Returns the active local workspace through the Unfour command bus.

Lists all local workspaces through the Unfour command bus, marking which one is active.

Lists safe connection summaries for the active workspace through the Unfour command bus.

Lists workspace-global variables through the command bus. Secret variables and sensitive keys are masked before returning to the MCP client.

Replaces the complete workspace-global variable set through the command bus. Omitted existing variables are soft-deleted. For items that include an existing id, omitted optional fields keep their current values. Returned values are masked when secret or sensitive.

Creates one workspace-global variable through the command bus. Returned values are masked when secret or sensitive.

Updates one workspace-global variable through the command bus. Omitted optional fields keep their current values. Returned values are masked when secret or sensitive.

Soft-deletes one workspace-global variable. Guarded policy requires the content-bound confirmation handshake.

Lists API request collections for the active workspace through the Unfour command bus.

Lists saved API requests for the active workspace through the Unfour command bus. Sensitive URL parameters are redacted.

Returns a saved API request with sensitive headers, query parameters, body fields, and URL parameters redacted through the Unfour command bus.

Sends either a saved API request by requestId or one ad-hoc request described by method/url/headers/query/body through the Unfour command bus. Use it to reproduce API failures during agent troubleshooting. Dev allows all HTTP methods; test allows sends but marks mutating methods as write risk; prod only allows GET/HEAD/OPTIONS. Non-2xx HTTP responses return structured status/body data rather than MCP tool failure. Sensitive headers, cookies, URL tokens, and JSON body fields are masked.

Creates a saved API request record in the workspace through the Unfour command bus. This mutates local Unfour metadata only; it does not send traffic. Dev/test allow it by default, while prod blocks by workspace policy. Returns the new request id and a redacted summary.

Updates a saved API request record through the Unfour command bus. Omitted fields keep their existing values. This mutates local metadata only; dev/test allow it, prod blocks or requires future explicit policy. Returns the updated redacted request summary.

Soft-deletes a saved API request through the Unfour command bus. Dev/test require a content-bound confirmation_text before deletion; prod blocks by policy. Returns the remaining request count and confirms softDelete=true.

Creates an API collection in local Unfour metadata through the command bus. Dev/test allow it; prod blocks by workspace policy. Returns the new collection id and summary.

Renames an API collection in local Unfour metadata through the command bus. Dev/test allow it; prod blocks by workspace policy.

Soft-deletes an API collection and cascades soft-deletion to its folders and requests through the command bus. Dev/test require a content-bound confirmation_text; prod blocks by policy.

Lists recent API request/response history for the active workspace through the Unfour command bus. Sensitive URL parameters are masked. Useful for diagnosing when a request started failing.

Returns a single API history entry with request and response detail through the Unfour command bus. Sensitive headers, query parameters, and body fields are masked.

Creates an empty API environment in local Unfour metadata through the command bus. Dev/test allow it; prod blocks by workspace policy.

Updates an API environment name and variables through the command bus. Sensitive variable values are masked in the result. Dev/test allow it; prod blocks by workspace policy.

Soft-deletes an API environment through the command bus. Guarded policy requires a content-bound confirmation_text; read-only policy blocks deletion.

Creates or updates one API environment variable by environmentId and key through the command bus. Empty values are allowed. Omitted isSecret/description preserve existing metadata, and returned secrets are masked.

Deletes one API environment variable by environmentId and key through the command bus. Guarded policy requires confirmation; read-only policy blocks deletion.

Lists API environments and their variables for the active workspace through the Unfour command bus. Sensitive variable values are masked; non-sensitive values (e.g. base URLs) are shown so requests using variables can be understood.

Creates a saved database connection through the Unfour command bus. Optional password input is stored in the OS credential store and only a credential reference is persisted; the tool never returns the password or credential reference.

Lists saved database connections for the active workspace through the Unfour command bus. Returns safe summaries without passwords, tokens, or connection strings.

Lists tables and views for a saved database connection through the Unfour command bus. Requires a saved connectionId; does not accept ad-hoc connection strings.

Describes a table's structure (columns, types, nullability, primary keys) for a saved database connection through the Unfour command bus. Does not read table data.

Executes a read-only SQL query against a saved database connection through the Unfour command bus. Only SELECT, WITH, SHOW, DESCRIBE, DESC, and EXPLAIN statements are allowed. Write operations, DDL, and multi-statement queries are rejected. Optional catalog, schema, and timeoutMs match unfour.db.execute and unfour.db.explain.

Executes one SQL statement against a saved database connection through the Unfour command bus. Use for INSERT/UPDATE/DELETE/DDL when an agent needs to repair dev/test data. Dev allows non-high-risk writes by default; test allows small writes but high-risk SQL requires confirm; prod blocks writes. DELETE/UPDATE without WHERE, DROP, TRUNCATE, ALTER, and multi-row destructive statements require a second call with the returned confirmation_text. Returns affectedRows, statementType, durationMs, and engine safety metadata.

Runs EXPLAIN for a read query against a saved database connection through the Unfour command bus. Use before optimizing slow SELECT/WITH queries. This is read-only in dev/test/prod; it returns structured columns/rows, durationMs, and truncation metadata.

Tests connectivity to a saved database connection through the Unfour command bus. Returns whether the connection succeeded and the server version when available.

Returns command-bus and storage readiness for diagnostics through the Unfour command bus.

Lists recent workspace activity events (workspace, connection, API, database, and SSH changes) through the Unfour command bus, newest first. Sensitive fields in event details are masked. Useful for diagnosing what changed before a failure started.

Creates a saved SSH connection through the Unfour command bus. Optional secret input is stored in the OS credential store by the SSH engine and only a credential reference is persisted; the tool never returns the secret or credential reference.

Lists saved SSH connections for a workspace through the Unfour command bus. Returns connection id, name, host, port, username, and environment; never returns passwords, private keys, passphrases, or credential references.

Runs a single read-only diagnostic command on a saved SSH connection through the Unfour command bus and returns captured stdout/stderr. Safe in dev/test/prod for allowlisted diagnostics. For broader command execution use unfour.ssh.exec, which applies environment policy and high-risk confirmation.

Executes one non-interactive SSH command on a saved connection. Use for dev/test repair loops after diagnostics identify a fix. Dev allows ordinary commands; test allows safe diagnostics and guarded commands; prod only allows read-only diagnostic commands. High-risk commands such as rm -rf, restart/shutdown, kill, docker/kubectl delete, and curl-pipe-shell require confirm with the returned confirmation_text.

Reads a bounded remote file slice or tail through SSH. Useful for logs and config inspection. Dev/test/prod allow ordinary reads; output is capped and line-redacted by the SSH engine. Sensitive paths may still be blocked by connection or OS permissions.

Writes or appends a remote file through SSH. Dev allows ordinary project paths; test and high-risk paths require confirmation; prod is blocked by policy. The returned result contains only path/mode/byte counts and command status, never file content.

Applies a small search/replace patch to a remote file through SSH and returns a diff summary without file content. Dev allows single-match project-file patches; test, system paths, or multi-match replacements require confirmation; prod is blocked by policy.

Lists a bounded remote directory through SSH and returns structured entry summaries when the remote find utility is available. Safe in dev/test/prod.

Lists structured SSH command history for the current MCP workspace. Returns connection, command, executedAt, and cwd/exitCode/durationMs when recorded. Results are workspace-scoped and never include terminal buffers or full session logs. Sensitive commands are excluded or replaced with [redacted command]. Use this to inspect recent host activity, then draft a reusable SSH Task for the user to confirm. Do not call unfour.ssh.save_task unless the user explicitly asks to save the draft.

Lists saved SSH task summaries for a workspace.

Returns one SSH task with steps and local connection binding. Sensitive fields inside step configuration are masked.

Creates or updates a saved SSH task through the command bus. On update, omitted description and defaultConnectionId keep their current values; pass null for defaultConnectionId to clear it. Step types and configuration are validated by the SSH engine.

Duplicates a saved SSH task and its steps through the command bus.

Reorders all active SSH tasks in a workspace. taskIds must contain the exact active task set.

Soft-deletes a saved SSH task. Guarded policy requires content-bound confirmation.

Starts a saved SSH task on its selected saved connection. Production/read-only policy blocks execution; guarded policy requires content-bound confirmation because a task may execute commands or transfer files.

Cancels an active SSH task run through the command bus.

Lists saved run summaries for one SSH task without exposing local log paths.

Reads a capped SSH task run log. The SSH engine redacts configured secret inputs and the MCP response omits the local log path.

Deletes saved SSH task run records and local log files for one task or the workspace. Guarded policy requires content-bound confirmation.