@runpod/mcp-server 4.5.0 → 4.6.0

package/dist/stdio.mjs

@@ -12,7 +12,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 
 // src/server.ts
 var SERVER_NAME = "Runpod API Server";
-var SERVER_VERSION = true ? "4.5.0" : "dev";
+var SERVER_VERSION = true ? "4.6.0" : "dev";
 
 // src/specgen/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -348,6 +348,7 @@ var generatedTools = [
     title: "Create cluster",
     operationId: "createCluster",
     description: "Create an instant cluster (multiple pods with high-speed interconnect). BILLABLE from creation for every pod in the cluster: it rents compute.podCount identical pods at once, each with compute.gpuCountPerPod GPUs of compute.gpuTypeId \u2014 state the hourly price for the total GPU count (podCount * gpuCountPerPod, priced from the catalog tools) and create only after the user's explicit go on that quoted shape and total hourly price. Verify GPU stock first via the catalog tools. The compute shape and type are fixed at creation; only the name can be changed later. The container configuration applies to every pod, and templateId is the only private-image path \u2014 a bare registry property is rejected. Delete with delete-cluster when finished.",
+    directoryDescription: "Create an Instant Cluster: compute.podCount identical Pods joined by a high-speed interconnect, each with compute.gpuCountPerPod GPUs of compute.gpuTypeId. Billable from creation for every Pod in the cluster, at the GPU type's hourly price times the total GPU count. The compute shape and type are fixed at creation; only the name can change later. The container configuration applies to every Pod, and templateId is the only way to use a private image; a bare registry property is rejected.",
     method: "POST",
     path: "/v2/clusters",
     params: [],
@@ -363,7 +364,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateClusterRequest"
+          $ref: "#/$defs/CreateClusterRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -600,7 +602,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateDelegationRequest"
+          $ref: "#/$defs/CreateDelegationRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -632,6 +635,7 @@ var generatedTools = [
     title: "Create endpoint",
     operationId: "createEndpoint",
     description: "Create a serverless endpoint. BILLABLE: state the worker's hourly price (from the catalog tools) before creating. Worker hardware is one of two choices: the gpu object (gpu.pools takes serverless pool ids from the catalog, e.g. ADA_24, never display names; gpu.count sets GPUs per worker) or the cpu array of CPU flavor configurations for a CPU endpoint. type and scaling are required and fix the request-routing model. Workers cold-start on the first job: expect minutes, poll with get-job-status wait.",
+    directoryDescription: "Create a Serverless endpoint. Billable while its workers run, at the worker's hourly price. Worker hardware is either the gpu object (gpu.pools takes Serverless pool ids such as ADA_24, and gpu.count sets GPUs per worker) or the cpu array of CPU flavor configurations. type and scaling are required and set the request-routing model. Workers cold-start on their first job, which commonly takes minutes.",
     method: "POST",
     path: "/v2/serverless",
     params: [],
@@ -647,7 +651,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateEndpointRequest"
+          $ref: "#/$defs/CreateEndpointRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1092,7 +1097,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateGlobalVolumeRequest"
+          $ref: "#/$defs/CreateGlobalVolumeRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1134,7 +1140,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateNetworkVolumeRequest"
+          $ref: "#/$defs/CreateNetworkVolumeRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1186,6 +1193,7 @@ var generatedTools = [
     title: "Create Pod",
     operationId: "createPod",
     description: 'Rent a GPU/CPU pod. BILLABLE from creation until stop/terminate: state the hourly price before creating. GPU selection is the gpu object: gpu.id takes a catalog GPU type id (e.g. "NVIDIA GeForce RTX 4090"), verified via list-gpu-types, and gpu.count sets the GPU count; cloud/data-center choice constrains stock.',
+    directoryDescription: 'Create a GPU or CPU Pod. Billable from creation until it is stopped or terminated. GPU selection is the gpu object: gpu.id takes a GPU type id such as "NVIDIA GeForce RTX 4090", and gpu.count sets the number of GPUs. Cloud tier and data center choices limit which machines can host it.',
     method: "POST",
     path: "/v2/pods",
     params: [],
@@ -1201,7 +1209,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreatePodRequest"
+          $ref: "#/$defs/CreatePodRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1568,7 +1577,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateRegistryRequest"
+          $ref: "#/$defs/CreateRegistryRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1613,7 +1623,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     schemaOnDemand: true,
@@ -1621,7 +1631,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateSecretRequest"
+          $ref: "#/$defs/CreateSecretRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1676,7 +1687,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/CreateTemplateRequest"
+          $ref: "#/$defs/CreateTemplateRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -1863,6 +1875,7 @@ var generatedTools = [
     title: "Delete cluster",
     operationId: "deleteCluster",
     description: "Delete a cluster permanently: it terminates every member pod. Verify the id with get-cluster, and list-cluster-pods for what the delete takes down, before deleting; delete only clusters your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete an Instant Cluster permanently. Every member Pod is terminated and its container disk is lost.",
     method: "DELETE",
     path: "/v2/clusters/{id}",
     params: [
@@ -1894,6 +1907,7 @@ var generatedTools = [
     title: "Delete endpoint",
     operationId: "deleteEndpoint",
     description: "Delete a serverless endpoint permanently and immediately. Verify the id belongs to the intended endpoint (get-endpoint) before deleting; delete only endpoints your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete a Serverless endpoint permanently and immediately.",
     method: "DELETE",
     path: "/v2/serverless/{id}",
     params: [
@@ -1987,6 +2001,7 @@ var generatedTools = [
     title: "Delete Pod",
     operationId: "deletePod",
     description: "Terminate a pod permanently \u2014 its container disk is lost. Distinguish from stopping (pod-action stop) which releases the GPU but keeps volume data. Verify the id with get-pod first; terminate only pods your own tool calls created in this conversation, or the one the user asked you to terminate by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Terminate a Pod permanently. Its container disk is lost; data on an attached network volume is kept. Stopping a Pod instead releases its compute but keeps its disk.",
     method: "DELETE",
     path: "/v2/pods/{id}",
     params: [
@@ -2048,6 +2063,7 @@ var generatedTools = [
     title: "Delete secret",
     operationId: "deleteSecret",
     description: "Delete a secret permanently. Environment variables referencing its name ({{ RUNPOD_SECRET_<name> }}) stop resolving at the next pod or worker boot; running instances keep the value they started with. Verify the id with get-secret first; delete only secrets your own tool calls created in this conversation, or the one the user asked you to delete by id \u2014 a name found by listing is not attribution.",
+    directoryDescription: "Delete a secret permanently. Environment variables that reference it ({{ RUNPOD_SECRET_<name> }}) stop resolving at the next Pod or worker boot; running instances keep the value they started with.",
     method: "DELETE",
     path: "/v2/account/secrets/{id}",
     params: [
@@ -2079,6 +2095,7 @@ var generatedTools = [
     title: "Delete template",
     operationId: "deleteTemplate",
     description: "Delete a template permanently. Verify with get-template first; a template referenced by a live endpoint should not be deleted.",
+    directoryDescription: "Delete a template permanently. An endpoint that references the template can stop working once it is deleted.",
     method: "DELETE",
     path: "/v2/templates/{id}",
     params: [
@@ -2444,7 +2461,8 @@ var generatedTools = [
         },
         cloud: {
           $ref: "#/$defs/GpuCloudFilter",
-          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE."
+          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE.",
+          type: "string"
         },
         countryCodes: {
           type: "array",
@@ -2728,7 +2746,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -2805,7 +2824,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3171,7 +3191,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3443,7 +3464,8 @@ var generatedTools = [
         },
         cloud: {
           $ref: "#/$defs/GpuCloudFilter",
-          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE."
+          description: "Cloud type for availability and lowest-price calculations. Valid only with include=AVAILABILITY. Supported values: SECURE, COMMUNITY. Upstream default when omitted: SECURE.",
+          type: "string"
         },
         countryCodes: {
           type: "array",
@@ -3537,7 +3559,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3659,7 +3682,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3826,6 +3850,7 @@ var generatedTools = [
     title: "List Serverless billing",
     operationId: "listServerlessBilling",
     description: "Get serverless billing history, split into time buckets. SIZE WARNING: with defaults this emits one record per endpoint PER BUCKET \u2014 on an account with many endpoints the response overflows the tool-result limit and becomes unusable. Always pass lastN: 1 (or a bucketSize spanning the whole window) for one record per endpoint, and serverlessId when you need one endpoint. Distinct from pod billing, which covers standalone pods.",
+    directoryDescription: "Get Serverless billing history, split into time buckets. By default the response has one record per endpoint per bucket, which can be very large on accounts with many endpoints; lastN: 1 (or one bucket spanning the whole window) returns one record per endpoint, and serverlessId narrows it to a single endpoint. Pod billing is reported separately.",
     method: "GET",
     path: "/v2/billing/serverless",
     params: [
@@ -3872,7 +3897,8 @@ var generatedTools = [
         },
         bucketSize: {
           $ref: "#/$defs/BillingBucketSize",
-          description: "Length of each billing time bucket. Defaults to day."
+          description: "Length of each billing time bucket. Defaults to day.",
+          type: "string"
         },
         lastN: {
           type: "integer",
@@ -3929,7 +3955,8 @@ var generatedTools = [
           type: "string"
         },
         body: {
-          $ref: "#/$defs/PodActionRequest"
+          $ref: "#/$defs/PodActionRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -3999,7 +4026,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -4010,7 +4037,8 @@ var generatedTools = [
           description: "Cluster identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateClusterRequest"
+          $ref: "#/$defs/UpdateClusterRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4036,6 +4064,7 @@ var generatedTools = [
     title: "Update endpoint",
     operationId: "updateEndpoint",
     description: "Partially update a serverless endpoint (PATCH): only fields present in the body change, omitted ones are untouched, with one exception. DESTRUCTIVE GOTCHA: gpu.pools and gpu.excludedTypes are a single selection, so sending pools without excludedTypes clears any exclusions pinned elsewhere (the console or set-endpoint-gpus) \u2014 read the endpoint first with get-endpoint and resend excludedTypes if you still want them. An exclusion naming a type outside pools returns 400. A CUDA-only or count-only change does not need pools at all, so omit it unless you mean to replace the selection. Mutable fields: name, gpu, cpu, workers (min/max/idleTimeout), scaling (type plus queueDelay or requestCount), dataCenterIds, networkVolumes, timeout, flashboot, and the container settings (image, args, disk, ports, env, registry). cpu completely replaces a CPU endpoint's flavor selection. Compute family is immutable: gpu on a CPU endpoint, cpu on a GPU one, or both, returns 400. Effect timing differs by field \u2014 workers/scaling/timeout reach the autoscaler promptly, while container changes (image, env) cut a new release that rolls out as workers cycle, so in-flight workers keep the previous version. Track rollout with list-endpoint-releases.",
+    directoryDescription: "Partially update a Serverless endpoint (PATCH): only fields present in the body change. gpu.pools and gpu.excludedTypes are one selection, so sending pools without excludedTypes clears existing exclusions; an exclusion naming a type outside pools returns 400, and a CUDA-only or count-only change does not need pools. Mutable fields: name, gpu, cpu, workers (min/max/idleTimeout), scaling (type plus queueDelay or requestCount), dataCenterIds, networkVolumes, timeout, flashboot, and the container settings (image, args, disk, ports, env, registry). cpu replaces a CPU endpoint's whole flavor selection. The compute family is fixed: gpu on a CPU endpoint, cpu on a GPU one, or both returns 400. Worker, scaling and timeout changes apply promptly; container changes (image, env) create a new release that rolls out as workers cycle, so in-flight workers keep the previous version.",
     method: "PATCH",
     path: "/v2/serverless/{id}",
     params: [
@@ -4047,7 +4076,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4060,7 +4089,8 @@ var generatedTools = [
           description: "Serverless endpoint identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateEndpointRequest"
+          $ref: "#/$defs/UpdateEndpointRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4439,7 +4469,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -4450,7 +4480,8 @@ var generatedTools = [
           description: "Global volume identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateGlobalVolumeRequest"
+          $ref: "#/$defs/UpdateGlobalVolumeRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4491,7 +4522,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     inputSchema: {
@@ -4502,7 +4533,8 @@ var generatedTools = [
           description: "Network volume identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateNetworkVolumeRequest"
+          $ref: "#/$defs/UpdateNetworkVolumeRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4547,7 +4579,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4560,7 +4592,8 @@ var generatedTools = [
           description: "Pod identifier"
         },
         body: {
-          $ref: "#/$defs/UpdatePodRequest"
+          $ref: "#/$defs/UpdatePodRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4789,7 +4822,7 @@ var generatedTools = [
     hasBody: true,
     annotations: {
       readOnlyHint: false,
-      destructiveHint: false,
+      destructiveHint: true,
       idempotentHint: false,
       openWorldHint: true
     },
@@ -4802,7 +4835,8 @@ var generatedTools = [
           description: "Secret identifier"
         },
         body: {
-          $ref: "#/$defs/UpdateSecretRequest"
+          $ref: "#/$defs/UpdateSecretRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -4848,7 +4882,8 @@ var generatedTools = [
       type: "object",
       properties: {
         body: {
-          $ref: "#/$defs/UpdateSshKeysRequest"
+          $ref: "#/$defs/UpdateSshKeysRequest",
+          type: "object"
         }
       },
       required: ["body"],
@@ -4893,7 +4928,7 @@ var generatedTools = [
     annotations: {
       readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: false,
+      idempotentHint: true,
       openWorldHint: true
     },
     schemaOnDemand: true,
@@ -4904,7 +4939,8 @@ var generatedTools = [
           type: "string"
         },
         body: {
-          $ref: "#/$defs/UpdateTemplateRequest"
+          $ref: "#/$defs/UpdateTemplateRequest",
+          type: "object"
         }
       },
       required: ["id", "body"],
@@ -5073,6 +5109,142 @@ var generatedTools = [
   }
 ];
 
+// src/specgen/profile.ts
+var IN = { include: true };
+var CREDENTIAL_INPUT = "Takes a secret or password as input; directories forbid collecting credentials.";
+var ALP = "Collects conversation-derived data beyond the task; the directory profile never serves it.";
+var DIRECTORY_TOOLS = {
+  "cancel-job": IN,
+  "create-cluster": IN,
+  "create-delegation": IN,
+  "create-endpoint": IN,
+  "create-global-volume": IN,
+  "create-network-volume": IN,
+  "create-pod": IN,
+  "create-template": IN,
+  "delete-cluster": IN,
+  "delete-endpoint": IN,
+  "delete-global-volume": IN,
+  "delete-network-volume": IN,
+  "delete-pod": IN,
+  "delete-registry": IN,
+  "delete-secret": IN,
+  "delete-template": IN,
+  "deploy-hub-repo": IN,
+  "endpoint-health": IN,
+  "get-capacity": IN,
+  "get-cluster": IN,
+  "get-cpu-type": IN,
+  "get-data-center": IN,
+  "get-endpoint": IN,
+  "get-endpoint-build": IN,
+  "get-global-volume": IN,
+  "get-gpu-type": IN,
+  "get-job-status": IN,
+  "get-network-volume": IN,
+  "get-organization": IN,
+  "get-pod": IN,
+  "get-registry": IN,
+  "get-secret": IN,
+  "get-ssh-keys": IN,
+  "get-template": IN,
+  "list-billing": IN,
+  "list-cluster-billing": IN,
+  "list-cluster-pods": IN,
+  "list-clusters": IN,
+  "list-cpu-types": IN,
+  "list-data-centers": IN,
+  "list-delegations": IN,
+  "list-endpoint-billing": IN,
+  "list-endpoint-builds": IN,
+  "list-endpoint-releases": IN,
+  "list-endpoint-workers": IN,
+  "list-endpoints": IN,
+  "list-global-volumes": IN,
+  "list-gpu-types": IN,
+  "list-hub-repos": IN,
+  "list-network-volume-billing": IN,
+  "list-network-volumes": IN,
+  "list-pod-billing": IN,
+  "list-pods": IN,
+  "list-public-endpoints": IN,
+  "list-public-templates": IN,
+  "list-registries": IN,
+  "list-secrets": IN,
+  "list-serverless-billing": IN,
+  "list-templates": IN,
+  "lookup-concept": IN,
+  "pod-action": IN,
+  "purge-endpoint-queue": IN,
+  "retry-job": IN,
+  "revoke-delegation": IN,
+  "search-concepts": IN,
+  "search-docs": IN,
+  "set-endpoint-gpus": IN,
+  "stream-job": IN,
+  "stream-pod-logs": IN,
+  "stream-worker-logs": IN,
+  "update-cluster": IN,
+  "update-endpoint": IN,
+  "update-global-volume": IN,
+  "update-network-volume": IN,
+  "update-pod": IN,
+  "update-ssh-keys": IN,
+  "update-template": IN,
+  "run-endpoint": { include: true, omitInputs: ["s3Config"] },
+  "runsync-endpoint": { include: true, omitInputs: ["s3Config"] },
+  "list-guides": {
+    include: false,
+    reason: "Serves playbooks that instruct the model how to behave."
+  },
+  "read-guide": {
+    include: false,
+    reason: "Serves playbooks that instruct the model how to behave."
+  },
+  "describe-tool": {
+    include: false,
+    reason: "Fetches schemas the directory already lists in full; directories reject schema fetching."
+  },
+  "create-secret": { include: false, reason: CREDENTIAL_INPUT },
+  "update-secret": { include: false, reason: CREDENTIAL_INPUT },
+  "create-registry": { include: false, reason: CREDENTIAL_INPUT },
+  report_feedback: { include: false, reason: ALP },
+  report_how_user_found_runpod: { include: false, reason: ALP },
+  save_to_journal: { include: false, reason: ALP },
+  read_journal: { include: false, reason: ALP },
+  ask_question: { include: false, reason: ALP }
+};
+function directoryIncludes(name) {
+  return DIRECTORY_TOOLS[name]?.include === true;
+}
+function directoryOmittedInputs(name) {
+  const decision = DIRECTORY_TOOLS[name];
+  return decision?.include ? decision.omitInputs ?? [] : [];
+}
+
+// src/specgen/redact.ts
+var REDACTED = "[redacted]";
+var SECRET_KEY = /pass(word|wd)?|secret|token|api_?key|private_?key|credential|auth/i;
+var SECRET_REFERENCE = /^\s*\{\{\s*RUNPOD_SECRET_[^}]+\}\}\s*$/;
+function redactEnv(env) {
+  return Object.fromEntries(
+    Object.entries(env).map(([key, value]) => [
+      key,
+      typeof value === "string" && value !== "" && SECRET_KEY.test(key) && !SECRET_REFERENCE.test(value) ? REDACTED : value
+    ])
+  );
+}
+function redactSecretEnv(payload) {
+  if (Array.isArray(payload)) return payload.map(redactSecretEnv);
+  if (!payload || typeof payload !== "object") return payload;
+  return Object.fromEntries(
+    Object.entries(payload).map(([key, value]) => [
+      key,
+      key === "env" && value && typeof value === "object" && !Array.isArray(value) ? redactEnv(value) : redactSecretEnv(value)
+    ])
+  );
+}
+
 // src/specgen/pagination.ts
 var DEFAULT_LIST_LIMIT = 20;
 var MAX_LIST_LIMIT = 100;
@@ -5272,6 +5444,12 @@ var destructive = {
   idempotentHint: true,
   openWorldHint: true
 };
+var destructiveWrite = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true
+};
 
 // src/specgen/tools/capacity.ts
 var CUDA_VERSION_REGEX = /^\d{1,2}\.\d{1,2}$/;
@@ -5308,6 +5486,7 @@ function rankByStock(rows, stats, includeUnavailable) {
 var getCapacity = {
   name: "get-capacity",
   title: "Get GPU capacity by CUDA version",
+  directoryDescription: "GPU capacity across host CUDA versions, as a matrix. By default one call returns, for each GPU type, overall stock plus AVAILABLE or UNAVAILABLE per host CUDA version. With cudaVersions it checks each listed version and returns graded stock (High, Medium, Low, Out) and the lowest on-demand price per version; a check that fails transiently reports an error for that version only. Out-of-stock GPUs are included unless includeUnavailable is false. Live public catalog data, so page cursors can shift between calls.",
   annotations: readOnly,
   description: "GPU capacity across host CUDA versions, as a matrix. Use this to choose an endpoint's allowedCudaVersions/minCudaVersion (or diagnose/widen a capacity-starved one) and to distinguish capacity problems from compatibility problems. Default mode is one call returning, per GPU type, overall stock plus AVAILABLE/UNAVAILABLE per host-reported CUDA version. Pass cudaVersions to deep-probe instead: one stock lookup per listed version, returning graded stock (High/Medium/Low/Out) and the lowest on-demand price per version; a probe that fails transiently reports a per-version error instead of failing the call. Nothing is hidden by default \u2014 set includeUnavailable:false to drop GPUs with no stock on any listed version. Credential-free public catalog data. Stock is live, so page cursors can shift between calls.",
   inputSchema: {
@@ -5510,7 +5689,9 @@ function formatGpuIds(gpu) {
 var setEndpointGpus = {
   name: "set-endpoint-gpus",
   title: "Set endpoint GPUs",
-  annotations: idempotentWrite,
+  directoryDescription: "Set which GPUs a Serverless endpoint's workers run on, including pinning specific GPU types. Takes either a raw gpuIds string, or pools plus optional excludeGpuTypeIds, from which the exclusion string is built: a pool allows every GPU type in it, and excluding all but one pins that type. Changes only GPU settings and keeps the endpoint's other settings.",
+  // Replaces the whole GPU selection: exclusions not resent are cleared.
+  annotations: destructive,
   description: "Set which GPUs a Serverless endpoint's workers run on \u2014 including pinning specific GPU SKUs. Provide either a raw gpuIds string, or pools plus optional excludeGpuTypeIds (GPU type ids from list-gpu-types) and the exclusion string is built for you: a pool allows every SKU in it, and excluding all but one SKU pins that SKU exactly. Updates only GPU settings through REST v2, preserving other endpoint settings. create-endpoint/update-endpoint also support gpu.excludedTypes.",
   inputSchema: {
     type: "object",
@@ -5705,6 +5886,7 @@ function randomSuffix() {
 var listHubRepos = {
   name: "list-hub-repos",
   title: "List Hub repos",
+  directoryDescription: "List repos published to the Runpod Hub (prebuilt Serverless workers and Pod templates, such as vLLM and ComfyUI), sorted by deploy count. Public catalog; no sign-in needed. Each result includes the listed release with its hubReleaseId and image name. includeConfig: true adds each release's config (hardware requirements and environment-variable schema), which is large; repoOwner and searchTerm narrow the list.",
   annotations: readOnly,
   description: "List repos published to the Runpod Hub (prebuilt Serverless workers and Pod templates, e.g. vLLM, ComfyUI). Public catalog \u2014 no auth required. Each result includes the currently listed release with its hubReleaseId and prebuilt image name. Results are sorted by deploy count (most popular first). Set includeConfig:true to also return the release config (hardware requirements and environment-variable schema) \u2014 it is large, so prefer requesting it for a single repo via the repoOwner/searchTerm filters.",
   inputSchema: {
@@ -5808,6 +5990,7 @@ var listHubRepos = {
 var deployHubRepo = {
   name: "deploy-hub-repo",
   title: "Deploy Hub repo",
+  directoryDescription: `Deploy a Runpod Hub repo's listed release as a new Serverless endpoint, the same as clicking Deploy on the Hub. Identifies the repo by repo ("owner/name") or hubReleaseId. The release supplies the image, container disk, CUDA constraints and environment-variable defaults; env overrides or fills in values, and keys the release requires without a default have to be supplied. GPUs come from the release config when it sets them, otherwise from gpuIds (pool names such as 'ADA_24'). Billable while the endpoint's workers run.`,
   // Two sequential upstream calls: together they can outlast a client's request timeout.
   holdsResponse: true,
   annotations: write,
@@ -6269,6 +6452,7 @@ function validateWait(wait) {
 var runEndpoint = {
   name: "run-endpoint",
   title: "Submit Serverless job",
+  directoryDescription: "Submit an asynchronous job to a Serverless endpoint. Returns a job ID immediately; the result stays available for 30 minutes after the job completes.",
   annotations: write,
   description: "Submit an asynchronous job to a Serverless endpoint. Returns a job ID immediately \u2014 use get-job-status to poll for results (pass its `wait` to block through a cold start instead of tight-looping). Async results are available for 30 minutes after completion.",
   inputSchema: {
@@ -6300,6 +6484,7 @@ var runEndpoint = {
 var runsyncEndpoint = {
   name: "runsync-endpoint",
   title: "Run Serverless job and wait",
+  directoryDescription: `Submit a synchronous job to a Serverless endpoint and wait up to ${HTTP_LONG_POLL_BUDGET_MS} ms for the result. If the job outlives the wait, the response carries the job ID and its current status (IN_QUEUE or IN_PROGRESS). Maximum payload 20 MB; results expire 1 minute after completion.`,
   holdsResponse: true,
   annotations: write,
   description: "Submit a synchronous job to a Serverless endpoint and wait for the result. Best for fast tasks: if the job outlives the wait, the response returns a job ID and a non-terminal status (IN_QUEUE or IN_PROGRESS) to poll with get-job-status. Max payload 20 MB; results expire after 1 minute. The wait parameter extends the server-side wait" + (HOSTED ? ` \u2014 this server runs behind a 60-second gateway deadline, so waits clamp to ${HTTP_LONG_POLL_BUDGET_MS} ms, which is also the effective default. For longer jobs use run-endpoint + get-job-status.` : " to up to 5 minutes (300000 ms); it defaults to 90000 (90 seconds)."),
@@ -6346,6 +6531,7 @@ var runsyncEndpoint = {
 var getJobStatus = {
   name: "get-job-status",
   title: "Get job status",
+  directoryDescription: `Get the status of a Serverless job, and its output once it completes. Statuses: IN_QUEUE, IN_PROGRESS, COMPLETED, FAILED, CANCELLED, TIMED_OUT. With wait (milliseconds, up to ${HTTP_LONG_POLL_BUDGET_MS}) the server polls until the job reaches a final status or the wait runs out, in which case it returns the latest status with pollingTimedOut: true; without wait it returns the current status at once. An IN_QUEUE result includes a workerHealth summary of the endpoint's workers.`,
   holdsResponse: true,
   annotations: readOnly,
   description: "Check the status of a Serverless job. Returns the current status and output when complete. Job statuses: IN_QUEUE, IN_PROGRESS, COMPLETED, FAILED, CANCELLED, TIMED_OUT. Pass `wait` (milliseconds, up to " + STATUS_WAIT_MAX_MS + ") to BLOCK server-side, polling until the job reaches a terminal status or the budget expires \u2014 use it to ride out a cold start (a first job on a fresh worker pulls the image and loads the model, commonly 1\u20135+ minutes) in a single call instead of returning on the first IN_QUEUE and tight-looping the tool. Without `wait` it returns the current status immediately (a single check). If the budget expires before a terminal status, it returns the latest non-terminal status with pollingTimedOut:true \u2014 call again (with `wait`) to keep blocking. IMPORTANT: a job stuck IN_QUEUE does not necessarily mean a capacity shortage \u2014 a worker may have spun up and crash-looped. When the job is IN_QUEUE this tool attaches a workerHealth summary and a hint. To dig deeper call list-endpoint-workers, then read stream-worker-logs regardless of the status a worker reports: a container failing to start loops while its worker still shows RUNNING or THROTTLED and unhealthy stays 0, so UNHEALTHY is one symptom of a crash loop and not a test for it. The logs are the authority.",
@@ -6396,8 +6582,11 @@ var getJobStatus = {
 var streamJob = {
   name: "stream-job",
   title: "Stream job output",
+  directoryDescription: `Collect streaming output from a Serverless job whose worker streams its output. Polls the job's stream until it reaches COMPLETED, FAILED, CANCELLED or TIMED_OUT, for up to ${formatBudget(HTTP_LONG_POLL_BUDGET_MS)}; if time runs out first, it returns the chunks collected so far with pollingTimedOut: true, and a later call resumes where it left off.`,
   holdsResponse: true,
-  annotations: readOnly,
+  // Not a read: /stream hands out each chunk once, so a chunk collected by a
+  // call whose response is lost cannot be fetched again.
+  annotations: destructiveWrite,
   description: `Retrieve streaming output from a Serverless job. The worker must support streaming output. Polls /stream/{jobId} and collects chunks until the status is COMPLETED, FAILED, CANCELLED, or TIMED_OUT, for up to ${formatBudget(STREAM_BUDGET_MS)}. If the budget expires first, returns the chunks collected so far with pollingTimedOut: true \u2014 call stream-job again to resume where it left off, or get-job-status to check without streaming.`,
   inputSchema: {
     type: "object",
@@ -6455,7 +6644,8 @@ var cancelJob = {
 var retryJob = {
   name: "retry-job",
   title: "Retry job",
-  annotations: write,
+  // Removes the previous output before requeueing.
+  annotations: destructiveWrite,
   description: "Retry a failed or timed-out Serverless job. Only works for jobs with FAILED or TIMED_OUT status. The previous output is removed and the job is requeued.",
   inputSchema: {
     type: "object",
@@ -6481,6 +6671,7 @@ var retryJob = {
 var endpointHealth = {
   name: "endpoint-health",
   title: "Get endpoint health",
+  directoryDescription: "Get the health rollup for a Serverless endpoint: worker counts by state and job queue statistics. The rollup can lag the per-worker state, and a worker whose container keeps failing to start can still report RUNNING or THROTTLED here. Zero workers means the endpoint is waiting for GPU capacity.",
   annotations: readOnly,
   description: "Get the endpoint-level health rollup for a Serverless endpoint: worker counts by state plus job queue statistics. This is the runtime plane's own /health view and it can lag or disagree with the per-worker truth \u2014 when a job is stuck IN_QUEUE, prefer list-endpoint-workers over this rollup for per-worker state \u2014 but treat neither as the authority on crash loops, because a container failing to start loops while its worker reports RUNNING or THROTTLED and unhealthy stays 0; stream-worker-logs is what settles it, and note that get-job-status already attaches that worker summary and a hint on every IN_QUEUE result. Zero workers here means the endpoint is waiting for GPU capacity.",
   inputSchema: {
@@ -6502,6 +6693,7 @@ var endpointHealth = {
 var purgeEndpointQueue = {
   name: "purge-endpoint-queue",
   title: "Purge endpoint queue",
+  directoryDescription: "Remove all queued jobs from a Serverless endpoint. Jobs already in progress keep running.",
   annotations: destructive,
   description: "Remove all pending jobs from a Serverless endpoint queue. Only affects queued jobs \u2014 in-progress jobs continue running. Use this for error recovery or clearing outdated requests.",
   inputSchema: {
@@ -6539,6 +6731,7 @@ var jobTools = [
 var listEndpoints = {
   name: "list-endpoints",
   title: "List endpoints",
+  directoryDescription: "List the Serverless endpoints the account owns, trimmed to id, name, image, compute config, worker counts, scaling and data centers; environment variables and request URLs are left out. Returns one page at a time; cursor=nextCursor returns the next page.",
   annotations: readOnly,
   description: "List serverless endpoints owned by the account (trimmed: id, name, image, compute config, worker counts, scaling, data centers per endpoint \u2014 env vars and request URLs are omitted; use get-endpoint for the full object). Returns a page; pass cursor=nextCursor for more.",
   inputSchema: {
@@ -6585,6 +6778,7 @@ var listEndpoints = {
 var listTemplates = {
   name: "list-templates",
   title: "List templates",
+  directoryDescription: "List the templates visible to the account, with id, name, image and Serverless flag for each. Returns 20 templates per page by default; pagination.nextCursor returns the next page, and a template missing from one page can be on a later one.",
   annotations: readOnly,
   description: "List templates visible to the account. Returns id, name, image, and serverless flag per template; use get-template for full detail. Returns 20 templates per page by default. To find a template, follow `pagination.nextCursor` until `hasNextPage` is false: a name missing from one page may be on a later one.",
   inputSchema: {
@@ -8048,6 +8242,7 @@ var streamPodLogs = {
 var streamWorkerLogs = {
   name: "stream-worker-logs",
   title: "Stream worker logs",
+  directoryDescription: "Read a bounded snapshot of a Serverless worker's logs (container, system, or both). Holds the live stream open for maxWaitMs and returns the parsed log lines; truncated: true means the byte cap cut the output. A worker whose container keeps failing to start can report RUNNING or THROTTLED while its logs show the failure.",
   holdsResponse: true,
   annotations: readOnly,
   description: "Read a bounded snapshot of a Serverless worker's logs (container and/or system source). Holds the live stream open for maxWaitMs and returns the parsed log lines; `truncated: true` means the byte cap cut the output. Get worker IDs from list-endpoint-workers. Use this whenever a job stays IN_QUEUE while workers exist, whatever status they report \u2014 a crash-looping container often still shows RUNNING or THROTTLED with unhealthy 0, so these logs, not the worker status, are what identify a crash loop.",
@@ -8091,6 +8286,7 @@ function parseMetadata(metadata) {
 var listPublicEndpoints = {
   name: "list-public-endpoints",
   title: "List public endpoints",
+  directoryDescription: "List Runpod Public Endpoints: managed, pay-per-use model APIs (text, image, video, audio) that need no deployment. Public catalog; no sign-in needed. Each result includes its endpointId, model name, modality, owner and pricing. Only live endpoints are listed unless includeOffline is true.",
   annotations: readOnly,
   description: "List Runpod Public Endpoints \u2014 managed, pay-per-use model APIs (text, image, video, audio) that require no deployment. Public catalog, no auth required. Each result includes the endpointId to call with run-endpoint/runsync-endpoint (or via https://api.runpod.ai/v2/{endpointId}), the model name, modality, owner, and pricing. Only live endpoints are returned by default; set includeOffline:true to also list ones that are not currently live.",
   inputSchema: {
@@ -8391,6 +8587,7 @@ var readGuide = {
 var lookupConcept = {
   name: "lookup-concept",
   title: "Look up a concept",
+  directoryDescription: "Look up one Runpod concept (Pod, network volume, machine, worker, template and so on) by id, name or alias; case, plurals and small typos are tolerated, and matched_as shows the key used when the match was not exact. Returns its summary, fields, states, relations and rules, each rule with its public source, plus the concepts that point at it. Answers exact questions such as whether a volume disk is tied to one machine.",
   annotations: bundledRead,
   recordedArguments: ["concept"],
   description: 'Look up one Runpod concept (pod, network volume, machine, worker, template, \u2026) by id, name or alias; case, plurals and small typos are tolerated, and `matched_as` shows the key used when the match was not exact. Returns its summary, fields, states, relations and rules, each rule with the public source it comes from, the concepts that point at it, and the linked guides: examples (golden paths that use it, with their mcp level) and docs (skills and reference docs that explain it). Use it for exact facts, for example "is a volume disk tied to one machine" or "what happens to a stopped pod\'s GPU".',
@@ -8445,6 +8642,7 @@ var lookupConcept = {
 var searchConcepts = {
   name: "search-concepts",
   title: "Search concepts",
+  directoryDescription: 'Search the rules of the Runpod concept graph by words, for example "restart stopped pod no gpu" or "network volume data center". Returns the best-matching rules with their concept and public evidence.',
   annotations: bundledRead,
   recordedArguments: ["query", "limit"],
   description: 'Search the rules of the Runpod concept graph by words, for example "restart stopped pod no gpu" or "network volume data center". Returns the best-matching rules with their concept and public evidence. Follow up with lookup-concept for the full concept.',
@@ -8535,9 +8733,21 @@ function listedAnnotations(annotations) {
   const { idempotentHint, ...listed } = annotations;
   return idempotentHint ? annotations : listed;
 }
-function listTool(tool) {
-  const { name, title, description, inputSchema } = tool;
-  const annotations = listedAnnotations(tool.annotations);
+function listTool(tool, profile = "default") {
+  const { name, title, inputSchema } = tool;
+  const annotations = { title, ...listedAnnotations(tool.annotations) };
+  if (profile === "directory")
+    return {
+      name,
+      title,
+      description: withApiReference(
+        tool.directoryDescription ?? tool.description,
+        inputSchema
+      ),
+      inputSchema: withoutInputs(inputSchema, directoryOmittedInputs(name)),
+      annotations
+    };
+  const { description } = tool;
   if (!tool.schemaOnDemand)
     return { name, title, description, inputSchema, annotations };
   return {
@@ -8548,6 +8758,21 @@ function listTool(tool) {
     annotations
   };
 }
+var DIRECTORY_API_REFERENCE = "Calls the Runpod REST API v2: https://docs.runpod.io/api-reference-v2/overview";
+function withApiReference(description, schema) {
+  const properties = schema.properties ?? {};
+  if (!("body" in properties)) return description;
+  const trimmed = description.replace(/\s*$/, "");
+  const sentence = /[.!?]$/.test(trimmed) ? trimmed : `${trimmed}.`;
+  return `${sentence} ${DIRECTORY_API_REFERENCE}`;
+}
+function withoutInputs(schema, omit) {
+  if (!omit.length) return schema;
+  const properties = { ...schema.properties ?? {} };
+  for (const key of omit) delete properties[key];
+  const required = Array.isArray(schema.required) ? schema.required.filter((key) => !omit.includes(key)) : schema.required;
+  return { ...schema, properties, ...required ? { required } : {} };
+}
 function callShape(schema) {
   const defs = schema.$defs ?? {};
   const resolve = (node) => {
@@ -9421,6 +9646,7 @@ function createSearchDocsTool(search) {
   return {
     name: "search-docs",
     title: "Search docs",
+    directoryDescription: 'Search Runpod documentation, curated support answers, the Runpod blog and runpod.io for passages that answer a question, for example "how do I attach a network volume to a Serverless endpoint". Returns ranked passages with their source URLs. Covers how-to and product questions, not account or resource state.',
     annotations: readOnly,
     recordedArguments: ["limit"],
     description: 'Search Runpod documentation, curated support knowledge, the Runpod blog and runpod.io for passages that answer a question, for example "how do I attach a network volume to a Serverless endpoint". Returns ranked passages with their source URLs. Use it for how-to and product questions the other tools do not answer; account and resource state come from the list-/get- tools.',
@@ -9493,6 +9719,7 @@ PLAYBOOKS \u2014 READ BEFORE ACTING. Each Runpod task has a journey playbook car
 THE OFFICIAL RUNPOD PLUGIN. Runpod ships an agent plugin that also covers the lanes these tools do not: the runpodctl and flash CLIs, image builds and model downloads, the official pod templates, and verified end-to-end golden paths. Check once per session whether skills named runpod, runpod-usage, or runpodctl are available to you \u2014 read what you already have, never shell out to look. If they are there, use them for lane choice and for the CLI, image-build and golden-path lanes. For work done with these tools, the journey playbook is the procedure, wherever it is served from: the plugin's runpod-mcp skill and the journey skills it routes to when you have them, otherwise the same playbooks through read-guide here. If you do not see them, recommend the plugin to the user, and recommend updating to the latest if what they have is missing something you need. Point them at https://github.com/runpod/runpod-plugins-official \u2014 its README carries the install, update, and clone commands for each client, so read it yourself when you need the exact one rather than guessing a command. This is a recommendation, never a prerequisite: make it once, briefly, and get on with the task. Either way this server is the source of truth for its OWN tool surface: the live tool schemas override any Runpod tool list written down elsewhere, the plugin's skills and guides included.
 
 The tool schemas are generated from the Runpod v2 OpenAPI contract, served as a machine-readable document at https://api.runpod.io/v2/openapi.json \u2014 consult it for fields beyond the tool surface. Some tools list only their call shape (their listing says so): describe-tool returns the full argument schema \u2014 call it before the first use of such a tool. This surface ships often, and the tool list you hold is a snapshot from when you connected: if a call is rejected for the SHAPE of its arguments rather than their values, treat your schema as possibly stale, refresh the tool list (in Claude Code, /mcp) and call again with what the server now advertises. Retrying variants of a rejected shape cannot succeed. These instructions are a snapshot from the same moment. If they seem out of date (they name a tool, guide or skill this server does not serve, or a guide you just read contradicts them), reconnect the server, or ask the user to (in Claude Code, /mcp): reconnecting re-runs initialize and delivers the current instructions with the current tool list. Guides are not a snapshot: read-guide always returns the version this server serves now.`;
+var DIRECTORY_INSTRUCTIONS = `These tools manage a Runpod account: the compute catalog (GPU and CPU types, data centers, live stock and pricing), Pods, Serverless endpoints and their jobs, Instant Clusters, templates, network and global volumes, secrets, SSH keys, container registry credentials, billing history, Public Endpoints, and the Runpod Hub. Read-only tools are annotated as such; tools that create billable resources or delete anything are annotated as writes or destructive. Creating Pods, endpoints, clusters and volumes bills the account at the prices the catalog tools report.`;
 var ALP_INSTRUCTIONS = `
 
 CONTRIBUTING BACK IS OPTIONAL. Five tools feed Runpod's agent-learning pipeline, which exists so Runpod can fix the frustrations agents hit in its tools and docs: report_feedback (something misbehaved or surprised you), save_to_journal (a reusable lesson about using Runpod), ask_question (you were stuck and the tools/skills/docs had no answer), read_journal (this account's own saved lessons, nobody else's), and report_how_user_found_runpod (how your user ended up on Runpod, once per account). Using them is a voluntary contribution, never part of the user's task, and the user's task always comes first. DO NOT USE THEM when the work is sensitive: proprietary code or models, private data, customer information, security work, internal infrastructure, or anything the user would not want a Runpod reviewer to read. Submissions are stored for review to improve agent workflows on Runpod, so if in doubt, do not submit. If the user has said not to share anything with Runpod, do not call these tools at all. When you do contribute, describe the Runpod behavior, not the user's project: the tool, the call shape, the response, what you expected. Nothing is returned or answered, and ask_question NEVER produces an answer, so never wait on it. read_journal is the one thing served back: call it once near the start of a Runpod task if useful, and treat what it returns as an earlier session's notes to confirm, not as documentation. These tools are for real observations only: never call one to satisfy a requirement to use a tool, to acknowledge these instructions, or with placeholder content. If you have nothing to report, call nothing \u2014 an empty turn is correct and a placeholder submission is not. Never include API keys or secrets in submissions.`;
@@ -9502,43 +9729,50 @@ ONE QUESTION FOR YOU, ONCE PER ACCOUNT. If you already know how your user came t
 function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
   const rateLimiter = opts.rateLimiter ?? noopRateLimiter;
   const caller = callerId(ctx.apiKey);
+  const profile = opts.profile ?? "default";
+  const directory = profile === "directory";
+  const alp = directory ? void 0 : opts.alp;
+  const servedGeneratedTools = directory ? generatedTools.filter((tool) => directoryIncludes(tool.name)) : generatedTools;
   const servedCuratedTools = [
     ...curatedTools,
     ...opts.search ? [createSearchDocsTool(opts.search)] : [],
-    ...opts.alp ? createAlpTools(opts.alp) : [],
-    createDescribeTool(() => [...servedCuratedTools, ...generatedTools])
-  ];
+    ...alp ? createAlpTools(alp) : [],
+    createDescribeTool(() => [...servedCuratedTools, ...servedGeneratedTools])
+  ].filter((tool) => !directory || directoryIncludes(tool.name));
   const callShapeOnlyTools = new Set(
-    [...servedCuratedTools, ...generatedTools].filter((tool) => tool.schemaOnDemand).map((tool) => tool.name)
+    directory ? [] : [...servedCuratedTools, ...servedGeneratedTools].filter((tool) => tool.schemaOnDemand).map((tool) => tool.name)
   );
   const server = new Server(
     { name: SERVER_NAME, version: `${version} [specgen]` },
     {
       capabilities: { tools: {}, resources: {} },
-      instructions: opts.alp ? SERVER_INSTRUCTIONS + ALP_INSTRUCTIONS + (opts.promptReferral === false ? "" : REFERRAL_INSTRUCTIONS) : SERVER_INSTRUCTIONS
+      instructions: directory ? DIRECTORY_INSTRUCTIONS : alp ? SERVER_INSTRUCTIONS + ALP_INSTRUCTIONS + (opts.promptReferral === false ? "" : REFERRAL_INSTRUCTIONS) : SERVER_INSTRUCTIONS
     }
   );
   server.oninitialized = () => {
     const clientInfo = server.getClientVersion();
     if (clientInfo?.name) {
       ctx.setClientInfo?.(clientInfo.name, clientInfo.version);
-      if (opts.alp) {
-        opts.alp.harness = clientInfo.version ? `${clientInfo.name}/${clientInfo.version}` : clientInfo.name;
-        opts.alp.harnessSource = "client_info";
+      if (alp) {
+        alp.harness = clientInfo.version ? `${clientInfo.name}/${clientInfo.version}` : clientInfo.name;
+        alp.harnessSource = "client_info";
       }
     }
   };
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: [...servedCuratedTools, ...generatedTools].map(listTool)
+    tools: [...servedCuratedTools, ...servedGeneratedTools].map(
+      (tool) => listTool(tool, profile)
+    )
   }));
+  const servedGuides = directory ? [] : guideResources;
   server.setRequestHandler(ListResourcesRequestSchema, async () => ({
-    resources: guideResources.map(({ text: _text, ...resource }) => resource)
+    resources: servedGuides.map(({ text: _text, ...resource }) => resource)
   }));
   server.setRequestHandler(ListResourceTemplatesRequestSchema, async () => ({
     resourceTemplates: []
   }));
   server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
-    const guide = guideResources.find(
+    const guide = servedGuides.find(
       (candidate) => candidate.uri === request.params.uri
     );
     if (opts.analytics) {
@@ -9598,7 +9832,14 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
     const curated = servedCuratedTools.find(
       (tool) => tool.name === request.params.name
     );
-    const rejected = curated && !curated.lenientArguments ? validateArguments(
+    const omitted = directory ? directoryOmittedInputs(request.params.name).filter((key) => key in args) : [];
+    const rejected = omitted.length ? {
+      ok: false,
+      status: 400,
+      payload: {
+        error: `Not accepted on this server: ${omitted.join(", ")}.`
+      }
+    } : curated && !curated.lenientArguments ? validateArguments(
       curated.inputSchema,
       args
     ) : null;
@@ -9618,21 +9859,28 @@ function createSpecgenServer(ctx, version = "0.1.0", opts = {}) {
         ok: result.ok,
         status: result.status,
         durationMs: Date.now() - startedAt,
-        args: recordedArgumentValues(curated?.recordedArguments, args),
-        guideKind: curated?.recordedGuideKind?.(args),
+        // The directory profile records which tool ran, never what was asked.
+        ...directory ? {} : {
+          args: recordedArgumentValues(curated?.recordedArguments, args),
+          guideKind: curated?.recordedGuideKind?.(args)
+        },
         ...opts.analytics
       });
     }
     opts.onToolResult?.(request.params.name, result.status);
     if (!result.ok && result.status === 401) opts.onUnauthorized?.();
-    const payload = result.ok ? result.payload : withRecoveryHint(result, callShapeOnlyTools.has(request.params.name));
+    const payload = redactSecretEnv(
+      result.ok ? result.payload : withRecoveryHint(result, callShapeOnlyTools.has(request.params.name))
+    );
     return {
       content: [{ type: "text", text: JSON.stringify(payload, null, 2) }],
       isError: !result.ok
     };
   });
   async function dispatchTool(name, args) {
-    const tool = generatedTools.find((candidate) => candidate.name === name);
+    const tool = servedGeneratedTools.find(
+      (candidate) => candidate.name === name
+    );
     if (!tool)
       return {
         ok: false,