epic: MCP — full coverage, composed tools, safeguards, workflows

[joshrotenberg]

Overview

The MCP server is the AI integration layer. This epic covers expanding tool coverage, adding composed multi-step tools, improving safety, and enabling custom workflows.

Goals

• Tool coverage matches CLI capability
• Multi-step operations are available as composed tools
• Safety defaults (read-only, rate limiting) protect against AI misuse
• Custom workflow prompts enable domain-specific AI interactions

Sub-Issues

Coverage

• feat(mcp): expand to full API coverage #604 — Expand to full API coverage
• Parity audit: CLI commands vs. MCP tools
• Database-level tools (Redis commands, key inspection)

Composed Tools

• feat(mcp): add composed multi-step tools #603 — Add composed multi-step tools
• Subscription + database creation workflow tool
• Health check / diagnostic summary tool
• Migration planning tool

Safety and Guardrails

• feat(mcp): add safeguards and rate limiting #610 — Add safeguards and rate limiting
• Confirmation prompts for destructive operations
• Cost estimation for write operations
• Audit logging for all tool invocations

Workflow Prompts

• feat(mcp): ship built-in Agent Skills and skill authoring guide #644 — Custom workflow prompts from markdown files
• Built-in prompts for common scenarios (troubleshooting, capacity planning)
• User-defined prompt templates

Profile Integration

• feat(mcp): add profile creation tool with elicitation support #646 — Profile creation tool with elicitation support
• Dynamic tool availability based on profile capabilities

Testing

• Expand wiremock-based tool tests
• Test read-only mode enforcement
• Test feature flag combinations (see epic: Testing infrastructure and strategy #628)

Key Paths

• MCP server: crates/redisctl-mcp/src/
• Tool modules: crates/redisctl-mcp/src/tools/
• Prompts: crates/redisctl-mcp/src/prompts.rs