ellmos ControlCenter

MCP control plane: discovery of servers, tools and skills, profiles, audits, gated tool gateway.

Connector by ellmos-ai · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 1

Chalk Labs

Need help deploying ellmos ControlCenter?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/ellmos-ai-ellmos-controlcenter-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

MCP control plane: discovery of servers, tools and skills, profiles, audits, gated tool gateway.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools: 30 read · 3 write · 1 delete
Secrets: None asked for
Install scripts: None found
Runs as: Node.js package

Tools by what they do 34

Read from the source code; the running server may list different tools.

Read 30 · Look things up without changing anything.

controlcenter_actual_self_receipt
controlcenter_assign_tool_bundles
controlcenter_audit_profile
controlcenter_check_lock
controlcenter_context_pack
controlcenter_describe_mcp
controlcenter_describe_resource
controlcenter_describe_stack
controlcenter_evaluate_permission
controlcenter_find_capability
controlcenter_find_skill
controlcenter_get_language

Show 18 more tools

controlcenter_list_available_tools
controlcenter_list_bundles
controlcenter_list_decisions
controlcenter_list_governance
controlcenter_list_local_servers
controlcenter_list_locks
controlcenter_list_plugins
controlcenter_list_profiles
controlcenter_list_resources
controlcenter_list_skills
controlcenter_list_stacks
controlcenter_list_tools
controlcenter_resolve_profile
controlcenter_resolve_semantic_route
controlcenter_status
controlcenter_suggest_bundles
controlcenter_suggest_profile
controlcenter_tool_overview

Write 3 · Create, change, send or run things.

controlcenter_build_catalog
controlcenter_set_language
controlcenter_switch_profile

Delete 1 · Delete, drop, revoke or wipe things.

controlcenter_invoke

Network hosts it talks to 2

github.com · found in code
glama.ai · found in code

Files it touches

Your home directory (~)
Any path the agent passes to its tools

Tools (34)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

controlcenter_actual_self_receiptread-only
Description is built at runtime.
controlcenter_assign_tool_bundlesread-only
Description is built at runtime.
controlcenter_audit_profileread-only
Description is built at runtime.
controlcenter_build_catalog
Description is built at runtime.
controlcenter_check_lockCheck whether a specific path is lockedread-only
Answers whether one path may be modified, counting locks inherited from any parent directory — a LOCK.txt in a parent locks everything beneath it. Reports the effective lock with its type, scope and expiry: LOCK.user.* and LOCK.condition.* never expire on time. Read-only. Fails closed: if the path is unreadable, the configuration is missing or the check errors, the verdict is 'unknown' and safe-to-proceed is false — it never reports a path as free on a guess.
controlcenter_context_packread-only
Description is built at runtime.
controlcenter_describe_mcpread-only
Description is built at runtime.
controlcenter_describe_resourceDescribe one system or software rowread-only
Full row detail for one resource (a system or an installed software entry), addressed by its numeric inventory id (from controlcenter_list_resources). Read-only mirror, same register as controlcenter_list_resources -- see that tool's description for the authority note.
controlcenter_describe_stackread-only
Description is built at runtime.
controlcenter_evaluate_permissionEvaluate an action against the nearest permission registerread-only
Reports what a LOCK.permissions register allows an agent to do at a path, using the nearest register found in the path or any parent, with precedence deny > ask > allow > default. This is a report, not enforcement: it grants no authority and blocks nothing. If no register exists anywhere up the chain, the answer is 'unknown' rather than 'allow' — the absence of a rule is not a permission.
controlcenter_find_capabilityread-only
Description is built at runtime.
controlcenter_find_skillread-only
Description is built at runtime.
controlcenter_get_languageread-only
Description is built at runtime.
controlcenter_invokeInvoke a tool on a server this host has not loadedcan change or delete data
Runs one tool of a backend MCP server that is not part of the current session, and returns its result. The connection is opened for the call and closed afterwards, so no server process is left running. Only servers discoverable from the configured MCP root or the named profile can be addressed; data/gateway-policy.json can deny tools on top of that, and a malformed policy refuses every call. Distinguishes unknown server, unreachable server, unknown tool and a tool error reported by the target — a target error means the call did arrive. On an unknown tool name the available tool names are retur…
controlcenter_list_available_toolsList tools reachable through the gatewayread-only
Lists the tools of MCP servers that this host has NOT loaded, without loading them. Starts each server, reads its real list_tools output and shuts it down again. Fail-closed: a server that cannot be asked is reported as unreachable with an unknown tool count — never as a server without tools — and the summary states whether the result is complete. Scope is the local MCP root, or a named profile when 'profile' is set. Not required before controlcenter_invoke: call that one directly when the tool name is already known.

Show 19 more tools

controlcenter_list_bundlesread-only
Description is built at runtime.
controlcenter_list_decisionsList open user decisionsread-only
Lists pending decisions from the host's decision register — identifier, date, title, status and scope only. Question texts, options and recommendations are deliberately not returned; read those in the register itself. Read-only: it cannot answer or close a decision. Reports when its index is older than the source files, and when the register is unconfigured it says so rather than reporting zero open decisions.
controlcenter_list_governanceList federated decision, policy, plan and BYUM governance metadataread-only
Returns one read-only, allowlist-only metadata view across the host decision index, the existing ellmos.plans-register/1 plan index and an explicitly configured ellmos.policy-registry.v1 registry. Each source is reported as available, unconfigured, unreadable or invalid; partial results never claim completeness, while a valid registry with zero BYUM candidates reports an honest zero. Registry data is loaded only through the canonical PolicyRegistry.load() API. Plan paths, notes and host variants are not projected. BYUM rows remain pending advisory pointers: this tool never dereferences content…
controlcenter_list_local_serversread-only
Description is built at runtime.
controlcenter_list_locksList active project locks on this hostread-only
Lists every active LOCK*.txt across the configured roots: path, type, scope, owner and remaining time. Read-only — it never creates, renews or releases a lock. A full scan over cloud-synced storage takes minutes, so the scan runs under a wall-clock budget and reports explicitly when roots were left unscanned; an incomplete scan says nothing about the roots it never reached. Requires ELLMOS_LOCK_SCRIPTS; without it the tool is inert. For a single path use controlcenter_check_lock, which is far faster and also sees inherited locks.
controlcenter_list_pluginsread-only
Description is built at runtime.
controlcenter_list_profilesread-only
Description is built at runtime.
controlcenter_list_resourcesList known systems and softwareread-only
Lists rows from the host's resource inventory (systems and/or installed software), optionally filtered by host and/or type. Read-only mirror of the ControlRoom programme's resource register (.SYNC/_inventory/inventory.db) -- authority sits with that register and the source-resolver 'resources.inventory' role, not with this tool. Summary columns only; use controlcenter_describe_resource for the full row. When unconfigured it says so rather than reporting an empty inventory.
controlcenter_list_skillsread-only
Description is built at runtime.
controlcenter_list_stacksread-only
Description is built at runtime.
controlcenter_list_toolsread-only
Description is built at runtime.
controlcenter_resolve_profileread-only
Description is built at runtime.
controlcenter_resolve_semantic_routeResolve a semantic role, expert, persona, and live skill routeread-only
Validates a caller-selected semantic role/expert/persona against a provider-neutral routing map, then verifies explicit endpoints against the current skill inventory. Semantic selection remains with the caller LLM or user; fuzzy candidates are never promoted automatically and this tool grants no execution authority.
controlcenter_set_language
Description is built at runtime.
controlcenter_statusread-only
Description is built at runtime.
controlcenter_suggest_bundlesread-only
Description is built at runtime.
controlcenter_suggest_profileread-only
Description is built at runtime.
controlcenter_switch_profile
Description is built at runtime.
controlcenter_tool_overviewread-only
Description is built at runtime.

Signals

Stars: 1
Forks: 0
Open issues: 0
Last commit: Oct 12, 2026 (19 days ago)
Last release: Oct 25, 2026 (5 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.ellmos-ai/ellmos-controlcenter-mcp
Version: 0.7.4
Auth: No auth
Packages: npm ellmos-controlcenter-mcp
License: MIT
Repository: github.com/ellmos-ai/ellmos-controlcenter-mcp
Website: github.com/ellmos-ai/ellmos-controlcenter-mcp
First seen: Oct 24, 2026
Last checked: Oct 26, 2026
Source: Official MCP Registry github-graphql

More from ellmos-ai

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get ellmos ControlCenter running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying ellmos ControlCenter?

Call Get help

Cite this page

ellmos ControlCenter MCP server. Agent Mart. https://agentmart.dev/connectors/ellmos-ai-ellmos-controlcenter-mcp (last updated 2026-10-26)