cisco-secure-access-mcp
cisco-secure-access-mcp
一个用于 Cisco Secure Access 的社区 模型上下文协议 (MCP) 服务器。
它将 Secure Access REST API 公开给兼容 MCP 的 AI 客户端(Cursor、Claude Desktop、VS Code GitHub Copilot 等),并按 Cisco 自身的资源类别(管理、部署、调查、策略和报告)将其组织为精选工具目录。
状态: v1 开发中。请参阅
install.md获取构建日志和各阶段进度。
为什么选择社区 DevNet 服务器
本仓库旨在作为 Cisco DevNet 社区 MCP 服务器进行托管,遵循 CiscoDevNet/devnet-template 布局。标准模板文件(AGENTS.md、CODE_OF_CONDUCT.md、CONTRIBUTING.md、LICENSE、README.md、SECURITY.md)均已包含并符合该模板要求。
此外,install.md 是一个工作日志,记录了构建服务器所采取的每一步骤、故障排除说明以及我们作为增强功能添加的任何工具。它被特意保留在代码树中,以便未来的贡献者可以看到推理过程。
Related MCP server: Enterprise MCP Gateway and Tool Registry
快速入门
# 1. Clone and install (using uv)
git clone https://github.com/sdntechforum/Secure_Access.git
cd Secure_Access
uv sync
# 2. Provide your Cisco Secure Access API credentials via environment variables
# (Admin > API Keys in the Secure Access dashboard)
export SECURE_ACCESS_API_KEY=...
export SECURE_ACCESS_API_SECRET=...
# 3. Run the server (stdio transport, default)
uv run cisco-secure-access-mcp有关客户端配置(Cursor / Claude Desktop / VS Code)、Docker 使用、完整工具列表以及支持的环境变量列表,请参阅 AGENTS.md。
身份验证概览
针对
POST https://api.sse.cisco.com/auth/v2/token的 OAuth 2.0 客户端凭据流。持有者令牌 (Bearer token) 缓存在内存中,并在其 1 小时过期前不久刷新。
凭据仅从环境变量中读取,绝不从 CLI 标志或提交的文件中读取。
通过
SECURE_ACCESS_ORG_ID(作为X-Umbrella-OrgId发送)支持多组织 / MSSP。一个单独的可选密钥管理凭据对,用于控制管理其他 API 密钥的一小部分工具。
请参阅 Cisco Secure Access — API 身份验证 了解如何生成 API 密钥。
仓库布局
.
├── AGENTS.md # Install + tool catalog + env vars (read this first if you're an AI agent)
├── CODE_OF_CONDUCT.md # Cisco DevNet template (unchanged)
├── CONTRIBUTING.md # Cisco DevNet template (project name filled in)
├── LICENSE # Apache-2.0 (Cisco DevNet template)
├── README.md # this file
├── SECURITY.md # Cisco DevNet template (project name filled in)
├── install.md # Build journal — phases, troubleshooting, enhancements
├── pyproject.toml # Package metadata + entry point
├── Dockerfile # Optional secondary distribution
├── .env.example # Documented env vars; NEVER real secrets
├── src/cisco_secure_access_mcp/
│ ├── server.py # FastMCP entrypoint (stdio default)
│ ├── auth.py # OAuth2 client-credentials + token cache
│ ├── client.py # httpx-based REST client (TLS-only, retry-aware)
│ ├── config.py # Env-var loading + validation
│ ├── errors.py # SDK / HTTP errors → MCP errors
│ ├── logging.py # Structured JSON logs with secret redaction
│ ├── registry.py # Discovers and registers tools from each category
│ └── tools/
│ ├── admin/ # admin_* — Admin Resources
│ ├── deployments/ # deploy_* — Deployments Resources
│ ├── investigate/ # investigate_* — Investigate Resources (v1.1)
│ ├── policies/ # policy_* — Policies Resources
│ └── reports/ # report_* — Reports Resources (v1.1)
└── tests/
├── unit/ # Offline; mock HTTP and clock
└── integration/ # Opt-in; requires real DevNet sandbox credentials安全性
本仓库遵循 .cursor 中的安全规则(参数化、无硬编码凭据、带脱敏的结构化日志记录、强制执行 TLS 1.2+、Distroless 风格的容器加固等)。要报告漏洞,请参阅 SECURITY.md。
许可证
Apache License 2.0 — 请参阅 LICENSE。
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceAn MCP server that exposes a 60+ tool security and threat-intel stack to AI agents, enabling secret scanning, Sigma rule generation, ransomware lookup, OSINT, and deep research.1MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.1MIT
- FlicenseNot gradedqualityDmaintenanceMCP server for Cisco Catalyst SD-WAN Manager (vManage) that exposes REST API as tools for AI assistants to query and manage SD-WAN fabric, including device management, monitoring, templates, and policies.8
- AlicenseNot gradedqualityBmaintenanceA read-only MCP server for Cisco Meraki Dashboard, enabling LLMs to discover devices, check health, troubleshoot, and generate reports via natural language.MIT
Related MCP Connectors
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
MCP server for AI access to Swagger by SmartBear.
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sdntechforum/mcp-secure-access-community'
If you have feedback or need assistance with the MCP directory API, please join our Discord server