{"apiVersion":"v1","directorySlug":"root-mcp-ed6b0d63f2","title":"Root","description":null,"pageUrl":"https://www.mcpbundles.com/skills/root-mcp-ed6b0d63f2","connectPath":"importable","connectAction":"import_server","catalogListing":false,"bundleSlug":null,"listingKind":"remote_mcp","kind":"provider","transportUrl":"https://mcp.root.io/mcp","hostedMcpUrl":null,"toolCount":14,"toolInventoryStatus":"observed","refreshedAt":"2026-11-03T13:26:00.516172+00:00","registryName":"io.root/root-mcp-ed6b0d63f2","registryVersion":"2026.11.3","registryEligible":true,"tools":[{"name":"check_build_status","description":"Check the status of a trigger_build workflow. For scan workflows use check_scan_status; for image rebuilder workflows use get_rebuild_job_status. If status is 'pending', call this tool again after a brief wait (30-60 seconds). Continue polling until status is 'completed' or 'failed'. Do not stop or wait for the user — keep polling automatically until done. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["workflow_name","build_id"],"properties":{"build_id":{"type":"string"},"workflow_name":{"type":"string"}}},"logicalName":"check_build_status","displayName":"check_build_status","title":"check_build_status","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"check_scan_status","description":"Check the status of an async scan workflow triggered by scan_image. If status is 'pending', call this tool again after a brief wait (30-60 seconds). Continue polling until status is 'completed' or 'failed'. Do not stop or wait for the user — keep polling automatically until done. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["workflow_name"],"properties":{"workflow_name":{"type":"string"}}},"logicalName":"check_scan_status","displayName":"check_scan_status","title":"check_scan_status","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"check_workflow_status","description":"Check the status of a trigger_image_rebuild workflow. For build workflows use check_build_status; for scan workflows use check_scan_status. If phase is 'Running', call this tool again after a brief wait (30-60 seconds). Continue polling until phase is 'Succeeded' or 'Failed'. Do not stop or wait for the user — keep polling automatically until done. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["workflow_name"],"properties":{"workflow_name":{"type":"string"}}},"logicalName":"check_workflow_status","displayName":"check_workflow_status","title":"check_workflow_status","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"get_artifact_url","description":"Returns a 30-minute presigned GET URL to download a rebuild artifact from S3. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["job_id","artifact_name"],"properties":{"job_id":{"type":"string"},"artifact_name":{"type":"string"}}},"logicalName":"get_artifact_url","displayName":"get_artifact_url","title":"get_artifact_url","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"get_rebuild_job_status","description":"Returns the current phase and status of a rebuild job (full run or individual step). Poll every 30-60 seconds until phase is Succeeded or Failed. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["job_id"],"properties":{"job_id":{"type":"string"}}},"logicalName":"get_rebuild_job_status","displayName":"get_rebuild_job_status","title":"get_rebuild_job_status","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"list_job_artifacts","description":"Lists all S3 artifacts for a specific rebuild job. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["job_id"],"properties":{"job_id":{"type":"string"}}},"logicalName":"list_job_artifacts","displayName":"list_job_artifacts","title":"list_job_artifacts","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"ping","description":"Health check endpoint that returns server status and timestamp","inputSchema":{"type":"object","properties":{}},"logicalName":"ping","displayName":"ping","title":"ping","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"prepare_trigger_build","description":"Prepare a Docker image build. Generates presigned S3 upload URLs for the Dockerfile and build context archive. Returns curl commands that the user must run LOCALLY to upload files from their machine. After both uploads succeed, call trigger_build with the returned build_id and S3 keys. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["dockerfile_path","context_archive_path"],"properties":{"dockerfile_path":{"type":"string"},"context_archive_path":{"type":"string"}}},"logicalName":"prepare_trigger_build","displayName":"prepare_trigger_build","title":"prepare_trigger_build","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"put_artifact_url","description":"Returns a 30-minute presigned PUT URL to upload or override a rebuild artifact in S3. Use this to inject a modified artifact before triggering the next step. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["job_id","artifact_name"],"properties":{"job_id":{"type":"string"},"artifact_name":{"type":"string"}}},"logicalName":"put_artifact_url","displayName":"put_artifact_url","title":"put_artifact_url","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"scan_image","description":"Trigger an async vulnerability scan on a container image. Supports registry tags (e.g. 'nginx:1.27') or S3 tar URIs (e.g. 's3://bucket/path/image.tar'). After calling this tool, immediately call check_scan_status repeatedly in the same response until the scan completes. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["image_ref"],"properties":{"arch":{"type":"string"},"image_ref":{"type":"string"}}},"logicalName":"scan_image","displayName":"scan_image","title":"scan_image","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"trigger_build","description":"Trigger a remote Kaniko Docker image build after files have been uploaded via prepare_trigger_build. Use the build_id and S3 keys returned by prepare_trigger_build. After calling this tool, call check_build_status repeatedly until the build completes. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["build_id","dockerfile_s3_key","context_s3_key"],"properties":{"arch":{"type":"string"},"build_id":{"type":"string"},"build_args":{"type":"string"},"context_s3_key":{"type":"string"},"dockerfile_s3_key":{"type":"string"}}},"logicalName":"trigger_build","displayName":"trigger_build","title":"trigger_build","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"trigger_image_rebuild","description":"Triggers a Securing Job — Phase 1 run for a container image: scan upstream (both arches) → image-rebuilder → generate Dockerfile → open a GitLab MR. Returns a job_id immediately. Use get_rebuild_job_status to poll for completion. Set fips=true (or access_tier=fips) to include the FIPSifier phase. Set fips_only=true for a FIPS-only run that skips CVE remediation entirely. Optionally pass `arch` to target a single architecture (default: both). Optionally pass `phase` (+`prior_job`) to force a reru","inputSchema":{"type":"object","required":["image_repo","image_tag"],"properties":{"arch":{"type":"string"},"fips":{"type":"boolean"},"stig":{"type":"boolean"},"phase":{"type":"string"},"harden":{"type":"boolean"},"fips_only":{"type":"boolean"},"image_tag":{"type":"string"},"prior_job":{"type":"string"},"image_repo":{"type":"string"},"access_tier":{"type":"string"},"fips_base_image":{"type":"string"}}},"logicalName":"trigger_image_rebuild","displayName":"trigger_image_rebuild","title":"trigger_image_rebuild","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"upload_artifact_content","description":"Upload text content directly as a rebuild artifact in S3. Gets a presigned PUT URL from ops and immediately uploads the content — no curl required. Use this to inject or modify a step's output artifact before triggering the next step. For example: download an artifact with get_artifact_url, modify the JSON, then upload it back. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["job_id","artifact_name","content"],"properties":{"job_id":{"type":"string"},"content":{"type":"string"},"artifact_name":{"type":"string"}}},"logicalName":"upload_artifact_content","displayName":"upload_artifact_content","title":"upload_artifact_content","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"upload_file","description":"Get a presigned S3 URL to upload a file directly from the client machine. Returns a presigned URL, the S3 key, and a ready-to-run curl command. The caller must run the curl command locally to perform the actual upload. ADMIN ONLY: Requires super admin authentication.","inputSchema":{"type":"object","required":["build_id","filename","local_path"],"properties":{"build_id":{"type":"string"},"filename":{"type":"string"},"local_path":{"type":"string"}}},"logicalName":"upload_file","displayName":"upload_file","title":"upload_file","annotations":{"untrustedContentHint":true,"readOnlyHint":true}}],"toolSource":"directory_preview","agentAction":"both","installLinks":[{"id":"cursor","label":"Cursor","href":"cursor://anysphere.cursor-deeplink/mcp/install?name=Root&config=eyJ1cmwiOiAiaHR0cHM6Ly9tY3Aucm9vdC5pby9tY3AifQ%3D%3D"},{"id":"vscode","label":"VS Code","href":"vscode:mcp/install?%7B%22name%22%3A%22Root%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.root.io%2Fmcp%22%7D"},{"id":"vscode-insiders","label":"VS Code Insiders","href":"vscode-insiders:mcp/install?%7B%22name%22%3A%22Root%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.root.io%2Fmcp%22%7D"},{"id":"claude-web","label":"Claude.ai","href":"https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=Root&connectorUrl=https%3A%2F%2Fmcp.root.io%2Fmcp"},{"id":"codex","label":"Codex","copyText":"codex mcp add \"Root\" --url \"https://mcp.root.io/mcp\""},{"id":"chatgpt","label":"ChatGPT","href":"https://www.mcpbundles.com/docs/integrations/chatgpt"}],"catalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/root-mcp-ed6b0d63f2","callUrl":"https://www.mcpbundles.com/api/directory/v1/servers/root-mcp-ed6b0d63f2/tools/{tool}","mcpServerUrl":"https://mcp.root.io/mcp","liveCatalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/root-mcp-ed6b0d63f2?live=1"}