Developer Tools

AI-HIVE Remote Bridge

by בר יוחאי פרדי כוינה

Overview

AI-HIVE Remote Bridge lets authorized server owners inspect server health, work with approved files, and manage user-level processes from ChatGPT. Connections use OAuth with one-time owner pairing, and OpenAI reviewers receive a separate isolated demo environment.

Tools

ai_hive_service_logs

ChatGPT

Owner in production; reviewer gets isolated synthetic logs: read recent journal lines for one explicitly allowlisted AI-HIVE user service. Beta profiles cannot read owner service logs.

ai_hive_service_restart

ChatGPT

Owner in production; reviewer restart is a no-effect synthetic demo: restart one explicitly allowlisted AI-HIVE user service. The MCP plugin service itself cannot restart itself through this tool.

ai_hive_service_status

ChatGPT

Owner in production; reviewer gets isolated synthetic status: inspect one allowlisted AI-HIVE user service or all allowlisted services without changing them.

audit_tail

ChatGPT

Owner in production; reviewer gets isolated synthetic audit entries: return recent Remote Bridge audit metadata. Beta profiles cannot inspect owner audit logs.

beta_access_revoke

ChatGPT

Owner in production; reviewer gets a non-persistent synthetic demo: revoke one Beta profile and immediately invalidate its active access and refresh tokens.

beta_access_status

ChatGPT

Owner in production; reviewer gets isolated synthetic data: list Free Beta profiles and invitation status without revealing OAuth tokens.

beta_invite_create

ChatGPT

Owner in production; reviewer gets a non-persistent synthetic demo: create a one-time Free Beta invitation code for one tester. The code grants only an isolated beta workspace, never owner access.

bridge_capabilities

ChatGPT

List capabilities and the security scope available to this authenticated connection.

bridge_gap_status

ChatGPT

Owner in production; reviewer gets an isolated synthetic demo: return the tracked Remote Bridge capability gaps and whether each is fixable, a deliberate security boundary, or an external human/account action.

file_copy

ChatGPT

Owner-only production mutation; reviewer receives a no-effect synthetic result: copy one regular non-hardlinked file between approved paths. The caller must supply the source SHA-256, overwrite is refused, symlink components are refused, and copies are size-bounded. Beta profiles cannot use this tool.

file_delete

ChatGPT

Owner-only destructive mutation; reviewer receives a no-effect synthetic result: delete one regular file only when its current SHA-256 is supplied, or delete one empty directory. Recursive deletion, allowed-root deletion, hardlinks, traversal, denied paths, and symlink components are refused. Beta profiles cannot use this tool.

file_list

ChatGPT

List entries in an allowed directory in the connected private server workspace without modifying them.

file_mkdir

ChatGPT

Owner-only production mutation; reviewer receives a non-persistent synthetic result: create exactly one new directory inside an approved root. Parents must already exist. Existing destinations, traversal, denied paths, and symlink components are refused. Beta profiles cannot use this tool.

file_move

ChatGPT

Owner-only destructive mutation; reviewer receives a no-effect synthetic result: move one regular non-hardlinked file between approved paths without overwrite. The caller must supply the current source SHA-256. Cross-device moves, traversal, denied paths, and symlink components are refused. Beta profiles cannot use this tool.

file_read

ChatGPT

Read UTF-8 text bytes from an allowed private-server file using a byte offset and bounded length.

file_replace_exact

ChatGPT

Owner in production; reviewer gets a non-persistent synthetic demo: replace an exact text occurrence in one approved UTF-8 file. Production requires the current SHA-256 and exact expected match count to prevent stale or broad edits. Beta profiles cannot use this owner code-maintenance tool.

file_search

ChatGPT

Search for a bounded literal text string in an allowed file or directory. Owner searches approved server paths; Beta searches only its isolated workspace; reviewer searches only synthetic demo files. No shell or regular expression is used.

file_stat

ChatGPT

Return metadata and a small-file hash for a path in the connected private server workspace.

file_write

ChatGPT

Rewrite or append UTF-8 text to an allowed private-server file. This changes server data and may overwrite existing content.

get_profile

ChatGPT

Return the stable profile represented by this request's authenticated credentials. The opaque id is unique within this app and remains unchanged across token refresh and reconnection.

openai_browser_click

ChatGPT

Owner in production; reviewer click is a no-effect synthetic demo: click one numbered element from the current OpenAI/ChatGPT browser state. Refuses to act while CAPTCHA or human verification is present.

openai_browser_input

ChatGPT

Owner in production; reviewer input is a no-effect synthetic demo: fill one numbered input on the current OpenAI/ChatGPT page. Refuses to act while CAPTCHA or human verification is present and will not enter passwords, MFA codes, API keys, payment-card fields, or other secrets.

openai_browser_open

ChatGPT

Owner in production; reviewer uses a synthetic no-network browser: open an HTTPS page on an OpenAI or ChatGPT domain in the managed owner browser. This tool never bypasses CAPTCHA or human verification; BrowserAct is used as the browser automation service.

openai_browser_state

ChatGPT

Owner in production; reviewer receives synthetic no-network state: inspect the current managed OpenAI/ChatGPT browser page. The result explicitly reports when human verification is required.

process_kill

ChatGPT

Send TERM, INT, or KILL to a process group previously started through this connection. This terminates running work.

process_output

ChatGPT

Read bounded stdout or stderr for a process previously started through this connection.

process_start

ChatGPT

Start an allowlisted diagnostic process on the connected private server using an explicit argv list. Shells, interpreters, network clients, trading tools, and financial actions are not allowed.

process_status

ChatGPT

Read status and exit metadata for a process previously started through this connection.

public_request_list

ChatGPT

Owner in production; reviewer gets isolated synthetic data: list public support, Free Beta access, or feedback requests. Source-network hashes are never returned. Beta profiles cannot inspect the owner inbox.

public_request_set_status

ChatGPT

Owner in production; reviewer gets a no-effect synthetic demo: set one public support/Beta/feedback request to open, approved, rejected, or closed. This does not create a Beta account or invitation by itself.