Every nyx_ tool a coding agent gets over nyxory's MCP connection, grouped by what it does.
Once your agent connects to nyxory’s MCP endpoint, it gets 36 nyx_ tools — deploy, inspect, manage secrets, control infrastructure, all scoped to projects you own. Call nyx_brain first on any deploy: it returns the deploy cookbook plus a live snapshot of the project’s current state, and tells the agent which form of project to use for the rest of the run.
Brain & ping
| Tool | Purpose |
|---|
nyx_ping | Health probe; returns the user ID so a client can verify the auth round-trip. |
nyx_brain | The first call of every deploy. Returns the deploy cookbook plus a live snapshot of a repo’s project state. Takes repo_url (required), optional project and agent_briefing. |
Workspace
| Tool | Purpose |
|---|
nyx_shell | Run a shell command in the agent’s project workspace (default cwd /workspace/repo, default timeout 120s, max 600s). Returns stdout, stderr, and exit code separately. |
nyx_read_file | Read a UTF-8 file from the workspace (over 2 MiB fails — use nyx_shell with grep/head/tail instead). |
nyx_write_file | Write or overwrite a file under /workspace, atomically. |
nyx_edit_file | Replace a unique substring in a file — the substring must occur exactly once, matched literally, no regex. |
Secrets
| Tool | Purpose |
|---|
nyx_set_secret | Encrypt a value and store it as a project secret or app secret. The operator materializes it and rolls affected workloads automatically. |
Build & deploy
| Tool | Purpose |
|---|
nyx_build_and_push_image | Build a container image from the repo (Buildpacks or Dockerfile) and push it, as its own build job. Returns an image_ref to put in the manifest. |
nyx_deploy_manifests | Apply the app CRD and related resources atomically — full app_manifest + rest_manifests on first deploy, only the changed rest_manifests on an update. |
Apps
| Tool | Purpose |
|---|
nyx_app_list | List every app across the user’s projects. |
nyx_app_get | Get detail on one app, including its ingress hosts. |
nyx_app_deployments | Get an app’s rollout history. |
nyx_app_logs | Read an app’s container logs directly, without a nyx_shell + kubectl detour. Structured, RFC3339-timestamped lines, filterable by tail, since, grep, container, pod, and previous. |
Backup & restore
| Tool | Purpose |
|---|
nyx_backup_list | List an app’s backups and its plan’s keep-N slots — trigger, phase, size, pinned image. |
nyx_backup_create | Take a point-in-time, crash-consistent backup of an app: CSI volume snapshots, manifests, and image reference. |
nyx_restore | Restore an app from a backup — data, app, or full mode. Takes a safety snapshot first automatically, and pauses auto-deploy for app/full. |
Projects
| Tool | Purpose |
|---|
nyx_project_list | List the user’s projects. |
nyx_project_state | Get a project’s RAM allocation, current pod reservations, and remaining headroom in the account pool. |
nyx_project_add | Create a new project. |
nyx_project_rename | Rename a project’s display label (the ID stays the same). |
nyx_project_delete | Delete a project — destructive, owner-approval-gated. |
nyx_project_ram | Set a project’s RAM allocation in MB, rounded to 256 MB steps. |
Account RAM
| Tool | Purpose |
|---|
nyx_account_ram | Show the account’s RAM pool: plan baseline, extra packs, and allocation across projects. |
Domains
| Tool | Purpose |
|---|
nyx_domain_list | List the user’s custom domains, across all projects or filtered. |
nyx_domain_status | Show a domain’s phase and next required action, optionally polling until it’s ready. |
nyx_domain_add | Register a custom hostname against an app. |
nyx_domain_remove | Delete a domain — cascades to its ingress and certificate, owner-approval-gated. |
Tokens
| Tool | Purpose |
|---|
nyx_token_list | List active tokens. |
nyx_token_create | Issue a new token — the plaintext value is shown only once. |
nyx_token_delete | Revoke a token by ID — owner-approval-gated. |
GitHub
| Tool | Purpose |
|---|
nyx_github_install_url | Generate a signed install URL for the nyxory GitHub App, valid for 10 minutes. |
nyx_clone_repo | Clone a private GitHub repo — or a hosted nyxory git remote — into the agent workspace, minting its own installation/platform token. |
nyx_list_github_installations | List the user’s connected GitHub App installations. |
nyx_list_github_repos | List the repos visible to one installation. |
nyx_disconnect_github | Disconnect a GitHub App installation, revoking it on GitHub’s side — owner-approval-gated. |
nyx_git_remote_create | Create a hosted nyxory git remote and a short-lived push credential for a project — for local sources that don’t come from GitHub. |