AETHER_02 exposes 12 MCP tools. Each tool takes this parameter shape:
{
"action": "action_name",
"params": {}
}* = requires force: true or a disabled-by-default feature gate in .env.
For dangerous command-backed actions you can pass "dry_run": true inside params to preview the command/action instead of mutating the host.
Every tool call returns a structured JSON envelope as MCP text content:
{
"ok": true,
"tool": "service_manager",
"action": "status",
"result": {
"ok": true,
"type": "command",
"dry_run": false,
"mock": false,
"command": "systemctl",
"args": ["status", "ssh", "--no-pager"],
"command_line": "systemctl status ssh --no-pager",
"stdout": "...",
"stderr": "...",
"exit_code": 0
}
}For direct filesystem/sysfs operations, result may be a string or an action preview object. For command-backed operations, result.type is command.
| # | Tool | Actions |
|---|---|---|
| 1 | process_control |
list, tree, kill, signal, create, set_priority, set_nice, query_info, threads, set_affinity, memory_info, memory_limits, fd_list, fd_info, limits, environ, suspend, resume, cgroup_list, cgroup_info, cgroup_create, cgroup_delete, cgroup_set_limit, cgroup_move, namespace_list, namespace_enter*, oom_score, oom_kill, seccomp_info, ptrace_attach*, ptrace_detach*, container_list, container_info, container_start, container_stop, container_logs, container_exec, perf_top, perf_stat |
| 2 | file_system |
read, write, append, delete, copy, move, rename, list_dir, stat, statvfs, mkdir, exists, acl_get, acl_set, xattr_list, xattr_get, xattr_set, xattr_delete, symlink_read, symlink_create, symlink_delete, chmod, chown, truncate, mount_list, mount, umount, remount, bind_mount, tmpfs_mount, disk_list, disk_info, part_list, part_create*, part_delete*, part_resize*, mdraid_list, mdraid_info, mdraid_create*, lvm_pvs, lvm_vgs, lvm_lvs, lvm_create*, swap_list, swap_on, swap_off, swap_create*, fsck_check*, fsck_repair*, nfs_list, nfs_mount, inotify_watch, inotify_read, btrfs_subvol_list, btrfs_snapshot, zfs_list, zfs_snapshot, overlay_mount |
| 3 | package_manager |
list_installed, list_upgradable, search, info, install*, remove*, upgrade*, upgrade_all*, hold, unhold, list_repos, add_repo*, remove_repo*, clean_cache, history, verify, download, flatpak_list, flatpak_install*, flatpak_remove*, snap_list, snap_install*, snap_remove*, appimage_list, nix_list, nix_install*, nix_remove* |
| 4 | system_config |
sysctl_list, sysctl_get, sysctl_set*, sysctl_load*, kernel_cmdline_get, kernel_cmdline_set*, modprobe_list, modprobe_load*, modprobe_unload*, modprobe_blacklist, dracut_rebuild*, dconf_list, dconf_get, dconf_set, gsettings_list, gsettings_get, gsettings_set, limits_get, limits_set*, hostname_get, hostname_set*, timezone_list, timezone_get, timezone_set*, locale_list, locale_get, locale_set*, keyboard_layout, etc_config_read, etc_config_write*, udev_info, udev_rules_list, udev_trigger, environment_list, environment_set*, os_release |
| 5 | service_manager |
list, list_units, list_unit_files, status, start*, stop*, restart*, reload, enable*, disable*, mask, unmask, cat, edit*, show, list_dependencies, list_timers, list_sockets, list_paths, list_mounts, isolate*, default, rescue*, emergency*, daemon_reload, reset_failed, user_services, analyze + OpenRC + runit + s6 |
| 6 | gui_automation |
mouse_move, mouse_click, mouse_scroll, mouse_position, mouse_drag, keyboard_type, keyboard_press, keyboard_combo, keyboard_state, find_window, list_windows, set_window_pos, set_window_size, focus_window, get_window_rect, get_window_title, get_window_class, close_window, minimize_window, maximize_window, screenshot, screenshot_window, clipboard_read, clipboard_write, clipboard_clear, display_list, display_info, display_mode_set, display_scale, display_rotation, display_brightness_get, display_brightness_set, display_night_light, display_color_profile, compositor_info, audio_list_sinks, audio_list_sources, audio_volume_get, audio_volume_set, audio_mute, audio_default_sink, input_list_devices, input_device_info, input_remap*, notification_send, notification_history, screensaver_lock, screensaver_unlock, inhibit_idle |
| 7 | system_info |
cpu_info, cpu_topology, cpu_freq, cpu_governor, cpu_vulnerabilities, cpu_microcode, cpu_cache, cpu_perf_flags, memory_info, memory_topology, memory_hugepages, memory_numa, memory_slab, disk_list, disk_info, disk_smart, disk_iostat, disk_partitions, os_info, os_release, kernel_info, kernel_modules, kernel_tainted, uptime, load_avg, env_vars, hostname, boot_time, gpu_list, gpu_info, gpu_usage, gpu_temperature, gpu_driver, pci_list, pci_info, usb_list, usb_info, dmi_bios, dmi_system, dmi_board, dmi_chassis, acpi_tables, acpi_power, edid_info, iommu_groups, irq_list, irq_affinity, sensors_list, sensors_temperature, sensors_fan, sensors_voltage, device_list, driver_list, firmware_list |
| 8 | network_manager |
adapter_list, adapter_info, adapter_up*, adapter_down*, adapter_stats, adapter_speed, address_list, address_add*, address_delete*, route_list, route_add*, route_delete*, connection_list, connection_info, connection_create*, connection_modify*, connection_delete*, connection_up*, connection_down*, dns_servers, dns_cache, dns_flush, dns_set*, firewall_rules_list, firewall_rule_add*, firewall_rule_delete*, firewall_chain_list, nftables_table_list, nftables_chain_list, nftables_rule_add*, nftables_rule_delete*, wireguard_list, wireguard_info, wireguard_config*, bridge_list, bridge_create*, bridge_add_port*, bond_list, bond_create*, vlan_list, vlan_create*, network_namespace_list, network_namespace_create*, tc_qdisc_list, tc_qdisc_add*, socket_list, socket_info, wifi_list, wifi_connect*, wifi_disconnect, wifi_scan, bluetooth_list, bluetooth_info, bluetooth_connect*, bluetooth_pair*, proxy_list, proxy_set, hosts_read, hosts_write* |
| 9 | user_management |
users_list, user_info, user_create*, user_delete*, user_modify*, user_password_set*, user_lock, user_unlock, groups_list, group_info, group_create*, group_delete*, group_add_user*, group_remove_user*, sessions_list, session_info, session_terminate*, current_user, whoami, id, nsswitch_conf, pam_list_modules, pam_conf_read, pam_conf_write*, polkit_list, polkit_info, sudoers_read, sudoers_write*, sudoers_list_users, ssh_authorized_keys_list, ssh_authorized_keys_add*, ssh_authorized_keys_remove*, faillock_list, faillock_reset, subuid_list, subgid_list, acl_users, last_logins, loginctl_list, loginctl_user_status |
| 10 | security_audit |
selinux_status, selinux_mode, selinux_set_mode*, selinux_booleans, selinux_policy, selinux_context_list, selinux_set_context*, apparmor_status, apparmor_profiles, apparmor_set_mode*, auditd_status, auditd_rules_list, auditd_rule_add*, auditd_rule_delete*, firewall_status, firewall_profile, tpm2_info, tpm2_pcrs, tpm2_quote, secure_boot_status, ima_status, ima_policy, evm_status, fapolicyd_status, lockdown_status, kernel_lsms, kernel_mitigations, kernel_hardening, aslr_status, mmap_min_addr, kptr_restrict, dmesg_restrict, ptrace_scope, core_pattern, file_integrity_list, file_integrity_check, aide_check, lynis_check, cve_mitigations, uefi_variables, boot_chain |
| 11 | hardware_control |
gpu_nvidia_info, gpu_nvidia_smi, gpu_nvidia_power, gpu_nvidia_fan, gpu_amdgpu_info, gpu_intel_info, gpu_vulkan_info, pci_rescan*, pci_remove*, usb_devices, usb_authorize*, usb_deauthorize*, acpi_info, acpi_wakeup, acpi_event, cpufreq_governor_list, cpufreq_governor_get, cpufreq_governor_set*, thermal_zones, thermal_temperature, thermal_cooling, cpu_microcode_version, cpu_microcode_reload*, iommu_groups, iommu_info, irq_list, irq_set_affinity*, hugepages_info, hugepages_alloc*, kdump_status, kdump_config, kdump_test*, memory_error_count |
| 12 | system_automation |
journal_list, journal_query, journal_follow, journal_boot, journal_vacuum, journal_disk_usage, timer_list, timer_info, timer_enable*, timer_disable*, timer_create*, timer_delete*, cron_list, cron_user_list, cron_add*, cron_remove*, anacron_list, at_list, at_create*, at_delete*, tmpfiles_list, tmpfiles_create, tmpfiles_clean, sysusers_list, sysusers_create*, binfmt_list, binfmt_register*, modules_load_list, modules_load_add*, sysctl_d_list, sysctl_d_apply, boot_analyze, boot_chart |
| Prompt | Purpose |
|---|---|
system_health |
CPU, memory, disk, process, service, and network health report |
security_posture |
SELinux/AppArmor, firewall, kernel hardening, Secure Boot, TPM, integrity posture |
diagnostic_report |
Journal errors, failed services, OOM events, disk health, network issues, crash hints |
AETHER_02 also exposes live aether:// resources for CPU, memory, disk, OS release, uptime, kernel, GPU, PCI, USB, DMI, thermal, network, firewall, services, users, security, feature gates, environment, installed packages, and recent journal entries.