Git

Columns (type/nullable/default), primary key, foreign keys, and indexes for a table.

Replace a UNIQUE occurrence of oldText with newText. Use dryRun to preview the unified diff.

Replace lines [startLine,endLine] (1-based, inclusive) with newContent. Pass expectedHash (from a prior read) to guard against stale edits. Supports dryRun.

Permanently delete all trashed items. Supports dryRun.

Run one write statement (INSERT/UPDATE/DELETE/DDL). Requires DB_WRITABLE.

Run multiple statements in a single transaction (rolls back on error). Requires DB_WRITABLE.

Query plan for a SELECT (the server prepends EXPLAIN; no query is executed).

Render a saved request as a curl command (secrets masked).

Compute a checksum of a file (sha256 default).

Find duplicate files under a directory (grouped by size then sha256).

Find files/dirs by glob pattern within the sandbox. Excludes node_modules/.git by default.

Shortest wiki-link chain between two notes (BFS). Reports if none exists.

Find all notes that link to the given note via [[wiki-link]] syntax.

Return an environment's variables.

Read a file (decoded) or list a directory in a repo, at an optional ref.

An issue's details plus its first comments.

Notes within N hops of a note over the (undirected) wiki-link graph, depth/limit capped.

Return just the heading tree of a note — grasp a big note in a few tokens.

A PR's details (diff stats, merged state, body).

Repository metadata (stars, language, default branch, license).

Return a saved request definition.

Switch to a branch or commit (updates the working tree).

Clone a remote repo (HTTPS) into a directory inside GIT_ROOTS.

Create a commit from the staged changes. Author falls back to git config if name/email omitted.

Create a new branch (optionally check it out).

Unified diff. No refs → working tree vs HEAD; one ref → that ref vs working tree; two refs → refA vs refB. Optional single-file filter.

Fetch from a remote (HTTPS).

Commits that touched a specific file (follows the path).

Commit history (newest first). Optional ref, limit, and file path filter.

Fetch + fast-forward the current branch (HTTPS). Errors if a merge is required.

Push commits to a remote (HTTPS). Requires GIT_TOKEN for private repos.

A commit's metadata + the files it changed (vs its first parent).

Stage a file (git add).

Working-tree status: staged, unstaged, and untracked files + current branch.

Unstage a file (reset its index entry to HEAD).

Authenticate via GitHub OAuth device flow. First call returns a code + URL to open; run it again after authorizing to finish. (Or set GITHUB_TOKEN to skip.)

Clear the cached GitHub token.

Aggregate graph health: note/link/tag counts, top hubs, orphans, broken-link count.

Parse a curl command into a request definition; saves it if collection+name are given.

List the entries in a .zip archive without extracting.

Local branches in the repo.

List saved collections.

Configured database connections (name + type). No credentials are returned.

List a directory's immediate children with type + size, sorted, paginated.

List environments.

Indexes on a table (name, columns, uniqueness).

List a repo's issues (excludes PRs).

List notes (newest first) with pagination and an optional tag filter. Returns name, title, size, tags, and whether more results remain.

Your unread GitHub notifications.

List a repo's pull requests.

Configured remotes (name + URL).

List saved requests (optionally within one collection).

List the sandbox root directories this server may access.

Schemas available in a connection (SQLite returns 'main').

Tables and views in a schema.

Tags in the repo.

List available note templates (from the templates directory).

Aggregate `- [ ]` checkbox todos across all notes. Open items only unless includeDone.

List soft-deleted items available to restore.

Move or rename a file/directory. No-clobber unless overwrite. Supports dryRun.

Rename or move a note and rewrite every [[wiki-link]] pointing at it across the vault.

Run a read-only SELECT (only SELECT/WITH/VALUES). Use positional params. Results are row/cell-capped.

Your remaining GitHub API requests and reset time.

Read a text file. Optionally a head/tail (N lines) or a 1-based line window (offset/limit).

Contents of a file at a given ref/commit (default HEAD).

Read an image/audio/binary file as base64 (returned as an image/audio block when possible).

Read several text files at once. Failures are reported inline and don't abort the batch.

Read a note by name. Optionally read just one heading's `section`, or a character window via `offset`/`limit` (sets a truncated flag when cut).

Rank other notes by shared wiki-links and shared tags with the given note.

Foreign-key relationships in a schema (from table.column → to table.column).

Rename a tag across the whole vault — rewrites frontmatter tags and inline #hashtags.

Make an ad-hoc HTTP request to an allowlisted host. Supports ${var} (from an environment) and ${secret.name} (from HTTP_SECRET_*).

Restore a soft-deleted item by its trash id (see list_trash).

Execute a saved request (with ${var}/${secret} resolution + optional overrides).

Return up to `limit` rows from a table (SELECT * … LIMIT).

Persist a request definition into a collection.

Search code across GitHub (e.g. 'addEventListener repo:owner/name').

Search file contents by substring or regex, with optional context lines. Skips binaries.

Search issues and pull requests (GitHub search syntax).

Search commit messages for a substring.

Ranked full-text search. Supports `fuzzy`, `prefix`, and a `field` filter (title/tag/body, or 'path' to match the note name). Returns ranked snippets.

Search GitHub repositories (GitHub search syntax).

Search notes by meaning using local embeddings (all-MiniLM-L6-v2, runs offline after a one-time model download). Finds related notes even with no shared keywords. `hybrid` fuses this with keyword search for best results.

Create or replace an environment's variables (non-secret; secrets come from HTTP_SECRET_*).

File/directory metadata (type, size, timestamps, mode). Does not follow a final symlink.

Render a recursive directory tree (depth-capped; does not follow symlinks).

Find notes that mention this note's title as plain text but don't yet link to it with [[wiki-link]] syntax — candidates for linking.

Extract a .zip into a directory (zip-slip protected). Supports dryRun + overwrite.

Show the authenticated GitHub user (and how the token was obtained).

Create or overwrite a file (atomic). Refuses to clobber unless overwrite:true. Supports dryRun.

Create a .zip archive from one or more source paths. Supports dryRun.