choaterboater/casper-network-mcp

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

0 stars 0 forks 品質 71 トレンド 20MIT

Network MCP server for Aruba Central, Juniper Mist and ClearPass: a 3-tool router over vendor API specs, built for Casper

概要

One small MCP server for HPE Aruba Networking Central, Juniper Mist and HPE Aruba Networking ClearPass, built for Casper. Your AI sees four tools; behind them are about 3,900 tools for the three products, each one labelled with the kind of change it makes. You normally never install this yourself: Casper sets it up, pins the exact version and starts it for you. - hand-written tools for everyday work (sites, clients, alarms, switch ports, guests, sessions, SSIDs, VLANs and more), each one checked against the vendor's own API description; - one generated tool for every operation in the bundled API descriptions; - overview tools for broad questions: central_site_overview, mist_site_overview and clearpass_overview give health, device counts and the top alarms in one read; - clearpass_why_denied summarizes recent sessions, endpoint status/profile, NAD and applied roles for exactly one MAC or username. The bundled 6.12.

README

以下は原文 README の抜粋です。原文を見る。

casper-network-mcp

You normally never install this yourself: Casper sets it up, pins the exact version and starts it for you.

What it does

Tool	What it is for
`find_tool`	Finds the right tool for what you asked (“bounce port 7 on the closet switch”) and says what kind of change it makes: read, troubleshoot, config, disruptive, firmware, delete or admin.
`invoke_read_tool`	Runs a tool that only reads, or a non-disruptive troubleshooting check (ping, show). Anything else is refused.
`invoke_tool`	Runs any tool, including ones that change your network. Casper asks you first.
`access_check`	Says, for each product, whether a login is set and where that login can change things.

Behind them:

hand-written tools for everyday work (sites, clients, alarms, switch ports, guests, sessions, SSIDs, VLANs and more), each one checked against the vendor’s own API description;
one generated tool for every operation in the bundled API descriptions;
overview tools for broad questions: central_site_overview, mist_site_overview and clearpass_overview give health, device counts and the top alarms in one read;
clearpass_why_denied summarizes recent sessions, endpoint status/profile, NAD and applied roles for exactly one MAC or username. The bundled 6.12.7 API exposes active accounting sessions, not full Access Tracker rejects; missing auth results, reject reasons and enforcement profiles remain unknown;
ClearPass session and auth-failure reads accept MAC, username, NAD IP, accounting service type and ISO 8601 start/end times (with timezone). Time windows scan at most ten pages locally; next_server_offset continues a scan, including an empty page. The service filter is not an Access Tracker policy service name;
lookup_api, which answers exact questions about the vendors’ APIs (endpoints, fields, allowed values) from the bundled documents, with no network.
busy_hours profiles a site hour by hour over up to a month (client counts, or a switch uplink’s traffic) in your time zone and names the quietest window for planned downtime.

Site-wide answers in one call

invoke_read_tool can shape a reply before it reaches the AI, so a question about every AP or every client is one call, not a page loop:

Option	What it does
`all_pages`	Follows the tool’s own paging (`next` / `next_cursor`, `offset`, Mist `page`) up to 50 pages or 10,000 items, and joins the pages. `_pages` says how many were read and whether the list is complete.
`fields`	Keeps only these keys of each item; `radio.channel` reaches inside an object.

GitHub で README 全文を見る

インストール

uvx --from casper-network-mcp==0.1.6 casper-network-mcp --read-only

MCP 初心者？mcpskill.org のガイドから始めましょう →