Log inSubmit server
Cisco SD WAN MCP Server logo

Cisco SD WAN MCP Server

Read-only MCP access to Cisco Catalyst SD-WAN Manager for inventory, health, alarms, path quality, templates, and policies.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Cisco SD WAN MCP Server

Pick your client, then add it in one click or paste the config.

STDIOPython
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "cisco-sd-wan-mcp-server": {
      "command": "uvx",
      "args": [
        "cisco-sdwan-mcp"
      ],
      "env": {
        "SDWAN_VMANAGE_URL": "YOUR_VALUE_HERE",
        "SDWAN_VMANAGE_HOST": "YOUR_VALUE_HERE",
        "SDWAN_VMANAGE_PORT": "YOUR_VALUE_HERE",
        "SDWAN_USERNAME": "YOUR_VALUE_HERE",
        "SDWAN_PASSWORD": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

Cisco SD-WAN MCP Server MCP server connects MCP clients to Cisco Catalyst SD-WAN Manager (vManage) through FastMCP. It exposes projected, count-aware tools for fabric inventory, device health, control and data plane state, alarms, tunnels, templates, policies, and configuration data. Use it to investigate SD-WAN issues with controller-backed results; configuration-changing tools remain disabled unless explicitly enabled and confirmed.

Use cases

  • Inspect the SD-WAN fabric inventory and reachability
  • Diagnose device health and control-plane connectivity
  • Review alarms, events, and degraded tunnels
  • Query templates, policies, and running configuration
  • Enable and confirm selected configuration changes

Key features

  • Cisco Catalyst SD-WAN Manager connectivity
  • Fabric inventory and device health tools
  • Alarms, events, tunnel, and interface statistics
  • Templates, policies, profiles, and configuration groups
  • Read-only default with gated write operations
  • HTTP and stdio MCP transports

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

7/7 checks healthy over the last 46d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 12d ago via OSV.dev · cisco-sdwan-mcp (PyPI)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
Last commit1mo agoMost recent push to the default branch.

How Cisco SD WAN MCP Server works

What Cisco SD-WAN MCP Server MCP server does

Cisco SD-WAN MCP Server MCP server gives an MCP client access to operational data from Cisco Catalyst SD-WAN Manager (vManage). It covers fabric inventory, device reachability, system status, control connections, BFD sessions, OMP peers, interfaces, alarms, events, tunnel quality, interface statistics, templates, policies, configuration groups, feature profiles, parcels, and running configuration.

The default operating mode is read-only. Configuration-changing operations are not registered unless write support is enabled, and enabled write calls still require explicit human confirmation before reaching vManage. This makes the default deployment suitable for investigation and reporting with a vManage account that has read-only privileges.

How it works

The package is built with FastMCP and can expose MCP over HTTP or stdio. HTTP uses port 8000 and provides the MCP endpoint at /mcp; the default HTTP bind address is 0.0.0.0. A health endpoint is available at /healthz.

Tools return selected fields rather than unfiltered vManage records. This keeps large fabric responses usable by language models, while detailed=true can request fuller results where supported. List operations include both count and returned, distinguishing the number of matching records from the number included in the response. Authentication, connectivity, invalid credentials, and unknown resources are returned as readable tool results instead of unhandled errors.

The server also provides four workflow prompts and three resources, although the supplied reference does not detail their individual names or contents.

Setup and configuration

Cisco SD-WAN MCP Server MCP server requires Python 3.11 or newer and a reachable vManage controller with an account. It can be run from PyPI with uvx cisco-sdwan-mcp or installed with pip. A source checkout supports uv sync --extra dev or editable pip installation.

Set SDWAN_VMANAGE_URL, SDWAN_USERNAME, and SDWAN_PASSWORD before startup. SDWAN_VMANAGE_HOST with SDWAN_VMANAGE_PORT can be used instead of a full URL. The server reads .env from the repository root by default; SDWAN_ENV_FILE selects another file without overwriting variables already present in the environment.

Useful settings include SDWAN_VERIFY_SSL, SDWAN_CA_BUNDLE, SDWAN_TIMEOUT, SDWAN_PAGE_SIZE, and SDWAN_ENABLE_WRITES. Server behavior can be adjusted with MCP_TRANSPORT, MCP_HOST, MCP_PORT, MCP_AUTH, MCP_SERVER_NAME, and LOG_LEVEL. For private or self-signed controller certificates, a CA bundle is preferred; disabling verification is documented as a last resort for controlled labs.

Tools and capabilities

The read-oriented tool groups include:

  • Inventory and fabric summaries
  • Device health and control-plane status
  • Alarms and events
  • Tunnel and interface performance
  • Device templates, feature templates, and policies
  • Configuration groups, feature profiles, parcels, variables, and running configuration

Optional write tools can attach device templates, activate vSmart policies, update parcels or CLI add-ons, deploy configuration groups, and check task status. They are exposed only when SDWAN_ENABLE_WRITES=true and remain subject to confirmation.

Limitations and notes

The server depends on vManage reachability and valid credentials. The vManage account's permissions remain the primary access boundary. MCP client authentication is separate from the credentials used by the server to access vManage.

The default page size is 100 records per tool call, so callers should use returned counts when interpreting lists. HTTP deployments should also configure MCP_AUTH when clients must authenticate to the MCP server. Clients without MCP elicitation cannot silently perform enabled writes; a write call is refused unless an explicit confirmation path is supplied.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Cisco SD WAN MCP Server

Cisco SD-WAN MCP Server is an MCP server that connects AI clients to Cisco Catalyst SD-WAN Manager (vManage). Its main tools query fabric inventory, device health, alarms, events, tunnel quality, templates, policies, configuration groups, profiles, and running configuration, with optional gated tools for configuration changes.

Install it from PyPI with `uvx cisco-sdwan-mcp` or `pip install cisco-sdwan-mcp`. Source users can clone the repository and install its development dependencies with uv or pip. Python 3.11 or newer is required.

Set `SDWAN_VMANAGE_URL`, `SDWAN_USERNAME`, and `SDWAN_PASSWORD`, then start the module with `python -m cisco_sdwan_mcp.server`. You can use `SDWAN_VMANAGE_HOST` and `SDWAN_VMANAGE_PORT` instead of a full controller URL.

No, configuration-changing tools are disabled by default. Set `SDWAN_ENABLE_WRITES=true` to register them, and each enabled call still requires explicit human confirmation before it is sent to vManage.

Connect the client to the configured MCP transport. The default HTTP endpoint is `http://localhost:8000/mcp`; the server can also be configured for stdio with `MCP_TRANSPORT=stdio`. HTTP deployments can use `MCP_AUTH` for client authentication.

Related MCP servers

All in Developer Tools All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewCisco SD WAN MCP Server AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/cisco-sd-wan-mcp-server?style=directory)](https://allmcps.com/mcp/cisco-sd-wan-mcp-server)
HTML Embed
<a href="https://allmcps.com/mcp/cisco-sd-wan-mcp-server"><img src="https://allmcps.com/api/badge/cisco-sd-wan-mcp-server?style=directory" alt="Cisco SD WAN MCP Server on AllMCPs" /></a>