iptime-mcp
Summary: Manage an ipTIME router safely through 13 MCP tools that separate read-only inspection from confirmed, plan-based writes.
Inspect router state and status (
iptime_status), authenticate/log out (iptime_login,iptime_logout).Discover supported operations on the target model/firmware (
iptime_capabilities) and browse the local catalog (iptime_list_operations).Run read-only operations such as product, network, DHCP, wireless, firewall, VPN, DDNS, USB/NAS, syslog, and Wake-on-LAN queries (
iptime_read).Create expiring, reviewable change plans for any catalogued write (
iptime_plan_change).Plan critical-risk firmware upgrades and configuration restores from local
.bin/.configfiles (iptime_plan_firmware_upgrade,iptime_plan_config_restore).Back up the router configuration to a new protected local
.configfile (iptime_backup_config).Apply, cancel, or list pending/completed plans (
iptime_apply_change,iptime_cancel_change,iptime_list_plans).Support single- and multi-router profiles with credential redaction and safety gating.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@iptime-mcpList the devices currently connected to my router"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
English | 한국어
iptime-mcp
A safety-gated Model Context Protocol (MCP) server for operating ipTIME routers without repeatedly opening the web admin panel.
It can inspect router state, discover which catalogued operations a specific model and firmware support, and perform confirmed changes across networking, Wi-Fi, NAT, firewall, VPN, DDNS, USB/NAS, system, and automation features.
This is an unofficial community project and is not affiliated with EFM Networks or ipTIME. Router APIs are firmware-dependent and are not published as a stable public contract.
Highlights
13 focused MCP tools instead of hundreds of top-level tools
334 catalogued router operations: 171 reads and 163 writes
Runtime capability checks on iUX3 through the router's
api/hasmethodDetection for iUX3, Mobile iUX, and classic CGI interfaces
Read-only operations can run directly
Every router change uses a short-lived, reviewable plan without confirmation tokens
Configuration backup, restore planning, and firmware upgrade planning
Single-router and multi-router profiles
Credential and session-value redaction
Public plain HTTP blocked by default
The catalog covers administration, firmware, backup and restore, WAN/LAN/DHCP/DNS, routing and switching, wireless and EasyMesh, NAT and port forwarding, firewall, QoS, VPN, DDNS, USB/NAS services, routines, history, logs, host scanning, and Wake-on-LAN.
Related MCP server: mikrotik-mcp
Compatibility
Interface | Support |
iUX3 | Uses |
Mobile iUX | Exposes only explicitly mapped read operations |
Classic CGI | Exposes only explicitly mapped read operations |
The fixed operation catalog is based on methods observed in an iUX3 application shipped with firmware 15.36.6. A method appearing in the catalog does not mean every router supports it. Always use iptime_capabilities for the target router before choosing an operation.
Legacy support is intentionally limited to known-safe mappings for system information, DHCP leases and configuration, port forwarding, and Wake-on-LAN. Legacy responses may be returned as raw text. Unknown legacy writes are rejected.
Safety model
Router changes can interrupt internet access or make the admin interface unreachable. iptime-mcp therefore separates reading from writing:
iptime_plan_changeor a file-specific planning tool creates an immutable plan without changing the router.The plan reports the operation, parameters, current state when available, risk, and expiry.
iptime_apply_changeapplies that exact plan using only itsplan_id; users never need to copy anAPPLY <UUID>token.
A specific request for the same change is sufficient authorization. Clients should ask once more in ordinary language only when a critical-risk plan, such as firmware, restore, reset, credential, or storage-format work, was not already explicitly authorized. MCP clients may still show their normal destructive-tool approval prompt.
Plans expire after 10 minutes, are single-use, include an integrity digest, and are serialized per router. When a write response is lost, the server attempts a readback and does not retry the write automatically. Plans are held in memory and disappear when the MCP process restarts.
Requirements
Node.js 22 or later
Network access to the router admin endpoint
An ipTIME administrator username and password
An MCP client with stdio server support
Use a LAN address, a VPN address, or a trusted HTTPS endpoint whenever possible.
Install from source
git clone https://github.com/mikusnuz/iptime-mcp.git
cd iptime-mcp
npm ci
npm run buildThe executable entry point is dist/server.js.
For clients that support an environment file or configurable working directory, create a local .env first:
cp .env.example .envFill in the router URL, username, and password. .env is ignored by Git and must remain local.
MCP client setup
Use a user-level configuration whenever possible because router credentials should not be committed to a project. Replace /absolute/path/to/iptime-mcp in every example. On Windows, forward-slash paths such as C:/Users/name/iptime-mcp/dist/server.js work in JSON. If a desktop client cannot find node, use the absolute path reported by which node on macOS/Linux or where node on Windows.
Client | User-level configuration |
Codex / ChatGPT desktop | Settings → MCP servers or |
Claude Desktop | Settings → Developer → Edit Config |
Claude Code |
|
Cursor |
|
VS Code agent chat | MCP: Open User Configuration |
GitHub Copilot CLI |
|
Gemini CLI |
|
Codex / ChatGPT desktop
Add a stdio server in Settings → MCP servers, or add the following to ~/.codex/config.toml. Replace the path and credentials, save, and restart the MCP server.
[mcp_servers.iptime]
command = "node"
args = ["/absolute/path/to/iptime-mcp/dist/server.js"]
cwd = "/absolute/path/to/iptime-mcp"
default_tools_approval_mode = "writes"
[mcp_servers.iptime.env]
IPTIME_ROUTER_ID = "home"
IPTIME_ROUTER_URL = "http://192.168.0.1"
IPTIME_ROUTER_USERNAME = "admin"
IPTIME_ROUTER_PASSWORD = "your-router-password"Codex, its IDE extension, and the ChatGPT desktop app share the MCP configuration on the same Codex host. See the official MCP configuration guide for current client options.
If you prefer the local .env file, keep cwd and omit the [mcp_servers.iptime.env] table.
Claude Desktop
Open Settings → Developer → Edit Config, merge the following iptime entry into claude_desktop_config.json, save, and fully restart Claude Desktop. Keep any other existing servers in the file.
{
"mcpServers": {
"iptime": {
"command": "node",
"args": ["/absolute/path/to/iptime-mcp/dist/server.js"],
"env": {
"IPTIME_ROUTER_ID": "home",
"IPTIME_ROUTER_URL": "http://192.168.0.1",
"IPTIME_ROUTER_USERNAME": "admin",
"IPTIME_ROUTER_PASSWORD": "your-router-password"
}
}
}
}Check Connectors in the chat composer after restart. See the official Claude Desktop local MCP guide.
Claude Code
Register the server for all projects with the Claude Code CLI:
claude mcp add \
--scope user \
--env IPTIME_ROUTER_ID=home \
--env IPTIME_ROUTER_URL=http://192.168.0.1 \
--env IPTIME_ROUTER_USERNAME=admin \
--env IPTIME_ROUTER_PASSWORD=your-router-password \
--transport stdio iptime \
-- node /absolute/path/to/iptime-mcp/dist/server.js
claude mcp get iptimeThe final --transport option intentionally comes after the environment values so the variadic --env parser does not consume the server name. The user-scoped configuration is stored in ~/.claude.json. See the official Claude Code MCP guide.
Cursor
Create or merge ~/.cursor/mcp.json. This example reads the ignored local .env created above:
{
"mcpServers": {
"iptime": {
"type": "stdio",
"command": "node",
"args": ["/absolute/path/to/iptime-mcp/dist/server.js"],
"cwd": "/absolute/path/to/iptime-mcp",
"envFile": "/absolute/path/to/iptime-mcp/.env"
}
}
}Restart Cursor, then check Settings → Tools & MCP. Project-scoped .cursor/mcp.json is also supported, but do not put router credentials in a file that may be committed. See the official Cursor MCP guide.
VS Code agent chat / GitHub Copilot Chat
Run MCP: Open User Configuration from the Command Palette and merge this configuration. VS Code uses the top-level key servers, not mcpServers.
{
"servers": {
"iptime": {
"type": "stdio",
"command": "node",
"args": ["/absolute/path/to/iptime-mcp/dist/server.js"],
"cwd": "/absolute/path/to/iptime-mcp",
"envFile": "/absolute/path/to/iptime-mcp/.env"
}
}
}Start or inspect it with MCP: List Servers and accept the server trust prompt on first use. .vscode/mcp.json is available for workspace-scoped setup, but the user configuration is safer for router credentials. See the official VS Code MCP setup and configuration reference.
GitHub Copilot CLI
GitHub Copilot CLI does not read VS Code's .vscode/mcp.json. Create or merge ~/.copilot/mcp-config.json instead:
{
"mcpServers": {
"iptime": {
"type": "stdio",
"command": "node",
"args": ["/absolute/path/to/iptime-mcp/dist/server.js"],
"cwd": "/absolute/path/to/iptime-mcp",
"tools": ["*"]
}
}
}The configured cwd lets iptime-mcp load the local .env. Verify the connection with copilot mcp list. Project-level .mcp.json and .github/mcp.json are also supported, but never commit router credentials. See the official Copilot CLI MCP guide.
Gemini CLI
Create or merge ~/.gemini/settings.json:
{
"mcpServers": {
"iptime": {
"command": "node",
"args": ["/absolute/path/to/iptime-mcp/dist/server.js"],
"cwd": "/absolute/path/to/iptime-mcp",
"trust": false
}
}
}The configured cwd lets the server load .env. Keep trust false so Gemini continues to ask before tool calls, then run gemini mcp list. If the current folder is not trusted, run gemini trust. The CLI command defaults to project scope; use --scope user when registering manually. See the official Gemini CLI MCP guide.
Other stdio MCP clients
Use node as the command, /absolute/path/to/iptime-mcp/dist/server.js as its only argument, and pass the IPTIME_* variables from .env. Do not assume every client uses the same JSON wrapper: for example, VS Code uses servers, while Claude Desktop, Cursor, Copilot CLI, and Gemini CLI use mcpServers.
Environment variables
Single router
Variable | Required | Default | Description |
| Yes | — | Router base URL using |
| No |
| Profile name exposed as |
| For login | — | Router administrator username |
| For login | — | Router administrator password |
| No |
| Allows plain HTTP when the hostname resolves to a public address |
| No | — | SHA-256 certificate fingerprint, with or without colons, checked in addition to normal TLS validation |
| No |
| Request timeout, clamped to 1,000–60,000 ms |
Credentials must not be embedded in IPTIME_ROUTER_URL.
The server also loads a .env file from its working directory. Copy .env.example to .env only for local use; .env and related secret files are ignored by Git.
Multiple routers
Set IPTIME_ROUTERS to a JSON array. Use username_env and password_env so the JSON contains environment-variable names rather than credentials:
IPTIME_ROUTERS='[{"id":"home","url":"http://192.168.0.1","username_env":"HOME_ROUTER_USERNAME","password_env":"HOME_ROUTER_PASSWORD"},{"id":"office","url":"https://router.office.example","username_env":"OFFICE_ROUTER_USERNAME","password_env":"OFFICE_ROUTER_PASSWORD","timeout_ms":20000}]'
HOME_ROUTER_USERNAME=admin
HOME_ROUTER_PASSWORD=your-home-password
OFFICE_ROUTER_USERNAME=admin
OFFICE_ROUTER_PASSWORD=your-office-passwordWhen one router is configured, router_id may be omitted. With multiple routers, pass the target router_id to router tools.
MCP tools
Tool | Purpose |
| Detect the interface, authenticate when credentials exist, and read product/system status |
| Log in with credentials from the MCP environment; optionally submit a CAPTCHA answer |
| End the current router admin session |
| Check catalogued operations against the target model and firmware |
| List the local, auditable operation catalog by domain or mode |
| Run one read-only catalog operation |
| Save a new |
| Create a generic router-change plan without applying it |
| Hash a local |
| Hash a local |
| Apply one pending plan by ID; no confirmation token required |
| Cancel a pending plan |
| List pending and completed in-memory plans |
MCP resources
URI | Contents |
| Configured router profiles with credentials omitted |
| Full operation catalog, domains, modes, risks, and parameter hints |
Recommended workflow
Call
iptime_statusto detect the router and establish a session.Call
iptime_capabilities, optionally filtered by a domain such aswireless,network,vpn, orusb.Use
iptime_list_operationsto find the exact operation and parameter hint.Run reads with
iptime_read.For a change, create a plan and show its risk, parameters, previous state, and expiry to the user.
If the plan matches the user's specific request, apply it without asking them to repeat a token or plan ID. Ask once in natural language only for a critical-risk change that was not already explicitly authorized.
If the outcome is reported as unknown, inspect the returned verification state before doing anything else.
Useful read operations include:
product.infoandsystem.infonetwork.infoandnetwork.interface.lan.stationsdhcpd.lease.showanddhcpd.reservedaddr.showwireless.client.showandwireless.channel.listportforward.getandupnp.relayfirewall.getwg.client.show,wg.peer.show, andvpncli.status.listddns.configandddns.status.getusb.show,usb.mount.list, andnas.user.showsyslog.showandwol.show
Some methods require a scalar, array, or object rather than an empty object. The catalog's paramsHint and defaultParams fields describe known conventions. For example, Wi-Fi channel listing needs a band such as "2g" or "5g", and DDNS status needs the configured hostname.
Backup, restore, and firmware
iptime_backup_config:
requires a destination ending in
.configcreates parent directories when necessary
refuses to overwrite an existing file
writes with owner-only permissions (
0600)rejects empty backups and files larger than 32 MiB
Configuration backups can contain private network settings and secrets. *.config is ignored by Git and must never be committed.
Firmware and restore plans record the file size and SHA-256 hash, then verify the file again immediately before upload. Firmware images must end in .bin; configuration backups must end in .config. A firmware image is not validated for router-model compatibility, so obtain the correct image for the exact model and review the critical-risk plan carefully.
Network security
Public-address plain HTTP is rejected unless
IPTIME_ALLOW_INSECURE_REMOTE_HTTP=true.Enabling that override can expose the administrator password and session cookie. Use it only through a trusted private tunnel when HTTPS is impossible.
Redirects and cross-origin endpoint construction are blocked.
Responses are capped at 8 MiB and requests have a bounded timeout.
Only the ipTIME session cookie is retained.
Passwords, tokens, session values, private keys, PSKs, and similar fields are recursively redacted from MCP output.
An optional TLS fingerprint adds pinning after normal certificate validation; it does not make an untrusted self-signed certificate valid.
Treat MCP client configuration files as secrets because they may contain the router password.
CAPTCHA and session behavior
If the router requests a CAPTCHA, iptime_login returns a CAPTCHA_REQUIRED error with available challenge information. Open the router admin page if needed, then retry iptime_login with captcha_code.
Expired sessions are automatically renewed once for read operations. Writes are never automatically retried after an authentication or network ambiguity.
Development
npm ci
npm run lint
npm test
npm run buildFor development mode:
npm run devThe test suite uses loopback mock routers and does not require a physical device. Do not run write tests against a production router.
Files for AI agents
llms.txtprovides a compact machine-readable project and tool summary.AGENTS.mdcontains repository contribution and safety rules for coding agents.templates/AGENTS.mdcan be copied into a project that should use this MCP server.templates/CLAUDE.mdprovides equivalent usage guidance for Claude Code projects.
These files describe the actual tool workflow and safety constraints; they do not contain credentials or local router details.
License
MIT © 2026 mikusnuz
Available Tools
13 toolsiptime_apply_changeADestructive
Apply exactly one pending plan after its confirmation text is repeated verbatim.
| Name | Required | Description | Default |
|---|---|---|---|
| plan_id | Yes | ||
| confirmation | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
It adds meaningful behavioral guardrails beyond the annotations: 'exactly one' plan is applied, and the confirmation text must be repeated verbatim. This is important for a destructive, non-idempotent operation, though it does not describe post-apply effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with no filler. It front-loads the action, resource, and constraint, making it quick for an agent to parse and act on.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The essential contract is stated, but for a destructive, open-world operation with no output schema, it omits what happens on success or failure and any prerequisite context such as how plans are created or confirmed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It succeeds in explaining that 'confirmation' is the verbatim text to repeat and implies 'plan_id' identifies the pending plan. It does not fully explain how to obtain the confirmation text, but the core semantics are present.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Apply') and resource ('pending plan'), and clarifies the exact condition: it applies only one plan after verbatim confirmation. This distinguishes it from sibling tools like iptime_plan_change, iptime_cancel_change, and iptime_list_plans.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool—when a pending plan exists and its confirmation text is available—but it does not explicitly mention alternatives or conditions where the tool should not be used.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_backup_configB
Download the current router configuration to a new local .config file. Existing files are never overwritten.
| Name | Required | Description | Default |
|---|---|---|---|
| router_id | No | Configured router id; optional when exactly one router exists | |
| output_path | Yes | Destination path ending in .config |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-read-only, non-idempotent, non-destructive behavior. The description adds the useful guarantee that existing files are never overwritten, which aligns with destructiveHint=false. However, it leaves unclear what actually happens if output_path already exists (error vs. unique-name generation) and does not mention authentication or connectivity requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. The primary action is front-loaded and the critical safety constraint follows immediately. Every sentence earns its place, and there is no redundancy with the structured schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers core action and a key constraint, and the schema/annotations handle parameters and safety profile. But with no output schema, the return value is unspecified, and the 'never overwritten' rule creates ambiguity about collision handling. For a side-effecting download/backup tool, this is a meaningful gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: output_path and router_id are both described with sufficient meaning. The tool description only re-emphasizes that the file should be a new .config file, adding no additional parameter-level detail beyond what the schema already provides, so the baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Download') and identifies both the resource ('current router configuration') and the destination ('a new local .config file'). It does not explicitly contrast with sibling tools like iptime_plan_config_restore or iptime_read, but the action is unambiguous and distinct enough that an agent can infer what it does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as iptime_read or iptime_plan_config_restore. The 'never overwritten' statement is a safety behavior, not a selection criterion, so an agent gets no help deciding between backup, read, and restore operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_cancel_changeB
Cancel a pending change plan.
| Name | Required | Description | Default |
|---|---|---|---|
| plan_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide the basic safety profile (non-read-only, non-idempotent, non-destructive), but the description adds no behavioral context. It does not explain what cancellation does to the plan, whether it is reversible, whether authentication is required, or what side effects may occur. The word 'cancel' is the sole behavioral clue.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, complete sentence with no filler. It front-loads the verb and resource, and every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter cancellation tool, the description is minimally viable: it names the action and the pending precondition, and the annotations cover the safety profile. However, it says nothing about the return value, error conditions, or whether the plan must belong to the current session, leaving minor but real gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not mention plan_id at all. While the parameter name is self-explanatory and the action implies it identifies the plan to cancel, the description does not explicitly state its role, leaving the agent to infer the connection.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Cancel') and a specific resource ('pending change plan'), making the tool's function immediately clear. It also distinguishes itself from sibling tools like iptime_plan_change and iptime_apply_change by targeting a different stage in the change lifecycle.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description offers no guidance on when to use this tool versus alternatives. It does not reference siblings, prerequisites, or conditions such as 'use only if the plan has not been applied yet.' The only hint is the word 'pending,' which is too implicit to count as clear usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_capabilitiesARead-onlyIdempotent
Discover which catalogued operations this model and firmware actually expose.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | Optional domain filter, such as wireless, network, vpn, or usb | |
| refresh | No | ||
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare it read-only, idempotent, non-destructive, and open-world. The description adds useful behavioral context beyond those annotations by emphasizing that the exposed operation set depends on the actual model and firmware and may differ from the static catalogue.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence communicates the core purpose efficiently. There is no filler, and every word contributes to the tool's meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only introspection tool with all optional parameters and no output schema, the description conveys the essential return concept: which operations are actually exposed. It is not fully complete because the refresh behavior is unclear, but the annotations and parameter schema cover most of the remaining invocation context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents domain and router_id with descriptions, so the description does not need to repeat them. However, the refresh parameter has no schema description and the tool description adds nothing about its meaning, leaving a moderate semantic gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action ('Discover') and a specific resource ('which catalogued operations this model and firmware actually expose'). It establishes the tool's purpose as capability introspection and distinguishes it from simply listing the catalogued operation set.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is used to check what operations are actually available, but it gives no explicit when-to-use guidance and names no alternatives. The contrasting sibling iptime_list_operations is especially relevant, yet the description does not explain when one should be chosen over the other.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_list_operationsARead-onlyIdempotent
List the fixed, auditable operation catalog. This does not contact the router.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | ||
| domain | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint and idempotentHint, and the description adds that the tool 'does not contact the router' and that the catalog is 'fixed' and 'auditable,' giving useful context about side-effect-free, stable behavior. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler. The first sentence states the core action and object, the second adds a key behavioral clarification, both earning their place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple listing tool, the core operation is clear, but the two input parameters are completely unexplained and there is no output schema. This is a significant completeness gap for an agent trying to invoke the tool correctly with meaningful arguments.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no explanation of the 'mode' or 'domain' parameters. An agent cannot determine how to set these optional filters from the tool definition alone, so the description fails to compensate for the schema's lack of parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'List the fixed, auditable operation catalog.' The phrase 'does not contact the router' clarifies that this is a local metadata operation, distinguishing it from router-contact siblings, though it does not name an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates the tool is for retrieving the fixed operation catalog without touching the router, so an agent can infer it is appropriate when offline/static operation metadata is needed. It does not explicitly state when not to use it or name alternatives, leaving some inference to the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_list_plansBRead-onlyIdempotent
List plans and their current state.
| Name | Required | Description | Default |
|---|---|---|---|
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only, idempotent, non-destructive behavior, so the description does not need to restate those. The phrase 'current state' adds a small behavioral hint about output content, but it does not explain open-world behavior, output richness, or any other runtime characteristics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one short sentence with no filler and front-loads the action and object. It is concise, though slightly underspecified enough that it does not reach a top score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is low-complexity with one optional, well-documented parameter and annotations that cover safety. However, there is no output schema and the description does not clarify what a 'plan' is, what fields are returned, or how the optional router_id affects the result, leaving some practical gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single optional parameter is fully described in the schema ('Configured router id; optional when exactly one router exists'). The description itself does not mention router_id, but with 100% schema description coverage, the schema carries the parameter semantics adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and a clear resource ('plans'), and adds 'current state' to convey the kind of output. It is reasonably distinct from sibling tools like iptime_status and iptime_list_operations, though it could more explicitly differentiate itself from them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance on when to use this tool versus siblings such as iptime_list_operations or iptime_status. It also omits any conditions, prerequisites, or context about when plan listing is relevant.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_loginA
Authenticate using credentials from the MCP environment. Credentials are never accepted as tool arguments.
| Name | Required | Description | Default |
|---|---|---|---|
| router_id | No | Configured router id; optional when exactly one router exists | |
| captcha_code | No | CAPTCHA answer, only after the router requested one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal a state-changing operation (readOnlyHint=false, openWorldHint=true, idempotentHint=false). The description adds a valuable behavioral constraint beyond annotations: credentials are never accepted as tool arguments, telling the agent not to attempt to pass username/password. It does not disclose failure behavior or session details, but the bar is lower given annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler. The primary action is front-loaded, and the critical constraint about credentials is stated immediately after. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a login tool with no output schema, the description is minimally sufficient: it states the authentication source and the schema covers the two optional parameters. However, it omits what a successful login returns, whether a session is established, and how failures or pre-existing sessions are handled. Given the openWorldHint and mutation nature, this is a clear gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides strong descriptions for both parameters, including when captcha_code is needed and when router_id is optional. The description adds extra semantic value by explicitly clarifying that no credential parameters exist, which directly informs how the agent should reason about the input schema and why required auth fields are absent.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Authenticate') and a clear resource (the router, implied by the iptime naming and sibling set). It also draws a meaningful distinction from typical authentication tools by stating that credentials come from the MCP environment and are never accepted as arguments, which clearly separates it from any hypothetical credential-input tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not state when to use this tool versus alternatives, nor does it mention exclusions or prerequisites. It does not say 'use before other operations' or contrast with logout. The only usage hints live in the schema parameter descriptions (captcha only after requested, router_id optional when exactly one router exists), not in the description itself.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_logoutA
End the router admin session.
| Name | Required | Description | Default |
|---|---|---|---|
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal that this is not read-only, not idempotent, and not destructive. The description adds some useful context by specifying that the operation terminates the router admin session, but it stops short of explaining consequences like requiring a re-login or invalidating credentials. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with no filler and a clear subject-verb-object structure. It is front-loaded and appropriately sized for a one-parameter logout operation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple, the one optional parameter is fully documented in the schema, and no output schema exists to explain. Still, the description lacks explicit usage routing and behavioral side-effect context, so it is minimally complete rather than fully self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully describes the only parameter, router_id, including its optionality when exactly one router exists, so the description does not need to repeat it. The description itself says nothing about parameters, leaving semantics entirely to the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete action ('End') and a clear resource ('the router admin session'), directly stating what the tool does. It also reads as the counterpart to sibling iptime_login, so an agent can distinguish it from status, read, and plan tools without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to call this tool or when to prefer a sibling; it does not mention that it should follow admin operations or that it will invalidate the authenticated session. The only cue is the tool name and sibling context, which is not explicit enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_plan_changeA
Create an expiring immutable plan for a router change. No setting is changed by this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| params | No | JSON parameters for the selected ipTIME operation; may be an object, array, string, number, boolean, or null | |
| operation | Yes | A write operation from iptime_list_operations | |
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description adds important behavioral facts: the plan is expiring, immutable, and causes no immediate setting change. This is valuable because readOnlyHint is false and destructiveHint is false, so the agent needs to know the write is to the plan store rather than the router. It does not mention expiration duration or how the plan is later applied, but the most safety-relevant behavior is disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with the primary action front-loaded and no filler. The clarifying statement about not changing settings earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The core workflow premise, safety profile, and dependencies are sufficiently covered by the description and schema, and the sibling set makes the follow-on apply/cancel/list workflow discoverable. There is no output schema and the description does not state what the created plan returns, which is a minor gap for an agent that may want to track the plan.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline of 3 applies. The description itself adds no new parameter semantics, but the schema already documents that operation comes from iptime_list_operations, params is arbitrary JSON, and router_id is optional.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Create') and a specific resource ('expiring immutable plan for a router change'). The follow-up 'No setting is changed by this tool' differentiates it from apply/change operations and makes the tool's role clear among its siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly establishes when to use this tool: to create a plan rather than make an actual router change. However, it does not explicitly name alternatives such as iptime_apply_change or the specialized plan_firmware_upgrade/plan_config_restore tools, nor state when those should be preferred.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_plan_config_restoreB
Hash a local ipTIME configuration backup and create a critical-risk restore plan.
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | ||
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds context beyond the annotations by noting the operation hashes a local backup and creates a critical-risk plan. It does not contradict the annotations: creating a plan is consistent with readOnlyHint=false and destructiveHint=false, but side effects such as plan persistence or execution prerequisites are not disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single front-loaded sentence with no filler. It would only score a 5 if it had stronger structural separation, but it is efficient and to the point.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the input source and the outcome (restore plan), which is enough to select the tool among siblings. However, without an output schema it omits the return value, and it does not explain the relationship to iptime_apply_change or what happens after the plan is created.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description gives some semantic context for file_path by identifying it as a local ipTIME configuration backup, but it does not explain its format or location requirements. router_id is already documented in the schema as optional when one router exists; the description adds nothing else to compensate for the missing file_path schema description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific process: hashing a local ipTIME configuration backup and producing a restore plan. It clearly conveys the tool is about config restoration rather than backup or apply, but it does not explicitly differentiate from sibling plan tools like iptime_plan_change or iptime_plan_firmware_upgrade.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus its siblings. The phrase 'local ipTIME configuration backup' only implies an input context; it does not state prerequisites, exclusions, or alternatives such as iptime_apply_change or iptime_backup_config.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_plan_firmware_upgradeA
Hash a local firmware file and create a critical-risk upgrade plan. No upload occurs yet.
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | ||
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only indicate non-read-only, non-idempotent, non-destructive behavior. The description adds meaningful behavioral detail beyond that: it hashes a local file, creates a critical-risk plan, and does not upload. This clarifies what side effects are deferred.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no redundant phrasing. The key scoping statement, 'No upload occurs yet,' is front-loaded and immediately orients the agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description does not mention what the created plan returns or how to verify it. It also does not mention whether an existing pending plan is replaced or how the plan should be applied later. Adequate but has clear gaps for a state-creating operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 50%, with router_id already described in the schema. The description helps by calling file_path a 'local firmware file,' but it omits any detail about the hashing format, accepted file types, or how router_id relates to the plan. It partially compensates for the undocumented parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs and objects: 'Hash a local firmware file and create a critical-risk upgrade plan.' It is not a tautology and clearly distinguishes itself from apply/upload operations by adding 'No upload occurs yet.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is a planning-stage tool meant to precede an actual firmware upgrade, and the 'No upload occurs yet' clause hints that iptime_apply_change should be used later. However, it never explicitly names alternatives or states when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_readARead-onlyIdempotent
Run a read-only operation from iptime_list_operations.
| Name | Required | Description | Default |
|---|---|---|---|
| params | No | JSON parameters for the selected ipTIME operation; may be an object, array, string, number, boolean, or null | |
| operation | Yes | ||
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description merely reinforces the read-only nature. It adds the useful fact that the operation originates from iptime_list_operations, but it does not provide additional behavioral context such as authentication requirements, error behavior, or what happens when parameters are invalid. There is no contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that is front-loaded with the core behavior, uses no filler, and earns its place. It is concise without being a tautology.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a generic read-only dispatcher, the description plus the schema and annotations provide most of what an agent needs: discover operations via list_operations, pass operation and optional params, and rely on the router_id rule from the schema. It could be more complete with an example or a note about return values, but the absence of an output schema lowers the burden.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents params and router_id clearly, leaving operation as the main undocumented required parameter. The description compensates partially by indicating the operation value should come from iptime_list_operations, but it does not clarify how params should be shaped for different operations or give any examples.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('Run') and resource ('a read-only operation from iptime_list_operations'), which precisely identifies what the tool does. The read-only qualifier also helps distinguish it from the mutation and planning sibling tools without needing to inspect each one.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: this tool executes read-only operations that come from iptime_list_operations. It implicitly tells the agent to use list_operations to discover the operation value first, though it does not explicitly spell out exclusions such as 'for writes, use apply_change'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
iptime_statusARead-onlyIdempotent
Detect the router interface, authenticate if configured, and read product/system status.
| Name | Required | Description | Default |
|---|---|---|---|
| router_id | No | Configured router id; optional when exactly one router exists |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds meaningful behavioral context beyond the annotations: the tool may detect the router interface and may perform authentication when configured. No contradiction with the annotations exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single compact sentence that front-loads the primary action and packs multiple steps without waste. Every clause earns its place, and there is no redundant restatement of the tool name or annotation hints.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (one optional parameter, rich annotations), but the absence of an output schema means the description should clarify what 'product/system status' includes and how authentication is triggered. The phrase 'authenticate if configured' is ambiguous about whether the agent should call iptime_login first. With many siblings, this ambiguity is a real gap, though the core invocation is otherwise covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: the single optional router_id parameter is fully described in the schema. The description adds no additional parameter-level meaning. This matches the baseline of 3 for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('read') and resource ('product/system status'), plus distinct preprocessing steps ('detect the router interface, authenticate if configured'). It is not a tautology and gives an agent a usable idea of what the tool accomplishes. It does not explicitly differentiate from the sibling iptime_read, so it misses the top score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies an operational sequence (detect, authenticate, read) but gives no explicit guidance on when to choose this tool over siblings like iptime_read or iptime_login. It does not mention prerequisites, alternatives, or exclusions. The agent is left to infer the intended use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
13 tool updates
v0.1.0- First observed
iptime_apply_change - First observed
iptime_backup_config - First observed
iptime_cancel_change - First observed
iptime_capabilities - First observed
iptime_list_operations - First observed
iptime_list_plans - First observed
iptime_login - First observed
iptime_logout - First observed
iptime_plan_change - First observed
iptime_plan_config_restore - First observed
iptime_plan_firmware_upgrade - First observed
iptime_read - First observed
iptime_status
TDQS
Scored across 13 tools
Most tools target distinct actions, but iptime_status and iptime_read overlap slightly as both can retrieve router state, and iptime_capabilities vs iptime_list_operations could be confused by an agent looking for available operations. The descriptions clarify the differences enough that the set is mostly unambiguous.
The iptime_ prefix and verb-oriented names like list_*, apply_change, and cancel_change form a clear pattern. The main deviations are noun-style commands (iptime_status, iptime_capabilities) and compound plan_* names, but they are still readable and predictable.
Thirteen tools is well within the ideal range for a router management server, and each tool covers a distinct part of the workflow: session, discovery, read-only inspection, backup, planning, and safe application of changes. No tool feels redundant or missing.
The set covers session management, read-only inspection, backup, firmware/config-restore planning, and the apply/cancel workflow, which is a complete core lifecycle. Minor gaps exist such as no dedicated way to inspect a plan's detailed parameters or perform simple router actions like reboot, though these can be worked around via the general plan/read mechanisms.
Maintenance
Related MCP Connectors
Unified gateway exposing 150+ tools across all NexGenData MCP servers via one endpoint.
The Remote MCP server acts as a standardized bridge between LLM applications (like Claude, ChatGPT, and Cursor) and external services, enabling AI agents to access external tools and resources. Its primary capability is providing a centralized search tool to discover other MCP servers and their respective tools. Unlike local implementations, it runs remotely with OAuth authentication and permission controls for security.
8 MCP servers, 104+ tools: memory, social, PDF, email, images, calendar, scheduler, files.
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Related MCP Servers
- AlicenseAqualityBmaintenanceA secure MCP server for managing OPNsense firewalls through AI assistants. Provides 81 tools across system, firewall, network, DNS, DHCP, VPN, HAProxy, services, diagnostics, and security domains.81125 PyPI21MIT
- AlicenseNot gradedqualityAmaintenanceTurns a MikroTik router into 310 MCP tools for AI-driven configuration over SSH, covering firewall, routing, VPN, and more.323 npm21MIT
- AlicenseNot gradedqualityCmaintenanceEnables querying and managing SmartThings locations, devices, and rules through MCP tools, with security and confirmation safeguards.MIT
- AlicenseNot gradedqualityAmaintenanceMCP server for managing MikroTik RouterOS fleets, exposing 65+ tools for system administration, interfaces, firewall, DHCP/DNS, PPP, diagnostics, and SSH command execution with KeePass-backed credentials.12 npm2Apache 2.0