ise-mcp-server
by dr-stutters
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ISE_URL | Yes | https://<pan-or-mnt-node> | |
| MCP_HOST | No | HTTP listener host | 0.0.0.0 |
| MCP_PATH | No | HTTP listener path | /mcp |
| MCP_PORT | No | HTTP listener port | 8000 |
| LOG_LEVEL | No | Log level | INFO |
| ISE_RETRIES | No | Retries for idempotent calls | 2 |
| ISE_TIMEOUT | No | Per-request timeout (s) for idempotent calls | 30 |
| ISE_ERS_PORT | No | ERS port: 443 on ISE 3.1+, 9060 on older releases or when ERS isn't enabled on 443 | 443 |
| ISE_PASSWORD | Yes | API account password (see below) | |
| ISE_USERNAME | Yes | API account username (see below) | |
| ISE_CA_BUNDLE | No | CA bundle for the ISE admin certificate | |
| ISE_INSTANCES | No | Separate core instance configuration for multi-node deployments (see core docs/PRODUCTION.md) | |
| MCP_AUDIT_LOG | No | stderr, a file path, or off | stderr |
| MCP_CACHE_DIR | No | Spec index cache ("" disables) | ~/.cache/ise-mcp-server |
| MCP_TRANSPORT | No | stdio or http (Streamable HTTP) | stdio |
| ISE_RATE_LIMIT | No | Requests per minute across all three surfaces | |
| ISE_VERIFY_SSL | No | false only for labs with self-signed certs | true |
| MCP_AUTH_TOKENS | No | name:sha256:<hex> entries; required for HTTP (ise-mcp-server token <name>) | |
| MCP_CONFIRM_TTL | No | Seconds a preview's confirm token stays valid | 600 |
| ISE_PROTECT_MACS | No | Comma list; a CoA/ANC/NAD-delete on any of these is blocked (safety rails, I18) | |
| ISE_PROTECT_NADS | No | Comma list; a CoA/ANC/NAD-delete on any of these is blocked (safety rails, I18) | |
| ISE_PROBE_TIMEOUT | No | Per-surface timeout used by ise_status | 10 |
| ISE_PROTECT_USERS | No | Comma list; a CoA/ANC/NAD-delete on any of these is blocked (safety rails, I18) | |
| MCP_ENABLE_WRITES | No | Register the write tools (still preview-first) | false |
| ISE_MAX_CONCURRENCY | No | Concurrent requests to ISE (shared by all surfaces) | 5 |
| ISE_DETAIL_THRESHOLD | No | ERS list pages above this size skip the per-item detail GETs | 100 |
| MCP_ENABLE_DANGEROUS | No | Also register CoA/ANC/delete tools and non-GET ise_api_call | false |
| ISE_DETAIL_CONCURRENCY | No | Concurrent per-item ERS GETs | 5 |
| MCP_MAX_RESPONSE_CHARS | No | Response size budget | 40000 |
| ISE_COA_ALLOW_SHARED_PORT | No | Allow port_bounce/port_shutdown on a switch port with more than one live session (an uplink/trunk) | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessWithin a week