Operations instructions for using the isrvd API to deploy containers, manage services and images, configure routes, handle files, and use a web terminal. The instructions include Python, Node.js, and Bash helper scripts.

Use them to deploy with Compose or Swarm, manage Docker containers and images, configure routing, and perform related server operations.

They provide a consistent way to perform infrastructure tasks through the isrvd service and explain authentication and API paths.

isrvd-ops — Skill for Claude Code and Codex by rehiy/isrvd

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add rehiy/isrvd --skill docs

Clone the repo

git clone --depth 1 https://github.com/rehiy/isrvd

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/rehiy/isrvd/docs/github.svg)](https://agentmods.dev/skills/rehiy/isrvd/docs)

Your own site

<a href="https://agentmods.dev/skills/rehiy/isrvd/docs"><img src="https://agentmods.dev/badge/skills/rehiy/isrvd/docs/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/rehiy/isrvd/docs"><img src="https://agentmods.dev/badge/skills/rehiy/isrvd/docs.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 96 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 4,435 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Tool Misuse · line 131
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
high Tool Misuse · line 132
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00096	$0.04435
Opus 5.5	$0.00038	$0.01774
Sonnet 5.5	$0.00019	$0.00887
Haiku 4.5	$0.00010	$0.00443

Measured yesterday against content hash de353901cc18, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

isrvd-ops scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/api.js, scripts/api.py, scripts/api.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

**首选：Python 标准库版**（无 `curl`/`jq` 依赖）

docs/SKILL.md · 307 lines

How it starts

The opening of the file, as written. The whole thing — 307 lines — stays where its author put it; the contents beside it link to each section on GitHub.

isrvd 运维 Skill

快速开始

推荐按 Python → Node.js 的顺序选择脚本；仅当 Python 和 Node.js 都不可用时，才使用 Bash 版兜底。三者共用 ~/.config/isrvd/profile.json。

脚本的 URL 参数必须填写从域名到 API 根路径的完整地址，例如 https://gateway.example.invalid/isrvd/api 或 https://gateway.example.invalid/isrvd/api/automation。不要只填写域名；业务路径仍使用 /docker/containers 这类以 / 开头的相对路径。默认认证方式是 Authorization: Bearer <API_TOKEN>；如果前置网关要求使用其他请求头，可设置 ISRVD_AUTH_HEADER，例如 ISRVD_AUTH_HEADER=token 会发送 token: <API_TOKEN>。

首选：Python 标准库版（无 curl/jq 依赖）

python3 ./scripts/api.py token "$API_ROOT" "$TOKEN"
python3 ./scripts/api.py get "/docker/containers"
python3 ./scripts/api.py post "/docker/container" '{"image":"...","name":"..."}'

备选：Node.js 内置库版（无 curl/jq 依赖）

node ./scripts/api.js token "$API_ROOT" "$TOKEN"
node ./scripts/api.js get "/docker/containers"
node ./scripts/api.js post "/docker/container" '{"image":"...","name":"..."}'

备选：Bash 版（python3 与 node 都不可用时使用，支持 isrvd_get / source 交互式调用）

source ./scripts/api.sh

# 认证方式（优先使用环境变量，自动保存到 ~/.config/isrvd/profile.json）
isrvd_token "$API_ROOT" "$TOKEN"
# 或
isrvd_login "$API_ROOT" "$ISRVD_USERNAME" "$ISRVD_PASSWORD"

isrvd_get "/docker/containers"
isrvd_post "/docker/container" '{"image":"...","name":"..."}'

脚本默认提取统一响应中的 .payload；数组对象会自动转为紧凑表格，降低输出噪音。Python/Node 版支持简单 selector（如 .content、.username）。Python/Node 都不可用时可使用 Bash 版。

Bash 版可在 selector 位置传 --raw（例如 isrvd_post "/copilot/agui" '<RunAgentInput JSON>' --raw），直接输出 SSE/文本，不经过 JSON 解析，需 curl 7.76.0+。

⚠️ 操作规范（必须遵守）：

禁止硬编码：不要假设任何 IP、端口、路径、容器名——全部通过 API 查询或环境变量获取
禁止 base64：不要用 base64 编码内容写入文件，使用 isrvd_put "/filer/file" 或 isrvd_upload
filer 路径 ≠ 宿主机路径：volume mount 的 hostPath 必须是宿主机真实路径，先通过 inspect isrvd 容器确认映射关系，见 references/system/filer.md
不要重复重建容器：静态文件更新直接写 filer 即可，容器无需重建；只有初次部署或更换镜像时才需要重建

文档索引

按使用场景查找对应文档：

模块	文档	说明
概览	references/overview.md	启动聚合、服务探测、系统版本、监控数据
容器	references/docker/containers.md	容器 CRUD、日志、终端
镜像	references/docker/images.md	镜像搜索/拉取/构建/推送
网络	references/docker/networks.md	Docker 网络管理
数据卷	references/docker/volumes.md	Docker 数据卷管理
仓库	references/docker/registries.md	镜像仓库配置
Swarm	references/swarm/info.md	集群、节点、节点运行服务、令牌
Swarm	references/swarm/services.md	服务部署/扩缩容/更新
Swarm	references/swarm/tasks.md	任务列表
Compose	references/compose.md	Docker Compose / Swarm Stack 部署、重部署、部署记录与历史配置
APISIX	references/apisix/routes.md	路由 CRUD、启用/禁用
APISIX	references/apisix/upstreams.md	上游、负载均衡
APISIX	references/apisix/consumers.md	Consumer、访问授权
APISIX	references/apisix/ssl.md	SSL 证书、PluginConfig
Caddy	references/caddy/routes.md	路由 CRUD（反向代理/静态文件）
Caddy	references/caddy/servers.md	服务（srv0 等）增删改查
Caddy	references/caddy/certs.md	SSL 证书管理
Caddy	references/caddy/config.md	全局配置、原始 JSON 配置
Caddy	references/caddy/basic-auth.md	路由 Basic Auth 账号
系统	references/system/config.md	系统配置、配置/业务数据存储、重载、故障告警、审计日志
系统	references/system/account.md	登录、成员管理、API Token
系统	references/system/filer.md	文件管理、上传下载、压缩解压
系统	references/system/cron.md	计划任务
SSH	references/ssh/hosts.md	SSH 主机/凭据管理、SSH 终端
SSH	references/ssh/sftp.md	SFTP 远程文件管理
节点	references/node/nodes.md	集中管理：创建节点与 token、接入/吊销/删除、端口转发（中控监听 TCP/UDP 端口并转发到节点）、以节点视角访问（仅 center 模式，按路由权限授权）
本机进程	references/local.md	进程列表、终止进程
终端	references/shell.md	Web Shell（本地终端）
Copilot	references/copilot.md	接口目录与 AG-UI 对话

Read the full file on GitHub · 307 lines

Files

What ships with it

35 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday Changed · +1 lines de353901cc18
5d ago Changed · -2 lines c4dd52253ba4
6d ago Changed d2f97908ec16
12d ago Changed · +7 lines ad56ba0b154e
19d ago Changed · +7 lines f3ed91d6c681
21d ago Changed 4cb9d4487669
25d ago Changed · +1 lines d5550c6d0aaa
1mo ago Changed · +3 lines ea7c0f86394b
1mo ago Changed · +2 lines 803c99e87090
1mo ago First seen · 288 lines · 96 tokens per session scan A 6e3a135ca802

Subscribe to this mod's changes

isrvd-ops is a skill published in the GitHub repository rehiy/isrvd (25 stars, last pushed yesterday), licensed Apache-2.0. It adds 96 tokens to every session and 4,435 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Cloud Containers DevOps and cloud apisix caddy docker etcd swarm webshell

ecspresso

ECS deployment tool - deploy, manage, and troubleshoot ECS services.

kayac/ecspresso · 17 tokens

k8s-dev-deploy

Build, push, and deploy Kurtosis dev images to a Kubernetes cluster without creating a release. Rebuilds engine, core, and files-artifacts-expander as multi-arch Docker images with a unique tag, pushes to the logged-in user's Docker Hub, and restarts the engine. Use when testing local code changes on a k8s cluster.

kurtosis-tech/kurtosis · 78 tokens

04-security

A security and operations guide for deploying Dify, an open-source platform for building AI applications, in production.

skillmds/skillmd · 36 tokens

infra-conventions

Infrastructure and deployment conventions. Auto-injected into devops-aware agents - not user-invocable.

fpindej/netrock · 20 tokens

coolify

Use when self-hosting apps and databases with Coolify on a VPS you own — install, first-admin lockdown, Git-to-deploy (Nixpacks/Dockerfile/compose), managed Postgres/Redis, scheduled S3 backups, domains + auto-SSL. NOT a PaaS someone else runs (that is railway), NOT sizing/hardening the box (that is hetzner), NOT…

ericrisco/rsc-harness · 100 tokens

epistemic-graph-troubleshooting

Diagnose and recover a live epistemic-graph engine (the SI-native database): engine down / socket refused, host-daemon crash-loop, circuit-breaker open, backend-type errors, zombie containers, duplicate Swarm tasks, slow first boot. Use when the KG is unreachable, ingestion stalls, go tools error, or a deploy left the…

Knuckles-Team/epistemic-graph · 82 tokens

isrvd-ops