MCP Reference

[MCP REFERENCE]

Drive every hoox CLI command from your agent. The private operator stdio server (@hoox-sh/hoox-mcp) exposes one tool per runnable command, plus catalog, plan, snapshot, and advise — with a confirm gate on every mutation.

@hoox-sh/hoox-mcp • v0.16.0 (private checkout) · CLI @hoox-sh/hoox-cli@0.19.1 · 5 operator tools · 1 per CLI command

CLI ReferenceOperator docsInstallation guide
Quick Start — operator stdio
Client configs — stdio
Cursor / OpenCode (stdio)Run from a Hoox checkout. There is no npx install path — the package is private.
{
  "mcpServers": {
    "hoox": {
      "command": "bun",
      "args": ["packages/mcp/bin/hoox-mcp.js"]
    }
  }
}
Grok (.grok/config.toml)Checkout-relative. Logs on stderr; JSON-RPC on stdout.
[[mcp_servers]]
name = "hoox"
command = "bun"
args = ["packages/mcp/bin/hoox-mcp.js"]
UC

Use Cases

3 operator flows

Real checkout workflows: triage with snapshot, confirm-gated deploy, and secrets on stdin. Each card lists the hoox_* tools and the expected outcome.

[ Use Case ]01

Triage a checkout

Agent lands in a Hoox monorepo and needs a safe read-only picture before touching deploy.

  1. 01Start bun run mcp from the checkout (or load the client config).
  2. 02Call hoox_snapshot (optionally remote=true when Cloudflare® creds exist).
  3. 03Call hoox_advise with the last command or with deploy all to get the next read-only hint.
  4. 04Use hoox_catalog with risk=read to browse safe tools.
hoox_snapshothoox_advisehoox_catalog

Doctor + schema + optional edge health in one bundle; next step suggested without secrets.

[ Use Case ]02

Confirm-gated deploy

Mutating deploy must never run on the first tool call. The confirm token binds argv and cwd.

  1. 01hoox_describe({ command: "deploy all" }) to inspect flags.
  2. 02hoox_plan({ command: "deploy all", args: { auto: true } }) to mint confirm_token.
  3. 03Show the argv to the operator; then hoox_deploy_all({ auto: true, confirm }).
  4. 04hoox_advise({ command: "deploy all" }) and follow only when the suggestion is read-only.
hoox_describehoox_planhoox_deploy_allhoox_advise

Deploy runs once, with an explicit confirm step and redacted result payload.

[ Use Case ]03

Set a secret without argv leaks

secrets set takes secret_value on the tool arguments; the server writes it to CLI stdin.

  1. 01hoox_describe({ command: "secrets set" }) — confirm secret_stdin.
  2. 02First call returns confirm_token (mutation).
  3. 03Second call passes confirm + secret_value; result redacts the secret.
hoox_describehoox_secrets_set

Secret never appears on argv; tool results show [REDACTED].

[]

Checkout stdio server — catalog, plan, snapshot, advise, and the confirm gate around every mutating CLI tool.

01

Operator

5 tools
[ Operator ]01stdioread

hoox_catalog

List every hoox command from the live Commander tree — path, risk, tool name, and summary.

Parameters
groupstringTop-level group such as deploy or monitor
risk"read" | "mutate" | "interactive"Filter by risk class
querystringSubstring matched against path, summary, and tool name
[ Operator ]02stdioread

hoox_describe

Return arguments, flags, risk, and Commander description for one command path or tool name.

Parameters
commandrequiredstringPath such as 'deploy all' or tool name hoox_deploy_all
[ Operator ]03stdioread

hoox_plan

Build argv for one command. Mutating plans return confirm_token and do not run. Read-only plans also stay dry.

Token is HMAC-bound to argv, checkout cwd, and a hash of any stdin payload. Expires in 10 minutes.

Parameters
commandrequiredstringCommand path, for example 'deploy all'
argsobjectFlat tool arguments: positionals, flags, cwd, secret_value
[ Operator ]04stdioread

hoox_snapshot

Read-only ops bundle: doctor, schema validate, schema list, repair check. remote=true adds health, workers, kill-switch, tunnel.

Parameters
remotebooleanAlso run Cloudflare® read commands
cwdstringAbsolute Hoox checkout
timeout_msnumberPer-command timeout (default 40000)
[ Operator ]05stdioread

hoox_advise

Next-step suggestion for a command plus workspace brief (wrangler present, CLI version, worker names, .dev.vars flags). File contents are not read.

Parameters
commandstringCommand that just ran, for example 'deploy all'
cwdstringAbsolute Hoox checkout
Also on this site

HTTP · WebMCP · Protocol

Read-only discovery for agents that hit hoox.sh without a checkout. Prefer bun run mcp when you need to run CLI commands.

Operator Tools5
CLI Commands1∶1
Confirm GateON
bun run mcp → plan → confirm → deploy