How do I install the Vpn Toggle skill?

Run npx skillmds@latest add ng4567/vpn-toggle in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Vpn Toggle safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Vpn Toggle?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Vpn Toggle free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Vpn Toggle?

ng4567 (@ng4567) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Vpn Toggle by ng4567 — Agent Skill

Name: Vpn Toggle
Author: ng4567

Vpn Toggle

Ensures the Microsoft corporate VPN is connected before invoking any whitelisted MCP server (plugin) or tool. Reads the user-defined whitelist in vpn-toggle/whitelist.yaml, checks whether the MSFT-AzVPN-Manual connection is up, and runs `rasdial "MSFT-AzVPN-Manual"` to bring it up if it is not. Use whenever about to call a tool from a plugin/MCP server that requires corpnet access (e.g., mcaps-iq, msx).

ng4567 303d30e 5 files · 5.6 KB Updated Sep 17, 2026

File contents

VPN Toggle

This skill guards corpnet-only MCP servers and tools. Before any tool call against a whitelisted plugin or tool name, it verifies the Microsoft VPN (MSFT-AzVPN-Manual) is connected and dials it if not.

When to Use

Run this skill (or its check step) before invoking any tool from a plugin/MCP server listed in vpn-toggle/whitelist.yaml. It is safe to call repeatedly — it is a no-op when the VPN is already up.

By default the whitelist enables:

mcaps-iq (MCAPS-IQ MCP plugin and all mcaps-iq:* tools)
msx (MSX MCP server and all msx-* tools)

Add or remove entries by editing vpn-toggle/whitelist.yaml.

Procedure

Load the whitelist
- Read vpn-toggle/whitelist.yaml from this skill's folder.
- Collect the set of whitelisted plugin names (plugins:) and tool names (tools:).
Decide if a guard is needed
- If the next intended tool call's plugin OR tool name matches the whitelist, continue. Otherwise skip.
Check VPN status
- Run: rasdial
- Parse the output. If a line containing MSFT-AzVPN-Manual appears under "Connected to", the VPN is up — proceed with the original tool call.
- If the output is No connections or does not list MSFT-AzVPN-Manual, go to step 4.
Connect the VPN
- Run: rasdial "MSFT-AzVPN-Manual"
- If the command exits 0, the VPN is up — proceed.
- If it fails (e.g., requires interactive credentials, smart card, or MFA prompt), surface the exact stderr to the user and stop. Do not retry silently.
Proceed
- Invoke the original whitelisted tool/plugin call.

Notes

This skill only runs rasdial and rasdial "MSFT-AzVPN-Manual". It never disconnects the VPN.
The whitelist file lives at vpn-toggle/whitelist.yaml relative to the installed skill directory.
Plugin matching is by exact plugin name (e.g., msx, mcaps-iq). Tool matching is by exact tool name (e.g., msx-get_milestones) and overrides plugin-level rules when more specific.
If rasdial is unavailable (non-Windows), report this to the user and stop — do not attempt a workaround.

---name: vpn-toggledescription: Ensures the Microsoft corporate VPN is connected before invoking any whitelisted MCP server (plugin) or tool. Reads the user-defined whitelist in vpn-toggle/whitelist.yaml, checks whether the MSFT-AzVPN-Manual connection is up, and runs `rasdial "MSFT-AzVPN-Manual"` to bring it up if it is not. Use whenever about to call a tool from a plugin/MCP server that requires corpnet access (e.g., mcaps-iq, msx).license: MIT---# VPN ToggleThis skill guards corpnet-only MCP servers and tools. Before any tool call against a whitelisted plugin or tool name, it verifies the Microsoft VPN (`MSFT-AzVPN-Manual`) is connected and dials it if not.## When to UseRun this skill (or its check step) **before** invoking any tool from a plugin/MCP server listed in `vpn-toggle/whitelist.yaml`. It is safe to call repeatedly — it is a no-op when the VPN is already up.By default the whitelist enables:- `mcaps-iq` (MCAPS-IQ MCP plugin and all `mcaps-iq:*` tools)- `msx` (MSX MCP server and all `msx-*` tools)Add or remove entries by editing `vpn-toggle/whitelist.yaml`.## Procedure1. **Load the whitelist** - Read `vpn-toggle/whitelist.yaml` from this skill's folder. - Collect the set of whitelisted plugin names (`plugins:`) and tool names (`tools:`).2. **Decide if a guard is needed** - If the next intended tool call's plugin OR tool name matches the whitelist, continue. Otherwise skip.3. **Check VPN status** - Run: `rasdial` - Parse the output. If a line containing `MSFT-AzVPN-Manual` appears under "Connected to", the VPN is up — proceed with the original tool call. - If the output is `No connections` or does not list `MSFT-AzVPN-Manual`, go to step 4.4. **Connect the VPN** - Run: `rasdial "MSFT-AzVPN-Manual"` - If the command exits 0, the VPN is up — proceed. - If it fails (e.g., requires interactive credentials, smart card, or MFA prompt), surface the exact stderr to the user and stop. Do not retry silently.5. **Proceed** - Invoke the original whitelisted tool/plugin call.## Notes- This skill only runs `rasdial` and `rasdial "MSFT-AzVPN-Manual"`. It never disconnects the VPN.- The whitelist file lives at `vpn-toggle/whitelist.yaml` relative to the installed skill directory.- Plugin matching is by exact plugin name (e.g., `msx`, `mcaps-iq`). Tool matching is by exact tool name (e.g., `msx-get_milestones`) and overrides plugin-level rules when more specific.- If `rasdial` is unavailable (non-Windows), report this to the user and stop — do not attempt a workaround.

Frequently asked questions