NetMCP
Provides tools for optimizing Linux network performance, including TCP tuning, traffic control, firewall management, and benchmarking, via sysctl, tc, and nft commands.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@NetMCPoptimize my network for gaming"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🌐 NetMCP
AI-Powered Linux Network Optimization via Model Context Protocol
Transform natural language into optimized network configurations
🔴 Live Server · Getting Started · Features · Profiles · Architecture · Tools
🔴 Live Server
NetMCP is live in production on FastMCP Cloud! Connect your MCP client to:
https://netmcp.fastmcp.app/mcpNo installation required—just point your AI assistant to the hosted server and start optimizing.
Related MCP server: systerd-lite
🎯 Overview
NetMCP is an MCP server that enables AI assistants like Claude to intelligently optimize Linux network performance. It bridges the gap between high-level optimization goals ("optimize my network for gaming") and low-level Linux commands (sysctl, tc, nft).
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ AI Assistant │ MCP │ NetMCP │ │ Linux Kernel │
│ (Claude, etc) │◄────►│ Server │─────►│ Network Stack │
└──────────────────┘ └──────────────────┘ └──────────────────┘
▲ │
│ ▼
Natural Language 29 Config Cards
"Reduce my latency" 5 Profiles
40+ Tools✨ Why NetMCP?
Traditional Approach | With NetMCP |
Manual | Declarative optimization plans |
Copy-paste commands from forums | Research-backed profiles |
No rollback on failure | Automatic checkpoints & rollback |
Trial and error | Validated against safety policies |
Root access chaos | Controlled privileged execution |
🚀 Getting Started
Prerequisites
Linux (Ubuntu 20.04+, Debian 11+, or similar)
Python 3.10+
Network tools:
ip,sysctl,tc,nft
Installation
git clone https://github.com/SurriyaGokul/mcp-net-optimizer.git
cd mcp-net-optimizer
python -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
# Enable privileged commands (one-time setup)
./setup_sudo.shConfigure with Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"netmcp": {
"command": "python",
"args": ["-m", "server.main"],
"cwd": "/path/to/mcp-net-optimizer"
}
}
}Run Standalone
python -m server.main⚡ Features
🎴 29 Configuration Cards
Full coverage of the Linux networking stack:
16 Sysctl cards — TCP tuning, buffers, congestion control
8 Traffic Control cards — QoS, shaping, queuing
5 Firewall cards — Rate limiting, connection tracking, NAT
🛡️ Enterprise Safety
Production-ready security features:
Command allowlisting — Only approved binaries execute
Automatic checkpoints — Snapshot before every change
Instant rollback — One command to restore state
Audit logging — Complete execution history
🔧 40+ MCP Tools
Comprehensive network management:
Discovery — Interfaces, routes, DNS, latency tests
Planning — Type-safe optimization plans
Validation — Policy enforcement before execution
Execution — Atomic apply with rollback
Benchmarking — Before/after performance comparison
🔐 Sudo Management
Flexible privilege escalation:
Passwordless setup — Run
./setup_sudo.shonceCached credentials — Authenticate once, cached 15 min
MCP tools —
check_sudo_access,request_sudo_accessSecure by default — Only allowlisted commands
🎮 Optimization Profiles
Five research-backed profiles optimized for specific workloads:
Profile | Focus | Key Optimizations | Target Metrics |
🎮 Gaming | Ultra-low latency | BBR, tcp_low_latency, fq qdisc | <20ms p95, <5ms jitter |
📺 Streaming | Max throughput | Large buffers, BBR, HTB shaping | 90%+ link utilization |
📞 Video Calls | Balanced | DSCP marking, moderate buffers | <150ms latency (ITU-T) |
📦 Bulk Transfer | Maximum bandwidth | 128MB buffers, aggressive BBR | >1Gbps sustained |
🖥️ Server | High concurrency | SYN cookies, conntrack, rate limits | 10K+ connections |
Example: Gaming Optimization
plan = {
"iface": "eth0",
"profile": "gaming",
"changes": {
"sysctl": {
"net.ipv4.tcp_congestion_control": "bbr",
"net.ipv4.tcp_low_latency": "1",
"net.core.default_qdisc": "fq"
},
"qdisc": {"type": "fq"}
}
}🏗️ Architecture
Pipeline Flow
DISCOVER PLAN VALIDATE RENDER APPLY
┌─────────┐ ┌─────────┐ ┌─────────┐ ┌─────────┐ ┌─────────┐
│ Inspect │───►│ Declare │─────►│ Check │────►│Generate │────►│ Execute │
│ System │ │ Intent │ │ Policies│ │Commands │ │ Safely │
└─────────┘ └─────────┘ └─────────┘ └─────────┘ └─────────┘
│ │ │ │ │
30+ tools Pydantic Policy YAML sysctl/tc/ Checkpoint
No side schemas validation nft scripts + Rollback
effectsProject Structure
mcp-net-optimizer/
├── server/
│ ├── main.py # MCP server entry point
│ ├── registry.py # Tool & resource registration
│ ├── schema/models.py # Pydantic data models
│ └── tools/
│ ├── discovery.py # 30+ system inspection tools
│ ├── planner.py # Plan → Commands renderer
│ ├── validator.py # Policy validation
│ ├── validation_engine.py # Before/after comparison
│ ├── validation_metrics.py # Network benchmarks
│ ├── audit_log.py # Execution logging
│ ├── apply/ # Command executors
│ │ ├── apply.py # Orchestration + rollback
│ │ ├── checkpoints.py
│ │ ├── sysctl.py
│ │ ├── tc.py
│ │ └── nft.py
│ └── util/
│ ├── shell.py # Safe command execution
│ └── policy_loader.py
├── policy/
│ ├── config_cards/ # 29 YAML card definitions
│ ├── profiles.yaml # 5 optimization profiles
│ └── validation_limits.yaml
└── setup_sudo.sh # Passwordless sudo setup🔧 MCP Tools
Discovery (No Side Effects)
Tool | Description |
| Network interfaces and addresses |
| Routing table |
| ICMP latency test |
| Network path analysis |
| Traffic control status |
| Firewall rules |
| Socket statistics |
Planning & Validation
Tool | Description |
| Validate plan against policies |
| Convert plan to executable commands |
| Run comprehensive benchmarks |
| Compare before/after results |
Execution & Safety
Tool | Description |
| Execute with checkpoint + rollback |
| Manual checkpoint creation |
| Restore previous state |
| View available checkpoints |
Privilege Management
Tool | Description |
| Check if sudo is available |
| Authenticate for temporary access |
| Setup help |
📊 Benchmarking & Validation
NetMCP includes a complete validation pipeline to measure optimization impact:
# 1. Run baseline benchmark
before = test_network_performance_tool(profile="gaming")
# 2. Apply optimizations
apply_rendered_plan_tool(rendered_plan)
# 3. Run post-optimization benchmark
after = test_network_performance_tool(profile="gaming")
# 4. Compare and validate
result = validate_configuration_changes_tool(before, after, "gaming")
# → {"decision": "KEEP", "score": 75, "summary": "Latency improved 15%"}Validation Decisions
Score | Decision | Action |
≥60 | KEEP | Changes improved performance |
20-59 | UNCERTAIN | Mixed results, review recommended |
<20 | ROLLBACK | Performance degraded, auto-rollback available |
🔒 Security Model
Command Allowlisting
Only explicitly approved binaries can execute:
# server/config/allowlist.yaml
binaries:
- /usr/sbin/sysctl
- /usr/sbin/tc
- /usr/sbin/nft
- /usr/bin/ping
- /usr/bin/iperf3
# ... etcPrivilege Escalation
Three options for sudo access:
Permanent (Recommended): Run
./setup_sudo.sh— configures passwordless sudo for network commands onlySession-based: Use
request_sudo_access_tool(password="...")— caches for 15 minutesManual: Run
sudo -vin terminal before using MCP
📈 Performance Results
Real-world improvements measured across profiles:
Profile | Metric | Improvement |
Gaming | Latency | 10-30% reduction |
Gaming | Jitter | 20-40% reduction |
Streaming | Throughput | 2-4× on congested links |
Video Calls | Connection time | 15-25% faster |
Server | Connection capacity | 10× increase |
🤝 Contributing
Contributions are welcome! Areas of interest:
Additional configuration cards
New optimization profiles
Cross-platform support
Performance benchmarks
Documentation improvements
📄 License
MIT License — see LICENSE for details.
Built with ❤️ for the AI-native networking future
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/SurriyaGokul/NetMCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server