vmware-aiops as needed

Version Compatibility

Python: 3.10+ (since v1.5.27 — previously 3.11+). Tested on 3.10 / 3.11 / 3.12.

vSphere / VCF

Support

Notes

VCF 9.1 / vSphere 9.1

Full

Released 2026-05-12. pyVmomi+vSAN SDK <10.0 works via SOAP.

VCF 9.0 / vSphere 9.0

Full

pyVmomi 8.0.3+ with bundled vSAN SDK connects to vSphere 9.

8.0

Full

vSAN SDK built into pyVmomi 8.0.3+

7.0

Full

All storage APIs work

6.7

Compatible

iSCSI + datastore features work; vSAN limited

Official Broadcom References

Safety

Feature

Description

Read-heavy

11/15 tools are read-only

Preview by default (MCP)

The 4 write tools take confirm (default false): a call without it changes nothing and returns blast_radius (host, adapters, and for target removal the paths, devices and datastores behind the target). confirm=true is refused when a datastore would lose every path or part of the blast radius could not be read. dry_run is a deprecated alias

Input validation

IP addresses and ports validated before iSCSI operations

Audit logging

All operations logged to ~/.vmware-storage/audit.log

No VM operations

Cannot create, delete, or modify VMs

Credential safety

Passwords only from environment variables, never config files

Troubleshooting

Problem

Cause & Fix

iSCSI enable fails with "already enabled"

Not an error — adapter is already active. Run iscsi status to see configured targets.

"Datastore not found" when browsing

Datastore names are case-sensitive. Run datastore list to get the exact name.

get_vsan_health returns overall_health: null

null = not asked (see health_not_queried_reason), never a measurement; a string is always vSAN's own answer, including its own "unknown". Usual cause: connected to standalone ESXi, but the health service runs in vCenter.

Rescan doesn't discover new LUNs

Wait 15-30 seconds after adding targets, then rescan again. Verify target IP is reachable from ESXi.

"Password not found" error

Variable names follow VMWARE_<TARGET_UPPER>_PASSWORD (hyphens → underscores). Check ~/.vmware-storage/.env.

doctor fails with "no vSphere role", or every command fails with "session is not authenticated"

The login works but the account has no vSphere role. Assign one (Read-Only or higher) on the vCenter root folder (Administration > Access Control > Global Permissions). Mid-run, the same fault can be an expired session: run the command again.

Connection timeout to vCenter

Use vmware-storage doctor --skip-auth to bypass auth checks on high-latency networks.

"Datastore browse did not finish within Ns"

The datastore is very large or busy. Narrow the search with a sub-path and a specific pattern (e.g. datastore browse ds01 --path templates --pattern "*.ova") instead of browsing the root — do not just retry the same broad browse.

Remote access (HTTPS) and limiting tools

By default vmware-storage mcp speaks stdio to one local client and offers every tool. Two options change that (vmware-policy ≥ 1.21.0).

Serve over HTTPS so clients on other machines can connect. Every caller needs a bearer token:

vmware-audit token create alice          # prints the token once; give it to alice
vmware-audit token list                  # names only
vmware-audit token revoke alice          # refused from its next request, no restart
vmware-storage mcp --transport https --host 0.0.0.0 --port 8443 \
    --cert /etc/vmware-mcp/server.pem --key /etc/vmware-mcp/server-key.pem \
    --public-name mcp.example.com

Connect a client (Claude Code shown; any MCP client that supports streamable HTTP and custom headers works):

claude mcp add --transport http vmware-storage https://mcp.example.com:8443/mcp \
    --header "Authorization: Bearer $VMWARE_MCP_TOKEN"
{
  "mcpServers": {
    "vmware-storage": {
      "type": "http",
      "url": "https://mcp.example.com:8443/mcp",
      "headers": { "Authorization": "Bearer ${VMWARE_MCP_TOKEN}" }
    }
  }
}
  • The server will not start without a token, refuses Host/Origin values outside --public-name, and checks before it binds that unauthenticated requests get 401. Use a certificate your clients trust for those names.

  • Behind a TLS-terminating reverse proxy on the same machine use --transport http --host 127.0.0.1 --public-name mcp.example.com and pass the Authorization header through.

  • Behind a load balancer or gateway on another machine, keep --transport https (a self-signed certificate is fine), list in --public-name the host name the balancer sends as Host, and have it forward Authorization. Its health probe can use GET /healthz, which needs no token and returns only {"status": "ok"} (vmware-policy ≥ 1.23.0).

  • Send traceparent or X-Request-ID with each request to have it stored on the audit row; vmware-audit log --correlation-id ID then finds the calls behind one platform request.

  • The audit log records each caller as token:<name>. Calls run side by side, also on the same target: the server keeps up to VMWARE_MCP_POOL_SIZE (default 2) sessions per target, each one a login on that target, and a call waits at most 300 s for a free session (vmware-policy ≥ 1.22.0).

  • Everyone who can reach the endpoint acts with this server's account. Tokens identify callers; they grant nothing on the platform. Run one endpoint per privilege level. vmware-storage access-info shows which account that is and what it may do.

  • Several people or roles on one endpoint: run vmware-audit roles enable once, then give each token a role (vmware-audit token create NAME --role reader, or a role in roles.yaml naming tools and targets; vmware-policy ≥ 1.24.0). A role limits what the token may call on this endpoint; it cannot grant more than the account has. See vmware-policy's README, "Roles for network callers".

Offer only read tools, plus the writes you choose:

vmware-storage mcp --expose read --allow-write enable_iscsi
# or: VMWARE_STORAGE_MCP_EXPOSE=read VMWARE_STORAGE_MCP_ALLOW_WRITE=enable_iscsi vmware-storage mcp

Tools not offered do not appear in the client's tool list. A bad value or an unknown write tool stops the server (exit 2). This limits what clients are offered; it is not authorization, so the account itself should be least-privilege.

Details: skills/vmware-storage/references/setup-guide.md ("Serving MCP over HTTPS", "Limiting which tools are offered").

License

MIT

Available Tools

15 tools
add_iscsi_targetA

[WRITE] Add an iSCSI send (dynamic discovery) target to an ESXi host's software iSCSI adapter, then automatically rescan all HBAs and VMFS volumes to discover new LUNs.

Without confirm=True this only previews: it returns blast_radius (the adapter, the send targets configured now, and the adapters the rescan touches) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Refused when software iSCSI is not enabled (run enable_iscsi first) or the host's storage view cannot be read. A duplicate address:port returns action "noop". No separate rescan_storage call is needed afterwards. Returns a dict.

ParametersJSON Schema
NameRequiredDescriptionDefault
portNoiSCSI TCP port, 1-65535 (default 3260).
targetNoOptional vCenter/ESXi target name from config.
addressYesiSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error).
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
host_nameYesESXi host name as shown in vCenter inventory.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark this as non-readOnly, non-idempotent, and non-destructive; the description adds rich context beyond them: what the preview returns (blast radius contents), that nothing changes without confirm, refusal conditions, and that a duplicate address:port yields action "noop".

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core action in the first sentence, then the safety/gating rules. Slightly dense but nearly every clause carries actionable information about preview behavior or refusal conditions; no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 6-parameter mutation tool with no output schema, the description covers the mutation semantics, preview/apply gating, failure modes, and the side-effect rescan. Coverage is strong, though the returned dict's shape is only named (blast_radius, action) rather than detailed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% so parameters are already documented, but the description adds meaningful semantics for the gating flag (confirm=True applies, otherwise preview) and reinforces the deprecated dry_run alias relationship and the enable_iscsi dependency. This exceeds the baseline 3 without fully restating every field.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb and resource: adding an iSCSI send (dynamic discovery) target to an ESXi host's software iSCSI adapter, plus the automatic HBA/VMFS rescan. It is clearly distinguishable from siblings like remove_iscsi_target, enable_iscsi, and rescan_storage.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states the confirm=False preview default and instructs the agent to show the blast radius and not set confirm=True on its own; it also says no separate rescan_storage call is needed and directs to enable_iscsi when software iSCSI is disabled. When-to-use and prerequisites are fully spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browse_datastoreA
Read-onlyIdempotent

[READ] Search a datastore folder and all its subfolders for files.

Use this for arbitrary files or a glob; prefer scan_datastore_images for deployable images. datastore_name comes from list_all_datastores.

Returns the list envelope: 'items' holds one row per file, and 'returned'/'total'/'truncated' state whether the listing is complete. All matches are returned, so truncated is always false.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathNoDatastore-relative folder to start from (empty for root); a leading '/' or '..' is refused. The search is recursive, so the root returns matches from every folder; each row's ds_path is "[ds] dir/file".
targetNoOptional vCenter/ESXi target name from config.
patternNoGlob pattern to filter files (e.g. "*.ova", "*.iso").*
datastore_nameYesDatastore name.

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, openWorld), so the bar is lower. The description still adds real behavioral context beyond them: the search is recursive by default, the response is a list envelope with items/returned/total/truncated, and truncation never occurs because all matches are returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the '[READ]' marker and the core action, then the routing guidance, then the setup hint, then the return contract. Four short sentences, no filler, nothing repeated from the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the burden of explaining return values — and it does, describing the list envelope fields and the truncation invariant. With 4 params at full schema coverage and declared annotations, nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the path/pattern/target semantics are already documented in the schema and the baseline is 3. The description adds provenance meaning beyond the schema by stating datastore_name comes from list_all_datastores, and reinforces the recursive-glob behavior that ties pattern usage together.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource+scope: '[READ] Search a datastore folder and all its subfolders for files.' It explicitly distinguishes itself from the sibling scan_datastore_images by naming it, so an agent can route without opening a second schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states when to use this tool ('arbitrary files or a glob') and names the preferred alternative for the other case ('prefer scan_datastore_images for deployable images'). It also tells the agent where the required datastore_name value comes from (list_all_datastores), closing the setup loop.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

enable_iscsiA

[WRITE] Enable the software iSCSI adapter (vmhba) on an ESXi host.

Required prerequisite before add_iscsi_target. Without confirm=True this only previews: it returns blast_radius (the host, its current adapters, whether the software adapter already exists) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Already enabled returns action "noop" with the HBA device and IQN. Non-disruptive (no reboot, no impact on existing datastores). Refused when the host's storage view cannot be read. Returns a dict; check state first with get_iscsi_status.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
host_nameYesESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint=false, idempotentHint=false, destructiveHint=false; the description adds far more: preview-vs-apply semantics, the exact contents of the blast_radius preview, noop behavior for an already-enabled adapter, non-disruptive guarantee (no reboot, no datastore impact), and the refusal condition when the storage view is unreadable. No contradiction with the non-destructive annotation, since enabling an adapter does not destroy anything.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action, then prerequisites, then the confirm contract and side-effect profile. Sentences are short, imperative and non-redundant; nothing could be deleted without losing operational information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description compensates by describing the return shape ('returns a dict', action 'noop' with HBA device and IQN) plus the preview payload. For a 4-parameter, open-world write tool this covers everything an agent needs to call it safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds workflow meaning the schema lacks: it explains what confirm=False actually returns (blast_radius with host, current adapters, whether the software adapter exists) and how to interpret confirm=True, and it ties host_name to get_iscsi_status for verification. This is real semantic value beyond the mechanical schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb and resource: 'Enable the software iSCSI adapter (vmhba) on an ESXi host.' It also names related siblings (add_iscsi_target, get_iscsi_status), so an agent can place it precisely in the storage workflow without reading any other tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit ordering ('Required prerequisite before add_iscsi_target'), an explicit alternative for state checking ('check state first with get_iscsi_status'), and an explicit prohibition ('Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet'). This is the rare case of when/when-not/alternatives all stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_access_infoA
Read-onlyIdempotent

[READ] Which account this server uses, and whether it holds each tool's vSphere privileges.

Use this when a tool fails with NoPermission, or before a write, to check what the configured account may do. Asks vCenter/ESXi about the current session (needs only System.View, so any account can ask about itself). Returns target, account, the privilege states, and for one tool its requires/verdict/meaning; without tool, every tool grouped by verdict. Gotchas: privileges are checked on the root folder only. A verdict of not_granted_at_root is NOT "no access" — the privilege may be granted on a specific cluster, host or datastore, where the tool then works. undetermined means vCenter did not answer; never read it as granted.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolNoOne tool name on this server, e.g. "add_iscsi_target". Omit to summarize every tool.
targetNoOptional vCenter/ESXi target name from config.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), and the description adds substantial context beyond them: the required privilege, what is returned (target, account, privilege states per tool or grouped by verdict), and three concrete gotchas about root-folder checking, not_granted_at_root, and undetermined.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the purpose, then usage, then return shape, then a labeled 'Gotchas' block. Despite its length, every sentence carries distinct information an agent needs (privilege requirement, verdict semantics, undetermined handling) with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the return-value burden and does so thoroughly, describing both output modes and the meaning of each verdict. An agent has everything needed to call it and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning the schema does not: passing tool yields that tool's requires/verdict/meaning, while omitting it returns every tool grouped by verdict. This clarifies the behavioral difference between the two modes rather than just restating parameter names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening line states a specific verb and resource: it reports which account the server uses and whether that account holds each tool's vSphere privileges. This is clearly distinct from every sibling (storage/datastore tools), so an agent can route to it without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit triggering conditions: 'when a tool fails with NoPermission, or before a write.' It even notes the low privilege requirement (System.View), removing any doubt about whether it is safe or possible to call in a failing state.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_iscsi_statusA
Read-onlyIdempotent

[READ] Get the software iSCSI adapter state and configured send targets for an ESXi host.

Returns {host, enabled, hba_device, iqn, send_targets: [{address, port}]}; when the adapter is disabled, enabled=false with null device/IQN and an empty target list. Use this before enable_iscsi / add_iscsi_target / remove_iscsi_target to check prerequisites, and afterwards to verify the change took effect.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
host_nameYesESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), but the description adds meaningful behavior beyond them: the exact return shape and the disabled-adapter edge case (enabled=false with null device/IQN and empty target list). This is real disclosure the annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the action, then the return contract, then the routing guidance. No filler; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by specifying the return structure and the disabled-state behavior, and it points to the sibling tools for the follow-up actions. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters (target, host_name) are already documented, including the pointer to list_esxi_hosts for valid names. The description adds no parameter-level detail, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: 'Get the software iSCSI adapter state and configured send targets for an ESXi host.' It clearly distinguishes itself from adjacent siblings such as list_fc_adapters (different adapter type) and the mutating enable_iscsi/add_iscsi_target tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: before enable_iscsi / add_iscsi_target / remove_iscsi_target to check prerequisites, and afterwards to verify the change. Names the specific alternatives and the conditions that select them.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_vsan_capacityA
Read-onlyIdempotent

[READ] Get space usage of a cluster's vSAN datastore for capacity planning.

Returns {cluster_name, vsan_enabled, datastore_name, accessible, total_gb, used_gb, free_gb, usage_pct}. When the vSAN datastore is inaccessible (accessible=false) the four figures are null with a message, not 0 — vCenter answers 0 for a datastore it cannot reach, and 0 GB used reads as a healthy empty datastore. accessible=null means the summary did not say. If vSAN is not enabled on the cluster, returns vsan_enabled=false with an explanatory message rather than an error; errors only if the cluster name is not found. Use get_vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage. No side effects.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
cluster_nameYesCluster name exactly as shown in vCenter. Errors if the cluster is not found.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover the safety profile (readOnly, idempotent, non-destructive), and the description adds substantial beyond-annotation behavior: null vs 0 for inaccessible datastores with the explicit rationale that vCenter returns 0 and '0 GB used reads as a healthy empty datastore', accessible=null meaning the summary was silent, and vsan_enabled=false rather than an error. This is exactly the kind of guidance an agent cannot infer from structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the read tag and purpose, then the return shape, then the non-obvious failure semantics, then sibling routing. Every sentence carries information; the only near-redundancy is the trailing 'No side effects.'

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description carries the return contract itself by enumerating the fields and the three accessible states. Combined with the stated error condition and sibling alternatives, nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters are documented in the schema, including the 'errors if the cluster is not found' note that the description repeats. The description adds no new parameter-level syntax or format detail, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get space usage of a cluster's vSAN datastore for capacity planning') with the exact scope named. It clearly separates itself from get_vsan_health and list_all_datastores by naming both and their domains.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit routing: 'Use get_vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage.' It also states the one error condition (cluster name not found), so an agent knows the boundary of valid use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_vsan_efficiencyA
Read-onlyIdempotent

[READ] Get vSAN data-efficiency (deduplication + compression) status for a cluster.

Returns {cluster_name, vsan_enabled, dedup_enabled, compression_enabled}. Reads it via the vSAN Management SDK (VsanVcClusterConfigSystem), not base pyVmomi. When vSAN reports no data-efficiency config (space efficiency off, or an OSA cluster without it), dedup_enabled/compression_enabled come back null with a message rather than a fabricated false. Errors only if the cluster name is not found. Use get_vsan_capacity for space usage and get_vsan_health for disk-group layout. No side effects.

Note: vSAN Global Deduplication and vSAN-to-vSAN replication are NOT exposed here — neither has a verified SDK object (global dedup has no distinct field; v2v replication lives in the separate vSAN Data Protection plane). Use the vCenter/vSAN UI for those.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
cluster_nameYesCluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description goes well beyond: it discloses the SDK path used, the null-with-message semantics when space efficiency is off (avoiding a fabricated false), the exact error trigger, and the two capabilities deliberately NOT exposed. This is precisely the behavioral context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the READ marker, purpose, and return shape, then constraints and limits in a trailing note. Dense and well-organized, though the final note is slightly long for two capabilities that are simply unavailable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description supplies the return fields, the null-vs-false edge case, the error condition, the SDK provenance, and cross-references to related tools. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already documents both target and cluster_name (including the case-sensitivity and error-on-not-found note). The description adds little parameter-specific meaning beyond restating the error condition, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get vSAN data-efficiency (deduplication + compression) status for a cluster') and immediately distinguishes itself from siblings get_vsan_capacity and get_vsan_health. An agent can tell exactly what this returns without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes the agent: use get_vsan_capacity for space usage and get_vsan_health for disk-group layout, and use the vCenter/vSAN UI for Global Dedup and v2v replication. It also states the sole error condition (cluster name not found), so when-to-use and when-not-to-use are both covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_vsan_healthA
Read-onlyIdempotent

[READ] Get vSAN overall health, per-check-group health, and per-host disk-group layout for a cluster.

Returns {cluster_name, vsan_enabled, overall_health, overall_health_description, health_queried, health_not_queried_reason, health_checked_at, test_groups: [{group_id, group_name, group_health}], host_count, hosts_read, hosts_not_read: [{host, reason}], disk_groups_complete, disk_groups: [{host, cache_disk, cache_size_gb, capacity_disks}]}. overall_health is what vSAN reports — green / yellow / red, and sometimes "unknown", which is vSAN's own answer. When the health service could not be asked at all, overall_health is null and health_queried is false with the reason: a null is "not measured", never a measurement. health_checked_at is the age of vCenter's cached summary (the same one Skyline Health shows); this tool reads the cache rather than triggering a full health run. Check disk_groups_complete before treating disk_groups as the cluster's inventory: vCenter cannot read a disconnected or notResponding host, and an empty disk_groups on such a cluster does NOT mean it has none — the unread hosts are named in hosts_not_read and in the message. If vSAN is not enabled, returns vsan_enabled=false with a message rather than an error. Use get_vsan_capacity for space usage instead. No side effects.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
cluster_nameYesCluster name exactly as shown in vCenter. Errors if the cluster is not found.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), yet the description adds substantial context: it reads the cache rather than running a full health check, explains that a null overall_health means 'not measured' and never a measurement, warns that disk_groups is incomplete when hosts are unread, and notes vSAN-disabled returns a message rather than an error.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, then the return shape, then the important caveats (null semantics, disk_groups_complete, vsan-disabled path). It is dense and each sentence earns its place, though the return-shape enumeration is lengthy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fully carries the burden: it enumerates the return shape and explains the semantics of the ambiguous fields (overall_health nulls, health_checked_at, disk_groups_complete). Nothing an agent needs to interpret the result is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% (both target and cluster_name are documented, including the 'errors if not found' behavior), so the schema carries the parameter burden. The description adds no parameter-specific detail beyond what the schema states, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Get) plus resource (vSAN health) and scope: overall health, per-check-group health, and per-host disk-group layout for a cluster. It explicitly distinguishes itself from the sibling get_vsan_capacity, so an agent can route between them without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Names an alternative explicitly ('Use get_vsan_capacity for space usage instead') and clarifies that it reads vCenter's cached summary rather than triggering a full health run, which tells the agent when this is the cheap option. It lacks broader when-not guidance, but the routing context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_all_datastoresA
Read-onlyIdempotent

[READ] List all datastores with capacity, usage percentage, and accessibility.

Use this first for the datastore_name that browse_datastore and scan_datastore_images require.

Returns the list envelope: 'items' holds one row per datastore, and 'returned'/'total'/'truncated' state whether the listing is complete. Every datastore is enumerated before limit is applied, so total is the real count and truncated is true only when limit cut rows off.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax datastores to return (None = all).
targetNoOptional vCenter/ESXi target name from config.

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the safety profile is covered. The description adds genuinely non-obvious behavior: enumeration happens before limit is applied, so 'total' is the real count and 'truncated' is only true when limit cut rows off. That pagination semantics is real value beyond the annotations, though it stops short of explaining default limit or the accessibility field's meaning.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the [READ] marker and the core action, then the workflow routing, then return-shape semantics. Three tight sentences with no filler; every clause carries information the agent uses.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description compensates by documenting the list envelope (items, returned, total, truncated). Combined with the routing guidance and the 100%-covered input schema, an agent has everything needed to call this correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (both params documented), so the baseline would be 3, but the description goes further by explaining the interaction between 'limit' and the returned total/truncated values. It clarifies that total reflects the full enumeration rather than the truncated list, which meaningfully disambiguates the limit parameter. It adds nothing about 'target', hence not a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) and resource (datastores), and names the exact fields returned (capacity, usage percentage, accessibility). It also distinguishes itself from siblings by naming browse_datastore and scan_datastore_images as downstream consumers, so an agent can place it in the workflow without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use this first for the datastore_name that browse_datastore and scan_datastore_images require', which names both the alternative tools and the condition that selects this one. The sequencing guidance (call this before the others) is exactly the when-to-use signal an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_cached_imagesA
Read-onlyIdempotent

[READ] List deployable images (OVA/OVF/ISO/VMDK) from the local cache registry — instant, no vCenter connection or datastore I/O.

Reads ~/.vmware-storage/image_registry.json, which scan_datastore_images fills; results may be stale, and are empty until a scan has run. For a live listing use scan_datastore_images instead. Returns the list envelope: 'items' holds {target, datastore, name, ds_path, size_mb, type, modified} and is empty if nothing matches, while 'returned'/'total'/'truncated' state whether the listing is complete. The whole registry is filtered in memory, so truncated is always false.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOnly rows scanned from this vCenter/ESXi target (a name from config, as scan_datastore_images takes; an unknown name is refused with the configured ones). Rows cached before rows recorded their target appear only when this is omitted. Omit for every target.
datastoreNoFilter by exact datastore name. Omit for all datastores.
image_typeNoFilter by file extension without the dot, e.g. "ova", "iso", "ovf", "vmdk" (case-insensitive). Omit for all types.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), so the bar is lower. The description nonetheless adds real behavior: it reads ~/.vmware-storage/image_registry.json, may be stale, is empty until a scan runs, and is filtered entirely in memory so 'truncated' is always false. This is substantially more than the annotations convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded '[READ]' tag and one-line purpose, followed by the data-source caveat and the return-envelope semantics. Every sentence carries distinct information; nothing is redundant with the name or schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description supplies the return contract (items holding {target, datastore, name, ds_path, size_mb, type, modified}, plus returned/total/truncated). Combined with full param coverage and annotations, an agent has everything needed to call and interpret it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents target/datastore/image_type in depth. The description adds only an indirect note that the whole registry is filtered in memory, which does not add per-parameter meaning beyond the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) plus resource (deployable images OVA/OVF/ISO/VMDK) and scope (from the local cache registry). It explicitly distinguishes itself from the sibling scan_datastore_images, so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Names the alternative (scan_datastore_images) and the condition that selects it ('For a live listing use scan_datastore_images instead'). It also states the cache is populated by a prior scan and may be stale/empty until one has run, giving clear when-and-when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_fc_adaptersA
Read-onlyIdempotent

[READ] List Fibre Channel HBAs (FC and FCoE) per ESXi host: vmhba, model, driver, status, port type, WWPN/WWNN and reported link speed.

Use this for "which FC adapters does each host have" or to find a host's WWPNs; use list_storage_device_paths for devices and paths behind them. Scope with cluster OR host; with neither, every host on the target is read (only the adapter list is fetched, so this stays cheap).

Returns the list envelope ('items', 'returned', 'total', 'truncated', 'next_offset') plus hosts_without_fc (read, no FC HBA) and hosts_not_read [{host, reason}]. A host in hosts_not_read was NOT read — never report it as having no FC adapters. speed_reported is the raw vSphere value: the API documents bits per second, but hosts commonly report Gbit/s, so it is not converted. Reads host config only; no rescans.

ParametersJSON Schema
NameRequiredDescriptionDefault
hostNoESXi host name exactly as in vCenter inventory (FQDN or IP).
limitNoRows per page, 1-200 (default 50).
offsetNoRows to skip; pass the previous page's next_offset.
targetNoOptional vCenter/ESXi target name from config.
clusterNoCluster name exactly as in vCenter. Omit to use host or the whole target.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, yet the description adds substantial context beyond them: the hosts_not_read contract ('never report it as having no FC adapters'), the speed_reported caveat that vSphere reports Gbit/s despite documented bits-per-second, and that it reads host config only with no rescans. These are exactly the behavioral traps an agent needs to avoid misreporting.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and usage in the first two sentences, then the return-shape and caveat details. Dense and mostly waste-free, though the block is long enough that the hosts_not_read and speed_reported caveats could be tightened slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description carries the return burden and does so: it documents the list envelope (items, returned, total, truncated, next_offset) plus the two non-obvious extra fields (hosts_without_fc, hosts_not_read with reason). Nothing an agent needs to call and interpret this tool correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the documented parameters already stand on their own (limit, offset, next_offset paging, exact-match naming). The description still adds value by clarifying the precedence between cluster, host, and target ('with neither, every host on the target is read') and by noting the operation stays cheap at that scope.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource ('List Fibre Channel HBAs (FC and FCoE) per ESXi host') and enumerates the returned fields (vmhba, model, driver, status, port type, WWPN/WWNN, link speed). It explicitly distinguishes itself from the sibling list_storage_device_paths, so an agent can route correctly without reading either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives concrete use cases in the user's own words ('which FC adapters does each host have', 'to find a host's WWPNs') and names the alternative (list_storage_device_paths) with the condition that selects it (devices and paths behind the adapters). Scope semantics (cluster OR host; neither = all hosts on target) are also spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_storage_device_pathsA
Read-onlyIdempotent

[READ] SCSI multipath state per device (NAA) across the hosts of one scope: which hosts see it, path counts and states, working paths, adapters, target WWPN, PSP/SATP policy, and the VMFS datastores on it.

Use for: "does datastore X have dead or disabled paths on any host" (datastore=X), "which hosts see naa.… and through which adapters" (cluster + device), "do hosts see different numbers of paths" (cluster + only_differences=true), "which devices and datastores depend on vmhba2" (host + adapter). Exactly one of cluster, host or datastore is required — this tool will not read every host at once.

Per device: shared (reached over FC/iSCSI or seen by 2+ hosts), seen_by, not_seen_on (hosts that WERE read and do not see a shared device; a disk inside one host is never listed), path_count_differs, states_needing_attention (dead/disabled only) and per-host {paths_total, by_state, working_paths, policy, satp, adapters}; with adapter set, also paths_via_adapter and only_paths_via_adapter (matched by vmhba name, which can be a different card on each host of a cluster). Per-path detail is included when device or datastore is given. Devices needing attention sort first; 'summary' counts the whole result, not just this page.

Gotchas: hosts in hosts_not_read were NOT read (refused, not connected — vCenter's copy of a lost host's config may be stale — or missing from the reply) and are never in not_seen_on — when complete is false, say which hosts are unknown instead of concluding a device is missing. States are as vSphere reports them: 'standby' can be normal (active/passive arrays), and a path count does not prove independent fabrics. NFS/vSAN/vVol datastores have no SCSI paths (scope_note says so). NVMe-oF namespaces may not appear. No rescans.

ParametersJSON Schema
NameRequiredDescriptionDefault
hostNoESXi host name exactly as in vCenter inventory.
limitNoDevices per page, 1-200 (default 50).
deviceNoCanonical name (e.g. naa.60060e80...) or display name; case-insensitive.
offsetNoDevices to skip; pass the previous page's next_offset.
targetNoOptional vCenter/ESXi target name from config.
adapterNovmhba name (e.g. vmhba2) to keep devices with a path through it.
clusterNoCluster name exactly as in vCenter.
datastoreNoDatastore name; scopes to the hosts that mount it and its VMFS extents.
only_differencesNoKeep only devices whose visibility or path count differs across the hosts that were read.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), yet the description adds substantial behavior: hosts_not_read semantics ('refused, not connected... vCenter's copy may be stale'), how to interpret 'complete: false', that 'standby' can be normal on active/passive arrays, that a path count does not prove independent fabrics, and 'No rescans.' This is exactly the value-add the description should provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is organized under clear signposts ('Use for:', 'Per device:', 'Gotchas:') and front-loads purpose before detail. It is dense, and the long per-device field enumeration is heavier than strictly necessary, but for a 9-parameter tool most sentences carry real information rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description accepts the full burden of describing returns — it lists per-device fields, per-path detail conditions, and the 'summary counts the whole result, not just this page' pagination note — plus caveats about NFS/vSAN/vVol and NVMe-oF. Nothing an agent needs to invoke or interpret the result correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema: it enforces the 'exactly one of cluster/host/datastore' mutual-exclusion rule, clarifies that adapter matches by vmhba name which 'can be a different card on each host', and explains only_differences scoping. These semantics are not present in the schema fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence gives a specific verb ([READ]), resource (SCSI multipath state per device/NAA), and scope (across hosts of one scope), then enumerates what it reports (path counts/states, adapters, target WWPN, PSP/SATP, VMFS datastores). This lets an agent distinguish it from siblings like list_fc_adapters or list_all_datastores without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Four concrete 'Use for:' scenarios map directly to parameter combinations (datastore=X; cluster+device; cluster+only_differences=true; host+adapter). The constraint 'Exactly one of cluster, host or datastore is required — this tool will not read every host at once' is an explicit when-not rule, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

remove_iscsi_targetA
Destructive

[WRITE] Remove an iSCSI send target from an ESXi host's software iSCSI adapter, then rescan all HBAs and VMFS volumes.

Destructive: LUNs served only through this target become inaccessible after the rescan. Without confirm=True this only previews: it returns blast_radius (the static targets it discovered, the paths that go with them, the devices and VMFS datastores that lose all or some paths) and changes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user asked earlier — they have not seen what it cuts off yet. Refused when a datastore would lose every path (unmount it first), when the address:port is not configured or software iSCSI is disabled, and when any path or static target cannot be attributed. Reversible only by re-adding via add_iscsi_target. Returns a dict.

ParametersJSON Schema
NameRequiredDescriptionDefault
portNoConfigured iSCSI TCP port, 1-65535 (default 3260).
targetNoOptional vCenter/ESXi target name from config.
addressYesConfigured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
host_nameYesESXi host name as shown in vCenter inventory.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag destructiveHint=true, but the description adds far more: exactly what is destroyed (LUNs served only through this target become inaccessible after rescan), the preview/confirm gate semantics, refusal conditions, and that it is reversible only by re-adding. This is precisely the context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with a [WRITE] tag followed immediately by verb+resource+side effect, then the destructive warning and gating rules. Each sentence carries distinct, necessary information with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive six-parameter tool with no output schema, the description covers the mutation's blast radius, the confirm gating, refusal cases, reversibility, and even describes the returned blast_radius dict. Nothing an agent needs to invoke it safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all six parameters (including confirm/dry_run), giving a baseline of 3. The description nonetheless adds behavioral meaning to confirm (preview vs apply, the 'do not set on your own' constraint) and implies the exact-match requirement on address, going beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Remove) and resource (iSCSI send target) plus the affected scope (ESXi host's software iSCSI adapter, then rescan HBAs and VMFS volumes). This clearly distinguishes it from siblings like add_iscsi_target and rescan_storage without needing either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly defines the preview-vs-apply workflow (without confirm=True it previews), the human-in-the-loop requirement (show blast_radius and get explicit decision; do not set confirm on your own), and the refusal conditions (datastore losing every path, unconfigured address, disabled iSCSI, unattributable paths). It also names the reversal path via add_iscsi_target.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

rescan_storageA

[WRITE] Rescan all HBAs and VMFS volumes on an ESXi host to discover newly presented LUNs and datastores.

Use this when a storage array presents new LUNs, or after out-of-band SAN changes. Not needed after add_iscsi_target / remove_iscsi_target — those rescan automatically. Without confirm=True this only previews: it returns blast_radius (the host, every adapter the rescan touches, the mounted VMFS volumes) and changes nothing. Show it to the user. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. Deletes nothing, but it is I/O-visible on the host and may take a minute or two with many paths. Refused when the host's storage view cannot be read. Returns a dict.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNoOptional vCenter/ESXi target name from config.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
host_nameYesESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found.

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only give the coarse safety profile (readOnly=false, destructive=false, idempotent=false, openWorld=true); the description adds substantially more: a preview/confirm gate, the exact blast_radius payload, an anti-pattern warning against auto-confirming, I/O visibility and duration on busy hosts, and a refusal condition. This is well beyond what structured fields convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the operation class and action, then ordered by importance: purpose, usage, when-not, preview semantics, safety warning, cost/refusal, return shape. No sentence is filler despite the multi-sentence length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by stating the return shape (a dict) and the blast_radius contents, plus refusal conditions and timing expectations. An agent has everything needed to call and gate this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description still adds meaning the schema lacks: it explains what the confirm preview actually returns (blast_radius listing host, adapters, mounted VMFS volumes) and why the agent must not set confirm=True without user review. The only untouched param is the deprecated dry_run alias.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (rescan) plus the resources touched (all HBAs and VMFS volumes on an ESXi host) and the goal (discover newly presented LUNs and datastores). The [WRITE] prefix signals the mutation class, and it explicitly differentiates itself from add_iscsi_target/remove_iscsi_target.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('when a storage array presents new LUNs, or after out-of-band SAN changes') and explicit when-not ('Not needed after add_iscsi_target / remove_iscsi_target — those rescan automatically'). It also prescribes workflow gating around confirm=True, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scan_datastore_imagesA
Read-onlyIdempotent

[READ] Scan a datastore for deployable images (OVA, ISO, OVF, VMDK).

Use this for a live scan of one datastore; prefer list_cached_images for a cached answer. datastore_name comes from list_all_datastores.

Returns the list envelope: 'items' holds one row per image, and 'returned'/'total'/'truncated' state whether the listing is complete. All patterns are browsed, so truncated is always false.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathNoDatastore-relative subdirectory (empty for root); a leading '/' or '..' is refused. The images found replace this datastore's cached entries under that folder, for list_cached_images.
targetNoOptional vCenter/ESXi target name from config.
datastore_nameYesDatastore name.

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds live-vs-cached semantics and describes the return envelope ('items', 'returned'/'total'/'truncated') that no output schema provides. It also discloses that 'all patterns are browsed, so truncated is always false', a behavioral guarantee not derivable from annotations. It does not mention that the scan repopulates cached entries (that detail lives only in the schema).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short blocks: purpose, routing guidance, return contract. Front-loaded with the verb and resource, no filler, and every sentence carries information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fills the gap by explaining the list envelope and truncation semantics, and it covers the live-vs-cached decision plus parameter provenance. For a 3-parameter read tool this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the description nudges above it by explaining that datastore_name is sourced from list_all_datastores, tying the parameter to a concrete workflow step. It does not elaborate on 'path' or 'target', which the schema already documents.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (scan) and resource (datastore images) and enumerates the artifact types it finds (OVA, ISO, OVF, VMDK). The '[READ]' prefix plus the explicit contrast with list_cached_images makes it immediately distinguishable from its closest sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly scopes usage: 'live scan of one datastore; prefer list_cached_images for a cached answer' names the alternative and the condition that selects it. It also tells the agent where the required datastore_name value comes from (list_all_datastores).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updatesv2.4.2
    • Changedbrowse_datastore1 field changed
      • changedInput schema / properties / path / description
        Previous value: -"Subdirectory path (empty for root)."New value: +"Datastore-relative folder to start from (empty for root); a leading '/' or '..' is refused. The search is recursive, so the root returns matches from every folder; each row's ds_path is \"[ds] dir/file\"."
    • Changedlist_cached_images1 field changed
      • addedInput schema / properties / target
        Added value: +{
        +  "anyOf": [
        +    {
        +      "type": "string"
        +    },
        +    {
        +      "type": "null"
        +    }
        +  ],
        +  "default": null,
        +  "description": "Only rows scanned from this vCenter/ESXi target (a name from config, as scan_datastore_images takes; an unknown name is refused with the configured ones). Rows cached before rows recorded their target appear only when this is omitted. Omit for every target.",
        +  "title": "Target"
        +}
    • Changedscan_datastore_images1 field changed
      • changedInput schema / properties / path / description
        Previous value: -"Subdirectory path (empty for root)."New value: +"Datastore-relative subdirectory (empty for root); a leading '/' or '..' is refused. The images found replace this datastore's cached entries under that folder, for list_cached_images."
  2. 1 tool updatev2.3.0
    • Addedget_access_info
  3. 23 tool updatesv2.0.0
    • Addedadd_iscsi_target
    • Changedbrowse_datastore3 fields changed
      • addedInput schema / properties / datastore_name
        Added value: +{
        +  "description": "Datastore name.",
        +  "title": "Datastore Name",
        +  "type": "string"
        +}
      • removedInput schema / properties / ds_name
        Removed value: -{
        -  "description": "Datastore name.",
        -  "title": "Ds Name",
        -  "type": "string"
        -}
      • changedInput schema / required
        Previous value: -[
        -  "ds_name"
        -]New value: +[
        +  "datastore_name"
        +]
    • Addedenable_iscsi
    • Removedfc_adapter_list
    • Addedget_iscsi_status
    • Addedget_vsan_capacity
    • Addedget_vsan_efficiency
    • Addedget_vsan_health
    • Changedlist_all_datastores1 field changed
      • addedInput schema / properties / limit
        Added value: +{
        +  "anyOf": [
        +    {
        +      "type": "integer"
        +    },
        +    {
        +      "type": "null"
        +    }
        +  ],
        +  "default": null,
        +  "description": "Max datastores to return (None = all).",
        +  "title": "Limit"
        +}
    • Addedlist_fc_adapters
    • Addedlist_storage_device_paths
    • Addedremove_iscsi_target
    • Addedrescan_storage
    • Changedscan_datastore_images3 fields changed
      • addedInput schema / properties / datastore_name
        Added value: +{
        +  "description": "Datastore name.",
        +  "title": "Datastore Name",
        +  "type": "string"
        +}
      • removedInput schema / properties / ds_name
        Removed value: -{
        -  "description": "Datastore name.",
        -  "title": "Ds Name",
        -  "type": "string"
        -}
      • changedInput schema / required
        Previous value: -[
        -  "ds_name"
        -]New value: +[
        +  "datastore_name"
        +]
    • Removedstorage_device_paths
    • Removedstorage_iscsi_add_target
    • Removedstorage_iscsi_enable
    • Removedstorage_iscsi_remove_target
    • Removedstorage_iscsi_status
    • Removedstorage_rescan
    • Removedvsan_capacity
    • Removedvsan_efficiency
    • Removedvsan_health
  4. 4 tool updatesv1.11.0
    • Changedstorage_iscsi_add_target6 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "title": "Result",
        -      "type": "string"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "storage_iscsi_add_targetOutput",
        -  "type": "object"
        -}New value: +null
    • Changedstorage_iscsi_enable6 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "title": "Result",
        -      "type": "string"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "storage_iscsi_enableOutput",
        -  "type": "object"
        -}New value: +null
    • Changedstorage_iscsi_remove_target6 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "title": "Result",
        -      "type": "string"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "storage_iscsi_remove_targetOutput",
        -  "type": "object"
        -}New value: +null
    • Changedstorage_rescan6 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"If true, return a preview of the change without executing it."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "title": "Result",
        -      "type": "string"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "storage_rescanOutput",
        -  "type": "object"
        -}New value: +null
  5. 2 tool updatesv1.10.0
    • Addedfc_adapter_list
    • Addedstorage_device_paths
  6. 12 tool updatesv1.8.15
    • Changedbrowse_datastore5 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / ds_name / description
        Added value: +"Datastore name."
      • addedInput schema / properties / path / description
        Added value: +"Subdirectory path (empty for root)."
      • addedInput schema / properties / pattern / description
        Added value: +"Glob pattern to filter files (e.g. \"*.ova\", \"*.iso\")."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedlist_all_datastores2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedlist_cached_images3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / datastore / description
        Added value: +"Filter by exact datastore name. Omit for all datastores."
      • addedInput schema / properties / image_type / description
        Added value: +"Filter by file extension without the dot, e.g. \"ova\", \"iso\", \"ovf\", \"vmdk\" (case-insensitive). Omit for all types."
    • Changedscan_datastore_images4 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / ds_name / description
        Added value: +"Datastore name."
      • addedInput schema / properties / path / description
        Added value: +"Subdirectory path (empty for root)."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedstorage_iscsi_add_target6 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / address / description
        Added value: +"iSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error)."
      • addedInput schema / properties / dry_run / description
        Added value: +"If true, return a preview of the change without executing it."
      • addedInput schema / properties / host_name / description
        Added value: +"ESXi host name as shown in vCenter inventory."
      • addedInput schema / properties / port / description
        Added value: +"iSCSI TCP port, 1-65535 (default 3260)."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedstorage_iscsi_enable4 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / dry_run / description
        Added value: +"If true, return a preview of the change without executing it."
      • addedInput schema / properties / host_name / description
        Added value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedstorage_iscsi_remove_target6 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / address / description
        Added value: +"Configured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly."
      • addedInput schema / properties / dry_run / description
        Added value: +"If true, return a preview of the change without executing it."
      • addedInput schema / properties / host_name / description
        Added value: +"ESXi host name as shown in vCenter inventory."
      • addedInput schema / properties / port / description
        Added value: +"Configured iSCSI TCP port, 1-65535 (default 3260)."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedstorage_iscsi_status3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / host_name / description
        Added value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedstorage_rescan4 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / dry_run / description
        Added value: +"If true, return a preview of the change without executing it."
      • addedInput schema / properties / host_name / description
        Added value: +"ESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedvsan_capacity3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cluster_name / description
        Added value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedvsan_efficiency3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cluster_name / description
        Added value: +"Cluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
    • Changedvsan_health3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cluster_name / description
        Added value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found."
      • addedInput schema / properties / target / description
        Added value: +"Optional vCenter/ESXi target name from config."
  7. 1 tool updatev1.8.10
    • Addedvsan_efficiency
  8. 4 tool updatesv1.8.9
    • Changedbrowse_datastore1 field changed
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "items": {
        -        "additionalProperties": true,
        -        "type": "object"
        -      },
        -      "title": "Result",
        -      "type": "array"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "browse_datastoreOutput",
        -  "type": "object"
        -}New value: +null
    • Changedlist_all_datastores1 field changed
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "items": {
        -        "additionalProperties": true,
        -        "type": "object"
        -      },
        -      "title": "Result",
        -      "type": "array"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "list_all_datastoresOutput",
        -  "type": "object"
        -}New value: +null
    • Changedlist_cached_images1 field changed
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "items": {
        -        "additionalProperties": true,
        -        "type": "object"
        -      },
        -      "title": "Result",
        -      "type": "array"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "list_cached_imagesOutput",
        -  "type": "object"
        -}New value: +null
    • Changedscan_datastore_images1 field changed
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "items": {
        -        "additionalProperties": true,
        -        "type": "object"
        -      },
        -      "title": "Result",
        -      "type": "array"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "scan_datastore_imagesOutput",
        -  "type": "object"
        -}New value: +null
  9. 4 tool updatesv1.6.0
    • Changedstorage_iscsi_add_target1 field changed
      • addedInput schema / properties / dry_run
        Added value: +{
        +  "default": false,
        +  "title": "Dry Run",
        +  "type": "boolean"
        +}
    • Changedstorage_iscsi_enable1 field changed
      • addedInput schema / properties / dry_run
        Added value: +{
        +  "default": false,
        +  "title": "Dry Run",
        +  "type": "boolean"
        +}
    • Changedstorage_iscsi_remove_target1 field changed
      • addedInput schema / properties / dry_run
        Added value: +{
        +  "default": false,
        +  "title": "Dry Run",
        +  "type": "boolean"
        +}
    • Changedstorage_rescan1 field changed
      • addedInput schema / properties / dry_run
        Added value: +{
        +  "default": false,
        +  "title": "Dry Run",
        +  "type": "boolean"
        +}

TDQS

A4.5/5.0

Scored across 15 tools

Disambiguation4/5

The set spans several distinct storage subdomains (datastores, iSCSI, vSAN, FC, multipath) with mostly clear boundaries. The main overlap is among browse_datastore, scan_datastore_images, and list_cached_images, but their descriptions explicitly differentiate arbitrary-file browsing, live image scanning, and cached results. iSCSI tools are also distinct, though rescan_storage is redundant after add/remove and could be misselected.

Naming Consistency5/5

All 15 tool names follow a consistent snake_case verb_noun pattern (list_, get_, browse_, scan_, enable_, add_, remove_, rescan_). There is no camelCase or mixed convention, and verb choices align with the operation type rather than being arbitrary.

Tool Count5/5

15 tools sits at the upper end of the ideal 3–15 range but remains well-scoped for a VMware storage administration server. Each tool targets a specific resource or operation, and none appear to be filler.

Completeness3/5

Coverage is strong on read-side inventory/diagnostics and iSCSI target writes, but there are notable lifecycle gaps: no tools to create, delete, mount, or unmount VMFS datastores (remove_iscsi_target even says to unmount first, but no unmount tool exists), and no vSAN disk-group management. These missing write operations will cause dead ends for common storage provisioning tasks.

Maintenance

ActivityActive
ResponsivenessResponsive

Related MCP Connectors

Related MCP Servers