vmware-vks
VMware VKS
作成者: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com これはVMwareエンジニアによるコミュニティ主導のプロジェクトであり、VMwareの公式製品ではありません。 VMwareの公式開発者ツールについては developer.broadcom.com を参照してください。
VMware vSphere Kubernetes Service (VKS) 管理用のMCPスキル + CLI — スーパーバイザークラスター、vSphere名前空間、およびVKSクラスターのライフサイクル管理。20個のMCPツールを提供。
関連スキル
VMware MCPスキルファミリーの一部です。 各スキルは特定のドメインを扱います。必要なものだけをインストールしてください。
スキル | スコープ | ツール数 | インストール |
vmware-aiops ⭐ エントリーポイント | VMライフサイクル、デプロイ、ゲスト操作、クラスター | 31 |
|
読み取り専用監視、アラーム、イベント、VM情報 | 8 |
| |
データストア、iSCSI、vSAN | 11 |
| |
NSXネットワーキング: セグメント、ゲートウェイ、NAT、IPAM | 31 |
| |
DFWマイクロセグメンテーション、セキュリティグループ、Traceflow | 20 |
| |
Aria Opsメトリクス、アラート、キャパシティプランニング | 18 |
|
Related MCP server: vmware-nsx
前提条件
vSphere 8.0+ — ワークロード管理 (スーパーバイザー) APIにはvSphere 8.xが必要です
ワークロード管理の有効化 — 少なくとも1つのコンピューティングクラスターでWCPが有効になっている必要があります
ライセンス — vSphere Kubernetes Service (Enterprise PlusまたはVMware Cloud Foundation)
セットアップ後、vmware-vks check を実行してすべての要件が満たされていることを確認してください。
クイックスタート
# Install
uv tool install vmware-vks
# Configure
mkdir -p ~/.vmware-vks
cp config.example.yaml ~/.vmware-vks/config.yaml
# Edit config.yaml with your vCenter host and username
echo "VMWARE_MY_VCENTER_PASSWORD=your_password" > ~/.vmware-vks/.env
chmod 600 ~/.vmware-vks/.env
# Verify
vmware-vks check
# Common operations
vmware-vks supervisor status domain-c1
vmware-vks namespace list
vmware-vks tkc list
vmware-vks tkc create my-cluster -n dev --version v1.28.4+vmware.1 --vm-class best-effort-large
vmware-vks tkc create my-cluster -n dev --apply一般的なワークフロー
新しいTKCクラスターのデプロイ
互換性の確認 →
vmware-vks check利用可能なK8sバージョンのリスト表示 →
vmware-vks tkc versions -n dev名前空間の作成 (必要な場合) →
vmware-vks namespace create dev --cluster domain-c1 --storage-policy vSAN --cpu 16000 --memory 32768 --applyTKCクラスターの作成 →
vmware-vks tkc create dev-cluster -n dev --version v1.28.4+vmware.1 --control-plane 1 --workers 3 --vm-class best-effort-large --applykubeconfigの取得 →
vmware-vks kubeconfig get dev-cluster -n dev
負荷テストのためのワーカーのスケーリング
現在の状態を確認 →
vmware-vks tkc get dev-cluster -n devスケールアップ →
vmware-vks tkc scale dev-cluster -n dev --workers 6進捗の監視 →
vmware-vks tkc get dev-cluster -n dev(フェーズを監視)テスト後にスケールダウン
名前空間のリソース管理
名前空間のリスト表示 →
vmware-vks namespace list使用状況の確認 →
vmware-vks storage -n devクォータの更新 →
vmware-vks namespace update dev --cpu 32000 --memory 65536
ツールリファレンス (20ツール)
スーパーバイザー
ツール | 説明 | タイプ |
| vCenterバージョンチェック + WCPステータス | 読み取り |
| スーパーバイザークラスターのステータスとK8s APIエンドポイント | 読み取り |
| 名前空間で利用可能なストレージポリシー | 読み取り |
名前空間
ツール | 説明 | タイプ |
| ステータスを含むすべてのvSphere名前空間 | 読み取り |
| 名前空間の詳細 (クォータ、ストレージ、ロール) | 読み取り |
| ドライランプレビュー付きの名前空間作成 | 書き込み |
| クォータとストレージポリシーの変更 | 書き込み |
| TKCガード付きの削除 (クラスターが存在する場合は拒否) | 書き込み |
| TKCサイジング用の利用可能なVMクラス | 読み取り |
TKC
ツール | 説明 | タイプ |
| ステータスを含むTanzuKubernetesClusterリスト | 読み取り |
| クラスターの詳細 (ノード、ヘルス、状態) | 読み取り |
| スーパーバイザーでサポートされているK8sバージョン | 読み取り |
| YAMLプラン + デフォルトのドライランによるTKC作成 | 書き込み |
| ワーカーノード数のスケーリング | 書き込み |
| K8sバージョンのアップグレード | 書き込み |
| ワークロードガード付きの削除 | 書き込み |
アクセス
ツール | 説明 | タイプ |
| スーパーバイザーのkubeconfig YAML | 読み取り |
| TKCのkubeconfig (stdoutまたはファイル) | 読み取り |
| 組み込みHarborレジストリ情報 | 読み取り |
| PVCリストと容量統計 | 読み取り |
アーキテクチャ
User (Natural Language)
↓
AI Agent (Claude Code / Goose / Cursor)
↓ reads SKILL.md
↓
vmware-vks CLI ─── or ─── vmware-vks MCP Server (stdio)
│
├─ Layer 1: pyVmomi → vCenter REST API
│ Supervisor status, storage policies, Namespace CRUD, VM classes, Harbor
│
└─ Layer 2: kubernetes client → Supervisor K8s API endpoint
TKC CR apply / get / delete (cluster.x-k8s.io/v1beta1)
Kubeconfig built from Layer 1 session token
↓
vCenter Server 8.x+ (Workload Management enabled)
↓
Supervisor Cluster → vSphere Namespaces → TanzuKubernetesClusterCLIリファレンス
# Pre-flight diagnostics
vmware-vks check
# Supervisor
vmware-vks supervisor status <cluster-id>
vmware-vks supervisor storage-policies
# Namespace
vmware-vks namespace list
vmware-vks namespace get <name>
vmware-vks namespace create <name> --cluster <id> --storage-policy <policy>
vmware-vks namespace create <name> --cluster <id> --storage-policy <policy> --apply
vmware-vks namespace update <name> [--cpu <mhz>] [--memory <mib>]
vmware-vks namespace delete <name>
vmware-vks namespace vm-classes
# VKS Cluster
vmware-vks tkc list [-n <namespace>]
vmware-vks tkc get <name> -n <namespace>
vmware-vks tkc versions -n <namespace>
vmware-vks tkc create <name> -n <namespace> [--version <v>] [--vm-class <c>]
vmware-vks tkc create <name> -n <namespace> --apply
vmware-vks tkc scale <name> -n <namespace> --workers <n>
vmware-vks tkc upgrade <name> -n <namespace> --version <v>
vmware-vks tkc delete <name> -n <namespace>
# Kubeconfig
vmware-vks kubeconfig supervisor -n <namespace>
vmware-vks kubeconfig get <cluster-name> -n <namespace> [-o <path>]
# Harbor & Storage
vmware-vks harbor
vmware-vks storage -n <namespace>MCPサーバー
uv tool install vmware-vks の後、以下のコマンドでMCPサーバーを起動します (v1.5.15以降):
# Recommended — single command, no network re-resolve
vmware-vks mcp
# With a custom config path
VMWARE_VKS_CONFIG=/path/to/config.yaml vmware-vks mcpエージェント設定
AIエージェントのMCP設定に追加してください:
{
"mcpServers": {
"vmware-vks": {
"command": "vmware-vks",
"args": ["mcp"],
"env": {
"VMWARE_VKS_CONFIG": "~/.vmware-vks/config.yaml"
}
}
}
}# Run without installing (requires PyPI access each launch)
uvx --from vmware-vks vmware-vks mcp
# Legacy entry point (still works, kept for backward compatibility)
vmware-vks-mcp企業用TLSプロキシの背後にいますか? uvxは
invalid peer certificate: UnknownIssuerで失敗する可能性があります。 上記の推奨されるvmware-vks mcp形式を使用するか (ネットワーク不要)、UV_NATIVE_TLS=trueを設定してください。
安全性
機能 | 説明 |
読み取り重視 | 20個中12個のツールが読み取り専用 |
デフォルトでドライラン |
|
TKCガード |
|
ワークロードガード |
|
認証情報の安全性 | パスワードは環境変数 ( |
監査ログ | すべての書き込み操作は |
stdioトランスポート | ネットワークリスナーなし。MCPはstdio経由でのみ動作します |
トラブルシューティング
"VKS not compatible" エラー
vCenterでワークロード管理が有効になっている必要があります。確認方法: vCenter UI -> ワークロード管理。Enterprise PlusまたはVCFライセンスを持つvSphere 8.x以降が必要です。
名前空間の作成が "storage policy not found" で失敗する
まず利用可能なポリシーをリスト表示してください: vmware-vks supervisor storage-policies。ポリシー名は大文字と小文字を区別します。
TKCクラスターが "Creating" フェーズでスタックする
vCenterのスーパーバイザーイベントを確認してください。一般的な原因: ESXiホスト上のリソース不足、NSX-Tのネットワーク問題、またはターゲットデータストアでストレージポリシーが利用できないこと。
Kubeconfigの取得に失敗する
スーパーバイザーAPIエンドポイントが vmware-vks を実行しているマシンから到達可能である必要があります。ポート6443のファイアウォールルールを確認してください。
スケール操作が反映されない
スケーリング前にクラスターが "Running" フェーズにあることを確認してください。"Creating" または "Updating" フェーズのクラスターはスケール操作を拒否します。
名前空間の削除が予期せず拒否される
名前空間削除ガードは、内部にTKCクラスターが存在する場合の削除を防ぎます。まず名前空間内のすべてのTKCクラスターを削除してから、再試行してください。
バージョン互換性
vSphere | サポート | 備考 |
8.0+ | フル | ワークロード管理APIが利用可能 |
7.x | 非サポート | WCP APIの仕様が異なります。vSphere 8.xを使用してください |
関連プロジェクト
スキル | スコープ | ツール数 | インストール |
vmware-aiops ⭐ エントリーポイント | VMライフサイクル、デプロイ、ゲスト操作、クラスター | 31 |
|
読み取り専用監視、アラーム、イベント、VM情報 | 8 |
| |
データストア、iSCSI、vSAN | 11 |
| |
NSXネットワーキング: セグメント、ゲートウェイ、NAT、IPAM | 31 |
| |
DFWマイクロセグメンテーション、セキュリティグループ、Traceflow | 20 |
| |
Aria Opsメトリクス、アラート、キャパシティプランニング | 18 |
|
ライセンス
Available Tools
23 toolscheck_vks_compatibilityARead-onlyIdempotent
[READ] Check whether this vCenter supports VKS (requires vSphere 8.x+).
Returns compatible (bool), vcenter_version, wcp_enabled_clusters and wcp_clusters ({cluster, status}). Start here: those cluster MoRefs are the cluster_id for get_supervisor_status and create_namespace. Only reports vCenter-level support — a listed cluster may still be CONFIGURING.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/openWorld/idempotent/non-destructive, and the description reinforces this with a [READ] tag. It adds the important caveat that it 'Only reports vCenter-level support — a listed cluster may still be CONFIGURING,' which is exactly the behavioral nuance an agent needs. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the [READ] tag, purpose, and prerequisite appear first, followed by return values and downstream usage. Every sentence adds information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by naming return fields and their types (bool, string, cluster/status objects). It also explains how to use the output as cluster_id for two sibling tools and warns about the CONFIGURING state. This is complete for an optional-parameter read-only check, though exact status values are left unspecified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the target parameter fully documented ('vCenter in config.yaml; omit for default'), so the description does not need to add parameter-level detail. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource ('Check whether this vCenter supports VKS'), states a hard prerequisite (vSphere 8.x+), and lists concrete return fields, distinguishing this read-only compatibility probe from the other vSphere/TKC tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'Start here' and maps the returned cluster MoRefs to cluster_id for get_supervisor_status and create_namespace, giving immediate downstream routing. It also warns that vCenter-level support does not guarantee cluster readiness, signaling when to follow up. It does not enumerate all when-not-to-use cases, but the guidance is concrete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_namespaceA
[WRITE] Create a vSphere Namespace on a Supervisor Cluster.
Without confirm=True this only previews: it returns blast_radius (the spec that would be applied, and whether the name is already taken) and creates nothing. Show it to the user and get their decision. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. confirm=True returns {action: "created", namespace, status, cluster, blast_radius}; it is refused when the name is taken (use update_namespace) or the existing names could not be read. Confirm with get_namespace afterwards.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Namespace name (lowercase, no spaces). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| dry_run | No | Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews. | |
| cpu_limit | No | MHz. Omit for no limit. | |
| cluster_id | Yes | Supervisor MoRef (from check_vks_compatibility). | |
| description | No | Free-text label. Omit for none. | |
| storage_policy | Yes | Policy ID (from list_supervisor_storage_policies). | |
| memory_limit_mib | No | MiB. Omit for no limit. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes far beyond the annotations by explaining the preview-only default, the exact return shape for confirm=True, refusal conditions, and the required confirmation workflow. This is especially valuable because the annotations only indicate readOnly=false and idempotent=false; the description reveals the nuanced two-phase behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place. The description is front-loaded with the core purpose, then efficiently covers preview behavior, user decision, refusal conditions, and follow-up verification. It is detailed but not bloated, and the structure guides the agent through the correct call sequence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 9-parameter creation tool with no output schema, the description is remarkably complete. It explains the preview return, the confirmed return, failure modes, and post-creation verification. It also refers agents to the right sibling tools for name conflicts and verification, leaving no critical ambiguity for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is already 100%, but the description adds meaningful parameter-level context by explaining what confirm actually controls, what blast_radius contains, and why the agent should not set confirm=True unilaterally. It doesn't repeat every parameter, but it clarifies the most behaviorally important one beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Create a vSphere Namespace on a Supervisor Cluster.' It clearly distinguishes this creation tool from sibling operations like update_namespace, delete_namespace, and get_namespace, and the [WRITE] tag reinforces that this is a mutating operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage rules: without confirm=True it only previews, the user must see the preview before confirming, and the agent must not set confirm=True on its own. It also names alternatives directly: use update_namespace when the name is taken, and verify with get_namespace afterwards.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_tkc_clusterA
[WRITE] Create a TanzuKubernetesCluster in a vSphere Namespace.
Without confirm=True this only previews: it returns blast_radius (node counts, VM class, the YAML manifest, and whether the name is taken) and creates nothing. Show it to the user and get their decision. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. confirm=True returns {action: "created", name, namespace, status: "creating", yaml, blast_radius} and provisions in the background — poll get_tkc_cluster until phase is running. Refused when the name is taken or the namespace's clusters could not be read. Call get_tkc_available_versions for k8s_version and list_vm_classes first.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Cluster name. | |
| target | No | vCenter in config.yaml; omit for the default. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| dry_run | No | Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews. | |
| vm_class | Yes | Node sizing, e.g. 'best-effort-large'. | |
| namespace | Yes | Must already exist (see list_namespaces). | |
| k8s_version | Yes | e.g. 'v1.28.4+vmware.1'. | |
| worker_count | No | Worker nodes (>= 1). | |
| storage_class | No | Storage class. | vsphere-storage |
| control_plane_count | No | 1 or 3. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even with annotations present, the description adds critical behavioral context: without confirm=True the tool only previews and changes nothing; confirm=True provisions in the background and returns {action: 'created', status: 'creating'}, requiring polling of get_tkc_cluster until running. It also discloses refusal behavior when the name is taken or namespace clusters cannot be read. This goes well beyond the annotation signals.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: it covers purpose, preview semantics, user-approval requirement, confirmation behavior, polling, refusal conditions, and prerequisites. The critical safety warning is front-loaded early. The length is justified by the complexity and the severe consequence of an unconfirmed create.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity, the description is comprehensive: it explains return values for both modes, background provisioning, polling expectations, refusal cases, and required setup calls. The input schema covers parameter defaults and types, while the description covers the behavioral contract. Nothing essential for safe invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning beyond the schema by linking k8s_version and vm_class to prerequisite calls (get_tkc_available_versions and list_vm_classes), and by clarifying the behavioral significance of confirm. It does not restate the schema, but it enriches the most safety-critical parameter without covering every field.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear [WRITE] marker and explicitly states the action: 'Create a TanzuKubernetesCluster in a vSphere Namespace.' This distinguishes it from sibling tools that scale, upgrade, delete, or list clusters. The purpose is immediately unambiguous and the tool's resource is precisely named.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives strong operational guidance: it explains the preview-then-confirm flow, warns 'Do not set confirm=True on your own because the user asked earlier', and instructs the agent to show the preview to the user first. It also states prerequisites ('Call get_tkc_available_versions for k8s_version and list_vm_classes first') and refusal conditions. This is explicit when-and-how-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_namespaceADestructive
[WRITE] Delete a vSphere Namespace and everything inside it (irreversible).
Without confirm=True this only previews: it returns blast_radius (the namespace, and the TKC clusters, VMs and PVCs inside it, with counts and names) and deletes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user said "delete" earlier: they have not seen what it destroys yet.
confirm=True returns {action: "deleted", namespace, status, blast_radius}. Refused while TKC clusters exist inside (run delete_tkc_cluster on each), and whenever the clusters, VMs or PVCs inside could not be read. Prefer update_namespace to only change quotas.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Namespace name to delete (discover via list_namespaces). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| dry_run | No | Deprecated alias for confirm; removed in the next minor release. dry_run=True previews. | |
| confirmed | No | Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructiveHint annotation, the description discloses irreversible destruction, preview-only behavior, refusal conditions when inner resources cannot be read, and the returned blast_radius structure. The behavior is fully transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place, covering purpose, safety, refusal conditions, return shape, and alternatives. The critical warning is front-loaded and clearly separated from supporting details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, irreversible tool with no output schema, the description covers the action, the preview mechanism, the return values, the blocking conditions, and the recommended sibling tool. Nothing an agent needs to call it safely is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds operational semantics: confirm=False previews, confirm=True returns {action: 'deleted', namespace, status, blast_radius}, and deprecated aliases are clarified in context. This goes beyond the schema field descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states a specific verb and resource: 'Delete a vSphere Namespace and everything inside it (irreversible).' It distinguishes itself from siblings by warning it refuses while TKC clusters exist and by directing users to update_namespace for quota-only changes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use and when-not-to-use guidance: preview with confirm=False, show blast_radius to the user, never set confirm=True autonomously, run delete_tkc_cluster on existing TKC clusters first, and prefer update_namespace for quota changes. This is unusually complete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_tkc_clusterADestructive
[WRITE] Delete a TKC cluster and all of its nodes (irreversible).
Without confirm=True this only previews: it returns blast_radius (control plane and worker node counts per pool, and the running Deployments, StatefulSets and DaemonSets) and deletes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user said "delete" earlier: they have not seen what it destroys yet.
confirm=True returns {action: "deleted", name, namespace, status: "deleting", blast_radius}. Refused while workloads run (drain them, or pass force=True, which skips the workload check entirely) and whenever the node counts or workloads could not be read. Use scale_tkc_cluster instead for fewer nodes. Empty a namespace of TKC clusters before delete_namespace accepts it.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Cluster name (via list_tkc_clusters). | |
| force | No | Skip the running-workload check (dangerous). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| confirm | No | False (default) returns the blast radius and changes nothing. True applies it. | |
| dry_run | No | Deprecated alias for confirm; removed in the next minor release. dry_run=True previews. | |
| confirmed | No | Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews. | |
| namespace | Yes | Namespace holding it. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the destructiveHint=true annotation, the description reveals the irreversible nature, the preview mode returning blast_radius, the refusal conditions while workloads run, and the force flag's effect of skipping the workload check. It also states what confirm=True returns, giving the agent a clear model of the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but every sentence carries essential safety or routing information for a destructive tool with no output schema. It is front-loaded with the irreversible destructive action, then explains the preview flow, refusal conditions, and alternatives in a logical order with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Since there is no output schema, the description properly explains return values for both preview and confirmed deletion, including blast_radius contents. It also covers failure/refusal cases, the force escape hatch, deprecated aliases, and sibling-tool routing, making it complete for an agent to call this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers all parameters with 100% description coverage, but the tool description adds important context beyond it: confirm=False previews, confirm=True deletes, force=True skips the workload check, and dry_run/confirmed are deprecated aliases. This adds real semantic value on top of the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Delete a TKC cluster and all of its nodes (irreversible).' It clearly differentiates from siblings by explicitly directing agents to scale_tkc_cluster for fewer nodes and noting delete_namespace requires an empty namespace. This gives an unambiguous purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use and when-not-to-use guidance: it instructs the agent to preview without confirm=True, never set confirm=True unilaterally, and drain workloads or use force=True only when appropriate. It also names scale_tkc_cluster and delete_namespace as alternatives, so the agent can route correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_harbor_infoARead-onlyIdempotent
[READ] Get status of the embedded Harbor container registry on the Supervisor.
Returns {registries: [{id, cluster (Supervisor MoRef), version, url, status, storage_used_mb}]}; status and storage come from a detail call and are null if it fails. If Harbor is not enabled it returns {error, hint} rather than raising. Use it to check registry health or find the push URL — it does not list repositories or images. Run check_vks_compatibility first if the Supervisor may be down.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, and the description layers substantial context on top: the exact return shape ({registries: [...]}), the detail-call behavior ('status and storage come from a detail call and are null if it fails'), and the error contract ('returns {error, hint} rather than raising'). No contradiction exists — the readOnly annotation matches the [READ] prefix and status-retrieval semantics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence carries distinct information: purpose, return shape, two error behaviors, use cases, and the prerequisite. The critical 'what it does' is front-loaded in the first sentence, and the supplementary detail is compact and scannable without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema present, the description carries the full burden of explaining return values — and it does, including nullable fields (status, storage_used_mb) and the failure path. Error cases (Harbor not enabled, detail call failing) and the prerequisite for a possibly-down Supervisor are all covered, making this complete for a read-only tool with one optional parameter.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single optional parameter `target` is fully documented in the schema ('vCenter in config.yaml; omit for the default.'), so schema coverage is 100% and the baseline 3 applies. The description adds no new parameter-level detail beyond the 'on the Supervisor' context, which is acceptable because nothing about the parameter is left undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Opens with a specific verb+resource+scope: 'Get status of the embedded Harbor container registry on the Supervisor.' The [READ] prefix makes the operation type explicit, and the sentence 'it does not list repositories or images' differentiates it from any registry-related sibling. The primary use cases ('check registry health or find the push URL') further pin down what the tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
States concrete when-to-use: 'Use it to check registry health or find the push URL.' It names the prerequisite sibling explicitly — 'Run check_vks_compatibility first if the Supervisor may be down' — and excludes the adjacent use case of listing repositories or images. This gives an agent clear routing logic without needing to inspect other sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_namespaceARead-onlyIdempotent
[READ] Get detailed configuration for a single vSphere Namespace.
Returns one raw vCenter namespace object, not the list envelope: config_status, description, storage_specs, quotas. Use list_namespaces first for the name; follow with list_namespace_storage_usage for PVC usage or list_tkc_clusters for the clusters inside. Point-in-time only — a CONFIGURING namespace may not have quotas applied.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Namespace name, e.g. 'dev' (discover via list_namespaces). | |
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint false. The description adds valuable behavioral context beyond those hints: it returns a raw vCenter object rather than a list envelope, and warns that a CONFIGURING namespace may not yet have quotas applied. This helps the agent interpret results correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-organized: a clear opening statement, the return shape, routing guidance to related tools, and a caveat. Each sentence earns its place and no filler is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Even though there is no output schema, the description names the key returned fields (config_status, description, storage_specs, quotas) and explains how to discover the required name parameter. It also points to the correct sibling tools for follow-up queries, making it sufficiently complete for an agent to invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters well. The description reinforces that 'name' comes from list_namespaces, matching the schema's example, but does not add additional parameter-level meaning beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Get detailed configuration for a single vSphere Namespace.' It also distinguishes itself from sibling tools by explicitly saying it returns 'one raw vCenter namespace object, not the list envelope,' which differentiates it from list_namespaces and related listing tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage sequencing: use list_namespaces first to discover the name, then call this tool; follow with list_namespace_storage_usage for PVC usage or list_tkc_clusters for clusters inside. It also provides a point-in-time caveat that helps the agent know when the result may be incomplete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_supervisor_kubeconfigAIdempotent
[WRITE] Credential access: get a kubeconfig for the Supervisor K8s API.
Call only when the user explicitly asks for this kubeconfig; never as a side step. Returns {namespace, kubeconfig} as a YAML string, or {namespace, written_to} when output_path is given. The kubeconfig embeds a Supervisor bearer token (JWT from /wcp/login) that acts as the configured vCenter account until the JWT expires (typically hours; not tied to this process) — always pass output_path so the token never enters agent context, and report only the path. The file is created owner-only (0600). Use get_tkc_kubeconfig instead to reach workloads inside a TKC cluster.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | vSphere Namespace to set as the kubeconfig context. | |
| output_path | No | File to write, e.g. '~/.kube/supervisor.yaml'. Omit to return the kubeconfig inline. Creates parent directories and truncates the file. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations (which only give the generic readOnly/idempotent/destructive/openWorld hints) by disclosing the exact return shapes, that the kubeconfig embeds a live Supervisor bearer token acting as the configured vCenter account, that the token lifetime is hours and not tied to the process, that the written file is mode 0600, and that output_path truncates and creates parent directories. This is exactly the kind of security-relevant behavioral context annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the [WRITE]/credential-access framing and the when-to-use gate, then return shapes, then the security rationale, then the sibling disambiguation. Every sentence carries distinct, load-bearing information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, and the description fully compensates by specifying both possible return payloads ({namespace, kubeconfig} vs. {namespace, written_to}), the token semantics, and file-permission behavior. Nothing an agent needs to invoke this credential-returning tool safely is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds real guidance the schema lacks: pass output_path preferentially so the token never enters agent context and only the path is reported. Target and namespace meaning is left to the schema, keeping this just under a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('get a kubeconfig for the Supervisor K8s API') and immediately distinguishes itself from the near-identical sibling get_tkc_kubeconfig by scope (Supervisor API vs. workloads inside a TKC cluster). An agent can select correctly without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use constraint ('Call only when the user explicitly asks for this kubeconfig; never as a side step') and an explicit named alternative ('Use get_tkc_kubeconfig instead to reach workloads inside a TKC cluster'). Both the positive and negative routing conditions are stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_supervisor_statusARead-onlyIdempotent
[READ] Get the health of one Supervisor Cluster (vSphere with Tanzu control plane).
Returns cluster_id, config_status (RUNNING = healthy, else CONFIGURING / ERROR / REMOVING), kubernetes_status (READY / WARNING / ERROR), api_server_cluster_endpoint, kubernetes_version (null plus kubernetes_version_hint if unavailable), and network_provider. Run check_vks_compatibility first for cluster IDs; use this to confirm a Supervisor is healthy before create_namespace or create_tkc_cluster.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| cluster_id | Yes | Compute cluster MoRef, e.g. 'domain-c1' (wcp_clusters field of check_vks_compatibility). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description goes beyond annotations by disclosing the exact returned fields, including config_status semantics (RUNNING = healthy, else CONFIGURING / ERROR / REMOVING) and kubernetes_status values. This is useful behavioral context for interpreting the response.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with purpose, followed by a compact list of returned fields and a single workflow sentence. Every sentence contributes useful information; there is no repetition of schema content or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Without an output schema, the description enumerates the key return fields and their meaning, states prerequisites, and names the dependent operations. For a simple read-only health-check tool with only one required parameter, nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline applies. The description adds one contextual link for cluster_id by pointing to check_vks_compatibility as the source of cluster IDs, matching the schema's 'wcp_clusters field' note, but it does not need to explain target further.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: '[READ] Get the health of one Supervisor Cluster (vSphere with Tanzu control plane).' It clearly identifies the tool's output (health status fields) and names the workflow context, which distinguishes it from sibling tools like check_vks_compatibility and get_supervisor_kubeconfig.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit sequencing: 'Run check_vks_compatibility first for cluster IDs; use this to confirm a Supervisor is healthy before create_namespace or create_tkc_cluster.' This tells an agent when to call this tool relative to relevant siblings and what decision it supports.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_tkc_available_versionsARead-onlyIdempotent
[READ] List Kubernetes versions (TanzuKubernetesReleases) available on the Supervisor.
Returns {versions: [{name, version, e.g. 'v1.28.4+vmware.1'}]}, newest first. If the TanzuKubernetesRelease API is unavailable it returns an empty versions list with error and hint rather than raising. Call this before create_tkc_cluster or upgrade_tkc_cluster to pick a valid k8s_version.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | vSphere Namespace used to reach the Supervisor K8s API. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds meaningful behavioral context: it returns results newest first, and it degrades gracefully with an empty versions list plus error/hint when the API is unavailable rather than raising. This goes beyond what the annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three terse, purposeful sentences: the READ action, the return shape and ordering, and the error behavior plus usage guidance. Every sentence contributes value and the most important information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Even with no output schema, the description supplies the return shape, example version format, ordering, error behavior, and the exact workflow context. An agent has enough information to call this tool correctly and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters (target, namespace) already have descriptions in the schema. The tool description does not add deeper parameter semantics, but a baseline of 3 is appropriate since the schema carries the parameter documentation burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('List') and resource ('Kubernetes versions / TanzuKubernetesReleases available on the Supervisor'). It clearly differentiates this read-only query from the cluster lifecycle siblings (create_tkc_cluster, upgrade_tkc_cluster) by framing it as a prerequisite for choosing a valid k8s_version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly advises calling this before create_tkc_cluster or upgrade_tkc_cluster to pick a valid k8s_version, giving clear contextual placement. It does not explicitly list when not to use it or compare against sibling query tools, but the intended usage is unmistakable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_tkc_clusterARead-onlyIdempotent
[READ] Get detailed status for a single TKC cluster.
Returns one object, not the list envelope: name, namespace, phase, k8s_version, control_plane_replicas, worker_replicas, conditions, infrastructure_ready, control_plane_ready. Run list_tkc_clusters first — a TKC name is only unique within one namespace. Poll this after create_tkc_cluster, scale_tkc_cluster or upgrade_tkc_cluster to watch an async change land.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Cluster name (via list_tkc_clusters). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | Namespace holding it. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds meaningful behavioral detail: it returns a single object with a defined field set, confirms it is not the list envelope, explains the namespace-uniqueness constraint, and positions it as a polling mechanism for async operations. This goes well beyond what the annotations alone provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and efficient: [READ] tag, one-sentence purpose, field list, then two pieces of workflow guidance. Every sentence earns its place, and the most important information is front-loaded. No fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-object getter with no output schema, the description covers the full picture: purpose, return shape, key fields, namespace scoping, and when to call it. The input schema covers the parameters, and annotations cover safety. No obvious gap would leave an agent uncertain about how to invoke or interpret the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters. The description adds useful contextual emphasis about looking up names via list_tkc_clusters and names being namespace-scoped, but it does not add significant new parameter-level semantics beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description begins with a clear verb and resource: 'Get detailed status for a single TKC cluster.' It explicitly differentiates from list_tkc_clusters by stating it returns one object, not the list envelope, and lists the returned fields. This leaves no ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit workflow guidance: run list_tkc_clusters first because a TKC name is unique only within a namespace, and poll this tool after create/scale/upgrade operations to observe async changes. It clearly states context, though it does not explicitly describe when to choose an alternative tool beyond the implied list-vs-single distinction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_tkc_kubeconfigAIdempotent
[WRITE] Credential access: get a kubeconfig for one TKC cluster.
Call only when the user explicitly asks for this kubeconfig; never as a side step. Returns {cluster, kubeconfig}, or {cluster, written_to} when output_path is given. The kubeconfig embeds a Supervisor bearer token (JWT from /wcp/login) that acts as the configured vCenter account until the JWT expires (typically hours; not tied to this process) — always pass output_path so the token never enters agent context, and report only the path. Nothing in the managed cluster changes, but output_path creates parent directories and truncates the named file (owner-only, 0600), so output_path='~/.kube/config' replaces the user's own kubeconfig. Run list_tkc_clusters first for name and namespace; use get_supervisor_kubeconfig instead for Supervisor-level access.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | TKC cluster name. | |
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | Namespace holding it. | |
| output_path | No | File to write, e.g. '~/.kube/my.yaml'. Omit to return the kubeconfig inline. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say readOnlyHint=false/destructiveHint=false/idempotentHint=true/openWorldHint=true; the description goes far beyond by disclosing the return shapes, the embedded JWT bearer-token lifecycle (hours, not tied to this process), and the concrete file side effects of output_path (creates parent dirs, truncates the target, 0600 owner-only, overwriting ~/.kube/config). It also gives the mitigating instruction to always pass output_path so the token never enters agent context. The file-truncation disclosure slightly exceeds the destructiveHint=false annotation, but it is added transparency rather than a contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the [WRITE] tag, purpose, and gating condition before the detail. The single dense paragraph is long and dash-heavy but nearly every clause (token lifetime, return shapes, overwrite warning, prerequisites) earns its place; minor tightening is possible in the token sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description carries the return-value burden and does so fully, specifying both possible return shapes. It also covers the safety-critical side effects, the credential lifetime, and the prerequisite call, so an agent has everything needed to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3, but the description adds real meaning: output_path changes the return shape ({kubeconfig} vs {written_to}), carries the side-effect semantics (directory creation, truncation, permissions), and is framed as a strong recommendation rather than an optional toggle. It also implies name/namespace should be sourced from list_tkc_clusters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('get a kubeconfig for one TKC cluster') and immediately frames it as credential access, which sets it apart from non-credential siblings like get_tkc_cluster. It also names the sibling it is not for (get_supervisor_kubeconfig) so the agent can disambiguate the two kubeconfig tools without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use ('only when the user explicitly asks') and when-not ('never as a side step'), plus a prerequisite ('Run list_tkc_clusters first for name and namespace') and a named alternative for the adjacent use case ('use get_supervisor_kubeconfig instead for Supervisor-level access'). Nothing about tool selection is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_namespacesARead-onlyIdempotent
[READ] List all vSphere Namespaces on the target vCenter with their status.
Returns the list envelope: items of {namespace, config_status (RUNNING = healthy, CONFIGURING, REMOVING, ERROR), description} plus returned/total/truncated — one call returns them all, so truncated is always false. Start here, then call get_namespace for detail, list_tkc_clusters for what runs inside, or update_namespace / delete_namespace to change one.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the response envelope, item shape, status semantics, and pagination behavior ('one call returns them all, so truncated is always false'). This adds substantial value beyond the annotations, which already declare read-only, idempotent, non-destructive behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core purpose and [READ] marker. Every sentence carries useful information: what is listed, what the return envelope contains, and how to proceed through sibling tools. No filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with one optional parameter, this is complete. The description covers the response format, status values, pagination behavior, and provides navigation to relevant sibling tools, so an agent has everything needed to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the single optional target parameter is already well documented in the schema. The description does not add further parameter details, but no compensation is needed given the high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'List all vSphere Namespaces on the target vCenter with their status.' It also distinguishes itself from related siblings like get_namespace and list_tkc_clusters by noting that it returns the full set of namespaces and is the intended entry point.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidance is provided: 'Start here, then call get_namespace for detail, list_tkc_clusters for what runs inside, or update_namespace / delete_namespace to change one.' This tells an agent exactly when to use this tool and what to use next based on intent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_namespace_storage_usageARead-onlyIdempotent
[READ] List PersistentVolumeClaims and storage usage inside one vSphere Namespace.
Via the Supervisor K8s API. Returns the family list envelope: {namespace, items: [{name, namespace, status (Bound / Pending / Lost), capacity ('10Gi'), storage_class}], returned, limit, total, truncated, hint}. Every PVC comes back in one call, so truncated is always False. Run list_namespaces first for the namespace; use list_supervisor_storage_policies instead for policy-level rather than PVC-level information. 'pvcs' and 'pvc_count' are deprecated pre-1.8.0 aliases of 'items' and 'returned', removed in 2.0 — read 'items'.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | Namespace to inspect. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds valuable behavioral context beyond that: it names the API path ('Via the Supervisor K8s API'), documents the full return envelope, explains that truncated is always False, and warns about deprecated aliases removed in 2.0.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-organized: purpose, return shape, behavioral guarantee, prerequisite, and deprecation note. Nothing is filler, and the most important information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description fully specifies the return envelope and field semantics. It also covers prerequisites, the alternative tool, the optional target parameter, and backward-compatibility caveats, making the tool safely callable by an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaning by emphasizing the namespace scope and telling the agent to run list_namespaces first to obtain a valid namespace value. It does not add much about the target parameter, but the schema already handles that fully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource — 'List PersistentVolumeClaims and storage usage' — and scopes it to 'one vSphere Namespace'. It also distinguishes itself from the sibling tool list_supervisor_storage_policies by explicitly noting the PVC-level vs policy-level difference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit routing guidance: 'Run list_namespaces first for the namespace' and 'use list_supervisor_storage_policies instead for policy-level rather than PVC-level information.' This clearly tells the agent when to use this tool versus the relevant sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_supervisor_storage_policiesARead-onlyIdempotent
[READ] List vCenter storage policies assignable to Supervisor Namespaces.
Returns the list envelope: items of {policy (ID), name, description} plus returned/total/truncated — one call returns them all, so truncated is always false. Call this before create_namespace or update_namespace and pass the 'policy' ID as their storage_policy. For PVC-level usage use list_namespace_storage_usage instead.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description adds value beyond annotations by specifying the return envelope (items of policy/name/description plus returned/total/truncated) and guaranteeing one call returns all results with truncated always false. This is useful behavioral context not present in the schema or annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured: it leads with purpose, then return envelope details, then usage guidance and alternative. Every sentence carries useful information, and nothing is redundant with the schema or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The return format, pagination behavior, and usage pattern are all explained. With such a simple input schema and rich annotations, this is a complete context for agents.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%: the only parameter 'target' is fully described in the input schema ('vCenter in config.yaml; omit for the default.'). The description does not add parameter-level detail, but with full schema coverage, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening phrase states the exact verb and resource with a clear scope, and the final line explicitly contrasts with the sibling tool list_namespace_storage_usage, so an agent can differentiate them immediately.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'Call this before create_namespace or update_namespace and pass the policy ID as their storage_policy.' It also gives an exclusion: 'For PVC-level usage use list_namespace_storage_usage instead.' This is direct when-to-use and alternative routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tkc_clustersARead-onlyIdempotent
[READ] List TanzuKubernetesCluster (TKC) clusters, optionally in one namespace.
Returns the family list envelope: {items: [{name, namespace, phase, k8s_version}], returned, limit, total, truncated, hint}. The Supervisor list is walked to completion, so truncated is always False. Start here, then call get_tkc_cluster for full detail or get_tkc_kubeconfig for access. 'clusters' is a deprecated pre-1.8.0 alias of 'items', removed in 2.0 — read 'items'.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | No | vSphere Namespace to filter by. Omit to list every one. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds substantial behavioral detail beyond the annotations: it specifies the exact response envelope fields, states that the Supervisor list is walked to completion so truncated is always False, and documents the deprecated 'clusters' alias. This gives the agent a precise model of the tool's behavior without needing to call it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence carries useful information: purpose, response shape, routing advice, and a deprecation warning. It is front-loaded with the core action, and the details are logically ordered.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Even with no output schema, the description fully documents the return envelope, pagination behavior, and how to proceed for more detail or access. Combined with the strong annotations and simple two-parameter schema, nothing essential is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents target and namespace. The description only restates that namespace filtering is optional, adding no new parameter-level meaning beyond the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'List TanzuKubernetesCluster (TKC) clusters, optionally in one namespace.' It clearly distinguishes from the sibling get_tkc_cluster by framing this as the listing entry point and directing further detail lookup to get_tkc_cluster.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives concrete guidance: 'Start here, then call get_tkc_cluster for full detail or get_tkc_kubeconfig for access.' This provides context for when this tool should be the first step and which siblings to use next. It stops short of explicitly stating when not to use it, but the routing is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_vm_classesARead-onlyIdempotent
[READ] List VM classes available for sizing TKC cluster nodes.
Returns the list envelope: items of {id (e.g. 'best-effort-large'), cpu_count, memory_mb, gpu_count (vGPU + DirectPath I/O; 0 if none)} plus returned/total/truncated — one call returns them all, so truncated is always false. Call this before create_tkc_cluster and pass the chosen 'id' as its vm_class; 'guaranteed-' classes reserve resources, 'best-effort-' do not.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as read-only and safe, and the description adds meaningful behavior beyond that: it explains the exact list envelope shape, confirms that one call returns all results and truncated is always false, and discloses the resource-reservation distinction between class prefixes. No contradiction with annotations exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the tool's core purpose and contains no filler. Every sentence contributes: what it lists, what the response contains, why the list is complete, how to use the result, and the meaningful class-prefix distinction. It is compact despite carrying substantial information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only list tool with no output schema, the description fully compensates by specifying the envelope structure, item fields, pagination behavior, and downstream usage. It gives an agent everything needed to invoke the tool and interpret its result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter, target, is fully documented in the schema with 100% coverage, and the description does not add new meaning about it. The description's guidance about the returned id being used as vm_class is useful for output consumption, but it does not deepen understanding of the target parameter itself, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'List VM classes available for sizing TKC cluster nodes.' It clearly identifies what the tool returns and connects it to a concrete use case. It also distinguishes itself from sibling operations like create_tkc_cluster by framing the call as a prerequisite.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly instructs when to use this tool: 'Call this before create_tkc_cluster and pass the chosen id as its vm_class.' It also provides decision-relevant semantics by explaining that 'guaranteed-*' classes reserve resources while 'best-effort-*' do not, which helps an agent choose the appropriate class.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_vm_groupsARead-onlyIdempotent
[READ] List VirtualMachineGroup objects and their bootOrder in a Namespace.
VM Service groups (vmoperator.vmware.com CRD, v1alpha4+) via the Supervisor
K8s API — the served CRD version is discovered at runtime. Returns the
family list envelope: items of {name, namespace, boot_order, member_count}
plus returned/total/truncated (walked to completion) and served_version.
boot_order mirrors spec.bootOrder: an ordered list of {members:
[{kind, name}], power_on_delay?}. Older Supervisors without v1alpha4 return
a teaching error naming the required version.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | vSphere Namespace to list VM groups in (via list_namespaces). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond annotations by describing the exact return envelope, the structure of boot_order, runtime discovery of the served CRD version, pagination/completion behavior, and the teaching error on older Supervisors. It fully discloses behavioral traits an agent needs to interpret results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, and every subsequent sentence adds meaningful detail about return shape, version behavior, and error handling. No filler or redundant rephrasing of the schema is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description fully compensates by specifying the returned fields, pagination semantics, CRD version behavior, and boot_order structure. An agent has enough information to invoke the tool and interpret the response correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with both target and namespace already documented. The description adds general context but little parameter-specific detail beyond what the schema provides, so a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description opens with '[READ] List VirtualMachineGroup objects and their bootOrder in a Namespace', naming a specific verb, resource, and scope. It clearly identifies the VM Service CRD and Supervisor K8s API, making it unambiguous what the tool does and distinct from sibling list tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: the tool operates in a specific Namespace and targets Supervisor VM Service groups. It does not explicitly name alternatives or exclusion conditions, but the namespace scoping and the version-related note about older Supervisors provide practical usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_vm_network_interfacesARead-onlyIdempotent
[READ] List the network interfaces (multi-NIC) of one VirtualMachine.
Reads spec.network.interfaces[] off a single VM Service VirtualMachine (vmoperator.vmware.com) via the Supervisor K8s API; the served CRD version is discovered at runtime. Returns the family list envelope: items of {name, network_name, network_kind, network_api_version} plus returned/total/truncated and vm_name/served_version. A VM with no network block returns an empty list, not an error. Run list_namespaces for the namespace; the VM name comes from your own VM inventory in that namespace.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| vm_name | Yes | Name of the VirtualMachine to read interfaces from. | |
| namespace | Yes | vSphere Namespace the VM lives in (via list_namespaces). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, idempotentHint, destructiveHint), the description reveals important runtime behavior: it reads via the Supervisor K8s API, discovers the served CRD version at runtime, returns a structured list envelope, and handles a VM without a network block by returning an empty list rather than an error. This is exactly the kind of behavior an agent cannot infer from annotations or schema alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: a concise one-line summary, the data source and return envelope, a key edge case, and prerequisite guidance. There is no fluff or repetition of the schema, and the most important scoping information is front-laoded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for this tool given its moderate complexity and the lack of an output schema: it explains what is returned, the empty-list behavior, the backend accessed, and how to supply the required parameters. An agent can select and invoke this tool correctly without needing additional context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers all parameters at 100%, so the baseline is 3. The description adds meaning by telling the agent how to obtain values: run list_namespaces for the namespace and source the VM name from the VM inventory in that namespace. It also implies that target is optional by not needing explanation, while the schema already gives its default.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'List the network interfaces (multi-NIC) of one VirtualMachine.' It names the exact data source (spec.network.interfaces[] on a VM Service VirtualMachine via the Supervisor K8s API) and clearly scopes this to a single VM, distinguishing it from the sibling VM listing tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives practical usage context: run list_namespaces to obtain the namespace and use the VM name from the VM inventory in that namespace. It does not explicitly name alternative tools or when-not-to-use conditions, but the single-VM scoping and prerequisites make the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_vm_snapshotsARead-onlyIdempotent
[READ] List VirtualMachineSnapshot objects in a vSphere Namespace.
VM Service snapshots (vmoperator.vmware.com CRD, new at v1alpha5) via the Supervisor K8s API — the served CRD version is discovered at runtime, not hardcoded. Returns the family list envelope: items of {name, namespace, vm_name, created, ready} plus returned/total/truncated (walked to completion, so truncated is always false) and served_version. If the Supervisor is older than v1alpha5 the error names the required version. Run list_namespaces first for the namespace; use list_vm_network_interfaces for a VM's NICs.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | vSphere Namespace to list snapshots in (via list_namespaces). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark readOnly/idempotent/non-destructive, and the description adds meaningful behavioral detail: the served CRD version is discovered at runtime, the return envelope includes specific fields, truncated is always false because it walks to completion, and old Supervisors produce errors naming the required version. This goes well beyond the annotations and conditions the agent to expect a specific response shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then efficiently packs only relevant operational details: CRD discovery, return envelope fields, completion behavior, error semantics, and prerequisites. No filler or redundant restatement of the schema is present. Every clause contributes to safe invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description's explanation of the returned envelope (items fields, returned/total/truncated, served_version) is essential and fully supplied. It also covers error behavior, prerequisite calls, and the alternative for NICs, making it complete for an agent to use this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (target and namespace both have explanatory descriptions), so the schema already communicates parameter meaning. The description adds minor value by noting the namespace comes from list_namespaces and target defaults via config.yaml, but it does not substantially extend the schema definitions. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'List VirtualMachineSnapshot objects in a vSphere Namespace.' It clearly differentiates this from siblings by explicitly naming list_vm_network_interfaces for NICs and referencing the vSphere Namespace scope. The 'READ' tag reinforces the intent without ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use guidance: run list_namespaces first for the namespace, and use list_vm_network_interfaces for a VM's NICs instead. It also explains the behavior when the Supervisor predates v1alpha5, which tells an agent what to expect and how to respond. This is strong routing guidance relative to alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scale_tkc_clusterA
[WRITE] Scale the worker node count of an existing TanzuKubernetesCluster (TKC).
Asynchronous: returns {name, namespace, pool, worker_count, status: "scaling"} immediately — poll get_tkc_cluster to watch nodes appear or drain. Scales workers only; use upgrade_tkc_cluster instead for the K8s version. Not destructive, but lowering worker_count drains removed nodes.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Cluster name (via list_tkc_clusters). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | Namespace holding it. | |
| pool_name | No | Node pool (machineDeployment). Omit for the first; other pools are always preserved. | |
| worker_count | Yes | Desired total, integer >= 1 (below 1 is rejected). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and idempotentHint=false. The description adds valuable behavioral context: the operation is asynchronous, returns a scaling status immediately, and lowering worker_count drains removed nodes. It also clarifies that other pools are always preserved, going beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: the first states the action, the second explains the async behavior and polling follow-up, the third disambiguates from upgrade_tkc_cluster, and the fourth warns about scale-down drain. No fluff, and key behavioral caveats are front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
As an async mutation with no output schema, the description is nearly complete: it covers return status, how to observe completion, and the drain behavior on scale-down. A minor gap: it does not explicitly mention that an agent should avoid scaling during other operations or whether scaling is allowed repeatedly, but given the annotations and schema richness, this is a strong definition.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaningful parameter context by explaining the asynchronous response shape, the meaning of worker_count as desired total, and the pool_name default behavior ('Omit for the first; other pools are always preserved'). This goes beyond schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Scale') and precise resource ('worker node count of an existing TanzuKubernetesCluster (TKC)'). Explicitly distinguishes from upgrade_tkc_cluster by noting it scales workers only and that upgrade is for the K8s version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear when-to-use guidance: scale worker count, and explicitly routes to upgrade_tkc_cluster for K8s version changes. Also notes the non-destructive nature of lowering worker_count and that nodes drain, which helps an agent decide when this tool is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_namespaceA
[WRITE] Update resource quotas or storage policy of an existing vSphere Namespace.
Only the fields you pass are patched; omitting all of them returns status "no_changes" without an API call, otherwise {namespace, status: "updated"}. Applies immediately — no dry run, no undo. Use this rather than create_namespace when the namespace exists; valid storage_policy values come from list_supervisor_storage_policies.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Existing namespace name (discover via list_namespaces). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| cpu_limit | No | New CPU limit in MHz. Omit to keep current. | |
| storage_policy | No | New storage policy ID. Omit to keep current. | |
| memory_limit_mib | No | New memory limit in MiB. Omit to keep current. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses patch semantics, the no_changes response when all fields are omitted, immediate application with no dry run or undo, and the success result shape. These behaviors go well beyond the annotations, which only provide hints that the operation is a non-read-only, non-idempotent, non-destructive write. No contradiction with annotations exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the action and target. Each sentence contributes distinct value: patch behavior, no-op response, immediacy/no-undo, sibling differentiation, and parameter sourcing. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter mutation tool with no output schema, the description covers what is updated, how updates are applied, what happens when no fields are passed, what the success response looks like, and where to find valid values. The absence of an output schema is mitigated by the explicit return shape in the description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already explains each parameter. The description adds meaningful context by clarifying that passing no optional fields produces no_changes without an API call, and by pointing to list_supervisor_storage_policies as the source for valid storage_policy values. This elevates it above the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description opens with a specific verb and resource: 'Update resource quotas or storage policy of an existing vSphere Namespace.' It clearly distinguishes from the sibling create_namespace by stating to use this when the namespace exists. The [WRITE] marker reinforces that this is a mutating operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this rather than create_namespace when the namespace exists,' giving an unambiguous when-to-use rule with a named alternative. It also advises where to get valid storage_policy values, which is actionable guidance for selecting and preparing the call.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
upgrade_tkc_clusterA
[WRITE] Upgrade a TKC cluster to a new Kubernetes version.
Returns {name, namespace, new_version, status: "upgrading"}. Asynchronous and irreversible — Kubernetes cannot be downgraded, so poll get_tkc_cluster until phase is running. There is no dry run. Use this only for the K8s version; prefer scale_tkc_cluster for node counts.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Cluster name (via list_tkc_clusters). | |
| target | No | vCenter in config.yaml; omit for the default. | |
| namespace | Yes | Namespace holding it. | |
| k8s_version | Yes | Target version from get_tkc_available_versions. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses that the upgrade is asynchronous and irreversible, that downgrading is impossible, that no dry run exists, and it specifies the exact return shape. This is essential behavioral context for a mutating, non-idempotent tool, especially with no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The definition is compact and front-loaded: purpose first, then return and behavior, then routing guidance. Every sentence earns its place, with no redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex asynchronous mutation with no output schema, the description covers the critical operational details: what it returns, how to confirm completion, irreversibility, lack of dry run, and how to choose between this tool and scale_tkc_cluster. Nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents all four parameters, including that k8s_version should come from get_tkc_available_versions. The description does not add parameter-level meaning beyond what the schema provides, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Upgrade a TKC cluster to a new Kubernetes version.' It also clearly distinguishes this tool from scale_tkc_cluster by scoping it to Kubernetes version changes, making sibling differentiation easy.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: 'Use this only for the K8s version; prefer scale_tkc_cluster for node counts.' It also instructs the agent to poll get_tkc_cluster until the phase is running and warns that there is no dry run.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.11.0- Changed
create_namespace5 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -trueNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean"
- Changed
create_tkc_cluster5 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -trueNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"YAML plan only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean"
- Changed
delete_namespace9 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / confirmed / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / confirmed / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / confirmed / descriptionPrevious value: -"Must be True to proceed."New value: +"Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews." - removed
Input schema / properties / confirmed / typeRemoved value: -"boolean" - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -trueNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean"
- Changed
delete_tkc_cluster10 fields changed- added
Input schema / properties / confirmAdded value: +{ + "default": false, + "description": "False (default) returns the blast radius and changes nothing. True applies it.", + "title": "Confirm", + "type": "boolean" +} - added
Input schema / properties / confirmed / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / confirmed / defaultPrevious value: -falseNew value: +null - changed
Input schema / properties / confirmed / descriptionPrevious value: -"Must be True to proceed."New value: +"Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews." - removed
Input schema / properties / confirmed / typeRemoved value: -"boolean" - added
Input schema / properties / dry_run / anyOfAdded value: +[ + { + "type": "boolean" + }, + { + "type": "null" + } +] - changed
Input schema / properties / dry_run / defaultPrevious value: -trueNew value: +null - changed
Input schema / properties / dry_run / descriptionPrevious value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=True previews." - removed
Input schema / properties / dry_run / typeRemoved value: -"boolean" - changed
Input schema / properties / force / descriptionPrevious value: -"Skip the workload check (dangerous)."New value: +"Skip the running-workload check (dangerous)."
1 tool update
v1.9.1- Changed
get_supervisor_kubeconfig1 field changed- added
Input schema / properties / output_pathAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "File to write, e.g. '~/.kube/supervisor.yaml'. Omit to return the kubeconfig inline. Creates parent directories and truncates the file.", + "title": "Output Path" +}
23 tool updates
v1.8.14- Changed
check_vks_compatibility2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
create_namespace9 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_id / descriptionAdded value: +"Supervisor MoRef (from check_vks_compatibility)." - added
Input schema / properties / cpu_limit / descriptionAdded value: +"MHz. Omit for no limit." - added
Input schema / properties / description / descriptionAdded value: +"Free-text label. Omit for none." - added
Input schema / properties / dry_run / descriptionAdded value: +"Preview only (default: True)." - added
Input schema / properties / memory_limit_mib / descriptionAdded value: +"MiB. Omit for no limit." - added
Input schema / properties / name / descriptionAdded value: +"Namespace name (lowercase, no spaces)." - added
Input schema / properties / storage_policy / descriptionAdded value: +"Policy ID (from list_supervisor_storage_policies)." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
create_tkc_cluster10 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / control_plane_count / descriptionAdded value: +"1 or 3." - added
Input schema / properties / dry_run / descriptionAdded value: +"YAML plan only (default: True)." - added
Input schema / properties / k8s_version / descriptionAdded value: +"e.g. 'v1.28.4+vmware.1'." - added
Input schema / properties / name / descriptionAdded value: +"Cluster name." - added
Input schema / properties / namespace / descriptionAdded value: +"Must already exist (see list_namespaces)." - added
Input schema / properties / storage_class / descriptionAdded value: +"Storage class." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default." - added
Input schema / properties / vm_class / descriptionAdded value: +"Node sizing, e.g. 'best-effort-large'." - added
Input schema / properties / worker_count / descriptionAdded value: +"Worker nodes (>= 1)."
- Changed
delete_namespace5 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / confirmed / descriptionAdded value: +"Must be True to proceed." - added
Input schema / properties / dry_run / descriptionAdded value: +"Preview only (default: True)." - added
Input schema / properties / name / descriptionAdded value: +"Namespace name to delete (discover via list_namespaces)." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
delete_tkc_cluster7 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / confirmed / descriptionAdded value: +"Must be True to proceed." - added
Input schema / properties / dry_run / descriptionAdded value: +"Preview only (default: True)." - added
Input schema / properties / force / descriptionAdded value: +"Skip the workload check (dangerous)." - added
Input schema / properties / name / descriptionAdded value: +"Cluster name (via list_tkc_clusters)." - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace holding it." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_harbor_info2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_namespace3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / name / descriptionAdded value: +"Namespace name, e.g. 'dev' (discover via list_namespaces)." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_supervisor_kubeconfig3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / namespace / descriptionAdded value: +"vSphere Namespace to set as the kubeconfig context." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_supervisor_status3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_id / descriptionAdded value: +"Compute cluster MoRef, e.g. 'domain-c1' (wcp_clusters field of check_vks_compatibility)." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_tkc_available_versions3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / namespace / descriptionAdded value: +"vSphere Namespace used to reach the Supervisor K8s API." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_tkc_cluster4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / name / descriptionAdded value: +"Cluster name (via list_tkc_clusters)." - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace holding it." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
get_tkc_kubeconfig5 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / name / descriptionAdded value: +"TKC cluster name." - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace holding it." - added
Input schema / properties / output_path / descriptionAdded value: +"File to write, e.g. '~/.kube/my.yaml'. Omit to return the kubeconfig inline." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
list_namespace_storage_usage3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace to inspect." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
list_namespaces2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
list_supervisor_storage_policies2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
list_tkc_clusters3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / namespace / descriptionAdded value: +"vSphere Namespace to filter by. Omit to list every one." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
list_vm_classes2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Added
list_vm_groups - Added
list_vm_network_interfaces - Added
list_vm_snapshots - Changed
scale_tkc_cluster6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / name / descriptionAdded value: +"Cluster name (via list_tkc_clusters)." - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace holding it." - added
Input schema / properties / pool_name / descriptionAdded value: +"Node pool (machineDeployment). Omit for the first; other pools are always preserved." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default." - added
Input schema / properties / worker_count / descriptionAdded value: +"Desired total, integer >= 1 (below 1 is rejected)."
- Changed
update_namespace6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cpu_limit / descriptionAdded value: +"New CPU limit in MHz. Omit to keep current." - added
Input schema / properties / memory_limit_mib / descriptionAdded value: +"New memory limit in MiB. Omit to keep current." - added
Input schema / properties / name / descriptionAdded value: +"Existing namespace name (discover via list_namespaces)." - added
Input schema / properties / storage_policy / descriptionAdded value: +"New storage policy ID. Omit to keep current." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
- Changed
upgrade_tkc_cluster5 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / k8s_version / descriptionAdded value: +"Target version from get_tkc_available_versions." - added
Input schema / properties / name / descriptionAdded value: +"Cluster name (via list_tkc_clusters)." - added
Input schema / properties / namespace / descriptionAdded value: +"Namespace holding it." - added
Input schema / properties / target / descriptionAdded value: +"vCenter in config.yaml; omit for the default."
8 tool updates
v1.8.9- Added
create_namespace - Added
delete_namespace - Added
delete_tkc_cluster - Added
get_supervisor_status - Added
get_tkc_cluster - Added
list_namespaces - Added
list_tkc_clusters - Added
list_vm_classes
9 tool updates
v1.8.8- Removed
create_namespace - Removed
delete_namespace - Removed
delete_tkc_cluster - Removed
get_supervisor_status - Removed
get_tkc_cluster - Removed
list_namespaces - Changed
list_supervisor_storage_policies1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "list_supervisor_storage_policiesOutput", - "type": "object" -}New value: +null
- Removed
list_tkc_clusters - Removed
list_vm_classes
1 tool update
v1.5.38- Changed
scale_tkc_cluster1 field changed- added
Input schema / properties / pool_nameAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Pool Name" +}
TDQS
Scored across 23 tools
Each tool targets a distinct resource and action — Supervisor, namespace, TKC, storage, kubeconfigs, VM Service — so there is no duplicate functionality. The only spots where an agent might hesitate are the two kubeconfig tools and check_vks_compatibility vs get_supervisor_status, but the descriptions draw clear boundaries.
The dominant verb_noun pattern (list_*, get_*, create_*, delete_*) is consistent and readable. Deviations: get_supervisor_kubeconfig and get_tkc_kubeconfig are write-oriented credential actions labeled as get_, and get_tkc_available_versions returns a list rather than a single object.
23 tools is a large surface and sits in the 16–25 range that feels heavy; several VM Service inspection tools could arguably be bundled. That said, the core namespace/TKC lifecycle and supporting lookups mostly justify each tool's presence.
The namespace and TKC lifecycles are thoroughly covered: compatibility, status, CRUD, scale/upgrade/delete, versions, VM classes, storage policies, and kubeconfigs. Gaps are peripheral — no VirtualMachine list/create/delete, no Harbor repository listing, no namespace permission management — and don't block the primary workflows.
Maintenance
Related MCP Connectors
Hosted MCP catalog with 30 tenant-isolated browser, RAG, AI, mail and media tools.
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
AI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).
Related MCP Servers
- AlicenseAqualityAmaintenanceAI-powered VMware vCenter/ESXi monitoring and operations. 20 MCP tools for inventory queries, health monitoring, VM lifecycle management, fast provisioning (Linked Clone, OVA, template deploy), snapshot management, and datastore browsing. Supports vSphere 6.5–8.0. Works with local models via Ollama/LM Studio.44623 PyPI74MIT
- AlicenseAqualityAmaintenanceAI-powered VMware NSX networking management. Configure segments, gateways, NAT, routing, and IPAM via natural language with 31 MCP tools.33385 PyPI5MIT
- AlicenseAqualityAmaintenanceAI-powered VMware storage management for vSphere. Manage datastores, iSCSI targets, and vSAN via natural language with 11 MCP tools.14499 PyPI3MIT
- AlicenseAqualityAmaintenanceAI-powered VMware Aria Operations monitoring and capacity planning. Query metrics, manage alerts, detect anomalies, and plan capacity with 18 MCP tools.44404 PyPI2MIT