Aruba Central、Juniper Mist 和 ClearPass 的网络 MCP 服务器：基于厂商 API 规范的三工具路由器，为 Casper 构建
概览
一台为HPE Aruba Networking Central、Juniper Mist和HPE Aruba Networking ClearPass打造的小型MCP服务器，为Casper打造。你的AI看到四个工具;它们背后是大约3900个工具，分别针对这三种产品，每个工具都标注了它带来的变化类型。 你通常不会自己安装：Casper会设置好，钉住完全一样的版本，然后帮你启动。 - 用于日常工作的手写工具（站点、客户端、警报、交换机端口、访客、会话、SSID、VLAN 等），每个工具都与供应商自有的 API 描述进行核对;- 为捆绑 API 描述中的每个操作生成一个工具;- 广泛问题的概览工具：central_site_overview、mist_site_overview 和 clearpass_overview 一次性读取中显示健康状况、设备数量和最高警报;- clearpass_why_denied 总结了最近会话、端点状态/配置文件、NAD 和应用角色，仅针对一个 MAC 或用户名。捆绑的 6.12。
概述（AI 翻译）
一台小型MCP服务器，用于HPE Aruba Networking Central、Juniper Mist和HPE Aruba Networking ClearPass，专为 卡斯帕。你的人工智能看到四个工具;它们背后大约有3900个工具用于 三款产品，每款都标注着它带来的变化类型。
你通常不会自己安装：Casper会设置好，钉住完全一样的版本，然后帮你启动。
它的作用
| 工具 | 它的用途 |
|---|---|
find_tool |
找到你要求的正确工具（“跳出衣橱交换机的7号端口”），并说明它会做什么样的更改：读取、排查、配置、干扰、固件、删除或管理员。 |
invoke_read_tool |
运行一个只读取或非干扰性故障排除检查（ping、显示）的工具。其他功能被拒绝。 |
invoke_tool |
运行任何工具，包括那些能改变你网络的工具。卡斯帕先问你。 |
access_check |
对于每个产品，它说明了登录是否被设置，以及该登录可能发生的变化。 |
他们身后：
- 用于日常工作的手写工具（站点、客户端、警报、交换端口、访客、会话、SSID、VLAN 和 更多），每个都与供应商自身的API描述进行核对;
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
casper-network-mcp
One small MCP server for HPE Aruba Networking Central, Juniper Mist and HPE Aruba Networking ClearPass, built for Casper. Your AI sees four tools; behind them are about 3,900 tools for the three products, each one labelled with the kind of change it makes.
You normally never install this yourself: Casper sets it up, pins the exact version and starts it for you.
What it does
| Tool | What it is for |
|---|---|
find_tool |
Finds the right tool for what you asked (“bounce port 7 on the closet switch”) and says what kind of change it makes: read, troubleshoot, config, disruptive, firmware, delete or admin. |
invoke_read_tool |
Runs a tool that only reads, or a non-disruptive troubleshooting check (ping, show). Anything else is refused. |
invoke_tool |
Runs any tool, including ones that change your network. Casper asks you first. |
access_check |
Says, for each product, whether a login is set and where that login can change things. |
Behind them:
- hand-written tools for everyday work (sites, clients, alarms, switch ports, guests, sessions, SSIDs, VLANs and more), each one checked against the vendor’s own API description;
- one generated tool for every operation in the bundled API descriptions;
- overview tools for broad questions:
central_site_overview,mist_site_overviewandclearpass_overviewgive health, device counts and the top alarms in one read; clearpass_why_deniedsummarizes recent sessions, endpoint status/profile, NAD and applied roles for exactly one MAC or username. The bundled 6.12.7 API exposes active accounting sessions, not full Access Tracker rejects; missing auth results, reject reasons and enforcement profiles remain unknown;- ClearPass session and auth-failure reads accept MAC, username, NAD IP, accounting service type and ISO 8601
start/end times (with timezone). Time windows scan at most ten pages locally;
next_server_offsetcontinues a scan, including an empty page. The service filter is not an Access Tracker policy service name; lookup_api, which answers exact questions about the vendors’ APIs (endpoints, fields, allowed values) from the bundled documents, with no network.busy_hoursprofiles a site hour by hour over up to a month (client counts, or a switch uplink’s traffic) in your time zone and names the quietest window for planned downtime.
Site-wide answers in one call
invoke_read_tool can shape a reply before it reaches the AI, so a question about every AP or every client is one
call, not a page loop:
| Option | What it does |
|---|---|
all_pages |
Follows the tool’s own paging (next / next_cursor, offset, Mist page) up to 50 pages or 10,000 items, and joins the pages. _pages says how many were read and whether the list is complete. |
fields |
Keeps only these keys of each item; radio.channel reaches inside an object. |
安装
uvx --from casper-network-mcp==0.1.6 casper-network-mcp --read-only