These skills are MCP-only operating guides for agents working with Metis.
Use MCP tools first. Do not tell the user to run helm, vault, cardano-cli, curl, or Docker from these skills.
If MCP does not expose a required workload API directly, a skill may describe an operator-approved, scoped local port-forward to a specific workload output for read-only inspection. Keep that fallback narrow, prefer MCP outputs discovered through workloads.get, and do not use port-forwards for secret handling or arbitrary cluster access.
If a requested action cannot be completed with the MCP tools below, say that MCP does not currently expose that operation and stop for operator direction.
supernode.status.getextensions.catalog.listextensions.catalog.getcluster.storage_classes.listcluster.events.listworkloads.listworkloads.getworkloads.logs.getworkloads.metrics.getworkloads.installworkloads.upgradeworkloads.deletevault.runtime.metadata.getvault.runtime.writevault.runtime.patchhydra.keys.generatedolos.snapshot.refresh
- Use split extension IDs for new installs:
cardano-relay,cardano-block-producer,apex-fusion-relay,apex-fusion-block-producer,dolos, andhydra-node. - Use split extension IDs for new installs:
cardano-relay,cardano-block-producer,cardano-db-sync,apex-fusion-relay,apex-fusion-block-producer,dolos,hydra-node, andmidnight. - Use
extensions.catalog.getas the source of truth for configuration shape. - Pass direct chart values to
workloads.installandworkloads.upgrade. - Start mutating tools with
dryRun: true; run live only after the operator approves the returned plan. - Do not auto-resolve trusted relays or upstreams. Use
workloads.list, propose same-network candidates, and pass the operator-approved address explicitly. - Do not ask users to paste secret values in chat. If runtime material must be written, use
vault.runtime.writeorvault.runtime.patchthrough the MCP client.