Cisco Catalyst SD-WAN MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| VMANAGE_HOST | Yes | Manager hostname or IP (no https://). Required. | |
| VMANAGE_PORT | No | HTTPS port. Default is 443. | 443 |
| VMANAGE_USE_JWT | No | Set to false to use session-cookie auth for Manager releases before 20.18.1. Default is true. | true |
| VMANAGE_PASSWORD | Yes | API password. Required. | |
| VMANAGE_USERNAME | Yes | API username. Required. | |
| VMANAGE_TIMEOUT_MS | No | Per-request timeout in milliseconds. Default is 120000. | 120000 |
| VMANAGE_ALLOW_WRITE | No | Set to true to allow write operations through call_api_operation; each write still needs confirm: true. Default is false. | false |
| VMANAGE_MAX_CONCURRENCY | No | Maximum simultaneous requests sent to the Manager. Default is 8. | 8 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_api_categoriesA | List all vManage API categories (from the connected vManage OpenAPI spec) with counts of read, write and blocked operations. Start here to explore APIs not covered by a dedicated tool. |
| search_api_operationsA | Search every vManage API operation by keywords (matched against path, operationId, category and summary). Returns operation_id values for describe_api_operation / call_api_operation. |
| describe_api_operationA | Show the documented parameters, request body schema/example, access level and description for one vManage API operation. |
| call_api_operationA | Call any vManage API operation by operation_id. Parameters and body are validated against the vManage OpenAPI spec. Read operations run directly; write operations require VMANAGE_ALLOW_WRITE=true on the server and confirm: true (only after the user approves the change). |
| list_devicesA | List all devices in the SD-WAN fabric (vEdges, vSmarts, vBonds, vManage). Returns hostname, system-ip, device-type, status, site-id, version. |
| get_device_detailsB | Get detailed information for a specific device by device ID or system IP. |
| list_reachable_devicesA | List devices that are currently reachable in the SD-WAN fabric. |
| list_controllersA | List vManage, vSmart, and vBond controllers in the fabric. |
| get_control_connectionsB | Get control plane connection status for a device. Shows connections to vSmart/vBond. |
| get_control_connections_historyB | Get control connection history for a device (past connection attempts, errors, and down reasons). |
| get_control_local_propertiesB | Get control plane local properties for a device (system-ip, site-id, org name, certificate status, vBond address, max controllers). |
| get_control_wan_interfacesB | Get control plane WAN interface (TLOC) state for a device: color, public/private IP and port, control connection counts. |
| get_control_valid_devicesA | Get the authorized device lists held by a Controller (vSmart). Use a controller system-ip. |
| get_control_affinityC | Get controller group affinity configuration or status for a device. |
| get_control_linksB | Fabric-wide: list control connection links between all devices in the given state. |
| get_control_statusB | Fabric-wide: control connection up/down status counts (dashboard view). |
| get_control_countB | Get fabric-wide control connection counts, optionally for one site. |
| get_control_network_summaryB | Fabric-wide: per-device control plane summary (control connections, OMP peers, vSmart peers, reachability). |
| get_network_connections_summaryA | Fabric-wide: reachable/unreachable counts per device class (vSmart, WAN Edge, vBond, vManage). |
| get_control_summaryC | Get control plane summary (device count) for a device. |
| get_control_statisticsC | Get control plane DTLS connection statistics for a device. |
| get_omp_peersC | Get OMP (Overlay Management Protocol) peers for a device. |
| get_omp_routesA | Get OMP routes received or advertised by a device. Filter by VPN and/or prefix to limit output. |
| get_omp_tlocsC | Get OMP TLOC routes received or advertised by a device. |
| get_omp_servicesA | Get OMP service routes (VPN, firewall, IDS, etc.) known to a device. |
| get_omp_multicastC | Get OMP multicast routes or multicast auto-discovery entries for a device. |
| get_omp_cloudxC | Get OMP Cloud OnRamp (CloudExpress) routes for a device. |
| get_omp_linksA | Fabric-wide: list OMP peering links between all devices in the given state. |
| get_omp_statusA | Fabric-wide: OMP peering up/down status counts (dashboard view). |
| get_omp_summaryC | Get OMP summary for a device. |
| get_validator_connectionsB | Get connections on a Validator (vBond), current or history. Use the validator system-ip. |
| get_validator_summaryC | Get Validator (vBond) connection summary. |
| get_validator_statisticsC | Get Validator (vBond) DTLS/control packet statistics. |
| get_validator_local_propertiesB | Get Validator (vBond) local properties (org name, certificate state, system-ip). |
| get_validator_valid_devicesB | Get the authorized device lists held by a Validator (vBond). |
| get_validator_proxy_mappingC | Get Validator (vBond) NAT/proxy mapping table. |
| get_bfd_sessionsB | Get BFD (Bidirectional Forwarding Detection) sessions for a device. |
| get_bfd_summaryC | Get BFD session summary for a device. |
| get_bfd_tlocB | Get BFD session summary per TLOC for a device. |
| get_device_interfacesC | Get interface status and configuration for a device. |
| get_system_statusA | Get system status (CPU, memory, uptime) for a device. |
| get_device_arpB | Get ARP table (IPv4 to MAC mappings) for a device. |
| get_app_route_statisticsB | Get application-aware routing statistics (tunnel stats) for a device. |
| get_app_route_sla_classC | Get SLA class information for application-aware routing on a device. |
| get_bgp_neighborsC | Get BGP neighbors for a device. |
| get_bgp_routesC | Get BGP routes for a device. |
| get_bgp_summaryC | Get BGP summary for a device. |
| get_cflowd_flowsC | Get cflowd flow information for a device. |
| get_cflowd_statisticsC | Get cflowd packet statistics for a device. |
| get_app_log_flowsC | Get packet flow logging information for a device. |
| get_app_log_flow_countB | Get count of packet flows being logged for a device. |
| get_sdwan_statsB | Get SD-WAN statistics (ACL drops, data policy, device metrics) for a device. |
| get_ux2_overviewA | UX 2.0 configuration overview in one call: configuration groups, policy groups and topology groups with device counts and deployment state (up-to-date / failed / in progress), plus feature profile counts per type. |
| list_config_groupsB | List UX 2.0 configuration groups with their feature profiles, device counts and deployment state. |
| get_config_groupA | Get one configuration group (by ID or exact name) with its feature profiles and associated devices. |
| get_config_group_device_variablesB | Get device-specific variable values of a configuration group (all devices, or one device). |
| preview_config_group_device_configA | Read-only: render the configuration a configuration group would push to one device, compared with its running configuration. Shows a line diff by default. Nothing is deployed. |
| list_policy_groupsA | List UX 2.0 policy groups with their profiles, device counts and deployment state. |
| get_policy_groupA | Get one policy group (by ID or exact name) with its profiles and associated devices. |
| list_topology_groupsB | List UX 2.0 topology groups (hub-and-spoke / mesh topologies) with device counts and state. |
| get_topology_groupA | Get one topology group (by ID or exact name) with its topology profiles. |
| list_feature_profilesA | List UX 2.0 feature profiles. Without profile_type, returns every profile type of the solution (system, transport, service, cli, policy-object, application-priority, embedded-security, ...). |
| get_feature_profileB | Get one UX 2.0 feature profile with its features (parcels): e.g. system (AAA, banner, logging, NTP...), transport (WAN VPN, interfaces, routing), service (LAN VPNs, interfaces, routing). |
| get_network_hierarchyA | Get the UX 2.0 network hierarchy (global, regions, areas and sites) used by configuration groups and policies. |
| list_device_templatesB | List device templates (master templates) in vManage. |
| list_feature_templatesB | List all feature templates in vManage. |
| get_attached_devicesB | Get devices attached to a specific device template. |
| get_template_definitionC | Get the definition/configuration of a device or feature template. |
| list_policy_listsB | List policy lists (app, aspath, color, community, data-prefix, etc.). |
| list_policy_definitionsB | List policy definitions of one type (ACL, app-route, data, control, etc.). |
| list_policiesC | List centralized (vsmart), localized (vedge) and security policies. |
| get_cloudx_statusB | Get CloudExpress (Cloud OnRamp) status - sites per application. |
| get_cloudx_gateway_listC | Get CloudExpress gateway list. |
| get_cloudx_client_listC | Get CloudExpress client/site list. |
| get_cloudx_appsC | Get CloudExpress apps and VPNs configuration. |
| list_alarmsC | List active alarms from vManage. |
| get_certificate_summaryB | Get certificate validity summary for devices. |
| list_vedge_inventoryA | List WAN edge inventory (authorized device list) with certificate and validity status. |
| get_cluster_statusA | Get vManage cluster health status per node. |
| list_custom_appsB | List custom application definitions. |
| get_device_vpnC | Get VPN configuration for a device. |
| get_device_tlocC | Get TLOC (Transport Locator) information for a device. |
| get_bridge_tableB | Get bridge forwarding table for a device. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 83 tools
Most tools target distinct resources (OMP, BFD, BGP, CloudExpress, config groups), but several fabric-wide control tools overlap heavily (get_control_summary, get_control_status, get_control_count, get_control_network_summary) and OMP has similar summary/status variants. Descriptions help somewhat, but an agent could easily misselect among these near-duplicates.
Names overwhelmingly follow a snake_case verb_noun pattern (list_devices, get_omp_peers, get_bfd_summary), which is easy to scan. Minor deviations appear in generic API tools (search_api_operations, describe_api_operation, call_api_operation) and preview_config_group_device_config, but the convention remains readable.
83 tools is far beyond a reasonable surface for one server and forces agents to sift through many near-duplicate monitoring endpoints. While the SD-WAN domain is broad, the count feels inflated and would benefit from consolidation into aggregate or parameterized tools.
The surface covers a wide range of SD-WAN monitoring domains (devices, control/OMP, BFD, BGP, templates, policies, UX 2.0 groups) and provides a generic API escape hatch for uncovered operations. Some lifecycle gaps remain (most tools are read-only; write coverage relies on call_api_operation), but core observability is well represented.