Name: FFxF
Author: net.ffxf

Tools observed via MCP handshake

list_regions — Where machines can run. Public, no key needed.
list_plans — Plans with their resources and prices (hourly and monthly, in CAD). Public, no key needed.
list_images — Operating systems and ready-to-use application images. The slug is what create_vm expects. Public, no key needed.
get_account — Credit balance, hourly burn rate and runway, quota and budget caps. Scope: billing.read.
list_vms — The account's machines with their status, addresses and billing. Scope: vms.read.
get_vm — One machine: status, IPv4, IPv6 /64, specs, traffic (Internet only, this traffic month: used_gb, limit_gb, period_ends_at), billing, suspension. Scope: vms.read
get_vm_metrics — CPU, memory, disk and network as measured from outside the machine. Scope: vms.read.
estimate_vm — Runs every check of create_vm and prices it, without creating anything: would_succeed, hourly rate, monthly price, credit required. Call it before create_vm. Sc
create_vm — Orders a machine and spends credit (hourly) or raises an invoice (monthly). Returns the machine and a provisioning action to poll with get_action. Retrying the
power_vm — start, shutdown (clean ACPI), reboot, or stop (hard power-off). Returns an action to poll with get_action. Scope: vms.action.
rename_vm — Changes the hostname, inside the guest and in the console. Scope: vms.action.
reinstall_vm — ERASES THE DISK and redeploys another image. Ask the user first. confirm_hostname must be the machine's exact current hostname. Scope: vms.action.
destroy_vm — DESTROYS the machine and its disk, with no undo and no backup kept. Ask the user first. confirm_hostname must be the machine's exact hostname. Scope: vms.destro
get_action — Follows an asynchronous action (create, reinstall, power…). Poll until status leaves running; on error it carries the reason. Scope: vms.read.
list_vm_actions — History of actions on one machine, from the API and the console. Scope: vms.read.
get_vm_network — IPv4 and IPv6 addresses of a machine with their reverse DNS, and its private networks. Scope: vms.read.
set_reverse_dns — Sets the PTR record of one of the machine's addresses; null restores the default. Scope: network.write.
list_vpcs — The account's private networks with their range, gateway and connected machines, plus the quota. Scope: vms.read.
get_vpc — One private network and the machines on it, with their private address. Scope: vms.read.
create_vpc — Creates an isolated private network; ready when the call returns. The first usable address (.1) is reserved for the gateway. Scope: network.write.
delete_vpc — Deletes an empty private network. Refused while a machine is still on it: disconnect or destroy those first. Ask the user first. Scope: network.write.
connect_vpc — Hot-adds a card on the private network and sets its address in the system, without a restart. configuration: manual means the address must be set by hand in the
disconnect_vpc — Removes the machine's private address and card, without a restart. Refused for the only network of a machine with no public address. Scope: network.write.
move_vpc — Joins the target network, then leaves this one, so the machine is never cut off. Keeps the same address ending when free. Scope: network.write.
list_firewalls — The account's firewalls with their inbound rules and the machines they protect, plus the quota. Scope: vms.read.
get_firewall — One firewall: its rules and the machines it protects, with the status of each (applied, pending, error). Scope: vms.read.
create_firewall — Creates a reusable set of inbound and outbound rules. Without rules it starts with SSH (TCP 22) and ping open from anywhere; pass rules: [] for none. Nothing is
update_firewall — rules REPLACES the whole list and is applied at once to every attached machine: send every rule to keep, not only the new one (read get_firewall first). Removin
delete_firewall — Deletes a firewall attached to no machine. Refused while it protects one: detach it first. Scope: network.write.
attach_firewall — From now on the machine refuses inbound traffic no rule of its firewalls opens; enforced within about ten seconds of the call. Up to 5 firewalls per machine, ru
detach_firewall — Removes the firewall's rules from the machine; with no other firewall it accepts all inbound traffic again. Scope: network.write.
list_load_balancers — The account's load balancers with their addresses, pools, targets and health, listeners and rules, certificates; plus the quota. Scope: vms.read.
get_load_balancer — One load balancer in full: status, ipv4/ipv6 to put in DNS, pools with targets (health, sessions, response time), listeners with rules in evaluation order, cert
get_load_balancer_metrics — Requests by response class, connections, bytes in/out and peak sessions over 1h (1-minute buckets), 24h (15 minutes) or 7d (1 hour), plus totals. Scope: vms.rea
create_load_balancer — Orders a load balancer in a private network, billed by the hour from now (the account needs 24 hours of credit), or by the month (7.30 CAD) or the year (73 CAD)
delete_load_balancer — Deletes the load balancer, its address and its configuration; billing stops. Target machines are not touched. Ask the user first. Scope: vms.destroy.
upsert_pool — Without pool: creates one (name required, up to 10). With pool: changes only the fields given. Deleting a pool also removes its targets and the rules leading to
delete_pool — Removes a pool, its targets and the rules leading to it. Scope: network.write.
set_targets — REPLACES the pool's targets with exactly this list (up to 25): send every target to keep. Each machine must be in the load balancer's private network (connect_v
upsert_listener — An entry port on the load balancer's address. Without listener: opens one (port and protocol required, up to 5; 22 and 8402 are reserved). https gets certificat
delete_listener — Closes the port and removes its rules. Scope: network.write.
set_rules — REPLACES the http/https listener's rules: each sends a hostname and/or path prefix to an http pool (up to 25). They are evaluated most specific first, whatever
list_databases — The account's managed databases with their status, private and public addresses, disk, backups and billing (no passwords), plus the quota. Scope: vms.read.
get_database_options — What can be ordered: engines and versions, extensions, sizes with their hourly, monthly and yearly prices per region, and the price of disk beyond what a size i
get_database — One database: status, connection (host, private ip, port, defaultdb and ffxfadmin; on Valkey no database and default), public access and sources, disk usage and
get_database_credentials — Every user with its password, databases and read_only, and its own connection_uri; ready-made connection strings for the admin (private network, and public when
get_database_metrics — CPU, memory, connections and commits per minute (commands per minute on Valkey) over 1h (1-minute buckets), 24h (10 minutes) or 7d (1 hour); only buckets with s
get_slow_queries — The 20 queries with the most total time (pg_stat_statements, values replaced by $1, $2…; performance_schema on MySQL and MariaDB, values replaced by ?): calls,
list_database_backups — Completed backups (weekly full, daily differential; the transaction log is archived continuously) and the restore window: any minute in it can be restored with
create_database — Orders a managed database (PostgreSQL, MySQL, MariaDB or Valkey) in a private network, billed by the hour from now (the account needs 24 hours of credit), or by
restore_database — Creates a NEW database, billed like any other, holding the data as it was at a given minute of the source's restore window (list_database_backups; Valkey: the l
fork_database — Creates a NEW database, billed like any other, whose data is an instant copy of this one (for a test or staging copy), with the same users and passwords. It sta
detach_database_fork — Gives a linked fork its own copy of the data; the database is unavailable for about 30 seconds, then its backups start. Scope: vms.action.
resize_database — Moves the database to a LARGER size (more vCPU, memory and included disk; see get_database_options): same data, users, names and addresses. It restarts: one to
delete_database — DELETES the database and its data; billing stops. Ask the user first. confirm_name must be the database's exact name. Its backups stay 7 days (restore_database
update_database — Any of: the name; the weekly maintenance window (day 0 = Sunday, start hour, Montréal time, 2 hours long; minor updates, usually under 2 minutes of downtime); t
set_database_public_access — Opens the database to the internet at its public host and port (IPv4 and IPv6, TLS and password still required), or closes it. sources restricts who may connect
backup_database — Starts a differential backup within a minute, e.g. before a risky migration. Not available on a linked fork. Scope: backups.write.
create_database_user — Creates a user with a generated password, returned here once (also readable with get_database_credentials); live within seconds. Up to 30 users. It connects onl
set_database_user_access — Sets the logical databases a user connects to (databases: a list, or null for all of them, future ones included) and whether it only reads; a field left out kee
reset_database_password — Gives the user a new password, returned here; the old one stops working within seconds, so update the application first or right after. Scope: databases.write.
delete_database_user — Hands the user's objects to the admin, then drops the user. The admin (ffxfadmin, or default on Valkey) cannot be deleted. Scope: databases.write.
create_logical_database — Creates another database inside the managed database (like defaultdb), owned by the admin; up to 30. Not on Valkey (numbered databases, SELECT 0 to 15). Scope:
delete_logical_database — DROPS the logical database with everything in it (the backups keep it 7 days). Ask the user first. Scope: databases.write.
enable_extension — PostgreSQL only. Enables an extension from get_database_options (vector for pgvector, postgis, pg_trgm…) in one logical database; installed on demand, live with
disable_extension — Drops the extension without CASCADE: if objects depend on it, it stays and get_database shows why in warning. Scope: databases.write.
get_runners — The runs-on labels with their vCPU, memory and price per minute, the account's concurrency (vCPU of jobs starting or running, and the cap), the linked GitHub or
list_runner_jobs — Jobs that ran or wait on FFxF runners, most recent first: repository, workflow and job, label, status (queued with waiting_reason credit, budget or account; run
list_ssh_keys — SSH keys saved on the account, to pass to create_vm. Scope: sshkeys.write or vms.read.
add_ssh_key — Saves a public key on the account so new machines can be reached without a password. Scope: sshkeys.write.
delete_ssh_key — Removes a key from the account. Machines already deployed with it keep it; only future deployments change. Scope: sshkeys.write.

when	check	result	http	latency	detail
15 min ago	mcp initialize	ok	200	239 ms	server ffxf 1.12.0 · protocol 2025-06-18 · 71 tools
8 h ago	mcp initialize	ok	200	208 ms	server ffxf 1.12.0 · protocol 2025-06-18 · 71 tools
16 h ago	mcp initialize	ok	200	206 ms	server ffxf 1.12.0 · protocol 2025-06-18 · 71 tools
24 h ago	mcp initialize	ok	200	194 ms	server ffxf 1.12.0 · protocol 2025-06-18 · 71 tools
32 h ago	mcp initialize	ok	200	214 ms	server ffxf 1.12.0 · protocol 2025-06-18 · 71 tools

FFxF

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from