Claude Desktop Commander MCP
Настольный командор MCP
Поиск, обновление, управление файлами и запуск команд терминала с помощью ИИ
Работайте с кодом и текстом, запускайте процессы и автоматизируйте задачи, значительно превосходя другие редакторы ИИ — без затрат на токены API.
Оглавление
Все ваши инструменты разработки ИИ в одном месте. Desktop Commander помещает все инструменты разработки в один чат. Выполняйте длительные команды терминала на вашем компьютере и управляйте процессами через Model Context Protocol (MCP). Создан на основе MCP Filesystem Server для предоставления дополнительных возможностей поиска и замены файлов при редактировании.
Related MCP server: Desktop Commander MCP
Функции
Выполнение команд терминала с потоковой передачей вывода
Поддержка тайм-аута и фонового выполнения команды
Управление процессами (составление списка и завершение процессов)
Управление сеансами для длительно выполняемых команд
Управление конфигурацией сервера:
Получить/установить значения конфигурации
Обновить несколько настроек одновременно
Динамические изменения конфигурации без перезапуска сервера
Полные операции с файловой системой:
Чтение/запись файлов
Создать/перечислить каталоги
Переместить файлы/каталоги
Поиск файлов
Получить метаданные файла
Возможности редактирования кода:
Хирургическая замена текста при небольших изменениях
Полная переписывание файлов для внесения существенных изменений
Поддержка нескольких файлов
Замены на основе шаблонов
рекурсивный поиск кода или текста в папках на основе vscode-ripgrep
Комплексное ведение журнала аудита:
Все вызовы инструментов автоматически регистрируются.
Ротация журналов с ограничением размера в 10 МБ
Подробные временные метки и аргументы
Установка
Сначала убедитесь, что вы загрузили и установили приложение Claude Desktop , а также у вас установлен npm .
Вариант 1: Установка через npx
Просто запустите это в терминале:
npx @wonderwhy-er/desktop-commander@latest setupДля режима отладки (позволяет подключиться к инспектору Node.js):
npx @wonderwhy-er/desktop-commander@latest setup --debugПерезапустите Claude, если он запущен.
Вариант 2: использование установщика скрипта bash (macOS)
Пользователи macOS могут воспользоваться нашим автоматизированным установщиком bash, который проверит версию Node.js, установит ее при необходимости и автоматически настроит Desktop Commander:
curl -fsSL https://raw.githubusercontent.com/wonderwhy-er/DesktopCommanderMCP/refs/heads/main/install.sh | bashЭтот скрипт автоматически обрабатывает все зависимости и конфигурации, обеспечивая бесперебойную установку.
Вариант 3: Установка через Smithery
Чтобы автоматически установить Desktop Commander для Claude Desktop через Smithery :
npx -y @smithery/cli install @wonderwhy-er/desktop-commander --client claudeВариант 4: Добавить в claude_desktop_config вручную
Добавьте эту запись в ваш claude_desktop_config.json:
На Mac:
~/Library/Application\ Support/Claude/claude_desktop_config.jsonВ Windows:
%APPDATA%\Claude\claude_desktop_config.jsonВ Linux:
~/.config/Claude/claude_desktop_config.json
{
"mcpServers": {
"desktop-commander": {
"command": "npx",
"args": [
"-y",
"@wonderwhy-er/desktop-commander"
]
}
}
}Перезапустите Claude, если он запущен.
Вариант 5: Оформить заказ на месте
Клонировать и собрать:
git clone https://github.com/wonderwhy-er/DesktopCommanderMCP.git
cd DesktopCommanderMCP
npm run setupПерезапустите Claude, если он запущен.
Команда установки выполнит следующие действия:
Установить зависимости
Построить сервер
Настройте настольное приложение Клода
При необходимости добавьте MCP-серверы в конфигурацию Клода.
Обновление Desktop Commander
При установке через npx (вариант 1) или Smithery (вариант 3) Desktop Commander будет автоматически обновляться до последней версии при каждом перезапуске Claude. Ручной процесс обновления не требуется.
При ручной установке вы можете выполнить обновление, повторно выполнив команду установки.
Использование
Сервер предоставляет полный набор инструментов, организованных в несколько категорий:
Доступные инструменты
Категория | Инструмент | Описание |
Конфигурация |
| Получить полную конфигурацию сервера в формате JSON (включая blockedCommands, defaultShell, allowedDirectories, fileReadLineLimit, fileWriteLineLimit, telemetryEnabled) |
| Установите определенное значение конфигурации по ключу. Доступные настройки: • | |
Терминал |
| Выполнение команды терминала с настраиваемым тайм-аутом и выбором оболочки |
| Прочитать новый вывод из запущенного сеанса терминала | |
| Принудительно завершить запущенный сеанс терминала | |
| Список всех активных терминальных сеансов | |
| Список всех запущенных процессов с подробной информацией | |
| Завершить запущенный процесс по PID | |
Файловая система |
| Чтение содержимого из локальной файловой системы или URL-адресов с построчной навигацией (поддерживает параметры смещения и длины) |
| Чтение нескольких файлов одновременно | |
| Запись содержимого файла с возможностью перезаписи или добавления (использует настраиваемые ограничения строк) | |
| Создайте новый каталог или убедитесь, что он существует | |
| Получить подробный список файлов и каталогов | |
| Перемещать или переименовывать файлы и каталоги | |
| Поиск файлов по имени с использованием сопоставления подстрок без учета регистра | |
| Поиск шаблонов текста/кода в содержимом файла с помощью ripgrep | |
| Получить подробные метаданные о файле или каталоге | |
Редактирование текста |
| Применяйте целевые замены текста с улучшенными подсказками для небольших правок (включая обратную связь по различиям на уровне символов) |
Примеры использования инструмента
Формат блока поиска/замены:
filepath.ext
<<<<<<< SEARCH
content to find
=======
new content
>>>>>>> REPLACEПример:
src/main.js
<<<<<<< SEARCH
console.log("old message");
=======
console.log("new message");
>>>>>>> REPLACEРасширенные возможности редактирования блоков
Инструмент edit_block включает в себя несколько улучшений для большей надежности:
Улучшенные подсказки : описания инструментов теперь подчеркивают необходимость внесения нескольких небольших целенаправленных правок, а не одного большого изменения.
Резервный вариант нечеткого поиска : если точные совпадения не найдены, выполняется нечеткий поиск и предоставляется подробная обратная связь.
Различия на уровне символов : показывает, что именно отличается, используя формат
{-removed-}{+added+}Поддержка множественных вхождений : можно заменить несколько экземпляров с помощью параметра
expected_replacementsКомплексное ведение журнала : все нечеткие поиски регистрируются для анализа и отладки.
Если поиск не удался, вы увидите подробную информацию о самом близком найденном совпадении, включая процент сходства, время выполнения и различия в символах. Все эти данные автоматически регистрируются для последующего анализа с помощью инструментов журнала нечеткого поиска.
Поддержка URL-адресов
read_fileтеперь может извлекать содержимое как из локальных файлов, так и из URL-адресовПример:
read_fileс параметромisUrl: trueдля чтения из веб-ресурсовОбрабатывает как текстовый, так и графический контент из удаленных источников.
Изображения (локальные или из URL-адресов) отображаются визуально в интерфейсе Клода, а не в виде текста.
Клод может видеть и анализировать фактическое содержание изображения
Тайм-аут по умолчанию для URL-запросов составляет 30 секунд.
Анализ журнала нечеткого поиска (скрипты npm)
Система ведения журналов нечеткого поиска включает удобные скрипты npm для анализа журналов вне среды MCP:
# View recent fuzzy search logs
npm run logs:view -- --count 20
# Analyze patterns and performance
npm run logs:analyze -- --threshold 0.8
# Export logs to CSV or JSON
npm run logs:export -- --format json --output analysis.json
# Clear all logs (with confirmation)
npm run logs:clearПодробную документацию по этим скриптам см. в scripts/README.md .
Журналы нечеткого поиска
Desktop Commander включает в себя комплексное протоколирование для операций нечеткого поиска в инструменте edit_block . Если точное совпадение не найдено, система выполняет нечеткий поиск и регистрирует подробную информацию для анализа.
Что регистрируется
Каждая операция нечеткого поиска регистрирует:
Поиск и найденный текст : текст, который вы ищете, и тот, что был найден
Оценка сходства : насколько близко совпадение (0-100%).
Время выполнения : Сколько времени занял поиск
Различия в характерах : Подробные различия, показывающие, в чем именно заключаются различия
Метаданные файла : расширение, длина найденного текста
Коды символов : Конкретные коды символов, вызывающие различия
Расположение журнала
Журналы автоматически сохраняются в:
macOS/Linux :
~/.claude-server-commander-logs/fuzzy-search.logWindows :
%USERPROFILE%\.claude-server-commander-logs\fuzzy-search.log
Что вы узнаете
Журналы нечеткого поиска помогут вам понять:
Почему точные совпадения невозможны : распространенные проблемы, такие как различия в пробелах, окончаниях строк или кодировке символов.
Модели производительности : как сложность поиска влияет на время выполнения
Проблемы с типами файлов : какие расширения файлов обычно имеют проблемы с соответствием
Проблемы с кодировкой символов : определенные коды символов, которые вызывают различия
Аудит ведения журнала
Desktop Commander теперь включает в себя комплексное ведение журнала всех вызовов инструментов:
Что регистрируется
Каждый вызов инструмента регистрируется с указанием метки времени, имени инструмента и аргументов (с защитой конфиденциальности)
Журналы автоматически ротируются, когда достигают размера 10 МБ.
Расположение журнала
Журналы сохраняются в:
macOS/Linux :
~/.claude-server-commander/claude_tool_call.logWindows :
%USERPROFILE%\.claude-server-commander\claude_tool_call.log
Этот контрольный журнал помогает при отладке, мониторинге безопасности и понимании того, как Клод взаимодействует с вашей системой.
Обработка длительных команд
Для команд, выполнение которых может занять некоторое время:
Управление конфигурацией
⚠️ Важные предупреждения о безопасности
Всегда изменяйте конфигурацию в отдельном окне чата, в котором вы выполняете фактическую работу. Иногда Claude может попытаться изменить параметры конфигурации (например,
allowedDirectories), если он сталкивается с ограничениями доступа к файловой системе.Параметр
allowedDirectoriesв настоящее время ограничивает только операции файловой системы , но не команды терминала. Команды терминала по-прежнему могут получать доступ к файлам за пределами разрешенных каталогов. Полная песочница терминала находится в планах.
Инструменты конфигурации
Управлять конфигурацией сервера можно с помощью предоставленных инструментов:
// Get the entire config
get_config({})
// Set a specific config value
set_config_value({ "key": "defaultShell", "value": "/bin/zsh" })
// Set multiple config values using separate calls
set_config_value({ "key": "defaultShell", "value": "/bin/bash" })
set_config_value({ "key": "allowedDirectories", "value": ["/Users/username/projects"] })Конфигурация сохраняется в config.json в рабочем каталоге сервера и сохраняется между перезапусками сервера.
Лучшие практики
Создайте специальный чат для изменения конфигурации : внесите все изменения конфигурации в один чат, а затем начните новый чат для своей фактической работы.
Будьте осторожны с пустыми
allowedDirectories: установка этого параметра в пустой массив ([]) предоставляет доступ ко всей файловой системе для файловых операций.Используйте конкретные пути : вместо использования широких путей, таких как
/, укажите точные каталоги, к которым вы хотите получить доступ.Всегда проверяйте конфигурацию после внесения изменений : используйте
get_config({})чтобы убедиться, что изменения были применены правильно.
Использование разных оболочек
Вы можете указать, какую оболочку использовать для выполнения команды:
// Using default shell (bash or system default)
execute_command({ "command": "echo $SHELL" })
// Using zsh specifically
execute_command({ "command": "echo $SHELL", "shell": "/bin/zsh" })
// Using bash specifically
execute_command({ "command": "echo $SHELL", "shell": "/bin/bash" })Это позволяет использовать специфические для оболочки функции или поддерживать единообразие сред между командами.
execute_commandвозвращается после тайм-аута с начальным выводомКоманда продолжается в фоновом режиме
Используйте
read_outputс PID для получения нового выводаПри необходимости используйте
force_terminateдля остановки.
Отладка
Если вам необходимо отладить сервер, вы можете установить его в режиме отладки:
# Using npx
npx @wonderwhy-er/desktop-commander@latest setup --debug
# Or if installed locally
npm run setup:debugЭто позволит:
Настройте Claude для использования отдельного сервера «desktop-commander»
Включите протокол инспектора Node.js с помощью флага
--inspect-brk=9229Приостановить выполнение в начале, пока не подключится отладчик
Включить дополнительные переменные среды отладки
Чтобы подключить отладчик:
В Chrome перейдите на
chrome://inspectи найдите экземпляр Node.js.В VS Code используйте конфигурацию отладки «Присоединить к процессу узла»
Другие IDE/инструменты могут иметь похожие опции «присоединения» для отладки Node.js.
Важные замечания по отладке:
Сервер приостановится при запуске, пока не подключится отладчик (из-за флага
--inspect-brk)Если вы не видите активности во время отладки, убедитесь, что вы подключены к правильному процессу Node.js.
Возможно, запущено несколько процессов Node; подключитесь к тому, который находится на порту 9229.
В списке серверов MCP Клода отладочный сервер обозначен как «desktop-commander-debug».
Поиск неисправностей:
Если у Клода истекло время ожидания при попытке использовать сервер отладки, возможно, ваш отладчик подключен неправильно.
При правильном подключении процесс продолжит выполнение после достижения первой точки останова.
После подключения вы можете добавить дополнительные точки останова в вашей IDE.
Интеграция протокола контекста модели
Этот проект расширяет возможности сервера файловой системы MCP, позволяя:
Поддержка локального сервера в Claude Desktop
Полное выполнение системных команд
Управление процессами
Операции с файлами
Редактирование кода с помощью блоков поиска/замены
Создано в рамках исследования Клода МКП: https://youtube.com/live/TlbjFDbl5Us
СДЕЛАННЫЙ
20-05-2025 Выпуск v0.1.40 - Добавлено ведение журнала аудита для всех вызовов инструментов, улучшены построчные файловые операции, улучшен edit_block с улучшенными подсказками для небольших правок, добавлены явные подсказки для отказа от телеметрии
05.05.2025 Ведение журнала нечеткого поиска — добавлена комплексная система ведения журнала для операций нечеткого поиска с подробными инструментами анализа, различиями на уровне символов и показателями производительности для помощи в отладке сбоев edit_block
29-04-2025 Отказ от телеметрии через конфигурацию - теперь в конфигурации есть настройка для отключения телеметрии, спросите в чате
23-04-2025 Улучшенная функциональность редактирования - улучшенный формат, добавлен нечеткий поиск и многократные замены, должно быть меньше сбоев и чаще использоваться блок редактирования
16-04-2025 Улучшенные конфигурации — улучшенные настройки разрешенных путей, команд и сред оболочки
14-04-2025 Исправления среды Windows — Решены проблемы, характерные для платформ Windows
14-04-2025 Улучшения Linux - Улучшенная совместимость с различными дистрибутивами Linux
12-04-2025 Улучшенные разрешенные каталоги и заблокированные команды - Улучшенная безопасность и проверка пути для ограничений чтения/записи файлов и команд терминала. Терминал по-прежнему может получать доступ к файлам, игнорируя разрешенные каталоги.
11-04-2025 Конфигурация оболочки - Добавлена возможность настройки предпочитаемой оболочки для выполнения команд.
07-04-2025 Добавлена поддержка URL-адресов — команда
read_fileтеперь может извлекать содержимое из URL-адресов28-03-2025 Исправлена ошибка JSON «Watching /» — реализован пользовательский транспорт stdio для обработки сообщений, отличных от JSON, и предотвращения сбоев сервера.
25-03-2025 Улучшенный поиск кода ( объединен ) — улучшенное исследование кода с результатами, учитывающими контекст
Работа в процессе/TODO/дорожная карта
В настоящее время изучаются следующие возможности:
Поддержка WSL — подсистемы Windows для интеграции Linux
Поддержка SSH — удаленное выполнение команд сервера
Лучшая поддержка файлов в таких форматах, как CSV/PDF
Песочница терминала для Mac/Linux/Windows для повышения безопасности
Режимы чтения файлов — например, разрешить чтение HTML как обычного текста или разметки.
Поддержка интерактивной оболочки - ssh, node/python repl
Улучшение чтения и записи больших файлов
❤️ Поддержка Desktop Commander
Зал славы болельщиков
Здесь представлены щедрые спонсоры. Спасибо за помощь в реализации этого проекта!
Веб-сайт
Посетите наш официальный сайт https://desktopcommander.app/ для получения последней информации, документации и обновлений.
СМИ
Узнайте больше об этом проекте с помощью следующих ресурсов:
Статья
Claude с MCPs заменил Cursor & Windsurf. Как это произошло? - Подробное исследование того, как Claude с возможностями Model Context Protocol меняет рабочие процессы разработчиков.
Видео
Видеоруководство по Claude Desktop Commander — посмотрите, как эффективно настроить и использовать Commander.
Публикация в AnalyticsIndiaMag
Этот разработчик отказался от Windsurf, Cursor, используя Claude с MCP
Сообщество
Присоединяйтесь к нашему серверу Discord , чтобы получать помощь, делиться отзывами и общаться с другими пользователями.
Отзывы
https://www.youtube.com/watch?v=ly3bed99Dy8&lc=UgyyBt6_ShdDX_rIOad4AaABAg
https://www.youtube.com/watch?v=ly3bed99Dy8&lc=UgztdHvDMqTb9jiqnf54AaABAg
https://www.youtube.com/watch?v=ly3bed99Dy8&lc=UgyQFTmYLJ4VBwIlmql4AaABAg
https://www.youtube.com/watch?v=ly3bed99Dy8&lc=Ugy4-exy166_Ma7TH-h4AaABAg
https://medium.com/@pharmx/you-sir-are-my-hero-62cff5836a3e
Если вы считаете этот проект полезным, пожалуйста, подумайте о том, чтобы поставить ему ⭐ звезду на GitHub! Это поможет другим узнать о проекте и поощрит его дальнейшее развитие.
Мы приветствуем вклад сообщества! Если вы нашли ошибку, у вас есть запрос на функцию или вы хотите внести свой вклад в код, вот как вы можете помочь:
Нашли ошибку? Откройте вопрос на github.com/wonderwhy-er/DesktopCommanderMCP/issues
Есть идея функции? Отправьте запрос функции в разделе вопросов
Хотите внести свой код? Сделайте форк репозитория, создайте ветку и отправьте запрос на извлечение
Вопросы или обсуждения? Начните обсуждение на вкладке GitHub Discussions
Мы будем очень признательны за любой вклад, большой или маленький!
Если вы считаете этот инструмент полезным для своего рабочего процесса, пожалуйста, рассмотрите возможность поддержки проекта .
Часто задаваемые вопросы
Вот ответы на некоторые распространенные вопросы. Для более полного FAQ см. наш подробный документ FAQ .
Что такое Desktop Commander?
Это инструмент MCP, который позволяет Claude Desktop получать доступ к вашей файловой системе и терминалу, превращая Claude в универсального помощника для кодирования, автоматизации, исследования кодовой базы и многого другого.
Чем это отличается от Cursor/Windsurf?
В отличие от инструментов, ориентированных на IDE, Claude Desktop Commander обеспечивает ориентированный на решение подход, который работает со всей вашей ОС, а не только в среде кодирования. Claude считывает файлы целиком, а не разбивает их на части, может работать над несколькими проектами одновременно и вносит изменения за один раз, не требуя постоянного просмотра.
Нужно ли мне платить за API-кредиты?
Нет. Этот инструмент работает со стандартной подпиской Claude Desktop Pro (20 долл. США в месяц), а не с вызовами API, поэтому вам не придется нести дополнительных расходов сверх абонентской платы.
Обновляется ли Desktop Commander автоматически?
Да, при установке через npx или Smithery Desktop Commander автоматически обновляется до последней версии при перезапуске Claude. Ручной процесс обновления не требуется.
Каковы наиболее распространенные варианты использования?
Изучение и понимание сложных кодовых баз
Создание диаграмм и документации
Автоматизация задач в вашей системе
Работа с несколькими проектами одновременно
Внесение хирургических изменений в код с точным контролем
У меня возникли проблемы с установкой или использованием инструмента. Где я могу получить помощь?
Присоединяйтесь к нашему серверу Discord для поддержки сообщества, проверьте GitHub issues на предмет известных проблем или просмотрите полный FAQ для советов по устранению неполадок. Вы также можете посетить раздел FAQ на нашем сайте для более удобного использования. Если вы столкнулись с новой проблемой, пожалуйста, рассмотрите возможность открытия GitHub issue с подробностями о вашей проблеме.
Сбор данных и конфиденциальность
Desktop Commander собирает ограниченные анонимные данные телеметрии, чтобы помочь улучшить инструмент. Никакая личная информация, содержимое файлов, пути к файлам или аргументы команд не собираются.
Телеметрия включена по умолчанию. Чтобы отказаться:
Откройте чат и просто спросите: «Отключить телеметрию».
Чат-бот автоматически обновит ваши настройки.
Подробную информацию о сборе данных можно найти в нашей Политике конфиденциальности .
Лицензия
Массачусетский технологический институт
Available Tools
25 toolscreate_directoryA
Create a new directory or ensure a directory exists.
Can create multiple nested directories in one operation.
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=false and destructiveHint=false; the description goes further by disclosing recursive creation ('multiple nested directories in one operation'), the sandbox boundary, and automatic path normalization. It still omits what happens on failure or what the call returns, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core statements are front-loaded and clear, but the path paragraph is redundant — it asserts 'Absolute paths are the most reliable' and then repeats 'Absolute paths are generally the most reliable' a few lines later. The trailing 'DC: ...' branding sentence consumes space without adding selection or invocation value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter mutation tool with no output schema, the description covers the essentials: recursion behavior, sandbox restriction, and path handling. The absence of any statement about the return value or error behavior is a minor gap given there is no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single path parameter has 0% schema description coverage, so the description must compensate, and it does: absolute vs relative behavior, tilde-path caveats, slash-direction normalization, and cwd dependence. The only gap is that it never says whether the path is a file or directory target beyond the tool's own purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Create a new directory') and adds a meaningful nuance ('or ensure a directory exists') that signals idempotent behavior. It does not name any sibling, but unlike list_directory or move_file the action is unambiguous from the text alone.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a real constraint ('Only works within allowed directories') and path-format advice, which implies suitable contexts, but it never states when to prefer this tool over alternatives such as write_file creating parent paths, nor does it name any sibling. Usage is inferable rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
edit_blockADestructive
Apply surgical edits to files.
Small, focused edits are easier to verify than large multi-purpose replacements.
old_string can include enough surrounding context to uniquely identify the intended text.
FORMAT HANDLING (by extension):
EXCEL FILES (.xlsx, .xls, .xlsm) - Range Update mode:
Takes:
- file_path: Path to the Excel file
- range uses FROM:TO format - "SheetName!A1:C10" or "SheetName!C1:C1"
- content: 2D array, e.g., [["H1","H2"],["R1","R2"]]
TEXT FILES - Find/Replace mode:
Takes:
- file_path: Path to the file to edit
- old_string: Text to replace
- new_string: Replacement text
- expected_replacements: Optional number of replacements (default: 1)
DOCX FILES (.docx) - XML Find/Replace mode:
Takes same parameters as text files (old_string, new_string, expected_replacements).
Operates on the pretty-printed XML inside the DOCX — the same XML you see from
read_file with offset/length. Copy XML fragments from read output as old_string.
After editing, the XML is repacked into a valid DOCX.
Also searches headers/footers if not found in document body.
Examples:
- Replace text: old_string="<w:t>Old Text</w:t>" new_string="<w:t>New Text</w:t>"
- Change style: old_string='<w:pStyle w:val="Normal"/>' new_string='<w:pStyle w:val="Heading1"/>'
- Add content: include surrounding XML context in old_string, add new elements in new_string
By default, replaces only ONE occurrence of the search text.
To replace multiple occurrences, provide expected_replacements with
the exact number of matches expected.
UNIQUENESS REQUIREMENT: When expected_replacements=1 (default), include the minimal
amount of context necessary (typically 1-3 lines) before and after the change point,
with exact whitespace and indentation.
When editing multiple sections, make separate edit_block calls for each distinct change
rather than one large replacement.
When a close but non-exact match is found, a character-level diff is shown in the format:
common_prefix{-removed-}{+added+}common_suffix to help you identify what's different.
Similar to write_file, there is a configurable line limit (fileWriteLineLimit) that warns
if the edited file exceeds this limit. If this happens, consider breaking your edits into
smaller, more focused changes.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| range | No | ||
| origin | No | ||
| content | No | ||
| options | No | ||
| file_path | Yes | ||
| new_string | No | ||
| old_string | No | ||
| expected_replacements | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, but the description adds substantial context beyond that: default single-occurrence replacement, expected_replacements semantics, the uniqueness requirement for matching, a character-level diff on near-matches, the configurable fileWriteLineLimit warning, and DOCX XML repacking behavior. This is rich behavioral disclosure that annotations alone cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose and core editing rules are front-loaded, and the format-handling sections are genuinely useful for a polymorphic tool. However, it is verbose and contains redundancy, notably restating absolute-path reliability twice and repeating the single-replacement default in two places, which dilutes an otherwise well-structured description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex 8-parameter tool with no output schema and 0% schema coverage, the description is substantially complete: it explains the three editing modes, the uniqueness/replacement model, failure feedback, and path handling. The main gap is the undocumented 'origin' enum and 'options' object, which an agent cannot interpret from any source.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry the burden, and it does for most parameters: file_path, old_string, new_string, expected_replacements (with default 1), range (with FROM:TO format and examples), and content (2D array format). It leaves 'origin' (the one enum) and 'options' (nested object) undocumented, so it falls short of full coverage despite strong compensation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Apply surgical edits to files') and immediately differentiates from the sibling write_file by contrasting small focused edits against 'large multi-purpose replacements.' It further distinguishes itself as a polymorphic editor by enumerating the file types it handles (Excel, text, DOCX), so an agent can identify it without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives concrete usage context: prefer small focused edits, use separate edit_block calls for multiple sections, include minimal surrounding context, and route by extension to the correct parameter mode. It does not explicitly state when to choose a sibling like write_file instead, but the implied split (surgical edits vs. full-file write) is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
force_terminateCDestructive
Force terminate a running terminal session.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| pid | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description identifies the tool as destructive, matching annotations, and specifies it targets a 'terminal session'. However, it does not disclose required permissions, potential side effects, or how termination is performed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no redundancy. The second sentence about referencing is marginally useful but still concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Lacks explanation of what constitutes a terminal session, how to obtain a PID, and how this tool differs from the similar 'kill_process'. The presence of siblings demands more context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description does not mention the 'pid' parameter or how it identifies the session. With 0% schema coverage, the description fails to clarify the parameter's meaning or format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it force terminates a running terminal session, but it does not differentiate from the sibling tool 'kill_process', which likely has similar functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like 'kill_process' or 'interact_with_process'. The only additional note is about referencing the command, not usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_configBRead-only
Get the complete server configuration as JSON. Config includes fields for:
- blockedCommands (array of blocked shell commands)
- defaultShell (shell to use for commands)
- allowedDirectories (paths the server can access)
- fileReadLineLimit (max lines for read_file, default 1000)
- fileWriteLineLimit (max lines per write_file call, default 50)
- telemetryEnabled (boolean for telemetry opt-in/out)
- currentClient (information about the currently connected MCP client)
- clientHistory (history of all clients that have connected)
- version (version of the DesktopCommander)
- systemInfo (operating system and environment details)
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| origin | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered structurally. The description adds that the payload includes clientHistory, systemInfo, and allowedDirectories, hinting at potentially sensitive content, but says nothing about permissions, redaction, or side effects beyond that. With annotations carrying the safety burden, this is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The main statement is front-loaded and the bulleted field list is an efficient way to enumerate a return shape that has no output schema. The closing sentence about 'DC: ...' / 'use Desktop Commander to ...' is orientation fluff that does not help an agent invoke this tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the enumerated config fields are the only documentation of the return value, and they cover all ten fields plus two defaults (1000 and 50), which is genuinely useful. The gaps are the undocumented `origin` parameter and no note on how often config changes or whether the read is cached.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description never mentions the single `origin` parameter or its `ui`/`llm` enum. The schema must carry that burden entirely, and while the enum values are fairly self-explanatory, the description does nothing to explain what difference the origin makes.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource ('Get the complete server configuration as JSON') and enumerates exactly what the configuration contains, so an agent knows precisely what this returns. It never differentiates itself from the obvious sibling set_config_value, whose job is the inverse (writing config), so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus alternatives such as get_usage_stats or get_recent_tool_calls, and no mention of set_config_value as the mutating counterpart. The trailing note about 'DC: ...' phrasing is about how to reference Desktop Commander in instructions, not about when this tool is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_file_infoARead-only
Retrieve detailed metadata about a file or directory including:
- size
- creation time
- last modified time
- permissions
- type
- lineCount (for text files)
- lastLine (zero-indexed number of last line, for text files)
- appendPosition (line number for appending, for text files)
- sheets (for Excel files - array of {name, rowCount, colCount})
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description usefully adds the sandbox constraint ('Only works within allowed directories') and path-normalization behavior, though it says nothing about error behavior for missing files.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The field list is front-loaded and scannable, but the path guidance is padded — 'Absolute paths are the most reliable' appears twice in different words, and the 'DC: ...' / 'use Desktop Commander to ...' line is boilerplate that does not help tool selection.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and zero schema description coverage, the description carries the load well by enumerating every returned field (including file-type-specific ones like sheets and appendPosition) and covering path-format caveats. The main remaining gap is failure behavior inside the allowed-directories constraint.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% — the single 'path' parameter has no description in the schema — but the description compensates with substantive guidance: absolute paths are most reliable, paths are normalized regardless of slash direction, relative paths depend on cwd, and tilde paths may not resolve. Format details (e.g., whether paths must exist, directory vs file handling) are still absent.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Opens with a specific verb+resource ('Retrieve detailed metadata about a file or directory') and enumerates the exact fields returned, so an agent can distinguish it from read_file or list_directory without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
States a constraint ('Only works within allowed directories') but never says when to choose this over siblings like read_file or list_directory, nor when it is the wrong tool. Usage is implied rather than specified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_more_search_resultsARead-only
Get more results from an active search with offset-based pagination.
Supports partial result reading with:
- 'offset' (start result index, default: 0)
* Positive: Start from result N (0-based indexing)
* Negative: Read last N results from end (tail behavior)
- 'length' (max results to read, default: 100)
* Used with positive offsets for range reading
* Ignored when offset is negative (reads all requested tail results)
Examples:
- offset: 0, length: 100 → First 100 results
- offset: 200, length: 50 → Results 200-249
- offset: -20 → Last 20 results
- offset: -5, length: 10 → Last 5 results (length ignored)
Returns only results in the specified range, along with search status.
Works like read_process_output - call this repeatedly to get progressive
results from a search started with start_search.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| length | No | ||
| offset | No | ||
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, destructiveHint=false), so the bar is lower. The description adds real behavioral detail beyond that: tail behavior for negative offsets, that length is ignored in that case, and that it returns only the specified range plus search status.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose is front-loaded and the examples genuinely earn their place by disambiguating offset/length interactions. There is minor waste in the heavy indentation and the trailing boilerplate about 'DC: ...' referencing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully states what is returned (the range plus search status). Pagination semantics are fully covered; the only gap is where sessionId originates and what the search status values mean.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must carry parameter meaning, and it does so thoroughly for offset and length with four concrete examples including negative-offset edge cases. The required sessionId parameter, however, is never explained (presumably from start_search).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get more results from an active search') and scopes it to pagination continuation. It is clearly distinguishable from start_search (which initiates) and from read_process_output (which it explicitly compares itself to).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly describes the workflow: 'call this repeatedly to get progressive results from a search started with start_search.' It gives clear context for when to invoke it but does not state when not to use it (e.g., vs. list_searches or stop_search).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_recent_tool_callsARead-only
Get recent local tool call history with arguments and outputs.
Returns a chronological list of recent calls loaded from the local history file.
Useful for:
- Onboarding new chats about work already done
- Recovering context after chat history loss
- Debugging tool call sequences
Note: Does not track its own calls or track_ui_event.
History is persisted locally in tool-history.jsonl, keeps up to the last 1000
calls in memory, and trims older on-disk history. Stored outputs over 4 KiB
are replaced with an omission marker.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| since | No | ||
| toolName | No | ||
| maxResults | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/openWorld=false/destructive=false, yet the description adds substantial behavior beyond them: it excludes its own calls and track_ui_event, names the persistence file, states the 1000-call in-memory cap, notes disk trimming, and discloses the 4 KiB output omission marker. That is exactly the kind of context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core behavior, then structures the rest into a short bullet list and a compact behavior note. The trailing line about being referenced as 'DC: ...' is meta rather than functional for selection, but overall it is tight and every functional sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only history reader with no output schema and no siblings to distinguish, the description covers what it returns (chronological argument/output list), storage lifetime, size limits, and self-exclusion. The only real gap is parameter meaning, which is a separate dimension.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and none of the three parameters (since, toolName, maxResults) are mentioned in the description. The phrase 'recent' vaguely hints at date ordering, but there is no explanation of filtering by tool name, the date format, or the result cap, so the description does not compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Get recent local tool call history with arguments and outputs') and clarifies returns a chronological list from a local history file. No sibling covers call history, so there is no overlap to disambiguate, but it also does not explicitly contrast with any sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'Useful for' bullets give concrete contexts (onboarding chats, recovering context after history loss, debugging tool call sequences), which is clear usage guidance. It lacks an explicit when-not-to-use or alternative-tool clause, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_usage_statsARead-only
Get usage statistics for debugging and analysis.
Returns summary of tool usage, success/failure rates, and performance metrics.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value by disclosing the return content (usage summary, success/failure rates, performance metrics) — useful since no output schema exists — but it says nothing about scope limits or time windows.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The first two sentences are efficient and front-loaded, but the third sentence about 'DC: ...' / 'use Desktop Commander to ...' referencing is boilerplate meta-instruction that adds no selection or invocation value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only, closed-world tool with no output schema, the description covers purpose, return content, and use context adequately. Only the lack of any scoping details (time range, filters) leaves a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline of 4 applies; there is nothing for the description to clarify beyond what the empty schema already conveys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Get usage statistics') and enumerates what is included (tool usage, success/failure rates, performance metrics), distinguishing it from the similar get_recent_tool_calls sibling. However, it never names that sibling or explicitly delineates the boundary, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'for debugging and analysis' implies a usage context but gives no when-to-use, when-not-to-use, or alternative-tool guidance against siblings like get_recent_tool_calls. Usage is only weakly implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
give_feedback_to_desktop_commanderA
Open feedback form in browser to provide feedback about Desktop Commander.
The form itself collects survey answers; this tool does not accept survey responses or
pre-fill them. It automatically includes basic usage metadata:
- tool_call_count: Number of commands made
- days_using: Number of days Desktop Commander has been used
- platform: Operating system (Mac/Windows/Linux)
- client_id: Analytics identifier
No input parameters are required.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, openWorldHint=true), the description discloses that a browser is launched and that usage metadata is automatically attached to the submission (tool_call_count, days_using, platform, client_id) — privacy-relevant behavior an agent could not infer from structured fields. This is exactly the added context the dimension rewards.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core purpose and the metadata disclosure are front-loaded and each sentence carries information. The trailing note about 'DC: ...' invocation phrasing is marginally useful for agent behavior but is the one element that reads as boilerplate rather than necessary content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, no-output-schema tool whose side effect is launching an external browser, the description covers everything an agent needs: what it opens, that it takes no arguments, what data is transmitted, and that responses cannot be supplied. Nothing material is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters, the baseline is 4, and the description reinforces the schema by stating 'No input parameters are required,' which matches the empty properties object with additionalProperties=false. There is no syntax or format to add.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Open feedback form in browser to provide feedback about Desktop Commander') and is unmistakable against every sibling, none of which relate to feedback collection. It also draws a clear boundary by noting the tool does not accept or pre-fill survey responses.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is clear and self-selecting: this is the tool to call when the user wants to give feedback. The description explicitly rules out one wrong expectation (that you can pass survey answers through this tool), but it names no alternatives or conditions for when not to call it, which keeps it below a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
interact_with_processADestructive
Send input to an existing terminal or REPL process and return newly available output.
Useful for interactive shells, Python/Node/R/Julia REPLs, database consoles,
and long-running commands started with start_process().
Examples:
- Interactive Python REPL sessions can be started with `python3 -i`.
- Existing interactive sessions accept additional input such as imports or analysis commands.
- Interactive sessions can return newly available output while they remain active.
SMART DETECTION:
- Automatically waits for a recognized prompt when requested
- Detects errors and completion states
- Early exit prevents unnecessary waiting
- Cleans common REPL prompt text from returned output
PARAMETERS:
- pid: Process ID returned by start_process
- input: Text or command to send to the process
- timeout_ms: Maximum wait time (default: 8000ms)
- wait_for_prompt: Whether to wait for a prompt before returning (default: true)
- verbose_timing: Include detailed timing telemetry (default: false)
Returns execution result with status indicators.
PERFORMANCE DEBUGGING (verbose_timing parameter):
When enabled, detailed timing includes:
- Exit reason
- Total duration and time to first output
- Timeline of output events
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| pid | Yes | ||
| input | Yes | ||
| timeout_ms | No | ||
| verbose_timing | No | ||
| wait_for_prompt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and openWorldHint=true, so the safety profile is covered. The description adds substantial behavioral context beyond that: smart prompt-waiting, error/completion detection, early exit, prompt-text cleaning, and verbose timing telemetry. It does not itself warn that arbitrary input can be destructive, but the annotation carries that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose, then organized under SMART DETECTION, PARAMETERS, and PERFORMANCE DEBUGGING headers, which is easy to scan. Minor waste exists: the example bullets partly restate the 'useful for' sentence, and the trailing 'DC: ...' branding line adds no invocation value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, and the return description ('execution result with status indicators') is thin, but the smart-detection section compensates by explaining cleaned output, error detection, and early exit. For a 5-param interactive mutation tool with annotations covering safety, this is close to complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry the load, and it does: it documents all five parameters (pid, input, timeout_ms, wait_for_prompt, verbose_timing) and gives defaults (8000ms, true, false) plus semantics for each. The pid is tied back to start_process, which adds real meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Send input to an existing terminal or REPL process and return newly available output') and distinguishes itself from the sibling start_process() it depends on. An agent can tell it apart from read_process_output and start_process without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear context for when to use it: interactive shells, Python/Node/R/Julia REPLs, database consoles, and long-running commands started with start_process(). It names the prerequisite (start_process) but offers no explicit when-not guidance or alternatives (e.g., read_process_output for passive reading).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kill_processBDestructive
Terminate a running process by PID.
Use with caution as this will forcefully terminate the specified process.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| pid | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already set destructiveHint=true, so the description's 'forcefully terminate' adds some context but does not disclose additional behaviors like potential data loss or irreversibility. It aligns with annotations but adds little extra.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, mostly concise. The third sentence about referencing as 'DC: ...' is tangential and adds length without aiding tool invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one parameter and no output schema, the description covers purpose and caution adequately. However, it could include a brief note on prerequisites (e.g., PID must exist) for completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 0% description coverage; the description only mentions 'by PID' without explaining what PID means or how to obtain it. This adds minimal value beyond the parameter name.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Terminate a running process by PID.' This is a specific verb-resource pairing that distinguishes the tool from siblings like 'interact_with_process' or 'force_terminate'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
While the description warns 'Use with caution', it does not specify when to use this tool versus alternatives (e.g., 'interact_with_process' for graceful termination) or when not to use it. No explicit context or exclusions provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_directoryARead-only
Get a detailed listing of all files and directories in a specified path.
Returns a structured directory listing without starting a shell command.
Results distinguish between files and directories with [FILE] and [DIR] prefixes.
Supports recursive listing with the 'depth' parameter (default: 2):
- depth=1: Only direct contents of the directory
- depth=2: Contents plus one level of subdirectories
- depth=3+: Multiple levels deep
CONTEXT OVERFLOW PROTECTION:
- Top-level directory shows ALL items
- Nested directories are limited to 100 items maximum per directory
- When a nested directory has more than 100 items, you'll see a warning like:
[WARNING] node_modules: 500 items hidden (showing first 100 of 600 total)
- This prevents overwhelming the context with large directories like node_modules
Results show full relative paths from the root directory being listed.
Example output with depth=2:
[DIR] src
[FILE] src/index.ts
[DIR] src/tools
[FILE] src/tools/filesystem.ts
If a directory cannot be accessed, it will show [DENIED] instead.
If a path does not exist, it will show [NOT_FOUND] instead.
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| depth | No | ||
| origin | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false, openWorldHint=false), and the description goes well beyond them: it discloses context-overflow protection with the 100-item nested cap, the [WARNING]/[DENIED]/[NOT_FOUND] markers, depth-controlled recursion, and path normalization behavior. This is exactly the extra runtime context an agent needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads purpose, then behavior, examples, and constraints in a scannable order. It is somewhat long, and the closing paragraph repeats the 'absolute paths are most reliable' point twice and appends a promotional 'DC: ...' reference line that does not earn its place, but the bulk of the text is substantive.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must explain the return format, and it does so thoroughly with a worked depth=2 example plus status markers. Combined with depth and path semantics, an agent has everything required to call it correctly within allowed directories.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With schema coverage at 0%, the description carries the burden and mostly succeeds: it fully explains 'depth' (default 2, with concrete 1/2/3+ semantics) and 'path' (absolute vs relative, tilde resolution, slash normalization). The 'origin' enum parameter is left unexplained, which is the one remaining gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get a detailed listing of all files and directories in a specified path') and clarifies it operates 'without starting a shell command,' which distinguishes it from process/shell siblings. An agent can immediately tell this apart from read_file, get_file_info, or the search tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the purpose and by the constraint 'Only works within allowed directories,' and the 'without starting a shell command' line hints at an alternative approach. However, it never explicitly states when to choose this over sibling discovery tools like start_search or read_multiple_files, nor does it give when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_processesARead-only
List all running processes.
Returns process information including PID, command name, CPU usage, and memory usage.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value beyond that by enumerating the returned fields (PID, command name, CPU, memory), which matters because there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core purpose and return-value sentences are front-loaded and efficient, but the trailing sentence about 'DC: ...' / 'use Desktop Commander to ...' is boilerplate that does not help an agent select or call this tool, and the block carries excess indentation and whitespace.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-argument, read-only listing tool with full annotation coverage, the description supplies the essentials: what it lists and what the results contain. Missing only a note on result volume or ordering, which is minor given there is no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate; baseline 4 applies. The absence of arguments is consistent with the empty schema and the read-only listing behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List all running processes') and clarifies scope with 'all', which separates it from read_process_output/interact_with_process on a single process. It does not explicitly name a sibling or contrast with one, so it falls short of the top mark.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use guidance, no prerequisites, and no routing to alternatives like list_sessions or get_usage_stats. The only hint is the meta-instruction about referring to 'Desktop Commander', which addresses invocation phrasing rather than tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_searchesARead-only
List all active searches.
Shows search IDs, search types, patterns, status, and runtime.
Similar to list_sessions for terminal processes. Useful for managing
multiple concurrent searches.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value by disclosing the returned fields and that it lists only active searches, compensating for the absence of an output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core action and return contents efficiently. The trailing note about referencing it as 'DC: ...' is invocation boilerplate that does not help tool selection, a minor blemish on an otherwise tight description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only list tool with no output schema, the description is complete: it states the action, scopes it to active searches, and enumerates the returned fields. An agent has everything it needs to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, which sets the baseline at 4. There is nothing for the description to clarify beyond the fact that it operates on all active searches with no filtering options.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List all active searches') and enumerates the fields it returns (IDs, types, patterns, status, runtime). It names list_sessions as an analogous sibling but does not explicitly distinguish itself from search siblings like start_search, stop_search, or get_more_search_results.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Useful for managing multiple concurrent searches' implies a context of use, but there is no explicit when-to-use vs. alternatives guidance (e.g., versus get_more_search_results or stop_search) and no exclusions. Usage is inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_sessionsARead-only
List all active terminal sessions.
Shows session status including:
- PID: Process identifier
- Blocked: Whether session is waiting for input
- Runtime: How long the session has been running
DEBUGGING REPLs:
- "Blocked: true" often means REPL is waiting for input
- Use this to verify sessions are running before sending input
- Long runtime with blocked status may indicate stuck process
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds genuinely new behavioral context by explaining what each returned field means and how to interpret blocked/stuck sessions, going beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the purpose well and uses scannable bullets, but the closing line about being referenced as 'DC: ...' is instruction-level metadata that does not help an agent select or invoke this specific tool, and the field list slightly overlaps the debugging heuristics.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description rightly compensates by documenting the returned fields and their interpretation. For a parameterless read-only listing tool, nothing an agent needs in order to call it correctly appears to be missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes no parameters (empty object schema, additionalProperties false), so there is nothing for the description to clarify; the baseline for a zero-parameter tool is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List all active terminal sessions') and enumerates the returned fields (PID, Blocked, Runtime), so the agent knows exactly what this tool surfaces. It does not explicitly distinguish itself from the nearby list_processes or interact_with_process siblings, which keeps it just short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides concrete when-to-use guidance: verify sessions are running before sending input, and interpret 'Blocked: true' / long runtimes as signals of a stuck REPL. It lacks an explicit 'use X instead when Y' routing statement naming an alternative, so it stops short of the top score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move_fileADestructive
Move or rename files and directories.
Can move files between directories and rename them in a single operation.
Both source and destination must be within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| destination | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, so the safety profile is covered. The description adds genuinely useful behavioral context: the allowed-directory restriction and path normalization/reliability quirks. It does not, however, explain whether an existing destination is overwritten or what happens on failure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core purpose is front-loaded and clear, but the path guidance is repetitive—'Absolute paths are the most reliable' essentially appears twice—and the 'DC: ...' / 'use Desktop Commander to ...' boilerplate adds no task value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive two-parameter operation with no output schema, the description covers path handling and scope but omits key behaviors: overwrite semantics, error/failure conditions, and permission requirements. Annotations carry the destructive signal, but more operational detail would help.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for both parameters. It does meaningfully: it explains that source and destination are paths, must reside in allowed directories, are auto-normalized, and that absolute paths are most reliable. That is solid path semantics beyond the bare 'string' types.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (move/rename) and resource (files and directories), and clarifies the dual behavior of moving between directories and renaming in a single operation. This is unambiguous and clearly distinguishable from siblings like write_file or create_directory.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a prerequisite ('both source and destination must be within allowed directories') but never states when to prefer this over alternatives, nor names any sibling tools. Usage context is only implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_fileARead-only
Read contents from files and URLs.
Read PDF files and extract content as markdown and images.
Suitable for reading authorized local files directly without starting a shell command.
Supports partial file reading with:
- 'offset' (start line, default: 0)
* Positive: Start from line N (0-based indexing)
* Negative: Read last N lines from end (tail behavior)
- 'length' (max lines to read, default: configurable via 'fileReadLineLimit' setting, initially 1000)
* Used with positive offsets for range reading
* Ignored when offset is negative (reads all requested tail lines)
Examples:
- offset: 0, length: 10 → First 10 lines
- offset: 100, length: 5 → Lines 100-104
- offset: -20 → Last 20 lines
- offset: -5, length: 10 → Last 5 lines (length ignored)
Performance optimizations:
- Large files with negative offsets use reverse reading for efficiency
- Large files with deep positive offsets use byte estimation
- Small files use fast readline streaming
When reading from the file system, only works within allowed directories.
Can fetch content from URLs when isUrl parameter is set to true
(URLs are always read in full regardless of offset/length).
FORMAT HANDLING (by extension):
- Text: Uses offset/length for line-based pagination
- Excel (.xlsx, .xls, .xlsm): Returns JSON 2D array
* sheet: "Sheet1" (name) or "0" (index as string, 0-based)
* range uses FROM:TO format (e.g., "A1:D100", "C1:C1", "B2:B50")
* offset/length work as row pagination (optional fallback)
- Images (PNG, JPEG, GIF, WebP): Base64 encoded viewable content
- PDF: Extracts text content as markdown with page structure
* offset/length work as page pagination (0-based)
* Includes embedded images when available
- DOCX (.docx): Two modes depending on parameters:
* DEFAULT (no offset/length): Returns a text-bearing outline — shows paragraphs with text,
tables with cell content, styles, image refs. Skips shapes/drawings/SVG noise.
Each element shows its body index [0], [1], etc.
* WITH offset/length: Returns raw pretty-printed XML with line pagination.
Use this to drill into specific sections or see the actual XML for editing.
* Raw DOCX XML output is compatible with edit_block's XML find/replace mode using
XML fragments copied from the read output.
* Raw XML mode requires a non-zero offset (offset=1 starts from line 1).
offset=0 returns the outline regardless of length.
* Bulk transformations can be performed programmatically against the DOCX archive
when the task requires changes across many XML text nodes.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| isUrl | No | ||
| range | No | ||
| sheet | No | ||
| length | No | ||
| offset | No | ||
| origin | No | ||
| options | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld annotations, the description discloses a great deal: directory allow-listing, URL-is-read-in-full-regardless-of-pagination, reverse-read/byte-estimation performance behavior, per-format return shapes, and the DOCX mode switch keyed on offset/length. This is exactly the added context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded and well-organized with headers, bullets, and concrete examples that earn their space. It loses a point for redundancy: the 'absolute paths are the most reliable' point is stated twice in the closing paragraph, and the 'DC: ...' trailer is noise rather than specification.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex 8-parameter tool with no output schema, the description covers return shapes per format (JSON 2D array, base64, markdown, DOCX outline vs raw XML) and the pagination model thoroughly. An agent has everything it needs to invoke it correctly without a return-value schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the burden and largely succeeds: offset (including negative tail semantics and the length-ignored interaction), length, isUrl, sheet, and range are all explained with worked examples. It leaves 'origin' and the 'options' object undocumented, so it is not fully compensating for all 8 parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening line states a specific verb and resource: 'Read contents from files and URLs,' and the format-handling section makes the scope (text, Excel, images, PDF, DOCX) concrete. It does not name the obvious sibling read_multiple_files to distinguish when to pick one over the other, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives clear usage context: 'Suitable for reading authorized local files directly without starting a shell command,' plus the constraint that file reads 'only works within allowed directories' and that URLs require isUrl=true. However it never states when to prefer this over read_multiple_files or list_directory, so no explicit alternative routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_multiple_filesARead-only
Read the contents of multiple files simultaneously.
Each file's content is returned with its path as a reference.
Handles text files normally and renders images as viewable content.
Recognized image types: PNG, JPEG, GIF, WebP.
Failed reads for individual files won't stop the entire operation.
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| paths | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, destructiveHint=false), yet the description adds genuinely useful behavior: partial failure tolerance ('Failed reads for individual files won't stop the entire operation'), image rendering as viewable content with supported types, and directory sandboxing. These go beyond what the annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose and return behavior are front-loaded well, but the path discussion repeats itself ('Absolute paths are the most reliable because...' and later 'Absolute paths are generally the most reliable'), and the closing 'DC:' reference line is meta rather than tool-relevant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully explains the return shape (each file's content paired with its path) and image rendering, plus failure and directory constraints. It is nearly complete for a read tool, missing only guidance on choosing it over single-file reads.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must carry the parameter burden, and it does add real path semantics: automatic normalization regardless of slash direction, tilde caveats, and the reliability argument for absolute paths. It stops short of clarifying array behavior such as ordering, duplicates, or per-path failure reporting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource ('Read the contents of multiple files simultaneously'), and the multi-file scope naturally contrasts with the single-file sibling read_file. It is clear, but it never names read_file as the alternative for single-file reads, so differentiation is implied rather than explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives real constraints ('Only works within allowed directories') and path guidance, but never states when to choose this over read_file or other siblings. Usage is implied by the scope rather than laid out as a selection rule.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_process_outputARead-only
Read output from a running process with file-like pagination support.
Supports partial output reading with offset and length parameters (like read_file):
- 'offset' (start line, default: 0)
* offset=0: Read NEW output since last read (default, like old behavior)
* Positive: Read from absolute line position
* Negative: Read last N lines from end (tail behavior)
- 'length' (max lines to read, default: configurable via 'fileReadLineLimit' setting)
Examples:
- offset: 0, length: 100 → First 100 NEW lines since last read
- offset: 0 → All new lines (respects config limit)
- offset: 500, length: 50 → Lines 500-549 (absolute position)
- offset: -20 → Last 20 lines (tail)
- offset: -50, length: 10 → Start 50 from end, read 10 lines
OUTPUT PROTECTION:
- Uses same fileReadLineLimit as read_file (default: 1000 lines)
- Returns status like: [Reading 100 lines from line 0 (total: 5000 lines, 4900 remaining)]
- Prevents context overflow from verbose processes
SMART FEATURES:
- For offset=0, waits up to timeout_ms for new output to arrive
- Detects REPL prompts and process completion
- Shows process state (waiting for input, finished, etc.)
DETECTION STATES:
Process waiting for input (ready for interact_with_process)
Process finished execution
Timeout reached (may still be running)
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| pid | Yes | ||
| length | No | ||
| offset | No | ||
| timeout_ms | No | ||
| verbose_timing | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint/destructiveHint/openWorldHint, and the description goes well beyond them: it discloses the fileReadLineLimit-based output protection (default 1000 lines), the status line returned, waiting behavior up to timeout_ms for offset=0, and REPL/completion/timeout detection states. This is exactly the behavioral context the agent needs and cannot get from the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose and offset semantics are front-loaded, and the examples genuinely earn their place given 0% schema coverage. There is some redundancy (the DETECTION STATES list restates the SMART FEATURES points, and some examples overlap), plus a stray 'DC: ...' line, which keeps it from a 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no output schema and 0% schema coverage, the description is largely complete: it explains pagination semantics, return status format, limits, and process states. The only shortfall is the undocumented pid and verbose_timing parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the burden. It thoroughly documents offset (with a full example table) and length, and briefly mentions timeout_ms under SMART FEATURES, but pid and verbose_timing are entirely undocumented in both the schema and the description, leaving real gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Read output from a running process') and immediately frames it against a known sibling behavior ('file-like pagination support', 'like read_file'). An agent can distinguish it from read_file, interact_with_process, and list_processes without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives strong context for the offset modes and, via the detection states, points to interact_with_process when the process is waiting for input. It does not explicitly state when NOT to use this tool or name a full set of alternatives, so it stops short of 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_config_valueADestructive
Set a specific configuration value by key.
Security note: configuration changes affect later file and command behavior.
Isolating them from untrusted file or command content reduces the chance that external content influences configuration.
Config keys include:
- blockedCommands (array)
- defaultShell (string)
- allowedDirectories (array of paths)
- fileReadLineLimit (number, max lines for read_file)
- fileWriteLineLimit (number, max lines per write_file call)
- telemetryEnabled (boolean)
IMPORTANT: Setting allowedDirectories to an empty array ([]) allows full access
to the entire file system, regardless of the operating system.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| key | Yes | ||
| value | Yes | ||
| origin | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, and the description meaningfully extends this by warning that changes affect later file/command behavior and that setting allowedDirectories to [] grants full filesystem access. These are high-value behavioral specifics beyond the annotations, though reversibility and auth requirements are not addressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core purpose, then layers the security note, key list, and the critical allowedDirectories warning. Every section carries information, though the DC reference line and repeated framing add minor filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive mutation tool with no output schema, the description covers the key inventory, value types, and the dangerous edge case. It stops short of explaining the origin parameter or whether changes are persistent/reversible, but the essentials for safe invocation are present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the burden. It compensates well for the 'key' parameter by listing valid keys with their value types (array, string, number, boolean), but the 'value' parameter's constraints and the 'origin' enum (ui/llm) are left entirely undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Set a specific configuration value by key') and enumerates the exact keys that can be set, which lets an agent distinguish it from the sibling get_config. Sibling differentiation is implicit rather than explicit, but the intent is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The security note gives some contextual reasoning for isolating configuration changes from untrusted content, which is implied usage guidance. However, it never states when to prefer this tool over get_config or when a change should be avoided, so there are no explicit when/when-not rules or named alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_processADestructive
Start a terminal process on the authorized device with intelligent state detection.
Suitable for shell commands, interactive REPL sessions, data-processing scripts,
programmatic file analysis, and other long-running terminal work.
Running on Linux (Docker). Default shell: /bin/sh.🐳 DOCKER CONTAINER ENVIRONMENT DETECTED: This Desktop Commander instance is running inside a Docker container.
⚠️ WARNING: No mounted directories detected. Files created outside mounted volumes will be lost when the container stops. Persistent file work requires a mounted directory, available through the Docker installer or a -v mount. Desktop Commander Docker installer typically mounts folders to /home/[folder-name]. Container: 4faa167019d6
LINUX-SPECIFIC NOTES:
Package managers vary by distro: apt, yum, dnf, pacman, zypper
Python 3 might be 'python3' command, not 'python'
Standard Unix shell tools available (grep, awk, sed, etc.)
File permissions and ownership important for many operations
Systemd services common on modern distributions
Examples: • start_process("python3 -i") → Start an interactive Python REPL • start_process("node -i") → Start an interactive Node.js REPL • start_process("node:local") → Run stateless Node.js code on the MCP server • start_process("wc -l /path/file.csv") → Run a one-shot shell command Interactive process sessions support follow-up input after they are started. Long-running process sessions expose newly available output while they remain active. Binary files can be processed with appropriate command-line tools or libraries available in the selected process environment. SMART DETECTION: - Detects REPL prompts (>>>, >, $, etc.) - Identifies when a process is waiting for input - Recognizes process completion vs timeout - Early exit prevents unnecessary waiting STATES DETECTED: Process waiting for input (shows prompt) Process finished execution Process running (use read_process_output) PERFORMANCE DEBUGGING (verbose_timing parameter): Set verbose_timing: true to get detailed timing information including: - Exit reason (early_exit_quick_pattern, early_exit_periodic_check, process_exit, timeout) - Total duration and time to first output - Complete timeline of all output events with timestamps - Which detection mechanism triggered early exit Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable. This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.
| Name | Required | Description | Default |
|---|---|---|---|
| shell | No | ||
| origin | No | ||
| command | Yes | ||
| timeout_ms | Yes | ||
| verbose_timing | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructive/open-world/non-read-only behavior; the description adds meaningful context about Docker persistence risk, default /bin/sh, smart REPL/input/completion detection, early exit, and verbose_timing diagnostics. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is front-loaded with the core purpose, but then becomes bloated with Docker container boilerplate, distro notes, diagnostic detail, and a repeated absolute-path paragraph. Much of that content is environment-specific noise rather than invocation guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex process-start tool with no output schema, it covers lifecycle states, follow-up output, and environment constraints reasonably well. It is still incomplete about timeout behavior, parameter meanings, and cleanup/termination routing to siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% for 5 parameters, and the description compensates only partially: it explains verbose_timing and shows command examples, plus notes default shell /bin/sh. It does not document timeout_ms (required, units/default), origin enum values, or the shell parameter's override semantics, and examples omit timeout_ms despite it being required.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Start a terminal process') and scopes it to shell commands, interactive REPL sessions, one-shot commands, and long-running terminal work. The examples and state list make it distinguishable from sibling process tools such as read_process_output and interact_with_process.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives suitable use cases and examples, and explicitly directs the agent to read_process_output when a process is still running. It lacks explicit exclusions or comparisons for interact_with_process, force_terminate, or kill_process, so guidance is clear but not complete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_searchARead-only
Start a streaming search that can return results progressively.
SEARCH STRATEGY GUIDE:
Choose the right search type based on what the user is looking for:
USE searchType="files" WHEN:
- User asks for specific files: "find package.json", "locate config files"
- Pattern looks like a filename: "*.js", "README.md", "test-*.tsx"
- User wants to find files by name/extension: "all TypeScript files", "Python scripts"
- Looking for configuration/setup files: ".env", "dockerfile", "tsconfig.json"
USE searchType="content" WHEN:
- User asks about code/logic: "authentication logic", "error handling", "API calls"
- Looking for functions/variables: "getUserData function", "useState hook"
- Searching for text/comments: "TODO items", "FIXME comments", "documentation"
- Finding patterns in code: "console.log statements", "import statements"
- User describes functionality: "components that handle login", "files with database queries"
AMBIGUOUS SEARCHES:
Queries that could refer to either filenames or file contents can be covered with two
searches: one with searchType="files" and one with searchType="content".
Example: "find authentication stuff" can pair a filename search for "auth" with a
content search for "authentication".
SEARCH TYPES:
- searchType="files": Find files by name (pattern matches file names)
- searchType="content": Search inside files for text patterns
PATTERN MATCHING MODES:
- Default (literalSearch=false): Patterns are treated as regular expressions
- Literal (literalSearch=true): Patterns are treated as exact strings
literalSearch=true is useful for code patterns with special characters:
- Function calls with parentheses and quotes
- Array access with brackets
- Object methods with dots and parentheses
- File paths with backslashes
- Any pattern containing: . * + ? ^ $ { } [ ] | \ ( )
IMPORTANT PARAMETERS:
- pattern: What to search for (file names OR content text)
- literalSearch: Use exact string matching instead of regex (default: false)
- filePattern: Optional filter to limit search to specific file types (e.g., "*.js", "package.json")
- ignoreCase: Case-insensitive search (default: true). Works for both file names and content.
- earlyTermination: Stop search early when exact filename match is found (optional: defaults to true for file searches, false for content searches)
DECISION EXAMPLES:
- "find package.json" → searchType="files", pattern="package.json" (specific file)
- "find authentication components" → searchType="content", pattern="authentication" (looking for functionality)
- "locate all React components" → searchType="files", pattern="*.tsx" or "*.jsx" (file pattern)
- "find TODO comments" → searchType="content", pattern="TODO" (text in files)
- "show me login files" → AMBIGUOUS → run both: files with "login" AND content with "login"
- "find config" → AMBIGUOUS → run both: config files AND files containing config code
COMPREHENSIVE SEARCH EXAMPLES:
- Find package.json files: searchType="files", pattern="package.json"
- Find all JS files: searchType="files", pattern="*.js"
- Search for TODO in code: searchType="content", pattern="TODO", filePattern="*.js|*.ts"
- Search for exact code: searchType="content", pattern="toast.error('test')", literalSearch=true
- Ambiguous request "find auth stuff": Run two searches:
1. searchType="files", pattern="auth"
2. searchType="content", pattern="authentication"
Ambiguous requests can combine file-name and content searches for broader coverage.
This tool starts a background search process and returns immediately with a session ID.
Results are available through get_more_search_results, and stop_search can end the search early.
Perfect for large directories where you want to see results immediately and
have the option to cancel if the search takes too long or you find what you need.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| origin | No | ||
| pattern | Yes | ||
| ignoreCase | No | ||
| maxResults | No | ||
| searchType | No | files | |
| timeout_ms | No | ||
| filePattern | No | ||
| contextLines | No | ||
| includeHidden | No | ||
| literalSearch | No | ||
| earlyTermination | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/non-destructive/closed-world, so the safety bar is covered. The description adds genuine lifecycle context: it starts a background process, returns immediately with a session ID, results flow through a sibling, and it can be cancelled. Path normalization/tilde-resolution caveats are also disclosed. It does not state timeout or maxResults behavior, keeping it below 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose is front-loaded, but the body is heavily redundant: 'DECISION EXAMPLES', 'COMPREHENSIVE SEARCH EXAMPLES', and the closing paragraphs repeat the same file/content selection rules several times. A large fraction of the text does not earn its place against what a shorter guide would convey.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a session-based streaming tool with no output schema, the description adequately explains the async lifecycle, where results appear, and how to cancel. It is complete enough to invoke correctly; only the unmentioned tuning parameters (timeout_ms, maxResults) leave minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the full burden, and it meaningfully documents the core params: pattern, searchType, literalSearch, filePattern, ignoreCase, earlyTermination, plus path reliability. However several params (maxResults, timeout_ms, contextLines, includeHidden, origin) receive no explanation, leaving real gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource (start a streaming search returning results progressively), and explicitly names the sibling tools that continue/cancel it (get_more_search_results, stop_search). An agent can tell it apart from list_searches and other siblings without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides an exhaustive when-to-use guide: explicit rules for choosing searchType='files' vs 'content', an ambiguity protocol (run both), and worked decision examples. This is far beyond typical routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stop_searchA
Stop an active search.
Stops the background search process gracefully. Use this when you've found
what you need or if a search is taking too long. Similar to force_terminate
for terminal processes.
The search will still be available for reading final results until it's
automatically cleaned up after 5 minutes.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=false; the description goes beyond them by disclosing that shutdown is 'graceful' and that the search remains readable until cleanup after 5 minutes. That post-condition is exactly the kind of context annotations cannot carry. It does not describe error behavior if the sessionId is invalid, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose is front-loaded in the first sentence and the operative guidance follows immediately. The closing boilerplate about referring to the tool as 'DC: ...' consumes space without helping tool selection, a minor waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter action tool with no output schema, the definition covers purpose, when to invoke it, and what happens to the search afterward. The only real gap is that the sessionId parameter is left entirely to the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for the single sessionId parameter, and the description never mentions it or explains which session it targets. The name is largely self-explanatory and the context implies it acts on an active search, so this is adequate rather than compensating for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Stop an active search') and explicitly distinguishes itself from the closest sibling by noting it is 'Similar to force_terminate for terminal processes.' An agent can tell it apart from start_search, list_searches, and force_terminate without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a clear trigger condition: 'Use this when you've found what you need or if a search is taking too long,' and names force_terminate as the analogous tool for terminal processes. It stops short of an explicit when-not (e.g., when to prefer letting a search finish or how it differs from kill_process), so it is strong but not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
write_fileADestructive
Write or append to file contents.
PDF creation is handled by the dedicated write_pdf tool.
Existing DOCX content can be edited with edit_block. New DOCX files can be created here; markdown headings (#, ##, ###) are converted to styled DOCX paragraphs.
CHUNKED WRITES:
- Repeated calls with mode='rewrite' followed by mode='append' are supported for longer files.
- Chunks of roughly 25-30 lines minimize latency when writing long text, multiple files, documentation, code, or configuration files.
- Files over 50 lines are still written successfully but may generate performance notes.
- For continuation after a partial write, the existing file state can be inspected before appending the remaining content.
FORMAT HANDLING (by extension):
- Text files: String content
- Excel (.xlsx, .xls, .xlsm): JSON 2D array or {"SheetName": [[...]]}
Example: '[["Name","Age"],["Alice",30]]'
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | rewrite | |
| path | Yes | ||
| origin | No | ||
| content | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=true, and openWorldHint=false, so the mutation/overwrite risk is covered. The description adds genuinely useful context: performance notes for files over 50 lines, the allowed-directory constraint, path normalization behavior, and per-extension format rules. It never explicitly states that mode='rewrite' destroys prior contents, which is the one behavioral gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The header-based structure is scannable and the purpose is front-loaded, but it wastes space: the absolute-path advice is stated twice in near-identical sentences, and the trailing 'DC: ...' / 'use Desktop Commander to ...' marketing line adds nothing to tool selection.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no output schema, the description covers formats, chunking strategy, path resolution, and the sandboxing constraint, which is close to what an agent needs. It leaves return-value expectations and failure behavior unstated, but annotations already carry the destructive safety profile.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate and it only partly does. It explains mode well (rewrite vs append with chunk continuation), content format for text and Excel, and path semantics (absolute vs relative vs tilde, slash normalization) — but the 'origin' enum parameter is never mentioned anywhere, leaving one of four parameters undocumented in both schema and description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Write or append to file contents') and immediately routes away from siblings: PDF goes to write_pdf, existing DOCX editing goes to edit_block. An agent can distinguish this from read_file, edit_block, and write_pdf without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names alternatives with the condition that selects them (write_pdf for PDFs, edit_block for existing DOCX) and gives concrete guidance on chunked writes with mode='rewrite' followed by mode='append' and a 25-30 line chunk recommendation. It lacks any general when-not-to-use guidance (e.g. binary files, read-only directories), so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
write_pdfADestructive
Create a new PDF file or modify an existing one.
Dedicated PDF creation and modification tool.
OUTPUT FILES:
- Creating a PDF requires 'outputPath' with a new filename (e.g., "result_01.pdf", "analysis_2025_01.pdf", etc.).
MODES:
1. CREATE NEW PDF:
- Pass a markdown string as 'content'.
write_pdf(path="doc.pdf", content="# Title\n\nBody text...")
2. MODIFY EXISTING PDF:
- Pass array of operations as 'content'.
- Modifications preserve the original PDF and require a different filename in 'outputPath'.
- The result includes the original and output paths for reference.
write_pdf(path="doc.pdf", content=[
{ type: "delete", pageIndexes: [0, 2] },
{ type: "insert", pageIndex: 1, markdown: "# New Page" }
])
OPERATIONS:
- delete: Remove pages by 0-based index.
{ type: "delete", pageIndexes: [0, 1, 5] }
- insert: Add pages at a specific 0-based index.
{ type: "insert", pageIndex: 0, markdown: "..." }
{ type: "insert", pageIndex: 5, sourcePdfPath: "/path/to/source.pdf" }
PAGE BREAKS:
To force a page break, use this HTML element:
<div style="page-break-before: always;"></div>
Example:
"# Page 1\n\n<div style=\"page-break-before: always;\"></div>\n\n# Page 2"
ADVANCED STYLING:
HTML/CSS and inline SVG are supported for:
- Text styling: colors, sizes, alignment, highlights
- Boxes: borders, backgrounds, padding, rounded corners
- SVG graphics: charts, diagrams, icons, shapes
- Images: <img src="/absolute/path/image.jpg" width="300" /> or 
Supports standard markdown features including headers, lists, code blocks, tables, and basic formatting.
Only works within allowed directories.
Absolute paths are the most reliable because they do not depend on the current working directory. Paths are automatically normalized regardless of slash direction. Relative paths depend on the current working directory, and tilde paths (~/...) may not resolve in every context. Absolute paths are generally the most reliable.
This command can be referenced as "DC: ..." or "use Desktop Commander to ..." in your instructions.| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| content | Yes | ||
| options | No | ||
| outputPath | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, readOnlyHint=false, openWorldHint=false. The description adds meaningful context beyond them: modifications preserve the original PDF and require a distinct output filename, the result returns both original and output paths, and access is restricted to allowed directories. This is solid behavioral disclosure, though it doesn't clarify overwrite behavior at outputPath.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The sectioning (MODES, OPERATIONS, PAGE BREAKS, ADVANCED STYLING) is well organized and front-loaded. However it is bloated: the final paragraph restates 'Absolute paths are the most reliable' twice, and the trailing 'DC: ...' boilerplate adds no invocation value. Wasteful repetition holds it to a 3.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema and a nested anyOf parameter, the description supplies the essential operational detail: mode selection, both content shapes, operation syntax, page-break mechanism, and file path requirements. Only the unexplained 'options' parameter and overwrite semantics leave minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, and it largely does: 'content' is fully explained (markdown string for create, operations array for modify), 'path' vs 'outputPath' roles are spelled out, and the insert/delete operation shapes are documented with examples. The 'options' and 'pdfOptions' parameters remain entirely unexplained, keeping this from a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource ('Create a new PDF file or modify an existing one') and reinforces it with 'Dedicated PDF creation and modification tool.' This is clearly distinguished from generic file tools in concept, but it never explicitly names or contrasts with the sibling write_file, so it earns a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly separates the two modes (CREATE NEW vs MODIFY EXISTING) and gives the condition selecting each, plus concrete invocation examples. What's missing is any explicit when-not guidance or reference to alternative tools (e.g., write_file for non-PDF output), so it stops short of the 5 level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.3.0- Changed
get_more_search_results3 fields changed- added
Input schema / properties / length / minimumAdded value: +1 - changed
Input schema / properties / length / typePrevious value: -"number"New value: +"integer" - changed
Input schema / properties / offset / typePrevious value: -"number"New value: +"integer"
- Removed
get_prompts - Changed
start_search6 fields changed- added
Input schema / properties / contextLines / minimumAdded value: +0 - changed
Input schema / properties / contextLines / typePrevious value: -"number"New value: +"integer" - added
Input schema / properties / maxResults / minimumAdded value: +0 - changed
Input schema / properties / maxResults / typePrevious value: -"number"New value: +"integer" - added
Input schema / properties / timeout_ms / minimumAdded value: +0 - changed
Input schema / properties / timeout_ms / typePrevious value: -"number"New value: +"integer"
3 tool updates
v0.2.44- Changed
get_config1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
- Changed
start_process1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
- Changed
start_search1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
4 tool updates
v0.2.43- Changed
edit_block1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
- Changed
list_directory1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
- Changed
read_file1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
- Changed
write_file1 field changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +}
16 tool updates
v0.2.17- Changed
edit_block4 fields changed- added
Input schema / properties / contentAdded value: +{} - added
Input schema / properties / optionsAdded value: +{ + "additionalProperties": {}, + "type": "object" +} - added
Input schema / properties / rangeAdded value: +{ + "type": "string" +} - changed
Input schema / requiredPrevious value: -[ - "file_path", - "old_string", - "new_string" -]New value: +[ + "file_path" +]
- Added
get_more_search_results - Added
get_prompts - Added
get_recent_tool_calls - Changed
interact_with_process1 field changed- added
Input schema / properties / verbose_timingAdded value: +{ + "type": "boolean" +}
- Changed
list_directory1 field changed- added
Input schema / properties / depthAdded value: +{ + "default": 2, + "type": "number" +}
- Added
list_searches - Changed
read_file3 fields changed- added
Input schema / properties / optionsAdded value: +{ + "additionalProperties": {}, + "type": "object" +} - added
Input schema / properties / rangeAdded value: +{ + "type": "string" +} - added
Input schema / properties / sheetAdded value: +{ + "type": "string" +}
- Changed
read_process_output3 fields changed- added
Input schema / properties / lengthAdded value: +{ + "type": "number" +} - added
Input schema / properties / offsetAdded value: +{ + "type": "number" +} - added
Input schema / properties / verbose_timingAdded value: +{ + "type": "boolean" +}
- Removed
search_code - Removed
search_files - Changed
set_config_value3 fields changed- added
Input schema / properties / originAdded value: +{ + "enum": [ + "ui", + "llm" + ], + "type": "string" +} - added
Input schema / properties / value / anyOfAdded value: +[ + { + "type": "string" + }, + { + "type": "number" + }, + { + "type": "boolean" + }, + { + "items": { + "type": "string" + }, + "type": "array" + }, + { + "type": "null" + } +] - changed
Input schema / requiredPrevious value: -[ - "key" -]New value: +[ + "key", + "value" +]
- Changed
start_process1 field changed- added
Input schema / properties / verbose_timingAdded value: +{ + "type": "boolean" +}
- Added
start_search - Added
stop_search - Added
write_pdf
21 tool updates
v1.0.0- First observed
create_directory - First observed
edit_block - First observed
force_terminate - First observed
get_config - First observed
get_file_info - First observed
get_usage_stats - First observed
give_feedback_to_desktop_commander - First observed
interact_with_process - First observed
kill_process - First observed
list_directory - First observed
list_processes - First observed
list_sessions - First observed
move_file - First observed
read_file - First observed
read_multiple_files - First observed
read_process_output - First observed
search_code - First observed
search_files - First observed
set_config_value - First observed
start_process - First observed
write_file
TDQS
Scored across 25 tools
Most tools target a distinct resource+action (read_file, write_file, list_directory, start_process, etc.) and are easy to tell apart. The main overlap is between force_terminate (ends terminal sessions from start_process) and kill_process (kills any PID), plus list_sessions vs list_processes; descriptions clarify but an agent could still hesitate.
Nearly all tools follow a verb_noun snake_case pattern (read_file, create_directory, get_config, list_searches, stop_search). Minor deviations like force_terminate (no noun), edit_block (verb+noun but semantically a find/replace), and the unusually long give_feedback_to_desktop_commander break the pattern slightly.
At 25 tools this is heavy for a filesystem/process toolset; it covers files, processes, searches, config, stats and feedback. The surface is broad and each area is justified, but the count sits at the upper edge where it starts to feel sprawling for agents to navigate.
File reading/writing/editing/moving, directory listing/creation, searches, process lifecycle, and config are all well covered. However there is no dedicated delete-file tool (deletion requires a shell command) and no explicit copy operation, which are noticeable gaps for a 'desktop commander' filesystem.
Maintenance
Related MCP Connectors
Connect ChatGPT and Claude to your Mac, Windows or Linux with secure MCP remote access.
Use your Mac, Windows or Linux computer from ChatGPT, Claude or Codex: files, commands, documents.
Work on your own computers from Claude or ChatGPT: run commands, edit and search files.
Shared memory MCP server for Claude Code, Codex, Gemini CLI and Cursor. Cited, editable.
Related MCP Servers
- AlicenseAqualityDmaintenanceAllows Claude to execute terminal commands on your computer and perform file system operations including surgical code editing with diff-based replacements.19705,497 npm7MIT
- AlicenseAqualityDmaintenanceA server that lets Claude desktop app execute terminal commands on your computer and edit files through Model Context Protocol, featuring command execution, process management, and advanced file operations.19705,497 npm6MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to interact with B\&R Automation Studio projects by building code, running ARsim simulators, and reading or writing OPC UA variables. It facilitates industrial automation development and real-time variable integration through natural language commands.17MIT
- AlicenseAqualityDmaintenanceGive Claude Desktop terminal, filesystem, and background-job access on your local Linux machine. Zero-dependency MCP extension, MIT-licensed.85MIT
Appeared in Searches
- MCP server for file system access (read, write, execute) on Windows for Claude Desktop
- File Editing Tools and Services
- Testing Local AI Agents in LMStudio for Computer Use and Code Execution Tasks
- AI-powered IDEs for project analysis and development
- Official Google MCP server for transferring Markdown files to Google Sheets