> ## Documentation Index
> Fetch the complete documentation index at: https://link.datarelay.run/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP Tool Reference

> Arguments, permissions and job results for all 20 native tools.

# The 20 Native MCP tools

The table lists DataRelay Link MCP tool names, required arguments and permissions. Client namespace prefixes may vary. These are AI tool calls, separate from drlink CLI commands.

| Tool | Required arguments | DRLink permission | Purpose |
| - | - | - | - |
| **get\_server** | None | host-info | Discover the authorized Server itself |
| **list\_hosts** | None | host-info | List accessible Managed Hosts |
| **get\_host** | endpoint | host-info | Inspect a Managed Host |
| **get\_system\_info** | endpoint | host-info | Read system identity |
| **list\_processes** | endpoint | process-read | Read processes |
| **read\_file** | endpoint, path | file-read | Read a scoped file |
| **write\_file** | endpoint, path, content | file-write | Write a scoped file |
| **delete\_file** | endpoint, path | file-write | Delete a regular file |
| **upload\_file** | endpoint, path, content | file-upload | Upload file content |
| **download\_file** | endpoint, path | file-download | Download file content |
| **exec** | endpoint, command | command-exec | Execute on the selected target |
| **server\_read\_file** | path | file-read | Read Server-local file |
| **server\_write\_file** | path, content | file-write | Write Server-local file |
| **server\_delete\_file** | path | file-write | Delete Server-local file |
| **server\_run** | cwd, argv | command-exec | Run general argv in full-control mode |
| **server\_exec** | cwd, command | command-exec | Execute a shell command |
| **server\_git** | cwd, argv | command-exec | Run Git including local commit/push |
| **server\_job\_poll** | job\_id | command-exec | Read job state and output |
| **server\_job\_input** | job\_id | command-exec | Send stdin/EOF |
| **server\_job\_stop** | job\_id | command-exec | Stop the caller-owned job |

## Targets and OS account

Use an endpoint returned by **list\_hosts/get\_host** for a Managed Host. **server\_**\* and get\_server target the Server and do not take endpoint. Generic endpoint=server:self operations require explicit Server management permission.

Server-local shell, Git, service and package commands use the configured OS account and AI Access. **cwd is an initial-directory check, not a filesystem sandbox for a general shell.**

## Arguments and results

| Tools | Optional arguments / behavior |
| - | - |
| server\_exec / server\_run / server\_git | timeout\_seconds: 1–86400, default 3600; wait\_ms: 0–5000, default 1000 |
| server\_job\_poll | stdout\_cursor / stderr\_cursor: byte offsets, default 0; wait\_ms: 0–5000 |
| server\_job\_input | data: UTF-8 string, default empty; eof: boolean, default false |

argv is a string array; server\_git begins with git. Paths/cwd are absolute. Inspect **job\_id, state, exit\_status, stdout, stderr, execution\_user**. Running is not successful completion. Resume each stream using **next\_cursor**, or use **data\_b64** for exact bytes. Retention is at most 1 MiB per stream, 64 KiB per page; inspect cursor eviction. stdin accepts at most 64 KiB; inspect **accepted\_bytes** before retrying unsent bytes. Completed jobs remain up to ten minutes or bounded-history reclamation, not a durable restart-safe queue.

Poll/input/stop recheck current command-exec, identity and job ownership. Another identity cannot control a job simply by knowing its ID. Direct file operations require their own permission, rule-bound paths and OS access.

[Server control lab](https://link.datarelay.run/use-cases/ai-server-control.md) · [Client setup](https://link.datarelay.run/guides/mcp-clients.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.