Gateway

Move future work for an existing server to an explicit destination region without replacing its server ID, SSH identity, host-key trust, history, or metadata. Gateway verifies the existing endpoint, trusted host key, and managed identity from the destination before committing. Existing jobs are not cancelled; wait_for_active_jobs requests a strict drain before cutover. A server on auto runs each job from the shared region with the most available capacity; an explicit region keeps its jobs in that region. wait_seconds only bounds this MCP call and never cancels the durable verification job.

set_server_region

Run a non-modifying ext4 or XFS check on an exact unmounted block device. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

check_filesystem

Check whether an exact semantic flow is allowed. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Runs on Linux and Windows servers.

check_firewall_rule

Return only whether this lowercase SHA-256 is currently in Gateway global malicious-file reputation. false means unknown, never clean or safe.

is_known_malicious

Read the normalized configuration for one exact Compose project. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

config_docker_compose

Ensure one exact container is connected to one exact Docker network. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

connect_docker_network

Copy one exact local path to an exact destination. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

copy_file

Copy a file, directory, or symbolic link from one exact container (running or stopped) to an exact guarded host path with docker cp, verified on the host. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

copy_from_docker_container

Copy a host file, directory, or symbolic link into one exact container (running or stopped) with docker cp, verified by reading it back. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

copy_to_docker_container

Copy one file, or a directory tree with recursive=true, between two owned Gateway servers. Gateway coordinates and audits the operation; file contents never pass through Gateway executors or the application server. Between Linux servers that do not connect through a Gateway overlay network the hosts copy directly to each other with short-lived transfer-scoped authorization, and nothing is staged in R2: up to 250 GiB moves as one stream, a larger tree is split by subdirectory into pieces of up to 250 GiB, and a file over 250 GiB is sent in chunks that the destination reassembles and verifies by SHA-256, up to 1 TiB per job. Retrying the same copy skips pieces that already finished. A tree copy ends by checking every entry's type and size at the destination; delete_extraneous removes destination entries absent from the source only after every piece succeeded. preview=true measures the source and returns its size, entry count, pieces and route without copying. An overlay endpoint, a Windows endpoint, or transport=staged instead has each host move its own bytes through private regional R2 staging, one staged batch of up to 5,363,466,240 bytes (4.995 GiB) and 100,000 entries at a time, each batch deleted once the destination applied it. A larger tree between Linux servers is staged in folder-sized batches, one after another, up to 1 TiB per job; retrying the same copy skips batches that already finished, and delete_extraneous runs only after every batch succeeded. A tree with a Windows server stays one staged batch. The result states when and why a transfer was staged. Overwrite behaviour is always explicit.

copy_between_servers

Create an exact archive from explicit source paths. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_archive

Ensure one exact directory exists with requested metadata. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_directory

Ensure selected service containers are created without starting them. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_docker_compose

Create one exactly named Docker container from a local image and bounded configuration. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_docker_container

Ensure one exactly named Docker network exists with bounded IPAM configuration. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_docker_network

Ensure one exactly named Docker volume exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_docker_volume

Ask Gateway to run a command on a server on a timetable. Gateway starts each run as an ordinary job (visible in the user's Activity); nothing is installed on the server, so this is not a cron entry or systemd timer there. Give every_minutes for a fixed interval, or cron (5 fields: minute hour day-of-month month day-of-week) with an IANA timezone. The schedule is created waiting for confirmation and runs only after the user confirms it in Gateway: share the manageUrl from the result. Plans limit how many schedules exist and how often one may run; the account limits include the schedule count, and a refusal states the limit. stdin_from and env_from must name values the user stored as saved (kept), never one-time values, and sudo uses the server's saved sudo access.

create_gateway_schedule

Ensure one exact local group exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_group

Ensure an exactly confirmed logical volume exists with the requested allocation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_lvm_logical_volume

Ensure an exactly confirmed unused block device is an LVM physical volume. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_lvm_physical_volume

Ensure an exactly confirmed LVM volume group contains the exact requested physical volumes. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_lvm_volume_group

Ensure one exact validated schedule exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Without sudo, scope auto uses the connecting account's own crontab or systemd --user timers instead of failing; a systemd --user timer keeps running after logout only when lingering is enabled, and the result warns when it is not. Runs on Linux and Windows servers.

create_schedule

Create a safely permissioned swap file at an exact path. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_swap_file

Ensure one exact local account exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

create_user

Reload systemd manager configuration and unit files. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

daemon_reload_systemd

Delete one exact directory with explicit recursion and guarded confirmation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

delete_directory

Delete one exact non-directory path with guarded confirmation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

delete_file

Ensure one exact semantic deny rule exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Runs on Linux and Windows servers.

deny_firewall_rule

Ensure one exact existing firewall rule is disabled without deleting it. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Runs on Linux and Windows servers.

disable_firewall_rule

Ensure one exact managed schedule is disabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Changes only schedules Gateway created. Runs on Linux and Windows servers.

disable_schedule

Ensure an exact swap source is inactive. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

disable_swap

Ensure an exact systemd unit is disabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

disable_systemd_unit

Ensure one exact container is disconnected from one exact Docker network without force. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

disconnect_docker_network

Correlate bounded systemd, listener, process, Docker, and package service evidence. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Runs on Linux and Windows servers.

discover_services

Stop an exact Compose project without deleting volumes. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

down_docker_compose

Create a durable transfer job for a regular remote file after reputation pre-clear. expected_sha256 must be the 64 lowercase hex characters of this file's current SHA-256 digest, without the sha256: prefix; Gateway rejects directories and any changed or mismatched file before artifact reservation. Successful jobs expose a revocable Gateway download link capped to the artifact's 24-hour lifetime.

download_path

Edit one or more files in one job by exact text replacement: up to 20 files, each with up to 50 search and replacement edits applied in order, each with an expected occurrence count (default 1), and an optional expected SHA-256 per file. Every file, hash and occurrence count is checked before anything is written; if any check fails, no file is changed and the result names the file and edit that failed. Each file is then replaced atomically through a temporary file in its own directory, keeping its mode, owner and group. If a later file cannot be written, the files already written are restored to their original content and the result says so. A dry run returns a per-file summary of the change without writing. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

edit_files

Ensure one exact existing firewall rule is enabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Runs on Linux and Windows servers.

enable_firewall_rule

Ensure one exact managed schedule is enabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Changes only schedules Gateway created. Runs on Linux and Windows servers.

enable_schedule

Ensure an exact swap source is active. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run. Runs with sudo. If sudo needs approval from the user, the result includes a Gateway setup link. Linux servers only; a Windows server is refused before any job is created.

enable_swap