hpe-cx-mcp
by legalla
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_HOST | No | Bind address inside the container. | 0.0.0.0 |
| MCP_PORT | No | Bind port inside the container (mapped to host 8002). | 8000 |
| NETBOX_URL | No | NetBox source connection URL. | |
| VAULT_ADDR | No | HashiCorp Vault address for credential resolution. | |
| CX_MCP_PATH | No | URL path guarded by the security middleware. | /mcp |
| VAULT_TOKEN | No | HashiCorp Vault token for credential resolution. | |
| INFRAHUB_URL | No | Infrahub source connection URL. | |
| NAUTOBOT_URL | No | Nautobot source connection URL. | |
| NETBOX_TOKEN | No | NetBox source connection token. | |
| CX_AUDIT_FILE | No | Output file (rotating, 10 MB × 5). | /app/logs/audit.jsonl |
| MCP_TRANSPORT | No | MCP transport. | streamable-http |
| ARUBA_SSH_PORT | No | Default SSH port. | 22 |
| CX_AUDIT_LEVEL | No | all = every call; writes = only state-changing tools. | all |
| CX_DRY_RUN_TTL | No | Lifetime (seconds) of a dry_run_token. | 900 |
| CX_SECRETS_DIR | No | Directory for the write-safety stores. | <app>/secrets |
| CX_TOKENS_FILE | No | Token store path. | /app/secrets/.tokens |
| INFRAHUB_TOKEN | No | Infrahub source connection token. | |
| INVENTORY_FILE | No | Path to the inventory file (YAML/JSON/TOML). | /app/inventory/inventory.yaml |
| NAUTOBOT_TOKEN | No | Nautobot source connection token. | |
| CX_AUDIT_STDOUT | No | Also mirror records to stdout (docker logs). | false |
| CX_AUTH_ENABLED | No | Require a valid Bearer token on every request. | false |
| CX_FLAT_TOOLSET | No | Collapse the ~101 atomic tools into 17 flat scope/action dispatchers. | true |
| CX_WRITE_SAFETY | No | Enable the dry_run_token preview + apply_plan / rollback meta-tools. | false |
| CX_AUDIT_ENABLED | No | Emit a JSON record per tool call. | false |
| CX_INVOKE_WRITES | No | Allow write tools to run through invoke_tool. | true |
| CX_TOOL_PREFIXES | No | (Legacy mode only) Rename advertised tools <domain>__<tool>. | false |
| ARUBA_API_VERSION | No | Default REST API version (latest = auto-detect). | v10.09 |
| CX_DEFERRED_TOOLS | No | (Legacy mode only) Advertise only Tier-1 tools; reach the rest via search_tools / invoke_tool. | false |
| CX_BACKUP_SFTP_HOST | No | Approved SFTP backup server. | |
| CX_BACKUP_SFTP_PORT | No | SFTP port. | 22 |
| CX_BACKUP_TFTP_HOST | No | Approved TFTP backup server. | |
| CX_BACKUP_TFTP_PORT | No | TFTP port. | 69 |
| ARUBA_DEFAULT_PASSWORD | Yes | Default password. Required unless set per device. | |
| ARUBA_DEFAULT_USERNAME | No | Default REST/SSH username. | admin |
| CX_BACKUP_SFTP_TIMEOUT | No | Connection and transfer timeout in seconds. | 30 |
| CX_BACKUP_TFTP_TIMEOUT | No | Transfer timeout in seconds. | 30 |
| CX_TRUST_FORWARDED_FOR | No | Trust X-Forwarded-For (first hop) for client IP. | false |
| CX_BACKUP_SFTP_PASSWORD | No | SFTP credentials password. | |
| CX_BACKUP_SFTP_USERNAME | No | SFTP credentials username. | |
| CX_BACKUP_SFTP_DIRECTORY | No | Default absolute directory on the SFTP server. | / |
| CX_BACKUP_TFTP_DIRECTORY | No | Default relative directory prefix on the TFTP server. | / |
| CX_REQUIRE_DRY_RUN_TOKEN | No | Refuse a direct apply=true via invoke_tool; force the preview → apply_plan path. | false |
| CX_BACKUP_SFTP_ALLOWED_HOSTS | No | Optional comma-separated target allow-list. | |
| CX_BACKUP_TFTP_ALLOWED_HOSTS | No | Optional comma-separated target allow-list. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues