SOC 2 Type II audit in progress · EU, US and India data residency · a DPA you can sign

Trust Center
// docs / how ai works

What the agent can run

Every command the agent can execute, in full — read-only checks, automatic fixes, and the actions that need your approval.

The agent runs commands only from the fixed list below. There is no shell command, and no way to add one remotely — the list is compiled into the agent and enforced again by the server before anything is dispatched.

Read-only checks

These gather evidence and change nothing on the device.

CommandWhat it does
ping_testTests connectivity to a host
tracerouteTraces the network path to a host
get_network_infoReturns current network configuration
get_dns_configReturns configured DNS resolvers
get_open_portsReturns listening ports and their processes
get_firewall_statusReturns firewall state and active profile
get_system_infoReturns OS and hardware details
get_uptimeReturns time since last reboot
get_running_processesReturns top processes by CPU usage
get_installed_softwareReturns list of installed applications
get_startup_itemsReturns programs configured to run at login
get_scheduled_tasksReturns scheduled tasks and cron jobs
get_service_statusReturns the state of a specific service
get_logged_in_usersReturns users with an active session
get_disk_usageReturns disk usage per volume
get_disk_healthReturns SMART health data for physical drives
get_disk_encryption_statusReturns BitLocker, FileVault, or LUKS status
get_cpu_usageReturns current CPU metrics
get_memory_usageReturns current memory metrics
get_hardware_tempsReturns sensor temperatures where available
get_battery_healthReturns battery capacity and cycle count
get_printer_statusReturns printer and print queue state
get_update_statusReturns pending OS update count
get_antivirus_statusReturns antivirus and protection status
get_event_logsReturns recent system event log errors

Remediation

Scoped, reversible fixes. These can run automatically on the categories you have approved.

CommandWhat it does
flush_dnsClears the DNS resolver cache
renew_ipReleases and renews IP configuration
restart_network_adapterRestarts a specific network adapter
reset_network_stackResets the TCP/IP stack — drops active connections
restart_serviceRestarts a specific system service
set_service_startup_typeChanges whether a service starts automatically
restart_print_spoolerRestarts the print spooler and clears stuck jobs
kill_process_by_pidTerminates a specific process by PID
clear_temp_filesClears system temporary files
run_disk_cleanupReclaims disk space beyond temporary files
clear_browser_cacheClears browser cache for the current user
sync_timeResynchronises the system clock with its time source
restart_agentRestarts the FlowTux agent itself

Approval required

Disruptive or irreversible actions. Tux AI can recommend one, but it cannot authorise it — each dispatch carries the approval of a named administrator and is recorded in the audit log.

CommandWhat it does
reboot_deviceRestarts the machine
install_updateInstalls pending operating system updates
uninstall_softwareRemoves an installed application
run_antivirus_scanStarts a full antivirus scan
logoff_userEnds a user session
map_network_driveMounts a network share for a user

Anything outside these three lists is rejected, by the server and by the agent.