Repository navigation
What's new
- Import the standalone Parallels RAS skill in Claude Code or Codex without an MCP server or npm installation. The attached ZIP includes the bundled JavaScript runner plus RAS domain and administration references based on Parallels' v21 manuals.
- Query the same 41 RAS resources and two documentation tools through either the MCP server or standalone skill.
- Opt in to documented RAS writes with
RAS_ENABLE_WRITE=true. Both options expose operation discovery and a guarded request tool covering 814 v21.2 POST, PUT, and DELETE method/path pairs. Writes remain disabled by default. - Bound write bodies, reject unsafe paths and redirects, and avoid automatic write retries. HTTP write mode requires a bearer token of at least 32 bytes and limits authenticated concurrency to four requests.
- Harden authentication, response handling, output size, and secret redaction while retaining stdio and HTTP MCP transports.
The default RAS_IGNORE_TLS=true remains for self-signed deployment compatibility. It disables certificate verification process-wide. The README explains the interception risk and how to enable verification with RAS_IGNORE_TLS=false and NODE_EXTRA_CA_CERTS.
Verification
- All 18 automated tests pass, including Node.js 18.14.1 and installation of the skill ZIP outside the source checkout.
- The skill validator passes. Scoped Daybreak reviews covered the write implementation and skill update; the final review reported no open concrete finding.
- The write catalog was checked against the official Parallels v21.2 REST API guide. No live RAS farm or live write operation was used for release validation.