Skip to main content
Glama

VMware VKS

Автор: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com Это проект, созданный сообществом инженером VMware, а не официальный продукт VMware. Официальные инструменты разработчика VMware см. на developer.broadcom.com.

English | 中文

MCP Skill + CLI для управления VMware vSphere Kubernetes Service (VKS) — кластеры Supervisor, пространства имен vSphere и жизненный цикл кластеров VKS. 20 инструментов MCP.

License: MIT

Сопутствующие навыки

Часть семейства навыков VMware MCP. Каждый навык отвечает за отдельную область — устанавливайте только то, что вам нужно.

Навык

Область применения

Инструменты

Установка

vmware-aiops ⭐ точка входа

Жизненный цикл ВМ, развертывание, гостевые операции, кластеры

31

uv tool install vmware-aiops

vmware-monitor

Мониторинг (только чтение), тревоги, события, информация о ВМ

8

uv tool install vmware-monitor

vmware-storage

Хранилища данных, iSCSI, vSAN

11

uv tool install vmware-storage

vmware-nsx

Сети NSX: сегменты, шлюзы, NAT, IPAM

31

uv tool install vmware-nsx-mgmt

vmware-nsx-security

Микросегментация DFW, группы безопасности, Traceflow

20

uv tool install vmware-nsx-security

vmware-aria

Метрики Aria Ops, алерты, планирование емкости

18

uv tool install vmware-aria

Related MCP server: vmware-nsx

Предварительные требования

  • vSphere 8.0+ — API управления рабочими нагрузками (Supervisor) требуют vSphere 8.x

  • Включенное управление рабочими нагрузками — WCP должен быть включен как минимум на одном вычислительном кластере

  • Лицензия — vSphere Kubernetes Service (Enterprise Plus или VMware Cloud Foundation)

После настройки выполните vmware-vks check, чтобы убедиться, что все требования выполнены.

Быстрый старт

# Install
uv tool install vmware-vks

# Configure
mkdir -p ~/.vmware-vks
cp config.example.yaml ~/.vmware-vks/config.yaml
# Edit config.yaml with your vCenter host and username

echo "VMWARE_MY_VCENTER_PASSWORD=your_password" > ~/.vmware-vks/.env
chmod 600 ~/.vmware-vks/.env

# Verify
vmware-vks check

# Common operations
vmware-vks supervisor status domain-c1
vmware-vks namespace list
vmware-vks tkc list
vmware-vks tkc create my-cluster -n dev --version v1.28.4+vmware.1 --vm-class best-effort-large
vmware-vks tkc create my-cluster -n dev --apply

Типовые рабочие процессы

Развертывание нового кластера TKC

  1. Проверка совместимости → vmware-vks check

  2. Список доступных версий K8s → vmware-vks tkc versions -n dev

  3. Создание пространства имен (если нужно) → vmware-vks namespace create dev --cluster domain-c1 --storage-policy vSAN --cpu 16000 --memory 32768 --apply

  4. Создание кластера TKC → vmware-vks tkc create dev-cluster -n dev --version v1.28.4+vmware.1 --control-plane 1 --workers 3 --vm-class best-effort-large --apply

  5. Получение kubeconfig → vmware-vks kubeconfig get dev-cluster -n dev

Масштабирование рабочих узлов для нагрузочного тестирования

  1. Проверка текущего состояния → vmware-vks tkc get dev-cluster -n dev

  2. Масштабирование вверх → vmware-vks tkc scale dev-cluster -n dev --workers 6

  3. Мониторинг прогресса → vmware-vks tkc get dev-cluster -n dev (отслеживание фазы)

  4. Масштабирование вниз после теста

Управление ресурсами пространства имен

  1. Список пространств имен → vmware-vks namespace list

  2. Проверка использования → vmware-vks storage -n dev

  3. Обновление квоты → vmware-vks namespace update dev --cpu 32000 --memory 65536

Справочник инструментов (20 инструментов)

Supervisor

Инструмент

Описание

Тип

check_vks_compatibility

Проверка версии vCenter + статус WCP

Чтение

get_supervisor_status

Статус кластера Supervisor и API-эндпоинт K8s

Чтение

list_supervisor_storage_policies

Доступные политики хранения для пространств имен

Чтение

Пространство имен

Инструмент

Описание

Тип

list_namespaces

Все пространства имен vSphere со статусом

Чтение

get_namespace

Детали пространства имен (квоты, хранилище, роли)

Чтение

create_namespace

Создание пространства имен с предварительным просмотром (dry-run)

Запись

update_namespace

Изменение квот и политики хранения

Запись

delete_namespace

Удаление с защитой TKC (отклоняется, если есть кластеры)

Запись

list_vm_classes

Доступные классы ВМ для размеров TKC

Чтение

TKC

Инструмент

Описание

Тип

list_tkc_clusters

Список TanzuKubernetesCluster со статусом

Чтение

get_tkc_cluster

Детали кластера (узлы, состояние, условия)

Чтение

get_tkc_available_versions

Поддерживаемые версии K8s на Supervisor

Чтение

create_tkc_cluster

Создание TKC с планом YAML + стандартный dry-run

Запись

scale_tkc_cluster

Масштабирование количества рабочих узлов

Запись

upgrade_tkc_cluster

Обновление версии K8s

Запись

delete_tkc_cluster

Удаление с защитой рабочих нагрузок

Запись

Доступ

Инструмент

Описание

Тип

get_supervisor_kubeconfig

Kubeconfig YAML для Supervisor

Чтение

get_tkc_kubeconfig

Kubeconfig для TKC (stdout или файл)

Чтение

get_harbor_info

Информация о встроенном реестре Harbor

Чтение

list_namespace_storage_usage

Список PVC и статистика емкости

Чтение

Архитектура

User (Natural Language)
  ↓
AI Agent (Claude Code / Goose / Cursor)
  ↓ reads SKILL.md
  ↓
vmware-vks CLI  ─── or ───  vmware-vks MCP Server (stdio)
  │
  ├─ Layer 1: pyVmomi → vCenter REST API
  │   Supervisor status, storage policies, Namespace CRUD, VM classes, Harbor
  │
  └─ Layer 2: kubernetes client → Supervisor K8s API endpoint
      TKC CR apply / get / delete  (cluster.x-k8s.io/v1beta1)
      Kubeconfig built from Layer 1 session token
  ↓
vCenter Server 8.x+ (Workload Management enabled)
  ↓
Supervisor Cluster → vSphere Namespaces → TanzuKubernetesCluster

Справочник CLI

# Pre-flight diagnostics
vmware-vks check

# Supervisor
vmware-vks supervisor status <cluster-id>
vmware-vks supervisor storage-policies

# Namespace
vmware-vks namespace list
vmware-vks namespace get <name>
vmware-vks namespace create <name> --cluster <id> --storage-policy <policy>
vmware-vks namespace create <name> --cluster <id> --storage-policy <policy> --apply
vmware-vks namespace update <name> [--cpu <mhz>] [--memory <mib>]
vmware-vks namespace delete <name>
vmware-vks namespace vm-classes

# VKS Cluster
vmware-vks tkc list [-n <namespace>]
vmware-vks tkc get <name> -n <namespace>
vmware-vks tkc versions -n <namespace>
vmware-vks tkc create <name> -n <namespace> [--version <v>] [--vm-class <c>]
vmware-vks tkc create <name> -n <namespace> --apply
vmware-vks tkc scale <name> -n <namespace> --workers <n>
vmware-vks tkc upgrade <name> -n <namespace> --version <v>
vmware-vks tkc delete <name> -n <namespace>

# Kubeconfig
vmware-vks kubeconfig supervisor -n <namespace>
vmware-vks kubeconfig get <cluster-name> -n <namespace> [-o <path>]

# Harbor & Storage
vmware-vks harbor
vmware-vks storage -n <namespace>

Сервер MCP

После uv tool install vmware-vks запустите сервер MCP одной командой (v1.5.15+):

# Recommended — single command, no network re-resolve
vmware-vks mcp

# With a custom config path
VMWARE_VKS_CONFIG=/path/to/config.yaml vmware-vks mcp

Конфигурация агента

Добавьте в конфигурацию MCP вашего ИИ-агента:

{
  "mcpServers": {
    "vmware-vks": {
      "command": "vmware-vks",
      "args": ["mcp"],
      "env": {
        "VMWARE_VKS_CONFIG": "~/.vmware-vks/config.yaml"
      }
    }
  }
}
# Run without installing (requires PyPI access each launch)
uvx --from vmware-vks vmware-vks mcp

# Legacy entry point (still works, kept for backward compatibility)
vmware-vks-mcp

Находитесь за корпоративным TLS-прокси? uvx может завершиться ошибкой invalid peer certificate: UnknownIssuer. Используйте рекомендованный формат vmware-vks mcp выше (сеть не требуется) или установите UV_NATIVE_TLS=true.

Безопасность

Функция

Описание

Преимущественное чтение

12 из 20 инструментов доступны только для чтения

Стандартный dry-run

create_namespace, create_tkc_cluster, delete_namespace, delete_tkc_cluster по умолчанию имеют dry_run=True

Защита TKC

delete_namespace отклоняет удаление, если внутри есть кластеры TKC

Защита нагрузок

delete_tkc_cluster отклоняет удаление, если запущены Deployments/StatefulSets

Безопасность учетных данных

Пароли берутся только из переменных окружения (файл .env), никогда не хранятся в config.yaml

Аудит-логирование

Все операции записи логируются в ~/.vmware-vks/audit.log

Транспорт stdio

Нет сетевого прослушивателя; MCP работает только через stdio

Устранение неполадок

Ошибка "VKS not compatible"

Управление рабочими нагрузками должно быть включено в vCenter. Проверьте: vCenter UI -> Workload Management. Требуется vSphere 8.x+ с лицензией Enterprise Plus или VCF.

Ошибка создания пространства имен "storage policy not found"

Сначала выведите список доступных политик: vmware-vks supervisor storage-policies. Имена политик чувствительны к регистру.

Кластер TKC застрял в фазе "Creating"

Проверьте события Supervisor в vCenter. Распространенные причины: недостаточно ресурсов на хостах ESXi, сетевые проблемы с NSX-T или политика хранения недоступна на целевом хранилище данных.

Ошибка получения Kubeconfig

API-эндпоинт Supervisor должен быть доступен с машины, на которой запущен vmware-vks. Проверьте правила брандмауэра для порта 6443.

Операция масштабирования не дает эффекта

Перед масштабированием убедитесь, что кластер находится в фазе "Running". Кластеры в фазе "Creating" или "Updating" отклоняют операции масштабирования.

Удаление пространства имен неожиданно отклонено

Защита удаления пространства имен предотвращает удаление, если внутри существуют кластеры TKC. Сначала удалите все кластеры TKC в пространстве имен, затем повторите попытку.

Совместимость версий

vSphere

Поддержка

Примечания

8.0+

Полная

Доступны API управления рабочими нагрузками

7.x

Не поддерживается

Поверхность API WCP отличается; используйте vSphere 8.x

Связанные проекты

Навык

Область применения

Инструменты

Установка

vmware-aiops ⭐ точка входа

Жизненный цикл ВМ, развертывание, гостевые операции, кластеры

31

uv tool install vmware-aiops

vmware-monitor

Мониторинг (только чтение), тревоги, события, информация о ВМ

8

uv tool install vmware-monitor

vmware-storage

Хранилища данных, iSCSI, vSAN

11

uv tool install vmware-storage

vmware-nsx

Сети NSX: сегменты, шлюзы, NAT, IPAM

31

uv tool install vmware-nsx-mgmt

vmware-nsx-security

Микросегментация DFW, группы безопасности, Traceflow

20

uv tool install vmware-nsx-security

vmware-aria

Метрики Aria Ops, алерты, планирование емкости

18

uv tool install vmware-aria

Лицензия

MIT

Available Tools

23 tools
check_vks_compatibilityA
Read-onlyIdempotent

[READ] Check whether this vCenter supports VKS (requires vSphere 8.x+).

Returns compatible (bool), vcenter_version, wcp_enabled_clusters and wcp_clusters ({cluster, status}). Start here: those cluster MoRefs are the cluster_id for get_supervisor_status and create_namespace. Only reports vCenter-level support — a listed cluster may still be CONFIGURING.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/openWorld/idempotent/non-destructive, and the description reinforces this with a [READ] tag. It adds the important caveat that it 'Only reports vCenter-level support — a listed cluster may still be CONFIGURING,' which is exactly the behavioral nuance an agent needs. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: the [READ] tag, purpose, and prerequisite appear first, followed by return values and downstream usage. Every sentence adds information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by naming return fields and their types (bool, string, cluster/status objects). It also explains how to use the output as cluster_id for two sibling tools and warns about the CONFIGURING state. This is complete for an optional-parameter read-only check, though exact status values are left unspecified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with the target parameter fully documented ('vCenter in config.yaml; omit for default'), so the description does not need to add parameter-level detail. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Check whether this vCenter supports VKS'), states a hard prerequisite (vSphere 8.x+), and lists concrete return fields, distinguishing this read-only compatibility probe from the other vSphere/TKC tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'Start here' and maps the returned cluster MoRefs to cluster_id for get_supervisor_status and create_namespace, giving immediate downstream routing. It also warns that vCenter-level support does not guarantee cluster readiness, signaling when to follow up. It does not enumerate all when-not-to-use cases, but the guidance is concrete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_namespaceA

[WRITE] Create a vSphere Namespace on a Supervisor Cluster.

Without confirm=True this only previews: it returns blast_radius (the spec that would be applied, and whether the name is already taken) and creates nothing. Show it to the user and get their decision. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. confirm=True returns {action: "created", namespace, status, cluster, blast_radius}; it is refused when the name is taken (use update_namespace) or the existing names could not be read. Confirm with get_namespace afterwards.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesNamespace name (lowercase, no spaces).
targetNovCenter in config.yaml; omit for the default.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
cpu_limitNoMHz. Omit for no limit.
cluster_idYesSupervisor MoRef (from check_vks_compatibility).
descriptionNoFree-text label. Omit for none.
storage_policyYesPolicy ID (from list_supervisor_storage_policies).
memory_limit_mibNoMiB. Omit for no limit.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes far beyond the annotations by explaining the preview-only default, the exact return shape for confirm=True, refusal conditions, and the required confirmation workflow. This is especially valuable because the annotations only indicate readOnly=false and idempotent=false; the description reveals the nuanced two-phase behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Every sentence earns its place. The description is front-loaded with the core purpose, then efficiently covers preview behavior, user decision, refusal conditions, and follow-up verification. It is detailed but not bloated, and the structure guides the agent through the correct call sequence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 9-parameter creation tool with no output schema, the description is remarkably complete. It explains the preview return, the confirmed return, failure modes, and post-creation verification. It also refers agents to the right sibling tools for name conflicts and verification, leaving no critical ambiguity for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, but the description adds meaningful parameter-level context by explaining what confirm actually controls, what blast_radius contains, and why the agent should not set confirm=True unilaterally. It doesn't repeat every parameter, but it clarifies the most behaviorally important one beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Create a vSphere Namespace on a Supervisor Cluster.' It clearly distinguishes this creation tool from sibling operations like update_namespace, delete_namespace, and get_namespace, and the [WRITE] tag reinforces that this is a mutating operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit usage rules: without confirm=True it only previews, the user must see the preview before confirming, and the agent must not set confirm=True on its own. It also names alternatives directly: use update_namespace when the name is taken, and verify with get_namespace afterwards.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_tkc_clusterA

[WRITE] Create a TanzuKubernetesCluster in a vSphere Namespace.

Without confirm=True this only previews: it returns blast_radius (node counts, VM class, the YAML manifest, and whether the name is taken) and creates nothing. Show it to the user and get their decision. Do not set confirm=True on your own because the user asked earlier — they have not seen the preview yet. confirm=True returns {action: "created", name, namespace, status: "creating", yaml, blast_radius} and provisions in the background — poll get_tkc_cluster until phase is running. Refused when the name is taken or the namespace's clusters could not be read. Call get_tkc_available_versions for k8s_version and list_vm_classes first.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesCluster name.
targetNovCenter in config.yaml; omit for the default.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews.
vm_classYesNode sizing, e.g. 'best-effort-large'.
namespaceYesMust already exist (see list_namespaces).
k8s_versionYese.g. 'v1.28.4+vmware.1'.
worker_countNoWorker nodes (>= 1).
storage_classNoStorage class.vsphere-storage
control_plane_countNo1 or 3.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Even with annotations present, the description adds critical behavioral context: without confirm=True the tool only previews and changes nothing; confirm=True provisions in the background and returns {action: 'created', status: 'creating'}, requiring polling of get_tkc_cluster until running. It also discloses refusal behavior when the name is taken or namespace clusters cannot be read. This goes well beyond the annotation signals.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence earns its place: it covers purpose, preview semantics, user-approval requirement, confirmation behavior, polling, refusal conditions, and prerequisites. The critical safety warning is front-loaded early. The length is justified by the complexity and the severe consequence of an unconfirmed create.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity, the description is comprehensive: it explains return values for both modes, background provisioning, polling expectations, refusal cases, and required setup calls. The input schema covers parameter defaults and types, while the description covers the behavioral contract. Nothing essential for safe invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds meaning beyond the schema by linking k8s_version and vm_class to prerequisite calls (get_tkc_available_versions and list_vm_classes), and by clarifying the behavioral significance of confirm. It does not restate the schema, but it enriches the most safety-critical parameter without covering every field.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a clear [WRITE] marker and explicitly states the action: 'Create a TanzuKubernetesCluster in a vSphere Namespace.' This distinguishes it from sibling tools that scale, upgrade, delete, or list clusters. The purpose is immediately unambiguous and the tool's resource is precisely named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives strong operational guidance: it explains the preview-then-confirm flow, warns 'Do not set confirm=True on your own because the user asked earlier', and instructs the agent to show the preview to the user first. It also states prerequisites ('Call get_tkc_available_versions for k8s_version and list_vm_classes first') and refusal conditions. This is explicit when-and-how-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_namespaceA
Destructive

[WRITE] Delete a vSphere Namespace and everything inside it (irreversible).

Without confirm=True this only previews: it returns blast_radius (the namespace, and the TKC clusters, VMs and PVCs inside it, with counts and names) and deletes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user said "delete" earlier: they have not seen what it destroys yet.

confirm=True returns {action: "deleted", namespace, status, blast_radius}. Refused while TKC clusters exist inside (run delete_tkc_cluster on each), and whenever the clusters, VMs or PVCs inside could not be read. Prefer update_namespace to only change quotas.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesNamespace name to delete (discover via list_namespaces).
targetNovCenter in config.yaml; omit for the default.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=True previews.
confirmedNoDeprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the destructiveHint annotation, the description discloses irreversible destruction, preview-only behavior, refusal conditions when inner resources cannot be read, and the returned blast_radius structure. The behavior is fully transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence earns its place, covering purpose, safety, refusal conditions, return shape, and alternatives. The critical warning is front-loaded and clearly separated from supporting details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, irreversible tool with no output schema, the description covers the action, the preview mechanism, the return values, the blocking conditions, and the recommended sibling tool. Nothing an agent needs to call it safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds operational semantics: confirm=False previews, confirm=True returns {action: 'deleted', namespace, status, blast_radius}, and deprecated aliases are clarified in context. This goes beyond the schema field descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states a specific verb and resource: 'Delete a vSphere Namespace and everything inside it (irreversible).' It distinguishes itself from siblings by warning it refuses while TKC clusters exist and by directing users to update_namespace for quota-only changes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use and when-not-to-use guidance: preview with confirm=False, show blast_radius to the user, never set confirm=True autonomously, run delete_tkc_cluster on existing TKC clusters first, and prefer update_namespace for quota changes. This is unusually complete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_tkc_clusterA
Destructive

[WRITE] Delete a TKC cluster and all of its nodes (irreversible).

Without confirm=True this only previews: it returns blast_radius (control plane and worker node counts per pool, and the running Deployments, StatefulSets and DaemonSets) and deletes nothing. Show that to the user and get their explicit decision. Do not set confirm=True on your own because the user said "delete" earlier: they have not seen what it destroys yet.

confirm=True returns {action: "deleted", name, namespace, status: "deleting", blast_radius}. Refused while workloads run (drain them, or pass force=True, which skips the workload check entirely) and whenever the node counts or workloads could not be read. Use scale_tkc_cluster instead for fewer nodes. Empty a namespace of TKC clusters before delete_namespace accepts it.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesCluster name (via list_tkc_clusters).
forceNoSkip the running-workload check (dangerous).
targetNovCenter in config.yaml; omit for the default.
confirmNoFalse (default) returns the blast radius and changes nothing. True applies it.
dry_runNoDeprecated alias for confirm; removed in the next minor release. dry_run=True previews.
confirmedNoDeprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews.
namespaceYesNamespace holding it.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the destructiveHint=true annotation, the description reveals the irreversible nature, the preview mode returning blast_radius, the refusal conditions while workloads run, and the force flag's effect of skipping the workload check. It also states what confirm=True returns, giving the agent a clear model of the tool's behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but every sentence carries essential safety or routing information for a destructive tool with no output schema. It is front-loaded with the irreversible destructive action, then explains the preview flow, refusal conditions, and alternatives in a logical order with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Since there is no output schema, the description properly explains return values for both preview and confirmed deletion, including blast_radius contents. It also covers failure/refusal cases, the force escape hatch, deprecated aliases, and sibling-tool routing, making it complete for an agent to call this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already covers all parameters with 100% description coverage, but the tool description adds important context beyond it: confirm=False previews, confirm=True deletes, force=True skips the workload check, and dry_run/confirmed are deprecated aliases. This adds real semantic value on top of the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Delete a TKC cluster and all of its nodes (irreversible).' It clearly differentiates from siblings by explicitly directing agents to scale_tkc_cluster for fewer nodes and noting delete_namespace requires an empty namespace. This gives an unambiguous purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use and when-not-to-use guidance: it instructs the agent to preview without confirm=True, never set confirm=True unilaterally, and drain workloads or use force=True only when appropriate. It also names scale_tkc_cluster and delete_namespace as alternatives, so the agent can route correctly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_harbor_infoA
Read-onlyIdempotent

[READ] Get status of the embedded Harbor container registry on the Supervisor.

Returns {registries: [{id, cluster (Supervisor MoRef), version, url, status, storage_used_mb}]}; status and storage come from a detail call and are null if it fails. If Harbor is not enabled it returns {error, hint} rather than raising. Use it to check registry health or find the push URL — it does not list repositories or images. Run check_vks_compatibility first if the Supervisor may be down.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, and the description layers substantial context on top: the exact return shape ({registries: [...]}), the detail-call behavior ('status and storage come from a detail call and are null if it fails'), and the error contract ('returns {error, hint} rather than raising'). No contradiction exists — the readOnly annotation matches the [READ] prefix and status-retrieval semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Every sentence carries distinct information: purpose, return shape, two error behaviors, use cases, and the prerequisite. The critical 'what it does' is front-loaded in the first sentence, and the supplementary detail is compact and scannable without wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema present, the description carries the full burden of explaining return values — and it does, including nullable fields (status, storage_used_mb) and the failure path. Error cases (Harbor not enabled, detail call failing) and the prerequisite for a possibly-down Supervisor are all covered, making this complete for a read-only tool with one optional parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single optional parameter `target` is fully documented in the schema ('vCenter in config.yaml; omit for the default.'), so schema coverage is 100% and the baseline 3 applies. The description adds no new parameter-level detail beyond the 'on the Supervisor' context, which is acceptable because nothing about the parameter is left undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource+scope: 'Get status of the embedded Harbor container registry on the Supervisor.' The [READ] prefix makes the operation type explicit, and the sentence 'it does not list repositories or images' differentiates it from any registry-related sibling. The primary use cases ('check registry health or find the push URL') further pin down what the tool is for.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States concrete when-to-use: 'Use it to check registry health or find the push URL.' It names the prerequisite sibling explicitly — 'Run check_vks_compatibility first if the Supervisor may be down' — and excludes the adjacent use case of listing repositories or images. This gives an agent clear routing logic without needing to inspect other sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_namespaceA
Read-onlyIdempotent

[READ] Get detailed configuration for a single vSphere Namespace.

Returns one raw vCenter namespace object, not the list envelope: config_status, description, storage_specs, quotas. Use list_namespaces first for the name; follow with list_namespace_storage_usage for PVC usage or list_tkc_clusters for the clusters inside. Point-in-time only — a CONFIGURING namespace may not have quotas applied.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesNamespace name, e.g. 'dev' (discover via list_namespaces).
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint false. The description adds valuable behavioral context beyond those hints: it returns a raw vCenter object rather than a list envelope, and warns that a CONFIGURING namespace may not yet have quotas applied. This helps the agent interpret results correctly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but well-organized: a clear opening statement, the return shape, routing guidance to related tools, and a caveat. Each sentence earns its place and no filler is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even though there is no output schema, the description names the key returned fields (config_status, description, storage_specs, quotas) and explains how to discover the required name parameter. It also points to the correct sibling tools for follow-up queries, making it sufficiently complete for an agent to invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters well. The description reinforces that 'name' comes from list_namespaces, matching the schema's example, but does not add additional parameter-level meaning beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Get detailed configuration for a single vSphere Namespace.' It also distinguishes itself from sibling tools by explicitly saying it returns 'one raw vCenter namespace object, not the list envelope,' which differentiates it from list_namespaces and related listing tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage sequencing: use list_namespaces first to discover the name, then call this tool; follow with list_namespace_storage_usage for PVC usage or list_tkc_clusters for clusters inside. It also provides a point-in-time caveat that helps the agent know when the result may be incomplete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_supervisor_kubeconfigA
Idempotent

[WRITE] Credential access: get a kubeconfig for the Supervisor K8s API.

Call only when the user explicitly asks for this kubeconfig; never as a side step. Returns {namespace, kubeconfig} as a YAML string, or {namespace, written_to} when output_path is given. The kubeconfig embeds a Supervisor bearer token (JWT from /wcp/login) that acts as the configured vCenter account until the JWT expires (typically hours; not tied to this process) — always pass output_path so the token never enters agent context, and report only the path. The file is created owner-only (0600). Use get_tkc_kubeconfig instead to reach workloads inside a TKC cluster.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceYesvSphere Namespace to set as the kubeconfig context.
output_pathNoFile to write, e.g. '~/.kube/supervisor.yaml'. Omit to return the kubeconfig inline. Creates parent directories and truncates the file.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (which only give the generic readOnly/idempotent/destructive/openWorld hints) by disclosing the exact return shapes, that the kubeconfig embeds a live Supervisor bearer token acting as the configured vCenter account, that the token lifetime is hours and not tied to the process, that the written file is mode 0600, and that output_path truncates and creates parent directories. This is exactly the kind of security-relevant behavioral context annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the [WRITE]/credential-access framing and the when-to-use gate, then return shapes, then the security rationale, then the sibling disambiguation. Every sentence carries distinct, load-bearing information with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description fully compensates by specifying both possible return payloads ({namespace, kubeconfig} vs. {namespace, written_to}), the token semantics, and file-permission behavior. Nothing an agent needs to invoke this credential-returning tool safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real guidance the schema lacks: pass output_path preferentially so the token never enters agent context and only the path is reported. Target and namespace meaning is left to the schema, keeping this just under a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('get a kubeconfig for the Supervisor K8s API') and immediately distinguishes itself from the near-identical sibling get_tkc_kubeconfig by scope (Supervisor API vs. workloads inside a TKC cluster). An agent can select correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use constraint ('Call only when the user explicitly asks for this kubeconfig; never as a side step') and an explicit named alternative ('Use get_tkc_kubeconfig instead to reach workloads inside a TKC cluster'). Both the positive and negative routing conditions are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_supervisor_statusA
Read-onlyIdempotent

[READ] Get the health of one Supervisor Cluster (vSphere with Tanzu control plane).

Returns cluster_id, config_status (RUNNING = healthy, else CONFIGURING / ERROR / REMOVING), kubernetes_status (READY / WARNING / ERROR), api_server_cluster_endpoint, kubernetes_version (null plus kubernetes_version_hint if unavailable), and network_provider. Run check_vks_compatibility first for cluster IDs; use this to confirm a Supervisor is healthy before create_namespace or create_tkc_cluster.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
cluster_idYesCompute cluster MoRef, e.g. 'domain-c1' (wcp_clusters field of check_vks_compatibility).

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description goes beyond annotations by disclosing the exact returned fields, including config_status semantics (RUNNING = healthy, else CONFIGURING / ERROR / REMOVING) and kubernetes_status values. This is useful behavioral context for interpreting the response.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose, followed by a compact list of returned fields and a single workflow sentence. Every sentence contributes useful information; there is no repetition of schema content or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Without an output schema, the description enumerates the key return fields and their meaning, states prerequisites, and names the dependent operations. For a simple read-only health-check tool with only one required parameter, nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline applies. The description adds one contextual link for cluster_id by pointing to check_vks_compatibility as the source of cluster IDs, matching the schema's 'wcp_clusters field' note, but it does not need to explain target further.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: '[READ] Get the health of one Supervisor Cluster (vSphere with Tanzu control plane).' It clearly identifies the tool's output (health status fields) and names the workflow context, which distinguishes it from sibling tools like check_vks_compatibility and get_supervisor_kubeconfig.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit sequencing: 'Run check_vks_compatibility first for cluster IDs; use this to confirm a Supervisor is healthy before create_namespace or create_tkc_cluster.' This tells an agent when to call this tool relative to relevant siblings and what decision it supports.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_tkc_available_versionsA
Read-onlyIdempotent

[READ] List Kubernetes versions (TanzuKubernetesReleases) available on the Supervisor.

Returns {versions: [{name, version, e.g. 'v1.28.4+vmware.1'}]}, newest first. If the TanzuKubernetesRelease API is unavailable it returns an empty versions list with error and hint rather than raising. Call this before create_tkc_cluster or upgrade_tkc_cluster to pick a valid k8s_version.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceYesvSphere Namespace used to reach the Supervisor K8s API.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds meaningful behavioral context: it returns results newest first, and it degrades gracefully with an empty versions list plus error/hint when the API is unavailable rather than raising. This goes beyond what the annotations convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three terse, purposeful sentences: the READ action, the return shape and ordering, and the error behavior plus usage guidance. Every sentence contributes value and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even with no output schema, the description supplies the return shape, example version format, ordering, error behavior, and the exact workflow context. An agent has enough information to call this tool correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters (target, namespace) already have descriptions in the schema. The tool description does not add deeper parameter semantics, but a baseline of 3 is appropriate since the schema carries the parameter documentation burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('List') and resource ('Kubernetes versions / TanzuKubernetesReleases available on the Supervisor'). It clearly differentiates this read-only query from the cluster lifecycle siblings (create_tkc_cluster, upgrade_tkc_cluster) by framing it as a prerequisite for choosing a valid k8s_version.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly advises calling this before create_tkc_cluster or upgrade_tkc_cluster to pick a valid k8s_version, giving clear contextual placement. It does not explicitly list when not to use it or compare against sibling query tools, but the intended usage is unmistakable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_tkc_clusterA
Read-onlyIdempotent

[READ] Get detailed status for a single TKC cluster.

Returns one object, not the list envelope: name, namespace, phase, k8s_version, control_plane_replicas, worker_replicas, conditions, infrastructure_ready, control_plane_ready. Run list_tkc_clusters first — a TKC name is only unique within one namespace. Poll this after create_tkc_cluster, scale_tkc_cluster or upgrade_tkc_cluster to watch an async change land.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesCluster name (via list_tkc_clusters).
targetNovCenter in config.yaml; omit for the default.
namespaceYesNamespace holding it.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds meaningful behavioral detail: it returns a single object with a defined field set, confirms it is not the list envelope, explains the namespace-uniqueness constraint, and positions it as a polling mechanism for async operations. This goes well beyond what the annotations alone provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and efficient: [READ] tag, one-sentence purpose, field list, then two pieces of workflow guidance. Every sentence earns its place, and the most important information is front-loaded. No fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-object getter with no output schema, the description covers the full picture: purpose, return shape, key fields, namespace scoping, and when to call it. The input schema covers the parameters, and annotations cover safety. No obvious gap would leave an agent uncertain about how to invoke or interpret the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters. The description adds useful contextual emphasis about looking up names via list_tkc_clusters and names being namespace-scoped, but it does not add significant new parameter-level semantics beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description begins with a clear verb and resource: 'Get detailed status for a single TKC cluster.' It explicitly differentiates from list_tkc_clusters by stating it returns one object, not the list envelope, and lists the returned fields. This leaves no ambiguity about what the tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit workflow guidance: run list_tkc_clusters first because a TKC name is unique only within a namespace, and poll this tool after create/scale/upgrade operations to observe async changes. It clearly states context, though it does not explicitly describe when to choose an alternative tool beyond the implied list-vs-single distinction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_tkc_kubeconfigA
Idempotent

[WRITE] Credential access: get a kubeconfig for one TKC cluster.

Call only when the user explicitly asks for this kubeconfig; never as a side step. Returns {cluster, kubeconfig}, or {cluster, written_to} when output_path is given. The kubeconfig embeds a Supervisor bearer token (JWT from /wcp/login) that acts as the configured vCenter account until the JWT expires (typically hours; not tied to this process) — always pass output_path so the token never enters agent context, and report only the path. Nothing in the managed cluster changes, but output_path creates parent directories and truncates the named file (owner-only, 0600), so output_path='~/.kube/config' replaces the user's own kubeconfig. Run list_tkc_clusters first for name and namespace; use get_supervisor_kubeconfig instead for Supervisor-level access.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesTKC cluster name.
targetNovCenter in config.yaml; omit for the default.
namespaceYesNamespace holding it.
output_pathNoFile to write, e.g. '~/.kube/my.yaml'. Omit to return the kubeconfig inline.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say readOnlyHint=false/destructiveHint=false/idempotentHint=true/openWorldHint=true; the description goes far beyond by disclosing the return shapes, the embedded JWT bearer-token lifecycle (hours, not tied to this process), and the concrete file side effects of output_path (creates parent dirs, truncates the target, 0600 owner-only, overwriting ~/.kube/config). It also gives the mitigating instruction to always pass output_path so the token never enters agent context. The file-truncation disclosure slightly exceeds the destructiveHint=false annotation, but it is added transparency rather than a contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the [WRITE] tag, purpose, and gating condition before the detail. The single dense paragraph is long and dash-heavy but nearly every clause (token lifetime, return shapes, overwrite warning, prerequisites) earns its place; minor tightening is possible in the token sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description carries the return-value burden and does so fully, specifying both possible return shapes. It also covers the safety-critical side effects, the credential lifetime, and the prerequisite call, so an agent has everything needed to invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3, but the description adds real meaning: output_path changes the return shape ({kubeconfig} vs {written_to}), carries the side-effect semantics (directory creation, truncation, permissions), and is framed as a strong recommendation rather than an optional toggle. It also implies name/namespace should be sourced from list_tkc_clusters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('get a kubeconfig for one TKC cluster') and immediately frames it as credential access, which sets it apart from non-credential siblings like get_tkc_cluster. It also names the sibling it is not for (get_supervisor_kubeconfig) so the agent can disambiguate the two kubeconfig tools without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('only when the user explicitly asks') and when-not ('never as a side step'), plus a prerequisite ('Run list_tkc_clusters first for name and namespace') and a named alternative for the adjacent use case ('use get_supervisor_kubeconfig instead for Supervisor-level access'). Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_namespacesA
Read-onlyIdempotent

[READ] List all vSphere Namespaces on the target vCenter with their status.

Returns the list envelope: items of {namespace, config_status (RUNNING = healthy, CONFIGURING, REMOVING, ERROR), description} plus returned/total/truncated — one call returns them all, so truncated is always false. Start here, then call get_namespace for detail, list_tkc_clusters for what runs inside, or update_namespace / delete_namespace to change one.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses the response envelope, item shape, status semantics, and pagination behavior ('one call returns them all, so truncated is always false'). This adds substantial value beyond the annotations, which already declare read-only, idempotent, non-destructive behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core purpose and [READ] marker. Every sentence carries useful information: what is listed, what the return envelope contains, and how to proceed through sibling tools. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with one optional parameter, this is complete. The description covers the response format, status values, pagination behavior, and provides navigation to relevant sibling tools, so an agent has everything needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the single optional target parameter is already well documented in the schema. The description does not add further parameter details, but no compensation is needed given the high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource: 'List all vSphere Namespaces on the target vCenter with their status.' It also distinguishes itself from related siblings like get_namespace and list_tkc_clusters by noting that it returns the full set of namespaces and is the intended entry point.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit guidance is provided: 'Start here, then call get_namespace for detail, list_tkc_clusters for what runs inside, or update_namespace / delete_namespace to change one.' This tells an agent exactly when to use this tool and what to use next based on intent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_namespace_storage_usageA
Read-onlyIdempotent

[READ] List PersistentVolumeClaims and storage usage inside one vSphere Namespace.

Via the Supervisor K8s API. Returns the family list envelope: {namespace, items: [{name, namespace, status (Bound / Pending / Lost), capacity ('10Gi'), storage_class}], returned, limit, total, truncated, hint}. Every PVC comes back in one call, so truncated is always False. Run list_namespaces first for the namespace; use list_supervisor_storage_policies instead for policy-level rather than PVC-level information. 'pvcs' and 'pvc_count' are deprecated pre-1.8.0 aliases of 'items' and 'returned', removed in 2.0 — read 'items'.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceYesNamespace to inspect.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds valuable behavioral context beyond that: it names the API path ('Via the Supervisor K8s API'), documents the full return envelope, explains that truncated is always False, and warns about deprecated aliases removed in 2.0.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but well-organized: purpose, return shape, behavioral guarantee, prerequisite, and deprecation note. Nothing is filler, and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description fully specifies the return envelope and field semantics. It also covers prerequisites, the alternative tool, the optional target parameter, and backward-compatibility caveats, making the tool safely callable by an agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds meaning by emphasizing the namespace scope and telling the agent to run list_namespaces first to obtain a valid namespace value. It does not add much about the target parameter, but the schema already handles that fully.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource — 'List PersistentVolumeClaims and storage usage' — and scopes it to 'one vSphere Namespace'. It also distinguishes itself from the sibling tool list_supervisor_storage_policies by explicitly noting the PVC-level vs policy-level difference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit routing guidance: 'Run list_namespaces first for the namespace' and 'use list_supervisor_storage_policies instead for policy-level rather than PVC-level information.' This clearly tells the agent when to use this tool versus the relevant sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_supervisor_storage_policiesA
Read-onlyIdempotent

[READ] List vCenter storage policies assignable to Supervisor Namespaces.

Returns the list envelope: items of {policy (ID), name, description} plus returned/total/truncated — one call returns them all, so truncated is always false. Call this before create_namespace or update_namespace and pass the 'policy' ID as their storage_policy. For PVC-level usage use list_namespace_storage_usage instead.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description adds value beyond annotations by specifying the return envelope (items of policy/name/description plus returned/total/truncated) and guaranteeing one call returns all results with truncated always false. This is useful behavioral context not present in the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured: it leads with purpose, then return envelope details, then usage guidance and alternative. Every sentence carries useful information, and nothing is redundant with the schema or annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The return format, pagination behavior, and usage pattern are all explained. With such a simple input schema and rich annotations, this is a complete context for agents.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%: the only parameter 'target' is fully described in the input schema ('vCenter in config.yaml; omit for the default.'). The description does not add parameter-level detail, but with full schema coverage, baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening phrase states the exact verb and resource with a clear scope, and the final line explicitly contrasts with the sibling tool list_namespace_storage_usage, so an agent can differentiate them immediately.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'Call this before create_namespace or update_namespace and pass the policy ID as their storage_policy.' It also gives an exclusion: 'For PVC-level usage use list_namespace_storage_usage instead.' This is direct when-to-use and alternative routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_tkc_clustersA
Read-onlyIdempotent

[READ] List TanzuKubernetesCluster (TKC) clusters, optionally in one namespace.

Returns the family list envelope: {items: [{name, namespace, phase, k8s_version}], returned, limit, total, truncated, hint}. The Supervisor list is walked to completion, so truncated is always False. Start here, then call get_tkc_cluster for full detail or get_tkc_kubeconfig for access. 'clusters' is a deprecated pre-1.8.0 alias of 'items', removed in 2.0 — read 'items'.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceNovSphere Namespace to filter by. Omit to list every one.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds substantial behavioral detail beyond the annotations: it specifies the exact response envelope fields, states that the Supervisor list is walked to completion so truncated is always False, and documents the deprecated 'clusters' alias. This gives the agent a precise model of the tool's behavior without needing to call it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence carries useful information: purpose, response shape, routing advice, and a deprecation warning. It is front-loaded with the core action, and the details are logically ordered.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even with no output schema, the description fully documents the return envelope, pagination behavior, and how to proceed for more detail or access. Combined with the strong annotations and simple two-parameter schema, nothing essential is missing for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents target and namespace. The description only restates that namespace filtering is optional, adding no new parameter-level meaning beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'List TanzuKubernetesCluster (TKC) clusters, optionally in one namespace.' It clearly distinguishes from the sibling get_tkc_cluster by framing this as the listing entry point and directing further detail lookup to get_tkc_cluster.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives concrete guidance: 'Start here, then call get_tkc_cluster for full detail or get_tkc_kubeconfig for access.' This provides context for when this tool should be the first step and which siblings to use next. It stops short of explicitly stating when not to use it, but the routing is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_vm_classesA
Read-onlyIdempotent

[READ] List VM classes available for sizing TKC cluster nodes.

Returns the list envelope: items of {id (e.g. 'best-effort-large'), cpu_count, memory_mb, gpu_count (vGPU + DirectPath I/O; 0 if none)} plus returned/total/truncated — one call returns them all, so truncated is always false. Call this before create_tkc_cluster and pass the chosen 'id' as its vm_class; 'guaranteed-' classes reserve resources, 'best-effort-' do not.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark this as read-only and safe, and the description adds meaningful behavior beyond that: it explains the exact list envelope shape, confirms that one call returns all results and truncated is always false, and discloses the resource-reservation distinction between class prefixes. No contradiction with annotations exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the tool's core purpose and contains no filler. Every sentence contributes: what it lists, what the response contains, why the list is complete, how to use the result, and the meaningful class-prefix distinction. It is compact despite carrying substantial information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only list tool with no output schema, the description fully compensates by specifying the envelope structure, item fields, pagination behavior, and downstream usage. It gives an agent everything needed to invoke the tool and interpret its result correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter, target, is fully documented in the schema with 100% coverage, and the description does not add new meaning about it. The description's guidance about the returned id being used as vm_class is useful for output consumption, but it does not deepen understanding of the target parameter itself, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'List VM classes available for sizing TKC cluster nodes.' It clearly identifies what the tool returns and connects it to a concrete use case. It also distinguishes itself from sibling operations like create_tkc_cluster by framing the call as a prerequisite.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly instructs when to use this tool: 'Call this before create_tkc_cluster and pass the chosen id as its vm_class.' It also provides decision-relevant semantics by explaining that 'guaranteed-*' classes reserve resources while 'best-effort-*' do not, which helps an agent choose the appropriate class.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_vm_groupsA
Read-onlyIdempotent

[READ] List VirtualMachineGroup objects and their bootOrder in a Namespace.

VM Service groups (vmoperator.vmware.com CRD, v1alpha4+) via the Supervisor K8s API — the served CRD version is discovered at runtime. Returns the family list envelope: items of {name, namespace, boot_order, member_count} plus returned/total/truncated (walked to completion) and served_version. boot_order mirrors spec.bootOrder: an ordered list of {members: [{kind, name}], power_on_delay?}. Older Supervisors without v1alpha4 return a teaching error naming the required version.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceYesvSphere Namespace to list VM groups in (via list_namespaces).

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes well beyond annotations by describing the exact return envelope, the structure of boot_order, runtime discovery of the served CRD version, pagination/completion behavior, and the teaching error on older Supervisors. It fully discloses behavioral traits an agent needs to interpret results.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, and every subsequent sentence adds meaningful detail about return shape, version behavior, and error handling. No filler or redundant rephrasing of the schema is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fully compensates by specifying the returned fields, pagination semantics, CRD version behavior, and boot_order structure. An agent has enough information to invoke the tool and interpret the response correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both target and namespace already documented. The description adds general context but little parameter-specific detail beyond what the schema provides, so a baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description opens with '[READ] List VirtualMachineGroup objects and their bootOrder in a Namespace', naming a specific verb, resource, and scope. It clearly identifies the VM Service CRD and Supervisor K8s API, making it unambiguous what the tool does and distinct from sibling list tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context: the tool operates in a specific Namespace and targets Supervisor VM Service groups. It does not explicitly name alternatives or exclusion conditions, but the namespace scoping and the version-related note about older Supervisors provide practical usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_vm_network_interfacesA
Read-onlyIdempotent

[READ] List the network interfaces (multi-NIC) of one VirtualMachine.

Reads spec.network.interfaces[] off a single VM Service VirtualMachine (vmoperator.vmware.com) via the Supervisor K8s API; the served CRD version is discovered at runtime. Returns the family list envelope: items of {name, network_name, network_kind, network_api_version} plus returned/total/truncated and vm_name/served_version. A VM with no network block returns an empty list, not an error. Run list_namespaces for the namespace; the VM name comes from your own VM inventory in that namespace.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
vm_nameYesName of the VirtualMachine to read interfaces from.
namespaceYesvSphere Namespace the VM lives in (via list_namespaces).

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnlyHint, idempotentHint, destructiveHint), the description reveals important runtime behavior: it reads via the Supervisor K8s API, discovers the served CRD version at runtime, returns a structured list envelope, and handles a VM without a network block by returning an empty list rather than an error. This is exactly the kind of behavior an agent cannot infer from annotations or schema alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Every sentence earns its place: a concise one-line summary, the data source and return envelope, a key edge case, and prerequisite guidance. There is no fluff or repetition of the schema, and the most important scoping information is front-laoded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is complete for this tool given its moderate complexity and the lack of an output schema: it explains what is returned, the empty-list behavior, the backend accessed, and how to supply the required parameters. An agent can select and invoke this tool correctly without needing additional context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already covers all parameters at 100%, so the baseline is 3. The description adds meaning by telling the agent how to obtain values: run list_namespaces for the namespace and source the VM name from the VM inventory in that namespace. It also implies that target is optional by not needing explanation, while the schema already gives its default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'List the network interfaces (multi-NIC) of one VirtualMachine.' It names the exact data source (spec.network.interfaces[] on a VM Service VirtualMachine via the Supervisor K8s API) and clearly scopes this to a single VM, distinguishing it from the sibling VM listing tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives practical usage context: run list_namespaces to obtain the namespace and use the VM name from the VM inventory in that namespace. It does not explicitly name alternative tools or when-not-to-use conditions, but the single-VM scoping and prerequisites make the intended use clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_vm_snapshotsA
Read-onlyIdempotent

[READ] List VirtualMachineSnapshot objects in a vSphere Namespace.

VM Service snapshots (vmoperator.vmware.com CRD, new at v1alpha5) via the Supervisor K8s API — the served CRD version is discovered at runtime, not hardcoded. Returns the family list envelope: items of {name, namespace, vm_name, created, ready} plus returned/total/truncated (walked to completion, so truncated is always false) and served_version. If the Supervisor is older than v1alpha5 the error names the required version. Run list_namespaces first for the namespace; use list_vm_network_interfaces for a VM's NICs.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNovCenter in config.yaml; omit for the default.
namespaceYesvSphere Namespace to list snapshots in (via list_namespaces).

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark readOnly/idempotent/non-destructive, and the description adds meaningful behavioral detail: the served CRD version is discovered at runtime, the return envelope includes specific fields, truncated is always false because it walks to completion, and old Supervisors produce errors naming the required version. This goes well beyond the annotations and conditions the agent to expect a specific response shape.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, then efficiently packs only relevant operational details: CRD discovery, return envelope fields, completion behavior, error semantics, and prerequisites. No filler or redundant restatement of the schema is present. Every clause contributes to safe invocation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given there is no output schema, the description's explanation of the returned envelope (items fields, returned/total/truncated, served_version) is essential and fully supplied. It also covers error behavior, prerequisite calls, and the alternative for NICs, making it complete for an agent to use this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% (target and namespace both have explanatory descriptions), so the schema already communicates parameter meaning. The description adds minor value by noting the namespace comes from list_namespaces and target defaults via config.yaml, but it does not substantially extend the schema definitions. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'List VirtualMachineSnapshot objects in a vSphere Namespace.' It clearly differentiates this from siblings by explicitly naming list_vm_network_interfaces for NICs and referencing the vSphere Namespace scope. The 'READ' tag reinforces the intent without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use guidance: run list_namespaces first for the namespace, and use list_vm_network_interfaces for a VM's NICs instead. It also explains the behavior when the Supervisor predates v1alpha5, which tells an agent what to expect and how to respond. This is strong routing guidance relative to alternative tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scale_tkc_clusterA

[WRITE] Scale the worker node count of an existing TanzuKubernetesCluster (TKC).

Asynchronous: returns {name, namespace, pool, worker_count, status: "scaling"} immediately — poll get_tkc_cluster to watch nodes appear or drain. Scales workers only; use upgrade_tkc_cluster instead for the K8s version. Not destructive, but lowering worker_count drains removed nodes.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesCluster name (via list_tkc_clusters).
targetNovCenter in config.yaml; omit for the default.
namespaceYesNamespace holding it.
pool_nameNoNode pool (machineDeployment). Omit for the first; other pools are always preserved.
worker_countYesDesired total, integer >= 1 (below 1 is rejected).

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, destructiveHint=false, and idempotentHint=false. The description adds valuable behavioral context: the operation is asynchronous, returns a scaling status immediately, and lowering worker_count drains removed nodes. It also clarifies that other pools are always preserved, going beyond the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Every sentence earns its place: the first states the action, the second explains the async behavior and polling follow-up, the third disambiguates from upgrade_tkc_cluster, and the fourth warns about scale-down drain. No fluff, and key behavioral caveats are front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

As an async mutation with no output schema, the description is nearly complete: it covers return status, how to observe completion, and the drain behavior on scale-down. A minor gap: it does not explicitly mention that an agent should avoid scaling during other operations or whether scaling is allowed repeatedly, but given the annotations and schema richness, this is a strong definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds meaningful parameter context by explaining the asynchronous response shape, the meaning of worker_count as desired total, and the pool_name default behavior ('Omit for the first; other pools are always preserved'). This goes beyond schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Scale') and precise resource ('worker node count of an existing TanzuKubernetesCluster (TKC)'). Explicitly distinguishes from upgrade_tkc_cluster by noting it scales workers only and that upgrade is for the K8s version.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear when-to-use guidance: scale worker count, and explicitly routes to upgrade_tkc_cluster for K8s version changes. Also notes the non-destructive nature of lowering worker_count and that nodes drain, which helps an agent decide when this tool is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_namespaceA

[WRITE] Update resource quotas or storage policy of an existing vSphere Namespace.

Only the fields you pass are patched; omitting all of them returns status "no_changes" without an API call, otherwise {namespace, status: "updated"}. Applies immediately — no dry run, no undo. Use this rather than create_namespace when the namespace exists; valid storage_policy values come from list_supervisor_storage_policies.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesExisting namespace name (discover via list_namespaces).
targetNovCenter in config.yaml; omit for the default.
cpu_limitNoNew CPU limit in MHz. Omit to keep current.
storage_policyNoNew storage policy ID. Omit to keep current.
memory_limit_mibNoNew memory limit in MiB. Omit to keep current.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses patch semantics, the no_changes response when all fields are omitted, immediate application with no dry run or undo, and the success result shape. These behaviors go well beyond the annotations, which only provide hints that the operation is a non-read-only, non-idempotent, non-destructive write. No contradiction with annotations exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the action and target. Each sentence contributes distinct value: patch behavior, no-op response, immediacy/no-undo, sibling differentiation, and parameter sourcing. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter mutation tool with no output schema, the description covers what is updated, how updates are applied, what happens when no fields are passed, what the success response looks like, and where to find valid values. The absence of an output schema is mitigated by the explicit return shape in the description.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already explains each parameter. The description adds meaningful context by clarifying that passing no optional fields produces no_changes without an API call, and by pointing to list_supervisor_storage_policies as the source for valid storage_policy values. This elevates it above the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description opens with a specific verb and resource: 'Update resource quotas or storage policy of an existing vSphere Namespace.' It clearly distinguishes from the sibling create_namespace by stating to use this when the namespace exists. The [WRITE] marker reinforces that this is a mutating operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use this rather than create_namespace when the namespace exists,' giving an unambiguous when-to-use rule with a named alternative. It also advises where to get valid storage_policy values, which is actionable guidance for selecting and preparing the call.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

upgrade_tkc_clusterA

[WRITE] Upgrade a TKC cluster to a new Kubernetes version.

Returns {name, namespace, new_version, status: "upgrading"}. Asynchronous and irreversible — Kubernetes cannot be downgraded, so poll get_tkc_cluster until phase is running. There is no dry run. Use this only for the K8s version; prefer scale_tkc_cluster for node counts.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesCluster name (via list_tkc_clusters).
targetNovCenter in config.yaml; omit for the default.
namespaceYesNamespace holding it.
k8s_versionYesTarget version from get_tkc_available_versions.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations, the description discloses that the upgrade is asynchronous and irreversible, that downgrading is impossible, that no dry run exists, and it specifies the exact return shape. This is essential behavioral context for a mutating, non-idempotent tool, especially with no output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The definition is compact and front-loaded: purpose first, then return and behavior, then routing guidance. Every sentence earns its place, with no redundant or filler content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex asynchronous mutation with no output schema, the description covers the critical operational details: what it returns, how to confirm completion, irreversibility, lack of dry run, and how to choose between this tool and scale_tkc_cluster. Nothing essential is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents all four parameters, including that k8s_version should come from get_tkc_available_versions. The description does not add parameter-level meaning beyond what the schema provides, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Upgrade a TKC cluster to a new Kubernetes version.' It also clearly distinguishes this tool from scale_tkc_cluster by scoping it to Kubernetes version changes, making sibling differentiation easy.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit usage guidance: 'Use this only for the K8s version; prefer scale_tkc_cluster for node counts.' It also instructs the agent to poll get_tkc_cluster until the phase is running and warns that there is no dry run.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv1.11.0
    • Changedcreate_namespace5 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -trueNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
    • Changedcreate_tkc_cluster5 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -trueNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"YAML plan only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=False acts, dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
    • Changeddelete_namespace9 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / confirmed / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / confirmed / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / confirmed / description
        Previous value: -"Must be True to proceed."New value: +"Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews."
      • removedInput schema / properties / confirmed / type
        Removed value: -"boolean"
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -trueNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
    • Changeddelete_tkc_cluster10 fields changed
      • addedInput schema / properties / confirm
        Added value: +{
        +  "default": false,
        +  "description": "False (default) returns the blast radius and changes nothing. True applies it.",
        +  "title": "Confirm",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / confirmed / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / confirmed / default
        Previous value: -falseNew value: +null
      • changedInput schema / properties / confirmed / description
        Previous value: -"Must be True to proceed."New value: +"Deprecated alias for confirm; removed in the next minor release. Acts only together with dry_run=False; confirmed=False previews."
      • removedInput schema / properties / confirmed / type
        Removed value: -"boolean"
      • addedInput schema / properties / dry_run / anyOf
        Added value: +[
        +  {
        +    "type": "boolean"
        +  },
        +  {
        +    "type": "null"
        +  }
        +]
      • changedInput schema / properties / dry_run / default
        Previous value: -trueNew value: +null
      • changedInput schema / properties / dry_run / description
        Previous value: -"Preview only (default: True)."New value: +"Deprecated alias for confirm; removed in the next minor release. dry_run=True previews."
      • removedInput schema / properties / dry_run / type
        Removed value: -"boolean"
      • changedInput schema / properties / force / description
        Previous value: -"Skip the workload check (dangerous)."New value: +"Skip the running-workload check (dangerous)."
  2. 1 tool updatev1.9.1
    • Changedget_supervisor_kubeconfig1 field changed
      • addedInput schema / properties / output_path
        Added value: +{
        +  "anyOf": [
        +    {
        +      "type": "string"
        +    },
        +    {
        +      "type": "null"
        +    }
        +  ],
        +  "default": null,
        +  "description": "File to write, e.g. '~/.kube/supervisor.yaml'. Omit to return the kubeconfig inline. Creates parent directories and truncates the file.",
        +  "title": "Output Path"
        +}
  3. 23 tool updatesv1.8.14
    • Changedcheck_vks_compatibility2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedcreate_namespace9 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cluster_id / description
        Added value: +"Supervisor MoRef (from check_vks_compatibility)."
      • addedInput schema / properties / cpu_limit / description
        Added value: +"MHz. Omit for no limit."
      • addedInput schema / properties / description / description
        Added value: +"Free-text label. Omit for none."
      • addedInput schema / properties / dry_run / description
        Added value: +"Preview only (default: True)."
      • addedInput schema / properties / memory_limit_mib / description
        Added value: +"MiB. Omit for no limit."
      • addedInput schema / properties / name / description
        Added value: +"Namespace name (lowercase, no spaces)."
      • addedInput schema / properties / storage_policy / description
        Added value: +"Policy ID (from list_supervisor_storage_policies)."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedcreate_tkc_cluster10 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / control_plane_count / description
        Added value: +"1 or 3."
      • addedInput schema / properties / dry_run / description
        Added value: +"YAML plan only (default: True)."
      • addedInput schema / properties / k8s_version / description
        Added value: +"e.g. 'v1.28.4+vmware.1'."
      • addedInput schema / properties / name / description
        Added value: +"Cluster name."
      • addedInput schema / properties / namespace / description
        Added value: +"Must already exist (see list_namespaces)."
      • addedInput schema / properties / storage_class / description
        Added value: +"Storage class."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
      • addedInput schema / properties / vm_class / description
        Added value: +"Node sizing, e.g. 'best-effort-large'."
      • addedInput schema / properties / worker_count / description
        Added value: +"Worker nodes (>= 1)."
    • Changeddelete_namespace5 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / confirmed / description
        Added value: +"Must be True to proceed."
      • addedInput schema / properties / dry_run / description
        Added value: +"Preview only (default: True)."
      • addedInput schema / properties / name / description
        Added value: +"Namespace name to delete (discover via list_namespaces)."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changeddelete_tkc_cluster7 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / confirmed / description
        Added value: +"Must be True to proceed."
      • addedInput schema / properties / dry_run / description
        Added value: +"Preview only (default: True)."
      • addedInput schema / properties / force / description
        Added value: +"Skip the workload check (dangerous)."
      • addedInput schema / properties / name / description
        Added value: +"Cluster name (via list_tkc_clusters)."
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace holding it."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_harbor_info2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_namespace3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / name / description
        Added value: +"Namespace name, e.g. 'dev' (discover via list_namespaces)."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_supervisor_kubeconfig3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / namespace / description
        Added value: +"vSphere Namespace to set as the kubeconfig context."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_supervisor_status3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cluster_id / description
        Added value: +"Compute cluster MoRef, e.g. 'domain-c1' (wcp_clusters field of check_vks_compatibility)."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_tkc_available_versions3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / namespace / description
        Added value: +"vSphere Namespace used to reach the Supervisor K8s API."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_tkc_cluster4 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / name / description
        Added value: +"Cluster name (via list_tkc_clusters)."
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace holding it."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedget_tkc_kubeconfig5 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / name / description
        Added value: +"TKC cluster name."
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace holding it."
      • addedInput schema / properties / output_path / description
        Added value: +"File to write, e.g. '~/.kube/my.yaml'. Omit to return the kubeconfig inline."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedlist_namespace_storage_usage3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace to inspect."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedlist_namespaces2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedlist_supervisor_storage_policies2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedlist_tkc_clusters3 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / namespace / description
        Added value: +"vSphere Namespace to filter by. Omit to list every one."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedlist_vm_classes2 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Addedlist_vm_groups
    • Addedlist_vm_network_interfaces
    • Addedlist_vm_snapshots
    • Changedscale_tkc_cluster6 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / name / description
        Added value: +"Cluster name (via list_tkc_clusters)."
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace holding it."
      • addedInput schema / properties / pool_name / description
        Added value: +"Node pool (machineDeployment). Omit for the first; other pools are always preserved."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
      • addedInput schema / properties / worker_count / description
        Added value: +"Desired total, integer >= 1 (below 1 is rejected)."
    • Changedupdate_namespace6 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / cpu_limit / description
        Added value: +"New CPU limit in MHz. Omit to keep current."
      • addedInput schema / properties / memory_limit_mib / description
        Added value: +"New memory limit in MiB. Omit to keep current."
      • addedInput schema / properties / name / description
        Added value: +"Existing namespace name (discover via list_namespaces)."
      • addedInput schema / properties / storage_policy / description
        Added value: +"New storage policy ID. Omit to keep current."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
    • Changedupgrade_tkc_cluster5 fields changed
      • addedInput schema / additionalProperties
        Added value: +false
      • addedInput schema / properties / k8s_version / description
        Added value: +"Target version from get_tkc_available_versions."
      • addedInput schema / properties / name / description
        Added value: +"Cluster name (via list_tkc_clusters)."
      • addedInput schema / properties / namespace / description
        Added value: +"Namespace holding it."
      • addedInput schema / properties / target / description
        Added value: +"vCenter in config.yaml; omit for the default."
  4. 8 tool updatesv1.8.9
    • Addedcreate_namespace
    • Addeddelete_namespace
    • Addeddelete_tkc_cluster
    • Addedget_supervisor_status
    • Addedget_tkc_cluster
    • Addedlist_namespaces
    • Addedlist_tkc_clusters
    • Addedlist_vm_classes
  5. 9 tool updatesv1.8.8
    • Removedcreate_namespace
    • Removeddelete_namespace
    • Removeddelete_tkc_cluster
    • Removedget_supervisor_status
    • Removedget_tkc_cluster
    • Removedlist_namespaces
    • Changedlist_supervisor_storage_policies1 field changed
      • changedOutput schema / (root)
        Previous value: -{
        -  "properties": {
        -    "result": {
        -      "items": {
        -        "additionalProperties": true,
        -        "type": "object"
        -      },
        -      "title": "Result",
        -      "type": "array"
        -    }
        -  },
        -  "required": [
        -    "result"
        -  ],
        -  "title": "list_supervisor_storage_policiesOutput",
        -  "type": "object"
        -}New value: +null
    • Removedlist_tkc_clusters
    • Removedlist_vm_classes
  6. 1 tool updatev1.5.38
    • Changedscale_tkc_cluster1 field changed
      • addedInput schema / properties / pool_name
        Added value: +{
        +  "anyOf": [
        +    {
        +      "type": "string"
        +    },
        +    {
        +      "type": "null"
        +    }
        +  ],
        +  "default": null,
        +  "title": "Pool Name"
        +}

TDQS

A4.3/5.0

Scored across 23 tools

Disambiguation4/5

Each tool targets a distinct resource and action — Supervisor, namespace, TKC, storage, kubeconfigs, VM Service — so there is no duplicate functionality. The only spots where an agent might hesitate are the two kubeconfig tools and check_vks_compatibility vs get_supervisor_status, but the descriptions draw clear boundaries.

Naming Consistency4/5

The dominant verb_noun pattern (list_*, get_*, create_*, delete_*) is consistent and readable. Deviations: get_supervisor_kubeconfig and get_tkc_kubeconfig are write-oriented credential actions labeled as get_, and get_tkc_available_versions returns a list rather than a single object.

Tool Count3/5

23 tools is a large surface and sits in the 16–25 range that feels heavy; several VM Service inspection tools could arguably be bundled. That said, the core namespace/TKC lifecycle and supporting lookups mostly justify each tool's presence.

Completeness4/5

The namespace and TKC lifecycles are thoroughly covered: compatibility, status, CRUD, scale/upgrade/delete, versions, VM classes, storage policies, and kubeconfigs. Gaps are peripheral — no VirtualMachine list/create/delete, no Harbor repository listing, no namespace permission management — and don't block the primary workflows.

Maintenance

ActivityActive
ResponsivenessResponsive

Related MCP Connectors

Related MCP Servers