aos8-mcp-server-iap
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| IAP_BASE_URL | No | Base URL of the Instant AP (e.g., https://192.0.2.10:4343). Used for single cluster configuration. | |
| IAP_CLUSTERS | No | JSON array of cluster objects, each with name, base_url, username, password, and optional verify_ssl, ca_bundle, default_iap_ip_addr, allowed_iap_ips. Use instead of single cluster env vars. | |
| IAP_PASSWORD | No | Password for the Instant AP. Used for single cluster configuration. | |
| IAP_USERNAME | No | Username for the Instant AP. Used for single cluster configuration. | |
| IAP_CA_BUNDLE | No | Path to a CA bundle used to verify the AP's certificate when IAP_VERIFY_SSL=true. | |
| IAP_VERIFY_SSL | No | Whether to verify SSL certificate. Set to 'false' only for temporary lab connections. | true |
| IAP_DEFAULT_IAP_IP_ADDR | No | IPv4 address of the master AP. Required when IAP_BASE_URL uses a DNS name. | |
| IAP_ALLOW_RUNNING_CONFIG | No | Set to 'true' to allow the 'show running-config' command (with redaction). | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| iap_test_connectionC | Log in to the Instant AP and run a safe version check. |
| iap_get_versionB | Return Instant AP firmware version information. |
| iap_get_summaryC | Return the Instant AP swarm summary. |
| iap_get_access_pointsC | Return Instant AP swarm members with radio state, one page at a time. |
| iap_get_clientsC | Return connected wireless clients, one page at a time. |
| iap_get_networksC | Return configured WLAN networks (SSIDs). |
| iap_get_network_detailB | Return detail for one WLAN network by name. |
| iap_get_ap_statsC | Return statistics for one Instant AP by its IP address. |
| iap_get_client_statusB | Return the status of one wireless client by MAC address. |
| iap_get_wired_port_settingsC | Return wired port settings. |
| iap_get_port_statusC | Return physical port status. |
| iap_get_ap_envC | Return the AP environment variables. |
| iap_get_bootup_logC | Return the Instant AP bootup log. |
| iap_show_commandB | Run a read-only Instant AP show command from the policy allowlist. |
| iap_get_health_summaryB | Return a concise swarm health summary with deterministic findings. |
| iap_analyze_wlan_securityB | Return deterministic WLAN security findings for the configured networks. |
| iap_list_targetsA | Report every configured Instant AP cluster and the AP addresses each may read. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| iap_health_overview | |
| iap_troubleshoot_client | |
| iap_wlan_security_review | |
| iap_swarm_review | |
| iap_safe_show_command |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 17 tools
Each tool targets a distinct resource or aspect (version, summary, APs, clients, networks, ports, logs, security), with clear list/detail pairs. Minor overlap exists between iap_get_summary and iap_get_health_summary, and iap_show_command could be confused with structured getters, but descriptions make the boundaries reasonably clear.
All tools share the iap_ prefix and follow a consistent verb_noun pattern: test_connection, get_version, show_command, analyze_wlan_security, list_targets. The naming is uniformly snake_case and predictable across both collection and single-resource operations.
At 17 tools, the set is within the 16-25 range that feels heavy for a read-only monitoring/analysis surface. Each tool does have a distinct purpose, but the count is slightly more than necessary for the apparent scope.
The tool surface covers connectivity validation, version, swarm summary, AP inventory, clients, WLAN networks, port settings/status, logs, health summary, security analysis, and a raw show-command fallback. For a read-only Instant AP monitoring server, there are no obvious dead ends or missing operations.