Act II · Contract
ArgSpec before action
Real Ansible modules from a curated gallery. Slim argSpec before any run. Check mode default. No freestyle shell. The Schema Lab loads the same gallery.json and catalog/schemas/*.json the MCP server ships.
Agent ritual · modules
01
search_modules
Gallery search across allowlisted collections
02
get_module_schema
Slim argSpec for the FQCN — form the args correctly
03
run_module(..., check_mode=true)
Dry-run first — default path for agents
04
run_module(..., check_mode=false)
Apply only when the check looks right
MCP toolsstdio
| search_modules | Gallery search |
| get_module_schema | Slim argSpec JSON |
| run_module | Ad-hoc · check default true |
| run_playbook | Path-jailed .yml |
| list_collections | Collections in gallery |
Schema Lab
Pull the contract. Then dry-run.
Search the full gallery. Select a module. Load its committed slim schema — the same shape agents receive from get_module_schema. Try typing shell to see the deny path.
Initializing…
get_module_schema
Select a module from the gallery to load its slim argSpec.
Schema options render here — name, type, required, choices, no_log.
Select a module to preview the agent ritual
Schemas are not vibes. Each FQCN ships a committed JSON slim argSpec under
catalog/schemas/ — options with types, required flags, choices, and
noLog markers. Agents form args against the contract before
run_module ever touches Ansible.