Wi-Fi / LAN & Device Discovery

Who is on your network — and what every device is.

8 tools — 6 read-only, 2 that always ask your approval first.

Read-only tools never modify anything; anything that changes your Mac pauses on an Approve card first.

8 shown

scan_lan_devices Read-only

Scan the local Wi-Fi/LAN for every connected device (ping-sweep + ARP + Bonjour + vendor lookup, ~15-30s). Returns the full roster: each device's IP, MAC, detected name, hardware vendor, kind, whether it is online, and whether it is in the user's known-device baseline (known=false means it is NEW/unrecognised).

get_access_snapshot Read-only

Capture this Mac's local security posture: its IP and gateway, the Wi-Fi SSID, how many ports are open, which remote-access doors (SSH / Screen Sharing / Remote Management) are reachable from the network, how many admin accounts exist, and the count of recent sign-ins.

explain_device Read-only

Look up one device already in the roster by its IP or MAC and return its details (name, vendor, kind, online, known-status).

probe_device_ports Read-only

Check which common TCP ports are open on one device on the local network. A device with open service ports (e.g. 80/443/445/5900) usually exposes a web UI or file share; a totally silent device with no open ports is typically a cloud-only gadget (smart plug, switch, sensor).

ping_host Read-only

Send a single ping to one device on the local network and report whether it is reachable and its round-trip time.

arp_lookup Read-only

Read the MAC (hardware) address the Mac has cached for one LAN IP via the ARP table. Useful to confirm a device's MAC and infer its vendor.

mark_device_known Asks first

Add a device to the user's known-device baseline so it is no longer flagged as new.

rename_device Asks first

Give a device a friendly name in the roster (e.g. 'Underfloor heating thermostat'). Stored encrypted on-device only.