docs: reconcile catalog with live MCP + Codex safety fixes#10
Conversation
…ty fixes Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8c10cd83a7
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| | `server_local_backup_delete` | W! | Delete local backups stored on the server. | | ||
| | `server_package_update` | W | Install/uninstall/upgrade packages (PHP, MySQL/MariaDB…). | | ||
| | `server_packages` | R | Discover available packages for a server. | | ||
| | `server_package_update` | W | Install/uninstall/upgrade packages (PHP, MySQL/MariaDB…). Discover installable versions via Cloudways' raw `/packages` API endpoint — there is no MCP tool for package discovery. | |
There was a problem hiding this comment.
This release makes tools-catalog.md the authoritative source for confirmation policy, but server_package_update is still flagged only W even though the new SKILL summary says the uninstall variant is W! because it removes package data. When an operator uses the catalog or execute_tool risk mapping for an uninstall, this will require only a single confirmation and bypass the intended double-confirmation guard for destructive package removal; please split or annotate the uninstall action as W! here.
Useful? React with 👍 / 👎.
…Codex follow-up) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1 participant
Addresses open Codex findings (PRs #6/#8), grounded against the LIVE Cloudways MCP tool set (enumerated via
list_available_toolsets+get_toolset_toolsacross the connected accounts).server_scale,app_restore_rollback,app_local_backup_delete,server_local_backup_delete,app_db_password_update,app_admin_password_update,app_credentials_delete,server_master_password_update,dns_made_easy_delete_*,project_delete,ssh_key_delete, add-on activation); removed the one catalog entry not exposed by the live MCP (server_packages).app_restore_rollback(W!) IS live, so the maintenance workflow now uses it within the rollback window instead of claiming "no MCP rollback tool."execute_tool/toolset-proxy inherited-risk now stated in SKILL.md safety rules.Also: marked
app_cron_list_updatedeprecated (endpoint returns HTTP 500), and corrected R/W/W! tags on tools the live schema flags destructive (app_cname_delete,app_credentials_update,server_master_username_update,git_generate_key→ W!).🤖 Generated with Claude Code