Gateway

Move future work for an existing server to an explicit destination region without replacing its server ID, SSH identity, host-key trust, history, or metadata. Gateway verifies the existing endpoint, trusted host key, and managed identity from the destination before committing. Existing jobs are not cancelled; wait_for_active_jobs requests a strict drain before cutover. wait_seconds only bounds this MCP call and never cancels the durable verification job.

set_server_region

Run a non-modifying ext4 or XFS check on an exact unmounted block device. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

check_filesystem

Check whether an exact semantic flow is allowed. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

check_firewall_rule

Return only whether this lowercase SHA-256 is currently in Gateway global malicious-file reputation. false means unknown, never clean or safe.

is_known_malicious

Read the normalized configuration for one exact Compose project. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

config_docker_compose

Ensure one exact container is connected to one exact Docker network. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

connect_docker_network

Copy one exact local path to an exact destination. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

copy_file

Copy one exact container path to an exact guarded host path. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

copy_from_docker_container

Copy one exact host path to an exact path in one exact container. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

copy_to_docker_container

Copy one exact regular file directly between two owned Gateway servers. Gateway coordinates and audits the operation, but file contents flow directly between the source and destination hosts and never pass through Gateway executors, the application server, artifact storage, or R2. Uses short-lived transfer-scoped authorization and supports files up to 50 GB. Overwrite behavior is always explicit.

copy_between_servers

Create an exact archive from explicit source paths. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_archive

Ensure one exact directory exists with requested metadata. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_directory

Ensure selected service containers are created without starting them. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_docker_compose

Create one exactly named Docker container from a local image and bounded configuration. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_docker_container

Ensure one exactly named Docker network exists with bounded IPAM configuration. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_docker_network

Ensure one exactly named Docker volume exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_docker_volume

Ensure one exact local group exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_group

Ensure an exactly confirmed logical volume exists with the requested allocation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_lvm_logical_volume

Ensure an exactly confirmed unused block device is an LVM physical volume. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_lvm_physical_volume

Ensure an exactly confirmed LVM volume group contains the exact requested physical volumes. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_lvm_volume_group

Ensure one exact validated schedule exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_schedule

Create a safely permissioned swap file at an exact path. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_swap_file

Ensure one exact local account exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

create_user

Reload systemd manager configuration and unit files. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

daemon_reload_systemd

Delete one exact directory with explicit recursion and guarded confirmation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

delete_directory

Delete one exact non-directory path with guarded confirmation. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

delete_file

Ensure one exact semantic deny rule exists. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

deny_firewall_rule

Ensure one exact managed schedule is disabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

disable_schedule

Ensure an exact swap source is inactive. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

disable_swap

Ensure an exact systemd unit is disabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

disable_systemd_unit

Ensure one exact container is disconnected from one exact Docker network without force. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

disconnect_docker_network

Correlate bounded systemd, listener, process, Docker, and package service evidence. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

discover_services

Stop an exact Compose project without deleting volumes. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

down_docker_compose

Create a durable transfer job for a regular remote file after reputation pre-clear. expected_sha256 must be the 64 lowercase hex characters from hash_file's sha256 digest for this path; Gateway rejects directories and any changed or mismatched file before artifact reservation. Successful jobs expose a revocable Gateway download link capped to the artifact's 24-hour lifetime.

download_path

Ensure one exact managed schedule is enabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

enable_schedule

Ensure an exact swap source is active. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

enable_swap

Ensure an exact systemd unit is enabled. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

enable_systemd_unit

Ensure one narrowly structured rule in an exact Gateway-managed sudoers drop-in. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history. Supports dry-run.

ensure_sudoers_rule

Atomically materialize encrypted attempt-bound contents at a normalized Linux path using fail-closed no-follow handling, optional owner/group/mode, and none/sudo/auto privilege. The value is never stored in the job, queue, MCP result, command argv, or logs.

secret_file_ensure

Execute an exact argv vector in one exact running container. Runs as a durable typed operation with exact targets, structured results, and normal job/audit history.

exec_docker_container