vmware-storage
This server provides VMware vSphere storage management via 11 MCP tools, covering datastores, iSCSI, and vSAN.
Datastore Management
List all datastores with capacity, usage percentage, and accessibility status
Browse datastore files/directories with optional glob pattern filtering (e.g.,
*.iso,*.ova)Scan datastores for deployable images (OVA, ISO, OVF, VMDK)
List locally cached images, filterable by type or datastore
iSCSI Configuration
Enable the software iSCSI adapter on an ESXi host
Get iSCSI adapter status and configured send targets
Add or remove iSCSI send targets (with automatic storage rescan)
Manually rescan all HBAs and VMFS volumes
vSAN Monitoring
Get vSAN cluster health summary and disk group details
Get vSAN capacity overview (total/used/free)
Notes
Most operations are read-only; write operations include input validation and audit logging
Fully supports vSphere 7.0 and 8.0; vSphere 6.7 supported with limited vSAN functionality
Does not support creating, deleting, or modifying virtual machines
Provides tools for managing VMware vSphere storage infrastructure, allowing users to list and browse datastores, manage iSCSI adapters and targets, and monitor vSAN health and capacity across vCenter and ESXi hosts.
VMware Storage
Author: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com This is a community-driven project by a VMware engineer, not an official VMware product. For official VMware developer tools see developer.broadcom.com.
VMware vSphere storage management: datastores, iSCSI, vSAN — 12 MCP tools, domain-focused and lightweight.
Split from vmware-aiops for lighter context and local model compatibility.
Companion Skills
Skill | Scope | Tools | Install |
vmware-aiops ⭐ entry point | VM lifecycle, deployment, guest ops, clusters | 49 |
|
Read-only monitoring, alarms, events, VM info | 27 |
| |
Tanzu Namespaces, TKC cluster lifecycle | 20 |
| |
NSX networking: segments, gateways, NAT, IPAM | 33 |
| |
DFW microsegmentation, security groups, Traceflow | 21 |
| |
Aria Ops metrics, alerts, capacity planning | 28 |
|
Related MCP server: vmware-nsx
Quick Install
# Via PyPI
uv tool install vmware-storage
# Or pip
pip install vmware-storageOffline / Air-Gapped Install (from source)
This project uses the modern PEP 517 build system (hatchling), so there is no
setup.py by design — that is expected, not a missing file. If you cloned the
source and hit ERROR: File "setup.py" or "setup.cfg" not found ... editable mode currently requires a setuptools-based build, your pip is older than 21.3 and
cannot do an editable (-e) install with a non-setuptools backend. Editable
mode is a developer convenience, not needed to run the tool — do one of:
# From the source tree — a normal (non-editable) install builds a wheel:
pip install . # NOT pip install -e .
# ...or upgrade pip first, and editable works too:
pip install --upgrade pip && pip install -e .For a truly air-gapped host, build the wheels on a connected machine and copy them over — the target then needs no network:
# On a connected machine, collect this package + its dependencies as wheels:
pip wheel . -w dist # → dist/*.whl (or: uv build, for just this package)
# Copy dist/ to the air-gapped host, then install offline:
pip install --no-index --find-links dist vmware-storageConfiguration
mkdir -p ~/.vmware-storage
cp config.example.yaml ~/.vmware-storage/config.yaml
# Edit with your vCenter/ESXi credentials
echo "VMWARE_MY_VCENTER_PASSWORD=your_password" > ~/.vmware-storage/.env
chmod 600 ~/.vmware-storage/.env
# Verify
vmware-storage doctorMCP Tools (12)
Category | Tools | Type |
Datastore |
| Read |
iSCSI |
| Read/Write |
vSAN |
| Read |
Auto-Remediation Patterns (PoC)
The patterns/ directory hosts L5 auto-remediation candidate patterns from the Enterprise Harness Engineering framework. The first PoC pattern, patterns/iscsi-target-stale-rescan.yaml, describes an iSCSI HBA rescan as a low-risk, reversible, repeatable operation. The pattern schema is documented here only — runtime enforcement is not yet wired up, so this is a reference design, not production auto-remediation.
Common Workflows
Set Up iSCSI Storage on a Host
Enable iSCSI adapter:
vmware-storage iscsi enable esxi-01Add target:
vmware-storage iscsi add-target esxi-01 10.0.0.100Verify:
vmware-storage iscsi status esxi-01
The add-target command automatically rescans storage. Use --dry-run to preview any write command first.
Find Deployable Images Across Datastores
List all datastores:
vmware-storage datastore listScan for images:
vmware-storage datastore scan-images datastore01Browse with a pattern:
vmware-storage datastore browse datastore01 --pattern "*.iso"
vSAN Health Assessment
Check health:
vmware-storage vsan health Cluster-ProdCheck capacity:
vmware-storage vsan capacity Cluster-ProdIf issues found, investigate with
vmware-monitorfor alarms and events
CLI
# Datastore
vmware-storage datastore list
vmware-storage datastore browse datastore01
vmware-storage datastore scan-images datastore01
# iSCSI
vmware-storage iscsi status esxi-01
vmware-storage iscsi enable esxi-01
vmware-storage iscsi add-target esxi-01 192.168.1.100
vmware-storage iscsi remove-target esxi-01 192.168.1.100
vmware-storage iscsi rescan esxi-01
# vSAN
vmware-storage vsan health Cluster-Prod
vmware-storage vsan capacity Cluster-Prod
# Diagnostics
vmware-storage doctorMCP Server
After uv tool install vmware-storage, start the MCP server with one command (v1.5.15+):
# Recommended — single command, no network re-resolve
vmware-storage mcp
# With a custom config path
VMWARE_STORAGE_CONFIG=/path/to/config.yaml vmware-storage mcp
# Or via Docker
docker compose up -dAgent Configuration
Add to your AI agent's MCP config:
{
"mcpServers": {
"vmware-storage": {
"command": "vmware-storage",
"args": ["mcp"],
"env": {
"VMWARE_STORAGE_CONFIG": "~/.vmware-storage/config.yaml"
}
}
}
}# Run without installing (requires PyPI access each launch)
uvx --from vmware-storage vmware-storage mcp
# Legacy entry point (still works, kept for backward compatibility)
vmware-storage-mcpBehind a corporate TLS proxy? uvx may fail with
invalid peer certificate: UnknownIssuer. Use the recommendedvmware-storage mcpform above (no network needed), or setUV_NATIVE_TLS=true.
Why a Separate Skill?
vmware-aiops has 49 MCP tools — too heavy for local LLMs (7B-14B). By splitting storage into its own skill:
11 tools — fits comfortably in small model context windows
Domain-focused — storage admins get only what they need
Composable — use alongside vmware-monitor or vmware-aiops as needed
Version Compatibility
Python: 3.10+ (since v1.5.27 — previously 3.11+). Tested on 3.10 / 3.11 / 3.12.
vSphere / VCF | Support | Notes |
VCF 9.1 / vSphere 9.1 | Full | Released 2026-05-12. pyVmomi+vSAN SDK |
VCF 9.0 / vSphere 9.0 | Full | pyVmomi 8.0.3+ with bundled vSAN SDK connects to vSphere 9. |
8.0 | Full | vSAN SDK built into pyVmomi 8.0.3+ |
7.0 | Full | All storage APIs work |
6.7 | Compatible | iSCSI + datastore features work; vSAN limited |
Official Broadcom References
SDKs: https://developer.broadcom.com/sdks — VCF Python SDK, vSAN Management SDK (bundled in pyVmomi)
REST APIs: https://developer.broadcom.com/xapis — vSAN Management API, VCF API
CLI Tools: https://developer.broadcom.com/tools — PowerCLI 9.1, ESXCLI
Safety
Feature | Description |
Read-heavy | 8/12 tools are read-only |
Input validation | IP addresses and ports validated before iSCSI operations |
Audit logging | All operations logged to |
No VM operations | Cannot create, delete, or modify VMs |
Credential safety | Passwords only from environment variables, never config files |
Troubleshooting
Problem | Cause & Fix |
iSCSI enable fails with "already enabled" | Not an error — adapter is already active. Run |
"Datastore not found" when browsing | Datastore names are case-sensitive. Run |
|
|
Rescan doesn't discover new LUNs | Wait 15-30 seconds after adding targets, then rescan again. Verify target IP is reachable from ESXi. |
"Password not found" error | Variable names follow |
Connection timeout to vCenter | Use |
"Datastore browse did not finish within Ns" | The datastore is very large or busy. Narrow the search with a sub-path and a specific pattern (e.g. |
License
Available Tools
12 toolsbrowse_datastoreARead-onlyIdempotent
[READ] Browse files in a datastore directory.
Use this for arbitrary files or a glob; prefer scan_datastore_images for deployable images. ds_name comes from list_all_datastores.
Returns the list envelope: 'items' holds one row per file, and 'returned'/'total'/'truncated' state whether the listing is complete. All matches are returned, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Subdirectory path (empty for root). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| ds_name | Yes | Datastore name. | |
| pattern | No | Glob pattern to filter files (e.g. "*.ova", "*.iso"). | * |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive safety, so the description adds value by explaining the return envelope and stating that all matches are returned so truncated is always false. It does not contradict any annotation, and adds meaningful behavioral context beyond structured metadata.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short, purposeful sentences with no wasted words. The READ tag and primary use are front-loaded, followed by routing guidance, parameter sourcing, and return semantics. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a straightforward read-only listing tool, the description covers purpose, when to use it, where required parameters come from, and the return envelope. Even without an output schema, it gives the agent enough information to invoke the tool and interpret the response correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides 100% parameter descriptions, so the baseline is 3. The description adds value by linking 'glob' to the pattern parameter and sourcing ds_name from list_all_datastores, which helps an agent understand relationships between parameters and sibling tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a clear verb and resource: 'Browse files in a datastore directory.' It also distinguishes itself from scan_datastore_images by explicitly routing deployable images to that sibling. An agent can tell exactly what this tool is for and what it is not for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use this tool ('arbitrary files or a glob') and names the preferred alternative for deployable images. It also tells the agent where ds_name comes from ('list_all_datastores'), removing ambiguity about a required parameter.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_all_datastoresARead-onlyIdempotent
[READ] List all datastores with capacity, usage percentage, and accessibility.
Use this first for the ds_name that browse_datastore and scan_datastore_images require.
Returns the list envelope: 'items' holds one row per datastore, and 'returned'/'total'/'truncated' state whether the listing is complete. Enumerated in one pass, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description adds valuable behavioral context by explaining the list envelope and guaranteeing that truncated is always false because enumeration happens in one pass. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded with the purposeful [READ] tag and the core listing statement. Four sentences cover purpose, usage, response envelope, and completeness behavior; slightly more verbose than strictly needed but every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple listing tool with one optional parameter and no output schema, the description covers purpose, usage dependency, return shape, and listing completeness. Minor missing detail includes capacity/usage field units, but annotations and schema handle the rest.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one optional parameter, target, and the input schema already describes it as an optional vCenter/ESXi target from config. With 100% schema coverage, the description does not need to add parameter detail, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'List all datastores with capacity, usage percentage, and accessibility.' It also names the dependent siblings, clarifying the tool's role as the entry point for datastore listing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says to use this tool first to obtain the ds_name required by browse_datastore and scan_datastore_images, which is clear usage context. It does not discuss when not to use it or compare with all sibling alternatives, but the dependency is concrete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_cached_imagesARead-onlyIdempotent
[READ] List deployable images (OVA/OVF/ISO/VMDK) from the local cache registry — instant, no vCenter connection or datastore I/O.
Reads ~/.vmware-storage/image_registry.json, populated by prior datastore scans; results may be stale or empty if no scan has run. For a live listing use scan_datastore_images instead. Returns the list envelope: 'items' holds {datastore, name, ds_path, size_mb, type, modified} and is empty if nothing matches, while 'returned'/'total'/'truncated' state whether the listing is complete. The whole registry is filtered in memory, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| datastore | No | Filter by exact datastore name. Omit for all datastores. | |
| image_type | No | Filter by file extension without the dot, e.g. "ova", "iso", "ovf", "vmdk" (case-insensitive). Omit for all types. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses that the tool reads ~/.vmware-storage/image_registry.json, performs no vCenter/datastore I/O, filters in memory, and always reports truncated as false. These details go well beyond the annotations, which already mark the operation as read-only, idempotent, and non-destructive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and well-organized: purpose, source/staleness, live alternative, and return envelope. Every sentence carries non-redundant information needed for correct tool selection and invocation, with key facts front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only, zero-required-param tool with no output schema, the description fully explains the data source, staleness behavior, filter semantics, and exact return envelope fields. An agent can accurately predict output for omitted filters and handle empty or incomplete results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3 because both parameters already have descriptions. The tool description adds that the entire registry is filtered in memory and that truncation is impossible, which clarifies how the optional filters affect results.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (list) and resource (deployable images) and scopes it to the local cache registry, clearly distinguishing it from live datastore operations. The [READ] prefix and explicit image types make the tool's purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly names scan_datastore_images as the alternative when a live listing is needed, and warns that cached results may be stale or empty if no prior scan has run. This gives an agent concrete selection criteria beyond the tool name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scan_datastore_imagesARead-onlyIdempotent
[READ] Scan a datastore for deployable images (OVA, ISO, OVF, VMDK).
Use this for a live scan of one datastore; prefer list_cached_images for a cached answer. ds_name comes from list_all_datastores.
Returns the list envelope: 'items' holds one row per image, and 'returned'/'total'/'truncated' state whether the listing is complete. All patterns are browsed, so truncated is always false.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Subdirectory path (empty for root). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| ds_name | Yes | Datastore name. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds return-structure detail beyond annotations: 'items' holds one row per image and 'returned'/'total'/'truncated' state completeness. It also discloses a non-obvious behavior: 'All patterns are browsed, so truncated is always false.' This complements readOnlyHint/openWorldHint/idempotentHint without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four compact sentences front-load the action, then give usage routing, parameter provenance, and response shape. No filler or repetition of schema/annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only scan tool with no output schema, the description covers what an agent needs: purpose, when to choose it vs list_cached_images, where to get ds_name, and what the response envelope looks like. The schema covers parameter details, and annotations cover safety semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already covers all three parameters at 100% (path, target, ds_name). The description adds one meaningful relationship—'ds_name comes from list_all_datastores'—which helps the agent populate the required parameter correctly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action ('Scan a datastore for deployable images') with concrete artifact types (OVA, ISO, OVF, VMDK). The '[READ]' prefix and 'live scan of one datastore' frame exactly what it does, and the explicit contrast with list_cached_images distinguishes it from a sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Directly instructs when to use: 'Use this for a live scan of one datastore; prefer list_cached_images for a cached answer.' It also chains the required parameter to another tool ('ds_name comes from list_all_datastores'), giving the agent a clear call path.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
storage_iscsi_add_targetA
[WRITE] Add an iSCSI send (dynamic discovery) target to an ESXi host's software iSCSI adapter, then automatically rescan all HBAs and VMFS volumes to discover new LUNs.
Prerequisite: software iSCSI must be enabled first (storage_iscsi_enable); otherwise returns an error with guidance. Idempotent: a duplicate address:port returns "already configured" without changes. No separate storage_rescan call is needed afterwards. Audit-logged to ~/.vmware/audit.db. Returns a confirmation string.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | iSCSI TCP port, 1-65535 (default 3260). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| address | Yes | iSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error). | |
| dry_run | No | If true, return a preview of the change without executing it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description provides rich behavioral context such as [WRITE], automatic rescanning, audit logging, and return behavior. However, it explicitly claims 'Idempotent' while the annotations set idempotentHint to false, which is a direct contradiction and forces a low score.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and well-structured: core action first, then prerequisite, idempotency, rescan implication, audit trail, and return type. Every sentence earns its place and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write operation with five parameters and a complete schema, the description covers prerequisites, side effects, idempotency, audit logging, and return behavior, so an agent can call it correctly. The contradictory idempotency metadata introduces avoidable uncertainty and prevents a perfect completeness score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and each parameter already has a meaningful schema description including defaults and validation intent. The description adds the address:port duplicate semantics but does not substantially increase parameter-level understanding beyond the schema, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Add') and names the exact resource: an iSCSI send (dynamic discovery) target on an ESXi host's software iSCSI adapter. It also clearly distinguishes itself from sibling tools like storage_iscsi_enable, storage_iscsi_remove_target, and storage_rescan.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The prerequisite storage_iscsi_enable is explicitly named, including the failure behavior if it is not met. It also tells the agent that no separate storage_rescan is needed, giving clear routing guidance relative to siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
storage_iscsi_enableA
[WRITE] Enable the software iSCSI adapter (vmhba) on an ESXi host.
Required prerequisite before storage_iscsi_add_target. Idempotent: if the adapter is already enabled, returns its HBA device and IQN without making changes. Modifies host storage configuration but is non-disruptive (no reboot, no impact on existing datastores). Audit-logged to ~/.vmware/audit.db. Check current state first with storage_iscsi_status. Returns a confirmation string; errors include remediation hints.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| dry_run | No | If true, return a preview of the change without executing it. | |
| host_name | Yes | ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare idempotentHint=false, but the description claims 'Idempotent: if the adapter is already enabled... without making changes.' This directly contradicts the annotations, which is a serious inconsistency. Per the rubric, a description contradicting annotations must receive a score of 1.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with [WRITE] and the action verb, and nearly every sentence carries useful operational information: prerequisites, state-checking, effects, audit logging, and error behavior. It is reasonably sized, though the misleading idempotency assertion slightly undermines the trustworthiness of an otherwise tight definition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers prerequisites, side effects, non-disruptiveness, audit trail, the recommended status check, and return/error behavior; an output schema exists, so exact return details are not required. However, the contradictory idempotency statement means the behavioral contract is not fully reliable, so it is not a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema description coverage is 100%, so the schema already documents host_name, target, and dry_run. The description adds no parameter-specific meaning beyond what the schema provides, so the baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Enable'), a specific resource ('software iSCSI adapter (vmhba)'), and a clear host context ('on an ESXi host'). The [WRITE] prefix also immediately classifies the operation and distinguishes it from sibling inspect/status tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says this is a 'Required prerequisite before storage_iscsi_add_target' and tells the agent to 'Check current state first with storage_iscsi_status.' This gives clear sequencing and names the relevant sibling tools, so an agent knows when to use this tool versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
storage_iscsi_remove_targetADestructive
[WRITE] Remove an iSCSI send target from an ESXi host's software iSCSI adapter, then rescan all HBAs and VMFS volumes.
Destructive: LUNs served only by this target become inaccessible after the rescan — first verify the target exists (storage_iscsi_status) and that no datastores depend on it (list_all_datastores). Errors if the address:port pair is not configured or software iSCSI is disabled. Reversible only by re-adding via storage_iscsi_add_target. Audit-logged to ~/.vmware/audit.db. Returns a confirmation string.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | Configured iSCSI TCP port, 1-65535 (default 3260). | |
| target | No | Optional vCenter/ESXi target name from config. | |
| address | Yes | Configured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly. | |
| dry_run | No | If true, return a preview of the change without executing it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses significant behavioral details: the operation triggers an HBA/VMFS rescan, LUNs served only by this target become inaccessible, errors occur for unconfigured pairs or disabled iSCSI, the operation is reversible only by re-adding, and it is audit-logged. This far exceeds what destructiveHint/readOnlyHint already convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-organized: action first, then consequences, verification steps, error conditions, reversibility, audit trail, and return type. Every sentence adds useful information, and no fluff is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive mutation tool, the description covers side effects, preconditions, failure modes, recovery, logging, and return behavior. Combined with the schema and annotations, an agent has everything needed to decide whether and how to invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description does not substantially add parameter-level meaning beyond what the schema already provides, though it does hint that address and port together form the identity of the target.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: remove an iSCSI send target from an ESXi host's software iSCSI adapter. It also distinguishes itself from the sibling storage_iscsi_add_target by framing the action as removal and explicitly naming re-adding via that sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit preconditions: verify the target exists with storage_iscsi_status and check datastore dependencies with list_all_datastores. It also states error conditions and the recovery path via storage_iscsi_add_target, giving clear guidance on when and how to use the tool safely.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
storage_iscsi_statusARead-onlyIdempotent
[READ] Get the software iSCSI adapter state and configured send targets for an ESXi host.
Returns {host, enabled, hba_device, iqn, send_targets: [{address, port}]}; when the adapter is disabled, enabled=false with null device/IQN and an empty target list. Use this before storage_iscsi_enable / storage_iscsi_add_target / storage_iscsi_remove_target to check prerequisites, and afterwards to verify the change took effect.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| host_name | Yes | ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the exact return shape and the important edge case for a disabled adapter: 'enabled=false with null device/IQN and an empty target list.' This adds behavioral context beyond the readOnlyHint/idempotentHint annotations, which already establish this as a safe, read-only operation. It does not mention potential errors or auth requirements, but the schema covers host lookup failure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the '[READ]' marker, resource, and return shape appear first, followed only by the disabled-adapter edge case and concrete usage guidance. Every sentence adds functional value with no redundant filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema present, the description compensates by documenting the return tuple and the disabled-adapter behavior. It also explains the tool's role in the broader workflow with sibling tools, and the schema covers the required parameter semantics. The definition is complete for an agent to select and call this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters thoroughly, including the required host_name format and optional target behavior. The tool description itself does not add parameter-level detail, which is acceptable given the schema richness; this lands at the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with the explicit verb 'Get' and names the exact resource: 'software iSCSI adapter state and configured send targets for an ESXi host.' This clearly distinguishes the tool from its sibling mutation tools like storage_iscsi_enable and storage_iscsi_add_target, as well as unrelated datastore/vSAN tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool: 'Use this before storage_iscsi_enable / storage_iscsi_add_target / storage_iscsi_remove_target to check prerequisites, and afterwards to verify the change took effect.' It names the relevant alternatives and gives concrete usage timing, leaving no ambiguity about when this status check is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
storage_rescanA
[WRITE] Rescan all HBAs and VMFS volumes on an ESXi host to discover newly presented LUNs and datastores.
Use this when a storage array presents new LUNs, or after out-of-band SAN changes. Not needed after storage_iscsi_add_target / storage_iscsi_remove_target — those rescan automatically. Non-destructive: only triggers device and VMFS discovery (deletes nothing), but it is I/O-visible on the host and may take a minute or two with many paths. Audit-logged to ~/.vmware/audit.db. Returns a confirmation string; errors include remediation hints.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| dry_run | No | If true, return a preview of the change without executing it. | |
| host_name | Yes | ESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=false, destructiveHint=false, and idempotentHint=false, and the description adds meaningful context beyond those flags: it is non-destructive yet I/O-visible, may take minutes with many paths, is audit-logged, returns a confirmation string, and errors include remediation hints. This fully discloses expected side effects and operational impact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: the purpose, use case, exclusions, side effects, timing, logging, and return behavior are packed into a compact paragraph. It is front-loaded with the action and keeps all guidance relevant without filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex, I/O-visible operation, the description fully covers invocation context, exclusions, side effects, timing, logging, return value, and error behavior. The presence of an output schema further reduces the need to explain return structure, and nothing important is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and all parameters (host_name, target, dry_run) already carry clear descriptions. The tool description adds no additional parameter-level semantics beyond what the schema provides, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific, action-oriented statement: 'Rescan all HBAs and VMFS volumes on an ESXi host to discover newly presented LUNs and datastores.' This clearly identifies the resource and scope, and the [WRITE] prefix plus the use-case context distinguish it from sibling storage tools like storage_iscsi_add_target and list_all_datastores.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use the tool ('when a storage array presents new LUNs, or after out-of-band SAN changes') and when not to use it, naming the alternatives storage_iscsi_add_target / storage_iscsi_remove_target and explaining they rescan automatically. This gives an agent clear routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vsan_capacityARead-onlyIdempotent
[READ] Get space usage of a cluster's vSAN datastore for capacity planning.
Returns {cluster_name, vsan_enabled, datastore_name, accessible, total_gb, used_gb, free_gb, usage_pct}. When the vSAN datastore is inaccessible (accessible=false) the four figures are null with a message, not 0 — vCenter answers 0 for a datastore it cannot reach, and 0 GB used reads as a healthy empty datastore. accessible=null means the summary did not say. If vSAN is not enabled on the cluster, returns vsan_enabled=false with an explanatory message rather than an error; errors only if the cluster name is not found. Use vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage. No side effects.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter. Errors if the cluster is not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, but the description adds rich behavioral nuance: inaccessible datastores return null figures instead of 0, accessible=null means the summary was silent, and vSAN-disabled clusters produce an explanatory message. It also explicitly states 'No side effects'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: purpose, return shape, edge-case semantics, error behavior, sibling routing, and side-effect confirmation. It is front-loaded with the core purpose and keeps related details grouped logically.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description correctly takes on the burden of documenting return fields and edge cases. It covers the expected behavior, error conditions, null semantics, and alternative tools, making it complete for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents both parameters, including the exact-match requirement for cluster_name. The description adds valuable behavioral context: it clarifies that cluster_name errors only if not found, while vSAN-disabled clusters return a message instead, and it reinforces the meaning of edge-case return values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description begins with a clear verb and resource: 'Get space usage of a cluster's vSAN datastore for capacity planning.' It names the specific output fields and explicitly distinguishes itself from siblings by recommending vsan_health for disk-group details and list_all_datastores for non-vSAN datastores.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool and when to use alternatives: 'Use vsan_health for disk-group layout and host details; use list_all_datastores for non-vSAN (VMFS/NFS) datastore usage.' It also clarifies the error boundary (cluster name not found) and that vSAN-disabled clusters return a message rather than an error.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vsan_efficiencyARead-onlyIdempotent
[READ] Get vSAN data-efficiency (deduplication + compression) status for a cluster.
Returns {cluster_name, vsan_enabled, dedup_enabled, compression_enabled}. Reads it via the vSAN Management SDK (VsanVcClusterConfigSystem), not base pyVmomi. When vSAN reports no data-efficiency config (space efficiency off, or an OSA cluster without it), dedup_enabled/compression_enabled come back null with a message rather than a fabricated false. Errors only if the cluster name is not found. Use vsan_capacity for space usage and vsan_health for disk-group layout. No side effects.
Note: vSAN Global Deduplication and vSAN-to-vSAN replication are NOT exposed here — neither has a verified SDK object (global dedup has no distinct field; v2v replication lives in the separate vSAN Data Protection plane). Use the vCenter/vSAN UI for those.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint/idempotentHint annotations, the description discloses that it calls the vSAN Management SDK rather than base pyVmomi, that missing config returns null with a message rather than a fabricated false, and that errors only occur for an unknown cluster name. It also clearly notes the tool's limitations regarding global dedup and v2v replication, which the annotations do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than average but well-structured, with the core purpose and return values front-loaded before implementation details and exclusions. A small amount of redundancy exists, such as echoing 'no side effects' despite annotations already declaring readOnlyHint and destructiveHint=false.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only status tool with no output schema, the description fully covers return fields, error behavior, SDK dependency, a common null-result case, and exclusions. An agent has enough context to invoke it correctly and avoid misusing it for capacity or health queries.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters already have meaningful descriptions, including case-sensitivity and config-target semantics. The tool description adds behavioral context like error conditions and return fields, but does not materially add parameter-level meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with '[READ] Get vSAN data-efficiency (deduplication + compression) status for a cluster,' which names a specific verb, resource, and scope. It also distinguishes itself from vsan_capacity and vsan_health by naming those siblings for other purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use vsan_capacity for space usage and vsan_health for disk-group layout,' giving clear routing to alternatives. It also states when not to use it: global dedup and v2v replication are not exposed here and require the vCenter/vSAN UI.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vsan_healthARead-onlyIdempotent
[READ] Get vSAN overall health, per-check-group health, and per-host disk-group layout for a cluster.
Returns {cluster_name, vsan_enabled, overall_health, overall_health_description, health_queried, health_not_queried_reason, health_checked_at, test_groups: [{group_id, group_name, group_health}], host_count, hosts_read, hosts_not_read: [{host, reason}], disk_groups_complete, disk_groups: [{host, cache_disk, cache_size_gb, capacity_disks}]}. overall_health is what vSAN reports — green / yellow / red, and sometimes "unknown", which is vSAN's own answer. When the health service could not be asked at all, overall_health is null and health_queried is false with the reason: a null is "not measured", never a measurement. health_checked_at is the age of vCenter's cached summary (the same one Skyline Health shows); this tool reads the cache rather than triggering a full health run. Check disk_groups_complete before treating disk_groups as the cluster's inventory: vCenter cannot read a disconnected or notResponding host, and an empty disk_groups on such a cluster does NOT mean it has none — the unread hosts are named in hosts_not_read and in the message. If vSAN is not enabled, returns vsan_enabled=false with a message rather than an error. Use vsan_capacity for space usage instead. No side effects.
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional vCenter/ESXi target name from config. | |
| cluster_name | Yes | Cluster name exactly as shown in vCenter. Errors if the cluster is not found. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint/idempotentHint annotations, the description explains that this reads vCenter's cached summary rather than triggering a full health run, and that null overall_health means 'not measured' rather than a measurement. It also discloses the incomplete disk_groups risk with disconnected hosts, which is important non-obvious behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Although the description is long, it is dense and structured: purpose first, then return shape, then edge-case semantics, then alternative tool routing. Every sentence contributes necessary context, especially given there is no output schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers return fields, null semantics, cache behavior, partial data due to unreadable hosts, and the non-error path when vSAN is disabled. For a health-inspection tool with no output schema, this is fully sufficient for an agent to invoke and interpret results correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the input schema already documents cluster_name and target well. The description does not add much parameter-level detail, but the baseline of 3 is appropriate since the schema carries the parameter semantics fully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear '[READ]' marker and names the specific resource: vSAN health per check-group and per-host disk-group layout for a cluster. It distinguishes itself from siblings by explicitly steering space-usage queries to vsan_capacity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says to use vsan_capacity for space usage instead, which gives the agent a clear routing rule. It also clarifies how the tool behaves when vSAN is not enabled, so the agent knows it won't get an error in that case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
12 tool updates
v1.8.15- Changed
browse_datastore5 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / ds_name / descriptionAdded value: +"Datastore name." - added
Input schema / properties / path / descriptionAdded value: +"Subdirectory path (empty for root)." - added
Input schema / properties / pattern / descriptionAdded value: +"Glob pattern to filter files (e.g. \"*.ova\", \"*.iso\")." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
list_all_datastores2 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
list_cached_images3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / datastore / descriptionAdded value: +"Filter by exact datastore name. Omit for all datastores." - added
Input schema / properties / image_type / descriptionAdded value: +"Filter by file extension without the dot, e.g. \"ova\", \"iso\", \"ovf\", \"vmdk\" (case-insensitive). Omit for all types."
- Changed
scan_datastore_images4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / ds_name / descriptionAdded value: +"Datastore name." - added
Input schema / properties / path / descriptionAdded value: +"Subdirectory path (empty for root)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_add_target6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / address / descriptionAdded value: +"iSCSI portal IP address (IPv4/IPv6 literal; hostnames are rejected with a validation error)." - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory." - added
Input schema / properties / port / descriptionAdded value: +"iSCSI TCP port, 1-65535 (default 3260)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_enable4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_remove_target6 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / address / descriptionAdded value: +"Configured iSCSI portal IP (IPv4/IPv6 literal; hostnames rejected). Must match the existing entry exactly." - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory." - added
Input schema / properties / port / descriptionAdded value: +"Configured iSCSI TCP port, 1-65535 (default 3260)." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_iscsi_status3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name exactly as shown in vCenter inventory (FQDN or IP). Errors if not found. No host listing here — get names from vmware-monitor list_esxi_hosts." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
storage_rescan4 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / dry_run / descriptionAdded value: +"If true, return a preview of the change without executing it." - added
Input schema / properties / host_name / descriptionAdded value: +"ESXi host name as shown in vCenter inventory (FQDN or IP). Errors if not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_capacity3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_efficiency3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter (case-sensitive). Errors if the cluster is not found — vmware-storage has no cluster-listing tool; get names from vmware-monitor list_all_clusters." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
- Changed
vsan_health3 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / cluster_name / descriptionAdded value: +"Cluster name exactly as shown in vCenter. Errors if the cluster is not found." - added
Input schema / properties / target / descriptionAdded value: +"Optional vCenter/ESXi target name from config."
1 tool update
v1.8.10- Added
vsan_efficiency
4 tool updates
v1.8.9- Changed
browse_datastore1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "browse_datastoreOutput", - "type": "object" -}New value: +null
- Changed
list_all_datastores1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "list_all_datastoresOutput", - "type": "object" -}New value: +null
- Changed
list_cached_images1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "list_cached_imagesOutput", - "type": "object" -}New value: +null
- Changed
scan_datastore_images1 field changed- changed
Output schema / (root)Previous value: -{ - "properties": { - "result": { - "items": { - "additionalProperties": true, - "type": "object" - }, - "title": "Result", - "type": "array" - } - }, - "required": [ - "result" - ], - "title": "scan_datastore_imagesOutput", - "type": "object" -}New value: +null
4 tool updates
v1.6.0- Changed
storage_iscsi_add_target1 field changed- added
Input schema / properties / dry_runAdded value: +{ + "default": false, + "title": "Dry Run", + "type": "boolean" +}
- Changed
storage_iscsi_enable1 field changed- added
Input schema / properties / dry_runAdded value: +{ + "default": false, + "title": "Dry Run", + "type": "boolean" +}
- Changed
storage_iscsi_remove_target1 field changed- added
Input schema / properties / dry_runAdded value: +{ + "default": false, + "title": "Dry Run", + "type": "boolean" +}
- Changed
storage_rescan1 field changed- added
Input schema / properties / dry_runAdded value: +{ + "default": false, + "title": "Dry Run", + "type": "boolean" +}
11 tool updates
v1.3.2- First observed
browse_datastore - First observed
list_all_datastores - First observed
list_cached_images - First observed
scan_datastore_images - First observed
storage_iscsi_add_target - First observed
storage_iscsi_enable - First observed
storage_iscsi_remove_target - First observed
storage_iscsi_status - First observed
storage_rescan - First observed
vsan_capacity - First observed
vsan_health
TDQS
Each tool targets a distinct operation and resource: datastore listing, datastore browsing, live image scanning, cached image listing, iSCSI lifecycle operations, and vSAN read-only checks. Cross-references like 'prefer scan_datastore_images over browse_datastore' and 'prefer list_cached_images over scan_datastore_images' actively reduce ambiguity. No two tools appear to do the same thing.
Tool names follow a clear and consistent pattern: verbs like list, browse, scan, and enable paired with specific nouns, plus the well-formed storage_iscsi_* and vsan_* prefixes. The naming groups are internally coherent and readable. The few variations, such as storage_rescan, still fit the overall storage domain pattern.
Twelve tools is well-scoped for a VMware storage server covering datastore/image discovery, iSCSI configuration, and vSAN health reporting. Each tool serves a distinct workflow and earns its place. The count is substantial enough to feel complete without being bloated.
Core workflows are covered: datastore enumeration and browsing, live and cached image discovery, iSCSI enable/status/add/remove/rescan, and vSAN health/capacity/efficiency reads. Minor gaps exist, such as no iSCSI disable operation and no explicit cache invalidation for list_cached_images, but they are workable. The vSAN tools are intentionally read-only and clearly document what they do not expose.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
Let AI agents query data and act across all your business apps via MCP.
- mcpOAuthcom.gibsonai
GibsonAI MCP server: manage your databases with natural language
Egnyte's remote MCP server for secure AI access, search, upload and file management in your account.
Related MCP Servers
- AlicenseAqualityAmaintenanceAI-powered VMware vCenter/ESXi monitoring and operations. 20 MCP tools for inventory queries, health monitoring, VM lifecycle management, fast provisioning (Linked Clone, OVA, template deploy), snapshot management, and datastore browsing. Supports vSphere 6.5–8.0. Works with local models via Ollama/LM Studio.24470MIT
- AlicenseAqualityAmaintenanceAI-powered VMware NSX networking management. Configure segments, gateways, NAT, routing, and IPAM via natural language with 31 MCP tools.335MIT
- AlicenseAqualityAmaintenanceAI-powered VMware vSphere with Tanzu (VKS) management. Create and manage Supervisor Namespaces and TanzuKubernetesClusters with 20 MCP tools.235MIT
- AlicenseAqualityAmaintenanceAI-powered VMware Aria Operations monitoring and capacity planning. Query metrics, manage alerts, detect anomalies, and plan capacity with 18 MCP tools.332MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/vmware-skills/VMware-Storage'
If you have feedback or need assistance with the MCP directory API, please join our Discord server