Yaver MCP Policy · 645 Tools

POLICY

How to control Yaver

PolicyLayer is an MCP gateway — it sits between your AI agents and Yaver, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "cloud_scale": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "acl_remove_peer": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "account_connect": {
    "limits": [
      {
        "counter": "account_connect_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "account_list": {
    "limits": [
      {
        "counter": "account_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Yaver — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON YAVER →

Instant setup, no code required.

FULL CATALOGUE

All 645 Yaver tools

FINANCIAL 4 tools

Financial cloud_scale Change Yaver Cloud plan tier. Financial yaver_billing_checkout Get a payment link to subscribe to a Yaver plan. plan="relay" = Relay Pro ($9/mo private relay). plan="workspa Financial yaver_billing_manage Get the link to manage an existing Yaver subscription — update payment, change plan, or cancel. Returns the Ya Financial yaver_managed_cloud_onboarding High-level guided MCP flow for buying and onboarding a Yaver managed cloud machine. Always returns status and

DESTRUCTIVE 41 tools

Destructive acl_remove_peer Disconnect from an MCP peer. Destructive cancel_schedule Cancel/remove a scheduled task by ID. Destructive cloud_destroy Tear down Yaver Cloud deployment (exports data first). Destructive companion_down Disarm a companion project: remove its scheduled crons and stop/remove its durable service units. Destructive data_delete Delete a record by id. Destructive db_push Push schema directly to database (dev only, skips migration files). Destructive db_reset Drop all tables, re-migrate, and re-seed. Requires force=true. Destructive db_restore Restore database from a backup file. Destructive dns_flush Remove all yaver-managed DNS entries and flush DNS cache. Destructive dns_remove Delete a DNS record by id (Cloudflare only — returns a manual removal hint otherwise). Owner-only. Destructive docker_prune Prune Docker resources (containers, images, volumes, networks, or all). Destructive docker_rm Remove a container. Destructive docker_rmi Remove an image. Destructive feedback_delete Remove a feedback report. Destructive. Destructive forgot_password Send a password reset email to an email-authenticated Yaver user. The reset link expires in 1 hour. Rate-limit Destructive git_member_remove Remove a collaborator from a GitHub or GitLab repo and report whether the call used CLI transport or direct RE Destructive git_stash Manage git stashes (list, save, pop, apply, drop). Destructive guest_delete Delete a guest row from YOUR host guest list. This first revokes/cancels any live access, then hides the old i Destructive guest_revoke Remove SOMEONE ELSE'S access to YOUR machines. You are the host here: this kicks a guest out of your own share Destructive jobs_cancel Drop a pending queue job. Destructive machine_onboarding_remove Remove GitHub/GitLab onboarding from the local machine or from one or more owned Yaver machines. Can remove cl Destructive machine_remove Permanently remove Yaver from this owned host machine: unregister the device, remove auto-start service, wipe Destructive migrate_rollback Rollback a migration step. Destructive models_remove Remove an Ollama model to free disk space. Destructive monitor_remove Delete an uptime monitor by id or name. Destructive phone_project_delete Delete a phone project (removes the SQLite file and manifest). Destructive proxy_remove Remove a reverse proxy route. Destructive relay_clear_password Remove the default relay server password. Destructive release_rollback Roll a channel's latest pointer back to a previously published semver. Destructive remote_destroy Destroy a remote VPS. Destructive remove_relay_server Remove a relay server by ID. Destructive runner_queue_clear Drop queued prompts (one session or all). Destructive. Destructive services_remove Remove a service from the local stack. Destructive sourcemaps_delete Remove the source map for a specific app + version tuple. Destructive. Destructive switch_cleanup Delete expired snapshots and pre-switch branches. Destructive switch_rollback Roll back a switch (git branch + env + data restore). Only valid within the 7-day TTL. Destructive tunnel_remove Remove a Cloudflare Tunnel by ID or URL. Destructive yaver_ask_user Ask the human running this Yaver task a single structured question (Claude-Code-style: short 'header' chip + 2 Destructive yaver_auth_factory_reset Reset local Yaver auth state on this machine, then restart sign-in from the canonical hosted backend. Useful w Destructive yaver_auth_logout Clear the saved Yaver auth token from ~/.yaver/config.json on this machine. Daemon is left running — call agen Destructive yaver_clear_logs Clear the agent log file.

EXECUTE 203 tools

Execute acl_add_peer Connect to another MCP server (local or remote). Execute acl_call_peer_tool Call a tool on a connected MCP peer. Execute adb_command Run a command on an Android device via ADB. Execute android_app_install Install a selected Android app APK into Redroid. Arbitrary Play Store restore is intentionally not faked; prov Execute android_app_launch Launch an installed package in Redroid and return visible UI text plus whether it appears installed. Execute android_app_query Launch/query a package in Redroid and report whether visible UI contains query text, plus a needsUser hint for Execute android_lint Run Android lint checks. Execute archive_extract Extract a zip or tar.gz archive. Execute auth_dev_start Start a local auth server for development. Replaces Clerk ($25/mo), Auth0, WorkOS. Execute auth_dev_stop Stop the local auth server. Execute auth_dev_tokens Generate or inspect JWT tokens for API testing. Execute auth_oauth_test Test an OAuth flow end-to-end. Execute backend_start Start PocketBase backend (built-in DB + auth + storage + realtime). Execute backend_stop Stop PocketBase backend. Execute benchmark Run project benchmarks. Auto-detects: go bench, cargo bench, npm bench. Execute browser_click Click an element by CSS selector. Returns a screenshot after clicking. Wait for any animations/navigation to s Execute browser_close Close a browser session and release the Chrome process. Execute browser_evaluate Execute JavaScript in the browser and return the result. Use for complex interactions, reading localStorage/co Execute browser_interactive_start Start a GENERIC human-in-the-loop co-browse: opens a headful browser with a persistent profile, navigates to a Execute browser_interactive_stop Stop an interactive co-browse session. The on-disk profile (cookies/auth) persists so later automation can reu Execute browser_navigate Navigate to a URL. Returns a screenshot of the page after navigation plus the page title. Use this as the firs Execute browser_open Open a new Chrome browser session on the dev machine. Returns a session_id to use in subsequent browser_ calls Execute browser_scroll Scroll the page by pixel offsets. Returns a screenshot after scrolling. Execute browser_select Select a value in a <select> dropdown by CSS selector. Returns a screenshot after selection. Execute browser_type Type text into an input field by CSS selector. Returns a screenshot after typing. Set clear=true to clear exis Execute browser_wait Wait for a CSS selector to become visible on the page. Use before clicking/typing elements that load dynamical Execute browser_wait_navigation Wait for the page URL to change (e.g., after a form submission or OAuth redirect). Execute build_android Discover an Android-capable project in the repo, choose the correct builder for its stack (RN/Expo/Flutter/Kot Execute build_ios Discover an iOS-capable project in the repo, choose the correct builder for its stack (RN/Expo/Flutter/Swift), Execute calculate Evaluate a math expression. Execute cf_d1 Query Cloudflare D1 database. Execute check_run Run all pre-deployment checks (typecheck, lint, format, tests, build, bundle size, security audit, env vars, g Execute check_single Run a single pre-deployment check. Execute cloud_backup Trigger a manual cloud backup. Execute cloud_cli Run AWS, GCP, or Azure CLI commands. Execute cloud_deploy Deploy app to Yaver Cloud (managed Hetzner VPS). Provisions server, deploys Docker containers, sets up SSL/DNS Execute cloud_emu_start Start local cloud emulators. Provider: aws (MinIO/DynamoDB/ElasticMQ), azure (Azurite), gcp (Firebase Emulator Execute cloud_emu_stop Stop local cloud emulators. Execute cloud_redeploy Rebuild and redeploy from latest code. Execute companion_up Arm the companion manifest (yaver.companion.yaml) at repo: schedule HTTP crons on the in-process scheduler and Execute continue_task Continue a stopped or running task with additional input/instructions. Pass device_id to inject the follow-up Execute convex_action Run a Convex action via admin HTTP API. Execute convex_deploy Deploy Convex functions. Execute convex_mutate Run a Convex mutation via admin HTTP API. Execute convex_query Run a Convex query via admin HTTP API (no CLI). Execute convex_run Run a Convex function. Execute copilot_complete Generate a code completion via the dev's local Ollama model. Supports fill-in-the-middle via prefix+suffix for Execute data_query Run a query (SQL for Postgres/Supabase/SQLite, function path for Convex, REST path for PocketBase/Appwrite). Execute db_migrate Run pending database migrations. Auto-detects ORM (Drizzle, Prisma, Goose, Alembic). Execute db_query Execute a database query via CLI (sqlite3, psql, mysql, redis-cli). For adapter-routed queries use data_query. Execute db_seed Run database seed file. Execute db_studio Open database GUI (Drizzle Studio or Prisma Studio). Execute dev_environment_clone_start Start cloning a coding-focused Yaver dev environment. Reuses toolchain sync, repo clone, runner auth verificat Execute device_broadcast_command Push a BlackBox command directly to a paired SDK device (or broadcast to all) without needing an active dev-se Execute device_reauth_start Start Yaver re-auth on an owned remote machine through the existing /auth/recover path. auto picks the safest Execute device_reauth_wait Wait for remote Yaver auth recovery to complete. Preferred usage is recovery_id + wait_token from device_reaut Execute diagnose Run the yaver self-check (binary paths, running procs, ports, auth state, workspace manifest, systemd unit, ru Execute docker_build Build a Docker image from Dockerfile. Execute docker_compose Run docker compose actions (up, down, ps, logs, restart). Execute docker_exec Execute a command inside a Docker container. Execute docker_pull Pull a Docker image. Execute docker_push Push a Docker image to registry. Execute docker_restart Restart a container. Execute docker_start Start a stopped container. Execute docker_stop Stop a running container. Execute domain_ddns_start Start dynamic DNS updater (auto-update Cloudflare DNS when IP changes). Execute domain_setup Full domain setup wizard — detects IP type, guides DNS, configures SSL. Execute drizzle_generate Run drizzle-kit generate. Execute drizzle_push Run drizzle-kit push. Execute droid_input Relay a single input event to the Android device via adb: tap (x,y), text (types a string), key (keyevent keyc Execute droid_launch Launch an installed Android app whose package id contains the given substring, via its LAUNCHER intent (adb mo Execute eas_build Start an EAS Build (Expo). Execute eas_submit Submit to App Store / Play Store via EAS. Execute eslint_check ESLint check (with optional --fix). Execute exec_command Execute a shell command on this machine or an owned remote Yaver device and return the output. Commands are va Execute expose_start Expose a local port to the internet. Replaces ngrok ($10/mo). Uses Cloudflare Quick Tunnel (free, zero config) Execute expose_stop Stop a tunnel. Execute flutter_build Build a Flutter app. Execute flutter_doctor Run flutter doctor to check environment. Execute flutter_test Run Flutter tests. Execute gh_run Run any gh (GitHub CLI) subcommand. Pass the args as a list (no leading gh). Pre-flights install + auth state, Execute github_workflow_run Trigger a GitHub Actions workflow_dispatch run. Execute glab_run Run any glab (GitLab CLI) subcommand. Same shape as gh_run. Blocks credential-printing subcommands and require Execute go_build Build Go project. Execute go_generate Run Go generate. Execute go_pprof_cpu Run Go CPU profiling via test benchmarks or pprof URL. Execute go_pprof_heap Run Go heap profiling. Execute go_staticcheck Run staticcheck. Execute go_test_suite Run Go tests. Execute go_vet_check Run Go vet. Execute gradle_build Run a Gradle build task. Execute gradle_test Run Android unit tests. Execute http_request Make an HTTP request (like curl). Returns status code and response body. Execute infra_power Run a managed power action. ALWAYS call action=report first: it is a read-only dry run that says which power a Execute infra_service_action Start, stop, restart, or inspect a managed service. Scope can be dev (.yaver/services.yaml) or system (systemd Execute jobs_enqueue Enqueue a new background job. Handlers are registered at agent boot; common ones: newsletter.send, form.notify Execute jobs_retry Requeue a DLQ job. Execute jq Query/transform JSON with jq expressions. Execute lint Run linter on the project. Auto-detects: go vet, eslint, ruff/flake8, clippy. Execute machine_repair Deterministically repair an owned machine. restart_agent asks this connected watchdog agent to use Yaver's bac Execute make_clean Run make clean. Execute make_run Run a Make target. Execute migrate_run Execute a migration plan (all steps or a specific step). Execute migrate_verify Run smoke tests after migration to verify everything works. Execute mobile_deploy_to_phone One-shot "put my app on my phone": take the React Native / Expo app in this directory and get it running insid Execute mobile_hermes_doctor Agent-friendly doctor for the common React Native / Expo phone reload path. Resolves the mobile project inside Execute mobile_hermes_reload Trigger a Hermes hot-reload of the React Native / Expo app currently under test. Thin wrapper over POST /dev/r Execute mobile_project_build Start the project's dev server if needed and build the Hermes bundle that Yaver loads on the phone. Works loca Execute mobile_project_prepare Prepare a fresh React Native / Expo clone on this machine or an owned remote Yaver device by auto-installing p Execute models_run Quick inference with a local model. Execute models_serve Start Ollama server if not running. Execute native_build Build or install a native iOS, Android, or Flutter app. Yaver discovers matching mobile projects under work_di Execute npm_run_script Run an npm script (or list all scripts). Execute open_url Open a URL in the default browser. Execute ops Run one verb on one machine. Single API for every Yaver capability (info, run, build, test, deploy, push, relo Execute phone_project_promote Plan (and optionally run) a switch-engine migration from a phone project to any of the 19 switch targets (sqli Execute phone_project_runtime_deploy High-level runtime deploy for a phone sandbox. Can connect provider accounts, promote to Convex Cloud or Cloud Execute ping Ping a host. Execute pkg_install Install a package via any package manager (npm, pip, cargo, go, brew, gem, apt, dart). Execute pod_install Run pod install. Execute port_scan Scan common ports on a host (pure Go, no nmap needed). Execute preview_create Create a branch preview environment (git worktree + build + serve). Execute preview_stop Stop a preview environment. Execute preview_stop_all Stop all preview environments. Execute preview_stop_serving Stop serving the active preview/dev server, regardless of whether it is Expo Web, Vite, Next.js, Flutter Web, Execute prisma_generate Run prisma generate. Execute prisma_push Run prisma db push. Execute project_new_quick One-shot fullstack project scaffold. Skips the interactive wizard and creates a self-hosted-first monorepo (ap Execute proxy_start Start local reverse proxy (Caddy) with HTTPS for local development. Execute proxy_stop Stop the local reverse proxy. Execute publish_ci_dispatch Alias of publish_run for CI-oriented clients. Use allow_github_fallback=true when you want GitHub dispatch as Execute publish_run Run a publish target from .yaver/publish.yaml. Local/self-hosted execution is primary; GitHub fallback is used Execute publish_submit Alias of publish_run. Uses Yaver's uploader/register flow first, then the local submitter, then GitHub fallbac Execute push_android Discover an Android-capable project, build an AAB with the correct stack-specific builder, wait for completion Execute push_ios Discover an iOS-capable project, build an IPA with the correct stack-specific builder, wait for completion, th Execute pytest_suite Run Python tests with pytest. Execute regex_test Test a regex pattern against input text. Execute remote_dev_prepare One-shot remote/self-hosted dev setup: clone or update a repo on an owned Yaver device, set that repo as the t Execute remote_exec Execute a command on a remote machine. Execute remote_provision Spin up a new VPS from phone. Supports Hetzner and DigitalOcean. Execute remote_setup First-time setup of a remote dev machine (installs Docker, Node.js, Git, Yaver agent). Execute run_shortcut Run an Apple Shortcut (macOS only). Execute run_tests Run the project's test suite. Auto-detects framework (go test, jest, vitest, pytest, cargo test, make test) or Execute runner_attach Attach to a live runner tmux session — flip it into user-driven mode so the keeper does NOT nudge while you're Execute runner_auth_browser_cancel Cancel a running runner browser-auth session on the local or a remote machine. Execute runner_auth_browser_start Start the interactive plan-OAuth browser/device-auth login flow for Claude Code or Codex on the local or a rem Execute runner_auth_browser_submit_callback Deliver a localhost OAuth callback URL (http://localhost:<port>/callback?...) into a running runner browser-au Execute runner_auth_browser_submit_code Submit a copied authentication code/token back into a running runner browser-auth session. Execute runner_auth_setup High-level runner bootstrap for a local or remote Yaver machine: install the runner if missing, report whether Execute runner_autorun Force a session's keeper mode to on|off explicitly (bypasses attach/detach). Execute runner_detach Detach the terminal AND flip the session into autorun mode (default). Pass autorun=false to leave the session Execute runner_model_probe Probe which models the installed runner's LOGIN can actually run, by attempting a real generation for each. Us Execute runner_queue_add Enqueue a prompt for a named runner session. The keeper drains the queue one prompt at a time when the pane go Execute sandbox_quickstart One-step containerization setup for Yaver. Picks a practical default, persists it, and optionally starts build Execute sandbox_run Run the Mobile Sandbox edit loop from a headless MCP client. Ships a phone-style React Native / Expo source tr Execute schedule_self Schedule a CONTINUATION of your own work to run later — the way to handle recurring or deferred tasks instead Execute schedule_task Schedule a task to run at a specific time or on a recurring basis. Supports one-shot (runAt), interval-based ( Execute selenium_click Click a CSS selector in a Selenium session. Execute selenium_close Close a Selenium/WebDriver session and release Chrome/ChromeDriver. Execute selenium_navigate Navigate an existing Selenium session to a URL. Execute selenium_search Open a search-results page in Selenium. Default provider is Google; also supports Bing and DuckDuckGo. This is Execute selenium_start Start a first-class Selenium/WebDriver Chrome session on this runtime host. Use for daily browser tasks that s Execute selenium_type Type text into a CSS selector in a Selenium session. Execute service_action Start, stop, restart, enable, or disable a system service. Execute services_start Start all or specific local development services (Postgres, Redis, MinIO, etc.) from .yaver/services.yaml. Execute services_stop Stop all or specific local development services. Execute session_transfer Transfer an AI agent session from THIS machine to another device in one step. The session (conversation histor Execute set_work_dir Change the agent's working directory for task execution. Execute simulator_boot Boot an iOS simulator. Execute ssl_provision Provision a Let's Encrypt certificate for a domain via the installed certbot (http-01 challenge, standalone mo Execute stop_task Stop a running task. Execute storage_start Start local S3-compatible storage (MinIO). Execute storage_stop Stop local MinIO storage. Execute studio_permission_video Start a Redroid-backed Google Play permission-justification video job. Defaults to a narrative proof: start re Execute supabase_db Execute SQL on Supabase database. Execute supabase_deploy Deploy Supabase (db push or function deploy). Execute support_start Open a TeamViewer-style remote-support window on this machine. Returns a 6-char code, a scoped bearer token, a Execute switch_run Execute a previously-planned switch. HARD switches emit a rewrite prompt for the AI agent instead of running i Execute systemctl Manage systemd services (status, start, stop, restart, enable, disable, list, failed, timers). Execute testkit_run Run the yaver-test-sdk specs end-to-end on the dev's machine via the embedded chromedp runner. Returns suite r Execute testkit_self_heal_selector Given a CSS selector that no longer matches and a DOM HTML snapshot, ask the user's vision/text LLM to propose Execute tsc_check TypeScript type checking. Execute type_check Run type checker. Auto-detects: tsc, go build, mypy/pyright. Execute vibe_preview_clip_record Record a short MP4 demo clip from a booted simulator/emulator while the running app is exercised by Maestro (P Execute vibe_preview_start Start a vibe-preview session: headless Chrome captures the dev server URL at adaptive FPS. The mobile app + we Execute vibe_preview_stop Stop a vibe-preview session by project. Idempotent. Execute web_preview_reload Trigger a hot reload on the active web dev server. Execute web_preview_start Start a web dev server (Next.js, Vite, Flutter Web, Expo Web) for a named workspace app. Returns the iframe UR Execute web_preview_stop Stop serving the active web preview. Execute wire_push Build a self-contained native binary (xcodebuild Release / gradle installRelease) and install it on a USB-atta Execute wireless_connect_android Reconnect a previously-paired Android phone over WiFi. Use this when wireless_detect shows the phone as visibl Execute wireless_pair_android Manual one-shot Android wireless pair when you already know the pair host:port (e.g. user typed it from the ph Execute wireless_push Build a self-contained native binary (xcodebuild Release / gradle installRelease) and install it on a WIFI-pai Execute wireless_setup_android First-time Android wireless pairing for AI agents. Prerequisite: the user has tapped 'Pair device with pairing Execute workspace_init Wire every app declared in yaver.workspace.yaml: scaffold init.md, env-check, per-app setup. Call workspace_sc Execute xcode_build Build an Xcode project. Execute xcode_test Run Xcode tests. Execute yaver_auth_poll Run one poll of the device-code authorization. Returns status = pending | authorized | expired. On authorized, Execute yaver_auth_start Start a headless device-code sign-in for Yaver (Apple / GitHub / Google / Microsoft OAuth, passkey, or email-p Execute yaver_auth_wait Block until the device code is authorized, expires, or the timeout fires. Preferred over yaver_auth_poll for c Execute yaver_doctor Run a comprehensive system health check — auth, agent, runners, relay servers, tunnels, network, tmux sessions Execute yaver_lazy_setup One-shot install + auth + mobile-app handoff for a non-developer user being walked through setup by an AI agen Execute yaver_self_host_onboarding High-level guided MCP flow for setting up Yaver on the user's own machine/VPS. Returns normie-friendly next st

WRITE 86 tools

Write account_connect Store credentials for a cloud provider (encrypted at rest). Write account_disconnect Remove stored credentials for a provider. Write add_relay_server Add a relay server for NAT traversal. Write archive_create Create a zip or tar.gz archive. Write auth_dev_users Manage test users in the local auth server. Write auth_oauth_save Save OAuth credentials to .env.local. Write backend_collection_create Create a PocketBase collection. Write backend_users Manage PocketBase auth users. Write cf_kv Manage Cloudflare KV store. Write change_password Change the password of the currently authenticated email user. Requires the current password and a new passwor Write chat_reply Send an owner-side reply to a visitor. Shows up live in the browser widget via SSE. Write clipboard_write Write text to the system clipboard. Write config_set Set a Yaver configuration value. Keys: auto-start, auto-update, headless-keep-awake, require-private-recovery. Write convex_install_helper Write convex/yaver_admin.ts helper functions into a project so the Yaver dashboard can introspect it. Write create_gist Create a GitHub Gist to share code snippets. Write create_task Create a new coding task. By default it runs on this agent's machine; pass device_id to run it on another owne Write data_insert Insert a record (adapter-routed). Write data_update Update a record by id. Write db_generate Generate a new migration from schema changes. Write device_primary_set Mark a device as the primary (auto-connect) target. Accepts a deviceId or unique prefix. Pass clear:true inste Write device_voice_hints_set Set the SPOKEN names for a device — the names a user says out loud, e.g. "my mac mini", "the box at maltepe", Write dns_add Create a DNS record at the user's DNS provider. Uses Cloudflare API when CF_API_TOKEN is set; otherwise return Write docker_cp Copy files between host and container. Write docs_config Point the docs site at a markdown folder, set title / theme / logo. Write domain_add Add domain routing (map domain to an app or port). Write error_resolve Mark an error as resolved with an optional note. The record stays in the ledger but drops off the open-errors Write feedback_create Mint a FeedbackReport programmatically. Optional screenshotSessionId auto-attaches a runtime_frame JPEG. surfa Write feedback_fix Create a task that asks the wrapped AI runner to fix the issue captured in this feedback report. Pulls in the Write git_member_invite Invite a collaborator to a GitHub or GitLab repo using the neutral forge seam, and report whether the call use Write git_oauth_start Start a GitHub or GitLab Device Flow (RFC 8628) authorization on the local machine or a remote owned peer. Ret Write git_push_creds Forward locally detected GitHub/GitLab tokens (gh CLI, env vars, git credential helper, vault) to one or more Write github_issue_create Open a GitHub issue. Write github_pr_create Create a GitHub pull request from the current branch. Write gitignore Generate a .gitignore file for specified languages/frameworks. Write gitlab_issue_create Open a GitLab issue. Write gitlab_mr_create Open a GitLab merge request. Write guest_config View or update guest config (limits, runners, share preset, resource controls). Without email: list all. With Write guest_invite Invite a guest by email or Yaver user id to use your machine. Max 5 guests, invitation expires in 2 days. Defa Write guest_leave Remove YOUR OWN access to SOMEONE ELSE'S machines. You are the guest here: this walks you out of a host's shar Write init_project Scaffold a new project directly (without the interactive wizard). Picks services.yaml presets + writes .yaver/ Write invite Share Yaver with a colleague — copies invite link, opens email, or generates a Slack message. Write license Generate a license file (MIT, Apache, GPL). Write machine_onboarding_apply Configure OpenAI, GitHub, and GitLab onboarding on the local machine or on one or more owned Yaver machines. S Write machine_roles Read, set, or clear the user's primary AI runner and primary renderer. Writes the same machineRolesForProject Write migrate_plan Generate a migration plan between tiers (local, self-hosted, yaver-cloud, vercel, fly, cloudflare, railway). Write monitor_add Register a new uptime monitor for a URL. The agent probes every interval; three consecutive failures fire a pu Write notify Send a desktop notification. Write oauth_client_create Register a new OAuth client. The returned client_secret is only shown once — save it immediately. Write oauth_user_create Create a new OAuth user with a scrypt-hashed password. Write opencode_config_set Patch the OpenCode config on the local or a remote Yaver machine. Each top-level field is optional; pass empty Write phone_project_create Create a new phone-first mini-backend project. Writes schema.yaml, auth.yaml, seed.json, and local.db under ~/ Write phone_project_design_patch Edit the app layout/design WITHOUT touching schema or data. Pass either patches (preferred) or a full design o Write phone_project_import Import a previously exported phone project tgz (base64-encoded). This restores a local SQLite-backed phone san Write phone_project_push Export a local phone project and push it to another reachable Yaver agent via /phone/projects/receive. Use thi Write phone_project_schema Apply a declarative schema update to a phone project. Additive only — adds new tables / columns / indexes. Use Write phone_project_seed Write rows to a phone project's SQLite file from a seed map {tableName:[{column:value}]}. Uses INSERT OR REPLA Write prettier_check Prettier format check or write. Write project_runtime_apply Merge runtime/provider updates into .yaver/project.yaml, optionally connect provider accounts, run manifest ap Write project_self_host_create First-capture MCP tool for a new Yaver user: create the default self-hosted monorepo without asking them to to Write project_wizard_generate Materialise the scaffold for a completed wizard session. Returns the target directory + next-step checklist. P Write project_wizard_start Start a new fullstack project wizard session. Returns sessionId + first question. Call project_wizard_answer r Write proxy_add Add a reverse proxy route (e.g. myapp.local → localhost:3000). Write publish_upload Alias of publish_run for MCP clients that think in terms of an uploader. The target still archives/registers t Write relay_set_password Set the default relay server password used for all relay connections. Write release_rollout Set the rollout percentage for a release channel (0..100). Write runner_auth_credentials_import Copy a runner subscription token (Claude Max / Pro, or ChatGPT Plus / Pro for codex) from an already-signed-in Write runner_auth_set Legacy vault-backed provider auth for OpenCode/GLM provider configuration only. Claude Code and Codex use subs Write sandbox_config Enable/disable container isolation for guest or host tasks. Configure resource limits and network mode. Change Write sdk_token_create Mint a new SDK token (scoped, IP-bound, optional expiry). The raw token is returned exactly once — store it im Write services_add Add a service to the local stack. Presets: postgres, redis, minio, mailpit, umami, posthog, logto, meili, type Write session_import Import a session bundle that was exported from another machine. Creates a new task with the transferred sessio Write set_ios_install_method Set the iOS install method. 'auto' = detect platform (native on macOS+Xcode, bundle otherwise), 'native' = alw Write storage_bucket_create Create an S3 bucket. Write storage_upload Upload a file to S3 storage. Write switch_plan Plan a backend/host switch. Assesses complexity (trivial/easy/medium/hard) and generates ordered steps across Write switch_runner Switch the active AI runner. Available: claude, codex, aider. Write template_use Apply a full-stack template to create a new project. Write totp_disable Disable two-factor authentication. Requires a current 6-digit code from the authenticator (recovery codes are Write totp_enable_begin Start two-factor enrollment. Returns a base32 secret and an otpauth:// URL the user can scan into Microsoft Au Write totp_enable_confirm Confirm two-factor enrollment with a 6-digit code from the authenticator app, enabling 2FA for the account. Re Write tunnel_add Add a Cloudflare Tunnel endpoint for NAT traversal. Write write_file Write content to a file. Creates parent directories if needed. Write yaver_auth_link_start Connect an ADDITIONAL OAuth provider to the currently signed-in account — e.g., user signed up with Apple but Write yaver_auth_merge_start Start a MANUAL account-merge: someone accidentally created two Yaver accounts and wants to fold one into the c Write yaver_auth_merge_wait Poll a merge intent's status until it completes, is cancelled, or expires. Default timeout 180s. Write yaver_auth_unlink Remove an OAuth provider from the currently signed-in account. Refuses if it is the ONLY sign-in method (would

READ 311 tools

Read account_list List all cloud providers and their connection state. Read account_status Show connection state for a provider. Read acl_health Health check all connected MCP peers. Read acl_list_peer_tools List all tools available from a connected MCP peer. Read acl_list_peers List connected MCP peers (other AI tools, databases, services). Read adb_devices List connected Android devices/emulators. Read adb_screenshot Take a screenshot from an Android device. Read android_app_status Check whether an Android package is installed in a user-owned Redroid app-sync surface. Does not read phone ke Read app_review_check Get App Store / Play Store review guidelines, common rejection reasons, and pre-submission checklist. Read appstore_status Check App Store Connect app status (review state, builds). Requires APP_STORE_API_KEY_ID and APP_STORE_API_ISS Read auth_dev_setup Get auth integration code for your frontend framework. Read auth_dev_status Show auth server status: running, port, user count. Read auth_log Show authentication/SSH logs. Read auth_oauth_list List all OAuth providers with their configuration status. Read auth_oauth_migrate Generate instructions for updating OAuth redirect URIs when changing domains. Read auth_oauth_setup Get step-by-step OAuth provider setup guide (Google, Apple, Microsoft, GitHub). Read backend_backup Backup PocketBase data. Read backend_collections List all PocketBase collections (tables). Read backend_records Query PocketBase records. Read backend_schema Show schema (tables + columns + mermaid ERD) for the project's backend. Read backend_setup Get PocketBase SDK integration code for your framework. Read backend_status Show PocketBase status (running, collections, users, storage). Read base64 Base64 encode or decode text. Read browser_extract_attribute Extract an HTML attribute value from an element (e.g., href, src, value, data-). Read browser_extract_text Extract visible text content from an element. Useful for reading API keys, status messages, form values, etc. Read browser_get_dom Get the full page HTML (truncated to 50KB). Use to understand page structure when screenshots aren't enough — Read browser_interactive_status Get the current URL and title of an interactive co-browse session — poll this to detect when the human has fin Read browser_screenshot Capture a screenshot of the current page. Returns base64 PNG. Most action tools (navigate, click, type) alread Read browser_sessions List all active browser sessions with their current URL, title, and age. Read cf_pages List Cloudflare Pages deployments. Read cf_r2 Manage Cloudflare R2 storage (list buckets/objects). Read cf_workers List Cloudflare Worker deployments. Read changelog Generate a changelog from git history between two refs/tags. Read chat_conversations List open chat conversations with the visitors from the self-hosted chat widget. Read chat_history Return the full message history for one conversation (by visitor id). Read clipboard_read Read the system clipboard contents. Read cloud_emu_config Output SDK config snippets for connecting to local emulators. Read cloud_emu_status Show running cloud emulators across all providers. Read cloud_logs Get logs from a cloud-deployed app. Read cloud_plans List available Yaver Cloud plans with specs and pricing. Read cloud_provision Provision a resource on a cloud provider using stored credentials. Hosts: neon, supabase-cloud, turso, cloudfl Read cloud_status Show Yaver Cloud deployment status (containers, CPU, memory, SSL, backups). Read commit_message Get the current git diff to help generate a conventional commit message. Read companion_cron_list List the armed crons for a companion project with their schedules and last outcomes. Read companion_detect Scan a serverless project repo (Supabase / Convex / Cloudflare Workers) and propose a yaver.companion.yaml: to Read companion_status Show a companion project's live state: each cron's schedule, next run, last outcome, and each durable service. Read compiler_version Show compiler version (gcc, clang, rustc, go, etc.). Read console_machines List every machine running a Yaver agent (local Mac/Linux/Windows + Hetzner, AWS, GCP VPSes). Hybrid view acro Read convex_browse Browse documents in a Convex table. Read convex_export Export all data from the local Convex backend (streaming_export). Read convex_local_status Check if the local self-hosted Convex backend is running (port 3210). Read convex_logs Show Convex function logs. Read convex_schema Show the Convex schema.ts for a project. Read convex_tables List tables in the local Convex backend (requires yaver_admin.ts helper). Read copilot_models List the Ollama models the dev has pulled locally. Handy before calling copilot_complete. Read cpu_info Show CPU info (brand, cores, architecture). Read data_browse Browse rows/documents with pagination across any backend. Read data_tables List tables/collections across any supported backend. Read db_backup Backup database (pg_dump / SQLite copy / mysqldump). Read db_schema Show database schema/tables. Read db_status Show database migration status (pending/applied migrations, ORM engine). Read dev_environment_clone_plan Plan cloning a coding-focused Yaver dev environment to an existing Yaver device, SSH host, or managed-cloud ta Read dev_environment_clone_status Read a dev environment clone job by id. Read device_primary_get Get the user's preferred device for auto-connect. Mobile, web, and the CLI use this when the user has multiple Read device_reauth_status Inspect an owned remote Yaver machine's recovery state. Distinguishes healthy, bootstrap, auth-expired, unreac Read df Show disk space usage. Read diff Compare two files and show differences. Read disk_usage Show disk usage. Read dns_list List all yaver-managed DNS entries. Read dns_lookup DNS lookup for a hostname. Read docker_disk_usage Show Docker disk usage. Read docker_history Show image layer history. Read docker_images List Docker images on the machine. Read docker_inspect Inspect a Docker container or image (detailed JSON). Read docker_logs Get logs from a Docker container. Read docker_networks List Docker networks. Read docker_port Show port mappings. Read docker_ps List running Docker containers. Read docker_stats Show live resource usage of all containers. Read docker_top Show processes in a container. Read docker_volumes List Docker volumes. Read docs_list Return the docs site sidebar tree. Read docs_search Substring search across all doc pages. Read domain_check Check if a domain is available or registered. Read domain_detect_ip Detect if machine has a public IP (static_public, dynamic_public, or private_nat). Read domain_dns_check Verify DNS records are correct for a domain. Read domain_list List all domains with SSL status and routing. Read domain_ssl_status Show SSL certificate status for all domains. Read droid_frame Capture the current Android screen and return it as a base64 PNG image (via adb exec-out screencap). Use to se Read droid_status Status of the paired Android device for human-in-the-loop control: serial, screen width/height, focused activi Read droid_ui_texts Dump the current Android view hierarchy (uiautomator) and return the on-screen text values — useful for readin Read du Show directory disk usage. Read emulators List Android emulators (AVDs). Read env_list List environment variables (secrets are masked). Read env_read Read a .env file (secrets are masked). Read epoch Convert between Unix timestamps and human-readable dates. Read error_list List cross-device error records aggregated from every SDK session. Each record has a fingerprint, message, cou Read expo_status Show Expo project config. Read expose_list List active tunnels with their public URLs. Read fake_data Generate fake test data — users, emails, addresses, credit cards. Read feedback_list List recent feedback reports captured from the Feedback SDK (React Native / Flutter / Web). Includes crash log Read feedback_show Return the full feedback report for one id: error metadata, stack, screenshot URL, and a recent-events snapsho Read feedback_speak TTS-summarise the feedback queue via voice_speak. Empty id → summary of the last N reports; id set → read that Read find_large_files Find large files. Read fork_task Switch the coding agent (claude/codex/opencode) for an existing task. Creates a NEW child task running on the Read format_code Format code in the project. Auto-detects: gofmt, prettier, ruff/black, cargo fmt. Read free_memory Show memory/swap usage. Read get_config Get agent configuration (sandbox, auto-start, relay, email, ACL peers). Read get_info Get information about the connected development machine (hostname, working directory, version). Read get_ios_install_method Get the current iOS install method. Returns 'auto' (detect platform), 'native' (xcodebuild+xcrun), or 'bundle' Read get_relay_config List configured relay servers. Read get_system_info Get detailed system info: OS, arch, memory, hostname, running tasks. Read get_task Get detailed information about a specific task, including its full output. If the task recorded a remote demo Read git_blame_file Show line-by-line blame. Read git_branches List branches sorted by recent activity. Read git_ci_status Show recent CI status from the current repo via a neutral git surface. Payload {provider?: auto|github|gitlab, Read git_info Get git repository information. Operations: status (changed files), diff (diff stats), log (last 20 commits), Read git_issues List issues from the current repo via a neutral git surface. Payload {provider?: auto|github|gitlab, directory Read git_log_advanced Advanced git log with filters. Read git_members List who has access to a GitHub or GitLab repo. Resolves explicit repo > directory > cwd and reports whether t Read git_oauth_status Poll the state of an in-flight GitHub/GitLab Device Flow session started via git_oauth_start. Returns state ∈ Read git_prs List pull requests or merge requests from the current repo via a neutral git surface. Payload {provider?: auto Read git_reflog Show reflog (undo history). Read git_remotes List remotes. Read git_shortlog Show commit count by author. Read git_stats Show your git contribution stats — commits, lines, top files, languages. Read git_tags List tags. Read github_badge Generate GitHub badges (CI, stars, license, release) for your README. Read github_ci_status Show recent GitHub Actions workflow runs and their status (requires gh CLI). Read github_issues List issues from the current repo (requires gh CLI). Read github_prs List pull requests from the current repo (requires gh CLI). Read github_releases List GitHub releases. Read github_repo_info Get current repo info (stars, forks, language, license). Read github_stars Get star count for any repo. Read gitlab_ci Show current GitLab CI status. Read gitlab_issues List GitLab issues. Read gitlab_mrs List GitLab merge requests. Read gitlab_pipelines List GitLab CI/CD pipelines. Read go_fmt_check Check Go formatting. Read go_mod_graph Show Go module dependency graph. Read go_mod_tidy Tidy Go modules. Read go_mod_why Explain why a Go module is needed. Read go_module_info Get Go module info from proxy.golang.org. Read go_module_versions List Go module versions. Read go_vulncheck Check Go deps for vulnerabilities. Read guest_accept Accept an invitation SOMEONE ELSE sent YOU, gaining access to their machines. You are the guest here: after th Read guest_list List all guests who have been invited or have access to your machine. Read guest_usage View guest usage stats for today or a specific date. Read hash Hash text with MD5 or SHA256. Read hostname_info Show hostname and OS info. Read http_status Look up what an HTTP status code means. Read http_timing Measure HTTP response time and get basic info. Read infra_summary Return the managed infra summary for this device: machine profile, services, relays, networking, sharing postu Read jobs_list List pending queue + dead-letter jobs. Read jwt_decode Decode a JWT token — shows header, payload, expiry. Read lines_of_code Count lines of code by language. Read list_directory List files and directories at a path. Read list_machines List Yaver mesh machines with online state, hardware slots, runner readiness, and machine profile signatures. Read list_projects List discovered git projects on this machine. Read list_runners List available AI runners (Claude Code, Codex, Aider, etc.) with install status. Read list_schedules List all scheduled and recurring tasks with their status, next run time, and history. Read list_shortcuts List available Apple Shortcuts (macOS only). Read list_tasks List all tasks and their current status (queued, running, completed, failed, stopped). Each task may also expo Read listen_ports Show listening ports and owning processes. Read load_average Show system load average and CPU count. Read loc_count Count lines of code (uses tokei/scc/cloc with fallbacks). Read log_search Search all indexed container logs via SQLite FTS5. Read machine_doctor Deep remote-machine connectivity doctor. For a deviceId/name/alias, checks Convex heartbeat freshness, local+t Read machine_onboarding_status Show whether OpenAI, GitHub, and GitLab are configured on this machine or on one or more owned Yaver machines. Read machine_roles_doctor Validate the saved runner/render split before dispatching work. Reads userSettings.machineRolesByProject, prob Read make_targets List Makefile targets. Read migrate_status Show current migration plan status. Read migrate_targets List all supported migration targets with pros, cons, and costs. Read mobile_platform_matrix Return the source-of-truth platform surface matrix for mobile, TV, watch, car, and AR/VR deployability across Read mobile_project_actions_audit Snowball guard for the mobile Projects surface: verifies every discovered mobile-capable project card has at l Read mobile_project_status Inspect whether a React Native / Expo project on this machine or an owned remote Yaver device is ready for Yav Read models_list List installed Ollama models with sizes. Read models_ps Show currently loaded models and their memory usage. Read models_pull Download an Ollama model. Read models_recommend Recommend models based on your hardware (RAM, GPU). Read models_status Check Ollama status: running, port, GPU, model count. Read monitor_list List every uptime monitor with state, streak, interval, and last-check timestamp. Read net_doctor Deep internet-connectivity troubleshooting. Walks the whole stack in order — interface/DHCP, gateway, internet Read network_connections Show active network connections. Read network_interfaces List all network interfaces with IPs and MACs. Read npm_info Get npm package info — version, downloads, description. Read npm_search Search npm registry. Read npm_versions List versions of an npm package. Read oauth_client_list List registered OAuth clients for the self-hosted identity provider. Read oauth_user_list List registered OAuth users (email + id only, never hashes). Read op_get Look up a 1Password item (passwords masked). Read op_list List 1Password items. Read opencode_config_get Read the OpenCode config (~/.config/opencode/opencode.json or env-overridden path). Returns the resolved path, Read ops_plan Resolve the execution plan for one ops verb without running it. Returns project context, machine placement, an Read ops_verbs List every registered ops verb with its description, payload schema, whether it streams, and whether guests ma Read password_gen Generate a secure random password. Read phone_project_design_get Get the mini-figma design layer (layout order + per-node overrides) for a phone project's app. Read phone_project_export Return a tgz of the project's portable manifest (schema + auth + seed + config + generated DDL). Base64-encode Read phone_project_get Get the full metadata for one phone project — schema, auth, seed, live table/row stats. Read phone_project_list List all phone-first mini-backend projects on this agent. Each project is its own local SQLite-backed Yaver pr Read phone_project_templates List the built-in phone-project templates (blank, crud, todos, notes). Use one of these when calling phone_pro Read phone_project_widget_list List the addressable UI widget nodes of a phone project's app (the mini-figma layer) with their current overri Read playstore_status Check Google Play Console status for an app. Read playstore_track Check Play Store track status (production, beta, alpha). Read pod_outdated Check for outdated CocoaPods dependencies. Read port_check Check what process is using a specific port. Read preview_list List all active preview environments. Read primary_auth Re-auth on the user's primary remote device. With runner empty (default) this refreshes the Yaver session toke Read primary_ping Short reachability + auth check against the user's primary remote device. Returns transport, latency-class inf Read primary_projects List projects discovered by the agent's filesystem scanner on the user's primary remote device. Pass mobile_on Read primary_status Live status of the user's primary remote device — agent version, lifecycle (healthy / ready-to-connect / yaver Read prisma_status Show Prisma migration status. Read process_kill Kill a process by PID. Read process_list List running processes. Optionally filter by name. Read project_context Fetch the repo's agent-guidance files (CLAUDE.md, AGENTS.md, AI_ARCH.md, REMOTE_WORKER.md) plus the project's Read project_runtime Summarize project runtime placement, export targets, provider requirements, and machine resolution for the cur Read project_wizard_answer Submit an answer to the current wizard question. Returns the next question (or 'done' kind when complete). Read proxy_list List all reverse proxy routes. Read proxy_status Show reverse proxy status (running, routes, Caddy PID). Read ps_aux List processes. Sort by cpu/mem, or filter by name. Read ps_tree Show process tree. Read public_ip Get public IP address. Read publish_config_get Load a project's Yaver publish config (.yaver/publish.yaml). Returns the existing config or a scaffold preview Read publish_list List recent publish runs started by this agent. Read publish_status Get the full status of one publish run. Read qr_code Generate a QR code from text. Read read_file Read contents of a file. Limited to 100KB. Read relay_test Test connectivity and latency to configured relay servers (or a specific URL). Read release_list List releases in a self-hosted OTA channel (default: production). Shows latest pointer, rollout percent, and e Read remote_cost Show monthly cost across all remote machines. Read remote_status Dashboard of all remote machines (online/offline, CPU, memory, disk, containers). Read runner_auth_browser_status Read the live state of a previously-started runner browser-auth session on the local or a remote machine. Read runner_auth_status Show whether Claude Code, Codex, and OpenCode are installed and authenticated. Check this before prompting OAu Read runner_queue_list List queued prompts. sessionName filters; empty returns every session. Read runner_status Human-readable status for a named autorun task: phases done/current/remaining, [auto-runner] commits with meta Read sandbox_status Check Docker container sandbox status (available, image ready, containerization settings). Read screenshot Take a screenshot of the current screen. Returns base64-encoded PNG. Works on macOS, Linux (with gnome-screens Read search_content Search for text content inside files (like grep/ripgrep). Returns matching lines with file paths and line numb Read search_files Search for files by name pattern in a directory. Uses glob patterns (e.g. '.go', 'test_.py'). Skips node_modul Read selenium_screenshot Capture a PNG screenshot from a Selenium session. Returns base64 PNG. Read selenium_sessions List active Selenium/WebDriver sessions. Read selenium_snapshot Return the current Selenium page URL, title, and flattened interactable elements. Read selenium_status Check Selenium/WebDriver readiness on this runtime host. Uses SELENIUM_REMOTE_URL/YAVER_SELENIUM_REMOTE_URL wh Read selenium_text Extract visible text from a CSS selector in the Selenium page. Defaults to body. Read service_list List system services and their status. Read service_status Check status of a system service (systemd on Linux, brew services on macOS). Read services_logs Tail logs from a service. Read services_status Show status of all configured local services (running, port, health, memory). Read session_export Export an AI agent session as a portable bundle. The bundle contains conversation history, agent-specific sess Read session_list List AI agent sessions that can be transferred to another machine. Shows task ID, agent type, title, status, a Read simulator_screenshot Take a screenshot from iOS simulator. Read simulators List iOS simulators. Read sourcemaps_list List uploaded source maps — returns {app: [versions]}. Maps are stored locally on the agent. Read sourcemaps_resolve Resolve a compiled line:col against the stored source map for app+version. Returns {source, line, column, name Read ssl_check Check SSL/TLS certificate for a domain — expiry, issuer, SANs. Read storage_bucket_list List all S3 buckets. Read storage_config Get S3-compatible config for app integration (endpoint, access key, secret key). Read storage_list List objects in an S3 bucket. Read storage_presign Generate a presigned URL for an S3 object. Read storage_status Show MinIO status (running, endpoint, buckets, total size). Read studio_job_status Poll a Studio job such as studio_permission_video. Omit jobId to list jobs. Optional device_id polls a remote Read studio_list List native DB dashboards (Drizzle, Supabase, Convex, PocketBase, MinIO, Mailpit, Firebase) with live-probe. Read studio_permission_prose Analyze AndroidManifest.xml for a permission and generate Play Console prose plus a video shot-list. Good for Read supabase_functions List Supabase Edge Functions. Read supabase_migrations List Supabase migrations. Read supabase_status Show Supabase project status. Read support_status Return the active remote-support session (code, expiry, allowed URL prefixes) or {active:false}. Read support_stop Revoke the active remote-support session. Any bearer token redeemed from it stops working on the next request. Read switch_cost Estimate monthly cost across all switch targets based on current project usage. Read switch_history Show all switches for this project, newest first. Read switch_targets List every backend/host target you can switch to. Read system_info Get system information: hostname, OS, CPU count, disk usage, memory, load average. Useful for monitoring headl Read tail_logs Tail log files or system logs (journalctl on Linux, system.log on macOS). Read template_list List available project templates (saas-complete, indie-hacker, api-first, content-site, survey-app). Read testflight_builds List TestFlight builds for an app. Read testkit_flake_report Per-spec failure ratios over the last 100 runs. Use to identify chronically broken or flaky specs that need at Read testkit_last_failure Read the most recent failed run from local history. Returns the spec name, the failing step, the screenshot pa Read testkit_list_specs List the yaver-test-sdk specs in the current project (yaver-tests//.test.yaml). Returns name, path, target, st Read totp_status Show whether two-factor authentication is enabled for the signed-in Yaver user. 2FA is optional and gates only Read tree Show directory tree (auto-excludes node_modules, .git, etc.). Read tree_dir Show directory tree. Read tunnel_list List configured Cloudflare Tunnels. Read tunnel_test Test connectivity to configured Cloudflare Tunnels (or a specific URL). Read uname Show kernel, architecture, hostname info. Read uuid Generate a new UUID v4. Read vibe_preview_clips List recent clips for a project, newest first. Each clip has id, source, status (recording|ready|failed), dura Read vibe_preview_release Answer 'could a new preview session for this project be claimed right now?' — reports the still-active session Read vibe_preview_snapshot Force one capture against an active session. Returns the new frame's seq + content hash. Pair with vibe_previe Read vibe_preview_status List active vibe-preview sessions: project, profile, FPS, mode, frame count, error count. Read vibe_preview_summaries Read recent text summaries for a project (Phase 4). Each entry is a one-sentence description of what visibly c Read web_search Search the web. Use this for current information: competitor research, market gaps, library docs, error messag Read wifi_info Get WiFi network information. Read wire_detect List USB-cable-attached iPhones/iPads (xcrun devicectl, falls back to xctrace) plus Android devices (adb devic Read wireless_detect List WiFi-paired iPhones/iPads (xcrun devicectl over network) AND Android devices (adb devices), PLUS Android Read workspace_list Return apps declared in yaver.workspace.yaml, ordered by dependency (leaf-first). Read workspace_scaffold Detect apps in the current directory and return a starter yaver.workspace.yaml. Does NOT write the file — call Read workspace_status Per-app runtime status: on-disk presence, init.md freshness, missing env vars. Read-only. Read workspace_web_apps Return workspace apps whose stack maps to a web surface (nextjs, vite, flutter, react-native-expo). Used by th Read yaver_ask Ask a natural-language QUESTION about this repository / machine and get a deep, grounded answer instead of jus Read yaver_auth_capabilities Report deployment auth capabilities, including whether owner/test email-password sign-in is currently enabled. Read yaver_auth_link_wait Poll the account's linked identities until the requested provider appears (or timeout). Preferred over manual Read yaver_auth_list_identities List every sign-in identity (Apple / GitHub / GitLab / Google / Microsoft / email-password) linked to the curr Read yaver_auth_status Report Yaver's own sign-in state on this machine: whether a valid Apple/GitHub/Google/Microsoft/email-password Read yaver_billing_status Check the user's current Yaver plan: Free, Relay Pro, or Cloud Workspace; included Cloud Workspace active-hour Read yaver_devices List all registered devices across your account (dev machines, laptops, servers) with online/offline status. Read yaver_health_deep Per-subsystem actionable health: agent HTTP mux, tmux availability, runner keeper + per-session status (idle / Read yaver_help Answer 'how do I do X with Yaver?' questions. Call this whenever the user wonders what Yaver can do, which fea Read yaver_logs View the last N lines of the agent log file. Read yaver_onboard Drive the first-run onboarding flow for a fresh Yaver install. Returns the ordered checklist of steps the user Read yaver_ping Ping the agent to verify it's alive and measure round-trip time. Read yaver_status Show auth status, agent info, current runner, relay servers, and connection details. Like 'yaver status' on th

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Yaver

Can an AI agent move money through the Yaver MCP server? +

Yes. The Yaver server exposes 4 financial tools including cloud_scale, yaver_billing_checkout, yaver_billing_manage. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Yaver MCP server? +

Yes. The Yaver server exposes 41 destructive tools including acl_remove_peer, cancel_schedule, cloud_destroy. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Yaver? +

The Yaver server has 86 write tools including account_connect, account_disconnect, add_relay_server. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Yaver.

How many tools does the Yaver MCP server expose? +

645 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 311 are read-only. 334 can modify, create, or delete data.

How do I enforce a policy on Yaver? +

Register the Yaver MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Yaver

What Yaver exposes to your agents

What Yaver costs in tokens

The most dangerous Yaver tools

How to control Yaver

All 645 Yaver tools

Related servers

Questions about Yaver

Enforce policy on every Yaver tool call.