vyos-mcp
This server (mcp-server-vyos) provides an MCP interface to manage and monitor a VyOS router via its HTTPS REST API, covering configuration, diagnostics, system operations, and live documentation lookup.
Configuration & State Reading
vyos_retrieve— Read configuration at any pathvyos_return_values— Get multi-valued config node valuesvyos_exists— Check if a configuration path existsvyos_config_diff— Compare running config vs. saved config or a specific revisionvyos_config_history— List revision history with timestamps, users, and methods
Configuration Changes
vyos_configure— Apply a batch of set/delete operations atomically with commit-confirm (auto-reverts in 5 min unless confirmed)vyos_confirm— Confirm a pending commit-confirm to make changes permanentvyos_validate— Validate config syntax without persistingvyos_save/vyos_load/vyos_merge— Save, load, or merge configuration files
Operational / Show Commands
vyos_info— Get system infovyos_show— Run any operationalshowcommandvyos_traceroute— Traceroute with structured MTR reportvyos_interface_stats— RX/TX counters, errors, and link statevyos_system_resources— CPU, memory, storage, and uptime snapshotvyos_route_table— View routing table filtered by family and protocolvyos_firewall_stats— Firewall and NAT rule hit countersvyos_bgp_summary— BGP neighbor summary (state, uptime, prefixes received)
System Operations
vyos_generate— Generate keys, certificates, etc.vyos_reset— Run reset commands (e.g., reset BGP peers)vyos_reboot/vyos_poweroff— Reboot or power off the router (with warnings)vyos_image_add/vyos_image_delete— Manage system images
Documentation
vyos_docs_search— Search live VyOS documentation by topicvyos_docs_read— Read a specific VyOS documentation page (cached 1 hour)
Safety Features
Read-only mode (
VYOS_READ_ONLY=true) restricts the server to non-mutating toolsConfig changes use commit-confirm by default, auto-reverting if not confirmed within 5 minutes
Destructive operations include explicit warning descriptions
Accepts self-signed TLS certificates by default
Fetches and searches live VyOS documentation from the vyos-documentation repository on GitHub to provide documentation lookup tools.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@vyos-mcpshow me the current interfaces and the active routing table"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-server-vyos
MCP server for VyOS router management via the HTTPS REST API. Provides both router management tools and live VyOS documentation lookup.
Installation
pip install mcp-server-vyosRelated MCP server: vyos-mcp
Configuration
Set environment variables:
VYOS_URL— Router API endpoint (e.g.,https://vyos.example.com)VYOS_API_KEY— API key for authenticationVYOS_READ_ONLY— Set totrueto disable all mutating tools (config changes, reboot, poweroff, etc.)
VyOS Router Setup
Enable the HTTPS API on your VyOS router:
configure
set service https api keys id my-mcp-key key <your-api-key>
set service https api rest
commit
saveClaude Code
Add to your MCP client configuration:
{
"mcpServers": {
"vyos": {
"command": "mcp-server-vyos",
"env": {
"VYOS_URL": "https://vyos.example.com",
"VYOS_API_KEY": "your-api-key"
}
}
}
}Read-Only Mode
For safe, query-only access (monitoring, investigation, documentation lookup), enable read-only mode:
{
"mcpServers": {
"vyos": {
"command": "mcp-server-vyos",
"env": {
"VYOS_URL": "https://vyos.example.com",
"VYOS_API_KEY": "your-api-key",
"VYOS_READ_ONLY": "true"
}
}
}
}This registers only non-mutating tools: vyos_info, vyos_retrieve, vyos_return_values, vyos_exists, vyos_config_diff, vyos_config_history, vyos_show, vyos_traceroute, vyos_interface_stats, vyos_system_resources, vyos_route_table, vyos_firewall_stats, vyos_bgp_summary, vyos_docs_search, and vyos_docs_read.
Tools
Router Management
Tool | Description |
| System info (no auth required) |
| Read configuration at a path |
| Get multi-valued config node values |
| Check if a config path exists |
| Show config differences (saved vs running, or by revision) |
| List config revision history (number, timestamp, user, method) |
| Run operational show commands |
| Validate config syntax (temporary apply with auto-rollback) |
| Apply config with commit-confirm (safe default) |
| Confirm a pending commit-confirm |
| Save running config to disk |
| Load a configuration file |
| Merge config file or string into running config |
| Generate keys, certificates, etc. |
| Reset operations |
| Reboot the router |
| Power off the router |
| Add a system image from URL |
| Delete a system image |
Diagnostics
Tool | Description |
| Traceroute to a host (structured mtr report) |
| Interface RX/TX counters, errors, and link state |
| CPU, memory, storage, and uptime snapshot |
| Routing table (RIB) by family/protocol ( |
| Firewall and NAT rule hit counters |
| BGP neighbor summary (state, prefixes received) |
Documentation
Tool | Description |
| Search VyOS docs by topic and page content (returns snippets) |
| Read a specific documentation page |
Documentation is fetched live from the vyos-documentation repository, so it stays in sync with the latest VyOS releases. Results are cached for 1 hour.
Safety
Configuration changes use
commit-confirmby default -- changes auto-revert after 5 minutes unless confirmed withvyos_confirmvyos_configureaccepts a list of operations applied atomically in one commit-confirm -- batch related changes into a single call so they commit or roll back togetherDestructive operations (
vyos_reboot,vyos_poweroff,vyos_image_delete) include warning descriptionsAPI keys are never logged or included in tool outputs
Self-signed TLS certificates are accepted by default (common on VyOS)
Development
uv venv && source .venv/bin/activate
uv pip install -e ".[dev]"
pytest
ruff check .License
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/cacack/mcp-server-vyos'
If you have feedback or need assistance with the MCP directory API, please join our Discord server