ACI MCP Server

# ACI Model Context Protocol (MCP) Server A comprehensive MCP server for configuring and managing Cisco ACI (Application Centric Infrastructure) fabrics through the APIC REST API. ## Overview This MCP server provides 35+ tools for complete ACI fabric management, including: - **Tenant Management**: Create, list, get, update, and delete tenants - **Application Profiles**: Manage application profiles within tenants - **Endpoint Groups (EPGs)**: Configure and manage endpoint groups - **Bridge Domains**: Create and manage Layer 2 domains - **VRFs**: Manage Virtual Routing and Forwarding instances - **Contracts**: Define and manage security policies - **Health Monitoring**: Monitor fabric health and faults - **Node Management**: Manage fabric nodes and interfaces ## Installation ### Prerequisites - Node.js 18+ and npm - Access to a Cisco APIC controller - Valid APIC credentials (username/password or certificate) ### Setup 1. **Clone and Install**: ```bash cd aci-mcp-server npm install ``` 2. **Configure Authentication**: **Option A: Environment Variables** ```bash cp .env.example .env # Edit .env with your APIC details export ACI_APIC_URL="https://your-apic.domain.com" export ACI_USERNAME="admin" export ACI_PASSWORD="your_password" ``` **Option B: Configuration Files** ```bash cp aci-config.json.example aci-config.json # Edit aci-config.json with your settings ``` **Option C: Certificate Authentication** ```bash export ACI_APIC_URL="https://your-apic.domain.com" export ACI_USERNAME="admin" export ACI_CERT_NAME="your-cert-name" export ACI_PRIVATE_KEY_PATH="/path/to/private.key" ``` 3. **Build the Server**: ```bash npm run build ``` 4. **Test Connection**: ```bash npm start # Should connect to APIC and display available tools ``` ## Configuration ### Authentication Methods The server supports two authentication methods: 1. **Username/Password**: Standard APIC login 2. **Certificate**: X.509 certificate-based authentication (recommended for production) ### Tool Configuration Configure which tools are available using `aci-mcp-config.json`: ```json { "serverConfig": { "name": "aci", "toolSelectionMode": "whitelist", "enableAllTools": false, "tenantFocus": "production" }, "toolConfiguration": { "enabledTools": ["list_tenants", "get_fabric_health", ...], "disabledTools": [] } } ``` **Tool Modes**: - `core`: Essential tools (35 tools) - Default - `all`: All available tools (50+ tools) **Environment Variable Configuration**: ```bash export ACI_TOOL_MODE=core # or 'all' export ACI_TENANT_FOCUS=production # Focus on specific tenant ``` ## Available Tools ### Tenant Management (5 tools) - `list_tenants` - List all tenants - `get_tenant` - Get specific tenant details - `create_tenant` - Create new tenant - `update_tenant` - Update tenant configuration - `delete_tenant` - Delete tenant ### Application Profile Management (5 tools) - `list_application_profiles` - List application profiles - `get_application_profile` - Get specific application profile - `create_application_profile` - Create new application profile - `update_application_profile` - Update application profile - `delete_application_profile` - Delete application profile ### Endpoint Group Management (6 tools) - `list_endpoint_groups` - List endpoint groups - `get_endpoint_group` - Get specific EPG details - `create_endpoint_group` - Create new EPG - `update_endpoint_group` - Update EPG configuration - `delete_endpoint_group` - Delete EPG - `get_endpoint_group_stats` - Get EPG statistics ### Bridge Domain Management (5 tools) - `list_bridge_domains` - List bridge domains - `get_bridge_domain` - Get specific bridge domain - `create_bridge_domain` - Create new bridge domain - `update_bridge_domain` - Update bridge domain - `delete_bridge_domain` - Delete bridge domain ### VRF Management (5 tools) - `list_vrfs` - List VRFs - `get_vrf` - Get specific VRF details - `create_vrf` - Create new VRF - `update_vrf` - Update VRF configuration - `delete_vrf` - Delete VRF ### Contract Management (8 tools) - `list_contracts` - List contracts - `get_contract` - Get contract details - `create_contract` - Create new contract - `update_contract` - Update contract - `delete_contract` - Delete contract - `list_filters` - List filters - `create_filter` - Create new filter - `delete_filter` - Delete filter ### Health & Monitoring (8 tools) - `get_fabric_health` - Get overall fabric health - `list_faults` - List fabric faults - `get_fault_summary` - Get fault summary by severity - `list_nodes` - List fabric nodes - `get_node_health` - Get node health status - `list_interfaces` - List fabric interfaces - `get_interface_stats` - Get interface statistics - `get_system_info` - Get APIC system information