Tested with QEMU version:

    qemu-system-x86-2.3.1-3.fc22.x86_64


Start QEMU in QMP mode with unix socket:

    $ qemu-system-x86_64 [. . .] -qmp unix:./qmp-sock,server --monitor stdio


Then traverse to QEMU source: qemu/scripts/qmp:

$ ./qmp-shell /export/qemu-drive-mirror-crash-test/qmp-sock
Welcome to the QMP low-level shell!
Connected to QEMU 2.3.1
(QEMU)
(QEMU) query-
query-acpi-ospm-status              query-commands                      query-machines                      query-named-block-nodes             query-tpm-types
query-balloon                       query-cpu-definitions               query-memdev                        query-pci                           query-uuid
query-block                         query-cpus                          query-memory-devices                query-rx-filter                     query-version
query-block-jobs                    query-dump-guest-memory-capability  query-mice                          query-spice                         query-vnc
query-blockstats                    query-events                        query-migrate                       query-status                        query-vnc-servers
query-chardev                       query-fdsets                        query-migrate-cache-size            query-target                        
query-chardev-backends              query-iothreads                     query-migrate-capabilities          query-tpm                           
query-command-line-options          query-kvm                           query-name                          query-tpm-models                    
(QEMU)

(QEMU)<TAB>
Display all 117 possibilities? (y or n)
add-fd                                  device_add                              qom-set                                 query-target
add_client                              device_del                              query-acpi-ospm-status                  query-tpm
balloon                                 drive-backup                            query-balloon                           query-tpm-models
block-commit                            drive-mirror                            query-block                             query-tpm-types
block-job-cancel                        dump-guest-memory                       query-block-jobs                        query-uuid
block-job-complete                      eject                                   query-blockstats                        query-version
block-job-pause                         expire_password                         query-chardev                           query-vnc
block-job-resume                        getfd                                   query-chardev-backends                  query-vnc-servers
block-job-set-speed                     human-monitor-command                   query-command-line-options              quit
block-set-write-threshold               inject-nmi                              query-commands                          remove-fd
block-stream                            memsave                                 query-cpu-definitions                   ringbuf-read
block_passwd                            migrate                                 query-cpus                              ringbuf-write
block_resize                            migrate-incoming                        query-dump-guest-memory-capability      rtc-reset-reinjection
block_set_io_throttle                   migrate-set-cache-size                  query-events                            screendump
blockdev-add                            migrate-set-capabilities                query-fdsets                            send-key
blockdev-backup                         migrate_cancel                          query-iothreads                         set_link
blockdev-snapshot-delete-internal-sync  migrate_set_downtime                    query-kvm                               set_password
blockdev-snapshot-internal-sync         migrate_set_speed                       query-machines                          stop
blockdev-snapshot-sync                  nbd-server-add                          query-memdev                            system_powerdown
change                                  nbd-server-start                        query-memory-devices                    system_reset
change-backing-file                     nbd-server-stop                         query-mice                              system_wakeup
change-vnc-password                     netdev_add                              query-migrate                           trace-event-get-state
chardev-add                             netdev_del                              query-migrate-cache-size                trace-event-set-state
chardev-remove                          object-add                              query-migrate-capabilities              transaction
client_migrate_info                     object-del                              query-name                              x-input-send-event
closefd                                 pmemsave                                query-named-block-nodes                 xen-save-devices-state
cont                                    qmp_capabilities                        query-pci                               xen-set-global-dirty-log
cpu                                     qom-get                                 query-rx-filter                         
cpu-add                                 qom-list                                query-spice                             
device-list-properties                  qom-list-types                          query-status                            
(QEMU)