vmware-aiops 2.2.0__tar.gz → 2.3.1__tar.gz

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/.claude-plugin/plugin.json

@@ -2,8 +2,8 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-aiops",
   "displayName": "VMware AIops",
-  "version": "2.2.0",
-  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
+  "version": "2.3.1",
+  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "author": {
     "name": "Wei Zhou",
     "email": "zhouwei008@gmail.com",

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.2.0",
+        "vmware-aiops==2.3.1",
         "vmware-aiops-mcp"
       ]
     }

vmware_aiops-2.2.0/README.md → vmware_aiops-2.3.1/PKG-INFO

@@ -1,3 +1,27 @@
+Metadata-Version: 2.5
+Name: vmware-aiops
+Version: 2.3.1
+Summary: VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool
+Project-URL: Homepage, https://github.com/vmware-skills/VMware-AIops
+Project-URL: Repository, https://github.com/vmware-skills/VMware-AIops
+Project-URL: Issues, https://github.com/vmware-skills/VMware-AIops/issues
+Project-URL: Changelog, https://github.com/vmware-skills/VMware-AIops/blob/main/RELEASE_NOTES.md
+Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
+License-Expression: MIT
+License-File: LICENSE
+Requires-Python: >=3.10
+Requires-Dist: apscheduler<4.0,>=3.10
+Requires-Dist: httpx<1.0,>=0.27
+Requires-Dist: mcp[cli]<2.0,>=1.28
+Requires-Dist: pyaml<27.0,>=24.0
+Requires-Dist: python-dotenv<2.0,>=1.0
+Requires-Dist: pyvmomi<10.0,>=8.0.3.0
+Requires-Dist: rich<16.0,>=13.0
+Requires-Dist: typer<1.0,>=0.12
+Requires-Dist: vmware-monitor<3.0,>=2.3.1
+Requires-Dist: vmware-policy<2.0,>=1.23.0
+Description-Content-Type: text/markdown
+
 <!-- mcp-name: io.github.vmware-skills/vmware-aiops -->
 # VMware AIops
 
@@ -7,7 +31,7 @@
 
 English | [中文](README-CN.md)
 
-AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 60 tools.
+AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 61 tools.
 
 > **Companion skills** handle everything else:
 >
@@ -26,7 +50,7 @@ AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 60 tools.
 
 ## Upgrading to 2.0
 
-2.0 renames 38 of its 60 MCP tools so every name starts with a verb (e.g. `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`). The full old → new table is in
+2.0 renames 38 of its MCP tools so every name starts with a verb (e.g. `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`). The full old → new table is in
 [RELEASE_NOTES.md](RELEASE_NOTES.md#v200--mcp-tools-renamed-verb-first). Nothing else changes: same tools, parameters,
 safety gates and CLI commands. If an agent prompt, script or `~/.vmware/rules.yaml` names a tool, update it (but not the `action` words in saved plan
 files — `cluster_add_host`, `storage_rescan` and the like are plan actions, not tool names, and keep their spelling) — though deny
@@ -151,6 +175,7 @@ operator an auditor can sign off on, that's what this family is for — see
 | **Cluster** | create, delete, HA/DRS config, add/remove hosts | 6 |
 | **Datastore** | browse files, scan for images | 2 |
 | **Network** | dvSwitch portgroup list/create, host VMkernel list/add/remove, DF-bit MTU-path ping | 6 |
+| **Access** | which account is in use, and whether it holds each tool's privileges (`get_access_info`, CLI `access-info`) | 1 |
 
 ### CLI vs MCP: Which Mode to Use
 
@@ -435,6 +460,9 @@ Run `vmware-aiops plan list` to see failed plan status. Ask user if they want to
 1. Verify target is reachable: `vmware-aiops doctor`
 2. For self-signed certs: set `verify_ssl: false` in config.yaml (lab environments only)
 
+### `doctor` reports "no vSphere role", or every command fails with "session is not authenticated"
+The account logs in but has no vSphere role, so vCenter gives it no session (AIops#47). Assign it a role (Read-Only or higher) on the vCenter root folder: Administration > Access Control > Global Permissions. Changing the password will not help. `vmware-aiops doctor` reports this case by name, and `attention` counts such a target as unread (overall at least WARN).
+
 ---
 
 ## Supported AI Platforms
@@ -956,6 +984,7 @@ User → Aider CLI → Ollama (localhost:11434) → Qwen / DeepSeek local model
 # Diagnostics
 vmware-aiops doctor                   # Check environment, config, connectivity
 vmware-aiops doctor --skip-auth       # Skip vSphere auth check (faster)
+vmware-aiops access-info [--tool <mcp-tool>] [--target <name>]  # Account in use + privileges per tool
 
 # MCP Config Generator
 vmware-aiops mcp-config generate --agent goose        # Generate config for Goose
@@ -1122,6 +1151,70 @@ Built on **pyVmomi** (vSphere Web Services API / SOAP).
 
 If you encounter any errors or issues, please send the error message, logs, or screenshots to **zhouwei008@gmail.com**. Contributions are welcome — feel free to join us in maintaining and improving this project!
 
+<!-- usage: remote-and-exposure -->
+## Remote access (HTTPS) and limiting tools
+
+By default `vmware-aiops mcp` speaks stdio to one local client and offers every tool. Two options change that
+(vmware-policy ≥ 1.21.0).
+
+**Serve over HTTPS** so clients on other machines can connect. Every caller needs a bearer token:
+
+```bash
+vmware-audit token create alice          # prints the token once; give it to alice
+vmware-audit token list                  # names only
+vmware-audit token revoke alice          # refused from its next request, no restart
+vmware-aiops mcp --transport https --host 0.0.0.0 --port 8443 \
+    --cert /etc/vmware-mcp/server.pem --key /etc/vmware-mcp/server-key.pem \
+    --public-name mcp.example.com
+```
+
+Connect a client (Claude Code shown; any MCP client that supports streamable HTTP and custom headers works):
+
+```bash
+claude mcp add --transport http vmware-aiops https://mcp.example.com:8443/mcp \
+    --header "Authorization: Bearer $VMWARE_MCP_TOKEN"
+```
+
+```json
+{
+  "mcpServers": {
+    "vmware-aiops": {
+      "type": "http",
+      "url": "https://mcp.example.com:8443/mcp",
+      "headers": { "Authorization": "Bearer ${VMWARE_MCP_TOKEN}" }
+    }
+  }
+}
+```
+
+- The server will not start without a token, refuses Host/Origin values outside `--public-name`, and checks
+  before it binds that unauthenticated requests get 401. Use a certificate your clients trust for those names.
+- Behind a TLS-terminating reverse proxy on the same machine use `--transport http --host 127.0.0.1
+  --public-name mcp.example.com` and pass the `Authorization` header through.
+- Behind a load balancer or gateway on another machine, keep `--transport https` (a self-signed certificate is
+  fine), list in `--public-name` the host name the balancer sends as `Host`, and have it forward `Authorization`.
+  Its health probe can use `GET /healthz`, which needs no token and returns only `{"status": "ok"}`
+  (vmware-policy ≥ 1.23.0).
+- Send `traceparent` or `X-Request-ID` with each request to have it stored on the audit row;
+  `vmware-audit log --correlation-id ID` then finds the calls behind one platform request.
+- The audit log records each caller as `token:<name>`. Calls run side by side, with up to `VMWARE_MCP_POOL_SIZE`
+  (default 2) sessions per target; each session is a login on the target, and a call waits at most 300 s for one.
+- **Everyone who can reach the endpoint acts with this server's account.** Tokens identify callers; they grant
+  nothing on the platform. Run one endpoint per privilege level.
+
+**Offer only read tools, plus the writes you choose:**
+
+```bash
+vmware-aiops mcp --expose read --allow-write acknowledge_vcenter_alarm
+# or: VMWARE_AIOPS_MCP_EXPOSE=read VMWARE_AIOPS_MCP_ALLOW_WRITE=acknowledge_vcenter_alarm vmware-aiops mcp
+```
+
+Tools not offered do not appear in the client's tool list. A bad value or an unknown write tool stops the server
+(exit 2). This limits what clients are offered; it is not authorization, so the account itself should be
+least-privilege.
+
+Details: `skills/vmware-aiops/references/setup-guide.md` ("Serving MCP over HTTPS", "Limiting which tools are offered").
+
 ## License
 
 MIT

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/README-CN.md

@@ -7,7 +7,7 @@
 
 [English](README.md) | 中文
 
-AI 驱动的 VMware vCenter/ESXi VM 生命周期管理与部署工具 — 60 个工具。
+AI 驱动的 VMware vCenter/ESXi VM 生命周期管理与部署工具 — 61 个工具。
 
 > **配套技能**负责其他领域：
 >
@@ -26,7 +26,7 @@ AI 驱动的 VMware vCenter/ESXi VM 生命周期管理与部署工具 — 60 个
 
 ## 升级到 2.0
 
-2.0 把 60 个 MCP 工具中的 38 个改成动词在前（例如 `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`），完整的新旧名对照表见
+2.0 把 MCP 工具名改成动词在前（共改名 38 处）（例如 `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`），完整的新旧名对照表见
 [RELEASE_NOTES.md](RELEASE_NOTES.md#v200--mcp-tools-renamed-verb-first)。其他都不变：工具、参数、安全确认门和 CLI 命令都一样。
 如果 agent 提示词、脚本或 `~/.vmware/rules.yaml` 里写了工具名，请改成新名（但已保存计划文件里的 `action` 动作词不要改——`cluster_add_host`、`storage_rescan` 这类是计划动作，不是工具名，保持原样）——不过用旧名写的 deny 规则在
 vmware-policy ≥ 1.18 下仍然生效（`vmware-audit policy` 会列出因改名而多匹配的规则），vmware-pilot ≥ 1.13 也会自动转换已保存工作流里的旧名。
@@ -118,12 +118,13 @@ pip install --no-index --find-links dist vmware-aiops
 | **集群** | 创建、删除、HA/DRS 配置、添加/移除主机 | 6 |
 | **数据存储** | 浏览文件、扫描镜像 | 2 |
 | **网络** | dvSwitch 端口组 列出/创建、主机 VMkernel 列出/添加/移除、DF 位 MTU 路径 ping | 6 |
+| **权限** | 当前使用哪个账号，以及它是否具备每个工具所需的权限（`get_access_info`，CLI `access-info`） | 1 |
 
 ### CLI vs MCP：如何选择
 
 | 场景 | 推荐模式 | 原因 |
 |------|:-------:|------|
-| **本地/小模型**（Ollama、Qwen <32B） | **CLI** | 上下文占用 ~2K tokens vs MCP ~10K；小模型难以处理 60 个工具的 schema |
+| **本地/小模型**（Ollama、Qwen <32B） | **CLI** | 上下文占用 ~2K tokens vs MCP ~10K；小模型难以处理 61 个工具的 schema |
 | **Token 敏感场景** | **CLI** | SKILL.md + Bash = 最小开销 |
 | **云端大模型**（Claude、GPT-4o） | 均可 | MCP 提供结构化 JSON 输入输出 |
 | **自动化管道 / Agent 链式调用** | **MCP** | 类型安全参数，结构化输出，无需 Shell 解析 |
@@ -378,6 +379,9 @@ vSphere 中 VM 名称区分大小写。请使用 `vmware-monitor inventory vms`
 1. 验证目标可达：`vmware-aiops doctor`
 2. 自签名证书：在 config.yaml 中设置 `verify_ssl: false`（仅限实验环境）
 
+### `doctor` 报 "no vSphere role"，或所有命令都报 "session is not authenticated"
+账号能登录，但没有任何 vSphere 角色，所以 vCenter 不给它会话（AIops#47）。在 vCenter 根文件夹上给它分配角色（Read-Only 或更高）：Administration > Access Control > Global Permissions。改密码没有用。`vmware-aiops doctor` 会直接报出这种情况，`attention` 也会把这样的目标算作未读取（总体状态至少为 WARN）。
+
 ---
 
 ## 支持的 AI 平台
@@ -665,6 +669,7 @@ aider --conventions skills/vmware-aiops/SKILL.md --model ollama/qwen2.5-coder:32
 # 环境诊断
 vmware-aiops doctor                   # 检查环境、配置、连通性
 vmware-aiops doctor --skip-auth       # 跳过 vSphere 认证检查（更快）
+vmware-aiops access-info [--tool <mcp-tool>] [--target <name>]  # 当前账号 + 每个工具的权限
 
 # MCP 配置生成
 vmware-aiops mcp-config generate --agent goose        # 生成 Goose 配置
@@ -787,6 +792,68 @@ VMware-AIops/
 
 If you encounter any errors or issues, please send the error message, logs, or screenshots to **zhouwei008@gmail.com**. Contributions are welcome — feel free to join us in maintaining and improving this project!
 
+<!-- usage: remote-and-exposure -->
+## 远程访问（HTTPS）与限制工具
+
+默认情况下 `vmware-aiops mcp` 通过 stdio 服务一个本地客户端，并提供全部工具。以下两个选项可以改变这一点
+（需 vmware-policy ≥ 1.21.0）。
+
+**通过 HTTPS 提供服务**，让其他机器上的客户端连接。每个调用者都需要一个 bearer token：
+
+```bash
+vmware-audit token create alice          # 只显示一次，交给 alice
+vmware-audit token list                  # 只列名字
+vmware-audit token revoke alice          # 下一个请求起即拒绝，无需重启
+vmware-aiops mcp --transport https --host 0.0.0.0 --port 8443 \
+    --cert /etc/vmware-mcp/server.pem --key /etc/vmware-mcp/server-key.pem \
+    --public-name mcp.example.com
+```
+
+连接客户端（以 Claude Code 为例；任何支持 streamable HTTP 和自定义请求头的 MCP 客户端都可以）：
+
+```bash
+claude mcp add --transport http vmware-aiops https://mcp.example.com:8443/mcp \
+    --header "Authorization: Bearer $VMWARE_MCP_TOKEN"
+```
+
+```json
+{
+  "mcpServers": {
+    "vmware-aiops": {
+      "type": "http",
+      "url": "https://mcp.example.com:8443/mcp",
+      "headers": { "Authorization": "Bearer ${VMWARE_MCP_TOKEN}" }
+    }
+  }
+}
+```
+
+- 没有 token 时服务不会启动；`--public-name` 之外的 Host/Origin 一律拒绝；绑定端口前会自检，确认未认证请求得到 401。
+  证书要用客户端信任、且覆盖这些名字的证书。
+- 在同一台机器上由反向代理终结 TLS 时，用 `--transport http --host 127.0.0.1 --public-name mcp.example.com`，
+  并让代理透传 `Authorization` 头。
+- 负载均衡或网关在另一台机器上时，保持 `--transport https`（自签证书也可以），在 `--public-name` 里写上负载均衡
+  转发时带的 `Host` 名，并让它透传 `Authorization`。健康检查可以用 `GET /healthz`：不需要 token，只返回
+  `{"status": "ok"}`（需 vmware-policy ≥ 1.23.0）。
+- 每个请求带上 `traceparent` 或 `X-Request-ID`，它会记进审计记录；用 `vmware-audit log --correlation-id ID`
+  就能查到平台上某一次请求对应的调用。
+- 审计日志把每个调用者记为 `token:<名字>`。调用并行执行，每个 target 最多 `VMWARE_MCP_POOL_SIZE`（默认 2）
+  个会话；每个会话都是在该 target 上的一次登录，一个调用最多等待 300 秒拿到会话。
+- **能连到这个端点的人，都以该 server 配置的账号操作。** token 只用来识别调用者，不在平台上授予任何权限。
+  每个权限级别单独起一个端点。
+
+**只提供读工具，加上你选定的写工具：**
+
+```bash
+vmware-aiops mcp --expose read --allow-write acknowledge_vcenter_alarm
+# 或：VMWARE_AIOPS_MCP_EXPOSE=read VMWARE_AIOPS_MCP_ALLOW_WRITE=acknowledge_vcenter_alarm vmware-aiops mcp
+```
+
+未提供的工具不会出现在客户端的工具列表里。取值错误或写工具名不存在时服务直接退出（exit 2）。
+这只限制提供给客户端的工具，不是授权；账号本身仍应遵循最小权限。
+
+详见 `skills/vmware-aiops/references/setup-guide.md`（"Serving MCP over HTTPS"、"Limiting which tools are offered"）。
+
 ## 许可证
 
 MIT

vmware_aiops-2.2.0/PKG-INFO → vmware_aiops-2.3.1/README.md

@@ -1,27 +1,3 @@
-Metadata-Version: 2.5
-Name: vmware-aiops
-Version: 2.2.0
-Summary: VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool
-Project-URL: Homepage, https://github.com/vmware-skills/VMware-AIops
-Project-URL: Repository, https://github.com/vmware-skills/VMware-AIops
-Project-URL: Issues, https://github.com/vmware-skills/VMware-AIops/issues
-Project-URL: Changelog, https://github.com/vmware-skills/VMware-AIops/blob/main/RELEASE_NOTES.md
-Author-email: Wei Zhou <wei-wz.zhou@broadcom.com>
-License-Expression: MIT
-License-File: LICENSE
-Requires-Python: >=3.10
-Requires-Dist: apscheduler<4.0,>=3.10
-Requires-Dist: httpx<1.0,>=0.27
-Requires-Dist: mcp[cli]<2.0,>=1.28
-Requires-Dist: pyaml<27.0,>=24.0
-Requires-Dist: python-dotenv<2.0,>=1.0
-Requires-Dist: pyvmomi<10.0,>=8.0.3.0
-Requires-Dist: rich<16.0,>=13.0
-Requires-Dist: typer<1.0,>=0.12
-Requires-Dist: vmware-monitor<3.0,>=2.0.0
-Requires-Dist: vmware-policy<2.0,>=1.21.0
-Description-Content-Type: text/markdown
-
 <!-- mcp-name: io.github.vmware-skills/vmware-aiops -->
 # VMware AIops
 
@@ -31,7 +7,7 @@ Description-Content-Type: text/markdown
 
 English | [中文](README-CN.md)
 
-AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 60 tools.
+AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 61 tools.
 
 > **Companion skills** handle everything else:
 >
@@ -50,7 +26,7 @@ AI-powered VMware vCenter/ESXi VM lifecycle and deployment tool — 60 tools.
 
 ## Upgrading to 2.0
 
-2.0 renames 38 of its 60 MCP tools so every name starts with a verb (e.g. `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`). The full old → new table is in
+2.0 renames 38 of its MCP tools so every name starts with a verb (e.g. `cluster_add_host` → `add_cluster_host`, `cluster_configure` → `configure_cluster`, `cluster_create` → `create_cluster`). The full old → new table is in
 [RELEASE_NOTES.md](RELEASE_NOTES.md#v200--mcp-tools-renamed-verb-first). Nothing else changes: same tools, parameters,
 safety gates and CLI commands. If an agent prompt, script or `~/.vmware/rules.yaml` names a tool, update it (but not the `action` words in saved plan
 files — `cluster_add_host`, `storage_rescan` and the like are plan actions, not tool names, and keep their spelling) — though deny
@@ -175,6 +151,7 @@ operator an auditor can sign off on, that's what this family is for — see
 | **Cluster** | create, delete, HA/DRS config, add/remove hosts | 6 |
 | **Datastore** | browse files, scan for images | 2 |
 | **Network** | dvSwitch portgroup list/create, host VMkernel list/add/remove, DF-bit MTU-path ping | 6 |
+| **Access** | which account is in use, and whether it holds each tool's privileges (`get_access_info`, CLI `access-info`) | 1 |
 
 ### CLI vs MCP: Which Mode to Use
 
@@ -459,6 +436,9 @@ Run `vmware-aiops plan list` to see failed plan status. Ask user if they want to
 1. Verify target is reachable: `vmware-aiops doctor`
 2. For self-signed certs: set `verify_ssl: false` in config.yaml (lab environments only)
 
+### `doctor` reports "no vSphere role", or every command fails with "session is not authenticated"
+The account logs in but has no vSphere role, so vCenter gives it no session (AIops#47). Assign it a role (Read-Only or higher) on the vCenter root folder: Administration > Access Control > Global Permissions. Changing the password will not help. `vmware-aiops doctor` reports this case by name, and `attention` counts such a target as unread (overall at least WARN).
+
 ---
 
 ## Supported AI Platforms
@@ -980,6 +960,7 @@ User → Aider CLI → Ollama (localhost:11434) → Qwen / DeepSeek local model
 # Diagnostics
 vmware-aiops doctor                   # Check environment, config, connectivity
 vmware-aiops doctor --skip-auth       # Skip vSphere auth check (faster)
+vmware-aiops access-info [--tool <mcp-tool>] [--target <name>]  # Account in use + privileges per tool
 
 # MCP Config Generator
 vmware-aiops mcp-config generate --agent goose        # Generate config for Goose
@@ -1146,6 +1127,70 @@ Built on **pyVmomi** (vSphere Web Services API / SOAP).
 
 If you encounter any errors or issues, please send the error message, logs, or screenshots to **zhouwei008@gmail.com**. Contributions are welcome — feel free to join us in maintaining and improving this project!
 
+<!-- usage: remote-and-exposure -->
+## Remote access (HTTPS) and limiting tools
+
+By default `vmware-aiops mcp` speaks stdio to one local client and offers every tool. Two options change that
+(vmware-policy ≥ 1.21.0).
+
+**Serve over HTTPS** so clients on other machines can connect. Every caller needs a bearer token:
+
+```bash
+vmware-audit token create alice          # prints the token once; give it to alice
+vmware-audit token list                  # names only
+vmware-audit token revoke alice          # refused from its next request, no restart
+vmware-aiops mcp --transport https --host 0.0.0.0 --port 8443 \
+    --cert /etc/vmware-mcp/server.pem --key /etc/vmware-mcp/server-key.pem \
+    --public-name mcp.example.com
+```
+
+Connect a client (Claude Code shown; any MCP client that supports streamable HTTP and custom headers works):
+
+```bash
+claude mcp add --transport http vmware-aiops https://mcp.example.com:8443/mcp \
+    --header "Authorization: Bearer $VMWARE_MCP_TOKEN"
+```
+
+```json
+{
+  "mcpServers": {
+    "vmware-aiops": {
+      "type": "http",
+      "url": "https://mcp.example.com:8443/mcp",
+      "headers": { "Authorization": "Bearer ${VMWARE_MCP_TOKEN}" }
+    }
+  }
+}
+```
+
+- The server will not start without a token, refuses Host/Origin values outside `--public-name`, and checks
+  before it binds that unauthenticated requests get 401. Use a certificate your clients trust for those names.
+- Behind a TLS-terminating reverse proxy on the same machine use `--transport http --host 127.0.0.1
+  --public-name mcp.example.com` and pass the `Authorization` header through.
+- Behind a load balancer or gateway on another machine, keep `--transport https` (a self-signed certificate is
+  fine), list in `--public-name` the host name the balancer sends as `Host`, and have it forward `Authorization`.
+  Its health probe can use `GET /healthz`, which needs no token and returns only `{"status": "ok"}`
+  (vmware-policy ≥ 1.23.0).
+- Send `traceparent` or `X-Request-ID` with each request to have it stored on the audit row;
+  `vmware-audit log --correlation-id ID` then finds the calls behind one platform request.
+- The audit log records each caller as `token:<name>`. Calls run side by side, with up to `VMWARE_MCP_POOL_SIZE`
+  (default 2) sessions per target; each session is a login on the target, and a call waits at most 300 s for one.
+- **Everyone who can reach the endpoint acts with this server's account.** Tokens identify callers; they grant
+  nothing on the platform. Run one endpoint per privilege level.
+
+**Offer only read tools, plus the writes you choose:**
+
+```bash
+vmware-aiops mcp --expose read --allow-write acknowledge_vcenter_alarm
+# or: VMWARE_AIOPS_MCP_EXPOSE=read VMWARE_AIOPS_MCP_ALLOW_WRITE=acknowledge_vcenter_alarm vmware-aiops mcp
+```
+
+Tools not offered do not appear in the client's tool list. A bad value or an unknown write tool stops the server
+(exit 2). This limits what clients are offered; it is not authorization, so the account itself should be
+least-privilege.
+
+Details: `skills/vmware-aiops/references/setup-guide.md` ("Serving MCP over HTTPS", "Limiting which tools are offered").
+
 ## License
 
 MIT

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/RELEASE_NOTES.md

@@ -1,3 +1,51 @@
+## v2.3.1 — an account with no vSphere role is named, not passed (AIops#47)
+
+Needs vmware-policy 1.23.0, and the vmware-monitor release with the same fix for the `attention` part.
+
+* **A login with no vSphere role fails at connect time with the reason.** vCenter accepts the login but shows no
+  session for it, and every call then fails with `NotAuthenticated`. The connection is now closed at once and
+  `doctor`, the CLI and MCP tools say the account most likely has no vSphere role and to assign one (Read-Only or
+  higher). Reported on vCenter 8.0.3; not yet reproduced on our own hardware.
+* Refused only when two signals agree: no session, **and** vCenter refuses a view of the root folder
+  (`NotAuthenticated` / `NoPermission`). An account scoped to one folder can also show no session, and still
+  connects; anything the check cannot read lets the login through.
+* **`NotAuthenticated` later on names both causes**: the session expired (retry), or the account's role was
+  removed. It no longer says "verify connectivity and credentials".
+* **Every CLI command prints one line for a vSphere fault.** `summary` (and any other command) printed a raw
+  traceback for faults other than a failed login; they now print the fault's message and what to check.
+* **`attention` never reports OK for targets it could not read** (computed by vmware-monitor): any unread target
+  makes the overall status at least WARN, none read makes it CRITICAL, and the console and HTML say how many were
+  not read. A role-less target is listed as unreachable with reason `NoVSphereRoleError`.
+
+## Unreleased — OVA deploy honours `network_name`
+
+* **`deploy_vm_from_ova` / `deploy ova --network` now attach the NICs to the network you name.** The import spec
+  carried no network mapping, so the argument had no effect and each NIC landed on whatever network the OVF
+  descriptor named. Every network the OVF declares is now mapped to the named port group (standard or distributed).
+  A name that matches no network, or more than one (a standard and a distributed port group can share a name), is
+  refused before anything is imported, with the available names in the error. An OVF descriptor the server cannot
+  parse is refused the same way. Found in the 2026-10-16 pre-release review.
+
+## v2.3.0 — calls on one target run side by side; `get_access_info`
+
+Needs vmware-policy 1.22.0.
+
+* **Calls no longer queue behind each other on a shared server.** Served over `--transport https`/`http`,
+  calls run side by side with up to `VMWARE_MCP_POOL_SIZE` (default 2) sessions per target; each call holds its
+  own session for its whole run, so two calls never share one. Each session is a login on the target. A call
+  that finds every session busy waits at most 300 s, then fails with a message saying so. stdio and the CLI
+  keep one session per target, as before.
+* **Side-by-side calls no longer race on local state.** Two TTL changes at once could drop each other's entry
+  (and a reader catching the file mid-write saw no entries at all); the TTL store and the image registry are now
+  written atomically and TTL updates are serialized. One plan can no longer be applied or rolled back by two
+  calls at once: the second is refused with a message, and nothing runs twice.
+* **The daemon's scan and TTL check each use their own session.** They run on APScheduler's thread pool and
+  could overlap on one pyVmomi session.
+* **New tool `get_access_info`** (CLI `vmware-aiops access-info [--tool X] [--target T]`): which account the
+  server uses on a target, and whether it holds the privileges each tool needs, e.g. `--tool clone_vm`. It asks
+  vCenter about its own session (System.View is enough). Checked on the root folder: `not_granted_at_root` can
+  still be granted on a cluster, folder or VM, and `undetermined` is never read as granted. 61 tools (was 60).
+
 ## v2.2.0 — serve MCP over HTTPS
 
 `vmware-aiops mcp` can now serve the network as well as stdio (HLD §16, via vmware-policy 1.21.0):
@@ -8,6 +56,15 @@ vmware-aiops mcp --transport https --host 0.0.0.0 --port 8443 \
     --cert server.pem --key server-key.pem --public-name mcp.example.com
 ```
 
+Connect a client and manage callers (Claude Code shown; any MCP client with streamable HTTP and custom headers works):
+
+```bash
+claude mcp add --transport http vmware-aiops https://mcp.example.com:8443/mcp \
+    --header "Authorization: Bearer $VMWARE_MCP_TOKEN"
+vmware-audit token list                  # names only
+vmware-audit token revoke alice          # refused from its next request, no restart
+```
+
 * Every request needs `Authorization: Bearer <token>`; the server will not start without a token, refuses Host or
   Origin values outside `--public-name`, and checks itself (unauthenticated requests must get 401) before it
   binds. `--transport http` binds loopback only, for a TLS-terminating reverse proxy.

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "vmware-aiops",
   "name": "VMware AIops",
-  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
+  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "skills": [
     "./skills"
   ],
@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-aiops==2.2.0",
+        "vmware-aiops==2.3.1",
         "vmware-aiops-mcp"
       ]
     }

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zw008/vmware-aiops",
-  "version": "2.2.0",
-  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
+  "version": "2.3.1",
+  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "private": true,
   "license": "MIT",
   "homepage": "https://github.com/vmware-skills/VMware-AIops",

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-aiops"
-version = "2.2.0"
+version = "2.3.1"
 description = "VMware vCenter/ESXi AI-powered VM lifecycle and deployment tool"
 readme = "README.md"
 license = "MIT"
@@ -19,11 +19,11 @@ dependencies = [
     "httpx>=0.27,<1.0",
     "python-dotenv>=1.0,<2.0",
     "mcp[cli]>=1.28,<2.0",
-    "vmware-policy>=1.21.0,<2.0",
+    "vmware-policy>=1.23.0,<2.0",
     # Read-only cluster-health triage (summary + HTML snapshot) is owned by
     # vmware-monitor; AIops delegates to it so a conversation with the AIops
     # entry point can produce the same report without duplicating the code.
-    "vmware-monitor>=2.0.0,<3.0",
+    "vmware-monitor>=2.3.1,<3.0",  # attention status floor + role-less login (AIops#47)
 ]
 
 

{vmware_aiops-2.2.0 → vmware_aiops-2.3.1}/server.json

@@ -2,17 +2,17 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.vmware-skills/vmware-aiops",
   "title": "VMware AIops",
-  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 60 MCP tools.",
+  "description": "AI-powered VMware vCenter/ESXi VM lifecycle and deployment with 61 MCP tools.",
   "repository": {
     "url": "https://github.com/vmware-skills/VMware-AIops",
     "source": "github"
   },
-  "version": "2.2.0",
+  "version": "2.3.1",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-aiops",
-      "version": "2.2.0",
+      "version": "2.3.1",
       "runtimeHint": "uvx",
       "packageArguments": [
         {