@nightsquawktech/proxmox-mcp-server 0.1.0

package/dist/catalog-pve/enrichment/get_nodes_node_capabilities_qemu_migration.json

@@ -0,0 +1,23 @@
+{
+  "operationId": "get_nodes_node_capabilities_qemu_migration",
+  "usageNotes": "Call this before initiating a QEMU live migration to determine whether the target node supports dbus-vmstate, which is required for migrating additional VM state (e.g., from QEMU guest agents or other dbus-connected helpers) without downtime. If `has-dbus-vmstate` returns false, any VM relying on dbus-vmstate transfer will fall back to offline migration or the state will be lost. Requires `Sys.Audit` on `/nodes/<node>`.",
+  "examples": [
+    {
+      "summary": "Check migration capabilities on node pve01 before live-migrating a VM",
+      "path_params": {
+        "node": "pve01"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "Run this on the *destination* node — it tells you what that node can receive, not what the source node can send.",
+    "dbus-vmstate support requires the `dbus-broker` or `dbus-daemon` package and the qemu-server dbus-vmstate helper to be installed on the node.",
+    "A false result does not block migration entirely; it only means extra VM state carried via dbus will not transfer live."
+  ],
+  "relatedOperations": [
+    "post_nodes_node_qemu_vmid_migrate",
+    "get_nodes_node_capabilities_qemu_cpu",
+    "get_nodes_node_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph.json

@@ -0,0 +1,25 @@
+{
+  "operationId": "get_nodes_node_ceph",
+  "usageNotes": "Returns the directory index of available Ceph API sub-resources for a specific node, acting as a navigation entry point rather than returning Ceph cluster state. The node must have Ceph configured and the caller needs Sys.Audit or Datastore.Audit on the root path. Use this to discover which Ceph sub-endpoints (e.g. status, osd, pools, mon) are available before querying them directly.",
+  "examples": [
+    {
+      "summary": "List Ceph API sub-resources available on node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "This is a pure index call — it does not reflect whether Ceph is actually healthy or running on the node; follow up with get_nodes_node_ceph_status for live cluster state.",
+    "If the node has no Ceph installation the response may still return child links but subsequent calls to those children will fail.",
+    "Requires only Sys.Audit or Datastore.Audit (any one), making it broadly accessible to monitoring tokens."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_ceph_pools",
+    "get_nodes_node_ceph_mon",
+    "get_nodes_node_ceph_config"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_cfg.json

@@ -0,0 +1,24 @@
+{
+  "operationId": "get_nodes_node_ceph_cfg",
+  "usageNotes": "Returns the directory index of Ceph configuration sub-resources available under a given node (e.g., raw config, database, keyring). Use this as a discovery step before calling specific Ceph cfg child endpoints. The node must be reachable and have the Ceph packages installed; the endpoint is accessible to all authenticated users with no additional privilege required.",
+  "examples": [
+    {
+      "summary": "List available Ceph config sub-resources on node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The response is a link list — each object's 'name' field corresponds to a child path segment (e.g., 'raw', 'db', 'keyring') that can be appended to this path for further queries.",
+    "If the node does not have Ceph installed, this endpoint may return an empty array or an error; verify Ceph is initialized on the node first.",
+    "This is a read-only directory index — use it to enumerate what Ceph cfg sub-endpoints exist before constructing downstream calls."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_cfg_raw",
+    "get_nodes_node_ceph_cfg_db",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_cfg_db.json

@@ -0,0 +1,24 @@
+{
+  "operationId": "get_nodes_node_ceph_cfg_db",
+  "usageNotes": "Returns all key-value entries stored in the Ceph configuration database (mon config store), which supersedes the on-disk ceph.conf for runtime settings. Use this to audit active Ceph tunables across sections (global, osd, mon, mgr, etc.) and determine whether a setting can be changed without a daemon restart via the can_update_at_runtime field. The target node must be online and have Ceph configured; the caller needs either Sys.Audit or Datastore.Audit at the root path.",
+  "examples": [
+    {
+      "summary": "Retrieve all Ceph config DB entries from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "Entries with level 'dev' are developer/internal knobs — avoid modifying them in production.",
+    "The 'mask' field scopes a setting to a specific host or device class (e.g. 'class:ssd'); an empty mask means the setting applies globally within its section.",
+    "All values are returned as strings regardless of their underlying type — cast appropriately when comparing or computing.",
+    "This reflects the live mon config store, not the on-disk ceph.conf; the two can differ if settings were applied via 'ceph config set' after initial deployment."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_cfg_raw",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_mon"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_cfg_raw.json

@@ -0,0 +1,23 @@
+{
+  "operationId": "get_nodes_node_ceph_cfg_raw",
+  "usageNotes": "Use this to retrieve the raw text of the Ceph configuration file (ceph.conf) as seen by a specific cluster node. The calling principal needs either Sys.Audit or Datastore.Audit on the root path. The targeted node must be online and have Ceph configured — calling against a node without Ceph will return an error.",
+  "examples": [
+    {
+      "summary": "Fetch the raw Ceph config from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The response is a plain string (the raw ceph.conf content), not a structured JSON object — handle it as text.",
+    "All nodes in a healthy Ceph cluster should return identical ceph.conf content; comparing output across nodes is a quick consistency check.",
+    "Use this as a read-only audit tool before making Ceph configuration changes to capture a baseline snapshot."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_cfg_db",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_mon"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_cfg_value.json

@@ -0,0 +1,26 @@
+{
+  "operationId": "get_nodes_node_ceph_cfg_value",
+  "usageNotes": "Use this to read live Ceph configuration values from a specific node's ceph.conf or the Ceph monitor config DB without shelling into the node. Requires `Sys.Audit` on `/`, and the target node must be online and have Ceph configured. Note that the response normalizes underscores to hyphens in both section and key names, so `osd_pool_default_size` will appear as `osd-pool-default-size` in the returned map.",
+  "examples": [
+    {
+      "summary": "Read the default pool size and OSD journal size from the global section",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {
+        "config-keys": "global:osd-pool-default-size,global:osd-journal-size"
+      }
+    }
+  ],
+  "tips": [
+    "Multiple keys can be separated by semicolons, commas, or spaces — all three delimiters are equivalent.",
+    "Section names are case-insensitive and lowercased; key names are case-sensitive in the pattern but normalized with hyphens in the response.",
+    "Values sourced from the mon config DB take precedence over ceph.conf entries when both exist.",
+    "If a requested key is not set, it will be absent from the returned object rather than present with a null value."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_cfg_db",
+    "get_nodes_node_ceph_cfg_raw",
+    "get_nodes_node_ceph_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_cmd_safety.json

@@ -0,0 +1,29 @@
+{
+  "operationId": "get_nodes_node_ceph_cmd_safety",
+  "usageNotes": "Call this before stopping or destroying a Ceph OSD, MON, or MDS to let Ceph heuristically verify the cluster can safely absorb the action without losing redundancy or quorum. Check the returned `safe` boolean and read `status` when it is false — Ceph populates that field with the specific reason (e.g. insufficient PGs, quorum at minimum). Requires `Sys.Audit` on `/`; the node must be reachable and Ceph must be running.",
+  "examples": [
+    {
+      "summary": "Check whether OSD.2 can be safely stopped before maintenance",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {
+        "service": "osd",
+        "id": "2",
+        "action": "stop"
+      }
+    }
+  ],
+  "tips": [
+    "A `safe: false` result does not block you from proceeding — it is advisory only. Review the `status` message before overriding.",
+    "For OSD removals, also check PG health and replication factor; this endpoint checks Ceph's heuristic, not the full CRUSH map.",
+    "MON safety checks are especially important in small clusters (3-node): destroying a MON when one is already down will break quorum.",
+    "This endpoint is read-only and has no side effects; it is safe to call repeatedly during a maintenance window."
+  ],
+  "relatedOperations": [
+    "post_nodes_node_ceph_osd_osdid_out",
+    "delete_nodes_node_ceph_osd_osdid",
+    "post_nodes_node_ceph_mon_monid",
+    "get_nodes_node_ceph_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_crush.json

@@ -0,0 +1,23 @@
+{
+  "operationId": "get_nodes_node_ceph_crush",
+  "usageNotes": "Retrieves the raw CRUSH map text from the specified Ceph-enabled PVE node; use this to inspect placement rules, device classes, and bucket hierarchies for an existing Ceph cluster. The target node must be online and have Ceph configured — calling it on a node without Ceph will return an error. Requires either Sys.Audit or Datastore.Audit at the root path.",
+  "examples": [
+    {
+      "summary": "Fetch the CRUSH map from the primary Ceph monitor node",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The response is a raw compiled CRUSH map in text form; pipe it through 'crushtool -d' locally if you need to decompile and diff against a modified version.",
+    "If you intend to modify placement rules, capture this output first as a baseline before calling any CRUSH-editing endpoints.",
+    "Any healthy cluster node that hosts a Ceph monitor can serve this endpoint — use a monitor node for the most authoritative view."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_ceph_pools"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_fs.json

@@ -0,0 +1,23 @@
+{
+  "operationId": "get_nodes_node_ceph_fs",
+  "usageNotes": "Lists all CephFS filesystems known to the specified Proxmox node, including their metadata pool and one or more data pools. Requires Sys.Audit or Datastore.Audit on the root path, and the target node must be online and participating in the Ceph cluster. Use this to discover filesystem names and their associated pool layout before mounting a CephFS share or configuring a Proxmox storage entry.",
+  "examples": [
+    {
+      "summary": "List all CephFS filesystems on node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The 'data_pool' field returns only the first data pool for backwards compatibility; check 'data_pools' for the full list if EC or multi-pool layouts are in use.",
+    "A node does not need to be a Ceph MDS host to query this endpoint — any node in the cluster can return the filesystem index.",
+    "Use the returned 'name' value as the {filesystem} path segment in filesystem-specific Ceph endpoints."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_pools",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_storage"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_log.json

@@ -0,0 +1,26 @@
+{
+  "operationId": "get_nodes_node_ceph_log",
+  "usageNotes": "Use this endpoint to tail or page through the Ceph log on a specific PVE node — useful for diagnosing OSD failures, HEALTH_WARN/HEALTH_ERR transitions, or slow I/O events. The caller must hold the Sys.Syslog privilege on /nodes/{node}; API tokens are supported. Paginate with start and limit together to walk large logs without truncation, since omitting limit typically caps output at ~50 lines.",
+  "examples": [
+    {
+      "summary": "Fetch the most recent 100 Ceph log lines from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {
+        "start": 0,
+        "limit": 100
+      }
+    }
+  ],
+  "tips": [
+    "Each returned object has 'n' (1-based line number) and 't' (text); use 'n' to track position when paginating with subsequent start offsets.",
+    "This reads the Ceph log from the perspective of the queried node — log content may differ between nodes if Ceph is in a degraded or split-brain state.",
+    "Combine with get_nodes_node_ceph_status to correlate log events with current cluster health."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_syslog"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_mds.json

@@ -0,0 +1,25 @@
+{
+  "operationId": "get_nodes_node_ceph_mds",
+  "usageNotes": "Use this to list all Ceph MDS (Metadata Server) daemons visible from a given PVE node, including their state, rank, CephFS binding, and whether a local systemd unit is configured. Requires Sys.Audit or Datastore.Audit on the root path. Only meaningful when Ceph is deployed on the cluster; nodes with no Ceph config will return an empty array.",
+  "examples": [
+    {
+      "summary": "List MDS daemons from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "A rank of -1 and no fs_name indicates a standby MDS not currently serving any CephFS.",
+    "Check the 'service' field to confirm whether the MDS systemd unit is enabled locally on that node — absence means it exists only in Ceph's cluster map.",
+    "standby_replay: true is a hot-standby (mirrors active MDS journal) and enables faster failover.",
+    "state values like 'stopped' or 'unknown' mean the daemon is configured locally but the cluster does not see it as active — check the ceph-mds@<name> systemd unit on the host."
+  ],
+  "relatedOperations": [
+    "post_nodes_node_ceph_mds_name",
+    "delete_nodes_node_ceph_mds_name",
+    "get_nodes_node_ceph_fs",
+    "get_nodes_node_ceph_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_mgr.json

@@ -0,0 +1,25 @@
+{
+  "operationId": "get_nodes_node_ceph_mgr",
+  "usageNotes": "Use this to list all Ceph Manager (MGR) daemons known to the queried node, including their state (active/standby/stopped/unknown), version, and whether a local systemd unit is present. Requires Sys.Audit or Datastore.Audit on the root path. Query any node in the cluster — results reflect the full MGR roster, not just daemons local to that node.",
+  "examples": [
+    {
+      "summary": "List all Ceph MGR daemons as seen from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The 'state' field distinguishes active vs standby vs stopped/unknown — use it to verify quorum health before making Ceph changes.",
+    "A daemon may appear in the list with 'direxists: true' and 'service: true' but state 'stopped' if the systemd unit is enabled but not running.",
+    "Cross-reference 'host' against the node you queried: if they differ, that MGR is hosted on a different cluster member.",
+    "Use this before creating or destroying a MGR (post_nodes_node_ceph_mgr / delete_nodes_node_ceph_mgr_id) to confirm current daemon count and avoid dropping below the recommended minimum of two."
+  ],
+  "relatedOperations": [
+    "post_nodes_node_ceph_mgr",
+    "delete_nodes_node_ceph_mgr_id",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_mon"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_mon.json

@@ -0,0 +1,25 @@
+{
+  "operationId": "get_nodes_node_ceph_mon",
+  "usageNotes": "Use this to list all Ceph monitors known to the cluster and verify quorum health — the `quorum` and `state` fields on each entry are the fastest way to spot a monitor that has lost consensus or stopped. The querying node must be online and have rados connectivity; if it does not, monitor entries may return `state: 'unknown'` rather than an error. Requires `Sys.Audit` or `Datastore.Audit` at the root path (either suffices).",
+  "examples": [
+    {
+      "summary": "List all Ceph monitors from node pve1 to check quorum status",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The `quorum` boolean is the most actionable field — any monitor where quorum=false while state='running' indicates a split or lagging mon that needs investigation.",
+    "`direxists` being false on a node that should host a monitor means the mon data directory is missing, which typically happens after an incomplete removal or a failed add.",
+    "`service` absent (not false) means no ceph-mon systemd unit exists on that node at all, distinguishing 'unit exists but stopped' from 'never configured here'.",
+    "You can call this endpoint against any healthy cluster node — the response reflects cluster-wide mon map data, not just mons local to the queried node."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_cluster_ceph_status",
+    "post_nodes_node_ceph_mon",
+    "delete_nodes_node_ceph_mon_monid"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_osd.json

@@ -0,0 +1,26 @@
+{
+  "operationId": "get_nodes_node_ceph_osd",
+  "usageNotes": "Use this endpoint to retrieve the full CRUSH tree of OSDs on a Ceph cluster as seen from the specified node. Requires either Sys.Audit or Datastore.Audit on the root path. The queried node must be online and have Ceph configured; the response reflects cluster-wide OSD state, not just local disks.",
+  "examples": [
+    {
+      "summary": "List all OSDs and their CRUSH tree from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The 'root' object is a recursive CRUSH bucket tree; walk 'children' arrays to enumerate individual OSDs (type == 'osd') vs. host/rack buckets.",
+    "The 'flags' field is absent entirely when no cluster-level OSD flags (e.g. 'noout', 'norebalance') are set — treat its absence as an empty flag set.",
+    "OSD health properties such as 'status', 'in', 'weight', and latency fields appear at the leaf level but are not statically typed — expect additionalProperties.",
+    "Can be called against any online Ceph mon node in the cluster; you do not have to target the node that owns a specific OSD."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_mon",
+    "get_nodes_node_ceph_pools",
+    "post_nodes_node_ceph_osd",
+    "delete_nodes_node_ceph_osd_osdid"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_osd_osdid.json

@@ -0,0 +1,24 @@
+{
+  "operationId": "get_nodes_node_ceph_osd_osdid",
+  "usageNotes": "Returns the child resource index for a specific OSD on a given node — use this to discover what sub-endpoints are available for that OSD (e.g. metadata, LV info) before drilling into them. The queried node must be online and running the Ceph OSD daemon; if the OSD ID does not exist on that node, the API will return an error. No special privileges are required beyond a valid API token.",
+  "examples": [
+    {
+      "summary": "List available sub-resources for OSD 2 on node pve1",
+      "path_params": {
+        "node": "pve1",
+        "osdid": 2
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "The response is an array of child resource descriptors (name/href pairs), not OSD metrics — use the returned names to construct follow-up calls for actual OSD details.",
+    "OSD IDs are cluster-global integers assigned by Ceph; you can list all OSDs and their hosting nodes via the cluster-level OSD endpoint before calling this per-node path.",
+    "This endpoint is safe to call on any node that hosts the OSD; calling it on a node that does not host the specified OSD will result in a 404 or empty response."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_osd",
+    "post_nodes_node_ceph_osd",
+    "delete_nodes_node_ceph_osd_osdid"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_osd_osdid_lv_info.json

@@ -0,0 +1,27 @@
+{
+  "operationId": "get_nodes_node_ceph_osd_osdid_lv_info",
+  "usageNotes": "Use this endpoint to inspect the LVM logical volume backing a specific Ceph OSD on a given node — useful when diagnosing OSD placement, verifying block/db/wal device layout, or auditing LV sizes after disk replacements. The `type` parameter selects which device component to inspect (block data device by default; use `db` or `wal` when those are on separate LVs). The node must be online and the OSD must exist on that node; querying a node that does not host the specified OSD will return an error.",
+  "examples": [
+    {
+      "summary": "Get block device LV info for OSD 3 on node pve1",
+      "path_params": {
+        "node": "pve1",
+        "osdid": 3
+      },
+      "params": {
+        "type": "block"
+      }
+    }
+  ],
+  "tips": [
+    "Omitting `type` defaults to `block`, which is the primary data device — always specify `db` or `wal` explicitly if you have bluestore metadata on separate LVs.",
+    "The returned `lv_size` is in bytes; divide by 1073741824 for GiB.",
+    "Cross-reference `vg_name` and `lv_path` against `pvs`/`vgs` output on the node to confirm the underlying physical disk for the OSD.",
+    "Requires `Sys.Audit` at the root path — API tokens scoped below root will be denied."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_ceph_osd_osdid_metadata",
+    "get_nodes_node_ceph_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_osd_osdid_metadata.json

@@ -0,0 +1,27 @@
+{
+  "operationId": "get_nodes_node_ceph_osd_osdid_metadata",
+  "usageNotes": "Use this endpoint to inspect the physical device layout and runtime state of a specific Ceph OSD — including whether it uses a separate db/wal device, supports TRIM, is LUKS-encrypted, and how much memory its daemon is consuming. The queried node must be online and must be the host that owns the OSD; `osd.hostname` in the response confirms the owning host. Requires `Sys.Audit` on `/`.",
+  "examples": [
+    {
+      "summary": "Get metadata for OSD 3 from its host node",
+      "path_params": {
+        "node": "pve-ceph01",
+        "osdid": 3
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "Check `osd.pid` to determine whether the OSD daemon is currently running — the field is absent when the systemd unit is stopped.",
+    "`osd.mem_usage` is PSS (proportional set size) in bytes and reports 0 when the process is not running, not when memory usage is genuinely zero.",
+    "The `devices` array will include entries for `block`, `db`, and `wal` device roles when a BlueStore OSD uses dedicated fast devices for its metadata.",
+    "Query this from the node listed in `osd.hostname`; querying a different cluster member may return an error if the OSD is not visible there.",
+    "`physical_device` may be comma- or space-separated when the underlying device is a multi-path or software-RAID target — parse accordingly."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_ceph_osd_osdid_lv_info",
+    "post_nodes_node_ceph_osd",
+    "delete_nodes_node_ceph_osd_osdid"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_pool.json

@@ -0,0 +1,26 @@
+{
+  "operationId": "get_nodes_node_ceph_pool",
+  "usageNotes": "Use this to inventory all Ceph pools on the cluster and audit their replication, PG, and autoscaler settings. The target node must be online and have Ceph services running; any node that is a full Ceph MON member will return the same cluster-wide pool list. Requires either Sys.Audit or Datastore.Audit at the root path — both are checked with 'any', so either privilege is sufficient.",
+  "examples": [
+    {
+      "summary": "List all Ceph pools from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "bytes_used and percent_used are optional — they may be absent for a pool that has never received data or whose stats are still initializing after creation.",
+    "autoscale_status shape changes across Ceph releases (Pacific, Quincy, Reef); parse it defensively.",
+    "pg_num_final is the pg_autoscaler's recommendation; if it differs significantly from pg_num the cluster may be under- or over-provisioned for PGs.",
+    "The 'type' field distinguishes replicated from erasure-coded pools — erasure pools cannot host RBD images used by VM disks without a special CRUSH profile."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_pool_name",
+    "post_nodes_node_ceph_pool",
+    "put_nodes_node_ceph_pool_name",
+    "delete_nodes_node_ceph_pool_name",
+    "get_nodes_node_ceph_status"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_pool_name.json

@@ -0,0 +1,24 @@
+{
+  "operationId": "get_nodes_node_ceph_pool_name",
+  "usageNotes": "Use this endpoint to retrieve sub-resources or available actions exposed under a specific Ceph pool on a given node. The calling token or user must hold either Sys.Audit or Datastore.Audit on the root path ('/'). Ceph must be configured and the target node must be a member of the Ceph cluster.",
+  "examples": [
+    {
+      "summary": "List pool index entries for the 'rbd' pool on node pve1",
+      "path_params": {
+        "node": "pve1",
+        "name": "rbd"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "This is a pool index endpoint — it returns child resource links rather than raw pool metrics. To get detailed pool statistics use the sibling endpoint that returns pool status/detail.",
+    "Common pool names in Proxmox Ceph deployments are 'rbd' (VM disks), 'cephfs_data', and 'cephfs_metadata'.",
+    "API tokens are accepted (allowtoken: true), making this suitable for read-only monitoring automations."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_pools",
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_osd"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_pool_name_status.json

@@ -0,0 +1,28 @@
+{
+  "operationId": "get_nodes_node_ceph_pool_name_status",
+  "usageNotes": "Use this to inspect the current configuration and health of a named Ceph pool on a specific cluster node; the queried node must be online and running Ceph services. Pass verbose=true to include live usage and I/O statistics in the response — omitting it returns configuration fields only. Requires either Sys.Audit or Datastore.Audit at the root path.",
+  "examples": [
+    {
+      "summary": "Get full status with statistics for the 'vm-storage' pool",
+      "path_params": {
+        "node": "pve1",
+        "name": "vm-storage"
+      },
+      "params": {
+        "verbose": true
+      }
+    }
+  ],
+  "tips": [
+    "The 'statistics' object in the response is only present when verbose=1 is requested; omitting verbose saves response size when you only need pool configuration.",
+    "Check 'nodelete', 'nopgchange', and 'nosizechange' flags before attempting pool modification operations — they indicate Ceph-level locks that will cause write operations to fail.",
+    "The 'autoscale_status' object shape varies across Ceph releases; treat it as opaque unless you know the exact cluster version.",
+    "Any cluster node running Ceph MON can serve this request; you do not need to query the node that owns the pool's primary OSDs."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_pools",
+    "get_nodes_node_ceph_status",
+    "put_nodes_node_ceph_pool_name",
+    "delete_nodes_node_ceph_pool_name"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_rules.json

@@ -0,0 +1,23 @@
+{
+  "operationId": "get_nodes_node_ceph_rules",
+  "usageNotes": "Returns the list of CRUSH rules configured in the Ceph cluster as seen from the specified node. Use this before creating or modifying Ceph pools to identify valid rule names to assign. Requires either Sys.Audit or Datastore.Audit privilege at the root path; the node must be online and Ceph must be initialized on the cluster.",
+  "examples": [
+    {
+      "summary": "List all CRUSH rules from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "CRUSH rules govern how Ceph distributes object replicas across failure domains (e.g., host, rack); knowing the available rules is required when setting the 'rule' field on a Ceph pool.",
+    "This endpoint is read-only and safe to call at any time without affecting cluster state.",
+    "If the node is part of a Ceph cluster but returns an empty array, Ceph may not be fully initialized — check with get_nodes_node_ceph_status."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_ceph_status",
+    "get_nodes_node_ceph_pools",
+    "post_nodes_node_ceph_pools"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_ceph_status.json

@@ -0,0 +1,26 @@
+{
+  "operationId": "get_nodes_node_ceph_status",
+  "usageNotes": "Use this to retrieve the current Ceph cluster health, monitor status, OSD map, and pool statistics from any node that is a member of the cluster. The response is cluster-wide (equivalent to `ceph status`), so any healthy, online Ceph node can be used as the target — choose a node that is reachable and actively participating in the cluster. Requires either Sys.Audit or Datastore.Audit on the root path; API tokens are supported.",
+  "examples": [
+    {
+      "summary": "Check Ceph cluster health from node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "Since the response is cluster-wide, any active Ceph member node returns the same data — pick the node closest to your API endpoint or the one you know is online.",
+    "Look at response fields health.status ('HEALTH_OK', 'HEALTH_WARN', 'HEALTH_ERR') and health.checks for actionable degradation details.",
+    "If Ceph is not configured on the cluster this endpoint returns an error; use GET /nodes/{node}/ceph/config or check for Ceph installation before calling.",
+    "For a cluster-scoped alias that does not require specifying a node, use GET /cluster/ceph/status instead."
+  ],
+  "relatedOperations": [
+    "get_cluster_ceph_status",
+    "get_nodes_node_ceph_osd",
+    "get_nodes_node_ceph_pools",
+    "get_nodes_node_ceph_mon",
+    "get_nodes_node_ceph_flags"
+  ]
+}

package/dist/catalog-pve/enrichment/get_nodes_node_certificates.json

@@ -0,0 +1,27 @@
+{
+  "operationId": "get_nodes_node_certificates",
+  "usageNotes": "Returns the certificate sub-resource index for a node, listing available child endpoints (acme, info, custom). Use this as a discovery call to confirm which certificate management paths are available on a target node before drilling into certificate details or ACME operations. No privileges beyond a valid user session are required, but the node must be reachable.",
+  "examples": [
+    {
+      "summary": "List certificate sub-resources on node pve1",
+      "path_params": {
+        "node": "pve1"
+      },
+      "params": {}
+    }
+  ],
+  "tips": [
+    "This is an index endpoint — it returns navigational links, not actual certificate data. Use get_nodes_node_certificates_info to retrieve the active TLS certificate details.",
+    "Available for all authenticated users; no Sys.Audit or similar privilege is required.",
+    "The response 'name' field in each item maps to the child path segment (e.g. 'acme', 'info', 'custom')."
+  ],
+  "relatedOperations": [
+    "get_nodes_node_certificates_info",
+    "get_nodes_node_certificates_acme",
+    "post_nodes_node_certificates_custom",
+    "delete_nodes_node_certificates_custom",
+    "post_nodes_node_certificates_acme_certificate",
+    "put_nodes_node_certificates_acme_certificate",
+    "delete_nodes_node_certificates_acme_certificate"
+  ]
+}