agent-tool

Execute HTTP requests with any method (GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS). Ideal for testing APIs, webhooks, and web services during development. Features: ECH (Encrypted Client Hello) and DoH (DNS over HTTPS) enabled by default. Supports custom headers, request body, and HTTP/SOCKS5 proxies. SSRF protection blocks private/internal IPs. Response body is truncated at max_response_kb. For downloading files, use download.

Lists directory contents with bounded, pageable output. Default: flat listing, max_depth=3, max_entries=500. When has_more=true, pass next_cursor as cursor to fetch the next page. Filter by type with directories_only or files_only, and by entry-name glob with name_pattern (single) or include (multiple OR patterns, e.g. ["A*", "*.go"]). Use counts_only=true for counts without names, flat=false for a visual tree, and relative_paths=true to save tokens. Skips hidden entries and common build/vendor directories during recursion.

Process memory tool for reverse engineering and game hacking. CheatEngine-style workflow: search → filter → filter → find exact addresses → write. Supported: Windows (ReadProcessMemory/WriteProcessMemory), Linux (/proc/pid/mem). macOS: not supported (SIP). Operations: regions (list memory map), search (value scan or unknown initial value scan, creates session), filter (narrow: exact/changed/unchanged/increased/decreased), undo (restore previous filter), read (hex dump), read_chain (resolve base+offset pointer chains, batched), write (modify memory), disasm (disassemble live memory — x86/x64/AR…

Create a directory. Creates parent directories by default (like mkdir -p). Supports permission mode in octal (e.g. 0755, 0700) — applied on Unix/Linux. Use dry_run=true to preview.

Applies multiple old_string -> new_string replacements to a single file in one call. Edits are applied sequentially in order; each edit sees the result of the previous one. Atomic: if any edit fails, the file is not modified at all. Encoding-aware: preserves original file encoding (UTF-8, EUC-KR, Shift-JIS, etc.). Line-ending aware: old_string matches whether the file uses CRLF or LF, and inserted newlines follow the region being edited (mixed-newline files stay intact). Accepts "path" as alias for "file_path". Use dry_run=true to preview all changes without modifying the file.

Reads multiple files in a single call to reduce API round-trips. Encoding-aware: auto-detects file encoding for each file. Supports offset/limit for reading specific line ranges. Defaults to 200 lines per file and 32768 characters total across the call. Returns visible per-file and overall truncation metadata with continuation positions. Use file_paths or paths (string array) with global offset/limit, or files (object array) for per-file offset/limit. If a file fails, the error is included in output and remaining files continue. Maximum 50 files per request.

Run MySQL/MariaDB SQL over an utf8mb4 connection. SELECT-like statements return bounded tables; others return affected rows and insert ID. Connections close after each call. tls=true verifies TLS; use SQL LIMIT/OFFSET for deterministic paging.

Network diagnostics, one operation per call: - external_ip: your public IPv4 and IPv6 (dedicated detection services with fallback) - dns: records for host (record_type A, AAAA, MX, CNAME, TXT, NS, SOA; DoH by default, use_doh=false for the system resolver) - tls: certificate subject, issuer, expiry, SANs, TLS version and cipher for host:port (default 443) - port: whether a TCP port on host is OPEN or CLOSED, with response time or the failure (refused, timeout, DNS) For HTTP use httpreq.

Applies a unified diff patch to a file. Parses @@ hunk headers, verifies context lines, and applies changes. Encoding-aware: preserves original file encoding. Line-ending aware: each line keeps its own ending (a mixed CRLF/LF file is not rewritten) and a file without a trailing newline does not gain one. Use dry_run=true to preview without modifying the file.

Execute a command as a new process. Supports background execution and starting in suspended state. WARNING: This tool executes arbitrary commands on the host system. Use with caution. Use suspended=true to start a process in suspended state (Windows: CREATE_SUSPENDED, Linux: SIGSTOP). Use prockill with signal=cont to resume a suspended process. Foreground repeated diagnostics are compacted by default without changing exit status. Set output_view=raw to disable compaction. When compaction occurs, use toolbox operation=output with raw_output_id to retrieve the preserved bounded original for 30 m…

Kills, suspends, or resumes a process by PID or port number. Supports tree kill (process + all children), signal selection (kill/term/hup/int/stop/cont). Use signal=stop to suspend and signal=cont to resume a process. On Linux, can detect and handle zombie processes by signaling their parent. Use dry_run=true to preview which processes would be affected. Safety: refuses to target PID 0/1 or the agent-tool process itself.

Lists running processes with PID, name, command line, and memory usage. Sensitive information in command-line arguments (passwords, tokens) is automatically masked. Use filter to search by process name, or port to find processes using a specific port. Results are paged; continue with next_offset when has_more=true.

Read one value from a JSON, YAML or TOML file by a dot-notation path, without loading the whole file into context. Format comes from the extension (.json, .yaml/.yml, .toml); pass format for other names. Supports nested keys (a.b.c), array indices ([0], [-1] for last) and wildcards ([*]). Examples: "scripts.build", "services.web.ports[0]", "tool.poetry.name", "users[*].email". Returns the value with its type; objects and arrays print as JSON. Output defaults to 32768 characters and reports truncation.

Read text with line numbers or return raster images as ImageContent. Detects common encodings; SVG stays text. Text is bounded and reports truncation/next_offset. Use offset/limit to page; relative paths use the workspace or MCP root.

Execute Redis commands on a Redis server. Supports all Redis commands (GET, SET, HGETALL, LPUSH, etc.). Results are formatted by type: strings, integers, arrays, and nil values. Connection is closed after each call (no session pooling). Supports verified TLS encryption for secure connections. Defaults: 200 characters per value and 32768 total output characters. Use max_value_chars/max_output_chars to tune bounded output.

Performs regex find-and-replace across files. Encoding-aware: preserves original file encoding. Replacement newlines follow the newline style of the region each match sits in, so mixed CRLF/LF files stay intact. Exception: converting line endings on purpose (pattern "\r\n" -> "\n", or a replacement containing \r) writes the replacement verbatim. The pattern is matched against decoded text WITHOUT newline normalization: use \r?\n for a line break and \r?$ with (?m) for end-of-line, or a CRLF file will not match. Supports single file or recursive directory mode with glob filtering. Supports capt…

Renames or moves a file/directory. Atomic operation via os.Rename. Use dry_run=true to preview.

Changes agent-tool runtime configuration. Supports: fallback_encoding, encoding_warnings, max_file_size_mb, allow_symlinks, workspace. SSRF policy: allow_http_private, allow_mysql_private, allow_redis_private, allow_ssh_private. Network: enable_doh (DNS over HTTPS), enable_ech (Encrypted Client Hello). Call with no arguments to view current configuration. Example: set fallback_encoding to "EUC-KR" for Korean legacy projects.

Transfer files and manage remote filesystems over SSH (SFTP protocol). Reuses SSH session pool — same authentication and session reuse as the ssh tool. Operations: upload (local to remote), download (remote to local), ls, stat, mkdir, rm, chmod, rename. Batch upload: upload_many accepts up to 100 local_path/remote_path items over one SFTP session. Async operations: upload_async, download_async (returns transfer_id immediately), status (check progress), cancel. Max file transfer size: 2 GB. Use overwrite=true to replace existing files. Recursive delete is limited to 10,000 items for safety.

Count source lines of code (SLOC) in files or directories. Returns per-language summary with file count, total lines, and blank lines. Recognizes 70+ languages by file extension. Skips common non-source directories (node_modules, .git, vendor, dist, build). Use glob to filter specific file types. Use show_files to control per-file breakdown.

Execute SSH commands with password, key, agent, IPv6, and ProxyJump support. Prefer a local connection_profile or reuse connection_id; matching sessions pool for 30 minutes. Output is bounded. For long-running commands use start/background, then status/tail/cancel with job_id. On Windows use powershell_script to upload, execute, and clean up a temporary script via SSH stdin. Long standalone EncodedCommand invocations are staged automatically.

Converts local SSH private-key files without exposing key material in tool output. Supported output formats: PuTTY PPK v3, traditional PEM, modern OpenSSH, and PKCS#8 PEM. Input format is auto-detected and may be PEM, PKCS#8, OpenSSH, or PPK. RSA, ECDSA, Ed25519, and DSA keys are supported where the target format permits them. PPK and OpenSSH outputs support output_passphrase. Legacy encrypted PEM is intentionally not generated. Writes with permission 0600, refuses overwrite by default, and uses safe replacement when overwrite=true.

Discover and call tools without loading every schema. Use describe, preferably compact with tool_operation, then call with arguments. Reuse schema_handle. output retrieves preserved paged command output. list shows tools; enable/disable/profile manage direct bindings. Profiles: core-lite, core, coding, remote, analysis, full.

Windows-only GUI automation: find/inspect windows, screenshots, clipboard images, text, mouse/keyboard input, messages, visibility, geometry, close, and focus. clipboard saves the current image as PNG; screenshot returns base64 PNG unless save_path is set.

Create or overwrite a file. Preserves existing encoding, uses .editorconfig for new files, and creates parent directories.