What can you do with this server?

This server exposes a comprehensive MCP interface to HPE Juniper Security Director Cloud, covering device lifecycle, policy management, security objects, and tenant administration. * Device management: onboard, list, get, remove, reboot, sync, deploy/stage images, and handle RMA workflows. * Configuration: list device interfaces, zones, routing instances, subinterfaces, IDP sensors; view config version history and trigger rollbacks. * Firewall policies: CRUD policies, rule groups, and rules; bulk move rules; inspect rule hierarchy. * IPS: manage profiles, rules, exempt rules, signatures, and read-only reference data (contexts, services, vulnerabilities, categories, anomaly tests). * Certificates & licenses: install, list, and delete CA/local certificates and licenses on devices. * Device groups & image definitions: create, update, delete, and list. * Job status polling for async operations (deploy, remove, reboot, sync, config rollback, RMA reactivation). * Multi-org support via separate MCP instances with distinct API keys.

How do I use hpe-security-director-cloud-mcp?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@hpe-security-director-cloud-mcp list all firewall policies" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

hpe-security-director-cloud-mcp

by ddivins

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

hpe-security-director-cloud-mcp

An MCP (Model Context Protocol) server for HPE Juniper Security Director Cloud, built by Claude Code directly against the live OpenAPI spec (spec/openapi.json, vendored from the published spec).

Covers the full API surface: 368 tools across firewall policies, NAT policies, cross-policy deploy/preview/cleanup jobs, ~30 typed security-object resources (addresses, applications, services, SSL/ICAP/AV/AS/content-filtering profiles, etc.), IDP (IPS profiles/rules/signatures), device inventory, device/tenant license & certificate management, templates, and the /api/v2 tenant-admin surface (sites, tunnels, users/roles, IPsec profiles).

⚠️ Use with caution. This is a best-effort implementation, generated at scale from the OpenAPI spec and not exhaustively tested against a live tenant. It exposes destructive and infrastructure-affecting operations — deleting policies/rules/objects, deploying and cleaning up firewall/NAT policies, rebooting or removing devices, installing licenses and certificates, changing passwords, and more — directly against your real Security Director Cloud environment, with no confirmation or dry-run step of its own. A malformed request, an LLM-driven mistake, or an edge case in a spec-derived schema can misconfigure or break your environment. Review what a tool call will do before approving it, test against a non-production tenant first if you have one, and don't grant it credentials for an environment you can't afford to have altered.

Setup

npm install
npm run generate:types   # regenerate src/generated/schema.d.ts from spec/openapi.json (only needed if the spec changes)
npm run build

Related MCP server: HPE Aruba Networking Central MCP Server

Configuration

Single Org (Direct .env)

Copy .env.example to .env (or set these in your MCP client's env config) and provide exactly one credential:

Variable	Description
`SDCLOUD_BASE_URL`	API base URL. Defaults to `https://api.sdcloud.juniperclouds.net/`.
`SDCLOUD_API_KEY`	API key, sent as the `x-api-key` header.
`SDCLOUD_OAUTH_TOKEN`	OAuth token, sent as the `x-oauth2-token` header. Takes precedence if both are set.

Multiple Orgs (Claude Desktop)

To query across multiple Security Director Cloud organizations (e.g., Lab, Production, test tenants), register multiple MCP server instances in Claude Desktop's config file, each with its own API key.

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "hpe-sd-cloud-lab": {
      "command": "node",
      "args": ["/path/to/hpe-security-director-cloud-mcp/dist/index.js"],
      "env": {
        "SDCLOUD_API_KEY": "your_lab_api_key_here"
      }
    },
    "hpe-sd-cloud-prod": {
      "command": "node",
      "args": ["/path/to/hpe-security-director-cloud-mcp/dist/index.js"],
      "env": {
        "SDCLOUD_API_KEY": "your_prod_api_key_here"
      }
    },
    "hpe-sd-cloud-test-1": {
      "command": "node",
      "args": ["/path/to/hpe-security-director-cloud-mcp/dist/index.js"],
      "env": {
        "SDCLOUD_API_KEY": "your_test1_api_key_here"
      }
    }
  }
}

Each server instance:

Has a unique mcpServers key (e.g., hpe-sd-cloud-lab, hpe-sd-cloud-prod) — this is how you identify it in Claude
Points to the same built server binary (dist/index.js)
Passes a different API key via the env section

In Claude, tools will appear prefixed by org name:

hpe-sd-cloud-lab::sdcloud_list_devices — query Lab devices
hpe-sd-cloud-prod::sdcloud_list_devices — query Prod devices
hpe-sd-cloud-test-1::sdcloud_list_devices — query Test 1 devices

You can now ask Claude to compare policies, licenses, or device state across orgs, or to bulk-deploy configurations to multiple tenants simultaneously.

Running

npm run build
node dist/index.js

Or point an MCP client at node /path/to/hpe-security-director-cloud-mcp/dist/index.js with the env vars above.

Audit Logging

All tool calls are automatically logged to ./logs/audit-YYYY-MM-DD.jsonl (daily rotation). Logs include:

Tool called and org queried
Status (success/error)
Duration and response size
Hashed parameters (HMAC-redacted to avoid logging cleartext resource IDs or credentials)
Request ID for tracing

Example audit log entry:

{
  "timestamp": "2026-09-21T14:32:10.123Z",
  "tool": "hpe-sd-cloud-lab__sdcloud_list_devices",
  "org": "hpe-sd-cloud-lab",
  "status": "success",
  "parameters_hash": "a1b2c3d4e5f6g7h8",
  "response_size_bytes": 4521,
  "duration_ms": 342,
  "request_id": "f7a8b9c0d1e2f3g4"
}

Configure logging via env vars:

Variable	Default	Description
`SDCLOUD_LOG_DIR`	`./logs`	Directory for audit logs. Ensure it exists and is writable.
`SDCLOUD_LOG_LEVEL`	`info`	Verbosity: `info` or `debug`. Debug logs to stderr on each call.
`SDCLOUD_LOG_HMAC_KEY`	`default-insecure-key-...`	Secret key for hashing parameters. Change this in production.

Security notes:

Logs never contain cleartext credentials or resource UUIDs — only HMAC hashes.
Logs are appended to JSONL files; implement external rotation or archive as needed.
The HMAC key should be a strong random secret in production environments. Regenerate keys if you suspect compromise.
For compliance, store audit logs in a tamper-evident location separate from the server.

Architecture

src/client.ts — shared HTTP client (request for JSON, requestMultipart for the 5 file-upload endpoints).
src/generated/schema.d.ts — generated from the vendored spec via openapi-typescript; not hand-edited.
src/tools/** — one module per resource domain, each exporting register<Domain>Tools(server, client), aggregated in src/index.ts. Tool names are prefixed sdcloud_.
Most create/update tools accept a generic body object (validated as a JSON record, not a fully-typed schema) since many resources have large, deeply-nested request bodies — consult spec/openapi.json for the exact shape of a given resource's *Input schema when constructing a body.

Notes

Response envelopes differ by API version: /api/v1/* list endpoints return { items, count }; /api/v2/* list endpoints use resource-specific field names (e.g. { sites, total }, { users, user_count }).
Pagination params also differ: /api/v1/* uses from/size/filters/sortby/count; /api/v2/* uses spec.from/spec.size with no filter/sort support (and some /api/v2/* list endpoints take no pagination params at all).
sdcloud_change_password (from /api/v2/change-password) mutates the authenticated user's own credentials — use with care.

Available Tools

368 tools

sdcloud_activate_rma_deviceC

Put a device into RMA (Return Merchandise Authorization) state.

Inputs: body (required), device_id (required).

sdcloud_batch_firewall_policy_assignmentsB

Batch-assign or unassign devices/sites for a firewall policy.

Inputs: body (required), policy_id (required).

sdcloud_batch_nat_policy_assignmentsC

Batch-assign or unassign devices/sites for a NAT policy.

Inputs: body (required), policy_id (required).

sdcloud_batch_save_template_mappingsC

Batch-create/update device-to-template variable mappings for a template.

Inputs: body (required), template_id (required).

sdcloud_bulk_create_sitesC

Create multiple sites in a single bulk request.

Inputs: body (required).

sdcloud_bulk_deploy_device_imageA

Bulk-deploy a software image to multiple devices. Returns a job id; poll sdcloud_get_deploy_image_status for progress.

Inputs: body (required).

sdcloud_bulk_move_firewall_policy_rulesB

Bulk-move firewall policy rules to a target rule group/scope/position. Body: rule_uuids, target_rule_group_id, position, target_scope.

Inputs: body (required), scope (required), policy_uuid (required).

sdcloud_bulk_move_nat_policy_rulesB

Bulk-move NAT policy rules to a target rule group/position. Body: rule_ids, target_rule_group_id, position.

Inputs: body (required), policy_id (required).

sdcloud_change_passwordA

WARNING: Sensitive/destructive-ish action. Changes the password of the currently authenticated user. This immediately invalidates the old credentials for that account — confirm intent before calling.

Inputs: body (required).

sdcloud_cleanup_firewall_policyC

Trigger a cleanup job for unused objects/rules referencing a firewall policy. Body requires cleanup_mode (e.g. STRICT).

Inputs: body (required), policy_id (required).

sdcloud_cleanup_nat_policyB

Trigger a cleanup job for unused objects/rules referencing a NAT policy. Body requires cleanup_mode (e.g. STRICT).

Inputs: body (required), policy_id (required).

sdcloud_create_aamw_profileB

Create a new AAMW profile object.

Inputs: body (required).

sdcloud_create_addressB

Create a new address object. Body typically includes name, description, address_type, ip_address, host_name.

Inputs: body (required).

sdcloud_create_anti_spam_profileC

Create a new anti-spam profile object.

Inputs: body (required).

sdcloud_create_anti_virus_profileC

Create a new anti-virus profile object.

Inputs: body (required).

sdcloud_create_applicationB

Create a new application object. Body typically includes name, description, category, risk, application_mapping.

Inputs: body (required).

sdcloud_create_content_filtering_profileB

Create a new content filtering profile object.

Inputs: body (required).

sdcloud_create_content_security_profileC

Create a new content security profile object.

Inputs: body (required).

sdcloud_create_deviceB

Bulk-create (onboard) one or more devices. Body typically includes a list of device definitions.

Inputs: body (required).

sdcloud_create_device_groupB

Create a new device group. Body typically includes name, description, device UUIDs.

Inputs: body (required).

sdcloud_create_device_image_definitionC

Create a new device software image definition.

Inputs: body (required).

sdcloud_create_enhanced_content_filtering_profileB

Create a new enhanced content filtering profile object.

Inputs: body (required).

sdcloud_create_enhanced_content_filtering_ruleC

Create a rule within an enhanced content filtering profile rule set.

Inputs: body (required), profile_uuid (required), rule_set_uuid (required).

sdcloud_create_enhanced_content_filtering_rule_setC

Create a rule set within an enhanced content filtering profile.

Inputs: body (required), profile_uuid (required).

sdcloud_create_external_probeC

Create the tenant external probe configuration.

Inputs: body (required).

sdcloud_create_firewall_device_global_settingsC

Create a new per-device firewall global settings object.

Inputs: body (required).

sdcloud_create_firewall_policyC

Create a new firewall policy. Body typically includes name, description, all_site_policy, order.

Inputs: body (required).

sdcloud_create_firewall_policy_ruleA

Create a rule directly under a firewall policy scope (not inside a rule group). Body typically includes name, description, action, sources, destinations, applications.

Inputs: body (required), scope (required), policy_uuid (required).

sdcloud_create_firewall_policy_rule_groupC

Create a rule group within a firewall policy scope.

Inputs: body (required), scope (required), policy_uuid (required).

sdcloud_create_firewall_policy_rule_in_groupB

Create a rule inside a firewall policy rule group. Body typically includes name, description, action, sources, destinations, applications.

Inputs: body (required), scope (required), group_uuid (required), policy_uuid (required).

sdcloud_create_flow_based_antivirus_profileC

Create a new flow-based antivirus profile object.

Inputs: body (required).

sdcloud_create_icap_profileC

Create a new ICAP profile object.

Inputs: body (required).

sdcloud_create_icap_serverC

Create a new ICAP server object.

Inputs: body (required).

sdcloud_create_identity_objectB

Create a new identity object. Body typically includes name, description, identity_type, identity_domain.

Inputs: body (required).

sdcloud_create_ipsec_profileC

Create a new IPsec profile.

Inputs: body (required).

sdcloud_create_ips_profileC

Create a new IPS profile object.

Inputs: body (required).

sdcloud_create_ips_profile_exempt_ruleC

Create an exempt rule within an IPS profile.

Inputs: body (required), profile_uuid (required).

sdcloud_create_ips_profile_ruleC

Create an IPS rule within an IPS profile.

Inputs: body (required), profile_uuid (required).

sdcloud_create_ips_signatureB

Create a new IPS signature object.

Inputs: body (required).

sdcloud_create_nat_policyB

Create a new NAT policy. Body typically includes name, description, all_site_policy, order.

Inputs: body (required).

sdcloud_create_nat_policy_ruleA

Create a rule directly under a NAT policy (not inside a rule group). Body typically includes name, description, nat_type, sources, destinations, translated addresses/ports.

Inputs: body (required), policy_id (required).

sdcloud_create_nat_policy_rule_groupC

Create a rule group within a NAT policy.

Inputs: body (required), policy_id (required).

sdcloud_create_nat_policy_rule_in_groupC

Create a rule inside a NAT policy rule group. Body typically includes name, description, nat_type, sources, destinations, translated addresses/ports.

Inputs: body (required), group_id (required), policy_id (required).

sdcloud_create_nat_poolC

Create a new NAT pool object. Body typically includes name, description, pool_type, pool_address.

Inputs: body (required).

sdcloud_create_proxy_serverC

Create a new proxy server object.

Inputs: body (required).

sdcloud_create_redirect_profileB

Create a new redirect profile object.

Inputs: body (required).

sdcloud_create_rule_optionB

Create a new rule option object. Body typically includes name, description, authentication, web_options.

Inputs: body (required).

sdcloud_create_schedulerB

Create a new scheduler object. Body typically includes name, description, start-date1, stop-date1, schedules.

Inputs: body (required).

sdcloud_create_secintel_profileC

Create a new SecIntel profile object.

Inputs: body (required).

sdcloud_create_secintel_profile_groupB

Create a new SecIntel profile group object.

Inputs: body (required).

sdcloud_create_serviceB

Create a new service object. Body typically includes name, description, service_type, protocols.

Inputs: body (required).

sdcloud_create_siteB

Create a new site.

Inputs: body (required).

sdcloud_create_ssl_initiationA

Create a new SSL initiation object. Body typically includes name, protocol_version, cipher_strength, default_local_cert.

Inputs: body (required).

sdcloud_create_ssl_proxy_profileA

Create a new SSL proxy profile object. Body typically includes name, description, ssl_type, preferred_cipher.

Inputs: body (required).

sdcloud_create_subscription_associationB

Associate a subscription with a target resource (e.g. site or device).

Inputs: body (required), subscription_uuid (required).

sdcloud_create_swp_profileC

Create a new SWP profile object.

Inputs: body (required).

sdcloud_create_url_category_listA

Create a new URL category list object. Body typically includes name, description, url_patterns (list of {uuid}).

Inputs: body (required).

sdcloud_create_url_patternA

Create a new URL pattern object. Body typically includes name, description, address_patterns.

Inputs: body (required).

sdcloud_create_userC

Create a new user.

Inputs: body (required).

sdcloud_create_variable_zoneA

Create a new variable zone object. Body typically includes name, description, type, default_zone.

Inputs: body (required).

sdcloud_create_web_filtering_profileC

Create a new web filtering profile object.

Inputs: body (required).

sdcloud_delete_aamw_profileB

Delete an AAMW profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_addressB

Delete an address object by UUID.

Inputs: uuid (required).

sdcloud_delete_anti_spam_profileB

Delete an anti-spam profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_anti_virus_profileB

Delete an anti-virus profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_applicationC

Delete an application object by UUID.

Inputs: uuid (required).

sdcloud_delete_content_filtering_profileC

Delete a content filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_content_security_profileB

Delete a content security profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_device_certificateB

Delete a certificate from a device. Body typically includes the certificate id/type to remove.

Inputs: body (required), device_uuid (required).

sdcloud_delete_device_groupC

Delete a device group by UUID.

Inputs: uuid (required).

sdcloud_delete_device_image_definitionB

Delete a device software image definition by UUID.

Inputs: uuid (required).

sdcloud_delete_enhanced_content_filtering_profileB

Delete an enhanced content filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_enhanced_content_filtering_ruleC

Delete a rule within an enhanced content filtering profile rule set.

Inputs: uuid (required), profile_uuid (required), rule_set_uuid (required).

sdcloud_delete_enhanced_content_filtering_rule_setB

Delete a rule set within an enhanced content filtering profile. There is no get/update for a rule set itself (only its nested rules support get/update).

Inputs: uuid (required), profile_uuid (required).

sdcloud_delete_external_probeB

Delete the tenant external probe configuration.

Inputs: no named parameters.

sdcloud_delete_firewall_device_global_settingsC

Delete a per-device firewall global settings object by UUID.

Inputs: uuid (required).

sdcloud_delete_firewall_policyC

Delete a firewall policy by UUID.

Inputs: policy_uuid (required).

sdcloud_delete_firewall_policy_ruleB

Delete an ungrouped firewall policy rule.

Inputs: scope (required), rule_uuid (required), policy_uuid (required).

sdcloud_delete_firewall_policy_rule_groupB

Delete a rule group within a firewall policy scope. If ungroup_rules is true, member rules are kept and ungrouped instead of deleted.

Inputs: scope (required), group_uuid (required), policy_uuid (required), ungroup_rules.

sdcloud_delete_firewall_policy_rule_in_groupC

Delete a rule inside a firewall policy rule group.

Inputs: scope (required), rule_uuid (required), group_uuid (required), policy_uuid (required).

sdcloud_delete_flow_based_antivirus_profileC

Delete a flow-based antivirus profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_icap_profileB

Delete an ICAP profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_icap_serverB

Delete an ICAP server object by UUID.

Inputs: uuid (required).

sdcloud_delete_identity_objectC

Delete an identity object by UUID.

Inputs: uuid (required).

sdcloud_delete_ipsec_profileC

Delete an IPsec profile by name.

Inputs: profile_name (required).

sdcloud_delete_ips_profileC

Delete an IPS profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_ips_profile_exempt_ruleC

Delete an exempt rule within an IPS profile.

Inputs: rule_uuid (required), profile_uuid (required).

sdcloud_delete_ips_profile_ruleC

Delete an IPS rule within an IPS profile.

Inputs: rule_uuid (required), profile_uuid (required).

sdcloud_delete_ips_signatureB

Delete an IPS signature object by UUID.

Inputs: uuid (required).

sdcloud_delete_nat_policyC

Delete a NAT policy by ID.

Inputs: id (required).

sdcloud_delete_nat_policy_ruleB

Delete an ungrouped NAT policy rule.

Inputs: rule_id (required), policy_id (required).

sdcloud_delete_nat_policy_rule_groupA

Delete a rule group within a NAT policy. If ungroup_rules is true, member rules are kept and ungrouped instead of deleted. Note: NAT rule groups cannot be updated in place (no PUT); delete and recreate instead.

Inputs: group_id (required), policy_id (required), ungroup_rules.

sdcloud_delete_nat_policy_rule_in_groupC

Delete a rule inside a NAT policy rule group.

Inputs: rule_id (required), group_id (required), policy_id (required).

sdcloud_delete_nat_poolC

Delete a NAT pool object by pool ID.

Inputs: pool_id (required).

sdcloud_delete_proxy_serverA

Delete a proxy server object by UUID.

Inputs: uuid (required).

sdcloud_delete_redirect_profileC

Delete a redirect profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_rule_optionB

Delete a rule option object by UUID.

Inputs: uuid (required).

sdcloud_delete_schedulerC

Delete a scheduler object by UUID.

Inputs: uuid (required).

sdcloud_delete_secintel_profileB

Delete a SecIntel profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_secintel_profile_groupB

Delete a SecIntel profile group object by UUID.

Inputs: uuid (required).

sdcloud_delete_serviceC

Delete a service object by UUID.

Inputs: uuid (required).

sdcloud_delete_siteC

Delete a site by name.

Inputs: site_name (required).

sdcloud_delete_ssl_initiationB

Delete an SSL initiation object by UUID.

Inputs: uuid (required).

sdcloud_delete_ssl_proxy_profileB

Delete an SSL proxy profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_swp_profileB

Delete an SWP profile object by UUID.

Inputs: uuid (required).

sdcloud_delete_templateB

Delete a configuration template by id.

Inputs: template_id (required).

sdcloud_delete_template_mappingC

Delete a device mapping for a template.

Inputs: device_id (required), template_id (required).

sdcloud_delete_url_category_listC

Delete a URL category list object by UUID.

Inputs: uuid (required).

sdcloud_delete_url_patternC

Delete a URL pattern object by UUID.

Inputs: uuid (required).

sdcloud_delete_userB

Delete a user by uuid. Note: unlike get/update, the API spec names this path param "uuid" rather than "user_id".

Inputs: uuid (required).

sdcloud_delete_variable_zoneC

Delete a variable zone object by UUID.

Inputs: uuid (required).

sdcloud_delete_web_filtering_profileC

Delete a web filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_deploy_device_imageA

Deploy a single software image definition to its target device(s). Returns a job id; poll sdcloud_get_deploy_image_status for progress.

Inputs: body (required), image_uuid (required).

sdcloud_deploy_firewall_policyC

Deploy a single firewall policy to its assigned devices.

Inputs: policy_id (required).

sdcloud_deploy_nat_policyC

Deploy a single NAT policy to its assigned devices.

Inputs: policy_id (required).

sdcloud_deploy_siteC

Deploy a site by name.

Inputs: body (required), site_name (required).

sdcloud_deploy_templateB

Deploy a configuration template to its mapped devices. Returns a job id; poll sdcloud_get_template_deploy_status for progress.

Inputs: body (required), template_id (required).

sdcloud_download_template_csvA

Download the CSV device-parameter mapping file for a template. Body typically selects which devices/mappings to include. The response is passed through as-is (file content or a reference to it, per the API).

Inputs: body (required), template_id (required).

sdcloud_get_aamw_profileC

Get an AAMW profile object by UUID.

Inputs: uuid (required).

sdcloud_get_addressB

Get an address object by UUID.

Inputs: uuid (required).

sdcloud_get_anti_spam_profileB

Get an anti-spam profile object by UUID.

Inputs: uuid (required).

sdcloud_get_anti_virus_profileB

Get an anti-virus profile object by UUID.

Inputs: uuid (required).

sdcloud_get_applicationC

Get an application object by UUID.

Inputs: uuid (required).

sdcloud_get_config_rollback_statusC

Get the status of a device configuration rollback job.

Inputs: config_rollback_id (required).

sdcloud_get_content_filtering_profileB

Get a content filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_get_content_security_profileA

Get a content security profile object by UUID.

Inputs: uuid (required).

sdcloud_get_content_security_settingsA

Get the tenant-wide content security settings singleton.

Inputs: no named parameters.

sdcloud_get_delete_certificate_statusC

Get the status of a certificate-delete job.

Inputs: delete_certificate_id (required).

sdcloud_get_deploy_image_statusB

Get the status of a bulk device-image deploy job.

Inputs: deploy_image_id (required).

sdcloud_get_deviceC

Get a single device by UUID.

Inputs: device_uuid (required).

sdcloud_get_device_bootstrap_configC

Generate/retrieve the bootstrap configuration for a device.

Inputs: body (required), device_uuid (required).

sdcloud_get_device_config_idp_sensorsB

List a device's configured IDP sensors.

Inputs: device_uuid (required), from, size, filter.

sdcloud_get_device_config_interfacesC

List a device's configured interfaces.

Inputs: device_uuid (required), from, size, filter.

sdcloud_get_device_config_latest_versionC

Get metadata for a device's latest configuration revision.

Inputs: device_uuid (required).

sdcloud_get_device_config_routing_instancesC

List a device's configured routing instances.

Inputs: device_uuid (required), from, size, filter.

sdcloud_get_device_config_subinterfacesC

List all of a device's configured subinterfaces.

Inputs: device_uuid (required), from, size, filter.

sdcloud_get_device_config_zonesB

List a device's configured security zones.

Inputs: device_uuid (required), from, size, filter.

sdcloud_get_device_groupC

Get a device group by UUID.

Inputs: uuid (required).

sdcloud_get_device_interface_subinterfacesB

List subinterfaces configured under a specific interface on a device.

Inputs: device_uuid (required), interface_name (required), from, size, +1 more.

sdcloud_get_device_licenseC

Get a single license installed on a device.

Inputs: device_uuid (required), license_uuid (required).

sdcloud_get_enhanced_content_filtering_profileC

Get an enhanced content filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_get_enhanced_content_filtering_ruleC

Get a rule within an enhanced content filtering profile rule set.

Inputs: uuid (required), profile_uuid (required), rule_set_uuid (required).

sdcloud_get_external_probeB

Get the tenant external probe configuration.

Inputs: no named parameters.

sdcloud_get_firewall_device_global_settingsC

Get a per-device firewall global settings object by UUID.

Inputs: uuid (required).

sdcloud_get_firewall_global_profilesB

Get the tenant-wide firewall global profile singleton.

Inputs: no named parameters.

sdcloud_get_firewall_global_settingsA

Get the tenant-wide firewall global settings singleton.

Inputs: no named parameters.

sdcloud_get_firewall_policyC

Get a firewall policy by UUID.

Inputs: policy_uuid (required).

sdcloud_get_firewall_policy_ruleC

Get an ungrouped firewall policy rule.

Inputs: scope (required), rule_uuid (required), policy_uuid (required).

sdcloud_get_firewall_policy_rule_groupC

Get a single rule group within a firewall policy scope.

Inputs: scope (required), group_uuid (required), policy_uuid (required).

sdcloud_get_firewall_policy_rule_in_groupC

Get a rule inside a firewall policy rule group.

Inputs: scope (required), rule_uuid (required), group_uuid (required), policy_uuid (required).

sdcloud_get_firewall_policy_stateC

Get the deployment state of a firewall policy (e.g. up to date, pending, out of sync).

Inputs: policy_uuid (required), include_assigned_devices.

sdcloud_get_flow_based_antivirus_profileB

Get a flow-based antivirus profile object by UUID.

Inputs: uuid (required).

sdcloud_get_icap_profileA

Get an ICAP profile object by UUID.

Inputs: uuid (required).

sdcloud_get_icap_serverA

Get an ICAP server object by UUID.

Inputs: uuid (required).

sdcloud_get_identity_objectA

Get an identity object by UUID.

Inputs: uuid (required).

sdcloud_get_install_ca_certificate_statusC

Get the status of a CA certificate installation job.

Inputs: install_ca_certificate_id (required).

sdcloud_get_install_license_statusC

Get the status of a license installation job.

Inputs: install_license_id (required).

sdcloud_get_install_local_certificate_statusC

Get the status of a local certificate installation job.

Inputs: install_local_certificate_id (required).

sdcloud_get_ips_contextC

Get an IPS context by UUID.

Inputs: uuid (required).

sdcloud_get_ipsec_profileB

Get an IPsec profile by name.

Inputs: profile_name (required).

sdcloud_get_ips_profileB

Get an IPS profile object by UUID.

Inputs: uuid (required).

sdcloud_get_ips_profile_exempt_ruleC

Get an exempt rule within an IPS profile.

Inputs: rule_uuid (required), profile_uuid (required).

sdcloud_get_ips_profile_ruleC

Get an IPS rule within an IPS profile.

Inputs: rule_uuid (required), profile_uuid (required).

sdcloud_get_ips_serviceB

Get an IPS service by UUID.

Inputs: uuid (required).

sdcloud_get_ips_signatureC

Get an IPS signature object by UUID.

Inputs: uuid (required).

sdcloud_get_ips_vulnerabilityC

Get an IPS vulnerability by UUID.

Inputs: uuid (required).

sdcloud_get_mnha_cluster_sync_statusC

Get the status of an MNHA (Multi-Node High Availability) cluster sync job.

Inputs: mnha_sync_id (required).

sdcloud_get_nat_policyB

Get a NAT policy by ID.

Inputs: id (required).

sdcloud_get_nat_policy_ruleC

Get an ungrouped NAT policy rule.

Inputs: rule_id (required), policy_id (required).

sdcloud_get_nat_policy_rule_groupC

Get a single rule group within a NAT policy.

Inputs: group_id (required), policy_id (required).

sdcloud_get_nat_policy_rule_in_groupB

Get a rule inside a NAT policy rule group.

Inputs: rule_id (required), group_id (required), policy_id (required).

sdcloud_get_nat_policy_stateC

Get the deployment state of a NAT policy (e.g. up to date, pending, out of sync).

Inputs: policy_id (required), include_assigned_devices.

sdcloud_get_nat_poolB

Get a NAT pool object by pool ID.

Inputs: pool_id (required).

sdcloud_get_pac_fileC

Get a PAC file by name.

Inputs: name (required).

sdcloud_get_policy_cleanup_jobB

Get the status of a bulk policy cleanup job by cleanup_id.

Inputs: cleanup_id (required).

sdcloud_get_policy_cleanup_job_device_statusB

Get the per-device result of a bulk policy cleanup job.

Inputs: device_id (required), cleanup_id (required), format.

sdcloud_get_policy_deploy_jobB

Get the status of a bulk policy deploy job by deploy_id.

Inputs: deploy_id (required).

sdcloud_get_policy_deploy_job_device_statusC

Get the per-device result of a bulk policy deploy job.

Inputs: deploy_id (required), device_id (required), format.

sdcloud_get_policy_preview_jobC

Get the status of a bulk policy preview job by preview_id.

Inputs: preview_id (required).

sdcloud_get_policy_preview_job_device_statusC

Get the per-device result of a bulk policy preview job.

Inputs: device_id (required), preview_id (required), format.

sdcloud_get_policy_selective_deploy_jobC

Get the status of a bulk policy selective-deploy job by selective_deploy_id.

Inputs: selective_deploy_id (required).

sdcloud_get_policy_selective_deploy_job_device_statusC

Get the per-device result of a bulk policy selective-deploy job.

Inputs: device_id (required), selective_deploy_id (required), format.

sdcloud_get_proxy_serverC

Get a proxy server object by UUID.

Inputs: uuid (required).

sdcloud_get_proxy_server_configA

Get the proxy server configuration (singleton).

Inputs: no named parameters.

sdcloud_get_reboot_devices_statusC

Get the status of a bulk device-reboot job.

Inputs: reboot_id (required).

sdcloud_get_redirect_profileB

Get a redirect profile object by UUID.

Inputs: uuid (required).

sdcloud_get_remove_devices_statusC

Get the status of a bulk device-remove job.

Inputs: remove_id (required).

sdcloud_get_rma_device_stateB

Get the current RMA state of a device.

Inputs: device_id (required).

sdcloud_get_rma_reactivation_configC

Get the reactivation configuration for a device that is in RMA state.

Inputs: device_id (required).

sdcloud_get_rma_reactivation_statusB

Get the status of an RMA device-reactivation job.

Inputs: reactivation_id (required).

sdcloud_get_roleB

Get a role by ID.

Inputs: ID (required).

sdcloud_get_rule_optionB

Get a rule option object by UUID.

Inputs: uuid (required).

sdcloud_get_schedulerC

Get a scheduler object by UUID.

Inputs: uuid (required).

sdcloud_get_secintel_profileB

Get a SecIntel profile object by UUID.

Inputs: uuid (required).

sdcloud_get_secintel_profile_groupB

Get a SecIntel profile group object by UUID.

Inputs: uuid (required).

sdcloud_get_serviceC

Get a service object by UUID.

Inputs: uuid (required).

sdcloud_get_siteC

Get a site by name.

Inputs: site_name (required).

sdcloud_get_ssl_initiationA

Get an SSL initiation object by UUID.

Inputs: uuid (required).

sdcloud_get_ssl_proxy_profileA

Get an SSL proxy profile object by UUID.

Inputs: uuid (required).

sdcloud_get_stage_image_statusB

Get the status of a device-image staging job.

Inputs: stage_image_id (required).

sdcloud_get_swp_profileC

Get an SWP profile object by UUID.

Inputs: uuid (required).

sdcloud_get_sync_devices_statusC

Get the status of a bulk device-sync job.

Inputs: sync_id (required).

sdcloud_get_templateB

Get a configuration template by id.

Inputs: template_id (required).

sdcloud_get_template_deploy_result_by_deviceB

Get the per-device result of a template deploy job.

Inputs: deploy_id (required), device_id (required).

sdcloud_get_template_deploy_statusC

Get the overall status of a template deploy job.

Inputs: deploy_id (required).

sdcloud_get_template_mappingB

Get a single device mapping for a template.

Inputs: device_id (required), template_id (required).

sdcloud_get_template_preview_result_by_deviceC

Get the per-device result of a template preview job.

Inputs: device_id (required), preview_id (required).

sdcloud_get_template_preview_statusC

Get the overall status of a template preview job.

Inputs: preview_id (required).

sdcloud_get_template_validate_result_by_deviceC

Get the per-device result of a template validate job.

Inputs: device_id (required), validate_id (required).

sdcloud_get_template_validate_statusC

Get the overall status of a template validate job.

Inputs: validate_id (required).

sdcloud_get_tenant_idA

Get the tenant ID / token scope for the authenticated caller.

Inputs: no named parameters.

sdcloud_get_tenant_pop_users_countC

Get the count of users for a given tenant POP.

Inputs: tenant_pop_id (required).

sdcloud_get_tunnelC

Get a tunnel by ID.

Inputs: tunnel_id (required).

sdcloud_get_url_category_listA

Get a URL category list object by UUID.

Inputs: uuid (required).

sdcloud_get_url_patternB

Get a URL pattern object by UUID.

Inputs: uuid (required).

sdcloud_get_userC

Get a user by user_id.

Inputs: user_id (required).

sdcloud_get_variable_zoneB

Get a variable zone object by UUID.

Inputs: uuid (required).

sdcloud_get_web_filtering_profileB

Get a web filtering profile object by UUID.

Inputs: uuid (required).

sdcloud_install_device_ca_certificateC

Install a CA certificate on a device (multipart upload). Provide the certificate file as base64 in ca_certificate_content, plus the CA profile id to associate it with.

Inputs: device_uuid (required), ca_profile_id (required), ca_certificate_content (required), ca_certificate_file_name.

sdcloud_install_device_licenseA

Install a license on a device (multipart upload). Provide at least one of a primary license file (license_file_content) or, for an l2_cluster secondary device, a secondary license file (secondary_license_file_content), each base64-encoded.

Inputs: device_uuid (required), license_file_name, license_file_content, secondary_license_file_name, +1 more.

sdcloud_install_device_local_certificateC

Install a local certificate and its private key on a device (multipart upload). Provide the certificate id to associate, the certificate and key files as base64, and the pass phrase used to encrypt the key file.

Inputs: device_uuid (required), pass_phrase (required), certificate_id (required), local_certificate_content (required), +3 more.

sdcloud_list_aamw_profilesA

List Advanced Anti-Malware (AAMW) profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_addressesC

List address objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_anti_spam_profilesC

List anti-spam profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_anti_virus_profilesA

List anti-virus profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_applicationsA

List application objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ca_certificatesA

List CA certificates across the fleet, with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_content_filtering_profilesB

List content filtering profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_content_security_profilesB

List content security profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_device_ca_certificatesB

List CA certificates installed on a specific device.

Inputs: device_uuid (required), from, size, sortby, +1 more.

sdcloud_list_device_config_versionsC

List configuration version history for a device.

Inputs: device_uuid (required).

sdcloud_list_device_groupsB

List device groups with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_device_image_definitionsA

List device software image definitions with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_device_licensesC

List licenses installed on a specific device.

Inputs: device_uuid (required), from, size, sortby, +1 more.

sdcloud_list_device_local_certificatesB

List local certificates installed on a specific device.

Inputs: device_uuid (required), from, size, sortby, +1 more.

sdcloud_list_devicesB

List onboarded devices with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_enhanced_content_filtering_profilesB

List enhanced content filtering profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_enhanced_content_filtering_rulesC

List rules within an enhanced content filtering profile rule set.

Inputs: profile_uuid (required), rule_set_uuid (required), from, size, +4 more.

sdcloud_list_enhanced_content_filtering_rule_setsC

List rule sets within an enhanced content filtering profile.

Inputs: profile_uuid (required), from, size, count, +3 more.

sdcloud_list_firewall_device_global_settingsB

List per-device firewall global settings with optional filtering and pagination.

Inputs: limit, offset, device_id.

sdcloud_list_firewall_policiesB

List firewall policies with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_firewall_policy_assignmentsC

List device/site assignments for a firewall policy.

Inputs: policy_id (required), from, size, fields, +2 more.

sdcloud_list_firewall_policy_hierarchyB

List a firewall policy's rule hierarchy for a given scope (global or zone).

Inputs: scope (required), policy_uuid (required), from, size, +3 more.

sdcloud_list_firewall_policy_rule_groupsC

List rule groups within a firewall policy scope.

Inputs: scope (required), policy_uuid (required), from, size, +3 more.

sdcloud_list_firewall_policy_rulesB

List ungrouped rules directly under a firewall policy scope.

Inputs: scope (required), policy_uuid (required), from, size, +3 more.

sdcloud_list_firewall_policy_rules_in_groupB

List rules within a firewall policy rule group.

Inputs: scope (required), group_uuid (required), policy_uuid (required), from, +4 more.

sdcloud_list_flow_based_antivirus_profilesB

List flow-based antivirus profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_icap_profilesC

List ICAP profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_icap_serversA

List ICAP server objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_identity_objectsA

List identity objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ips_anomaly_testsA

List available IPS anomaly tests (read-only reference data), optionally filtered by service.

Inputs: from, size, service.

sdcloud_list_ips_contextsA

List IPS contexts (read-only reference data) with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ipsec_profilesA

List all IPsec profiles. This endpoint does not support pagination params.

Inputs: no named parameters.

sdcloud_list_ips_profile_exempt_rulesC

List exempt rules within an IPS profile.

Inputs: profile_uuid (required), from, size, sortby, +1 more.

sdcloud_list_ips_profile_rulesB

List IPS rules within an IPS profile.

Inputs: profile_uuid (required), from, size, sortby, +1 more.

sdcloud_list_ips_profilesB

List IPS profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ips_servicesB

List IPS services (read-only reference data) with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ips_signature_categoriesA

List available IPS signature categories (read-only reference data).

Inputs: from, size.

sdcloud_list_ips_signaturesA

List IPS signature objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ips_vulnerabilitiesB

List IPS vulnerabilities (read-only reference data) with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_local_certificatesB

List local certificates across the fleet, with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_nat_policiesC

List NAT policies with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_nat_policy_arp_entriesC

List ARP entries for a NAT policy (read-only). Used to inspect proxy-ARP address resolution for static/source/destination NAT translations.

Inputs: nat_type (required), policy_id (required), address_ids (required), traffic_match_type (required), +3 more.

sdcloud_list_nat_policy_assignmentsC

List device/site assignments for a NAT policy.

Inputs: policy_id (required), from, size, fields, +2 more.

sdcloud_list_nat_policy_hierarchyA

List a NAT policy's rule hierarchy. Unlike firewall policies, NAT policies have no global/zone scope segment.

Inputs: policy_id (required), from, size, count, +2 more.

sdcloud_list_nat_policy_proxy_ndp_entriesB

List proxy NDP (Neighbor Discovery Protocol) entries for a NAT policy (read-only). IPv6 analogue of ARP entries.

Inputs: nat_type (required), policy_id (required), address_ids (required), traffic_match_type (required), +3 more.

sdcloud_list_nat_policy_rule_groupsC

List rule groups within a NAT policy.

Inputs: policy_id (required), from, size, count, +2 more.

sdcloud_list_nat_policy_rulesB

List ungrouped rules directly under a NAT policy.

Inputs: policy_id (required), from, size, count, +2 more.

sdcloud_list_nat_policy_rules_in_groupC

List rules within a NAT policy rule group.

Inputs: group_id (required), policy_id (required), from, size, +3 more.

sdcloud_list_nat_poolsA

List NAT pool objects with optional pagination, filtering, and sorting.

Inputs: from, size, filter, sortby.

sdcloud_list_pac_filesC

List all PAC files. This endpoint does not support pagination params.

Inputs: no named parameters.

sdcloud_list_proxy_serversA

List proxy server objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_redirect_profilesB

List redirect profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_rolesB

List roles with optional spec.size/spec.from pagination.

Inputs: spec.from, spec.size.

sdcloud_list_rule_optionsA

List rule option objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_schedulersA

List scheduler objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_secintel_profilesB

List SecIntel profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_secintel_profiles_groupsA

List SecIntel profile group objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_servicesA

List service objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_sitesB

List sites with optional spec.size/spec.from pagination.

Inputs: spec.from, spec.size.

sdcloud_list_ssl_initiationsB

List SSL initiation objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_ssl_proxy_profilesB

List SSL proxy profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_subscription_associationsA

List associations (e.g. sites/devices) for a subscription, with optional pagination, filtering, and sorting.

Inputs: subscription_uuid (required), from, size, sortby, +1 more.

sdcloud_list_subscriptionsC

List subscriptions with optional pagination, filtering, and sorting.

Inputs: from, size, sortby, filters.

sdcloud_list_swp_profilesA

List SWP (SSL/Web Proxy) profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_template_mappingsA

List device mappings for a template, with optional pagination, filtering, and sorting.

Inputs: template_id (required), from, size, count, +2 more.

sdcloud_list_templatesB

List configuration templates with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_tenant_popsC

List tenant points-of-presence with optional spec.size/spec.from pagination.

Inputs: spec.from, spec.size.

sdcloud_list_tunnelsB

List tunnels with optional spec.size/spec.from pagination.

Inputs: spec.from, spec.size.

sdcloud_list_url_category_listsA

List URL category list objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_url_patternsB

List URL pattern objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_usersC

List users with optional spec.size/spec.from pagination.

Inputs: spec.from, spec.size.

sdcloud_list_variable_zonesA

List variable zone objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_list_web_filtering_profilesB

List web filtering profile objects with optional pagination, filtering, and sorting.

Inputs: from, size, count, sortby, +1 more.

sdcloud_move_firewall_policy_rule_in_groupB

Move (reorder) a single rule within its firewall policy rule group.

Inputs: scope (required), position (required), rule_uuid (required), group_uuid (required), +1 more.

sdcloud_move_nat_policy_rule_groupsB

Reorder/move rule groups within a NAT policy. Unlike firewall (which moves individual rules via rules/{rule_uuid}/move), NAT moves are performed at the rule_groups collection level.

Inputs: body (required), policy_id (required).

sdcloud_prevalidate_siteA

Validate site parameters before creating a site.

Inputs: body (required).

sdcloud_preview_firewall_policyA

Preview the configuration diff a firewall policy deployment would produce. Body requires deploy_targets and/or undeploy_targets (each a list of {target_id, target_type}).

Inputs: body (required), policy_id (required).

sdcloud_preview_nat_policyA

Preview the configuration diff a NAT policy deployment would produce. Body requires deploy_targets and/or undeploy_targets (each a list of {target_id, target_type}).

Inputs: body (required), policy_id (required).

sdcloud_preview_templateA

Preview the configuration a template deployment would produce. Returns a job id; poll sdcloud_get_template_preview_status for progress.

Inputs: body (required), template_id (required).

sdcloud_reactivate_rma_deviceA

Reactivate a replacement device with the configuration of a prior RMA device. Returns a job id; poll sdcloud_get_rma_reactivation_status for progress.

Inputs: body (required), device_id (required).

sdcloud_reboot_devicesA

Bulk-reboot devices. Body typically includes a list of device UUIDs. Returns a job id; poll sdcloud_get_reboot_devices_status for progress.

Inputs: body (required).

sdcloud_remove_devicesB

Bulk-remove devices. Body typically includes a list of device UUIDs to remove. Returns a job id; poll sdcloud_get_remove_devices_status for progress.

Inputs: body (required).

sdcloud_rollback_device_config_versionA

Trigger a rollback of a device to a prior configuration version. Returns a job id; poll sdcloud_get_config_rollback_status for progress.

Inputs: device_uuid (required), version_number (required).

sdcloud_selective_deploy_firewall_policyC

Deploy a firewall policy to a selective subset of its assigned devices.

Inputs: body (required), policy_id (required).

sdcloud_selective_deploy_nat_policyC

Deploy a NAT policy to a selective subset of its assigned devices.

Inputs: body (required), policy_id (required).

sdcloud_send_activate_user_emailB

Send an account activation email to a user.

Inputs: body (required).

sdcloud_set_content_security_settingsA

Update the tenant-wide content security settings singleton.

Inputs: body (required).

sdcloud_set_firewall_global_profilesB

Update the tenant-wide firewall global profile singleton.

Inputs: body (required).

sdcloud_set_firewall_global_settingsB

Update the tenant-wide firewall global settings singleton.

Inputs: body (required).

sdcloud_set_proxy_server_configC

Set/update the proxy server configuration (singleton).

Inputs: body (required).

sdcloud_set_rma_reactivation_preferencesC

Set up an RMA device with reactivation preferences for the replacement workflow.

Inputs: body (required), device_id (required).

sdcloud_stage_device_imageA

Stage (pre-position) a single software image definition on its target device(s) without activating it. Returns a job id; poll sdcloud_get_stage_image_status for progress.

Inputs: body (required), image_uuid (required).

sdcloud_start_policy_cleanup_jobA

Start a bulk cleanup job across multiple policies, removing unused objects/rules. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Inputs: body (required).

sdcloud_start_policy_deploy_jobA

Start a bulk deploy job across multiple policies/devices. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time. Body typically includes a list of policy_ids and/or device_ids to deploy.

Inputs: body (required).

sdcloud_start_policy_preview_jobA

Start a bulk preview job across multiple policies/devices, computing the configuration diff a deploy would produce without applying it. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Inputs: body (required).

sdcloud_start_policy_selective_deploy_jobA

Start a bulk selective-deploy job, deploying multiple policies to a selective subset of their assigned devices. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Inputs: body (required).

sdcloud_sync_devicesA

Bulk-sync devices with the controller. Body typically includes a list of device UUIDs. Returns a job id; poll sdcloud_get_sync_devices_status for progress.

Inputs: body (required).

sdcloud_sync_mnha_clusterA

Trigger a sync of an MNHA (Multi-Node High Availability) cluster. Returns a job id; poll sdcloud_get_mnha_cluster_sync_status for progress.

Inputs: body (required), mnha_cluster_id (required).

sdcloud_tunnel_status_countB

Get a count of tunnels grouped by status.

Inputs: no named parameters.

sdcloud_update_aamw_profileC

Update an AAMW profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_addressC

Update an address object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_anti_spam_profileC

Update an anti-spam profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_anti_virus_profileC

Update an anti-virus profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_applicationC

Update an application object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_content_filtering_profileC

Update a content filtering profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_content_security_profileC

Update a content security profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_device_groupB

Update a device group by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_enhanced_content_filtering_profileC

Update an enhanced content filtering profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_enhanced_content_filtering_ruleC

Update a rule within an enhanced content filtering profile rule set.

Inputs: body (required), uuid (required), profile_uuid (required), rule_set_uuid (required).

sdcloud_update_firewall_device_global_settingsC

Update a per-device firewall global settings object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_firewall_policyC

Update a firewall policy by UUID.

Inputs: body (required), policy_uuid (required).

sdcloud_update_firewall_policy_ruleB

Update an ungrouped firewall policy rule.

Inputs: body (required), scope (required), rule_uuid (required), policy_uuid (required).

sdcloud_update_firewall_policy_rule_groupC

Update a rule group within a firewall policy scope.

Inputs: body (required), scope (required), group_uuid (required), policy_uuid (required).

sdcloud_update_firewall_policy_rule_in_groupC

Update a rule inside a firewall policy rule group.

Inputs: body (required), scope (required), rule_uuid (required), group_uuid (required), +1 more.

sdcloud_update_flow_based_antivirus_profileC

Update a flow-based antivirus profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_icap_profileC

Update an ICAP profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_icap_serverA

Update an ICAP server object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_identity_objectC

Update an identity object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_ipsec_profileC

Update an IPsec profile by name.

Inputs: body (required), profile_name (required).

sdcloud_update_ips_profileB

Update an IPS profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_ips_profile_exempt_ruleC

Update an exempt rule within an IPS profile.

Inputs: body (required), rule_uuid (required), profile_uuid (required).

sdcloud_update_ips_profile_ruleC

Update an IPS rule within an IPS profile.

Inputs: body (required), rule_uuid (required), profile_uuid (required).

sdcloud_update_ips_signatureC

Update an IPS signature object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_nat_policyC

Update a NAT policy by ID.

Inputs: id (required), body (required).

sdcloud_update_nat_policy_ruleB

Update an ungrouped NAT policy rule.

Inputs: body (required), rule_id (required), policy_id (required).

sdcloud_update_nat_policy_rule_in_groupC

Update a rule inside a NAT policy rule group.

Inputs: body (required), rule_id (required), group_id (required), policy_id (required).

sdcloud_update_nat_poolB

Update a NAT pool object by pool ID.

Inputs: body (required), pool_id (required).

sdcloud_update_proxy_serverC

Update a proxy server object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_redirect_profileC

Update a redirect profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_rule_optionC

Update a rule option object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_schedulerC

Update a scheduler object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_secintel_profileC

Update a SecIntel profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_secintel_profile_groupC

Update a SecIntel profile group object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_serviceC

Update a service object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_siteC

Update a site by name.

Inputs: body (required), site_name (required).

sdcloud_update_ssl_initiationC

Update an SSL initiation object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_ssl_proxy_profileC

Update an SSL proxy profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_swp_profileC

Update an SWP profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_template_mappingC

Update a device mapping for a template.

Inputs: body (required), device_id (required), template_id (required).

sdcloud_update_url_category_listB

Update a URL category list object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_url_patternC

Update a URL pattern object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_userC

Update a user by user_id.

Inputs: body (required), user_id (required).

sdcloud_update_variable_zoneC

Update a variable zone object by UUID.

Inputs: body (required), uuid (required).

sdcloud_update_web_filtering_profileB

Update a web filtering profile object by UUID.

Inputs: body (required), uuid (required).

sdcloud_upload_template_csvC

Upload a CSV file of device parameter mappings for a template (multipart upload). Provide the CSV content base64-encoded.

Inputs: template_id (required), file_content (required), file_name.

sdcloud_upload_template_workflow_definitionA

Upload a workflow definition YAML file to create/register a new template (multipart upload). Provide the YAML content base64-encoded.

Inputs: file_content (required), file_name.

sdcloud_validate_templateA

Validate a configuration template against its mapped devices. Returns a job id; poll sdcloud_get_template_validate_status for progress.

Inputs: body (required), template_id (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

C2.9/5.0

Scored 2026-09-09 18:01 across 368 tools

Disambiguation4/5

Most tools follow a clear resource+action pattern, and descriptions generally resolve ambiguity between similar objects. However, at 368 tools there are many close parallels—firewall vs. NAT policy hierarchies, ungrouped rules vs. rules-in-group, and multiple filtering profile families—that create real selection friction for an agent.

Naming Consistency4/5

The sdcloud_<verb>_<object> convention is used broadly and is mostly predictable. Minor deviations like tunnel_status_count, remove_devices vs. delete_*, change_password, set_* vs. update_*, and start_*_job vs. deploy/preview prevent a perfect score.

Tool Count1/5

368 tools is an extreme count for any MCP server, even one covering a broad security management domain. The surface is far too large for an agent to reliably navigate, with dozens of near-parallel CRUD, hierarchy, and job-polling tool families.

Completeness4/5

The toolset covers an unusually wide range of domains: firewall/NAT policies, security profiles, devices, templates, certificates, and users. A few partial areas remain—subscription associations lack a delete operation, device image definitions lack get/update, and the external probe has create/get/delete but no update—but there are no severe dead ends.

Maintenance

ActivityMaintained

ResponsivenessNo recent community issues

Resources

Related MCP Connectors

jumpcloud-genai
com.jumpcloud
An MCP server that provides an API to LLMs to manage their JumpCloud resources.
Cloud Platforms Security Developer Tools
2
https://mcp.jumpcloud.com/v1
Unified.to MCP ServerB
to.unified.docs
Unified MCP Server is a remote MCP connector for AI agents and vertical AI products that provides access to 22,000+ authorized SaaS tools across 400+ integrations and 24 categories directly inside LLMs (Claude, GPT, Gemini, Cohere). Tools operate only on explicitly authorized customer connections, enabling agents to safely read and write against live third-party systems.
App Automation Agent Orchestration Developer Tools
362
https://mcp-api.unified.to/mcp
Flowra
io.github.flowradev
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Agent Orchestration Autonomous Agents
11
https://mcp.flowra.dev/mcp
Speakeasy Platform MCP
com.speakeasy.ai
Secure and manage MCP servers through the Speakeasy AI Control Plane from your agent.
Developer Tools Security Agent Orchestration
1277
https://ai.speakeasy.com/platform-mcp

Related MCP Servers

HS-StoneOS-MCP Server
Networking & Infrastructure Security
zhongtao1hao
A
license
Not graded
quality
D
maintenance
Provides 129 MCP tools for querying and managing Hillstone StoneOS firewalls, enabling AI assistants to perform network operations through natural language.
Updated 4 months ago (2026-07-28 08:56 UTC)
ISC
HPE Aruba Networking Central
Networking & Infrastructure Cloud Platforms
akshaysiddaram
F
license
Not graded
quality
D
maintenance
Production-grade MCP server that exposes the complete HPE Aruba Networking Central REST API as 90 tools across 19 categories, enabling AI assistants to manage Aruba Central networks.
Updated 8 months ago (2026-03-11 13:26 UTC)
-
hpe-edgeconnect-mcp
Networking & Infrastructure Monitoring Cloud Platforms
anderson-jason573
A
license
Not graded
quality
D
maintenance
MCP server that exposes HPE Aruba EdgeConnect Orchestrator SD-WAN infrastructure as LLM-callable tools for listing appliances, reading interface/tunnel/bandwidth state, and changing HPE SSE tunnel state.
Updated 3 months ago (2026-08-17 18:30 UTC)
1
Apache 2.0
Mist MCP Server
Networking & Infrastructure Monitoring Observability
adam5isalive
F
license
Not graded
quality
D
maintenance
Exposes Juniper Mist REST API as 22 curated MCP tools, enabling AI agents to query and manage network resources like sites, devices, WLANs, and Marvis AI insights through natural language.
Updated 3 months ago (2026-08-13 13:10 UTC)
-

hpe-security-director-cloud-mcp

Setup

Configuration

Single Org (Direct .env)

Multiple Orgs (Claude Desktop)

Running

Audit Logging

Architecture

Notes

Available Tools

Tool Schema Changelog

TDQS

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

HS-StoneOS-MCP Server

HPE Aruba Networking Central

hpe-edgeconnect-mcp

Mist MCP Server