fleetcheck-mcp

An MCP server that gives Claude safe, read-only network & service diagnostics — ping, DNS, HTTP health, TLS expiry, single-port checks, traceroute, and whole-fleet sweeps.

Why this exists

My day job is keeping 890 retail stores' registers and networks online. When a store calls saying "the internet is down", there's a first-call ritual every ops person knows: ping the gateway, check DNS, hit the health endpoint, see if the VPN port answers, glance at the cert that's been quietly counting down to expiry. fleetcheck packages exactly those checks as MCP tools, so Claude can run the ritual for you — across one host or fifty — and tell you what's actually broken.

Related MCP server: nslookup.io MCP Server

Tools

Every tool returns a structured dict. Failures — host down, DNS miss, timeout, bad input — come back as data ({"ok": false, "error": "..."}), never as a crashed tool call, so Claude can reason about why something failed.

Install

Requires Python 3.10+ and uv (for uvx), or plain pip.

Claude Code

claude mcp add fleetcheck -- uvx fleetcheck-mcp

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "fleetcheck": {
      "command": "uvx",
      "args": ["fleetcheck-mcp"]
    }
  }
}

From PyPI directly

pip install fleetcheck-mcp
fleetcheck-mcp   # runs the server over stdio

Example conversation

You: Claude, sweep these 5 store gateways and tell me which are down: 10.1.1.1, 10.1.2.1, 10.1.3.1, 10.1.4.1, 10.1.5.1

Claude: (calls fleet_sweep with check="ping") 4 of 5 gateways are up. 10.1.3.1 is down — 100% packet loss. Of the reachable ones, 10.1.5.1 is the slowest at 240 ms average RTT; the rest answer in under 20 ms. Want me to traceroute 10.1.3.1 to see where the path dies?

Other things that work well:

• "Ping the store-042 gateway, and if it's up, check whether port 443 answers."

• "Check every cert on this list and flag anything expiring inside 30 days."

• "portal.example.com feels slow — check DNS resolution time, then HTTP latency, and tell me which one is the problem."

Safety

fleetcheck is a diagnostics tool, not a scanner, and it's built to stay that way:

• Read-only. Every tool observes (ICMP echo, DNS query, HTTP GET, TCP connect, TLS handshake, traceroute). Nothing configures, writes to, or restarts anything.

• Single-port checks only. tcp_port_check (and fleet_sweep with check="port") accepts exactly one integer port per call. Port ranges and lists are rejected by validation.

• 50-host cap. fleet_sweep refuses lists longer than 50 hosts, and runs at most 10 checks concurrently.

• Strict input validation. Hosts are whitelist-validated (hostname characters or parseable IPs); shell metacharacters and flag-like leading dashes are rejected. Subprocess arguments are always passed as lists — never through a shell. Every numeric input is clamped and every call has a timeout.

• Use it on your own infrastructure. These checks are harmless individually, but you should only point them at systems you operate or have explicit permission to test.

Development

git clone https://github.com/seifosmaan53/fleetcheck-mcp
cd fleetcheck-mcp
python -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
pytest

Tests run entirely against localhost and canned command output (macOS and Linux ping formats) — no external network required. CI runs the suite on Python 3.10–3.12; releases publish to PyPI via trusted publishing.

License

MIT — © 2026 Seif Osman