An MCP server for governed operations on multi-vendor network devices via NAPALM, with optional NetBox lookups. It supports reading device state and performing config backup, diff, merge, replace, and rollback actions with encrypted secret storage and audit logging.
From the registry: Governed network device ops (NAPALM) — 28 MCP tools with audit/undo.
$ uv tool install network-aiops$ network-aiops initPlease install the `network-aiops` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install network-aiops via uv** — Install the MCP server package as a uv tool. Run: `uv tool install network-aiops`
- **Create network-aiops configuration file** — Create ~/.network-aiops/config.yaml with your device definitions and optional NetBox URL. This is required for the server to know which devices to manage.
- **Store device and optional NetBox secrets** — Initialize the encrypted secret store and save device passwords and, if using NetBox, the NetBox API token. The MCP server uses this encrypted store rather than plaintext credentials. Run: `network-aiops init`
- **Set master password for non-interactive use** — Export NETWORK_AIOPS_MASTER_PASSWORD so the MCP server can unlock the encrypted secret store when started by an MCP client.
Canonical MCP server config (stdio transport):
- command: `network-aiops`
- args: ["mcp"]
- required environment variables:
- `NETWORK_AIOPS_CONFIG`: Path to the network-aiops configuration YAML file containing device definitions and optional NetBox settings. (example: `<path-to-config.yaml>`)
- `NETWORK_AIOPS_MASTER_PASSWORD`: Master password used to unlock the encrypted secrets store non-interactively for MCP server operation. (example: `<your-master-password>`)
- optional environment variables:
- `NETWORK_AIOPS_HOME`: Optional alternate home directory for network-aiops state files such as audit.db and secrets.enc. (example: `<path-to-network-aiops-home>`)
- `NETWORK_<TARGET_UPPER>_PASSWORD`: Deprecated fallback plaintext device password environment variable for a configured target device. Use the encrypted secret store instead. (example: `<your-device-password>`)
- `NETWORK_NETBOX_TOKEN`: Deprecated fallback plaintext NetBox API token environment variable. Use the encrypted secret store instead. (example: `<your-netbox-api-token>`)
Note: Transport is stdio via `network-aiops mcp`. Device passwords may be empty when using key-based SSH authentication. NetBox integration is optional; if configured, store its token under the reserved secret name `netbox-token`.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.NETWORK_AIOPS_MASTER_PASSWORDrequiredUnlocks the encrypted secret store non-interactively for the MCP server.AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.
Persistent codebase knowledge graph. Survives session restarts and context compaction.
A powerful toolkit for coding, providing semantic retrieval and editing capabilities.