vmware-avi 2.0.0__tar.gz → 2.2.0__tar.gz

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "vmware-avi",
   "displayName": "VMware AVI",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "description": "VMware AVI (NSX ALB) load balancer plus AKO Kubernetes ops — 28 MCP tools.",
   "author": {
     "name": "Wei Zhou",

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/.mcp.json

@@ -5,7 +5,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-avi==2.0.0",
+        "vmware-avi==2.2.0",
         "vmware-avi-mcp"
       ]
     }

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vmware-avi
-Version: 2.0.0
+Version: 2.2.0
 Summary: AVI (NSX Advanced Load Balancer) management and AKO Kubernetes operations tool
 Project-URL: Homepage, https://github.com/vmware-skills/VMware-AVI
 Project-URL: Repository, https://github.com/vmware-skills/VMware-AVI
@@ -12,12 +12,12 @@ Requires-Python: >=3.10
 Requires-Dist: avisdk<31.0,>=22.1
 Requires-Dist: httpx<1.0,>=0.27
 Requires-Dist: kubernetes<33.0,>=28.0
-Requires-Dist: mcp[cli]<2.0,>=1.10
+Requires-Dist: mcp[cli]<2.0,>=1.28
 Requires-Dist: pyaml<27.0,>=24.0
 Requires-Dist: python-dotenv<2.0,>=1.0
 Requires-Dist: rich<15.0,>=13.0
 Requires-Dist: typer<1.0,>=0.12
-Requires-Dist: vmware-policy<2.0,>=1.18.0
+Requires-Dist: vmware-policy<2.0,>=1.21.0
 Description-Content-Type: text/markdown
 
 <!-- mcp-name: io.github.vmware-skills/vmware-avi -->

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/RELEASE_NOTES.md

@@ -1,3 +1,39 @@
+## v2.2.0 — serve MCP over HTTPS
+
+`vmware-avi mcp` can now serve the network as well as stdio (HLD §16, via vmware-policy 1.21.0):
+
+```bash
+vmware-audit token create alice          # once per caller; shown once
+vmware-avi mcp --transport https --host 0.0.0.0 --port 8443 \
+    --cert server.pem --key server-key.pem --public-name mcp.example.com
+```
+
+* Every request needs `Authorization: Bearer <token>`; the server will not start without a token, refuses Host or
+  Origin values outside `--public-name`, and checks itself (unauthenticated requests must get 401) before it
+  binds. `--transport http` binds loopback only, for a TLS-terminating reverse proxy.
+* Audit rows record the caller as `token:<name>` and the surface as `mcp-https`. Calls naming different targets
+  run in parallel; calls naming no target run one at a time.
+* stdio remains the default; the `vmware-avi-mcp` console script and `python -m` are unchanged.
+* Everyone who can reach the endpoint acts with this server's account; run one endpoint per privilege level.
+* Requires `vmware-policy>=1.21.0` and `mcp>=1.28`.
+
+## v2.1.0 — offer only read tools, plus chosen write tools
+
+`vmware-avi mcp` can now offer a subset of this server's tools (HLD §17 D-16, via vmware-policy 1.20.0):
+
+```bash
+vmware-avi mcp --expose read --allow-write disable_lb_pool_member
+```
+
+* `--expose read` (or `VMWARE_AVI_MCP_EXPOSE=read`) keeps only tools annotated `readOnlyHint: true`; `--allow-write a,b`
+  (or `VMWARE_AVI_MCP_ALLOW_WRITE`) keeps chosen write tools on top. The default is unchanged: every tool.
+* A bad value, or a name that is not a write tool of this server, stops the server before it serves (exit 2).
+  Flags and environment variables are not mixed; a blank flag counts as not given. Pre-2.0 names are accepted.
+* This limits what clients are offered; it is not authorization. See "Limiting which tools are offered" in
+  `references/setup-guide.md`, which also notes that an agent with a shell can bypass MCP, so the account itself
+  must be least-privilege.
+* Requires `vmware-policy>=1.20.0`.
+
 ## v2.0.0 — MCP tools renamed verb-first
 
 Every MCP tool in the VMware skill family now follows one naming convention: the verb comes first

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/openclaw.plugin.json

@@ -11,7 +11,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "vmware-avi==2.0.0",
+        "vmware-avi==2.2.0",
         "vmware-avi-mcp"
       ]
     }

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zw008/vmware-avi",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "description": "VMware AVI (NSX ALB) load balancer plus AKO Kubernetes ops — 28 MCP tools.",
   "private": true,
   "license": "MIT",

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vmware-avi"
-version = "2.0.0"
+version = "2.2.0"
 description = "AVI (NSX Advanced Load Balancer) management and AKO Kubernetes operations tool"
 readme = "README.md"
 license = "MIT"
@@ -18,8 +18,8 @@ dependencies = [
     "rich>=13.0,<15.0",
     "httpx>=0.27,<1.0",
     "python-dotenv>=1.0,<2.0",
-    "mcp[cli]>=1.10,<2.0",
-    "vmware-policy>=1.18.0,<2.0",
+    "mcp[cli]>=1.28,<2.0",
+    "vmware-policy>=1.21.0,<2.0",
 ]
 
 

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/vmware-skills/VMware-AVI",
     "source": "github"
   },
-  "version": "2.0.0",
+  "version": "2.2.0",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "vmware-avi",
-      "version": "2.0.0",
+      "version": "2.2.0",
       "runtimeHint": "uvx",
       "packageArguments": [
         {

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/skills/vmware-avi/SKILL.md

@@ -53,7 +53,7 @@ AVI (NSX Advanced Load Balancer) application delivery and AKO Kubernetes operati
 ## Quick Install
 
 ```bash
-uv tool install vmware-avi==2.0.0
+uv tool install vmware-avi==2.2.0
 vmware-avi doctor            # checks Controller connectivity + kubeconfig + avisdk
 ```
 
@@ -235,7 +235,7 @@ Force resync triggers AKO to re-reconcile all K8s objects. If the drift persists
 ## Setup
 
 ```bash
-uv tool install vmware-avi==2.0.0
+uv tool install vmware-avi==2.2.0
 mkdir -p ~/.vmware-avi
 vmware-avi init              # generates config.yaml and .env templates
 chmod 600 ~/.vmware-avi/.env

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/skills/vmware-avi/references/capabilities.md

@@ -37,7 +37,7 @@ All 28 MCP tools exposed by `vmware-avi mcp` (v1.5.15+; legacy entry point: `vmw
 | `vmware-avi mcp` (CLI subcommand, stdio) | ✅ Full | ✅ v1.5.15+ default — no PyPI re-resolve, works behind corporate TLS proxies. |
 | `vmware-avi-mcp` (legacy console script, stdio) | ✅ Full | Kept for backward compatibility with pre-1.5.15 configs. |
 | `python -m vmware_avi.mcp_server` (stdio, via `__main__.py`) | ✅ Full | Docker image `CMD` only — not for end-user CLI install, and no longer used by `smithery.yaml` (which now calls the `vmware-avi mcp` entry point). Added v1.5.22. |
-| `uvx --from vmware-avi==2.0.0 vmware-avi-mcp` | ⚠ Fallback | Re-resolves PyPI on each launch; fails behind corporate TLS proxies (踩坑 #25). Use `UV_NATIVE_TLS=true` workaround. |
+| `uvx --from vmware-avi==2.2.0 vmware-avi-mcp` | ⚠ Fallback | Re-resolves PyPI on each launch; fails behind corporate TLS proxies (踩坑 #25). Use `UV_NATIVE_TLS=true` workaround. |
 
 ## Automation Level Reference
 

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/skills/vmware-avi/references/setup-guide.md

@@ -21,7 +21,7 @@ Complete installation, configuration, and AI platform integration guide for the
 ### Standard Install (recommended)
 
 ```bash
-uv tool install vmware-avi==2.0.0
+uv tool install vmware-avi==2.2.0
 ```
 
 This installs the CLI (`vmware-avi`, with `vmware-avi mcp` subcommand for the MCP server in v1.5.15+), the legacy `vmware-avi-mcp` entry point (for backward compatibility), and all Python dependencies in an isolated environment.
@@ -29,7 +29,7 @@ This installs the CLI (`vmware-avi`, with `vmware-avi mcp` subcommand for the MC
 ### Development Install
 
 ```bash
-git clone --branch v2.0.0 https://github.com/vmware-skills/VMware-AVI.git
+git clone --branch v2.2.0 https://github.com/vmware-skills/VMware-AVI.git
 cd VMware-AVI
 uv pip install -e ".[dev]"
 ```
@@ -43,7 +43,7 @@ For platforms that prefer containerized MCP servers (e.g., Smithery registry, Ku
 Build and run the MCP server in a container. The image uses `python:3.12-slim` with `uv` for dependency installation and runs `python -m vmware_avi.mcp_server` on stdio (no port exposed — MCP uses stdin/stdout).
 
 ```bash
-git clone --branch v2.0.0 https://github.com/vmware-skills/VMware-AVI.git
+git clone --branch v2.2.0 https://github.com/vmware-skills/VMware-AVI.git
 cd VMware-AVI
 
 # Build
@@ -72,7 +72,7 @@ Users can install via the Smithery UI or CLI without managing Python environment
 
 | Deployment | Best For |
 |------------|----------|
-| `uv tool install vmware-avi==2.0.0` + `vmware-avi mcp` | Local developer workstation, single-user CLI + MCP |
+| `uv tool install vmware-avi==2.2.0` + `vmware-avi mcp` | Local developer workstation, single-user CLI + MCP |
 | Docker image | Self-hosted agents, CI runners, isolated environments, multi-user servers |
 | Smithery | Zero-install agent integration, registry-managed discovery, hosted-MCP workflows |
 
@@ -212,6 +212,33 @@ whitespace are handled correctly).
 > Secrets Manager, or a Kubernetes Secret) into the `*_PASSWORD` environment
 > variable at process start. The code reads the env var either way.
 
+## Limiting which tools are offered
+
+By default the MCP server offers every tool. To offer only read tools, start it with `--expose read`, or set
+`VMWARE_AVI_MCP_EXPOSE=read` in the MCP client's `env` block (useful when the client launches `vmware-avi mcp` itself). To offer
+chosen write tools as well, add `--allow-write` with a comma-separated list (or `VMWARE_AVI_MCP_ALLOW_WRITE`):
+
+```bash
+vmware-avi mcp --expose read --allow-write disable_lb_pool_member
+```
+
+- A read tool is one annotated `readOnlyHint: true`; every other tool counts as a write.
+- An unknown setting, or a name that is not a write tool of this server, stops the server before it serves (exit
+  code 2), so it never offers more than you asked for. Pre-2.0 tool names are accepted.
+- With `--expose read`, the server prints one line to stderr saying what it exposes.
+- Flags and environment variables are not mixed: if either flag is given, both environment variables are
+  ignored, so a leftover `_ALLOW_WRITE` in the shell cannot widen `--expose read`. A blank flag value counts as
+  not given.
+- A tool that runs other steps (a plan, workflow or batch tool) carries every write it can execute, including
+  writes this setting hides. Expose such a tool only if you would expose those writes too.
+- A launcher that imports the server object can call
+  `vmware_policy.exposure.restrict_tools(mcp, skill="avi", expose="read", allow_write=[...])` before running it,
+  instead of editing the SDK's tool registry.
+- This limits what clients are offered. It is **not** authorization: whether a call may change anything is decided by
+  the account's permissions, and deny rules in `~/.vmware/rules.yaml` still apply to every exposed tool.
+- An agent that can run shell commands can also reach the platform without MCP (SSH, curl, govc, PowerCLI). So
+  the service account itself must be least-privilege: exposure and deny rules are guardrails, not the boundary.
+
 ## Security
 
 > **Disclaimer**: This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware", "NSX", and "AVI" are trademarks of Broadcom.

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/tests/eval/capability/_family.py

@@ -104,9 +104,10 @@ FAMILY_TOOLS: dict[str, frozenset[str]] = {
         'update_dfw_policy', 'update_dfw_rule',
     }),
     'vmware-pilot': frozenset({
-        'approve', 'cancel_workflow', 'confirm_draft', 'create_workflow', 'design_workflow',
-        'get_skill_catalog', 'get_workflow_status', 'list_workflows', 'plan_workflow',
-        'review_workflow', 'rollback', 'run_workflow', 'update_draft',
+        'approve', 'cancel_workflow', 'confirm_draft', 'create_workflow',
+        'create_workflow_from_template', 'design_workflow', 'get_skill_catalog',
+        'get_workflow_status', 'list_workflows', 'review_workflow', 'rollback',
+        'run_workflow', 'update_draft',
     }),
     'vmware-storage': frozenset({
         'add_iscsi_target', 'browse_datastore', 'enable_iscsi', 'get_iscsi_status',
@@ -118,10 +119,11 @@ FAMILY_TOOLS: dict[str, frozenset[str]] = {
     'vmware-vks': frozenset({
         'check_vks_compatibility', 'create_namespace', 'create_tkc_cluster',
         'delete_namespace', 'delete_tkc_cluster', 'get_harbor_info', 'get_namespace',
-        'get_supervisor_kubeconfig', 'get_supervisor_status', 'get_tkc_available_versions',
-        'get_tkc_cluster', 'get_tkc_kubeconfig', 'list_namespace_storage_usage',
-        'list_namespaces', 'list_supervisor_storage_policies', 'list_tkc_clusters',
-        'list_vm_classes', 'list_vm_service_groups', 'list_vm_service_network_interfaces',
+        'get_supervisor_status', 'get_tkc_available_versions', 'get_tkc_cluster',
+        'issue_supervisor_kubeconfig', 'issue_tkc_kubeconfig',
+        'list_namespace_storage_usage', 'list_namespaces',
+        'list_supervisor_storage_policies', 'list_tkc_clusters', 'list_vm_classes',
+        'list_vm_service_groups', 'list_vm_service_network_interfaces',
         'list_vm_service_snapshots', 'scale_tkc_cluster', 'update_namespace',
         'upgrade_tkc_cluster',
     }),

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/uv.lock

@@ -1423,7 +1423,7 @@ wheels = [
 
 [[package]]
 name = "vmware-avi"
-version = "2.0.0"
+version = "2.2.0"
 source = { editable = "." }
 dependencies = [
     { name = "avisdk" },
@@ -1449,12 +1449,12 @@ requires-dist = [
     { name = "avisdk", specifier = ">=22.1,<31.0" },
     { name = "httpx", specifier = ">=0.27,<1.0" },
     { name = "kubernetes", specifier = ">=28.0,<33.0" },
-    { name = "mcp", extras = ["cli"], specifier = ">=1.10,<2.0" },
+    { name = "mcp", extras = ["cli"], specifier = ">=1.28,<2.0" },
     { name = "pyaml", specifier = ">=24.0,<27.0" },
     { name = "python-dotenv", specifier = ">=1.0,<2.0" },
     { name = "rich", specifier = ">=13.0,<15.0" },
     { name = "typer", specifier = ">=0.12,<1.0" },
-    { name = "vmware-policy", specifier = ">=1.18.0,<2.0" },
+    { name = "vmware-policy", specifier = ">=1.21.0,<2.0" },
 ]
 
 [package.metadata.requires-dev]
@@ -1466,16 +1466,16 @@ dev = [
 
 [[package]]
 name = "vmware-policy"
-version = "1.18.2"
+version = "1.21.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pyyaml" },
     { name = "rich" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/5d/ce/a4f31330f983f411051ab0f42dcbd3c7174670541fa5cdb7faaf22991b24/vmware_policy-1.18.2.tar.gz", hash = "sha256:8e52629bf4a0d355a6841f1d9d5fb4ac1e69bbc7ae22d3843dd7cf3426b30e4c", size = 208412, upload-time = "2026-10-14T06:08:54.124Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/87/5d/4221ea4a344ec33d6b54903682ce8ae2013bb0a2d6137c94ac769690ea8b/vmware_policy-1.21.0.tar.gz", hash = "sha256:f42b794ea69e52e1fa13aff8b5bc07631d82683b1c12872f2f2ec744e3853549", size = 303862, upload-time = "2026-10-15T10:13:33.719Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/6b/cc/0ad37c57ee902819efc1c193b363df9a7c762794e7dff3318577c17743de/vmware_policy-1.18.2-py3-none-any.whl", hash = "sha256:6e7414f6cc7d783f486db858fd99dd7123ddefc0e823a8b319756e17ece03455", size = 80791, upload-time = "2026-10-14T06:08:52.267Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/b4/feb7015ae5f7870e8058ad713050f7fe3ddefa57aa7bdd4a83f2e3b9abb4/vmware_policy-1.21.0-py3-none-any.whl", hash = "sha256:a10c26816be09f9a2823cc58bc4eacb9b5eff8b6df49dfc5b504b3d76cb3b7ec", size = 99818, upload-time = "2026-10-15T10:13:31.67Z" },
 ]
 
 [[package]]

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/vmware_avi/__init__.py

@@ -1,3 +1,3 @@
 """VMware AVI - AVI (NSX ALB) management and AKO Kubernetes operations."""
 
-__version__ = "2.0.0"
+__version__ = "2.2.0"

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/vmware_avi/cli.py

@@ -5,6 +5,7 @@ Typer-based CLI with subcommands for VS, Pool, SSL, SE, Analytics, and AKO opera
 
 from __future__ import annotations
 
+from typing import Optional
 import sys
 
 import typer
@@ -110,13 +111,43 @@ def doctor() -> None:
 
 @app.command("mcp")
 @cli_local("starts the MCP server; its tools audit themselves")
-def mcp_cmd() -> None:
-    """Start the MCP server (stdio transport).
+def mcp_cmd(
+    expose: Optional[str] = typer.Option(
+        None,
+        "--expose",
+        help="Which tools to offer: all (default) or read. Limits what clients see; "
+        "not authorization: the account's permissions still decide.",
+    ),
+    allow_write: Optional[str] = typer.Option(
+        None,
+        "--allow-write",
+        help="With --expose read: comma-separated write tools to offer as well.",
+    ),
+    transport: Optional[str] = typer.Option(
+        None,
+        "--transport",
+        help="stdio (default), https, or http (loopback only, behind a TLS reverse proxy). "
+        "https/http need a token: 'vmware-audit token create NAME'.",
+    ),
+    host: Optional[str] = typer.Option(None, "--host", help="Bind address (default 127.0.0.1)."),
+    port: Optional[int] = typer.Option(None, "--port", help="Port (default 8443)."),
+    cert: Optional[str] = typer.Option(None, "--cert", help="TLS certificate (PEM) for https."),
+    key: Optional[str] = typer.Option(None, "--key", help="TLS private key (PEM) for https."),
+    public_name: Optional[str] = typer.Option(
+        None,
+        "--public-name",
+        help="Host names clients use, comma-separated; other Host/Origin values are refused.",
+    ),
+    token_file: Optional[str] = typer.Option(
+        None, "--token-file", help="Token hash file (default $OPS_HOME/mcp-tokens)."
+    ),
+) -> None:
+    """Start the MCP server (stdio by default; --transport https serves the network).
 
     Single-command entry point for MCP clients:
         vmware-avi mcp
 
-    Equivalent to the legacy `vmware-avi-mcp` console script.
+    Equivalent to the legacy `vmware-avi-mcp` console script for stdio (the console script takes no flags).
     """
     import sys
 
@@ -134,7 +165,10 @@ def mcp_cmd() -> None:
 
     from vmware_avi.mcp_server.server import main as _mcp_main
 
-    _mcp_main()
+    _mcp_main(
+        expose=expose, allow_write=allow_write, transport=transport, host=host, port=port,
+        cert=cert, key=key, public_name=public_name, token_file=token_file,
+    )
 
 
 @app.command()

{vmware_avi-2.0.0 → vmware_avi-2.2.0}/vmware_avi/mcp_server/server.py

@@ -1146,10 +1146,26 @@ from vmware_avi.policy_environment import _cached_config, _environment_for  # no
 # ═══════════════════════════════════════════════════════════════════════════════
 
 
-def main() -> None:
+def main(
+    expose: Optional[str] = None,
+    allow_write: Optional[str] = None,
+    transport: Optional[str] = None,
+    host: Optional[str] = None,
+    port: Optional[int] = None,
+    cert: Optional[str] = None,
+    key: Optional[str] = None,
+    public_name: Optional[str] = None,
+    token_file: Optional[str] = None,
+) -> None:
     """Entry point for vmware-avi-mcp."""
     logging.basicConfig(level=logging.INFO)
-    mcp.run(transport="stdio")
+    from vmware_policy.serve import run_server
+    run_server(
+        mcp,
+        skill="avi",
+        expose=expose, allow_write=allow_write, transport=transport, host=host, port=port,
+        cert=cert, key=key, public_name=public_name, token_file=token_file,
+    )
 
 
 if __name__ == "__main__":