cisco-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CISCO_RO_PASSWORD | Yes | Read-only account password for Cisco devices | |
| CISCO_RO_USERNAME | Yes | Read-only account username for Cisco devices | |
| CISCO_PRIV15_PASSWORD | Yes | Privilege-15 account password for IOS/IOS-XE devices | |
| CISCO_PRIV15_USERNAME | Yes | Privilege-15 account username for IOS/IOS-XE devices |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_devicesA | List the switches available in the inventory, with platform and notes. |
| run_show_commandA | Run an arbitrary read-only 'show' command on a device. Only 'show' commands are permitted; the server rejects anything else. On IOS/IOS-XE, 'show running-config' is the only command that escalates to the privilege-15 account -- everything else, and every command on NX-OS, uses the read-only account. |
| get_versionB | Show hardware/software version info ('show version'). |
| get_running_configA | Show the running configuration ('show running-config'). On IOS/IOS-XE this uses the privilege-15 account; on NX-OS the read-only (network-operator) account can already read it. |
| get_inventory_hwA | Show chassis/module/serial inventory ('show inventory'). |
| get_clockB | Show the device's current time ('show clock'). |
| get_logsA | Show the device's log buffer ('show logging'). Can be large on busy devices. |
| get_cpuA | Show CPU utilization. IOS/IOS-XE: 'show processes cpu history'. NX-OS: 'show system resources'. |
| get_memoryA | Show memory utilization. IOS/IOS-XE: 'show memory statistics'. NX-OS: 'show system resources'. |
| get_environmentA | Show environmental info -- power, fans, temperature ('show environment'). |
| get_poe_statusA | Show PoE inline power status ('show power inline'). Only meaningful on PoE switches. |
| get_interfacesB | Show interface details ('show interfaces'). |
| get_interface_statusB | Show a brief interface status table ('show ip interface brief'). |
| get_vlansA | Show configured VLANs ('show vlan brief'). |
| get_trunksA | Show trunk interfaces and allowed VLANs ('show interfaces trunk'). |
| get_spanning_treeA | Show spanning-tree state per VLAN ('show spanning-tree'). |
| get_etherchannelsC | Show link-aggregation state. IOS/IOS-XE: 'show etherchannel summary'. NX-OS: 'show port-channel summary'. |
| get_mac_address_tableA | Show the MAC address table ('show mac address-table'). |
| get_arp_tableB | Show the ARP table ('show ip arp'). |
| get_routing_tableA | Show the IPv4 routing table ('show ip route'). |
| get_ospf_neighborsA | Show OSPF neighbors ('show ip ospf neighbor'). |
| get_bgp_summaryA | Show BGP peer summary ('show ip bgp summary'). |
| get_eigrp_neighborsB | Show EIGRP neighbors ('show ip eigrp neighbors'). |
| get_cdp_neighborsA | Show directly connected Cisco neighbors ('show cdp neighbors detail'). |
| get_lldp_neighborsA | Show LLDP neighbors, including non-Cisco devices ('show lldp neighbors detail'). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 25 tools
Each tool targets a distinct resource or protocol: EIGRP, OSPF, BGP, CDP, and LLDP neighbors are clearly separated, and other tools cover unique aspects like CPU, memory, VLANs, or MAC tables. Even run_show_command is unambiguous because it is the generic fallback, while the specific getters are purpose-built for their particular show command.
The vast majority follow a consistent get_<resource> pattern (e.g., get_cpu, get_vlans). Two exceptions exist: list_devices uses a different verb, and run_show_command is a non-get generic action. These are minor deviations that do not obscure the overall structure, but they prevent a perfect score.
With 25 tools, this set sits in the 16-25 range that feels heavy for a tool surface. While each tool is justified for network monitoring, the count is above the typical well-scoped range of 3-15 tools, making it borderline excessive.
The tool set comprehensively covers the read-only monitoring domain for Cisco devices, including neighbors, inventory, performance metrics, Layer 2/3 state, and configuration. The inclusion of run_show_command ensures there are no dead ends—any missing show command can be executed through this generic escape hatch.