MCP Server
AILinux TriForce MCP
Connect MCP-compatible AI assistants directly to the AILinux tool ecosystem. One endpoint provides model routing, search, code and workspace tools, memory, device integration, automation, federation and more — with capability-scoped access and policy checks.
https://api.ailinux.me/v1/mcpOne MCP connection. A whole capability layer.
MCP lets an AI use tools instead of only generating text. TriForce acts as the AILinux control plane: it exposes a canonical tool registry, routes calls to the correct backend or connected workspace, and applies access policy at execution time.
AI & Models
List models, route prompts across supported providers, use specialist routing and connect model workflows to the rest of TriForce.
Search & Research
Unified search for websites, documentation, code, files, downloads, news, science, images and videos.
Code & Workspace
Inspect trees, read and search code, edit files, use Git and expose explicitly shared local workspaces through AILinux Helper.
Memory
Search persistent memory and, where permissions allow, store structured facts, decisions, code notes, summaries and tasks.
Devices & Helper
Pair desktop or Android endpoints and expose only the capabilities that were explicitly granted to the MCP session.
Automation & Services
Work with notifications, services, containers, agents and other TriForce integrations through policy-controlled tools.
Federation
Target local or remote nodes through the same capability model instead of maintaining separate tool implementations.
Progressive Discovery
Tool metadata includes inventory, task group, scope, access hints and execution target so clients can load only what they need.
Use the canonical endpoint in any compatible MCP client.
For clients that accept a remote MCP server URL, use the following endpoint. Authentication and available tools depend on the client identity, account and attached capability grants.
Server name: AILinux TriForce
Transport: Streamable HTTP
URL: https://api.ailinux.me/v1/mcpDiscovery is not unrestricted execution.
A visible tool does not automatically mean an anonymous client can execute it. Privileged actions remain protected by authentication, RBAC, policy, workspace leases and per-capability grants.
Public guest profile
Credential-less MCP clients can use the safe public surface. Sensitive persistent or privileged actions remain restricted.
Scoped local access
Local files, code and device functions only become available after explicit workspace/device pairing and capability sharing.
Call-time authorization
Tool visibility helps discovery; authorization is still checked when a tool is actually called.
Current MCP tools
This list is loaded directly from the production MCP server. When the canonical TriForce registry changes, this page updates automatically.
status
Full system status: services (backend/ollama/redis/docker), directories, memory entries, agent states, federation nodes.
memory_search
Search persistent memory by text query and/or tags. Returns matching entries with timestamps.
code_read
Read any file from the codebase. Returns content with line numbers. Supports text/source/config files.
code_tree
Get directory structure as tree. Shows files, types, sizes. Essential for project orientation.
code_search
Search text/regex in codebase files. Returns matching lines with file paths and line numbers.
code_edit
Edit a source file: replace text, insert at line, append to file, or delete lines. Auto-creates backup. Use dry_run=true to preview. Always reads file first with code_read.
git
Unified git operations. mode: status, diff, commit, branch, log, push, pull, stash. Use shell for complex git workflows.
chat
Send a message to any AI model. Supports all providers: Ollama (local), Gemini, Claude, GPT-4, Mistral, DeepSeek, Qwen, Groq. Use model='provider/model-id' format.
models
List all available AI models with provider, capabilities (chat/code/vision/embed), and status.
specialist
Route task to the best specialist AI model. Task types: code, math, creative, analysis, research, vision.
search
Unified intent-aware search for websites, images, videos, files, downloads, documentation, code, news and science. mode=auto detects the intent and ranks official/original sources above SEO pages. Legacy fast/smart/deep values remain compatible.
crawl
Crawl a URL and extract text content. Returns clean markdown. Respects robots.txt.
current_time
Get current date and time in any timezone. Also returns system uptime.
mail_inbox
List recent emails from Nova inbox ([email protected]). Returns subject, from, date, seen-flag per message.
mail_read
Read full email body by UID from Nova inbox. Returns headers + plain-text body (max 4000 chars).
mail_send
Send email from [email protected] via SMTP. Requires to, subject, body.
mail_mark_seen
Mark an email as read/seen by UID in Nova inbox.
wp_create_draft
Create a new WordPress draft post on ailinux.me. Returns post ID and link.
wp_update_post
Update an existing WordPress post on ailinux.me. Can update title, content, status.
flarum_discussions
List or search discussions on the AILinux Community Forum. Supports search, tag filter, sorting and pagination.
flarum_discussion_get
Read a forum discussion including all posts. Returns title, metadata and post content.
flarum_post_get
Read a single forum post by ID.
flarum_post_create
Post a reply in a forum discussion as Nova (ailinux-nova-ai).
flarum_post_edit
Edit an existing post by Nova. Only works for posts authored by ailinux-nova-ai.
flarum_discussion_create
Create a new forum discussion as Nova. Optionally assign tags.
flarum_tags
List all available tags in the AILinux Community Forum.
flarum_users
List or search forum users.
flarum_posts
Listet neueste Posts über alle Discussions. Optional gefiltert nach Discussion oder Author.
notify_list
Listet alle Notifications (System, Agent, Forum, Mail, MCP). Standardmäßig nur ungelesene.
notify_read
Markiert eine Notification als gelesen oder erledigt (resolve=true löscht sie aus der Liste).
notify_clear
Löscht erledigte Notifications. Mit all=true werden alle gelöscht.
notify_send
Erstellt eine neue Notification — z.B. von Agents, System-Events oder manuell.
aihelper.pair
Manage the current AILinux Helper share/workspace binding. The Helper generates a one-time Share ID; use action=status to inspect the binding, action=pair to claim that Share ID exactly once, action=reconnect for an existing durable lease, or disconnect/revoke it when the user explicitly asks.
workspace_info
Analyze the paired browser workspace: file counts, size, extensions and sample paths.
file_read
Read a UTF-8 text file inside the paired browser workspace.
file_tree
List a bounded directory tree inside the paired browser workspace.
code_grep
Regex-search text files inside the paired browser workspace.
aihelper.observe
Observe the explicitly shared primary screen through AILinux Helper. Available only when the user enabled screen sharing in the native Helper.
aihelper.screenshot
Capture the explicitly shared primary screen through AILinux Helper. Available only when the user enabled screen sharing in the native Helper.
aihelper.vision_start
Start or reconfigure the low-bandwidth AILinux Live Vision stream for the paired device. The underlying OS screen-capture permission must already be active.
aihelper.vision_status
Inspect the current AILinux Live Vision stream state, latest frame/scene identifiers, frame age and encoder profile.
aihelper.vision_observe
Read the newest cached Live Vision frame and native UI scene. Use after_frame_id plus wait_ms for low-latency long-polling without requesting a fresh screenshot.
aihelper.vision_stop
Pause AILinux Live Vision frame production without revoking the operating-system screen-capture grant.
aihelper.clipboard_read
Read the local clipboard through AILinux Helper only when the user explicitly enabled clipboard-read sharing.
aihelper.clipboard_write
Write text to the local clipboard through AILinux Helper only when the user explicitly enabled clipboard-write sharing.
aihelper.compute_execute
Execute a command only inside an explicitly released disposable compute runtime. TriForce mirrors the paired share at ~/workspace and runs the command in the selected hardened backend (Docker by default, or feature-gated OpenShell with deny-by-default egress). This is never a host shell.
file_edit
Create or modify a UTF-8 text file inside the paired browser workspace. Available only when the user granted browser Write access. The local runtime creates a persistent fallback backup before mutation.
directory_create
Create a directory inside the paired browser workspace when Write access is enabled. The local runtime records a persistent pre-change fallback.
workspace_clear
Delete every file and subdirectory inside the paired browser workspace while preserving the workspace root itself. Requires Write access and confirm=DELETE_ALL. A full fallback snapshot is created first and the shared backup store is protected.
aihelper.device_info
Inspect the paired device and the capabilities the user explicitly shared. Returns OS, architecture, displays and available local adapters without exposing secrets.
aihelper.process_ops
Inspect or control processes on the paired device. Prefer list/get before control. Mutating actions are executed only when the native Helper exposes system-control capability and may require local confirmation.
aihelper.service_ops
Inspect or control an operating-system service using a platform adapter (systemd, Windows Service Control Manager, or launchd). Mutating actions require the native Helper's system-control share and local consent.
aihelper.app_ops
Inspect, launch, focus or close an application on the paired device. Android also supports opening an explicit http/https URL and the fixed AILinux Helper update endpoint. Mutating actions are capability-gated and may require local confirmation.
aihelper.window_ops
Inspect or manage desktop windows using the platform's available automation adapter. Unsupported actions fail explicitly instead of falling back to an unrestricted shell.
aihelper.input
Send bounded keyboard, pointer, gesture or navigation input to the paired native device only when the user explicitly enabled computer control. Supports desktop mouse/keyboard adapters and Android Accessibility control. Prefer target_id from vision_observe for semantic actions; coordinate input remains available as a fallback.
file_ops
Filesystem operations: read, write, append files, list directories, find files, check sizes. Paths validated against allowlist.
wp_list_posts
List WordPress posts by status
wp_delete_post
Delete a WordPress post permanently
wp_create_page
Create a WordPress page (not post)
wp_multi_ai_post
Create multiple blog posts — each AI provider writes their perspective on a topic. Creates separate posts named 'CLAUDE's Take', 'GEMINI's Take', etc.
n8n_mcp_call
Call the configured remote n8n MCP server via streamable HTTP/SSE. Use method like tools/list, search_workflows, get_workflow_details, validate_workflow, or create_workflow_from_code.
mercatai_market
Read Mercatai marketplace/discovery data: public activity, agent discovery metadata, safety policy metadata, or Stripe onboarding countries.
mercatai_tasks
List Mercatai paid tasks, inspect one task including Mercatai's server-side execution_authorized signal, or list bids on a task.
mercatai_bid
Submit an authenticated Mercatai bid. Refuses demo/non-biddable tasks before sending the bid.
mercatai_deliver
Deliver work for an assigned Mercatai task. Hard fail-closed gate requires the authenticated task response to expose execution_authorized=true before delivery is sent.
mercatai_agent
Mercatai agent integration status/authentication, public reputation, or profile visibility.
mercatai_stripe
Read/start/refresh Mercatai Stripe Connect onboarding. Country is never guessed; onboarding requires the real payout-account country.
mercatai_report
Report a live Mercatai task under the platform Trust & Safety Code. One report per agent/task is enforced by Mercatai.
mercatai_developer
Read Mercatai developer API usage or affiliate earnings. Requires a separate documented mct_ developer key, not the normal agent API key.
web_worker
Persistent autonomous web-worker job handoff. Internal callers create/cancel jobs; a fresh authenticated web chat claims a job by ID, receives its task, and reports completion. Ticket jobs are bound to a fail-closed read/support-only MCP policy for the claiming session; internal jobs retain the caller's normal MCP permissions.
cloudflare_dns_list
List DNS records in a server-configured Cloudflare zone. Cloudflare credentials stay server-side and are never returned. TXT record contents are redacted.
cloudflare_dns_get
Get one DNS record by Cloudflare record id from a server-configured zone. Credentials stay server-side; TXT content is redacted.
cloudflare_dns_delete
Delete exactly one DNS record from a server-configured Cloudflare zone. Requires record id, expected name, expected type, and confirm=true. The server re-reads the record and refuses deletion on identity mismatch. NS/SOA cannot be deleted. Credentials are never exposed.
nova_chat_agent
Chat through Nova's configured account-backed agent bridge.
aihelper.observe
Observe the explicitly shared primary screen through AILinux Helper. Available only when the user enabled screen sharing in the native Helper.
aihelper.screenshot
Capture the explicitly shared primary screen through AILinux Helper. Available only when the user enabled screen sharing in the native Helper.
aihelper.vision_start
Start or reconfigure the low-bandwidth AILinux Live Vision stream for the paired device. The underlying OS screen-capture permission must already be active.
aihelper.vision_status
Inspect the current AILinux Live Vision stream state, latest frame/scene identifiers, frame age and encoder profile.
aihelper.vision_observe
Read the newest cached Live Vision frame and native UI scene. Use after_frame_id plus wait_ms for low-latency long-polling without requesting a fresh screenshot.
aihelper.vision_stop
Pause AILinux Live Vision frame production without revoking the operating-system screen-capture grant.
aihelper.clipboard_read
Read the local clipboard through AILinux Helper only when the user explicitly enabled clipboard-read sharing.
aihelper.clipboard_write
Write text to the local clipboard through AILinux Helper only when the user explicitly enabled clipboard-write sharing.
aihelper.compute_execute
Execute a command only inside an explicitly released disposable compute runtime. TriForce mirrors the paired share at ~/workspace and runs the command in the selected hardened backend (Docker by default, or feature-gated OpenShell with deny-by-default egress). This is never a host shell.
aihelper.device_info
Inspect the paired device and the capabilities the user explicitly shared. Returns OS, architecture, displays and available local adapters without exposing secrets.
aihelper.process_ops
Inspect or control processes on the paired device. Prefer list/get before control. Mutating actions are executed only when the native Helper exposes system-control capability and may require local confirmation.
aihelper.service_ops
Inspect or control an operating-system service using a platform adapter (systemd, Windows Service Control Manager, or launchd). Mutating actions require the native Helper's system-control share and local consent.
aihelper.app_ops
Inspect, launch, focus or close an application on the paired device. Android also supports opening an explicit http/https URL and the fixed AILinux Helper update endpoint. Mutating actions are capability-gated and may require local confirmation.
aihelper.window_ops
Inspect or manage desktop windows using the platform's available automation adapter. Unsupported actions fail explicitly instead of falling back to an unrestricted shell.
aihelper.input
Send bounded keyboard, pointer, gesture or navigation input to the paired native device only when the user explicitly enabled computer control. Supports desktop mouse/keyboard adapters and Android Accessibility control. Prefer target_id from vision_observe for semantic actions; coordinate input remains available as a fallback.
workspace_status
Check whether this MCP session is paired with an AILinux Helper share. If the user message contains a one-time Share ID in the form XXXX-XXXX-XXXX-XXXX-XXXX-XXXX, pass it as workspace_id; this tool validates the waiting Helper and claims that Share ID exactly once. Reconnects use the Helper's durable saved lease credential, not the consumed Share ID.
workspace_pair
Bind this MCP session to the AILinux Helper share waiting under a one-time Share ID. Use this when the user sends the Share ID generated by WebMCP, the Android Helper, or the desktop/Linux Helper. The Share ID is claim-once; later reconnects use the durable lease credential.
Connect once. Discover capabilities dynamically.
Use the canonical TriForce MCP endpoint in your compatible AI client, or open the server directly to inspect the current service.