The 20 Native MCP tools
The table lists DataRelay Link MCP tool names, required arguments and permissions. Client namespace prefixes may vary. These are AI tool calls, separate from drlink CLI commands.Targets and OS account
Use an endpoint returned by list_hosts/get_host for a Managed Host. server_* and get_server target the Server and do not take endpoint. Generic endpoint=server:self operations require explicit Server management permission. Server-local shell, Git, service and package commands use the configured OS account and AI Access. cwd is an initial-directory check, not a filesystem sandbox for a general shell.Arguments and results
argv is a string array; server_git begins with git. Paths/cwd are absolute. Inspect job_id, state, exit_status, stdout, stderr, execution_user. Running is not successful completion. Resume each stream using next_cursor, or use data_b64 for exact bytes. Retention is at most 1 MiB per stream, 64 KiB per page; inspect cursor eviction. stdin accepts at most 64 KiB; inspect accepted_bytes before retrying unsent bytes. Completed jobs remain up to ten minutes or bounded-history reclamation, not a durable restart-safe queue.
Poll/input/stop recheck current command-exec, identity and job ownership. Another identity cannot control a job simply by knowing its ID. Direct file operations require their own permission, rule-bound paths and OS access.
Server control lab · Client setup