# Mcp Control Plane MCP server

Agent View of the PolicyLayer registry record for Mcp Control Plane: identity, probed posture, risk grade, and all 286 tools classified. HTML page: https://policylayer.com/tools/mcp-control-plane

## Facts

- Server id: `albertik322-sudo/mcp-control-plane`
- Homepage: https://github.com/albertik322-sudo/mcp-control-plane
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 286
- Tool categories present: Destructive, Execute, Read, Write
- Tags: mcp control plane, admin, automation
- Record last modified: 2026-07-31T10:46:37.316Z

## Tools (286)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `request_durable_task_cancel` | Destructive | Critical | https://policylayer.com/tools/mcp-control-plane/request-durable-task-cancel.md |
| `steam_rom_manager_cli` | Destructive | Critical | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-cli.md |
| `steam_rom_manager_nuke` | Destructive | Critical | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-nuke.md |
| `steam_rom_manager_remove` | Destructive | Critical | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-remove.md |
| `activate_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/activate-window.md |
| `admin_run` | Execute | High | https://policylayer.com/tools/mcp-control-plane/admin-run.md |
| `api_sentence` | Execute | High | https://policylayer.com/tools/mcp-control-plane/api-sentence.md |
| `apply_unified_patch_remote` | Execute | High | https://policylayer.com/tools/mcp-control-plane/apply-unified-patch-remote.md |
| `apt_maintenance` | Execute | High | https://policylayer.com/tools/mcp-control-plane/apt-maintenance.md |
| `call_service` | Execute | High | https://policylayer.com/tools/mcp-control-plane/call-service.md |
| `click` | Execute | High | https://policylayer.com/tools/mcp-control-plane/click.md |
| `click_at` | Execute | High | https://policylayer.com/tools/mcp-control-plane/click-at.md |
| `click_in_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/click-in-window.md |
| `comfy_generate_from_asset` | Execute | High | https://policylayer.com/tools/mcp-control-plane/comfy-generate-from-asset.md |
| `comfy_interrupt` | Execute | High | https://policylayer.com/tools/mcp-control-plane/comfy-interrupt.md |
| `comfy_restart` | Execute | High | https://policylayer.com/tools/mcp-control-plane/comfy-restart.md |
| `deck_exec` | Execute | High | https://policylayer.com/tools/mcp-control-plane/deck-exec.md |
| `deck_probe` | Execute | High | https://policylayer.com/tools/mcp-control-plane/deck-probe.md |
| `dns_test` | Execute | High | https://policylayer.com/tools/mcp-control-plane/dns-test.md |
| `docker_compose` | Execute | High | https://policylayer.com/tools/mcp-control-plane/docker-compose.md |
| `docker_container_action` | Execute | High | https://policylayer.com/tools/mcp-control-plane/docker-container-action.md |
| `docker_exec` | Execute | High | https://policylayer.com/tools/mcp-control-plane/docker-exec.md |
| `double_click` | Execute | High | https://policylayer.com/tools/mcp-control-plane/double-click.md |
| `drag_to` | Execute | High | https://policylayer.com/tools/mcp-control-plane/drag-to.md |
| `focus_window_win32` | Execute | High | https://policylayer.com/tools/mcp-control-plane/focus-window-win32.md |
| `hold_key` | Execute | High | https://policylayer.com/tools/mcp-control-plane/hold-key.md |
| `hotkey` | Execute | High | https://policylayer.com/tools/mcp-control-plane/hotkey.md |
| `install_flatpak_emulators` | Execute | High | https://policylayer.com/tools/mcp-control-plane/install-flatpak-emulators.md |
| `key_down` | Execute | High | https://policylayer.com/tools/mcp-control-plane/key-down.md |
| `key_up` | Execute | High | https://policylayer.com/tools/mcp-control-plane/key-up.md |
| `launch_app` | Execute | High | https://policylayer.com/tools/mcp-control-plane/launch-app.md |
| `launch_desktop_app` | Execute | High | https://policylayer.com/tools/mcp-control-plane/launch-desktop-app.md |
| `maximize_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/maximize-window.md |
| `media_player` | Execute | High | https://policylayer.com/tools/mcp-control-plane/media-player.md |
| `minimize_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/minimize-window.md |
| `move_mouse` | Execute | High | https://policylayer.com/tools/mcp-control-plane/move-mouse.md |
| `nextcloud_occ` | Execute | High | https://policylayer.com/tools/mcp-control-plane/nextcloud-occ.md |
| `notify_deck` | Execute | High | https://policylayer.com/tools/mcp-control-plane/notify-deck.md |
| `open_emudeck_download_page` | Execute | High | https://policylayer.com/tools/mcp-control-plane/open-emudeck-download-page.md |
| `open_url` | Execute | High | https://policylayer.com/tools/mcp-control-plane/open-url.md |
| `paste_text` | Execute | High | https://policylayer.com/tools/mcp-control-plane/paste-text.md |
| `paste_url_in_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/paste-url-in-window.md |
| `ping` | Execute | High | https://policylayer.com/tools/mcp-control-plane/ping.md |
| `postgres_query` | Execute | High | https://policylayer.com/tools/mcp-control-plane/postgres-query.md |
| `powershell` | Execute | High | https://policylayer.com/tools/mcp-control-plane/powershell.md |
| `powershell_encoded` | Execute | High | https://policylayer.com/tools/mcp-control-plane/powershell-encoded.md |
| `powershell_script` | Execute | High | https://policylayer.com/tools/mcp-control-plane/powershell-script.md |
| `powershell_script_utf8` | Execute | High | https://policylayer.com/tools/mcp-control-plane/powershell-script-utf8.md |
| `press` | Execute | High | https://policylayer.com/tools/mcp-control-plane/press.md |
| `rebuild_search_index` | Execute | High | https://policylayer.com/tools/mcp-control-plane/rebuild-search-index.md |
| `reposition_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/reposition-window.md |
| `resize_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/resize-window.md |
| `restart_steam_game_mode` | Execute | High | https://policylayer.com/tools/mcp-control-plane/restart-steam-game-mode.md |
| `restore_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/restore-window.md |
| `run` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run.md |
| `run_command` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-command.md |
| `run_powershell` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-powershell.md |
| `run_python_script` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-python-script.md |
| `run_recipe` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-recipe.md |
| `run_script` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-script.md |
| `run_sudo_command` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-sudo-command.md |
| `run_tasks` | Execute | High | https://policylayer.com/tools/mcp-control-plane/run-tasks.md |
| `scroll` | Execute | High | https://policylayer.com/tools/mcp-control-plane/scroll.md |
| `scroll_in_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/scroll-in-window.md |
| `service_control` | Execute | High | https://policylayer.com/tools/mcp-control-plane/service-control.md |
| `set_window_bounds_win32` | Execute | High | https://policylayer.com/tools/mcp-control-plane/set-window-bounds-win32.md |
| `ssh` | Execute | High | https://policylayer.com/tools/mcp-control-plane/ssh.md |
| `start_homeassistant_tunnel` | Execute | High | https://policylayer.com/tools/mcp-control-plane/start-homeassistant-tunnel.md |
| `start_implementation_branch` | Execute | High | https://policylayer.com/tools/mcp-control-plane/start-implementation-branch.md |
| `steam_rom_manager_add` | Execute | High | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-add.md |
| `stop_tunnel` | Execute | High | https://policylayer.com/tools/mcp-control-plane/stop-tunnel.md |
| `submit_durable_tasks` | Execute | High | https://policylayer.com/tools/mcp-control-plane/submit-durable-tasks.md |
| `submit_tasks` | Execute | High | https://policylayer.com/tools/mcp-control-plane/submit-tasks.md |
| `toggle` | Execute | High | https://policylayer.com/tools/mcp-control-plane/toggle.md |
| `traceroute` | Execute | High | https://policylayer.com/tools/mcp-control-plane/traceroute.md |
| `turn_off` | Execute | High | https://policylayer.com/tools/mcp-control-plane/turn-off.md |
| `turn_on` | Execute | High | https://policylayer.com/tools/mcp-control-plane/turn-on.md |
| `type_text` | Execute | High | https://policylayer.com/tools/mcp-control-plane/type-text.md |
| `wait_batch` | Execute | High | https://policylayer.com/tools/mcp-control-plane/wait-batch.md |
| `wait_for_window` | Execute | High | https://policylayer.com/tools/mcp-control-plane/wait-for-window.md |
| `window_action_win32` | Execute | High | https://policylayer.com/tools/mcp-control-plane/window-action-win32.md |
| `ws_command` | Execute | High | https://policylayer.com/tools/mcp-control-plane/ws-command.md |
| `yandex_station_command` | Execute | High | https://policylayer.com/tools/mcp-control-plane/yandex-station-command.md |
| `yandex_station_say` | Execute | High | https://policylayer.com/tools/mcp-control-plane/yandex-station-say.md |
| `yandex_station_say_by_name` | Execute | High | https://policylayer.com/tools/mcp-control-plane/yandex-station-say-by-name.md |
| `active_window` | Read | Low | https://policylayer.com/tools/mcp-control-plane/active-window.md |
| `admin_audit_log` | Read | Low | https://policylayer.com/tools/mcp-control-plane/admin-audit-log.md |
| `admin_capabilities` | Read | Low | https://policylayer.com/tools/mcp-control-plane/admin-capabilities.md |
| `admin_plan` | Read | Low | https://policylayer.com/tools/mcp-control-plane/admin-plan.md |
| `admin_result` | Read | Low | https://policylayer.com/tools/mcp-control-plane/admin-result.md |
| `agent_branch_prompt` | Read | Low | https://policylayer.com/tools/mcp-control-plane/agent-branch-prompt.md |
| `agent_branch_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/agent-branch-status.md |
| `agent_context_pack` | Read | Low | https://policylayer.com/tools/mcp-control-plane/agent-context-pack.md |
| `agent_integration_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/agent-integration-summary.md |
| `ai_service_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/ai-service-status.md |
| `apt_security_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/apt-security-summary.md |
| `apt_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/apt-summary.md |
| `areas` | Read | Low | https://policylayer.com/tools/mcp-control-plane/areas.md |
| `arp_table` | Read | Low | https://policylayer.com/tools/mcp-control-plane/arp-table.md |
| `batch_read_emails` | Read | Low | https://policylayer.com/tools/mcp-control-plane/batch-read-emails.md |
| `batch_results` | Read | Low | https://policylayer.com/tools/mcp-control-plane/batch-results.md |
| `batch_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/batch-status.md |
| `battery_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/battery-status.md |
| `boot_errors` | Read | Low | https://policylayer.com/tools/mcp-control-plane/boot-errors.md |
| `bridge_ports` | Read | Low | https://policylayer.com/tools/mcp-control-plane/bridge-ports.md |
| `change_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/change-summary.md |
| `comfy_queue` | Read | Low | https://policylayer.com/tools/mcp-control-plane/comfy-queue.md |
| `comfy_system_stats` | Read | Low | https://policylayer.com/tools/mcp-control-plane/comfy-system-stats.md |
| `config` | Read | Low | https://policylayer.com/tools/mcp-control-plane/config.md |
| `connections` | Read | Low | https://policylayer.com/tools/mcp-control-plane/connections.md |
| `containers` | Read | Low | https://policylayer.com/tools/mcp-control-plane/containers.md |
| `context_overview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/context-overview.md |
| `database_stats` | Read | Low | https://policylayer.com/tools/mcp-control-plane/database-stats.md |
| `deck_system_overview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/deck-system-overview.md |
| `defender_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/defender-status.md |
| `devices` | Read | Low | https://policylayer.com/tools/mcp-control-plane/devices.md |
| `dhcp_leases` | Read | Low | https://policylayer.com/tools/mcp-control-plane/dhcp-leases.md |
| `dhcp_servers` | Read | Low | https://policylayer.com/tools/mcp-control-plane/dhcp-servers.md |
| `discover_emulation_roots` | Read | Low | https://policylayer.com/tools/mcp-control-plane/discover-emulation-roots.md |
| `disk_health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/disk-health.md |
| `dns_cache` | Read | Low | https://policylayer.com/tools/mcp-control-plane/dns-cache.md |
| `dns_settings` | Read | Low | https://policylayer.com/tools/mcp-control-plane/dns-settings.md |
| `doc_drift_check` | Read | Low | https://policylayer.com/tools/mcp-control-plane/doc-drift-check.md |
| `doc_drift_report` | Read | Low | https://policylayer.com/tools/mcp-control-plane/doc-drift-report.md |
| `doc_drift_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/doc-drift-snapshot.md |
| `docker_compose_projects` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-compose-projects.md |
| `docker_disk_usage` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-disk-usage.md |
| `docker_health_overview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-health-overview.md |
| `docker_images` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-images.md |
| `docker_info` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-info.md |
| `docker_inspect` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-inspect.md |
| `docker_logs` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-logs.md |
| `docker_networks` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-networks.md |
| `docker_prune_preview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-prune-preview.md |
| `docker_ps` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-ps.md |
| `docker_security_audit` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-security-audit.md |
| `docker_stats` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-stats.md |
| `docker_unhealthy` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-unhealthy.md |
| `docker_volumes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/docker-volumes.md |
| `durable_task_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/durable-task-status.md |
| `emudeck_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/emudeck-status.md |
| `entities` | Read | Low | https://policylayer.com/tools/mcp-control-plane/entities.md |
| `event_log` | Read | Low | https://policylayer.com/tools/mcp-control-plane/event-log.md |
| `export_config` | Read | Low | https://policylayer.com/tools/mcp-control-plane/export-config.md |
| `firewall_address_lists` | Read | Low | https://policylayer.com/tools/mcp-control-plane/firewall-address-lists.md |
| `firewall_filters` | Read | Low | https://policylayer.com/tools/mcp-control-plane/firewall-filters.md |
| `flatpak_emulator_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/flatpak-emulator-status.md |
| `generate_emulation_report` | Read | Low | https://policylayer.com/tools/mcp-control-plane/generate-emulation-report.md |
| `get_clipboard` | Read | Low | https://policylayer.com/tools/mcp-control-plane/get-clipboard.md |
| `get_document` | Read | Low | https://policylayer.com/tools/mcp-control-plane/get-document.md |
| `get_screen_size` | Read | Low | https://policylayer.com/tools/mcp-control-plane/get-screen-size.md |
| `get_source_context` | Read | Low | https://policylayer.com/tools/mcp-control-plane/get-source-context.md |
| `grafana_dashboard` | Read | Low | https://policylayer.com/tools/mcp-control-plane/grafana-dashboard.md |
| `grafana_dashboards` | Read | Low | https://policylayer.com/tools/mcp-control-plane/grafana-dashboards.md |
| `grep_files` | Read | Low | https://policylayer.com/tools/mcp-control-plane/grep-files.md |
| `hardware_overview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/hardware-overview.md |
| `health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/health.md |
| `history` | Read | Low | https://policylayer.com/tools/mcp-control-plane/history.md |
| `homelab_health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/homelab-health.md |
| `homelab_latency_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/homelab-latency-snapshot.md |
| `homepage_config` | Read | Low | https://policylayer.com/tools/mcp-control-plane/homepage-config.md |
| `homepage_logs` | Read | Low | https://policylayer.com/tools/mcp-control-plane/homepage-logs.md |
| `implementation_branch_results` | Read | Low | https://policylayer.com/tools/mcp-control-plane/implementation-branch-results.md |
| `implementation_branch_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/implementation-branch-status.md |
| `inspect_window` | Read | Low | https://policylayer.com/tools/mcp-control-plane/inspect-window.md |
| `interface_traffic` | Read | Low | https://policylayer.com/tools/mcp-control-plane/interface-traffic.md |
| `interfaces` | Read | Low | https://policylayer.com/tools/mcp-control-plane/interfaces.md |
| `ip_addresses` | Read | Low | https://policylayer.com/tools/mcp-control-plane/ip-addresses.md |
| `ip_services` | Read | Low | https://policylayer.com/tools/mcp-control-plane/ip-services.md |
| `journal` | Read | Low | https://policylayer.com/tools/mcp-control-plane/journal.md |
| `laptop_health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/laptop-health.md |
| `list_accounts` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-accounts.md |
| `list_agent_branches` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-agent-branches.md |
| `list_batches` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-batches.md |
| `list_changes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-changes.md |
| `list_checkpoints` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-checkpoints.md |
| `list_dir` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-dir.md |
| `list_durable_tasks` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-durable-tasks.md |
| `list_folders` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-folders.md |
| `list_implementation_branches` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-implementation-branches.md |
| `list_processes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-processes.md |
| `list_recipes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-recipes.md |
| `list_rom_systems` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-rom-systems.md |
| `list_roms` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-roms.md |
| `list_sources` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-sources.md |
| `list_windows` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-windows.md |
| `list_windows_win32` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-windows-win32.md |
| `list_workflow_assets` | Read | Low | https://policylayer.com/tools/mcp-control-plane/list-workflow-assets.md |
| `login_audit` | Read | Low | https://policylayer.com/tools/mcp-control-plane/login-audit.md |
| `mcp_extension_support` | Read | Low | https://policylayer.com/tools/mcp-control-plane/mcp-extension-support.md |
| `mouse_position` | Read | Low | https://policylayer.com/tools/mcp-control-plane/mouse-position.md |
| `nat_rules` | Read | Low | https://policylayer.com/tools/mcp-control-plane/nat-rules.md |
| `neighbors` | Read | Low | https://policylayer.com/tools/mcp-control-plane/neighbors.md |
| `network_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/network-summary.md |
| `nextcloud_log` | Read | Low | https://policylayer.com/tools/mcp-control-plane/nextcloud-log.md |
| `nextcloud_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/nextcloud-status.md |
| `packages` | Read | Low | https://policylayer.com/tools/mcp-control-plane/packages.md |
| `performance_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/performance-snapshot.md |
| `pixel_color` | Read | Low | https://policylayer.com/tools/mcp-control-plane/pixel-color.md |
| `ports_list` | Read | Low | https://policylayer.com/tools/mcp-control-plane/ports-list.md |
| `powershell_runtime` | Read | Low | https://policylayer.com/tools/mcp-control-plane/powershell-runtime.md |
| `probe` | Read | Low | https://policylayer.com/tools/mcp-control-plane/probe.md |
| `process_groups` | Read | Low | https://policylayer.com/tools/mcp-control-plane/process-groups.md |
| `process_impact_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/process-impact-snapshot.md |
| `process_info` | Read | Low | https://policylayer.com/tools/mcp-control-plane/process-info.md |
| `process_list` | Read | Low | https://policylayer.com/tools/mcp-control-plane/process-list.md |
| `prometheus_alerts` | Read | Low | https://policylayer.com/tools/mcp-control-plane/prometheus-alerts.md |
| `prometheus_query` | Read | Low | https://policylayer.com/tools/mcp-control-plane/prometheus-query.md |
| `prometheus_range_query` | Read | Low | https://policylayer.com/tools/mcp-control-plane/prometheus-range-query.md |
| `prometheus_rules` | Read | Low | https://policylayer.com/tools/mcp-control-plane/prometheus-rules.md |
| `prometheus_targets` | Read | Low | https://policylayer.com/tools/mcp-control-plane/prometheus-targets.md |
| `raw_get` | Read | Low | https://policylayer.com/tools/mcp-control-plane/raw-get.md |
| `read_attachment` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-attachment.md |
| `read_email` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-email.md |
| `read_file` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-file.md |
| `read_file_base64` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-file-base64.md |
| `read_text_file` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-text-file.md |
| `read_thread` | Read | Low | https://policylayer.com/tools/mcp-control-plane/read-thread.md |
| `refresh_context` | Read | Low | https://policylayer.com/tools/mcp-control-plane/refresh-context.md |
| `resource` | Read | Low | https://policylayer.com/tools/mcp-control-plane/resource.md |
| `router_health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/router-health.md |
| `router_logs` | Read | Low | https://policylayer.com/tools/mcp-control-plane/router-logs.md |
| `routes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/routes.md |
| `safe_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/safe-snapshot.md |
| `scan_bios` | Read | Low | https://policylayer.com/tools/mcp-control-plane/scan-bios.md |
| `screenshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot.md |
| `screenshot_active_window` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-active-window.md |
| `screenshot_active_window_optimized` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-active-window-optimized.md |
| `screenshot_optimized` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-optimized.md |
| `screenshot_region` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-region.md |
| `screenshot_region_optimized` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-region-optimized.md |
| `screenshot_window` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-window.md |
| `screenshot_window_optimized` | Read | Low | https://policylayer.com/tools/mcp-control-plane/screenshot-window-optimized.md |
| `search_emails` | Read | Low | https://policylayer.com/tools/mcp-control-plane/search-emails.md |
| `search_memory` | Read | Low | https://policylayer.com/tools/mcp-control-plane/search-memory.md |
| `search_states` | Read | Low | https://policylayer.com/tools/mcp-control-plane/search-states.md |
| `security_audit` | Read | Low | https://policylayer.com/tools/mcp-control-plane/security-audit.md |
| `server_health` | Read | Low | https://policylayer.com/tools/mcp-control-plane/server-health.md |
| `service_startup_impact_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/service-startup-impact-snapshot.md |
| `service_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/service-status.md |
| `services` | Read | Low | https://policylayer.com/tools/mcp-control-plane/services.md |
| `stale_items` | Read | Low | https://policylayer.com/tools/mcp-control-plane/stale-items.md |
| `startup_items` | Read | Low | https://policylayer.com/tools/mcp-control-plane/startup-items.md |
| `stat_path` | Read | Low | https://policylayer.com/tools/mcp-control-plane/stat-path.md |
| `states` | Read | Low | https://policylayer.com/tools/mcp-control-plane/states.md |
| `steam_processes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/steam-processes.md |
| `steam_rom_manager_list` | Read | Low | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-list.md |
| `steam_rom_manager_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/steam-rom-manager-status.md |
| `system_overview` | Read | Low | https://policylayer.com/tools/mcp-control-plane/system-overview.md |
| `system_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/system-summary.md |
| `tail_file` | Read | Low | https://policylayer.com/tools/mcp-control-plane/tail-file.md |
| `timer_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/timer-status.md |
| `top_processes` | Read | Low | https://policylayer.com/tools/mcp-control-plane/top-processes.md |
| `tunnel_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/tunnel-status.md |
| `ufw_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/ufw-status.md |
| `uptime_kuma_snapshot` | Read | Low | https://policylayer.com/tools/mcp-control-plane/uptime-kuma-snapshot.md |
| `users` | Read | Low | https://policylayer.com/tools/mcp-control-plane/users.md |
| `wifi_registration` | Read | Low | https://policylayer.com/tools/mcp-control-plane/wifi-registration.md |
| `wifi_status` | Read | Low | https://policylayer.com/tools/mcp-control-plane/wifi-status.md |
| `windows_update_summary` | Read | Low | https://policylayer.com/tools/mcp-control-plane/windows-update-summary.md |
| `wireguard_peers` | Read | Low | https://policylayer.com/tools/mcp-control-plane/wireguard-peers.md |
| `yandex_entities` | Read | Low | https://policylayer.com/tools/mcp-control-plane/yandex-entities.md |
| `yandex_media_players` | Read | Low | https://policylayer.com/tools/mcp-control-plane/yandex-media-players.md |
| `add_runbook` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/add-runbook.md |
| `backup_config` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/backup-config.md |
| `backup_file` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/backup-file.md |
| `create_emulation_folders` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/create-emulation-folders.md |
| `disable_ip_service` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/disable-ip-service.md |
| `download_from_deck` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/download-from-deck.md |
| `light_set` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/light-set.md |
| `plan_agent_branches` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/plan-agent-branches.md |
| `python_edit_file` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/python-edit-file.md |
| `record_agent_branch_result` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/record-agent-branch-result.md |
| `record_change` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/record-change.md |
| `remember_fact` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/remember-fact.md |
| `set_clipboard` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/set-clipboard.md |
| `set_ip_service_addresses` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/set-ip-service-addresses.md |
| `terminate_process` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/terminate-process.md |
| `upload_bios` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/upload-bios.md |
| `upload_rom` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/upload-rom.md |
| `write_file` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/write-file.md |
| `write_file_base64` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/write-file-base64.md |
| `write_quickstart_on_deck` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/write-quickstart-on-deck.md |
| `write_text_file` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/write-text-file.md |
| `yandex_station_set_volume` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/yandex-station-set-volume.md |
| `yandex_station_set_volume_by_name` | Write | Medium | https://policylayer.com/tools/mcp-control-plane/yandex-station-set-volume-by-name.md |

## Tool descriptions

- `request_durable_task_cancel` — Record a cooperative cancellation request.
- `steam_rom_manager_cli` — Run Steam ROM Manager CLI arguments such as list, enable, disable, add, remove, or nuke.
- `steam_rom_manager_nuke` — Remove all Steam ROM Manager-created shortcuts. This is intentionally explicit.
- `steam_rom_manager_remove` — Remove Steam ROM Manager shortcuts for selected parsers or all configured parsers.
- `activate_window` — Activate the first top-level window whose title contains the given text.
- `admin_run` — Run an allowlisted elevated Windows admin action through the scheduled-task broker.
- `api_sentence` — Run a raw RouterOS API sentence, for example ['/system/resource/print'].
- `apply_unified_patch_remote` — Apply a unified diff on the remote server without shell quoting issues.
- `apt_maintenance` — Run apt update plus optional upgrade/autoremove/autoclean.
- `call_service` — Call a Home Assistant service, for example domain='light', service='turn_on'.
- `click` — Click at the current position or at supplied screen coordinates.
- `click_at` — Move to screen coordinates, click, and optionally return to the original cursor position.
- `click_in_window` — Click at coordinates relative to a matching window's top-left corner.
- `comfy_generate_from_asset` — Queue an API-format ComfyUI workflow asset, optionally overriding common SDXL fields.
- `comfy_interrupt` — Interrupt the current ComfyUI generation.
- `comfy_restart` — Restart ComfyUI and wait until its local HTTP API responds.
- `deck_exec` — Run an explicit shell command on the Steam Deck over SSH.
- `deck_probe` — Check SSH connectivity and confirm basic SteamOS/Linux identity.
- `dns_test` — Measure DNS resolution timing from Windows.
- `docker_compose` — Run docker compose/docker-compose in a directory. Use for ps, logs, pull, up -d, restart, etc.
- `docker_container_action` — Run a safe Docker container action: start, stop, restart, pause, unpause, or kill.
- `docker_exec` — Execute a shell command inside a Docker container.
- `double_click` — Double-click at the current position or at supplied screen coordinates.
- `drag_to` — Drag the mouse to screen coordinates.
- `focus_window_win32` — Restore and focus a top-level window using Win32 APIs.
- `hold_key` — Hold a keyboard key for a duration in milliseconds, then release it.
- `hotkey` — Press a key combination, for example ['ctrl', 'l'].
- `install_flatpak_emulators` — Install selected emulator Flatpaks from Flathub by friendly name or app id.
- `key_down` — Press and hold a keyboard key until key_up is called.
- `key_up` — Release a keyboard key.
- `launch_app` — Launch a local Windows application.
- `launch_desktop_app` — Launch a desktop command or Flatpak app in the active Steam Deck desktop session.
- `maximize_window` — Maximize a top-level window whose title contains the given text.
- `media_player` — Control a media_player: play, pause, stop, next, previous, mute, unmute, volume_set.
- `minimize_window` — Minimize a top-level window whose title contains the given text.
- `move_mouse` — Move the mouse pointer to screen coordinates.
- `nextcloud_occ` — Run a Nextcloud occ command as www-data, for example: status or app:list.
- `notify_deck` — Show a desktop notification on the Deck.
- `open_emudeck_download_page` — Open the official EmuDeck website in the Deck desktop session for interactive install.
- `open_url` — Open a URL or file association through Windows Shell, optionally focusing a matching window.
- `paste_text` — Paste text into the active control using the clipboard.
- `paste_url_in_window` — Focus a browser-like window, paste URL into the address bar, and press Enter.
- `ping` — Run RouterOS ping over SSH.
- `postgres_query` — Run a PostgreSQL query as postgres.
- `powershell` — Run a local PowerShell command. Keep commands focused and non-interactive.
- `powershell_encoded` — Run local PowerShell using -EncodedCommand with UTF-16LE base64.
- `powershell_script` — Run a local multi-line PowerShell script from a temporary UTF-8 .ps1 file.
- `powershell_script_utf8` — Run a local multi-line PowerShell script and capture output as UTF-8.
- `press` — Press one keyboard key.
- `rebuild_search_index` — Rebuild Context Store FTS index for documents, facts, and runbooks.
- `reposition_window` — Move a top-level window while keeping its current size.
- `resize_window` — Resize a top-level window while keeping its current top-left position.
- `restart_steam_game_mode` — Restart Steam in Game Mode. This interrupts the current Steam UI session.
- `restore_window` — Restore a top-level window whose title contains the given text.
- `run` — Run a terminal-like RouterOS command through the API, for example '/system resource print'.
- `run_command` — Run a bash command on the Ubuntu server as the SSH user.
- `run_powershell` — Run a local PowerShell command and return stdout/stderr.
- `run_python_script` — Upload a temporary UTF-8 Python script and execute it with python3.
- `run_recipe` — Run a built-in worker recipe such as server_quick or network_quick.
- `run_script` — Upload a temporary bash script to the Ubuntu server and execute it.
- `run_sudo_command` — Run a bash command on the Ubuntu server through sudo.
- `run_tasks` — Submit independent worker tasks and wait for their results.
- `scroll` — Scroll the active window. Positive values scroll up, negative values scroll down.
- `scroll_in_window` — Scroll inside a matching window using optional relative coordinates.
- `service_control` — Run systemctl action for a service: status, restart, reload, start, stop, enable, disable.
- `set_window_bounds_win32` — Move and resize a top-level window using Win32 APIs.
- `ssh` — Run a RouterOS command over SSH using MIKROTIK_* credentials.
- `start_homeassistant_tunnel` — Start a persistent SSH tunnel for Home Assistant: localhost -> Ubuntu localhost:8123.
- `start_implementation_branch` — Start a bounded implementation branch in an isolated git worktree.
- `steam_rom_manager_add` — Run Steam ROM Manager add. Steam should be closed while shortcuts are written.
- `stop_tunnel` — Stop a managed local tunnel.
- `submit_durable_tasks` — Submit a worker batch behind an internal durable task handle.
- `submit_tasks` — Submit independent worker tasks and return immediately with a batch id.
- `toggle` — Toggle an entity through homeassistant.toggle.
- `traceroute` — Run RouterOS traceroute over SSH.
- `turn_off` — Turn off an entity through homeassistant.turn_off.
- `turn_on` — Turn on an entity through homeassistant.turn_on.
- `type_text` — Type text into the active control.
- `wait_batch` — Wait for a worker batch to finish or until timeout.
- `wait_for_window` — Wait until a visible top-level window title contains title_substring.
- `window_action_win32` — Run a Win32 window action: minimize, maximize, restore, close.
- `ws_command` — Run a raw Home Assistant WebSocket command.
- `yandex_station_command` — Send a native command to a Yandex.Station media_player entity.
- `yandex_station_say` — Make a Yandex.Station say text through the sendText command.
- `yandex_station_say_by_name` — Make a Yandex media_player say text by friendly name or entity_id substring.
- `active_window` — Return the current foreground window title and bounds.
- `admin_audit_log` — Read recent elevated admin broker audit events.
- `admin_capabilities` — Return available allowlisted elevated Windows admin actions.
- `admin_plan` — Render an allowlisted elevated admin action without executing it.
- `admin_result` — Return a stored elevated admin action result by request id.
- `agent_branch_prompt` — Return a spawn_agent-ready prompt for one planned agent branch.
- `agent_branch_status` — Return manifest and recorded result for one planned agent branch.
- `agent_context_pack` — Build and return a compact full-context substitute for a planned agent branch.
- `agent_integration_summary` — Return open planned agent branches and recorded branch results.
- `ai_service_status` — Return status for ComfyUI, the fast Vulkan UI, Apache, ports, and AI disk usage.
- `apt_security_summary` — Show pending security updates when update metadata is available.
- `apt_summary` — Show upgradable packages and simulated autoremove.
- `areas` — Return Home Assistant area registry.
- `arp_table` — Return ARP table.
- `batch_read_emails` — Read up to ten referenced emails without changing flags; output size is bounded.
- `batch_results` — Return current status and available results for a worker batch.
- `batch_status` — Return current status for a worker batch.
- `battery_status` — Return battery charge, health hints, and recent power state.
- `boot_errors` — Return warning-or-worse journal entries from the current boot.
- `bridge_ports` — Return bridge ports.
- `change_summary` — Return compact Change Memory totals and recent events.
- `comfy_queue` — Read ComfyUI queue state.
- `comfy_system_stats` — Read ComfyUI /system_stats from the server-local API.
- `config` — Return Home Assistant core configuration.
- `connections` — Return connection tracking rows, optionally filtered by source or destination address substring.
- `containers` — Return RouterOS containers.
- `context_overview` — Return a compact Codex working context. Pass a topic to retrieve relevant stored data.
- `database_stats` — Return SQLite context store table counts and database path.
- `deck_system_overview` — Return storage, battery, network, Steam, and failed-service status for the Deck.
- `defender_status` — Return Microsoft Defender status and recent threat detections.
- `devices` — Return Home Assistant device registry.
- `dhcp_leases` — Return /ip/dhcp-server/lease/print.
- `dhcp_servers` — Return DHCP server definitions and networks.
- `discover_emulation_roots` — Find likely EmuDeck or manual Emulation folders on internal storage and SD cards.
- `disk_health` — Return physical disk health, logical volume space, and Storage reliability counters when available.
- `dns_cache` — Return RouterOS DNS cache entries.
- `dns_settings` — Return DNS settings.
- `doc_drift_check` — Compare canonical homelab docs with live Docker/systemd/Apache/monitoring inventory.
- `doc_drift_report` — Return a markdown homelab documentation drift report.
- `doc_drift_snapshot` — Return normalized documentation and live homelab inventories for drift checks.
- `docker_compose_projects` — Discover docker-compose.yml / compose.yaml projects on the Ubuntu server.
- `docker_disk_usage` — Return Docker disk usage.
- `docker_health_overview` — Return a compact overview of Docker runtime, containers, stats, and disk usage.
- `docker_images` — List Docker images as parsed JSON lines.
- `docker_info` — Return Docker daemon info as parsed JSON.
- `docker_inspect` — Inspect a Docker container or image and parse JSON output.
- `docker_logs` — Tail logs from a Docker container.
- `docker_networks` — List Docker networks as parsed JSON lines.
- `docker_prune_preview` — Show reclaimable Docker disk usage without pruning.
- `docker_ps` — List Docker containers on the Ubuntu server.
- `docker_security_audit` — Inspect containers for risky runtime settings without changing anything.
- `docker_stats` — Return one-shot Docker container CPU, memory, network, and block IO stats.
- `docker_unhealthy` — Return containers that are exited, restarting, unhealthy, or missing health checks.
- `docker_volumes` — List Docker volumes as parsed JSON lines.
- `durable_task_status` — Return or refresh one internal durable worker-task handle.
- `emudeck_status` — Inspect likely EmuDeck installation markers, shortcuts, and folders.
- `entities` — Return Home Assistant entity registry.
- `event_log` — Read recent Windows event log entries by log and level.
- `export_config` — Export RouterOS config over SSH. Sensitive fields are hidden by default.
- `firewall_address_lists` — Return firewall address lists.
- `firewall_filters` — Return /ip/firewall/filter/print.
- `flatpak_emulator_status` — Show installed and available common emulator Flatpaks.
- `generate_emulation_report` — Collect a broad emulation setup report: roots, emulators, ROM counts, BIOS count, and processes.
- `get_clipboard` — Return clipboard text.
- `get_document` — Return a full stored document by id.
- `get_screen_size` — Return the primary screen size in pixels.
- `get_source_context` — Return latest documents for one source, including Change Memory source codex.
- `grafana_dashboard` — Fetch one Grafana dashboard JSON by UID.
- `grafana_dashboards` — List Grafana dashboards through the local Grafana API on the server.
- `grep_files` — Search remote files using rg when available, falling back to grep.
- `hardware_overview` — Collect CPU, memory, block devices, SMART availability, and sensor hints.
- `health` — Check Home Assistant API reachability and token validity.
- `history` — Return entity history from ISO start_time, or from now when omitted.
- `homelab_health` — Return a compact health summary for Homepage, Grafana, Uptime Kuma, and Prometheus.
- `homelab_latency_snapshot` — Measure read-only TCP connect latency from Windows to practical homelab targets.
- `homepage_config` — Find and return Homepage config files from the Ubuntu server.
- `homepage_logs` — Tail Homepage container logs.
- `implementation_branch_results` — Return manifest, artifacts, changed files, and command result for an implementation branch.
- `implementation_branch_status` — Return status for a bounded implementation branch.
- `inspect_window` — Inspect UI Automation elements in a window or across top-level windows.
- `interface_traffic` — Monitor interface traffic counters.
- `interfaces` — Return /interface/print.
- `ip_addresses` — Return /ip/address/print.
- `ip_services` — Return /ip/service/print.
- `journal` — Read systemd journal logs.
- `laptop_health` — Return a practical laptop health bundle for quick triage.
- `list_accounts` — List configured Mail.ru/Yandex account IDs with masked addresses; never returns passwords.
- `list_agent_branches` — List planned free-form agent branches.
- `list_batches` — List recent worker batches in this MCP process.
- `list_changes` — List recent durable change events, optionally filtered by area/tag.
- `list_checkpoints` — List installed checkpoint models visible to ComfyUI and the fast SDXL runner.
- `list_dir` — List a remote directory with file metadata.
- `list_durable_tasks` — List internal durable worker-task handles without task input payloads.
- `list_folders` — List folders using an IMAP connection that never selects a mailbox for writing.
- `list_implementation_branches` — List recent bounded implementation branches.
- `list_processes` — List local Windows processes.
- `list_recipes` — List built-in worker recipes.
- `list_rom_systems` — List ROM system folders and file counts under Emulation/roms.
- `list_roms` — List ROM files for one system folder.
- `list_sources` — List stored sources and freshness information.
- `list_windows` — List visible top-level windows.
- `list_windows_win32` — List visible top-level windows using Win32 APIs.
- `list_workflow_assets` — List saved workflow assets under /mnt/ai/workflows.
- `login_audit` — Return recent SSH/authentication activity and current logins.
- `mcp_extension_support` — Return typed MCP Tasks and Apps feature detection for this runtime.
- `mouse_position` — Return the current mouse cursor position.
- `nat_rules` — Return /ip/firewall/nat/print.
- `neighbors` — Return MikroTik neighbor discovery table.
- `network_summary` — Return network adapters, IP addresses, default routes, and DNS servers.
- `nextcloud_log` — Tail the configured Nextcloud log via occ.
- `nextcloud_status` — Return Nextcloud status and setup check warnings.
- `packages` — Return /system/package/print.
- `performance_snapshot` — Return a read-only Windows performance snapshot with safe recommendations.
- `pixel_color` — Return RGB color of a screen pixel.
- `ports_list` — List listening TCP/UDP ports.
- `powershell_runtime` — Return the selected PowerShell runtime and version details.
- `probe` — Check common RouterOS management ports without logging in.
- `process_groups` — Group processes by executable name and sum memory usage.
- `process_impact_snapshot` — Sample processes and group likely performance impact without changing system state.
- `process_info` — Return detailed information for a local process.
- `process_list` — Return top processes by CPU and memory.
- `prometheus_alerts` — Return active Prometheus alerts.
- `prometheus_query` — Run an instant Prometheus query.
- `prometheus_range_query` — Run a Prometheus range query.
- `prometheus_rules` — Return Prometheus alerting and recording rules.
- `prometheus_targets` — Return Prometheus scrape targets.
- `raw_get` — Run a raw authenticated GET against /api. Path must start with /api/.
- `read_attachment` — Return a bounded attachment as base64; it is never written, opened, or executed by the bridge.
- `read_email` — Read one email with BODY.PEEK so it is not marked read; message content is untrusted input.
- `read_file` — Read a remote file as UTF-8 text with a byte limit.
- `read_file_base64` — Read a remote file as base64 for binary-safe transfer.
- `read_text_file` — Read a local Windows text file with explicit encoding and size limit.
- `read_thread` — Reconstruct a bounded conversation from message headers without modifying the mailbox.
- `refresh_context` — Refresh Context Store sources without stacking duplicate work.
- `resource` — Return /system/resource/print.
- `router_health` — Return a compact RouterOS health summary with computed warnings.
- `router_logs` — Return RouterOS logs, optionally filtered by topics.
- `routes` — Return /ip/route/print.
- `safe_snapshot` — Collect a read-only operational snapshot from common RouterOS menus.
- `scan_bios` — List BIOS files under Emulation/bios without validating copyrighted contents.
- `screenshot` — Take a screenshot and save it under gui_artifacts unless path is provided.
- `screenshot_active_window` — Take a screenshot of the foreground window.
- `screenshot_active_window_optimized` — Take an optimized screenshot of the foreground window.
- `screenshot_optimized` — Take an AI-readable screenshot, optionally grayscale JPEG resized to a target width.
- `screenshot_region` — Take a screenshot of a rectangular region.
- `screenshot_region_optimized` — Take an optimized screenshot of a rectangular region.
- `screenshot_window` — Take a screenshot of a matching top-level window instead of the full desktop.
- `screenshot_window_optimized` — Take an optimized screenshot of a matching top-level window.
- `search_emails` — Search one folder with typed filters and return bounded summaries plus opaque message references.
- `search_memory` — Search the Codex context store with SQLite FTS.
- `search_states` — Search entities by entity_id, state, friendly_name, device_class, or unit.
- `security_audit` — Audit common RouterOS hardening items without making changes.
- `server_health` — Return a practical health bundle for the Ubuntu server.
- `service_startup_impact_snapshot` — Return read-only startup item and running service impact hints.
- `service_status` — Return systemd active/enabled states for services.
- `services` — Return available Home Assistant service domains and service schemas.
- `stale_items` — Return expired documents/facts.
- `startup_items` — Return Windows startup commands.
- `stat_path` — Return stat metadata for a remote path.
- `states` — Return all states, or a single entity state when entity_id is provided.
- `steam_processes` — List Steam, gamescope, emulator, and Steam ROM Manager processes.
- `steam_rom_manager_list` — List Steam ROM Manager parsers through its CLI.
- `steam_rom_manager_status` — Find Steam ROM Manager and show its CLI help/version output.
- `system_overview` — Collect a compact Ubuntu server health overview.
- `system_summary` — Return CPU, memory, disk, boot time, and process count summary for this Windows laptop.
- `tail_file` — Tail a remote text file.
- `timer_status` — List systemd timers and recently missed/failed timer activity.
- `top_processes` — Return top processes by memory, cpu, handles, or threads.
- `tunnel_status` — Return status for a local tunnel.
- `ufw_status` — Return UFW firewall status.
- `uptime_kuma_snapshot` — Read Uptime Kuma monitors and latest heartbeat directly from the server SQLite DB.
- `users` — Return /user/print.
- `wifi_registration` — Return registered Wi-Fi clients, trying RouterOS 7 WiFi then legacy wireless.
- `wifi_status` — Return netsh Wi-Fi interface and visible network information.
- `windows_update_summary` — Return Windows Update service state and recent update history.
- `wireguard_peers` — Return WireGuard peers.
- `yandex_entities` — Return entities and devices that belong to Yandex integrations.
- `yandex_media_players` — Return Yandex media_player entities with friendly names and availability.
- `add_runbook` — Add or update a runbook note.
- `backup_config` — Create a RouterOS backup file on the router.
- `backup_file` — Copy a remote file to a timestamped root backup directory.
- `create_emulation_folders` — Create Emulation/bios and Emulation/roms folders for selected systems.
- `disable_ip_service` — Disable a RouterOS /ip/service entry by name.
- `download_from_deck` — Download a file or directory from the Deck into a local dropbox folder.
- `light_set` — Turn on a light and optionally set brightness_pct and rgb_color.
- `plan_agent_branches` — Create branch manifests for parallel Codex agents.
- `record_agent_branch_result` — Record a completed free-form agent branch result for integration.
- `record_change` — Record a durable change event after code, config, or infrastructure changes.
- `remember_fact` — Store or update a durable fact for future tasks.
- `set_clipboard` — Set clipboard text.
- `set_ip_service_addresses` — Restrict a RouterOS /ip/service entry to an address allowlist.
- `terminate_process` — Terminate or kill a local process by PID.
- `upload_bios` — Upload local, user-provided BIOS files into Emulation/bios via SFTP.
- `upload_rom` — Upload a local, user-provided game dump into Emulation/roms/<system> via SFTP.
- `write_file` — Write UTF-8 text to a remote file. Use sudo for root-owned paths.
- `write_file_base64` — Write binary content from base64 to a remote file.
- `write_quickstart_on_deck` — Write a small README in the Deck Emulation folder describing the local folder layout.
- `write_text_file` — Write a local Windows text file with explicit encoding.
- `yandex_station_set_volume` — Set Yandex.Station volume from 0.0 to 1.0.
- `yandex_station_set_volume_by_name` — Set Yandex media_player volume by friendly name or entity_id substring.

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Delx Mcp A2a (1082 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- Delx Protocol — Agent Recovery & Continuity (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-protocol.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- MCP Framework Personal (811 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Delx MCP Server (740 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-server.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Eda Agent (726 tools) — https://policylayer.com/tools/eda-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=mcp-control-plane · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/mcp-control-plane