Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Apply the Workbench profile to a target: clone the repo and install missing components (OpenCode CLI, Node/pnpm, MCP servers, skills, plugins, optional Docker). It OVERWRITES `<home>/.config/opencode/opencode.json`, copies `AGENTS.md`, resets an existing profile repo to `origin/main`, and runs global installs that need write permission (plus SSH for `mode:ssh`) and can take minutes. Writes a names-only `~/.env.workbench` (mode 600); never secret values. Consent-gated and idempotent: without `confirm:true` it returns the plan and changes nothing. Parameter semantics: `components` defaults to required+core; `workspace` defaults to `~/opencode-workbench`; `skipRepo` skips the clone/update; `profileUrl` overrides the git remote; `dryRun` returns the plan. To preview only, use plan_clone.
The machine to operate on: this host (local) or a remote host over SSH (ssh).
Report only; make no changes.
Set true to actually install. When absent, the call returns a plan and makes no changes.
Do not clone/update the profile repo on the target.
Target directory for the profile repo.
Component ids to include; defaults to required+core.
Override profile git URL.
The server marks this tool as destructive. Running it may delete or overwrite data on the server or in any account you connected with your headers.
Apply the Workbench profile to a target: clone the repo and install missing components (OpenCode CLI, Node/pnpm, MCP servers, skills, plugins, optional Docker). It OVERWRITES `<home>/.config/opencode/opencode.json`, copies `AGENTS.md`, resets an existing profile repo to `origin/main`, and runs global installs that need write permission (plus SSH for `mode:ssh`) and can take minutes. Writes a names-only `~/.env.workbench` (mode 600); never secret values. Consent-gated and idempotent: without `confirm:true` it returns the plan and changes nothing. Parameter semantics: `components` defaults to required+core; `workspace` defaults to `~/opencode-workbench`; `skipRepo` skips the clone/update; `profileUrl` overrides the git remote; `dryRun` returns the plan. To preview only, use plan_clone.
| Argument | Type | Description |
|---|---|---|
| dryRun | boolean | Report only; make no changes. |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| confirm | boolean | Set true to actually install. When absent, the call returns a plan and makes no changes. |
| skipRepo | boolean | Do not clone/update the profile repo on the target. |
| workspace | string | Target directory for the profile repo. |
| components | array | Component ids to include; defaults to required+core. |
| profileUrl | string | Override profile git URL. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target"
],
"properties": {
"dryRun": {
"type": "boolean",
"description": "Report only; make no changes."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"confirm": {
"type": "boolean",
"description": "Set true to actually install. When absent, the call returns a plan and makes no changes."
},
"skipRepo": {
"type": "boolean",
"description": "Do not clone/update the profile repo on the target."
},
"workspace": {
"type": "string",
"description": "Target directory for the profile repo."
},
"components": {
"type": "array",
"items": {
"type": "string"
},
"description": "Component ids to include; defaults to required+core."
},
"profileUrl": {
"type": "string",
"description": "Override profile git URL."
}
}
}Describe this MCP server from its bundled profile without contacting any target or making a network call: repository URL, the default component set, components grouped by tier (required/core/optional), and optional MCP add-ons. It takes no parameters, is always safe, and returns instantly. Use it first to resolve a component id for install_component/remove_component/update_component or to see available add-ons; use inspect_target for a machine's live state.
No arguments.
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {}
}Probe one Linux machine — this host (`local`) or a remote host over SSH (`ssh`) — and report its OS, kernel, architecture, package manager, Node/npm, OpenCode, Docker, and per-tool detection flags, plus the names (never values) of credentials present. Read-only: it runs one shell probe as the target user (over SSH when `mode:ssh`), installs nothing, writes nothing, contacts no external service, and can take a few seconds per hop. Parameter semantics: `target.mode` selects local vs ssh (default `local`); `target.host` is required only for ssh; `target.user` defaults to the ssh config/current user; `target.cwd` sets the directory for relative checks; `target.port`/`identityFile` pass straight to ssh. Use it to see what a clone would touch, then plan_clone to turn that into an ordered plan and apply_clone to perform it.
| Argument | Type | Description |
|---|---|---|
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target"
],
"properties": {
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
}
}
}Install a single Workbench component by id (e.g. `node`, `opencode`, `npm-mcps`, `skills`) on a target; `component` must be an id from describe_workbench. Overwrites that component's files when present (e.g. `skills`/`plugins` replace the copies under `<home>/.config/opencode`); global installs need write permission and can take minutes. Idempotent and consent-gated: without `confirm:true` it returns the plan. Parameter semantics: `component` is required; `workspace` defaults to `~/opencode-workbench`; `confirm` defaults to false (plan only). Use it for one targeted component; use apply_clone to install the full default set.
| Argument | Type | Description |
|---|---|---|
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| confirm | boolean | Set true to actually install. When absent, the call returns a plan and makes no changes. |
| component* | string | Component id from describe_workbench. |
| workspace | string | Target directory for the profile repo. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target",
"component"
],
"properties": {
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"confirm": {
"type": "boolean",
"description": "Set true to actually install. When absent, the call returns a plan and makes no changes."
},
"component": {
"type": "string",
"description": "Component id from describe_workbench."
},
"workspace": {
"type": "string",
"description": "Target directory for the profile repo."
}
}
}List the credentials the profile references, which the target already provides, and how to acquire each missing one. Value-blind: it reads only whether each env var is set — no values, no network, no writes — via one read-only probe. Parameter semantics: `target` selects the machine (`local` or SSH) and its `home` sets the returned `template` path and the env file the presence check reads; there are no other parameters. Returns `present`/`missing` var-name arrays plus one guidance record per credential (`var`, `purpose`, `url`, `method`, `command`). Use it after plan_clone to see what would degrade; act on one credential with run_auth_flow.
| Argument | Type | Description |
|---|---|---|
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target"
],
"properties": {
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
}
}
}Return a read-only plan for a target: compare it against the Workbench profile and list each component as `install`, `present`, or `manual`, with the commands that would run. It still runs a detection probe on the target (same access as inspect_target) but clones nothing and writes nothing. Parameter semantics: `components` restricts the diff to those ids (default: required+core); `workspace` sets the expected profile path on the target (default `~/opencode-workbench`); `profileUrl` overrides the git remote. Use it to preview before apply_clone, which performs the changes.
| Argument | Type | Description |
|---|---|---|
| dryRun | boolean | Report only; make no changes. |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| skipRepo | boolean | Do not clone/update the profile repo on the target. |
| workspace | string | Target directory for the profile repo. |
| components | array | Component ids to include; defaults to required+core. |
| profileUrl | string | Override profile git URL. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target"
],
"properties": {
"dryRun": {
"type": "boolean",
"description": "Report only; make no changes."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"skipRepo": {
"type": "boolean",
"description": "Do not clone/update the profile repo on the target."
},
"workspace": {
"type": "string",
"description": "Target directory for the profile repo."
},
"components": {
"type": "array",
"items": {
"type": "string"
},
"description": "Component ids to include; defaults to required+core."
},
"profileUrl": {
"type": "string",
"description": "Override profile git URL."
}
}
}Uninstall one Workbench component by id from a target — the inverse of install_component — for a bounded, documented subset with an automated uninstall (e.g. `opencode`, `pnpm`, `npm-mcps`, `skills`, `docker-containers`); `component` must be an id from describe_workbench. Idempotent: an already-absent component reports `absent`; a component with no automated uninstall (system packages such as git/curl/node) reports `manual`. Destructive and consent-gated: without `confirm:true` it returns a preview and changes nothing, and it deletes only that component's files — never `opencode.json` or the profile repo. Parameter semantics: `workspace` sets the profile path some removals need; `dryRun` reports without changing. Use it to tear down one component; for several, call it per id.
| Argument | Type | Description |
|---|---|---|
| dryRun | boolean | Report the action without changing anything. |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| confirm | boolean | Set true to actually remove. When absent, the call returns a preview and makes no changes. |
| component* | string | Component id from describe_workbench. |
| workspace | string | Profile repo directory (used by components whose removal needs it). |
Return the acquisition plan for one credential on a target: the provider URL, the exact non-interactive command when one exists (e.g. `opencode auth login`, `opencode mcp auth vercel`, `gh auth login`), and whether it is already present. Read-only and value-blind: it emits guidance and re-checks presence with one read-only probe; it does not run the commands or handle secret values. Parameter semantics: `var` must be an env var name returned by list_required_credentials (unknown names error); `target` selects the machine and its `home` is where the value should be written. Use it for a single credential; it does not replace that listing.
| Argument | Type | Description |
|---|---|---|
| var* | string | Credential env var name from list_required_credentials (e.g. OPENCODE_API_KEY). |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target",
"var"
],
"properties": {
"var": {
"type": "string",
"description": "Credential env var name from list_required_credentials (e.g. OPENCODE_API_KEY)."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
}
}
}Update one Workbench component in place by id: re-run its install script to fetch the current version (e.g. `opencode` re-runs the official installer; `npm-mcps` reinstalls the latest globals). It OVERWRITES the component's files, needs write permission, and can take minutes for global installs; the resolved version may change. Parameter semantics: `component` must be an id from describe_workbench; `workspace` defaults to `~/opencode-workbench`; `dryRun` previews; `confirm` defaults to false — set `confirm:true` to apply. For the whole profile use apply_clone.
| Argument | Type | Description |
|---|---|---|
| dryRun | boolean | Report the action without changing anything. |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| confirm | boolean | Set true to actually update. When absent, the call returns a preview and makes no changes. |
| component* | string | Component id from describe_workbench. |
| workspace | string | Profile repo directory (used by components whose update needs it). |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target",
"component"
],
"properties": {
"dryRun": {
"type": "boolean",
"description": "Report the action without changing anything."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"confirm": {
"type": "boolean",
"description": "Set true to actually update. When absent, the call returns a preview and makes no changes."
},
"component": {
"type": "string",
"description": "Component id from describe_workbench."
},
"workspace": {
"type": "string",
"description": "Profile repo directory (used by components whose update needs it)."
}
}
}Re-check a target after a clone: return a per-component `present`/`missing` list plus whether `opencode.json` and `~/.env.workbench` exist. Read-only and idempotent: it runs a detection probe (SSH or local) and checks files, writing nothing. `target` selects the machine (`local` or SSH) and its `home` is where the `opencode.json` and `~/.env.workbench` checks run; `components` restricts the check to those ids (omit it to check every component, the default); `workspace` sets the profile path used by component checks. Use it after apply_clone and after component changes; for a pre-clone preview use plan_clone.
| Argument | Type | Description |
|---|---|---|
| dryRun | boolean | Report only; make no changes. |
| target* | object | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| skipRepo | boolean | Do not clone/update the profile repo on the target. |
| workspace | string | Target directory for the profile repo. |
| components | array | Component ids to include; defaults to required+core. |
| profileUrl | string | Override profile git URL. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target"
],
"properties": {
"dryRun": {
"type": "boolean",
"description": "Report only; make no changes."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"skipRepo": {
"type": "boolean",
"description": "Do not clone/update the profile repo on the target."
},
"workspace": {
"type": "string",
"description": "Target directory for the profile repo."
},
"components": {
"type": "array",
"items": {
"type": "string"
},
"description": "Component ids to include; defaults to required+core."
},
"profileUrl": {
"type": "string",
"description": "Override profile git URL."
}
}
}{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"target",
"component"
],
"properties": {
"dryRun": {
"type": "boolean",
"description": "Report the action without changing anything."
},
"target": {
"type": "object",
"required": [
"mode"
],
"properties": {
"cwd": {
"type": "string",
"description": "Working directory on the target."
},
"host": {
"type": "string",
"description": "SSH host (required when mode=ssh)."
},
"mode": {
"enum": [
"local",
"ssh"
],
"type": "string",
"description": "Run on this machine (local) or a remote host (ssh)."
},
"port": {
"type": "integer",
"maximum": 9007199254740991,
"description": "SSH port.",
"exclusiveMinimum": 0
},
"user": {
"type": "string",
"description": "SSH user (defaults to ssh config / current user)."
},
"identityFile": {
"type": "string",
"description": "SSH private key path."
}
},
"description": "The machine to operate on: this host (local) or a remote host over SSH (ssh)."
},
"confirm": {
"type": "boolean",
"description": "Set true to actually remove. When absent, the call returns a preview and makes no changes."
},
"component": {
"type": "string",
"description": "Component id from describe_workbench."
},
"workspace": {
"type": "string",
"description": "Profile repo directory (used by components whose removal needs it)."
}
}
}