"How to run local command-line commands" matching MCP tools:

• setup_local_cryptoA

  seekrit — secrets for agentsA

  Get the exact commands for running the local crypto plane (the `@seekrit/mcp` npm server, the `@seekrit/cli` CLI, seekrit-run, seekrit-proxy), including a copy-paste .mcp.json that reuses this session's credential. Takes no arguments and returns prose plus config. Call this the moment you need to SET or READ a secret value — no tool on this server will ever return one. Use local_tool_for instead when you want the single command for one named operation.

  ConnectorNo auth

• works_verify_public_repositoryA

  WORKS Public VerifierA

  Use only after works_public_eligibility returns eligible. Download that immutable public GitHub snapshot, run the selected pinned static contract without executing repository commands, and return a signed receipt. Return the report field verbatim and stop.

  ConnectorNo auth

• manage_accountA

  mcp-serverA

  Returns instructions for creating a DPF account, verifying its email, resending the verification code, or resetting a forgotten password — it never performs these itself and never asks for a password. A password typed into this chat would sit in the conversation transcript, so every action instead returns the DPF website's own form, or a curl command that reads the password from a shell variable the user sets themselves in their own terminal. Hand the command to the user to run — do not run it yourself even if you have shell access, since composing the export line would require seeing the password. action "register": requires email, firstName, lastName, and termsAccepted: true (only after the user has explicitly agreed to the DPF Terms of Service and Privacy Policy in this conversation). action "verify": confirm the 6-digit code DPF emailed after registration (requires otp). action "resend": re-send that code if it never arrived. action "forgot-password": request a password-reset code (requires email). action "reset-password": submit that code and set a new password (requires otp).

  ConnectorOAuth

• validate_pythonA

  CodeCraftA

  Validates a Python automation script that runs OUTSIDE the game, on three axes: Python syntax (using the real interpreter), Minecraft commands embedded in the script (against the official command index), and the shape of the /connect WebSocket message envelope. For behavior pack scripts use validate_script instead — Python does not run inside a pack. The embedded command check is the most valuable one: a command written from memory can look syntactically fine and still do nothing in the game. Only strings starting with / are treated as commands. If syntax could not be checked, syntaxChecked is false in the result; ok:true alone does not mean the syntax is valid.

  ConnectorNo auth

• commands_manageA

  9botA

  Reads and manages custom or system commands triggered by explicit user text. Use automations_configure for continuous reactions without a command and workflows_design for multi-step processes. Create, update, toggle, reorder, credential, and delete operations change persisted state; test_api also calls an external endpoint. After an uncertain write, read the command by identifier or trigger before retrying. For a preview, set input.preview=true; preview never applies the mutation. When confirmation is required, repeat the same operation and parameters with the returned input.confirmation_id.

  Connector

  Destructive

  OAuth

• safe_preflight_checkA

  AgentWorldB

  [PAID $0.01 USDC per call — optional third-party check] Preflight a proposed command or tool call through HumanMirror Safe Preflight (humanmirror.fr, x402-verified seller) before executing it. Returns the independent risk verdict (risk level, findings, required guards) from their circuit engine. Use for genuinely risky external tool calls where a second opinion matters. Benign commands settle $0.01 USDC on Base and return the verdict; commands they judge over-limit are blocked and refunded (no charge). This is an OPTIONAL external check — AgentWorld's own spend-authority, solvency and circuit-breaker layers remain primary and free.

  ConnectorNo auth

• create_upload_urlA

  TrezaA

  A one-time link to upload a local file into the media library, for a client that can run a command (Claude Code, Codex, Cursor): PUT the file to uploadUrl with the returned Content-Type (the result includes the curl command), then call import_media with url set to the returned mediaUrl. The link expires in 15 minutes and signs one content type. If you cannot run a command, do not call this: ask the person to drop the file into their Treza library in the web app and find it with list_assets. Needs the pipelines:write scope. Spends no credits.

  ConnectorAPI key

• safe_preflight_checkA

  AgentWorld — Live AI Agent EconomyB

  [PAID $0.01 USDC per call — optional third-party check] Preflight a proposed command or tool call through HumanMirror Safe Preflight (humanmirror.fr, x402-verified seller) before executing it. Returns the independent risk verdict (risk level, findings, required guards) from their circuit engine. Use for genuinely risky external tool calls where a second opinion matters. Benign commands settle $0.01 USDC on Base and return the verdict; commands they judge over-limit are blocked and refunded (no charge). This is an OPTIONAL external check — AgentWorld's own spend-authority, solvency and circuit-breaker layers remain primary and free.

  ConnectorNo auth

• run_instance_commandA

  Cycle MCPA

  Run a shell command inside a running container instance on Cycle, over the instance's SSH gateway, and return the shell output. Use this for one-time setup that must run inside a container — e.g. initializing a MongoDB replica set with 'mongosh --eval "rs.initiate({...})"'. The instance must be RUNNING (start the container first). If the container has multiple instances, pass 'instance' (id or hostname); otherwise the sole instance is used. Containers reach each other by hostname over the environment's private network, so commands can reference sibling containers (e.g. mongo-1:27017). This executes an arbitrary command inside your container — it is powerful and mutating. Always call with preview:true first: it echoes back the exact command and target without making any connection, so the user can confirm it is what they intend (nothing is validated — the command may still fail when run). Confirm with the user, then call again without preview. Never run a command without explicit confirmation. Short-lived SSH credentials are generated for the run and expired immediately after. The command runs in an interactive shell; make destructive commands idempotent where possible.

  Connector

  Destructive

  API key

• verify_integrationA

  Alter OnboardingA

  Return a copy-pasteable recipe to VERIFY an integration works: `first-call` (code↔design, an audit row, correct attribution) or `per-user-isolation` (a multi-user/broker server runs two users under different credentials and rejects cross-user access). Guidance only — you run the commands.

  ConnectorNo auth

• list_required_credentialsA

  opencode-workbenchA

  List the credentials the profile references, which the target already provides, and how to acquire each missing one. Value-blind: it reads only whether each env var is set — no values, no network, no writes — via one read-only probe. Parameter semantics: `target` selects the machine (`local` or SSH) and its `home` sets the returned `template` path and the env file the presence check reads; there are no other parameters. Returns `present`/`missing` var-name arrays plus one guidance record per credential (`var`, `purpose`, `url`, `method`, `command`). Use it after plan_clone to see what would degrade; act on one credential with run_auth_flow.

  ConnectorNo auth

• run_auth_flowA

  opencode-workbenchA

  Return the acquisition plan for one credential on a target: the provider URL, the exact non-interactive command when one exists (e.g. `opencode auth login`, `opencode mcp auth vercel`, `gh auth login`), and whether it is already present. Read-only and value-blind: it emits guidance and re-checks presence with one read-only probe; it does not run the commands or handle secret values. Parameter semantics: `var` must be an env var name returned by list_required_credentials (unknown names error); `target` selects the machine and its `home` is where the value should be written. Use it for a single credential; it does not replace that listing.

  ConnectorNo auth

• commandA

  AutoviewA

  Build an Autoview alert command string from structured order fields (symbol, side, quantity, type, price, trigger) without placing an order — the output is the value TradingView's create_alert `message` field should carry. Also builds cancel/close/flat management commands via `action` (see entry's description). Dry-run by default: a bare call returns a preview command (appends d=1); set live:true to build a command that trades for real once TradingView fires the alert. Prefer the `alert` tool if you also need the destination webhook, expiration, and resolution in one call. Requires your Autoview account token — live:true requires a live-scoped token. exchange is optional: pass one of OANDAPRACTICE, KRAKEN, CRYPTO, CRYPTODEMO, BYBITTESTNET, BYBITSPOTTESTNET, TRADOVATESIM for full order-type/bracket validation, or any other exchange id configured on Autoview (see the `catalog` tool) to build a generic command for it with that extra validation skipped; omit exchange entirely to build a generic command routed by whichever exchange(s) the destination hook is linked to.

  ConnectorNo auth

• list_required_credentialsA

  opencode-workbenchA

  List the credentials the profile references, which the target already provides, and how to acquire each missing one. Value-blind: it reads only whether each env var is set — no values, no network, no writes — via one read-only probe. Parameter semantics: `target` selects the machine (`local` or SSH) and its `home` sets the returned `template` path and the env file the presence check reads; there are no other parameters. Returns `present`/`missing` var-name arrays plus one guidance record per credential (`var`, `purpose`, `url`, `method`, `command`). Use it after plan_clone to see what would degrade; act on one credential with run_auth_flow.

  ConnectorNo auth

• run_auth_flowA

  opencode-workbenchA

  Return the acquisition plan for one credential on a target: the provider URL, the exact non-interactive command when one exists (e.g. `opencode auth login`, `opencode mcp auth vercel`, `gh auth login`), and whether it is already present. Read-only and value-blind: it emits guidance and re-checks presence with one read-only probe; it does not run the commands or handle secret values. Parameter semantics: `var` must be an env var name returned by list_required_credentials (unknown names error); `target` selects the machine and its `home` is where the value should be written. Use it for a single credential; it does not replace that listing.

  ConnectorNo auth

• run_admin_commandA

  VeriTeknikA

  Run up to 10 administrative shell commands, in order, on a VPS owned by this company - install packages, edit and restart services, clone and build an application, write files, adjust the firewall. Stops at the first non-zero exit and reports which command failed. The server's own policy decides what runs: its BIOS rules, the shared safety classifier and its autonomy level. Commands in the dangerous class (mass deletion, disk formatting, user removal, reinstall) are refused as PANEL_ONLY; a server whose autonomy level requires a TOTP for moderate commands answers PRECONDITION_REQUIRED and nothing runs, because a connected app cannot ask for that code: the customer unlocks it in the hub on the server Morpheus tab, or raises the autonomy level there, and only then is a retry worth making. Each line is ONE program: no unquoted ; && || | and no command substitution - put the next step in the next line. Quotes and redirection are allowed; write a system file with sudo -n tee /etc/path <<< "content" (a shell redirect into /etc is the dangerous class and refused). Prefix root work with sudo -n. Every run is logged with this connection's id and the company is notified. Use run_command for reads; use this only for changes the user asked for.

  Connector

  Destructive

  OAuth

• vuln_get_templateA

  website-searchA

  Get Lenny Zeltser's one-page Vulnerability Advisory Brief template. Covers Bottom Line, Quick Facts, Are We Affected?, Defensive Actions (with What/Why/When/Who), What We Don't Know, and More Information. This server never requests your vulnerability notes and instructs your AI to keep them local—the brief template and guidelines flow to your AI for local analysis.

  ConnectorNo auth

• search_api_docsA

  Soracom KnowledgeA

  Search SORACOM API documentation, CLI references, and SAM permissions. Use for exact API endpoints, soracom-cli commands, or SAM permission strings. Use search_soracom_docs for service guides, console how-tos, pricing, or IoT recipes. Use get_document on `#/schema/<Name>` links in results to read full API schema fields.

  ConnectorNo auth

• scaffold_clientA

  @imqueueA

  READ-ONLY: returns text and writes nothing to disk, and does NOT run the command it shows you. Explains how to generate and use the fully-typed client for an @imqueue service: @imqueue generates the real client from a running service via `imq client generate`, so this returns that exact command plus an illustrative usage snippet. The generated file exports a single namespace holding the client class, so the import shape is not the obvious one — take it from `namespace` rather than guessing. Use generate_client (local install only) if you want the command actually run.

  ConnectorNo auth

• oruk_get_startedA

  oruk SpeechA

  Quickstart for the oruk Speech API and this MCP server: how to get an API key, per-client MCP configuration snippets, SDK install commands, and an optional routing rule the user can add to their agent instructions. No API key required. Use this when setting oruk up for the first time or when the user asks how oruk works.

  ConnectorNo auth

• convert_to_terraformA

  Control PlaneA

  Convert a Control Plane resource manifest (YAML or JSON) into the equivalent Terraform (HCL). Dry-run validated against the API first (nothing is created); a validation failure returns the error instead of HCL. Pass `gvc` when the kind is GVC-scoped (workload, identity, volumeset). Set `generateImports` to also return ready-to-run `terraform import` commands. To convert an EXISTING resource instead of a manifest, use export_terraform.

  ConnectorOAuth