Skip to main content
Glama
AIops-tools

endpoint-aiops-mcp

Endpoint AIops

Disclaimer: Community-maintained open-source project. Not affiliated with, endorsed by, or sponsored by any endpoint-management vendor. Product and trademark names belong to their owners. MIT licensed.

Governed AI-ops for managed-endpoint fleets — thin clients, VDI endpoints, and other centrally-managed devices — with a built-in governance harness: unified audit log, token/runaway budget guard, undo-token recording, and descriptive risk tiers. Vendor-neutral: it talks to an endpoint-management server's REST API (Bearer auth) through a configurable dialect — see Dialects. Self-contained: no dependencies beyond httpx and the MCP SDK. The test suite is mock-based; the endpoint-management REST paths have not yet been exercised against a live management server — see docs/VERIFICATION.md.

What it does

Two signature analyses, plus the guarded reads and writes around them:

  • Login-storm analysis — during a "everyone logs in at 9am" incident, detect the storm (bursts of concurrent logins in a sliding window) and rank the endpoints/users dragging login and boot times. Every flag is reported with its number, not a black-box verdict.

  • Patch / config drift — find endpoints that have drifted from the fleet (outdated patch level, stray agent version, divergent OS build or config profile). With no declared baseline it derives one by fleet majority, so it works before a gold image exists.

Related MCP server: aiops-mcp

What works

  • CLI (endpoint-aiops ...): init, overview, endpoint list/get/assign-profile/reboot, session list/storm, drift report/patch, secret set/list/rm/migrate/rotate-password, doctor, mcp.

  • MCP server (endpoint-aiops mcp or endpoint-aiops-mcp): 13 tools (10 read, 3 write), every one wrapped with the bundled @governed_tool harness.

  • Encrypted credentials: the management-server API key lives in an encrypted store ~/.endpoint-aiops/secrets.enc (Fernet + scrypt) — never plaintext on disk. Unlock with a master password from ENDPOINT_AIOPS_MASTER_PASSWORD (MCP/CI) or an interactive prompt (CLI).

  • Reversibility: endpoint_assign_profile (high risk) captures the prior profile and records an inverse "reassign the prior profile" undo descriptor. endpoint_reboot (medium risk) captures the prior online state for the audit record but declares no undo (a reboot has no safe inverse).

  • Safety: state-changing CLI ops (endpoint assign-profile, endpoint reboot) require double confirmation and support --dry-run.

Capability matrix (13 MCP tools)

Category

Tools

Count

R/W

Overview

overview

1

read

Inventory

endpoint_list, endpoint_get, endpoint_health_score

3

read

Sessions

session_list, login_storm_analysis

2

read

Drift

drift_report, patch_status, patch_compliance

3

read

Remediation

endpoint_assign_profile

1

write (high)

endpoint_reboot

1

write (medium)

Undo

undo_list

1

read

undo_apply

1

write (medium)

The analysis tools (login_storm_analysis, drift_report, patch_status, patch_compliance, endpoint_health_score) accept injected records for pure/offline analysis; endpoint_health_score and patch_compliance are injected-only, the others also pull live from a configured target.

What this tool does, and does not, decide

It delivers managed-endpoint operations — reads and writes — accurately and efficiently, and records every one of them. It does not decide whether a write is allowed to happen. That is the agent's judgement, or the permission of the account you connect it with: give it a management-console account or API token scoped to a read-only role and the writes fail at the server — the place that actually owns the permission.

So there is no read-only switch, no policy file, no approval gate to configure. The one thing the tool guarantees is that nothing is silent: every call, over MCP and over the CLI alike, lands an audit row in ~/.endpoint-aiops/audit.db, and reversible writes still capture their before-state and record an inverse where one exists.

Each tool declares a risk_level, kept in agreement with its [READ]/[WRITE] documentation tag by a test, and carried into the audit row as a descriptive tier — so a reviewer can see at a glance that a row was a high-risk write. It is a label, not a gate.

Running a smaller / local model? See agent-guardrails.md — it lists the guardrails this tool now enforces for you (so you don't spend prompt budget restating them) and gives a ready-made system prompt for what's left.

Payload conventions

  • Absent is not empty. A field the management server did not report comes back as null, never as "" — the key is always present, so a missing patch level cannot be mistaken for a blank one.

  • Capped lists announce themselves. Any list a limit can cut short is a truncation envelope: {"items": [...], "returned": N, "limit": L, "truncated": bool}, with truncated measured rather than inferred. Companion totals (driftedCount, behindCount, nonCompliantCount, stormCount, the health summary) are always the full, uncapped figures.

Quick start

As a Claude Code plugin

One install gives an agent both the skill and the MCP server:

/plugin marketplace add AIops-tools/marketplace
/plugin install endpoint-aiops@aiops-tools

The MCP server is fetched with uv and pinned to the package version this plugin declares, so an audit row can be traced back to the code that wrote it. Credentials are still configured with endpoint-aiops init — see below.

As a CLI or standalone MCP server

uv tool install endpoint-aiops          # or: pipx install endpoint-aiops
endpoint-aiops init                     # wizard: add a target + store its API key (encrypted)
endpoint-aiops doctor                   # verify config, secrets, connectivity
endpoint-aiops overview                 # one-shot fleet health
endpoint-aiops session storm            # detect a login storm + slow contributors
endpoint-aiops drift report             # endpoints drifted from the fleet baseline

Run as an MCP server (stdio):

export ENDPOINT_AIOPS_MASTER_PASSWORD=...   # unlock secrets non-interactively
endpoint-aiops-mcp

Governance

Every operation — MCP and CLI — passes through the bundled @governed_tool harness. It records; it does not authorize (see above).

  • Audit — every call (params, result, status, duration, risk tier, and any operator-supplied approver/rationale) is logged to ~/.endpoint-aiops/audit.db (relocatable via ENDPOINT_AIOPS_HOME). The CLI writes the same row the MCP path does — there is no unaudited entry point.

  • Runaway guard — a safety backstop, not an authorization gate: the same call hammered in a tight loop trips a circuit breaker so a stuck agent can't burn unbounded calls/time. Disable with ENDPOINT_RUNAWAY_MAX=0; optional hard ceilings via ENDPOINT_MAX_TOOL_CALLS / ENDPOINT_MAX_TOOL_SECONDS.

  • Undo recording — reversible writes record an inverse descriptor built from the fetched before-state.

  • Risk tier — a descriptive label on the audit row derived from risk_level; it gates nothing.

Scope

This is the IT-endpoint member of the AIops-tools family (governed AI-ops with audit + budget + undo + risk tiers). For OT / industrial edge (Modbus, OPC-UA, PROFINET, …) see the separate industrial-aiops line.

Dialects — which server are you actually pointing at?

A dialect is the management server's API shape: resource paths, response field names, the transport defaults (port + API base path), and how to authenticate. Set it per target in config.yaml; endpoint-aiops init asks for it and prints which one it configured.

Dialect

Transport

Auth

Status

generic (default)

/api/v2.0 on 443

static Bearer API key

Neutral placeholder — not a real vendor API. Useful only once you describe your server's paths in a dialect: block.

igel-ums

/umsapi/v3 on 8443

HTTP Basic login → JSESSIONID cookie

Documented-but-unverified dialect for IGEL UMS (IMI). This is not a claim that IGEL is supported — see Status.

targets:
  - name: ums1
    host: ums.example.local
    dialect: igel-ums        # IMI paths, port 8443, /umsapi/v3, Basic-login auth
    username: ums-admin      # UMS account; the password lives in secrets.enc
    scheme: https            # or 'http' for a reverse-proxied server
    verify_ssl: false        # self-signed lab UMS only

The generic default is not an IGEL configuration and never was: IGEL serves IMI at /umsapi/v3 on 8443, so a target left on the generic shape 404s on its first probe. That mismatch is why the preset exists.

Where a server genuinely has no such resource, the dialect says so rather than guessing a URL — IMI exposes no login/boot session resource, so session_list and login_storm_analysis on an igel-ums target return a teaching error naming the absent resource instead of calling an invented path.

A dialect selects the auth scheme too, not just paths — IMI rejects the static Bearer token the generic dialect sends, so it logs in with HTTP Basic at POST /umsapi/v3/login and carries the returned JSESSIONID cookie (once per connection, then cached). Because the scheme comes from the dialect, a credentials failure and a wrong-dialect failure are reported differently: a 401 names the scheme presented and, when the server sends a WWW-Authenticate challenge, the scheme it actually wants — so a dialect mismatch does not send you off rotating a perfectly good key.

⚠️ Note for IGEL specifically: a UMS account with too few permissions receives empty lists rather than a 403. endpoint-aiops doctor authenticates as a step separate from its reachability probe and warns when a successful login returns no endpoints, because "no devices" and "not allowed to see the devices" are otherwise indistinguishable.

Status

The test suite is mock-based. No dialect in this package has been exercised against a real management server, so this package does not claim support for any specific product — including IGEL.

  • generic is a placeholder shape, not a vendor API.

  • igel-ums is a documented-but-unverified dialect. Its paths and field aliases are modelled from IGEL's published IMI documentation; its auth scheme is documented in the IMI manual and matches what three independent real-world IMI clients do. Neither has been run against an appliance by this project — IGEL UMS has no free edition, so it cannot be verified on the maintainer's hardware.

Both are recorded as UNKNOWN-pending-live in docs/VERIFICATION.md, which ranks what a live run is most likely to find wrong and defines the checklist it must cover. If you have a UMS and run that checklist, the results are very welcome as an issue. Missing a capability or a server dialect? Open an issue or PR — contributions welcome.

Available Tools

13 tools
drift_reportA

[READ] Report endpoints drifted from a per-field baseline (patch/agent/OS/profile).

Answers "which endpoints have drifted from the fleet?" With no baseline it derives one by fleet majority (the most common value per field is treated as intended), so it works before any gold image is declared. Pass 'endpoints' for pure analysis, or a target to pull live inventory.

Args: baseline: Field→intended-value map; omit to derive the fleet majority. fields: Inventory fields to check (default agentVersion, patchLevel, osBuild, profileId). endpoints: Injected inventory rows; skips live collection. target: Endpoint-management target name from config; omit for the default.

Returns dict: {totalEndpoints, baselineSource, baseline, fieldsChecked, driftedCount, compliantCount, driftByField, driftedEndpoints[], truncated}.

Example: drift_report(endpoints=[{"hostname":"tc01","patchLevel":"2026-06"}, {"hostname":"tc02","patchLevel":"2026-05"}]).

ParametersJSON Schema
NameRequiredDescriptionDefault
fieldsNo
targetNo
baselineNo
endpointsNo

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, but the description discloses key behaviors: read-only operation, baseline derivation, field defaults, return structure including truncation. Missing details like authorization or error handling, but sufficient for safe invocation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and key behavior. Structured Args and Returns. Slight redundancy in explanatory sentences but overall efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description fully explains the return dict and all modes of use. Covers both analysis and live inventory, baseline derivation, and default fields.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, yet the 'Args' section fully describes each parameter's purpose, behavior when omitted, and provides an example. Adds significant meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it reports endpoints drifted from a per-field baseline, with a specific verb 'Report' and resource 'endpoints drifted'. It answers the question 'which endpoints have drifted from the fleet?' and distinguishes from siblings by focusing on drift analysis vs other endpoint operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly explains when to use 'endpoints' vs 'target', and that omitting 'baseline' derives fleet majority. No explicit exclusions stated, but the context is clear and actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

endpoint_assign_profileA

[WRITE][risk=high] Assign a config profile to an endpoint (reversible).

Captures the prior profile before switching, so the harness records an undo (reassign the prior profile) and a faithful audit trail.

Args: endpoint_id: Endpoint id as returned by endpoint_list. profile_id: Config profile to assign. target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
profile_idYes
endpoint_idYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses the write nature, high risk, reversibility, and the fact that prior profile is captured for undo and audit trail. This provides substantial behavioral context beyond the basic action, though it could still mention potential side effects or failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and well-structured: a one-line summary then a clear Args block. Every sentence provides value without verbosity, making it easy for an agent to parse quickly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 3 parameters and no output schema, the description adequately covers the action, impact (reversible, audit trail), and parameter usage. It does not mention success responses or error states, but the description is sufficient for a typical assignment operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description includes an Args section explaining each parameter: endpoint_id as 'as returned by endpoint_list', profile_id as 'Config profile to assign', and target as 'Endpoint-management target name from config; omit for the default.' Since the schema has 0% description coverage, this adds crucial meaning that aids agent invocation, though some explanations are minimal.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with 'Assign a config profile to an endpoint (reversible)', which clearly states the action and resource. The additional detail about capturing prior profile and providing undo further clarifies the tool's specific function, distinguishing it from sibling tools like endpoint_get or endpoint_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. While it mentions the undo and audit trail, it does not specify contexts where assignment is appropriate or when to prefer other tools. The absence of usage scenarios or prerequisites limits the agent's decision-making.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

endpoint_getB

[READ] One managed endpoint by id, normalised to the stable shape.

Args: endpoint_id: Endpoint id (or uuid/mac) as returned by endpoint_list. target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
endpoint_idYes

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must fully disclose behavior. It mentions it is a READ operation and returns a normalized shape, but omits details about error handling (e.g., not found), authentication requirements, rate limits, or any side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with a clear label ([READ]) and structured argument list. No redundant information, though it could be slightly tighter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple (single endpoint retrieval), but the description lacks details about the output shape beyond 'normalised stable shape'. No output schema is provided, so more detail on the return format would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description adds meaningful context for both parameters: endpoint_id is the id from endpoint_list (including uuid/mac), and target is an optional config name. This clarifies usage beyond the schema's type-only definition.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves one managed endpoint by id and normalizes it. It distinguishes implicitly from endpoint_list (list vs. single) but does not explicitly differentiate from other siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description indicates that the endpoint_id comes from endpoint_list and that target can be omitted for the default. However, it does not specify when to use this tool vs. alternatives like endpoint_assign_profile or session_list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

endpoint_health_scoreA

[READ] Composite per-endpoint health score (0-100), worst endpoints first.

Answers "which endpoints are worst?" by folding the fleet signals into one ranked view: it deducts points for each risk signal (offline, stale, patch-behind, agent-behind) and cites every deduction in the endpoint's 'reasons'. Pure analysis over injected inventory rows (the shape from endpoint_list) — no live connection is used. With no baseline, the patch and agent baselines are derived by fleet majority, so it works before a gold image is declared.

Args: endpoints: Injected inventory rows (id, hostname, online, lastSeenHours, agentVersion, patchLevel) to score. Required — no live pull. stale_hours: An endpoint whose lastSeenHours >= this is 'stale' (default 24). baseline: Intended {'agentVersion', 'patchLevel'}; omit to derive the fleet majority.

Returns dict: {endpointsEvaluated, baseline:{agentVersion, patchLevel, source}, summary:{healthy, degraded, critical}, worst:[{endpoint, score, band, reasons[]} ...worst-first], note}.

Example: endpoint_health_score(endpoints=[ {"hostname":"tc01","online":True,"agentVersion":"12.6","patchLevel":"2026-06"}, {"hostname":"tc02","online":False,"agentVersion":"12.5","patchLevel":"2026-05"}]).

ParametersJSON Schema
NameRequiredDescriptionDefault
baselineNo
endpointsYes
stale_hoursNo

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses behavior: it is a read operation that works on injected data, deduces baselines from fleet majority if baseline is omitted, and cites deductions in reasons. All behavioral traits are transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a summary, detailed explanation, Args section, return format, and example. It is slightly verbose but every part adds value. The structure is clear and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description fully specifies the return dict structure (endpointsEvaluated, baseline, summary, worst) and notes the note field. For a tool with moderate complexity and no annotations, the description covers all necessary details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 0% description coverage, but the description compensates by explaining each parameter: endpoints are required injected rows, stale_hours has a default of 24, and baseline is an optional object with defaults derived from the fleet. This adds crucial meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it computes a composite per-endpoint health score (0-100), sorting worst first. It addresses a specific need ('which endpoints are worst?') and distinguishes from sibling tools like endpoint_list (which lists endpoints but does not score).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains that the tool analyzes injected inventory rows and does not connect live, implying it should be used after fetching data via endpoint_list. It does not explicitly mention when not to use or contrast with alternatives like patch_compliance, but the context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

endpoint_listA

[READ] List all managed endpoints (id, hostname, OS, agent/patch, online).

Args: target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The [READ] prefix indicates a non-destructive read operation, which is valuable given no annotations are provided. However, the description lacks details on authentication, rate limits, or any potential side effects, though for a simple list these are likely minimal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two clear sections: a summary line and an Args list. Every sentence provides value; no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional parameter, no output schema), the description covers the key aspects: what the tool returns, that it is a read operation, and the parameter's purpose. It could mention pagination or endpoint count limits but is complete enough for a basic list tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. The Args section explains the 'target' parameter as 'Endpoint-management target name from config; omit for the default', adding meaningful context beyond the schema's type info.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'List all managed endpoints' with a [READ] prefix, specifying the verb and resource. It lists the fields returned (id, hostname, OS, agent/patch, online), which distinguishes it from sibling tools like endpoint_get (single endpoint) or drift_report (report).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide explicit guidance on when to use this tool versus alternatives like endpoint_get or patch_status. There is no mention of context or exclusions, leaving the agent to infer usage from the tool name and siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

endpoint_rebootA

[WRITE][risk=medium] Request an endpoint reboot (no safe inverse).

Records the endpoint's prior online state for the audit trail; a reboot cannot be undone, so no undo descriptor is offered.

Args: endpoint_id: Endpoint id as returned by endpoint_list. target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
endpoint_idYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries full burden. It discloses write operation, medium risk, no safe inverse, records prior state, and irrevocability, providing good behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences plus Args list, front-loaded with risk annotation. Every sentence adds value with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers core purpose, risk, parameter explanations. Lacks return value or result description, but for a simple write tool with no output schema, it is fairly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description adds brief explanations for both parameters (endpoint_id and target), clarifying source and default behavior. Could be more detailed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Request an endpoint reboot' and resource 'endpoint', with a risk annotation. It distinguishes itself from sibling tools like endpoint_list or endpoint_get by being a write action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies use for rebooting endpoints but does not explicitly state when to use vs alternatives or when not to use. The note about no undo provides some behavioral context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

login_storm_analysisA

[READ] Detect login storms + rank the slowest login/boot contributors.

Answers "is this a morning login storm, and which endpoints/users are dragging login and boot times?" Groups logins into storm episodes (>= min_concurrent within a window_s sliding window) and flags sessions slower than the thresholds — every flag is reported with its number, not a verdict. Pass 'sessions' for pure analysis, or a target to pull live via session_list.

Args: since_hours: Live look-back window when sessions is omitted (default 24). window_s: Sliding window that defines "concurrent" logins (default 300). min_concurrent: Logins within a window that constitute a storm (default 10). slow_login_ms: Login duration (ms) flagged as slow (default 30000). slow_boot_ms: Boot duration (ms) flagged as slow (default 90000). sessions: Injected session records — {endpoint, user, login_ms, boot_ms, timestamp (ISO-8601), result}; skips live collection. target: Endpoint-management target name from config; omit for the default.

Returns dict: {totalSessions, stormCount, storms:[{start, end, count, peakConcurrent, spanS, distinctUsers, distinctEndpoints, avgLoginMs}], slowLoginCount, slowestByLogin[], slowestByBoot[], failedLogins, thresholds}.

Example: login_storm_analysis(sessions=[{"endpoint":"tc01","user":"a", "login_ms":42000,"timestamp":"2026-07-12T08:00:00Z"}, ...]).

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
sessionsNo
window_sNo
since_hoursNo
slow_boot_msNo
slow_login_msNo
min_concurrentNo

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full burden. It clearly marks the tool as READ by starting with '[READ]'. It describes what the tool does (detects storms, flags slow sessions) and what it returns (dict with fields). It does not mention any destructive side effects, and no contradictions arise.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a concise opening line, a guiding question, parameter list, return value description, and example. It is front-loaded with key purpose. Slightly verbose but every sentence adds value for a complex tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (7 params, no output schema, 0% schema coverage), the description is complete. It covers purpose, parameter semantics, return structure, and provides an example. The agent can fully understand how to invoke and interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description provides thorough parameter explanations for all 7 parameters, including defaults (e.g., 'default 24'), units (ms, s), and behavior (e.g., 'Pass sessions for pure analysis'). This adds significant meaning beyond the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Detect login storms + rank the slowest login/boot contributors.' It specifies the action (detect and rank) and the resource (login storms and slow contributors), and distinguishes it from sibling tools like 'session_list' or 'endpoint_list' by focusing on storm analysis.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit context for when to use: 'Answers is this a morning login storm...' It also gives guidance on input options: 'Pass sessions for pure analysis, or a target to pull live via session_list.' However, it does not explicitly state when NOT to use or name alternative tools for different scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

overviewA

[READ] One-shot fleet health: online/offline, stale endpoints, version spread.

Call this first to triage a managed-endpoint fleet before drilling into a specific endpoint, login storm, or drift report.

Args: target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden. It clearly labels the tool as '[READ]' (read-only), describes what it returns (fleet health statuses), and explains the parameter. However, it lacks details on authentication needs, rate limits, or whether the data is cached or real-time, which would be helpful for full transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and well-structured. The first sentence front-loads the core purpose, and the second paragraph provides usage guidance and parameter details. No wasted words; every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional parameter) and no output schema, the description provides adequate context: what it does, when to use, and parameter semantics. However, it could be improved by briefly describing the output format or any limitations, but overall it's sufficiently complete for an agent to use correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero description coverage for the 'target' parameter. The description compensates fully by explaining the parameter's meaning ('Endpoint-management target name from config') and usage ('omit for the default'), adding significant value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose with specific verb 'READ' and resource 'fleet health', listing included elements (online/offline, stale endpoints, version spread). It distinguishes from siblings by advising to call this first before drilling into specific tools like endpoint, login storm, or drift report.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use ('Call this first to triage a managed-endpoint fleet') and implies when not to (before drilling into specific endpoint, login storm, or drift report). It names alternative tools that provide more detailed views.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

patch_complianceA

[READ] Patch-compliance SLA measure: % of the fleet on the target patch level.

Reframes patch_status (the patch-level distribution) as an SLA/compliance verdict: what fraction of the fleet is on the target level, whether that meets the SLA, and which endpoints are non-compliant. Compliance is an exact string match on patchLevel — a transparent check, not a version-semantics parser. Injected-only: pass 'endpoints' (inventory rows); no live collection.

Args: endpoints: Injected inventory rows to evaluate (e.g. from endpoint_list). target_patch: Desired patch level; omit to use the fleet-majority level. sla_pct: Compliance SLA threshold percent; default 95.0.

Returns dict: {endpointsEvaluated, targetPatch, targetSource, slaTargetPct, complianceRatePct, compliantCount, verdict, nonCompliant[], note}.

Example: patch_compliance(endpoints=[{"hostname":"tc01","patchLevel":"2026-06"}, {"hostname":"tc02","patchLevel":"2026-05"}], target_patch="2026-06").

ParametersJSON Schema
NameRequiredDescriptionDefault
sla_pctNo
endpointsYes
target_patchNo

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses behavioral traits: read-only operation, exact string match for compliance (not version semantics), injected-only data, return fields, and defaults. No side effects or hidden behaviors are omitted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with summary, details, parameter docs, return dict, and example. It is slightly verbose but each sentence adds value. Could be slightly more concise, but overall efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and only 3 parameters, the description adequately covers input, algorithm, output fields, and an example. It lacks error handling or edge cases, but for a compliance tool it is sufficiently complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, but the description provides detailed parameter explanations: endpoints as injected inventory, target_patch with fleet-majority default, and sla_pct with 95.0 default. An example further clarifies usage, adding significant value beyond the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: computing patch-compliance SLA as a percentage of the fleet on target patch level, with a verdict and non-compliant list. It distinguishes from patch_status by reframing it as a compliance metric, and specifies it is injected-only and not a live collection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for SLA compliance analysis but does not explicitly contrast with sibling tools like drift_report or patch_status. It notes injected endpoints are required, but does not provide explicit when-to-use or when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

patch_statusA

[READ] Patch-level distribution + which endpoints are behind the target level.

Args: target_patch: Desired patch level; omit to use the fleet-majority level. endpoints: Injected inventory rows; skips live collection. target: Endpoint-management target name from config; omit for the default.

Returns dict: {totalEndpoints, targetPatch, targetSource, distribution, behindCount, behind[], truncated}.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
endpointsNo
target_patchNo

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotated as [READ], the description clearly indicates read-only behavior. It does not mention performance or authentication, but for a read operation this is acceptable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, front-loaded with purpose, and structured with Args and Returns sections. Every sentence adds value without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description specifies the return dict keys. However, it lacks explanation of 'truncated' and the structure of 'behind[]' items, leaving minor gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema coverage, the description fully compensates by explaining all three parameters: target_patch (desired patch level), endpoints (injected inventory), target (endpoint-management target name).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns patch-level distribution and behind endpoints, using specific resource 'patch status' and action 'read'. It distinguishes from siblings like endpoint_get and drift_report.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains parameter behaviors (target_patch defaults to fleet-majority, endpoints skips live collection, target defaults) but does not explicitly state when to use this tool over alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

session_listA

[READ] Recent login/boot sessions (endpoint, user, login_ms, boot_ms, result).

Args: since_hours: Look-back window in hours (1..720, default 24). target: Endpoint-management target name from config; omit for the default.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
since_hoursNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. The [READ] prefix indicates read-only, but it does not disclose details like pagination, sorting, error handling, or behavior when parameters are invalid. This is adequate for a simple tool but could be more transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, front-loaded with the purpose, and uses bullet points for arguments. Every sentence provides value without redundancy, making it efficient for an agent to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (2 parameters, no output schema, no annotations), the description covers purpose, return fields, and parameter details. While it lacks sorting or pagination info, it is largely complete for its complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, but the description compensates well: it explains since_hours (range 1..720, default 24) and target (endpoint-management target name from config; omit for default). This adds meaningful context beyond the schema's type and default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool reads recent login/boot sessions and lists the fields returned (endpoint, user, login_ms, boot_ms, result). This distinguishes it from sibling tools like endpoint_list, which lists endpoints, making its purpose specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no explicit guidance on when to use this tool versus alternatives. It does not mention conditions, prerequisites, or scenarios where other siblings would be more appropriate, leaving the agent to infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

undo_applyA

[WRITE][risk=medium] Apply a recorded undo by dispatching its inverse tool.

The inverse runs through its own governed tool, so its real risk tier and any approver requirement are enforced there. Pass dry_run=True to preview the inverse call without executing it. A token can only be applied once.

Args: undo_id: The undoId from undo_list (or an _undo_id in a write result). dry_run: If True, preview the inverse tool + params without running it. target: Passed through to the inverse tool when it accepts a target.

ParametersJSON Schema
NameRequiredDescriptionDefault
targetNo
dry_runNo
undo_idYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, but the description discloses that the inverse tool runs through its own governed tool, enforcing risk tier and approver requirements. It also explains dry_run behavior and the single-use constraint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a title line and explanation, sentences are informative, and it is appropriately sized. Minor room for tighter wording but overall good.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, so return values are not described. It covers main behavioral aspects but does not mention error cases or what happens if undo_id is invalid. Adequate but could be more complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, but the description adds meaning: undo_id comes from undo_list or _undo_id, dry_run previews without executing, target passes through to inverse tool when accepted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it 'applies a recorded undo by dispatching its inverse tool', specifying the action and the resource (undo). It distinguishes from siblings, especially 'undo_list'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use: to apply an undo. It mentions dry_run for preview and that a token can only be applied once. It does not explicitly state when not to use or alternatives, but the context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

undo_listA

[READ] List recorded, not-yet-applied undo tokens (most recent first).

Each entry names the original tool, the inverse tool that undo_apply would run, and a human note. Use the undoId with undo_apply.

Args: limit: Max rows to return (default 50). target: Unused (undo state is host-local); accepted for CLI uniformity.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
targetNo

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description starts with '[READ]', indicating it is a non-destructive read operation. It discloses that the target parameter is unused, which is a behavioral detail beyond the schema. Since no annotations are provided, the description adequately covers basic behavioral traits, though it omits potential side effects or limitations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise: it front-loads the purpose in the first sentence, then describes the output format, and finally explains the parameters. Every sentence adds value, and there is no unnecessary text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the key aspects of the tool: it lists not-yet-applied tokens, orders them most recent first, and includes the necessary fields (original tool, inverse tool, human note, and undoId). It mentions the use of undoId with undo_apply. Without an output schema, this provides sufficient context for an agent to understand and use the tool, though it could briefly mention the return format or pagination.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description explains both parameters beyond the schema: limit as 'Max rows to return (default 50)' and target as 'Unused (undo state is host-local); accepted for CLI uniformity.' Since schema description coverage is 0%, this adds critical meaning, especially clarifying that target is effectively ignored.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states clearly that the tool lists not-yet-applied undo tokens in reverse chronological order. It specifies that each entry includes the original tool, inverse tool, and human note. This distinguishes it from the sibling tool undo_apply, which applies an undo token.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains that the undoId returned should be used with undo_apply, providing clear context for when to use this tool (before applying an undo). It does not explicitly list when not to use it, but the usage context is well-defined.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 2 tool updatesv0.3.0
    • Addedundo_apply
    • Addedundo_list
  2. 2 tool updatesv0.2.0
    • Addedendpoint_health_score
    • Addedpatch_compliance
  3. 9 tool updatesv0.1.0
    • First observeddrift_report
    • First observedendpoint_assign_profile
    • First observedendpoint_get
    • First observedendpoint_list
    • First observedendpoint_reboot
    • First observedlogin_storm_analysis
    • First observedoverview
    • First observedpatch_status
    • First observedsession_list

TDQS

A4.1/5.0
Disambiguation5/5

Each tool targets a distinct endpoint management concern: listing, getting, assigning profiles, rebooting, drift detection, health scoring, patch compliance, patch status, login analysis, session listing, and overview. No two tools overlap in purpose.

Naming Consistency5/5

All tools use snake_case naming with a consistent pattern: endpoint-focused tools prefixed with 'endpoint_' and domain-specific tools like 'drift_report', 'patch_compliance', etc. No mixing of conventions or ambiguous verb choices.

Tool Count5/5

11 tools is well-scoped for a domain covering endpoint management, fleet health, patching, and login analysis. Each tool has a clear role with no unnecessary duplication.

Completeness4/5

Covers core operations: list, get, assign profile, reboot, plus monitoring (drift, health, patch compliance, login storms). Minor gaps like missing unassign profile or baseline management, but the set is sufficient for typical fleet analysis and remediation workflows.

Maintenance

ActivityActive
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    A self-contained, security-first, EU-sovereign unified AI-operations MCP server that fuses a live bitemporal fleet model, a drift engine, and a tiered audited actuator into one control plane.
    5
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Governed AI-ops for Ceph, providing root-cause health analysis and guarded destructive operations via a built-in governance harness with risk tiers, audit, and undo recording.
    37
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Governed network controller-layer operations (Cisco Meraki, plus Catalyst Center / Arista CVP / UniFi) — uplink loss/latency RCA, fleet health scoring, and config-template drift, with unbypassable audit logging (MCP + CLI), budget/runaway guards, and rollback.
    34
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AIops-tools/Endpoint-AIops'

If you have feedback or need assistance with the MCP directory API, please join our Discord server