BorealHost MCP · BorealHost

{
  "name": "register",
  "description": "Register a new agent account and get an API key.\n\nNo authentication needed. The returned API key grants read+write access\nto all BorealHost API endpoints. Store it securely — it cannot be\nretrieved again.\n\nThe key is automatically activated for this session — all subsequent\ntool calls will use it. No extra configuration needed.\n\nIf no email is provided, a synthetic agent identity is created\n(agent-{uuid}@api.borealhost.ai). If an email is provided, it links\nto an existing or new human account.\n\nArgs:\n    name: Human-readable name for this API key (default: \"Agent Key\")\n    email: Optional email to link to a human account\n\nReturns:\n    {\"api_key\": \"bh_...\", \"key_id\": \"uuid\", \"prefix\": \"bh_...\",\n     \"scopes\": [\"read\", \"write\"], \"account_id\": \"uuid\",\n     \"message\": \"Store this API key securely...\"}\n\nErrors:\n    RATE_LIMITED: Max 5 registrations per IP per hour\n    VALIDATION_ERROR: Invalid email format\n",
  "inputSchema": {
    "properties": {
      "name": {
        "default": "Agent Key",
        "title": "Name",
        "type": "string"
      },
      "email": {
        "default": "",
        "title": "Email",
        "type": "string"
      }
    },
    "title": "registerArguments",
    "type": "object"
  }
}

{
  "name": "set_api_key",
  "description": "Set your BorealHost API key for this session.\n\nCall this if you already have an API key (from a previous registration,\ncheckout completion, or the BorealHost panel). All subsequent tool calls\nwill use this key for authentication.\n\nNo need to call this after register() — the key is set automatically.\n\nArgs:\n    api_key: Your BorealHost API key (format: bh_<48 hex chars>)\n\nReturns:\n    {\"success\": true, \"message\": \"API key set for this session\",\n     \"key_prefix\": \"bh_...\"}\n",
  "inputSchema": {
    "properties": {
      "api_key": {
        "title": "Api Key",
        "type": "string"
      }
    },
    "required": [
      "api_key"
    ],
    "title": "set_api_keyArguments",
    "type": "object"
  }
}

{
  "name": "whoami",
  "description": "Check the current API key's account info, scopes, and site count.\n\nRequires: BOREALHOST_API_KEY env var (read scope).\n\nReturns:\n    {\"user\": {\"id\": \"uuid\", \"email\": \"...\", \"date_joined\": \"iso8601\"},\n     \"api_key\": {\"id\": \"uuid\", \"name\": \"...\", \"prefix\": \"bh_...\",\n                 \"scopes\": [\"read\", \"write\"], \"created_at\": \"iso8601\"},\n     \"account\": {\"sites\": 2, \"active_subscriptions\": 1}}\n\nErrors:\n    UNAUTHORIZED: Missing or invalid API key\n",
  "inputSchema": {
    "properties": {},
    "title": "whoamiArguments",
    "type": "object"
  }
}

{
  "name": "request_api_key",
  "description": "Request an API key for a site YOU ARE RUNNING ON (challenge-response).\n\n⚠ ONLY USE THIS IF YOU ARE EXECUTING INSIDE THAT SITE'S OWN CONTAINER. If\nyou bought or ordered the site from somewhere else, this is the wrong tool:\nit returns \"pending\" and the pending never resolves, because the proof it\nasks for is a file you cannot reach. Use `get_checkout_status(checkout_id)`\non the checkout that paid for the site — that hands over the site-scoped key\nover plain HTTP with no container access. The refusal and the pending\nresponse both name it under `alternative` when one is available.\n\nTwo-step verification flow:\n1. A claim token is written into that site's container, at the per-site path\n   the response gives you in `claim_path` (mode 600, owner admin — readable\n   only from on the container). Do not hardcode the path.\n2. Read that file and call claim_api_key(token) within 1 hour\n\nRefused for sites on SHARED containers. One container there serves up to 40\ncustomers behind one agent, so reading a file proves you are on the machine,\nnot which customer you are — the token would authenticate the wrong thing.\n\nNo authentication needed — the proof is reading the file from the container.\n\nArgs:\n    site_slug: The site identifier (your BorealHost site slug)\n\nReturns:\n    {\"status\": \"pending\", \"site_slug\": \"my-site\", \"expires_in_seconds\": 3600,\n     \"claim_path\": \"/home/admin/.borealhost/.claim_token_my-site\",\n     \"requires_container_access\": true,\n     \"instructions\": \"Read the claim token and call claim_api_key()...\",\n     \"alternative\": {\"checkout_id\": \"...\", \"command\": \"bh checkout status ...\"}}\n\nErrors:\n    VALIDATION_ERROR: Unknown site slug, no active subscription, shared\n        container, or a key already exists (rotate it, never revoke it to\n        reach this route). Carries `alternative` when another route works.\n    RATE_LIMITED: Too many pending claim tokens\n",
  "inputSchema": {
    "properties": {
      "site_slug": {
        "title": "Site Slug",
        "type": "string"
      }
    },
    "required": [
      "site_slug"
    ],
    "title": "request_api_keyArguments",
    "type": "object"
  }
}

{
  "name": "claim_api_key",
  "description": "Claim an API key using a claim token from the container.\n\nAfter calling request_api_key(), read the claim token from the path that\ncall returned in `claim_path`, on that site's container, and pass it here.\n\nThe token is single-use — once claimed, it cannot be used again.\nThe API key is automatically activated for this MCP session.\n\nArgs:\n    claim_token: The claim token string read from the container file\n\nReturns:\n    {\"api_key\": \"bh_...\", \"key_prefix\": \"bh_...\",\n     \"site_slug\": \"my-site\", \"scopes\": [\"read\", \"write\"],\n     \"message\": \"API key created and activated...\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid, expired, or already-claimed token\n",
  "inputSchema": {
    "properties": {
      "claim_token": {
        "title": "Claim Token",
        "type": "string"
      }
    },
    "required": [
      "claim_token"
    ],
    "title": "claim_api_keyArguments",
    "type": "object"
  }
}

{
  "name": "list_plans",
  "description": "List available hosting plans with pricing and resources.\n\nNo authentication needed.\n\nArgs:\n    track: Filter by plan track. Valid values: \"single_site\", \"agency\".\n        ⚠ The track is not the site count — most plans on BOTH tracks\n        include several sites (site_starter 5, site_plus 8, site_pro 12).\n        Read `max_sites` on the plan, and use add_site() to fill a slot.\n           Leave empty to list all tracks.\n    include_deprecated: Include deprecated plans (default: false)\n\nReturns:\n    [{\"slug\": \"site_starter\", \"name\": \"Starter\", \"track\": \"single_site\",\n      \"hosting_type\": \"shared\", \"price\": {\"monthly\": 5, \"annual\": 2, \"currency\": \"CAD\"},\n      \"resources\": null, \"features\": {\"max_sites\": 1, \"ai_modules\": [...],\n      \"ai_agents\": [], \"free_domain_annual\": false}}, ...]\n",
  "inputSchema": {
    "properties": {
      "track": {
        "default": "",
        "title": "Track",
        "type": "string"
      },
      "include_deprecated": {
        "default": false,
        "title": "Include Deprecated",
        "type": "boolean"
      }
    },
    "title": "list_plansArguments",
    "type": "object"
  }
}

{
  "name": "create_checkout",
  "description": "Start a new checkout session to purchase a hosting plan.\n\nNo authentication needed. After creating, call update_checkout to set\nbuyer info, then complete_checkout to pay.\n\nThe response carries a `checkout_secret`, returned ONCE, that every later\nstep of this checkout requires. It is held in memory for this MCP session\nand sent automatically — but it is gone if the server restarts. If a session\nkey is set, the checkout is owned by that account and the API key authorizes\nthe later steps on its own, which is the durable path.\n\nArgs:\n    sku: Plan SKU in format bh_{plan_slug}_{monthly|annual}.\n         Examples: \"bh_site_starter_monthly\", \"bh_site_pro_annual\",\n         \"bh_site_managed_monthly\", \"bh_site_business_annual\".\n         Call list_plans() to discover all available plan slugs.\n\nReturns:\n    {\"id\": \"uuid\", \"sku\": \"bh_site_starter_monthly\",\n     \"plan_slug\": \"site_starter\", \"billing_period\": \"monthly\",\n     \"status\": \"not_ready\", \"buyer_email\": \"\", \"requested_slug\": \"\",\n     \"created_at\": \"iso8601\", \"checkout_secret\": \"base64-token\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid SKU format or unknown plan\n    RATE_LIMITED: Max 10 checkouts per IP per hour\n",
  "inputSchema": {
    "properties": {
      "sku": {
        "title": "Sku",
        "type": "string"
      }
    },
    "required": [
      "sku"
    ],
    "title": "create_checkoutArguments",
    "type": "object"
  }
}

{
  "name": "update_checkout",
  "description": "Set buyer email and desired site slug on a checkout session.\n\nThe checkout must be in \"not_ready\" status. Setting requested_slug\ntransitions status to \"ready\" (required before completing).\n\nArgs:\n    checkout_id: Checkout session ID from create_checkout\n    buyer_email: Optional email — if omitted, a synthetic agent identity\n                 (agent-{uuid}@api.borealhost.ai) is created at completion\n    requested_slug: Desired site identifier. Must be 3-50 chars, lowercase\n                    alphanumeric + hyphens, cannot start/end with hyphen.\n                    Must be globally unique.\n    site_type: What the docroot should serve — wordpress (default), php,\n        php-nodb or static-site. ⚠ Set it HERE: the checkout locks once\n        buyer info is set, so choosing later means provisioning a\n        WordPress you then convert away from, abandoning its tree in the\n        docroot and paying a minute of provisioning for nothing.\n\nReturns:\n    {\"id\": \"uuid\", \"sku\": \"...\", \"plan_slug\": \"...\",\n     \"billing_period\": \"monthly\", \"status\": \"ready\",\n     \"buyer_email\": \"...\", \"requested_slug\": \"my-site\",\n     \"created_at\": \"iso8601\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid slug format or slug already taken\n    FORBIDDEN: Missing checkout_secret\n    NOT_FOUND: Unknown checkout_id\n",
  "inputSchema": {
    "properties": {
      "checkout_id": {
        "title": "Checkout Id",
        "type": "string"
      },
      "buyer_email": {
        "default": "",
        "title": "Buyer Email",
        "type": "string"
      },
      "requested_slug": {
        "default": "",
        "title": "Requested Slug",
        "type": "string"
      },
      "site_type": {
        "default": "",
        "title": "Site Type",
        "type": "string"
      }
    },
    "required": [
      "checkout_id"
    ],
    "title": "update_checkoutArguments",
    "type": "object"
  }
}

{
  "name": "complete_checkout",
  "description": "Complete checkout with payment and start site provisioning.\n\nThe checkout must be in \"ready\" status.\n\nTwo payment methods:\n- \"stripe_checkout\" (default): Returns a short, chat-safe payment URL.\n  **Present `payment_url` to the human — NOT `stripe_checkout_url`.**\n  The raw Stripe URL has a required `#fragment` that chat UIs routinely\n  strip when rendering markdown links, which causes Stripe to show\n  \"page not found\". `payment_url` is a short BorealHost redirect that\n  preserves the fragment via HTTP 302. After paying, the human lands on a\n  confirmation page (`confirmation_url`) — not on raw JSON. Then poll\n  get_checkout_status() until status becomes \"completed\". The API key\n  appears in the first poll after payment (shown once, then cleared).\n  Payment provisions the site; nothing else has to be called to create it.\n- \"stripe_payment_method\": Charges a Stripe PaymentMethod directly.\n  Requires payment_method_id. On success, returns the API key immediately.\n\nArgs:\n    checkout_id: Checkout session ID\n    payment_method: \"stripe_checkout\" (returns a payment_url for a human),\n        \"stripe_payment_method\" (card on file), or \"wallet\" — pay from the\n        account&#39;s prepaid balance against THIS key&#39;s allowance. Check\n        get_wallet() first: `spendable_cents` is what you may actually\n        spend, and a wallet payment is refused for plans that order\n        dedicated hardware, which are authorised against a verified card\n        payment instead.\n    payment_method_id: Stripe PaymentMethod ID (pm_...). Required only\n                       for \"stripe_payment_method\".\n\nReturns (stripe_checkout):\n    {\"id\": \"uuid\", \"status\": \"awaiting_payment\",\n     \"payment_url\": \"https://borealhost.ai/pay/<id>/?s=<secret>\",\n     \"confirmation_url\": \"https://borealhost.ai/pay/<id>/confirmation/?s=...\",\n     \"stripe_checkout_url\": \"https://checkout.stripe.com/c/pay/...\",\n     \"message\": \"Present payment_url to the human...\"}\n\nReturns (stripe_payment_method):\n    {\"id\": \"uuid\", \"status\": \"completed\", \"api_key\": \"bh_...\",\n     \"api_key_message\": \"Store this API key securely...\",\n     \"subscription_id\": \"uuid\", \"provisioning_job_id\": \"uuid\"}\n\nErrors:\n    VALIDATION_ERROR: Missing payment_method_id for stripe_payment_method\n    FORBIDDEN: Checkout not in \"ready\" status\n",
  "inputSchema": {
    "properties": {
      "checkout_id": {
        "title": "Checkout Id",
        "type": "string"
      },
      "payment_method": {
        "default": "stripe_checkout",
        "title": "Payment Method",
        "type": "string"
      },
      "payment_method_id": {
        "default": "",
        "title": "Payment Method Id",
        "type": "string"
      }
    },
    "required": [
      "checkout_id"
    ],
    "title": "complete_checkoutArguments",
    "type": "object"
  }
}

{
  "name": "get_checkout_status",
  "description": "Poll a checkout session for status updates.\n\nCall this after complete_checkout to track payment and provisioning.\n\nPolling strategy:\n- First 60 seconds: every 5 seconds\n- After 60 seconds: every 15 seconds\n- Stop after 10 minutes if not completed\n\nCheckout statuses (in order):\n- \"not_ready\": Missing required fields (slug)\n- \"ready\": All fields set, awaiting payment\n- \"awaiting_payment\": Stripe checkout page opened, waiting for human\n- \"in_progress\": Payment received, site being provisioned\n- \"completed\": Site ready — API key included (shown once, then cleared)\n- \"canceled\": Checkout was abandoned\n- \"failed\": Payment or provisioning failed\n\nTerminal statuses: \"completed\", \"canceled\", \"failed\".\n\nArgs:\n    checkout_id: Checkout session ID\n\nReturns (when completed):\n    {\"id\": \"uuid\", \"status\": \"completed\", \"api_key\": \"bh_...\",\n     \"api_key_message\": \"Store this API key securely...\",\n     \"api_key_pending\": false,\n     \"subscription_id\": \"uuid\", \"subscription_status\": \"active\",\n     \"site\": {\"slug\": \"my-site\", \"status\": \"active\",\n              \"url\": \"https://my-site.borealhost.ai\"},\n     \"completed_at\": \"iso8601\"}\n\nImmediately after payment `site` may be null with a `provisioning_message`\n— the site is being built. Poll again in a few seconds.\n\nNote: The api_key field appears ONCE in the first poll after completion,\nthen is permanently cleared. `api_key_pending` tells you whether it is still\nwaiting to be collected. Store it immediately.\n",
  "inputSchema": {
    "properties": {
      "checkout_id": {
        "title": "Checkout Id",
        "type": "string"
      }
    },
    "required": [
      "checkout_id"
    ],
    "title": "get_checkout_statusArguments",
    "type": "object"
  }
}

{
  "name": "list_checkouts",
  "description": "List checkouts belonging to the authenticated account.\n\nRequires: API key. Only checkouts with a recorded owner appear — every\ncheckout created while authenticated, plus every checkout that reached\npayment. An anonymous checkout whose one-shot secret was lost cannot be\nlisted; create checkouts authenticated to keep them addressable.\n\nArgs:\n    status: Optional filter — \"not_ready\", \"ready\", \"awaiting_payment\",\n            \"completed\", \"canceled\", \"failed\".\n\nReturns:\n    {\"checkouts\": [{...same shape as get_checkout_status...}], \"note\": \"...\"}\n",
  "inputSchema": {
    "properties": {
      "status": {
        "default": "",
        "title": "Status",
        "type": "string"
      }
    },
    "title": "list_checkoutsArguments",
    "type": "object"
  }
}

{
  "name": "cancel_checkout",
  "description": "Abandon an unpaid checkout and expire its Stripe payment link.\n\nUse this to clean up abandoned attempts rather than leaving them to sit.\nA completed checkout is never cancelled here — that would be a refund, and\nit is refused.\n\nArgs:\n    checkout_id: Checkout session ID\n\nReturns:\n    The checkout, with status \"canceled\".\n\nErrors:\n    VALIDATION_ERROR: Checkout was already paid — cancel the subscription\n                      from the panel instead\n    FORBIDDEN: Missing checkout_secret and no owning API key\n",
  "inputSchema": {
    "properties": {
      "checkout_id": {
        "title": "Checkout Id",
        "type": "string"
      }
    },
    "required": [
      "checkout_id"
    ],
    "title": "cancel_checkoutArguments",
    "type": "object"
  }
}

{
  "name": "add_site",
  "description": "Provision a site into a slot a plan you ALREADY PAY FOR includes.\n\nTwo different things can be meant by \"create a site\". Buying one is the\ncheckout flow (create_checkout → update → complete). This is the other: most\nplans include several sites, and this uses one of them at no extra cost.\nsite_starter includes 5, site_plus 8, site_pro 12, and the agency plans\nmore. `whoami` and `list_sites` show what the account already holds.\n\n⚠ Prefer this over buying a second subscription when a slot is free. Sites\nunder ONE subscription share one CPU pool, one disk quota and one\nrate-limit bucket — that shared budget is what the plan sells. Two\nsubscriptions split it, so the customer pays twice for capacity they had.\n\nRequires: API key with write scope, on the account that owns the plan.\n\nArgs:\n    slug: Sub-domain for the new site (lowercase, digits, hyphens)\n    subscription_id: The subscription whose slot to use\n    client_name: Display name for the site (optional)\n    domain: Custom domain; defaults to <slug>.borealhost.ai\n    site_type: wordpress (default) | php | php-nodb | static-site. Choose\n        here rather than provisioning WordPress and calling set_site_type\n        afterwards — that installs a WordPress you then abandon in the\n        docroot, and it costs a minute of provisioning.\n\nReturns:\n    {\"subscription_id\": \"uuid\", \"provisioning_job_id\": \"uuid\",\n     \"slug\": \"my-second-site\", \"domain\": \"my-second-site.borealhost.ai\",\n     \"status\": \"provisioning\"}\n    Poll get_site_status(slug) until it reports active.\n\nErrors:\n    VALIDATION_ERROR: Plan includes a single site, slug taken, or every\n                      slot is in use (the message reports used/total)\n    NOT_FOUND: Unknown subscription, or it belongs to another account\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "subscription_id": {
        "title": "Subscription Id",
        "type": "string"
      },
      "client_name": {
        "default": "",
        "title": "Client Name",
        "type": "string"
      },
      "domain": {
        "default": "",
        "title": "Domain",
        "type": "string"
      },
      "site_type": {
        "default": "",
        "title": "Site Type",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "subscription_id"
    ],
    "title": "add_siteArguments",
    "type": "object"
  }
}

{
  "name": "set_site_type",
  "description": "Change what a site's docroot IS, without deleting anything.\n\nTypes:\n  wordpress    WordPress, PHP and a database (the default)\n  php          PHP and a database, no WordPress\n  php-nodb     PHP, no database\n  static-site  HTML/CSS/JS only, no PHP and no database\n\n⚠ NON-DESTRUCTIVE. Existing files stay on disk and existing databases are\nnot dropped. They remain the customer's data and keep counting against\ntheir plan's quota — this changes how the site is SERVED, not what it\nholds. Converting back later finds everything where it was.\n\n⚠ Moving to a type without PHP does not merely stop executing .php — it\nstops serving them. The vhost returns 404 for php/phtml, because falling\nthrough to the static handler would return the file's SOURCE, and a\ndocroot converted from WordPress still contains wp-config.php with the\ndatabase password in it.\n\nShared hosting only. On a VPS the whole container is the customer's and\nthey reconfigure it with the tools inside it.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    site_type: One of the four values above\n\nReturns:\n    {\"from\": \"wordpress\", \"to\": \"static-site\", \"database_created\": false,\n     \"placeholder_seeded\": false, \"pool_removed\": true}\n    `placeholder_seeded` is true only when the docroot was EMPTY — an\n    existing site's content is never overwritten.\n\nErrors:\n    VALIDATION_ERROR: Unknown type, or the site is not on shared hosting\n    NOT_FOUND: Unknown slug or not reachable by this account\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "site_type": {
        "title": "Site Type",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "site_type"
    ],
    "title": "set_site_typeArguments",
    "type": "object"
  }
}

{
  "name": "get_wallet",
  "description": "The account's prepaid balance, and what THIS key may spend from it.\n\nTwo ceilings, and both apply: the balance bounds the ACCOUNT, the allowance\nbounds this KEY within it. Plan against `spendable_cents`, which is the\nlower of the two — a $50 balance behind a $5 allowance means $5, and\nplanning against the balance is planning a purchase that gets refused.\n\n`can_spend: false` with a non-zero balance is normal and means this key has\nno budget allocated. That is not a bug: a key with no allowance may not\nspend the account's money, which is the whole reason allowances exist. Ask\nthe human to allocate one in the panel (Compte → Clés API).\n\nRead-only. Money goes in through a human — an agent able to top up its own\nbudget does not have one.\n\nRequires: API key with read scope.\n\nReturns:\n    {\"currency\": \"CAD\", \"balance_cents\": 5000, \"spendable_cents\": 500,\n     \"can_spend\": true,\n     \"key_allowance\": {\"limit_cents\": 2000, \"spent_cents\": 1500,\n                       \"remaining_cents\": 500}}\n\nTo spend it: complete_checkout(..., payment_method=\"wallet\").\n",
  "inputSchema": {
    "properties": {},
    "title": "get_walletArguments",
    "type": "object"
  }
}

{
  "name": "get_site_status",
  "description": "Get detailed status of a hosted site including resources, domains, and modules.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier (the slug chosen during checkout)\n\nReturns:\n    {\"slug\": \"my-site\", \"plan\": \"site_starter\", \"status\": \"active\",\n     \"domains\": [\"my-site.borealhost.ai\"], \"modules\": {...},\n     \"resources\": {\"memory_mb\": 512, \"cpu_cores\": 1, \"disk_gb\": 10},\n     \"created_at\": \"iso8601\"}\n\nErrors:\n    NOT_FOUND: Unknown slug or not owned by this account\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_site_statusArguments",
    "type": "object"
  }
}

{
  "name": "manage_dns",
  "description": "Create or delete DNS records for a site.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    action: \"create\" or \"delete\"\n    record_type: \"A\", \"AAAA\", \"CNAME\", \"MX\", \"TXT\", or \"SRV\"\n    subdomain: Subdomain part (e.g. \"www\", \"mail\"). Leave empty for\n               the apex/root domain.\n    value: Record value. Required for \"create\". Examples:\n           A: \"1.2.3.4\", CNAME: \"example.com\", MX: \"mail.example.com\",\n           TXT: \"v=spf1 include:_spf.google.com ~all\"\n    ttl: Time to live in seconds (default: 3600)\n\nReturns:\n    {\"success\": true, \"record\": {\"type\": \"A\", \"subdomain\": \"www\",\n     \"value\": \"1.2.3.4\", \"ttl\": 3600}}\n\nErrors:\n    VALIDATION_ERROR: Missing value for create, invalid record type\n    NOT_FOUND: Unknown slug\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "action": {
        "title": "Action",
        "type": "string"
      },
      "record_type": {
        "title": "Record Type",
        "type": "string"
      },
      "subdomain": {
        "default": "",
        "title": "Subdomain",
        "type": "string"
      },
      "value": {
        "default": "",
        "title": "Value",
        "type": "string"
      },
      "ttl": {
        "default": 3600,
        "title": "Ttl",
        "type": "integer"
      }
    },
    "required": [
      "slug",
      "action",
      "record_type"
    ],
    "title": "manage_dnsArguments",
    "type": "object"
  }
}

{
  "name": "install_app",
  "description": "Install an app template on a VPS/Cloud site.\n\nStarts a background installation. Poll get_app_status() for progress.\n\nRequires: API key with write scope. VPS or Cloud plan only.\n\nArgs:\n    slug: Site identifier\n    template: App template slug. Available: django, laravel, nextjs, nodejs,\n              nuxtjs, rails, static\n    app_name: Short name for the app (2-50 chars, lowercase alphanumeric + hyphens).\n              Used as subdomain: {app_name}.{site_domain}\n    db_type: Database type. \"none\", \"mysql\", or \"postgresql\" (depends on template)\n    domain: Custom domain override (default: {app_name}.{site_domain})\n    display_name: Human-friendly name (default: derived from app_name)\n\nReturns:\n    {\"id\": \"uuid\", \"app_name\": \"myapp\", \"status\": \"installing\",\n     \"message\": \"Installation started. Poll for progress.\"}\n\nErrors:\n    FORBIDDEN: Plan does not support apps (shared plans)\n    VALIDATION_ERROR: Invalid template, app_name, or duplicate name\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "template": {
        "title": "Template",
        "type": "string"
      },
      "app_name": {
        "title": "App Name",
        "type": "string"
      },
      "db_type": {
        "default": "none",
        "title": "Db Type",
        "type": "string"
      },
      "domain": {
        "default": "",
        "title": "Domain",
        "type": "string"
      },
      "display_name": {
        "default": "",
        "title": "Display Name",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "template",
      "app_name"
    ],
    "title": "install_appArguments",
    "type": "object"
  }
}

{
  "name": "get_app_status",
  "description": "Get app installation status and log.\n\nPoll this after install_app() to track progress.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    app_id: App ID from install_app() response\n\nReturns:\n    {\"id\": \"uuid\", \"app_name\": \"myapp\", \"status\": \"running\"|\"installing\"|\"failed\",\n     \"install_log\": \"...\"}\n\nStatuses: \"installing\", \"running\", \"stopped\", \"failed\", \"uninstalled\"\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "app_id": {
        "title": "App Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "app_id"
    ],
    "title": "get_app_statusArguments",
    "type": "object"
  }
}

{
  "name": "list_apps",
  "description": "List installed apps on a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"apps\": [{\"id\": \"uuid\", \"app_name\": \"myapp\", \"template_slug\": \"django\",\n     \"status\": \"running\", \"domain\": \"myapp.mysite.borealhost.ai\"}]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_appsArguments",
    "type": "object"
  }
}

{
  "name": "list_snapshots",
  "description": "List all snapshots and scheduled snapshots for a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"snapshots\": [{\"id\": \"uuid\", \"name\": \"snap-...\", \"status\": \"completed\",\n     \"storage_type\": \"local\"|\"b2\", \"size_bytes\": 1234, \"size_display\": \"1.2 Mo\",\n     \"created_at\": \"iso8601\"}], \"scheduled\": [...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_snapshotsArguments",
    "type": "object"
  }
}

{
  "name": "create_snapshot",
  "description": "Create a local container snapshot (async).\n\nRuns in background — returns immediately with status \"creating\".\nPoll list_snapshots() to check when status becomes \"completed\" or \"failed\".\n\nAvailable for VPS, dedicated, and cloud plans (any plan with max_snapshots > 0).\nLocal snapshots are stored on the host disk and count against disk quota.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    description: Optional description (max 200 chars)\n\nReturns:\n    {\"id\": \"uuid\", \"name\": \"snap-...\", \"status\": \"creating\",\n     \"storage_type\": \"local\",\n     \"message\": \"Snapshot started. Poll list_snapshots() to check status.\"}\n\nErrors:\n    VALIDATION_ERROR: Max snapshots reached or insufficient disk quota\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "description": {
        "default": "",
        "title": "Description",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "create_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "create_b2_snapshot",
  "description": "Create a B2 cloud-backed snapshot (zero local disk, async).\n\nStreams container data directly to Backblaze B2 via restic.\nNo local disk impact — billed separately at cost+5%.\nRuns in background — returns immediately with status \"creating\".\nPoll list_snapshots() to check when status becomes \"completed\".\nOnly available for VPS plans.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    description: Optional description (max 200 chars)\n\nReturns:\n    {\"id\": \"uuid\", \"name\": \"...\", \"status\": \"creating\",\n     \"storage_type\": \"b2\",\n     \"message\": \"B2 cloud snapshot started. Poll list_snapshots()...\"}\n\nErrors:\n    VALIDATION_ERROR: Not a VPS plan or max snapshots reached\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "description": {
        "default": "",
        "title": "Description",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "create_b2_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "delete_snapshot",
  "description": "Delete a snapshot (local or B2).\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    snapshot_id: UUID of the snapshot to delete\n\nReturns:\n    {\"success\": true, \"message\": \"Snapshot deleted\"}\n\nErrors:\n    NOT_FOUND: Snapshot not found\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "snapshot_id": {
        "title": "Snapshot Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "snapshot_id"
    ],
    "title": "delete_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "rollback_snapshot",
  "description": "Rollback a site to a previous snapshot.\n\nWARNING: This is destructive. The current state of the container will be\nreplaced with the snapshot contents.\n\nRequires: API key with admin scope.\n\nArgs:\n    slug: Site identifier\n    snapshot_id: UUID of the snapshot to rollback to\n\nReturns:\n    {\"success\": true, \"message\": \"Rolled back to snapshot ...\"}\n\nErrors:\n    NOT_FOUND: Snapshot not found or not in completed state\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "snapshot_id": {
        "title": "Snapshot Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "snapshot_id"
    ],
    "title": "rollback_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "get_snapshot_usage",
  "description": "Get snapshot disk usage and quota info for a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"disk_quota_gb\": 200, \"max_snapshots\": 5, \"snapshot_count\": 2,\n     \"local_snapshot_bytes\": 1234, \"b2_snapshot_bytes\": 5678,\n     \"can_create\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_snapshot_usageArguments",
    "type": "object"
  }
}

{
  "name": "schedule_snapshot",
  "description": "Schedule a snapshot for future execution.\n\nRequires: API key with write scope. Max 3 pending schedules per site.\n\nArgs:\n    slug: Site identifier\n    scheduled_at: ISO 8601 datetime (must be in the future)\n    description: Optional description (max 200 chars)\n\nReturns:\n    {\"id\": \"uuid\", \"scheduled_at\": \"iso8601\", \"status\": \"scheduled\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid datetime, not in future, or too many pending\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "scheduled_at": {
        "title": "Scheduled At",
        "type": "string"
      },
      "description": {
        "default": "",
        "title": "Description",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "scheduled_at"
    ],
    "title": "schedule_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "cancel_scheduled_snapshot",
  "description": "Cancel a scheduled snapshot.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    schedule_id: UUID of the scheduled snapshot to cancel\n\nReturns:\n    {\"success\": true, \"message\": \"Scheduled snapshot cancelled\"}\n\nErrors:\n    NOT_FOUND: Schedule not found or already executed\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "schedule_id": {
        "title": "Schedule Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "schedule_id"
    ],
    "title": "cancel_scheduled_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "list_backups",
  "description": "List all backups for a site (automatic and manual).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    [{\"id\": \"uuid\", \"backup_type\": \"auto\"|\"manual\", \"status\": \"completed\",\n     \"size_bytes\": 1234, \"size_display\": \"1.2 Mo\",\n     \"timestamp\": \"iso8601\", \"notes\": \"...\"}]\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_backupsArguments",
    "type": "object"
  }
}

{
  "name": "create_backup",
  "description": "Create a manual backup (runs asynchronously).\n\nThe backup starts in the background. Poll list_backups() to check status.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"id\": \"uuid\", \"status\": \"pending\",\n     \"message\": \"Backup started. Poll list_backups() to check status.\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "create_backupArguments",
    "type": "object"
  }
}

{
  "name": "restore_backup",
  "description": "Restore a site from a backup.\n\nWARNING: This is destructive. The current state of the site will be\nreplaced. Runs asynchronously — may take several minutes.\n\nRequires: API key with admin scope.\n\nArgs:\n    slug: Site identifier\n    backup_id: UUID of the backup to restore from\n\nReturns:\n    {\"success\": true, \"message\": \"Restore started...\"}\n\nErrors:\n    VALIDATION_ERROR: Backup not found or not in completed state\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "backup_id": {
        "title": "Backup Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "backup_id"
    ],
    "title": "restore_backupArguments",
    "type": "object"
  }
}

{
  "name": "get_metrics",
  "description": "Get traffic and performance metrics for a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    days: Number of days of history (1–90, default: 7)\n\nReturns:\n    {\"requests\": [...], \"bandwidth\": [...], \"errors\": [...],\n     \"period\": {\"start\": \"iso8601\", \"end\": \"iso8601\"}}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    VALIDATION_ERROR: days out of range\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "days": {
        "default": 7,
        "title": "Days",
        "type": "integer"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_metricsArguments",
    "type": "object"
  }
}

{
  "name": "scale",
  "description": "Change a site's hosting plan (upgrade or downgrade).\n\nRequires: API key with admin scope. Best practice: create a snapshot\nbefore downgrading.\n\nArgs:\n    slug: Site identifier\n    new_plan: Target plan slug (e.g. \"site_pro\", \"site_managed\").\n              Call list_plans() to see available plans.\n\nReturns:\n    {\"success\": true, \"old_plan\": \"site_starter\", \"new_plan\": \"site_pro\",\n     \"message\": \"Plan changed successfully\"}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    VALIDATION_ERROR: Invalid plan slug or same plan\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "new_plan": {
        "title": "New Plan",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "new_plan"
    ],
    "title": "scaleArguments",
    "type": "object"
  }
}

{
  "name": "decommission",
  "description": "Delete a site and schedule resource cleanup (7-day grace period).\n\nWARNING: This is destructive. The site will be inaccessible immediately\nbut data is retained for 7 days before permanent deletion.\n\nBest practice: create a snapshot before decommissioning.\n\nRequires: API key with admin scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"success\": true, \"message\": \"Site scheduled for deletion\",\n     \"grace_period_days\": 7}\n\nErrors:\n    NOT_FOUND: Unknown slug\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "decommissionArguments",
    "type": "object"
  }
}

{
  "name": "update_account",
  "description": "Update account profile fields (email, language, name).\n\nRequires: API key with write scope.\nOnly provided (non-empty) fields are updated.\n\nArgs:\n    email: New email address\n    language: Language preference — \"fr\" (French) or \"en\" (English)\n    first_name: First name\n    last_name: Last name\n\nReturns:\n    {\"success\": true, \"account\": {\"email\": \"...\", \"language\": \"fr\",\n     \"first_name\": \"...\", \"last_name\": \"...\"}}\n\nErrors:\n    VALIDATION_ERROR: Invalid email format or language code\n",
  "inputSchema": {
    "properties": {
      "email": {
        "default": "",
        "title": "Email",
        "type": "string"
      },
      "language": {
        "default": "",
        "title": "Language",
        "type": "string"
      },
      "first_name": {
        "default": "",
        "title": "First Name",
        "type": "string"
      },
      "last_name": {
        "default": "",
        "title": "Last Name",
        "type": "string"
      }
    },
    "title": "update_accountArguments",
    "type": "object"
  }
}

{
  "name": "delete_account",
  "description": "Permanently anonymize the account. Cancels subscriptions, deactivates keys.\n\nWARNING: This is irreversible. The account will be soft-deleted and all\npersonal data anonymized. All sites will be decommissioned.\n\nRequires: API key with admin scope.\n\nReturns:\n    {\"success\": true, \"message\": \"Account anonymized\"}\n",
  "inputSchema": {
    "properties": {},
    "title": "delete_accountArguments",
    "type": "object"
  }
}

{
  "name": "list_subscriptions",
  "description": "List all subscriptions with plan details, pricing, status, and site slug.\n\nRequires: API key with read scope.\n\nReturns:\n    [{\"id\": \"uuid\", \"plan_slug\": \"site_starter\", \"plan_name\": \"Starter\",\n      \"status\": \"active\", \"billing_period\": \"monthly\",\n      \"price\": {\"amount\": 500, \"currency\": \"cad\"},\n      \"site_slug\": \"my-site\", \"created_at\": \"iso8601\"}]\n",
  "inputSchema": {
    "properties": {},
    "title": "list_subscriptionsArguments",
    "type": "object"
  }
}

{
  "name": "get_billing_portal",
  "description": "Get a Stripe billing portal URL for managing payment methods and invoices.\n\nReturns a URL (not a redirect) that the human can open in a browser.\n\nRequires: API key with read scope.\n\nArgs:\n    flow: Optional. Set to \"payment_method_update\" to go directly\n          to the payment method update page.\n\nReturns:\n    {\"url\": \"https://billing.stripe.com/p/session/...\"}\n",
  "inputSchema": {
    "properties": {
      "flow": {
        "default": "",
        "title": "Flow",
        "type": "string"
      }
    },
    "title": "get_billing_portalArguments",
    "type": "object"
  }
}

{
  "name": "rotate_key",
  "description": "Atomically rotate an API key. Old key is immediately invalidated.\n\nCreates a new key with the same name, scopes, and rate limits.\nThe new key is returned once — store it immediately.\n\nRequires: API key with write scope.\n\nArgs:\n    key_id: UUID of the API key to rotate (get from whoami())\n\nReturns:\n    {\"api_key\": \"bh_...\", \"key_id\": \"uuid\", \"prefix\": \"bh_...\",\n     \"scopes\": [\"read\", \"write\"], \"message\": \"Key rotated. Store securely.\"}\n\nNote: The old key stops working immediately. Update BOREALHOST_API_KEY\nright away.\n",
  "inputSchema": {
    "properties": {
      "key_id": {
        "title": "Key Id",
        "type": "string"
      }
    },
    "required": [
      "key_id"
    ],
    "title": "rotate_keyArguments",
    "type": "object"
  }
}

{
  "name": "create_api_key",
  "description": "Create a new API key with specified scopes.\n\nCannot create keys with higher scopes than the current key.\nSite-scoped keys restrict access to a single site.\n\nRequires: API key with write scope.\n\nArgs:\n    name: Human-readable name for the key (1-100 chars)\n    scopes: Comma-separated scopes. Options: \"read\", \"read,write\",\n            \"read,write,admin\". Default: \"read\"\n    site_slug: Optional — restrict the key to a single site.\n               Omit for account-wide access.\n\nReturns:\n    {\"api_key\": \"bh_...\", \"key_id\": \"uuid\", \"prefix\": \"bh_...\",\n     \"name\": \"My Key\", \"scopes\": [\"read\", \"write\"],\n     \"message\": \"Store this API key securely — it will not be shown again.\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid name, scopes, or max 25 active keys\n    FORBIDDEN: Cannot create keys with higher scopes than current key\n",
  "inputSchema": {
    "properties": {
      "name": {
        "title": "Name",
        "type": "string"
      },
      "scopes": {
        "default": "read",
        "title": "Scopes",
        "type": "string"
      },
      "site_slug": {
        "default": "",
        "title": "Site Slug",
        "type": "string"
      }
    },
    "required": [
      "name"
    ],
    "title": "create_api_keyArguments",
    "type": "object"
  }
}

{
  "name": "list_api_keys",
  "description": "List all API keys for the account.\n\nShows key metadata (name, prefix, scopes, last used) but never the\nfull key value.\n\nRequires: API key with read scope.\n\nReturns:\n    [{\"id\": \"uuid\", \"name\": \"My Key\", \"prefix\": \"bh_a2...\",\n      \"scopes\": [\"read\", \"write\"], \"is_active\": true,\n      \"created_at\": \"iso8601\", \"last_used_at\": \"iso8601\"|null,\n      \"site_slug\": null|\"my-site\"}]\n",
  "inputSchema": {
    "properties": {},
    "title": "list_api_keysArguments",
    "type": "object"
  }
}

{
  "name": "revoke_api_key",
  "description": "Revoke (deactivate) an API key. The key stops working immediately.\n\nRequires: API key with write scope.\n\nArgs:\n    key_id: UUID of the key to revoke (from list_api_keys or whoami)\n\nReturns:\n    {\"success\": true, \"message\": \"API key revoked\"}\n\nErrors:\n    NOT_FOUND: Key not found or already revoked\n",
  "inputSchema": {
    "properties": {
      "key_id": {
        "title": "Key Id",
        "type": "string"
      }
    },
    "required": [
      "key_id"
    ],
    "title": "revoke_api_keyArguments",
    "type": "object"
  }
}

{
  "name": "get_ssh_info",
  "description": "Get SSH connection info for a VPS/dedicated site.\n\nOnly available for VPS/dedicated plans (not shared hosting).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"host\": \"184.107.x.x\", \"port\": 22, \"username\": \"admin\",\n     \"ssh_command\": \"ssh admin@184.107.x.x\"}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    FORBIDDEN: Plan does not support SSH (shared plans)\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_ssh_infoArguments",
    "type": "object"
  }
}

{
  "name": "add_ssh_key",
  "description": "Inject your SSH public key into a site's container for direct SSH access.\n\nThe key is appended to /home/admin/.ssh/authorized_keys.\nOnly available for VPS/dedicated plans.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    public_key: SSH public key string. Supported types:\n                ssh-ed25519, ssh-rsa, ecdsa-sha2-nistp256/384/521\n\nReturns:\n    {\"success\": true, \"message\": \"SSH key added\",\n     \"ssh_command\": \"ssh admin@184.107.x.x\"}\n\nErrors:\n    VALIDATION_ERROR: Invalid or unsupported key format\n    FORBIDDEN: Plan does not support SSH\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "public_key": {
        "title": "Public Key",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "public_key"
    ],
    "title": "add_ssh_keyArguments",
    "type": "object"
  }
}

{
  "name": "list_files",
  "description": "List files and directories in a site's container.\n\nPath scoping depends on the plan:\n- Shared plans: rooted at wp-content/ (WordPress content directory)\n- VPS/dedicated plans: full filesystem access\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path to list (empty for root of accessible area)\n\nReturns:\n    {\"path\": \"/\", \"entries\": [{\"name\": \"index.php\", \"type\": \"file\",\n     \"size\": 1234, \"modified\": \"iso8601\"}, {\"name\": \"uploads\",\n     \"type\": \"directory\", \"modified\": \"iso8601\"}]}\n\nErrors:\n    NOT_FOUND: Unknown slug or path doesn't exist\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "default": "",
        "title": "Path",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_filesArguments",
    "type": "object"
  }
}

{
  "name": "read_file",
  "description": "Read the contents of a file from a site&#39;s container.\n\nMax file size: 512KB. Binary files are rejected — use the site&#39;s\nfile manager or SSH for binary files.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path to the file\n\nReturns:\n    {\"path\": \"wp-config.php\", \"content\": \"<?php ...\",\n     \"size\": 1234, \"encoding\": \"utf-8\"}\n\nErrors:\n    NOT_FOUND: File doesn&#39;t exist\n    VALIDATION_ERROR: File is binary or exceeds 512KB\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "title": "Path",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "path"
    ],
    "title": "read_fileArguments",
    "type": "object"
  }
}

{
  "name": "write_file",
  "description": "Write or overwrite a text file in a site's container.\n\nCreates parent directories if they don't exist.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path to the file\n    content: File content as a UTF-8 string\n\nReturns:\n    {\"success\": true, \"path\": \"...\", \"size\": 1234}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    FORBIDDEN: Protected system path\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "title": "Path",
        "type": "string"
      },
      "content": {
        "title": "Content",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "path",
      "content"
    ],
    "title": "write_fileArguments",
    "type": "object"
  }
}

{
  "name": "upload_file",
  "description": "Upload a base64-encoded file to a site's container.\n\nUse this for binary files (images, archives, fonts, etc.).\nFor text files, prefer write_file().\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path including filename (e.g. \"images/logo.png\")\n    content_b64: Base64-encoded file content\n\nReturns:\n    {\"success\": true, \"path\": \"images/logo.png\", \"size\": 45678}\n\nErrors:\n    VALIDATION_ERROR: Invalid base64 encoding\n    FORBIDDEN: Protected system path\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "title": "Path",
        "type": "string"
      },
      "content_b64": {
        "title": "Content B64",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "path",
      "content_b64"
    ],
    "title": "upload_fileArguments",
    "type": "object"
  }
}

{
  "name": "delete_file",
  "description": "Delete a file or directory from a site's container.\n\nDirectories are deleted recursively. Protected system paths\n(e.g. /etc, /usr) cannot be deleted.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path to delete\n\nReturns:\n    {\"success\": true, \"path\": \"...\", \"message\": \"Deleted\"}\n\nErrors:\n    NOT_FOUND: Path doesn't exist\n    FORBIDDEN: Protected system path\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "title": "Path",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "path"
    ],
    "title": "delete_fileArguments",
    "type": "object"
  }
}

{
  "name": "create_directory",
  "description": "Create a directory in a site's container.\n\nCreates parent directories if they don't exist.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    path: Relative path of the directory to create\n\nReturns:\n    {\"success\": true, \"path\": \"uploads/2024\", \"message\": \"Directory created\"}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    FORBIDDEN: Protected system path\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "title": "Path",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "path"
    ],
    "title": "create_directoryArguments",
    "type": "object"
  }
}

{
  "name": "list_plugins",
  "description": "List installed WordPress plugins with status.\n\nRequires: API key with read scope. WordPress sites only.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"plugins\": [{\"name\": \"akismet\", \"status\": \"active\", \"version\": \"5.3\",\n     \"update_available\": false}, ...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_pluginsArguments",
    "type": "object"
  }
}

{
  "name": "list_themes",
  "description": "List installed WordPress themes with status.\n\nRequires: API key with read scope. WordPress sites only.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"themes\": [{\"name\": \"twentytwentyfour\", \"status\": \"active\",\n     \"version\": \"1.0\", \"update_available\": false}, ...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_themesArguments",
    "type": "object"
  }
}

{
  "name": "manage_plugin",
  "description": "Install, activate, deactivate, or delete a WordPress plugin.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    action: \"install\", \"activate\", \"deactivate\", or \"delete\"\n    plugin: Plugin slug (e.g. \"akismet\", \"jetpack\", \"woocommerce\")\n\nReturns:\n    {\"action\": \"install\", \"plugin\": \"jetpack\", \"result\": {...}}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "action": {
        "title": "Action",
        "type": "string"
      },
      "plugin": {
        "title": "Plugin",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "action",
      "plugin"
    ],
    "title": "manage_pluginArguments",
    "type": "object"
  }
}

{
  "name": "manage_theme",
  "description": "Install, activate, or delete a WordPress theme.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    action: \"install\", \"activate\", or \"delete\"\n    theme: Theme slug (e.g. \"twentytwentyfour\", \"astra\")\n\nReturns:\n    {\"action\": \"install\", \"theme\": \"astra\", \"result\": {...}}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "action": {
        "title": "Action",
        "type": "string"
      },
      "theme": {
        "title": "Theme",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "action",
      "theme"
    ],
    "title": "manage_themeArguments",
    "type": "object"
  }
}

{
  "name": "wp_check_updates",
  "description": "Check for available WordPress core, plugin, and theme updates.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"core\": {\"current\": \"6.5\", \"update\": \"6.6\"},\n     \"plugins\": [{\"name\": \"...\", \"current\": \"1.0\", \"new\": \"1.1\"}],\n     \"themes\": [...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "wp_check_updatesArguments",
    "type": "object"
  }
}

{
  "name": "wp_update_all",
  "description": "Update WordPress core, all plugins, and all themes.\n\nRuns all updates in sequence. May take up to 2 minutes.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"core\": {...}, \"plugins\": [...], \"themes\": [...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "wp_update_allArguments",
    "type": "object"
  }
}

{
  "name": "list_cron",
  "description": "List cron jobs on a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"jobs\": [{\"line\": 1, \"schedule\": \"*/5 * * * *\",\n     \"command\": \"/usr/bin/php /var/www/html/wp-cron.php\"}, ...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_cronArguments",
    "type": "object"
  }
}

{
  "name": "add_cron",
  "description": "Add a cron job to a site.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    schedule: Cron schedule (e.g. \"*/5 * * * *\", \"0 2 * * *\")\n    command: Command to execute\n\nReturns:\n    {\"added\": true, \"result\": {...}}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "schedule": {
        "title": "Schedule",
        "type": "string"
      },
      "command": {
        "title": "Command",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "schedule",
      "command"
    ],
    "title": "add_cronArguments",
    "type": "object"
  }
}

{
  "name": "delete_cron",
  "description": "Delete a cron job by line number.\n\nGet line numbers from list_cron().\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    line_number: Line number of the cron entry to delete\n\nReturns:\n    {\"deleted\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "line_number": {
        "title": "Line Number",
        "type": "integer"
      }
    },
    "required": [
      "slug",
      "line_number"
    ],
    "title": "delete_cronArguments",
    "type": "object"
  }
}

{
  "name": "ssl_info",
  "description": "Get SSL certificate information for a site.\n\nReturns certificate details, expiry date, and issuer.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"issuer\": \"Let's Encrypt\", \"domain\": \"example.com\",\n     \"expires_at\": \"iso8601\", \"days_remaining\": 60,\n     \"force_https\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "ssl_infoArguments",
    "type": "object"
  }
}

{
  "name": "ssl_renew",
  "description": "Force SSL certificate renewal via certbot.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"renewed\": true, \"expires_at\": \"iso8601\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "ssl_renewArguments",
    "type": "object"
  }
}

{
  "name": "list_php_versions",
  "description": "List available PHP versions and the currently active one.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"versions\": [{\"version\": \"8.1\", \"active\": false},\n     {\"version\": \"8.2\", \"active\": false},\n     {\"version\": \"8.3\", \"active\": true}]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_php_versionsArguments",
    "type": "object"
  }
}

{
  "name": "switch_php",
  "description": "Switch the active PHP version for a site.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    version: Target PHP version (e.g. \"8.3\", \"8.2\", \"8.1\")\n\nReturns:\n    {\"version\": \"8.3\", \"result\": {...}}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "version": {
        "title": "Version",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "version"
    ],
    "title": "switch_phpArguments",
    "type": "object"
  }
}

{
  "name": "cache_status",
  "description": "Get cache status (Redis, WP object cache, hit rates).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"redis_running\": true, \"object_cache_enabled\": true,\n     \"hit_rate\": 0.95, \"memory_used_mb\": 12}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "cache_statusArguments",
    "type": "object"
  }
}

{
  "name": "cache_flush",
  "description": "Flush all caches (Redis + WP object cache).\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"flushed\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "cache_flushArguments",
    "type": "object"
  }
}

{
  "name": "cache_toggle",
  "description": "Enable or disable the WordPress object cache.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    enable: true to enable, false to disable\n\nReturns:\n    {\"enabled\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "enable": {
        "title": "Enable",
        "type": "boolean"
      }
    },
    "required": [
      "slug",
      "enable"
    ],
    "title": "cache_toggleArguments",
    "type": "object"
  }
}

{
  "name": "get_database_info",
  "description": "Get WordPress database information (size, tables, row counts).\n\nRequires: API key with read scope. WordPress sites only.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"database\": \"wp_mysite\", \"size_mb\": 45.2,\n     \"tables\": 12, \"total_rows\": 15432}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_database_infoArguments",
    "type": "object"
  }
}

{
  "name": "optimize_database",
  "description": "Optimize WordPress database tables (reduces bloat).\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"optimized\": true, \"tables_optimized\": 12}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "optimize_databaseArguments",
    "type": "object"
  }
}

{
  "name": "database_search_replace",
  "description": "Search and replace in WordPress database (e.g. URL migration).\n\nHandles serialized data safely. Use dry_run=true first to preview changes.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    old: String to search for (e.g. \"http://old-domain.com\")\n    new: Replacement string (e.g. \"https://new-domain.com\")\n    dry_run: Preview only without making changes (default: true)\n\nReturns:\n    {\"replacements\": 42, \"tables_affected\": 5, \"dry_run\": true}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "old": {
        "title": "Old",
        "type": "string"
      },
      "new": {
        "title": "New",
        "type": "string"
      },
      "dry_run": {
        "default": true,
        "title": "Dry Run",
        "type": "boolean"
      }
    },
    "required": [
      "slug",
      "old",
      "new"
    ],
    "title": "database_search_replaceArguments",
    "type": "object"
  }
}

{
  "name": "list_databases",
  "description": "List all databases on a site's container.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"databases\": [\"wordpress\", \"app_db\", ...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_databasesArguments",
    "type": "object"
  }
}

{
  "name": "list_tables",
  "description": "List tables in a database.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    database: Database name\n\nReturns:\n    {\"tables\": [{\"name\": \"wp_posts\", \"rows\": 1234, \"size_mb\": 5.2}, ...]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "database": {
        "title": "Database",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "database"
    ],
    "title": "list_tablesArguments",
    "type": "object"
  }
}

{
  "name": "execute_query",
  "description": "Execute a SQL query on a site's database.\n\nSupports SELECT, INSERT, UPDATE, DELETE, and DDL statements.\nResults are limited to 1000 rows for SELECT queries.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    database: Database name\n    query: SQL query string\n\nReturns:\n    {\"columns\": [\"id\", \"title\"], \"rows\": [[1, \"Hello\"], ...],\n     \"affected_rows\": 0, \"query_time_ms\": 12}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "database": {
        "title": "Database",
        "type": "string"
      },
      "query": {
        "title": "Query",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "database",
      "query"
    ],
    "title": "execute_queryArguments",
    "type": "object"
  }
}

{
  "name": "get_stack_info",
  "description": "Get detailed system stack information (OS, PHP, DB, web server versions).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"os\": \"Debian 12\", \"kernel\": \"6.1.0\",\n     \"php\": \"8.3.4\", \"mysql\": \"10.11.6-MariaDB\",\n     \"nginx\": \"1.24.0\", \"wordpress\": \"6.5\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_stack_infoArguments",
    "type": "object"
  }
}

{
  "name": "get_resource_snapshot",
  "description": "Get current resource usage (CPU, memory, disk, load average).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"cpu_percent\": 12.5, \"memory_mb\": 384, \"memory_total_mb\": 512,\n     \"disk_used_gb\": 3.2, \"disk_total_gb\": 10,\n     \"load_1m\": 0.5, \"load_5m\": 0.3, \"load_15m\": 0.2}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_resource_snapshotArguments",
    "type": "object"
  }
}

{
  "name": "cloudflare_proxy_status",
  "description": "Get Cloudflare proxy (CDN) status for a site.\n\nShows whether traffic is routed through Cloudflare's CDN (orange cloud)\nor goes direct to origin (grey cloud / DNS-only).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"domain\": \"my-site.borealhost.ai\", \"has_record\": true,\n     \"proxied\": true, \"ip\": \"1.2.3.4\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "cloudflare_proxy_statusArguments",
    "type": "object"
  }
}

{
  "name": "cloudflare_set_proxy",
  "description": "Enable or disable Cloudflare CDN proxy for a site.\n\nWhen enabled (orange cloud): traffic goes through Cloudflare's CDN,\ngets caching, DDoS protection, and SSL termination at the edge.\nWhen disabled (grey cloud): traffic goes directly to origin server.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    proxied: true to enable CDN proxy, false to disable\n\nReturns:\n    {\"domain\": \"my-site.borealhost.ai\", \"proxied\": true, \"ip\": \"1.2.3.4\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "proxied": {
        "title": "Proxied",
        "type": "boolean"
      }
    },
    "required": [
      "slug",
      "proxied"
    ],
    "title": "cloudflare_set_proxyArguments",
    "type": "object"
  }
}

{
  "name": "cloudflare_purge_cache",
  "description": "Purge Cloudflare CDN cache for a site.\n\nWithout urls: purges all cached content for the site's subdomain.\nWith urls: purges only the specified URLs (max 30 per call).\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    urls: Optional list of specific URLs to purge\n          (e.g. [\"https://my-site.borealhost.ai/style.css\"])\n\nReturns:\n    {\"purged\": true, \"scope\": \"host\", \"domain\": \"my-site.borealhost.ai\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "urls": {
        "default": null,
        "items": {},
        "title": "Urls",
        "type": "array"
      }
    },
    "required": [
      "slug"
    ],
    "title": "cloudflare_purge_cacheArguments",
    "type": "object"
  }
}

{
  "name": "list_ftp_accounts",
  "description": "List SFTP accounts on a site.\n\nAlso returns the host and port to connect to. Do not use the site's domain\nfor SFTP: it is Cloudflare-proxied and only carries HTTP(S).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"accounts\": [{\"username\": \"sftpuser\", \"home\": \"/wordpress\", \"uid\": 1001}],\n     \"configured\": true,\n     \"connection\": {\"host\": \"1.2.3.4\", \"port\": 9312, \"protocol\": \"SFTP\"}}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_ftp_accountsArguments",
    "type": "object"
  }
}

{
  "name": "create_ftp_account",
  "description": "Create an SFTP account on a site.\n\nThe account is chrooted to /var/www and lands in home_dir. Password must be\nat least 8 characters. Username must be lowercase alphanumeric.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    username: SFTP username (lowercase, max 32 chars)\n    password: Password (min 8 chars)\n    home_dir: Landing directory inside /var/www. Leave empty to land at\n        /var/www itself, which lists every site directory.\n\nReturns:\n    {\"success\": true, \"username\": \"sftpuser\", \"home_dir\": \"/wordpress\",\n     \"protocol\": \"sftp\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "username": {
        "title": "Username",
        "type": "string"
      },
      "password": {
        "title": "Password",
        "type": "string"
      },
      "home_dir": {
        "default": "",
        "title": "Home Dir",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "username",
      "password"
    ],
    "title": "create_ftp_accountArguments",
    "type": "object"
  }
}

{
  "name": "remove_ftp_account",
  "description": "Remove an SFTP account from a site.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    username: SFTP username to remove\n\nReturns:\n    {\"removed\": true, \"username\": \"sftpuser\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "username": {
        "title": "Username",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "username"
    ],
    "title": "remove_ftp_accountArguments",
    "type": "object"
  }
}

{
  "name": "list_alert_rules",
  "description": "List user-configurable alert rules for a site.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    [{\"id\": \"uuid\", \"metric\": \"disk\", \"operator\": \"gt\",\n      \"threshold\": 90, \"severity\": \"warning\", \"enabled\": true,\n      \"cooldown_minutes\": 30, \"notify_email\": true}]\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_alert_rulesArguments",
    "type": "object"
  }
}

{
  "name": "create_alert_rule",
  "description": "Create an alert rule to monitor CPU, memory, or disk usage.\n\nWhen the metric crosses the threshold, a notification is sent via\nemail and/or webhook. Max 10 rules per site.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    metric: \"cpu\", \"memory\", or \"disk\" (percentage-based)\n    threshold: Threshold value 0-100 (e.g. 90 for 90%)\n    operator: \"gt\" (greater than) or \"lt\" (less than). Default: \"gt\"\n    severity: \"warning\" or \"critical\". Default: \"warning\"\n    cooldown_minutes: Min minutes between repeated alerts. Default: 30\n    notify_email: Send email notification. Default: true\n    notify_webhook: Optional webhook URL for POST notifications\n\nReturns:\n    {\"id\": \"uuid\", \"metric\": \"disk\", \"threshold\": 90, ...}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "metric": {
        "title": "Metric",
        "type": "string"
      },
      "threshold": {
        "title": "Threshold",
        "type": "number"
      },
      "operator": {
        "default": "gt",
        "title": "Operator",
        "type": "string"
      },
      "severity": {
        "default": "warning",
        "title": "Severity",
        "type": "string"
      },
      "cooldown_minutes": {
        "default": 30,
        "title": "Cooldown Minutes",
        "type": "integer"
      },
      "notify_email": {
        "default": true,
        "title": "Notify Email",
        "type": "boolean"
      },
      "notify_webhook": {
        "default": "",
        "title": "Notify Webhook",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "metric",
      "threshold"
    ],
    "title": "create_alert_ruleArguments",
    "type": "object"
  }
}

{
  "name": "delete_alert_rule",
  "description": "Delete an alert rule.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    rule_id: UUID of the alert rule to delete\n\nReturns:\n    {\"deleted\": true, \"id\": \"uuid\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "rule_id": {
        "title": "Rule Id",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "rule_id"
    ],
    "title": "delete_alert_ruleArguments",
    "type": "object"
  }
}

{
  "name": "run_malware_scan",
  "description": "Run a ClamAV malware scan on a site's container.\n\nScans the web root (or specified path) for malware, viruses, and trojans.\nClamAV is installed automatically if not present. Excludes node_modules,\nvendor, .git, and cache directories.\n\nMay take up to 5 minutes for large sites.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    path: Directory to scan (default: /var/www/html)\n\nReturns:\n    {\"infected_files\": [{\"path\": \"/var/www/html/shell.php\", \"threat\": \"Php.Malware.Agent\"}],\n     \"scanned_count\": 1234, \"infected_count\": 1, \"scan_time_s\": 45.2}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "path": {
        "default": "",
        "title": "Path",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "run_malware_scanArguments",
    "type": "object"
  }
}

{
  "name": "list_firewall_rules",
  "description": "List IP allow/deny firewall rules for a site.\n\nRules are implemented as Nginx allow/deny directives per container.\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n\nReturns:\n    {\"rules\": [{\"ip\": \"1.2.3.4\", \"action\": \"deny\"},\n     {\"ip\": \"10.0.0.0/8\", \"action\": \"allow\"}]}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "list_firewall_rulesArguments",
    "type": "object"
  }
}

{
  "name": "add_firewall_rule",
  "description": "Add an IP firewall rule (allow or deny) and reload Nginx.\n\nSupports IPv4, IPv6, and CIDR notation. Max 100 rules per site.\nIf a rule already exists for the IP, the action is updated.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    ip: IP address or CIDR (e.g. \"1.2.3.4\", \"10.0.0.0/8\", \"2001:db8::/32\")\n    action: \"deny\" (block) or \"allow\" (whitelist). Default: \"deny\"\n\nReturns:\n    {\"added\": true, \"ip\": \"1.2.3.4\", \"action\": \"deny\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "ip": {
        "title": "Ip",
        "type": "string"
      },
      "action": {
        "default": "deny",
        "title": "Action",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "ip"
    ],
    "title": "add_firewall_ruleArguments",
    "type": "object"
  }
}

{
  "name": "remove_firewall_rule",
  "description": "Remove an IP firewall rule and reload Nginx.\n\nRequires: API key with write scope.\n\nArgs:\n    slug: Site identifier\n    ip: IP address or CIDR to remove (must match exactly)\n\nReturns:\n    {\"removed\": true, \"ip\": \"1.2.3.4\"}\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "ip": {
        "title": "Ip",
        "type": "string"
      }
    },
    "required": [
      "slug",
      "ip"
    ],
    "title": "remove_firewall_ruleArguments",
    "type": "object"
  }
}

{
  "name": "get_logs",
  "description": "Retrieve container logs (error, access, or PHP).\n\nRequires: API key with read scope.\n\nArgs:\n    slug: Site identifier\n    log_type: \"error\" (Nginx/Apache errors), \"access\" (HTTP request log),\n              or \"php\" (PHP-FPM errors, WordPress sites only)\n    lines: Number of lines to retrieve (1–500, default: 100)\n    search: Optional keyword filter — only lines containing this string\n\nReturns:\n    {\"log_type\": \"error\", \"lines\": [\"2024-01-15 ... error ...\", ...],\n     \"count\": 42, \"truncated\": false}\n\nErrors:\n    NOT_FOUND: Unknown slug\n    VALIDATION_ERROR: Invalid log_type or lines out of range\n",
  "inputSchema": {
    "properties": {
      "slug": {
        "title": "Slug",
        "type": "string"
      },
      "log_type": {
        "default": "error",
        "title": "Log Type",
        "type": "string"
      },
      "lines": {
        "default": 100,
        "title": "Lines",
        "type": "integer"
      },
      "search": {
        "default": "",
        "title": "Search",
        "type": "string"
      }
    },
    "required": [
      "slug"
    ],
    "title": "get_logsArguments",
    "type": "object"
  }
}

{
  "name": "list_domains",
  "description": "List all domains owned by the authenticated user.\n\nRequires: API key with read scope.\n\nReturns:\n    [{\"domain\": \"example.com\", \"status\": \"active\",\n      \"expires_at\": \"iso8601\", \"auto_renew\": true,\n      \"linked_site\": \"my-site\"}]\n",
  "inputSchema": {
    "properties": {},
    "title": "list_domainsArguments",
    "type": "object"
  }
}

{
  "name": "search_domain",
  "description": "Check domain availability and get pricing.\n\nRequires: API key with read scope.\n\nArgs:\n    domain: Full domain name (e.g. \"example.com\", \"mybiz.ca\")\n\nReturns:\n    {\"domain\": \"example.com\", \"available\": true,\n     \"price\": {\"amount\": 15.99, \"currency\": \"CAD\", \"period\": \"1 year\"},\n     \"premium\": false}\n\nNote: .ca domains require ca_legal_type when registering.\n",
  "inputSchema": {
    "properties": {
      "domain": {
        "title": "Domain",
        "type": "string"
      }
    },
    "required": [
      "domain"
    ],
    "title": "search_domainArguments",
    "type": "object"
  }
}

{
  "name": "register_domain",
  "description": "Register a new domain with WHOIS contact info and Stripe billing.\n\nThe domain cost is charged to the user's active subscription.\nFree domain if plan includes free_domain_annual + annual billing + first domain.\n\nRequires: API key with write scope.\n\nArgs:\n    domain: Full domain name (e.g. \"example.ca\", \"mybusiness.com\")\n    first_name: Registrant first name\n    last_name: Registrant last name\n    email: Registrant email address\n    phone: Phone number in E.164 format: \"+1.5145551234\"\n    address1: Street address (e.g. \"123 Rue Principale\")\n    city: City (e.g. \"Montreal\")\n    state: Province/state code (e.g. \"QC\", \"ON\", \"BC\")\n    postal_code: Postal/ZIP code (e.g. \"H2X 1Y4\")\n    country: ISO 3166-1 alpha-2 country code (default: \"CA\")\n    period: Registration period in years (1–10, default: 1)\n    usage_mode: What the domain points at.\n                \"site\" (default) links it to the billing subscription's\n                site with automatic DNS + Nginx + SSL.\n                \"external_ns\" delegates it to `nameservers` — the domain is\n                registered here but hosted elsewhere; we manage no DNS.\n                \"dns_only\" keeps it on our DNS with no site behind it.\n                \"forward\" redirects visitors to `forward_url`.\n    nameservers: Ordered list of 2–6 nameserver hostnames. Required when\n                 usage_mode=\"external_ns\" (e.g. [\"ns1.other.com\", \"ns2.other.com\"])\n    forward_url: Redirect target, required when usage_mode=\"forward\"\n                 (e.g. \"https://example.org\")\n    forward_type: \"301\" permanent (default) or \"302\" temporary\n    forward_include_path: Append the visitor's path to the target (default: True)\n    ca_legal_type: Required for .ca domains. CIRA legal types:\n                   \"CCO\" (Canadian citizen), \"RES\" (permanent resident),\n                   \"CCT\" (corporation), \"GOV\" (government), \"EDU\" (education),\n                   \"ASS\" (association), \"HOP\" (hospital), \"PRT\" (partnership),\n                   \"TDM\" (trademark), \"TRD\" (trade union), \"PLT\" (political party),\n                   \"LAM\" (library/archive/museum), \"MAJ\" (Her Majesty),\n                   \"INB\" (Indian band), \"ABO\" (Aboriginal peoples),\n                   \"LGR\" (legal representative)\n\nReturns:\n    {\"domain\": \"example.ca\", \"status\": \"registered\",\n     \"expires_at\": \"iso8601\", \"message\": \"Domain registered successfully\"}\n\nErrors:\n    VALIDATION_ERROR: Missing required fields, invalid phone format,\n                      missing ca_legal_type for .ca domains\n    NOT_FOUND: Domain not available (already registered by someone else)\n",
  "inputSchema": {
    "properties": {
      "domain": {
        "title": "Domain",
        "type": "string"
      },
      "first_name": {
        "title": "First Name",
        "type": "string"
      },
      "last_name": {
        "title": "Last Name",
        "type": "string"
      },
      "email": {
        "title": "Email",
        "type": "string"
      },
      "phone": {
        "title": "Phone",
        "type": "string"
      },
      "address1": {
        "title": "Address1",
        "type": "string"
      },
      "city": {
        "title": "City",
        "type": "string"
      },
      "state": {
        "title": "State",
        "type": "string"
      },
      "postal_code": {
        "title": "Postal Code",
        "type": "string"
      },
      "country": {
        "default": "CA",
        "title": "Country",
        "type": "string"
      },
      "period": {
        "default": 1,
        "title": "Period",
        "type": "integer"
      },
      "ca_legal_type": {
        "default": "",
        "title": "Ca Legal Type",
        "type": "string"
      },
      "usage_mode": {
        "default": "site",
        "title": "Usage Mode",
        "type": "string"
      },
      "nameservers": {
        "default": null,
        "items": {},
        "title": "Nameservers",
        "type": "array"
      },
      "forward_url": {
        "default": "",
        "title": "Forward Url",
        "type": "string"
      },
      "forward_type": {
        "default": "301",
        "title": "Forward Type",
        "type": "string"
      },
      "forward_include_path": {
        "default": true,
        "title": "Forward Include Path",
        "type": "boolean"
      }
    },
    "required": [
      "domain",
      "first_name",
      "last_name",
      "email",
      "phone",
      "address1",
      "city",
      "state",
      "postal_code"
    ],
    "title": "register_domainArguments",
    "type": "object"
  }
}

{
  "name": "domain_detail",
  "description": "Get full domain details including DNS and infrastructure status.\n\nRequires: API key with read scope.\n\nArgs:\n    domain_name: Full domain name (e.g. \"example.com\")\n\nReturns:\n    {\"domain\": \"example.com\", \"status\": \"active\",\n     \"expires_at\": \"iso8601\", \"auto_renew\": true,\n     \"nameservers\": [\"ns1.borealhost.ai\", \"ns2.borealhost.ai\"],\n     \"dns_records\": [...], \"linked_site\": \"my-site\"}\n\nErrors:\n    NOT_FOUND: Domain not owned by this account\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      }
    },
    "required": [
      "domain_name"
    ],
    "title": "domain_detailArguments",
    "type": "object"
  }
}

{
  "name": "list_subdomains",
  "description": "List subdomain DNS records for a domain you own.\n\nRequires: API key with read scope.\n\nArgs:\n    domain_name: Registrable domain (e.g. \"example.com\")\n\nReturns:\n    [{\"fqdn\": \"blog.example.com\", \"subdomain\": \"blog\",\n      \"record_type\": \"A\", \"value\": \"1.2.3.4\", \"is_auto\": true}, ...]\n\nErrors:\n    NOT_FOUND: Domain not found\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      }
    },
    "required": [
      "domain_name"
    ],
    "title": "list_subdomainsArguments",
    "type": "object"
  }
}

{
  "name": "add_subdomain",
  "description": "Create and route a subdomain of a site-linked domain.\n\nCreates the DNS A record (if absent) pointing at the site's server,\nthen configures the nginx vhost and SSL certificate on that server.\nThe domain must already be linked to a site (see link_domain).\n\nIdempotent: if the DNS record already exists and points at the site's\nserver, the nginx/SSL steps are (re)applied — safe to re-call, e.g. to\nretry SSL after DNS propagation. May take up to 3 minutes when a\ncertificate is issued.\n\nRequires: API key with write scope.\n\nArgs:\n    domain_name: Registrable domain linked to a site (e.g. \"example.com\")\n    subdomain: Subdomain label only, no dots (e.g. \"blog\")\n\nReturns:\n    {\"fqdn\": \"blog.example.com\", \"domain\": \"example.com\",\n     \"site\": \"my-site\", \"message\": \"...\"}\n\nErrors:\n    NOT_FOUND: Domain not found\n    VALIDATION_ERROR: Domain not linked to a site, invalid label, or\n        an existing record points at a different server\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      },
      "subdomain": {
        "title": "Subdomain",
        "type": "string"
      }
    },
    "required": [
      "domain_name",
      "subdomain"
    ],
    "title": "add_subdomainArguments",
    "type": "object"
  }
}

{
  "name": "delete_subdomain",
  "description": "Remove a subdomain: its DNS record, nginx vhost and certificate.\n\nThe inverse of add_subdomain. Removes the DNS record AND the server-side\nvhost and cert, so the name stops resolving and stops being served. Nothing\nelse on the domain is touched.\n\nRequires: API key with write scope.\n\nArgs:\n    domain_name: Registrable domain linked to a site (e.g. \"example.com\")\n    subdomain: Subdomain label only, no dots (e.g. \"blog\")\n\nReturns:\n    {\"fqdn\": \"blog.example.com\", \"domain\": \"example.com\",\n     \"removed\": [\"dns\", \"vhost\", \"cert\"], \"message\": \"...\"}\n\nErrors:\n    NOT_FOUND: Domain or subdomain not found\n    VALIDATION_ERROR: Domain not linked to a site, or invalid label\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      },
      "subdomain": {
        "title": "Subdomain",
        "type": "string"
      }
    },
    "required": [
      "domain_name",
      "subdomain"
    ],
    "title": "delete_subdomainArguments",
    "type": "object"
  }
}

{
  "name": "link_domain",
  "description": "Link a domain to a hosted site.\n\nAttaches the domain to the specified site and triggers automatic\nDNS configuration and SSL provisioning.\n\nWARNING: Regenerates this site's nginx vhost on the host from scratch. Any config applied to that vhost by hand is lost, silently — the site keeps serving and only the hand-added behaviour disappears. Config set via the nginx-snippet endpoint is NOT affected: it lives in a separate file the regenerated vhost re-includes, which is what that endpoint is for.\n\nRequires: API key with write scope.\n\nArgs:\n    domain_name: Full domain name (e.g. \"example.com\")\n    site_slug: Site identifier to link the domain to\n\nReturns:\n    {\"success\": true, \"domain\": \"example.com\",\n     \"linked_site\": \"my-site\", \"message\": \"Domain linked\"}\n\nErrors:\n    NOT_FOUND: Domain or site not found\n    VALIDATION_ERROR: Domain already linked to another site\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      },
      "site_slug": {
        "title": "Site Slug",
        "type": "string"
      }
    },
    "required": [
      "domain_name",
      "site_slug"
    ],
    "title": "link_domainArguments",
    "type": "object"
  }
}

{
  "name": "get_site_nginx_snippet",
  "description": "Read the custom nginx config for a domain on the BorealHost host proxy.\n\nYour site sits behind a BorealHost reverse proxy that terminates TLS and\nforwards to your container. This returns the custom nginx block applied to\nthat proxy for this domain (empty if you have not set one).\n\nRequires: API key with read scope.\n\nArgs:\n    domain_name: Full domain name (e.g. \"example.com\")\n\nReturns:\n    {\"domain\": \"example.com\", \"content\": \"location ...\", \"exists\": true}\n\nErrors:\n    NOT_FOUND: Domain not found\n    VALIDATION_ERROR: Domain is not linked to a site\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      }
    },
    "required": [
      "domain_name"
    ],
    "title": "get_site_nginx_snippetArguments",
    "type": "object"
  }
}

{
  "name": "set_site_nginx_snippet",
  "description": "Set custom nginx config on the BorealHost host proxy — WebSocket, timeouts, headers.\n\nUse this when configuring your container&#39;s own nginx is not enough because\nsomething in front of it is interfering. The host proxy sits between the\ninternet and your container, and by default its catch-all `location /` does\nnot do anything special per-site.\n\nWEBSOCKETS: if your WebSocket endpoint returns 400 through your domain but\nupgrades correctly (101) when tested inside your container, the Upgrade\nheader is being dropped in front of you. Add a location block that relays it:\n\n    location ^~ /your/ws/path/ {\n        proxy_pass <your site&#39;s existing upstream>;\n        proxy_http_version 1.1;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n        proxy_read_timeout 3600;\n        proxy_send_timeout 3600;\n        error_page 502 503 504 =502;\n    }\n\nWhen testing with curl, force HTTP/1.1 (curl --http1.1). A WebSocket handshake uses the Upgrade header, which is invalid in HTTP/2 —\ncurl negotiates h2 with a CDN by default and the edge answers 400, which looks exactly like the bug you are trying to fix.\n\nThis config lives OUTSIDE the generated vhost, so it survives domain\nre-linking, autoconfig, plan changes and reprovisioning. Sending \"\" clears it.\n\nBounds — the file is parsed by a root process on a machine shared with\nBorealHost infrastructure, so only per-site proxy directives are accepted:\nlocation, proxy_pass, proxy_set_header, proxy_http_version, proxy_*_timeout,\nproxy_buffering, client_max_body_size, add_header, error_page, expires, gzip.\n`root`, `alias`, `include`, `access_log`, `error_log`, `server` and `upstream`\nare refused, and proxy_pass must target your own site&#39;s existing upstream.\nA rejection names the directive and why.\n\nThe config is validated with `nginx -t` before it is applied and rolled back\nautomatically if it does not pass, so a mistake cannot take your site down.\n\nRequires: API key with write scope.\n\nArgs:\n    domain_name: Full domain name (e.g. \"example.com\")\n    content: nginx config, or \"\" to clear it\n\nReturns:\n    {\"domain\": \"example.com\", \"bytes\": 214, \"replaced\": false}\n\nErrors:\n    NOT_FOUND: Domain not found\n    VALIDATION_ERROR: Domain not linked to a site, a directive is not\n        permitted, proxy_pass targets something other than your own\n        upstream, or nginx rejected the config (the message says which)\n",
  "inputSchema": {
    "properties": {
      "domain_name": {
        "title": "Domain Name",
        "type": "string"
      },
      "content": {
        "title": "Content",
        "type": "string"
      }
    },
    "required": [
      "domain_name",
      "content"
    ],
    "title": "set_site_nginx_snippetArguments",
    "type": "object"
  }
}