What makes vmware-vdi notable?

989 downloads. Trust evidence available

How should vmware-vdi be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

vmware-vdi

Use this skill whenever the user needs to operate a VMware/Omnissa Horizon VDI environment via its Connection Server: list and manage desktop pools, RDS farms and published apps, inspect and act on user sessions (log off, disconnect, send message), manage desktop machines (reset, maintenance, remove), view and change entitlements, read Horizon events/health/statistics, and push instant-clone golden images. Always use this skill for "log off VDI user", "reset this desktop", "why is the desktop pool not provisioning", "push the new image to the pool", "list Horizon sessions", "who is entitled to the pool", "VDI health" — when the context is explicitly Horizon / Omnissa / VDI / desktop-pool / RDS-farm. Do NOT use for the underlying vCenter VM lifecycle/power/snapshot/migrate (use vmware-aiops), read-only vSphere monitoring (use vmware-monitor), or NSX microsegmentation (use vmware-nsx-security). This skill manages the Horizon broker layer; vmware-aiops manages the vCenter VMs backing the desktops.

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

989

Updated

Oct 11, 2026

Version

1.3.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 989 downloads reported by the source. Last updated 10/11/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 11, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 11, 2026
Adoption signal: 989 downloadsadoption · observed Oct 11, 2026
Latest release: 1.3.0release · observed Sep 20, 2026
Handshake status: UNKNOWNsecurity

What changed

Newest first. Only changes that point at a source are listed.

Release 1.3.0release
MCP instructions now name the configured targets and how to choose one; a config that cannot be read says so instead of falling silent.
Observed Sep 20, 2026 · source

Install and run

Setup complexity: low.

clawhub skill install s171xgnmqse0nqvgqvqnaq5f9183kyre:vmware-vdi

Install using `clawhub skill install s171xgnmqse0nqvgqvqnaq5f9183kyre:vmware-vdi` in an isolated environment before connecting it to live workloads.
No published capability contract is available yet, so validate auth and request/response behavior manually.
Review the upstream CLAWHUB listing at https://clawhub.ai/zw008/vmware-vdi before using production credentials.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-zw008-vmware-vdi/snapshot"

Run-check

$0.02 USD

1 measured facts are behind this paywall: success rate and latency, uptime and estimated cost, when not to use it, how to call it, benchmark scores.

Agents pay $0.02 in USDC. A card payment is $0.50, the smallest a card allows.

Documentation

CLAWHUB

146,534 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: vmware-vdi
description: >
  Use this skill whenever the user needs to operate a VMware/Omnissa Horizon VDI environment via its
  Connection Server: list and manage desktop pools, RDS farms and published apps, inspect and act on
  user sessions (log off, disconnect, send message), manage desktop machines (reset, maintenance,
  remove), view and change entitlements, read Horizon events/health/statistics, and push instant-clone
  golden images. Always use this skill for "log off VDI user", "reset this desktop", "why is the desktop
  pool not provisioning", "push the new image to the pool", "list Horizon sessions", "who is entitled to
  the pool", "VDI health" — when the context is explicitly Horizon / Omnissa / VDI / desktop-pool /
  RDS-farm. Do NOT use for the underlying vCenter VM lifecycle/power/snapshot/migrate (use vmware-aiops),
  read-only vSphere monitoring (use vmware-monitor), or NSX microsegmentation (use vmware-nsx-security).
  This skill manages the Horizon broker layer; vmware-aiops manages the vCenter VMs backing the desktops.
installer:
  kind: uv
  package: vmware-vdi
allowed-tools:
  - Bash
metadata: {"openclaw":{"requires":{"anyBins":["vmware-vdi","uvx"]},"optional":{"env":["VMWARE_VDI_CONFIG"]}}}
---

# VMware VDI (Horizon)

> **Disclaimer**: Community-maintained open-source project, **not affiliated with, endorsed by, or
> sponsored by VMware, Inc., Broadcom Inc., or Omnissa, LLC.** "VMware", "Horizon", and "Omnissa" are
> trademarks of their respective owners. Source is publicly auditable under the MIT license.

Horizon VDI intelligent operations for the VMware skill family — desktop pools, RDS farms, **user
sessions**, desktop machines, entitlements, events/health/statistics, and instant-clone image push,
through the **Horizon 8 Connection Server REST API** (primary; also targets the latest Omnissa Horizon,
which shares the same `/rest/v1` API lineage).

> **Companion skills**: [vmware-aiops](https://github.com/vmware-skills/VMware-AIops) (the vCenter VMs backing
> the desktops), [vmware-monitor](https://github.com/vmware-skills/VMware-Monitor) (read-only vSphere),
> [vmware-nsx-security](https://github.com/vmware-skills/VMware-NSX-Security) (desktop microsegmentation).

> **Status: v1.0.0 (beta).** Endpoints are verified against the official Horizon Server API; GET-response
> field projections are defensive and pending validation against a live Connection Server (run
> `vmware-vdi init` on a real Horizon once to confirm). Governed by the family harness (audit + policy +
> teaching errors); authorization is delegated to the Horizon admin account's role.

## What This Skill Does

| Category | Tools | Count | Read/Write |
|----------|-------|:-----:|:----------:|
| **Monitoring** | health summary, session list/get, machine list/get, event list | 6 | 6 R |
| **Statistics** | session concurrency stats, per-pool utilization | 2 | 2 R |
| **Management** | pool list/get, farm list, app-pool list, entitlement list, image li

_meta.json

{
  "ownerId": "kn7b067awq2s97bn3d7p5qfhw5827pxc",
  "slug": "vmware-vdi",
  "version": "1.3.0",
  "publishedAt": 1789915941854
}

references/capabilities.md

# vmware-vdi — Capabilities

27 MCP tools (16 read / 11 write) over the Horizon 8 Connection Server REST API. Every tool accepts an
optional `target`. Typical response tokens are estimates for a small estate; lists paginate at 50.

## Monitoring (6 read)
| Tool | R/W | Returns | ~tokens |
|------|:---:|---------|:------:|
| `health_summary` | R | session totals by state, problem-machine count, pool enabled/disabled | 80–200 |
| `session_list` | R | id, user, type, state, protocol, pool_id, machine_id, start_time (filter user/pool/state) | 60–500 |
| `session_get` | R | one session's projection | 40–100 |
| `machine_list` | R | id, name, pool_id, state, user, agent_version, base_image (filter pool/state) | 60–500 |
| `machine_get` | R | one machine's projection | 40–100 |
| `event_list` | R | time, severity, type, module, user, machine, message (filter severity) | 100–600 |

## Statistics (2 read)
| Tool | R/W | Returns | ~tokens |
|------|:---:|---------|:------:|
| `session_stats` | R | current concurrent, by-state, by-protocol, top pools | 80–200 |
| `pool_utilization` | R | per-pool total/available/in-use/error + utilization % | 80–300 |

## Management (7 read / 2 write)
| Tool | R/W | Notes | ~tokens |
|------|:---:|-------|:------:|
| `pool_list` / `pool_get` | R | pools: type, enabled, assignment | 60–300 |
| `farm_list` | R | RDS farms: type, enabled, server count | 40–200 |
| `app_pool_list` | R | published apps: farm, enabled, executable | 40–300 |
| `entitlement_list` | R | AD principals entitled to a pool | 40–300 |
| `image_list` | R | instant-clone base VMs + snapshots | 60–400 |
| `ad_user_search` | R | resolve AD name → SID (for `entitlement_add`) | 40–200 |
| `pool_set_enabled` | W | enable/disable pool (idempotent, preview) | 40–120 |
| `entitlement_add` / `entitlement_remove` | W | grant/revoke pool access by SID (preview) | 40–120 |

## Ops actions (6 write) — help-desk
| Tool | R/W | Risk | Blast radius |
|------|:---:|:----:|--------------|
| `session_send_message` | W | low | informational, no disruption |
| `session_disconnect` | W | medium | one session, state preserved |
| `session_logoff` | W | high | kicks the user (profile write-back) |
| `machine_maintenance` | W | medium | drains a machine (no new sessions) |
| `machine_reset` | W | high | hard reset — user loses unsaved state |
| `machine_remove` | W | high | removes from pool; deletes VM for instant clones |

## Tasks (1 read / 2 write)
| Tool | R/W | Notes |
|------|:---:|-------|
| `task_status` | R | pool-scoped task status/progress (or all tasks for the pool) |
| `pool_push_image` | W | **critical** — apply pending image; recreates EVERY desktop; preview states affected desktops + in-session users |
| `task_cancel` | W | cancel a running pool task (applied work is not rolled back) |

**Confirmation gate (MCP)**: every write above except `session_send_message` takes `confirm`
(default `false`). Without it the tool returns `{"action": "preview", "blast_radius": {

references/cli-reference.md

# vmware-vdi — CLI Reference

All commands accept `--target/-t <name>` (config target) and `--config/-c <path>` (alternate config file).
Destructive commands accept `--dry-run` (preview only) and interactively double-confirm.

## Setup & diagnostics
```bash
vmware-vdi init [--force] [--skip-test]     # friendly setup: prompt, write config + .env, test, discover pools
vmware-vdi doctor                           # config / credentials / connectivity checks
vmware-vdi mcp                              # run the MCP server (stdio) — the primary MCP entry point
```

## Monitoring & statistics (read-only)
```bash
vmware-vdi health                           # session totals, problem machines, pool availability
vmware-vdi stats                            # concurrency by state/protocol, busiest pools
vmware-vdi utilization                      # per-pool total/available/in-use/error + utilization %
vmware-vdi events [--severity ERROR]        # recent Horizon audit events (newest first)
```

## Sessions
```bash
vmware-vdi session list [--user U] [--pool P] [--state CONNECTED|DISCONNECTED|PENDING]
vmware-vdi session logoff [--id S] [--user U] [--dry-run]        # kicks the user; double-confirm
vmware-vdi session disconnect [--id S] [--user U] [--dry-run]    # state preserved; double-confirm
vmware-vdi session message "<text>" [--user U] [--id S] [--type INFO|WARNING|ERROR]
```

## Machines
```bash
vmware-vdi machine list [--pool P] [--state AGENT_UNREACHABLE|ERROR|...]
vmware-vdi machine reset --id M [--dry-run]                      # hard reset; double-confirm
vmware-vdi machine maintenance --id M --enter|--exit [--dry-run] # double-confirm
vmware-vdi machine remove --id M [--dry-run]                     # deletes VM (instant clone); double-confirm
```

## Pools, images, tasks
```bash
vmware-vdi pool list
vmware-vdi pool set-enabled --id P --enable|--disable [--dry-run]  # disable stops NEW sessions
vmware-vdi pool push-image --id P [--force-logoff] [--dry-run]     # recreates EVERY desktop; double-confirm
vmware-vdi images                                                  # instant-clone base VMs + snapshots
vmware-vdi task status --pool P [--task T]                        # track an image push / provisioning
vmware-vdi task cancel --pool P --task T [--dry-run]              # double-confirm
```

## Farms, apps, entitlements
```bash
vmware-vdi farm list
vmware-vdi app-pool list
vmware-vdi ad-search "<name>"                                     # resolve AD user/group → SID
vmware-vdi entitlement list --pool P
vmware-vdi entitlement add --pool P --sid <SID> [--sid <SID> ...] [--dry-run]
vmware-vdi entitlement remove --pool P --sid <SID> [--dry-run]   # double-confirm
```

references/setup-guide.md

# vmware-vdi — Setup Guide

> **Disclaimer**: Community-maintained open-source project, **not affiliated with, endorsed by, or
> sponsored by VMware, Inc., Broadcom Inc., or Omnissa, LLC.**

## 1. Install
```bash
uv tool install vmware-vdi==1.3.0
```

## 2. Connect (friendly wizard)
```bash
vmware-vdi init
```
Prompts for the **Connection Server host**, admin **username**, AD **domain** (blank for a local admin),
**password**, target name, and TLS verification. It writes `~/.vmware-vdi/config.yaml` +
`~/.vmware-vdi/.env` (chmod 600), tests `/rest/login`, and on success **discovers your pools/machines/
sessions** and prints the next commands to try. Re-run with `--force` to add another Connection Server
(existing targets are preserved; the default is repointed to the new one).

Manual config (`~/.vmware-vdi/config.yaml`):
```yaml
default_target: prod
targets:
  prod:
    host: horizon-cs1.example.com
    username: svc-vdi-ro          # a read-only Horizon role for read commands
    domain: ACME                  # AD domain; blank for a local Connection Server admin
    port: 443
    verify_ssl: true              # false only for a self-signed lab cert
```
Password (never in config.yaml): `~/.vmware-vdi/.env`
```
VMWARE_VDI_PROD_PASSWORD=b64:...    # written by `init`; or export it yourself (plaintext auto-obfuscated)
```

## 3. Verify
```bash
vmware-vdi doctor        # config / credentials / connectivity
```

## 4. Supported versions
- **Primary: VMware Horizon 8.x** (Connection Server REST API `/rest/v1`).
- **Latest Omnissa Horizon** (2406/2412+) — same `/rest/v1` lineage.
- Requires the Connection Server REST API enabled (Horizon 8.0+; audit-events since 2106).

## 5. MCP server
```json
{
  "mcpServers": {
    "vmware-vdi": {
      "command": "vmware-vdi",
      "args": ["mcp"],
      "env": { "VMWARE_VDI_CONFIG": "~/.vmware-vdi/config.yaml" }
    }
  }
}
```
Using the installed `vmware-vdi mcp` console script (not `uvx`) avoids a PyPI re-resolve on every launch —
important behind enterprise TLS proxies.

## Security
> **Disclaimer**: not affiliated with VMware/Broadcom/Omnissa.

- **Credentials**: password only in `~/.vmware-vdi/.env` (chmod 600, obfuscated `b64:` at rest —
  obfuscation, not encryption). For real secrecy, inject `VMWARE_VDI_<TARGET>_PASSWORD` from a secret
  manager (Vault / CyberArk / AWS SM / K8s Secret).
- **Authorization = RBAC**: the skill does not gate read vs write itself. Point a target at a **read-only
  Horizon admin role** and every write is refused at the Connection Server, un-bypassably.
- **TLS**: verification on by default; `verify_ssl: false` is per-target, for self-signed labs only.
- **Prompt-injection**: Connection-Server text is `sanitize()`d (truncated + control chars stripped).
- **Audit**: all writes recorded in `~/.vmware/audit.db` (SQLite WAL) via the shared `@vmware_tool` guard.
- **No outbound calls** other than to the configured Connection Server; no webhooks, no telemetry.

Github ReposUpdated 3d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW

Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular