"Cisco" matching MCP servers:

MCP server for Cisco Umbrella that enables querying DNS/proxy/firewall/AMP activity reports, roaming computers, app discovery data, and managed provider customer/console information via the classic Umbrella REST API v2.

Exposes Cisco ISE ERS and MNT APIs as MCP tools for querying and managing identity, endpoints, sessions, authentication logs, and policy context.

Provides AI assistants with read-only access to Cisco Duo identity and MFA administration data, including users, enrolled devices, tokens, groups, integrations, and authentication/administrator/telephony logs.

Provides AI assistants with read-only access to Cisco Umbrella's NextGen REST API for deployment, admin, policy, reporting, and investigate visibility, enabling DNS and cloud security monitoring through natural language.

An MCP server that can support multiple Cisco ISE deployments.

A local MCP server that exposes Cisco IQ's Assets and Assessments REST APIs as read-only MCP tools, enabling AI assistants to query asset inventory, contracts, lifecycle data, security advisories, and field notices.

Enables AI assistants to query and manage Cisco Secure Firewall Management Center devices, policies, and deployments over streamable HTTP, and is designed to demonstrate Cisco AI Defense's in-path control of MCP tool calls.

A community MCP server for Cisco Secure Access that exposes the Secure Access REST API to AI clients as a curated catalog of tools for Admin, Deployments, Investigate, Policies, and Reports.

A read-only MCP server for Cisco Firepower Management Center (FMC) 7.4.x, allowing LLMs to query firewall configuration, search network objects, and check deployment status through natural language.

A production-quality MCP server for querying Cisco security advisories via the PSIRT OpenVuln API v2, enabling LLM-powered interfaces to search, filter, and analyze Cisco vulnerability data.

Enables AI agents to investigate threats, pull reports, manage security policies, and administer deployment infrastructure through the Cisco Secure Access REST API.

MCP server that exposes high-level tooling for Cisco Secure Firewall Management Center (FMC), allowing discovery of FMC profiles and searching access rules by IP, FQDN, or identity indicators.

Enables AI agents to query and manage Cisco Crosswork Network Controller resources such as devices, credential profiles, providers, topology, tags, alarms, users, applications, and inventory jobs, with optional write operations for creating, updating, and deleting devices, credential profiles, and providers.

Checks whether a product version (Windows, macOS/iOS, FortiOS, PAN-OS, RHEL, Ubuntu, Cisco, F5, Juniper and more) is FIPS 140-3 validated, in NIST's queue, or expiring, using NIST CMVP data with certificate links. Also lists certificates sunsetting soon and checks whole inventories, with optional x402 pay-per-call.

Enables AI assistants to list devices and rules, check each device against Cisco PSIRT advisories using IOS XE configurations, and produce evidence-backed reports through the MCP stdio interface.

A read-only MCP server that lets MCP clients such as Cursor and Claude Desktop query a Cisco Secure Workload (Tetration) cluster in plain English. It exposes tools for scopes, sensors, flows, workspaces, policies, and CVE/package vulnerability data, so users can ask posture, blast-radius, and exposure questions without writing HMAC-signed API calls.

MCP server providing 100% coverage of the CISO Assistant GRC REST API through action-routed tools for compliance, risk management, and other security domains.

Enables an assistant to troubleshoot Cisco ISE authentications and inspect or modify NADs, endpoints, users, policy, certificates, and TrustSec through the OpenAPI, ERS, and MnT REST surfaces. Supports authentication failure diagnosis, endpoint and session lookups, deployment health checks, bulk endpoint work, and preview-first CoA/ANC quarantine actions with safety rails.

Enables an LLM agent to defend a software-defined Cisco network through an OODA loop of tools: it summarizes traffic anomalies, detects configuration drift, dry-runs candidate flow rules for conflicts and lockouts, and pushes validated policy behind a device-native dead-man's switch that auto-rolls-back unless a health check confirms the commit. All safety checks are enforced server-side over RESTCONF/NETCONF (or a mock adapter), so the model can act without being able to break the network.

Enables AI agents to query the Idira (CyberArk) Discovery & Context inventory and to add, replace, or delete secrets, machine identities (workloads), and AI agents through the GraphQL API. It runs as a remote OAuth 2.1 protected resource so it can sit behind the Idira Agent Identity Broker, with every tool call authorized and audited.