"Allow WAR File Commands on Cisco OS" matching MCP tools:

• dietaai_foodsA

  Dieta.aiC

  Consulta o log de alimentos do usuário com os macros. Use date para um único dia (YYYY-MM-DD) OU start_date/end_date para um intervalo (máx 31 dias). Retorna os itens por refeição e os totais do dia (kcal, proteína, carbo, gordura, fibra, sódio, água).

  ConnectorNo auth

• gover_listar_relatoriosA

  Gover MCPC

  Lista os relatórios homologados do Gover (procedures com regra de negócio) que respondem a um tema, com chave, o que cada um entrega (colunas) e os filtros aceitos. Use ANTES de considerar a consulta dinâmica ao banco: quase toda pergunta gerencial (gastos, quantidade de solicitações, hospedagem, cancelamentos, orçamento, fuga de política, antecedência, SLA) tem relatório. A busca casa com nome, chave, RDL e procedure, sem diferenciar maiúsculas: "hospedagem", "orcament", "cancelad", "fuga". Por padrão mostra os que executam: os marcados "ok" e os marcados "sem-permissao" (marcação antiga do catálogo; o acesso ao banco foi ampliado e eles tendem a funcionar — execute normalmente). Só os marcados "erro" (objeto inválido no banco) ficam de fora e não devem ser executados. Relatórios "-detalhe" trazem linha por pessoa/solicitação (dado pessoal): prefira o resumo. Não toca no banco.

  ConnectorNo auth

• delete_sponsorA

  agendaforgeA

  Permanently delete a sponsor. Destructive and disabled by default; an organizer must allow direct destructive access and this tool. Depending on the organization's settings, this either executes immediately or files a proposal for approval; the response status field says which happened.

  Connector

  Destructive

  No auth

• get_storage_summaryA

  TillpadA

  Summarize storage for this account. Returns namespaces with key counts and file or vector inventory, narrowed to the key's namespace allow-list when one is set. Read only: no writes, no deletes, no quota spend, no email. Checks ACL inspect_storage. Use manage_kv action=list to page keys inside one namespace, and list_files view=files for file rows. Former name: inspect_storage.

  ConnectorAPI key

• check_premisesA

  RithmoA

  Stage 1 of the pre-action guard. Given the action you are about to take and the PINNED subject ids it relies on, returns allow/hold/deny per premise plus a short-lived lease for each cleared one. Takes subject ids, never a natural-language question — retrieval wording cannot change the verdict. Do the work, then call verify_premises with these leases IMMEDIATELY before acting. Fails closed: an unknown pin, an unreadable record or a premise that cannot be leased all return hold, never allow.

  ConnectorAPI key

• linux_auditA

  ZEN SecDBA

  Perform a Linux package vulnerability audit using SecDB. ## What this tool does Analyzes the installed packages of a Linux system-identified by OS and OS version-and returns vulnerability information plus a Markdown summary. The audit results are based exclusively on the package list provided by the user. ## When to use this tool Use this tool when the user wants to determine: - whether installed packages contain known vulnerabilities - whether a host, VM, container, or base image is affected by security advisories - which packages require patching or upgrading If the user does not know the valid values for `os` or `version`, first call the `linux_os` tool to retrieve the exact supported combinations. ## Inputs - **os**: Linux distribution identifier supported by SecDB (use `linux_os` to obtain allowed values). - **version**: OS version or codename corresponding to the selected distribution. - **packages**: list of installed packages, **one per line**, generated using the appropriate system command: ### For RPM-based distributions (RHEL, CentOS, Rocky, Alma, SUSE) rpm -qa --qf '%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\n' ### For DEB-based distributions (Ubuntu, Debian) dpkg-query -W -f='${Package} ${Version} ${Architecture}\n' ### For Alpine Linux apk list -I The raw output of these commands can be passed directly as the `packages` input (one package per line). ... python3 3.12.3-0ubuntu2.1 amd64 systemd 255.4-1ubuntu8.10 amd64 tmux 3.4-1ubuntu0.1 amd64 ... ## Outputs - **report**: structured objects describing the advisories affecting the audited packages. - **summary**: Markdown summary including total vulnerabilities, severity breakdown, and key findings. ## LLM usage guidelines - Never guess whether a package is vulnerable-always call this tool for Linux audits. - If `os` or `version` is unclear or missing, call `linux_os` and ask the user to choose a valid combination. - Normalize the package list to “one entry per line” if the user provides unstructured output. - The `summary` is already Markdown and can be shown directly. - Use `report` when deeper technical analysis is required.

  ConnectorNo auth

• import_scriptA

  LoadsterA

  Import an open-source load test (JMeter .jmx, k6 .js, or Locust .py) into an existing script, converting it to Loadster commands. An import may create script assets, datasets, and a scenario; replace=true also replaces the script's existing commands and variables. Returns action items to review. For OpenAPI/Swagger or Postman, read the spec yourself and build commands with create_script instead.

  Connector

  Destructive

  OAuth

• run_terminalA

  ReMCPA

  Use this when the task needs a shell command or an existing ReMCP terminal session: start, read, wait, interact, stop, or list sessions. Choose exactly one operation; parameters are validated against that operation’s closed schema. Starting or interacting with commands can change local or external state, and force termination can lose unsaved process work; reading, waiting, and listing do not mutate the session. Use manage_system for OS-wide process inventory or killing an arbitrary PID.

  Connector

  Destructive

  OAuth

• faction_propose_allyA

  SpaceMoltB

  Propose a mutual alliance with another faction (Requires `manage_diplomacy` permission. Cannot propose with factions you're at war with or already allied with. Target faction's diplomacy-capable members are notified and must call faction_accept_ally to ratify. Accepts faction ID or 4-character faction tag (e.g. NOVA).)

  ConnectorNo auth

• request_file_upload_urlA

  Formify — AI Assisted E-SigningA

  Stage an upload for a PDF that is attached to the conversation, for clients that can execute shell commands but cannot pass the file to a tool directly. Returns a presigned upload URL plus a ready-made curlCommand that streams the file to it. Only use this tool if you are able to run that command; if you cannot, skip it and call upload_file directly with `fileReference` (a file reference supplied by the host application), `url` (a PDF reachable over HTTPS) or `file` (base64) plus `fileName`. After calling this tool, run the returned curlCommand to upload the file. CRITICAL: wait for it to complete and return HTTP 200 before calling upload_file — the staged entry holds no bytes until then, and upload_file will fail. The upload URL expires in 10 minutes. Once the upload has succeeded, call upload_file with the returned uploadId. ONE AT A TIME: only one staged upload can be pending per user. Finish the current file (curl, then upload_file) before requesting the next — do not request several upload URLs up front, not even for files that will be merged. A request made while another upload is pending is refused with an error that repeats the pending uploadId and, while its file has not arrived yet, its curl command so you can finish it; that refusal is expected, not a server fault. If the curl command fails with a network, DNS, or 'host not in allowlist' error, the client's code-execution sandbox is blocking outbound requests to this server — do not retry the same command. Report what blocked it, then either fall back to upload_file with `file` (base64), or, if the client lets the user allow outbound domains for code execution (the setting lives in the client's code-execution or sandbox preferences), tell the user how to allow this server's domain there and retry once they have done so.

  ConnectorOAuth

• oryksa_set_allowed_domainsA

  ORYKSA AI EmployeesA

  Restricts the chat widget to the site's domains (subdomains included), so the widget token cannot be used on other sites. Send the production domain and any staging domain, e.g. ["example.com", "example.vercel.app"]. Send an empty list to allow any site (useful while developing on localhost).

  ConnectorOAuth

• catalog_find_alternativesA

  SKUit Network & Security CatalogA

  Find published alternatives to a product named by part number or family (for example "Cisco 9300X" or "C9300X-48HX"): one class up, the same class, and one class down, all in the same role, same vendor first. Each alternative states the single dimension it was compared on, so present it as "comparable on <dimension>", not as a drop-in replacement. An ambiguous name returns the candidate families to choose from. Answers carry catalog_url (the public catalog page) and build_bom_url (Open in SKUit to build a full bill of materials; the builder requires a SKUit account).

  ConnectorNo auth

• kyt_txA

  BlockchainAnalysisA

  Transaction KYT: screens BOTH counterparties of a transfer (from → to) against sanctions + entity + VASP + cluster, returning a combined risk level, a block/review/allow recommendation, and directional FROM:/TO: flags. Paid per call via x402 (USDC on Base).

  ConnectorNo auth

• list_firewall_rulesA

  BorealHostB

  List IP allow/deny firewall rules for a site. Rules are implemented as Nginx allow/deny directives per container. Requires: API key with read scope. Args: slug: Site identifier Returns: {"rules": [{"ip": "1.2.3.4", "action": "deny"}, {"ip": "10.0.0.0/8", "action": "allow"}]}

  ConnectorNo auth

• list_compute_imagesA

  BorealHostB

  List OS images available for on-demand compute instances. Requires: API key with read scope. Returns: {"images": [{"id": "UBUNTU_24_04_64BIT", "name": "Ubuntu 24.04 LTS (x86_64)", "family": "linux", "flavour": "ubuntu"}, ...]}

  ConnectorNo auth

• ingest_assetA

  clipkitA

  Fetch a remote media URL (image/video/audio) and HOST it on Clipkit, returning a stable asset_url to put in an element's `url`. Use this so the project's media survives — the original link may rot, be private, or block hotlinking. Anonymous projects allow up to 5 hosted assets / 100 MB total / 50 MB per file; when the limit is hit, tell the user to open the project (open_in_editor) and sign in to add more. Requires project_id.

  ConnectorNo auth

• create_upload_urlA

  mcpA

  Preferred way to host a file. Reserves a link and returns a short-lived upload_url on filetourl.org itself, safe for AI agent sandboxes that only allow egress to trusted domains, since the upload never has to leave filetourl.org. Send the raw file bytes yourself with a single HTTP PUT to that URL (do not read the file into this conversation, and do not base64-encode it). The public_url returned works as soon as the PUT succeeds. Needs a FileToUrl Developer API key.

  ConnectorNo auth

• get_upload_linkA

  AINSOFA

  Use this when the user says their video is ON THEIR COMPUTER rather than at a link — "I have a video on my desktop, find me music and score it". Returns upload_page — a link with a file picker — plus the video_url to score afterwards. GIVE THEM upload_page AS A LINK TO OPEN. Do not paste a terminal command at someone in a chat window — they have no terminal, and this is the step where we lose them. Wait for them to say it finished, then call score_my_video with the video_url this returned. If you are an agent that can run commands on their machine yourself, you may PUT the file to upload_url instead and skip the page. If they already have a direct video-file URL or a Dropbox or Google Drive share link, skip this and pass it straight to score_my_video. Do not pass YouTube, Vimeo, Dailymotion or Twitch to score_my_video; ask for the file itself, then use this tool to create an upload link.

  ConnectorNo auth

• get_upload_linkA

  AINSOFA

  Use this when the user says their video is ON THEIR COMPUTER rather than at a link — "I have a video on my desktop, find me music and score it". Returns upload_page — a link with a file picker — plus the video_url to score afterwards. GIVE THEM upload_page AS A LINK TO OPEN. Do not paste a terminal command at someone in a chat window — they have no terminal, and this is the step where we lose them. Wait for them to say it finished, then call score_my_video with the video_url this returned. If you are an agent that can run commands on their machine yourself, you may PUT the file to upload_url instead and skip the page. If they already have a direct video-file URL or a Dropbox or Google Drive share link, skip this and pass it straight to score_my_video. Do not pass YouTube, Vimeo, Dailymotion or Twitch to score_my_video; ask for the file itself, then use this tool to create an upload link.

  ConnectorNo auth

• faction_accept_peaceA

  SpaceMoltB

  Accept a peace proposal (Requires `manage_diplomacy` permission. Ends the war. Use faction_info to see pending peace proposals. Accepts faction ID or 4-character faction tag (e.g. NOVA).)

  ConnectorNo auth

• inspect_fileA

  Agent Utility MCPA

  Inspect a Base64-encoded file locally for deterministic structural and security risk signals without executing it, and return a policy-aware decision (allow, notice, confirm or block) under the applicable policy — permissive, balanced or strict, balanced by default.

  ConnectorNo auth