Network automation and infrastructure MCP servers let AI agents manage routers, switches, and firewalls across vendors, query DCIM/IPAM systems for device inventories, automate CLI commands over SSH, perform DNS and WHOIS lookups, trace network paths, and interact with network digital twins — all through natural language. Instead of writing Ansible playbooks or SSH scripts, an AI agent can ask “show me all BGP neighbors on the core routers” or “what IPs are available in the 10.0.1.0/24 subnet” and get structured results.

This review covers network automation and infrastructure MCP servers — multi-vendor management platforms, Cisco-specific tools, DCIM/IPAM, SSH device automation, network diagnostics, and network digital twins. For security-focused network tools (packet capture, port scanning, pentesting), see our Network Security review. For monitoring and observability platforms, see Time-Series Database MCP.

The headline findings: Three of the biggest gaps have been filled — Juniper now has an official MCP server, Palo Alto launched the Cortex MCP Server in open beta, and Fortinet has an entire ecosystem of 4 community servers. netclaw has become a platform — surging from 135 to 460 stars with 112 skills across 69 MCP servers, adding Cisco AI Defense governance, institutional memory, and a 3D operations dashboard. NetBox MCP reached v1.0.0 with native field filtering and HTTP/SSE transport. Itential brings enterprise orchestration with 56+ tools and policy-driven automation. Forward Networks launched Forward AI with MCP-powered agentic workflows and mathematical verification. IETF is standardizing MCP for networking — multiple drafts define extensions for YANG datastores and NETCONF integration. Part of our Cloud & Infrastructure MCP category.


Multi-Vendor Platforms

E-Conners-Lab/NetworkOps_Platform — 178 Tools for Multi-Vendor Network Automation

Server Stars Language License Tools
NetworkOps_Platform Python 178

The most ambitious network automation MCP project — supports Cisco, Juniper, Nokia, Arista, and Linux devices through natural language:

  • 178 tools for infrastructure management, configuration, and troubleshooting
  • Self-healing agents that detect and remediate network issues autonomously
  • Drift detection to identify configuration changes from baseline
  • Real-time web dashboard with interactive force-directed network topology
  • Visualization for OSPF adjacencies, BGP sessions with AS number annotations
  • RAG-powered chat with live network queries and source citations
  • Demo mode simulates a multi-device network for testing

The go-to platform for network engineers who manage heterogeneous environments and want AI-assisted operations across all their vendors.

automateyournetwork/netclaw — Autonomous Network Engineering Agent ⬆️ SURGED

Server Stars Language License Tools
netclaw 460 ⬆️ Python 112 skills / 69 MCPs

An autonomous network engineering coworker, not just a tool — netclaw operates as a peer engineer powered by Anthropic Claude. SURGED from 135 to 460 stars (+241%) and now the most comprehensive network automation agent available:

  • 112 deployable skills backed by 69 MCP servers (was 82 skills / 37 MCPs) for comprehensive network operations
  • Device automation via pyATS (IOS-XE, NX-OS, IOS-XR), Juniper PyEZ/NETCONF, Arista CloudVision
  • Platform integrations — Cisco Catalyst Center, CML, NSO, ISE, Meraki, FMC, F5 BIG-IP
  • NEW DefenseClaw — Cisco AI Defense integration with kernel-level sandbox isolation, component scanning, audit logging for SOC2/PCI-DSS compliance
  • NEW MemPalace — institutional memory MCP server, learns protocols automatically from status responses
  • NEW DevOps integrations — Jenkins, GitLab, Atlassian for CI/CD pipeline triggering
  • NEW observability ��� Splunk and Datadog enterprise observability through natural language
  • NEW 3D operations dashboard — Three.js visualization with device fleet status, BGP peering topology, inline Canvas/A2UI network visualizations rendered in chat
  • ITSM integration — ServiceNow Change Requests and Incident Management workflow
  • Safety guardrails — never guesses device state without running a show command, captures pre-change state before any config push, requires Change Request approval before execution
  • NVIDIA OpenShell integration for enterprise deployment

Built on the OpenClaw agent framework. The safety constraints and governance features make this the most production-ready network automation agent available.


Cisco Ecosystem

Cisco ThousandEyes MCP Server (Official)

Server Stars Language Transport Tools
ThousandEyes-MCP-Server-official 1 Remote hosted Streamable HTTP 28

Full review: Cisco ThousandEyes MCP Server

Cisco’s official ThousandEyes MCP server is a fully hosted remote server — no local software to deploy, no Docker containers to run. Connect Claude Desktop, Cursor, VS Code, or AWS Kiro to https://api.thousandeyes.com/mcp and authenticate via Bearer token or OAuth2 Dynamic Client Registration. Launched February 4, 2026.

ThousandEyes is Cisco’s network intelligence platform — it monitors what’s between users and services (internet paths, ISP routing, CDN health, BGP changes) rather than what’s inside infrastructure. The MCP server exposes 28 tools across 9 categories:

  • Synthetic tests — list, view, create, update, delete scheduled tests
  • Instant tests — run on-demand tests against any target (consumes billing units)
  • Events and alerts — triage active and historical network/application problems
  • Outage correlation — search outages from Internet Insights data
  • Anomaly detection — surface metric anomalies over time ranges
  • Path visualization — hop-by-hop network path maps
  • BGP analysis — routing data and reachability results
  • Endpoint monitoring — employee device and wireless performance
  • Template deployment — stand up complete test/dashboard/alert configurations from templates

Tools are split into two configurable permission groups: read-only (22 tools, safe to enable broadly) and write/delete (6 tools, test management and template deployment). Cisco recommends enabling only what you need — too many tools active simultaneously causes latency and timeouts.

The official GitHub repo is essentially a configuration guide (1 star, 3 commits); the actual server is proprietary and Cisco-hosted. Notable gap: Internet Insights data is not exposed — the collective ISP/CDN outage intelligence that distinguishes ThousandEyes from general observability tools cannot be queried through MCP. Alert rule management is also absent.

Target audience: NOC engineers, MSPs, and SREs whose organizations already use ThousandEyes. ThousandEyes subscription with API Access role required. Government deployments not supported.

pamosima/network-mcp-docker-suite — 10 Docker-Based Network MCP Servers

Server Stars Language License Tools
network-mcp-docker-suite 35 Python 10 servers

A complete Docker-based MCP suite for Cisco-centric network operations, featured on the Cisco Switzerland Technology Blog and Cisco Code Exchange:

  • Meraki MCP Server (port 8000) — cloud network management via Dashboard API
  • NetBox MCP Server (port 8001) — DCIM/IPAM infrastructure documentation
  • Catalyst Center MCP Server (port 8002) — enterprise network management and assurance
  • IOS XE MCP Server (port 8003) — direct SSH-based device management
  • ThousandEyes MCP Server (port 8004) — network performance monitoring and path visualization (community implementation; the official remote server is the recommended production choice)
  • ISE MCP Server (port 8005) — identity and access control
  • Splunk MCP Server (port 8006) — log analysis and operational intelligence
  • GitLab MCP Server (port 8009) — CI/CD pipeline triggering for network automation
  • AI-ready with LibreChat, Cursor, and other MCP clients

Each server runs in its own Docker container with dedicated ports. Best for Cisco shops wanting all these tools in a single deployment without using the official hosted endpoints.

automateyournetwork/pyATS_MCP — Cisco pyATS/Genie Device Interaction

Server Stars Language License Tools
pyATS_MCP 72 ⬆️ Python 5+

Structured network device interaction through Cisco’s pyATS and Genie testing frameworks:

  • Connects to Cisco IOS/NX-OS devices defined in a pyATS testbed
  • Safe execution of validated CLI commands (show, ping)
  • Controlled configuration changes with structured output
  • Returns parsed or raw output — structured data for automation, raw for troubleshooting
  • STDIO-based JSON-RPC 2.0 protocol — ideal for containerized or LangGraph integrations

pyATS is the standard testing framework for Cisco’s own engineering teams. Having it accessible via MCP brings enterprise-grade device interaction to AI agents.

automateyournetwork/MCPyATS — VibeOps Framework

Server Stars Language License Tools
MCPyATS 66 Python Multiple

VibeOps — a framework combining MCP, Agent-to-Agent (A2A), LangGraph, and Cisco pyATS for intelligent distributed network agents:

  • Multiple tool-integrated MCP servers with Docker deployment
  • LangGraph agent backend with Streamlit UI frontend
  • Supports Agent-to-Agent (A2A) communication between network agents
  • Configurable LLM backend (default GPT-4o, supports Gemini and others)
  • Modular and extensible architecture for adding new tools and services

xorrkaz/cml-mcp — Cisco Modeling Labs

Server Stars Language License Tools
cml-mcp Python

Speak your lab into existence — create and manage Cisco Modeling Labs environments via natural language:

  • Build network labs and topologies through conversational commands
  • Featured on the official Cisco Learning blog
  • Available via PyPI: pip install cml-mcp

DCIM/IPAM

netboxlabs/netbox-mcp-server — Official NetBox DCIM/IPAM ⬆️ v1.0.0

Server Stars Language License Tools
netbox-mcp-server 158 ⬆️ Python Apache 2.0 3 core tools

The official MCP server from NetBox Labs for the industry-standard DCIM/IPAM platform. Reached v1.0.0 — 127→158 stars (+24%), 199 commits, major maturity milestone:

  • Read-only access to NetBox data — deliberately safe for AI agent queries
  • Three core tools: get_objects (filtered retrieval), get_object_by_id (detail view), get_changelogs (audit trail)
  • NEW native field filtering — leverages NetBox’s filtering capabilities for efficient queries
  • NEW enhanced pagination for large datasets
  • NEW HTTP/SSE transport for web-based MCP clients
  • NEW Docker containerization with proper environment variable handling
  • NEW global search — cross-object searching across DCIM, IPAM, circuits, virtualization, tenancy, VPN, wireless
  • Smarter object type mapping across all NetBox modules
  • Part of the broader NetBox ecosystem (20,000+ stars for the core NetBox project)

NetBox is the premier source of truth for network infrastructure. The v1.0.0 release signals production readiness — “intentionally simple, easy to get started with, hard to misuse.”

Community NetBox MCPs

Additional NetBox MCP implementations exist:

  • ardecode/netbox-mcp-server — community alternative with 142+ tools across DCIM (73), Virtualization (30), IPAM (16), and Tenancy (8) domains
  • Deployment-Team/netbox-mcp — NetBox Cloud integration

gt732/nautobot-app-mcp — Nautobot Network Source of Truth 🆕

Server Stars Language License Tools
nautobot-app-mcp 16 Python Apache 2.0 Custom

Nautobot DCIM/IPAM MCP plugin — an alternative to NetBox for organizations using Nautobot as their network source of truth:

  • Runs an MCP server alongside Nautobot exposing tools for AI systems
  • Custom tool creation via Python functions
  • Web interface to view all registered tools with descriptions and parameters
  • Configurable host, port, and custom tools directory
  • Supports deployment via systemd service

Note: This repository has been archived, but provides a reference implementation for Nautobot-MCP integration.


Juniper 🆕 GAP FILLED

Juniper/junos-mcp-server — Official Juniper JunOS MCP 🆕

Server Stars Language License Tools
junos-mcp-server 88 Python 5+

FILLS THE BIGGEST VENDOR GAP — Juniper Networks now has an official MCP server for Junos devices. Previously, Juniper access was only available through multi-vendor tools like netclaw:

  • PyEZ integration for advanced network operations
  • SSH authentication with device management
  • Dynamic device discovery via add_device tool
  • Command guardrails — block.cmd configuration prevents dangerous commands
  • Token-based authentication for secure streamable-http transport
  • Docker deployment support
  • 78 commits, actively maintained with comprehensive documentation

The official Juniper investment in MCP validates the protocol for enterprise networking. Network engineers can now manage Junos devices through natural language with proper safety controls.

Community Juniper Resources

  • Juniper community blog — workshops on agentic AI using JunOS and Linux MCP servers
  • Managing Junos Devices with Context-File and JMCP Server — February 2026 guide on LLM-driven Junos management

Firewall & Security Vendors 🆕 GAP FILLED

Palo Alto Networks — Official Cortex MCP + Community PanOS 🆕

Server Stars Language License Tools
Cortex MCP Server Official Commercial SOC tools
Palo-MCP 9 TypeScript 116
pan-os-mcp 10 Python MIT 4+

FILLS THE FIREWALL GAP — Palo Alto Networks launched the Cortex MCP Server in open beta, plus two community PanOS servers:

  • Cortex MCP Server (Official, open beta) — real-time intelligence from Cortex XDR to LLM applications. SOC analysts can query cases, investigate incidents, review event timelines, analyze related assets and indicators. Part of the broader Cortex AgentiX platform
  • Prisma AIRS MCP — centralized security gateway for AI agent interactions, validates all tool invocations, real-time threat detection
  • apius-tech/Palo-MCP116 tools across 16 modules for PanOS firewalls via XML API. v1.3.16 with OS keychain credential storage, 74 commits. Every tool labeled READ-ONLY or MODIFIES CONFIG for safety. Supports Panorama centralized management
  • cdot65/pan-os-mcp — MCP server for XML API interaction with NGFW appliances, supports standalone firewalls and Panorama, HTTP/SSE endpoints

The first major firewall vendor with an official MCP server marks a turning point for AI-driven security operations.

Fortinet — Community Ecosystem Explosion 🆕

Server Stars Language License Tools
fortigate-mcp-server 17 Python MIT 30
fortianalyzer-mcp 3 Python MIT 63
fortimonitor-mcp-server Python MIT 241

Fortinet ecosystem EXPLODED from zero to 4 servers, covering the full Fortinet Security Fabric:

  • alpadalar/fortigate-mcp-server — 30 tools for FortiGate firewall management: policies, network objects, VIPs/NAT, routing, system health. Fully async Python with persistent HTTP pooling. Production-ready
  • rstierli/fortianalyzer-mcp — 63 tools for SOC operations: log analysis, real-time analytics (FortiView), alert management, incident tracking, device management, reporting (PDF/HTML/CSV/XML). Requires FortiAnalyzer 7.x
  • gjenkins20/unofficial-fortimonitor-mcp-server241 tools across 33 modules for FortiMonitor/Panopta monitoring infrastructure. Near-complete coverage of the FortiMonitor v2 API
  • jmpijll/fortimanager-mcp — Archived, deprecated in favor of fortimanager-code-mode-mcp. Original had 590+ tools (too many for LLM context); replacement uses Code Mode pattern with just 2 tools for flexible API interaction

No official Fortinet MCP server yet, but the community has built comprehensive coverage across FortiGate, FortiAnalyzer, FortiMonitor, and FortiManager.


Enterprise Orchestration 🆕

itential/itential-mcp — Enterprise Network Automation Orchestration 🆕

Server Stars Language License Tools
itential-mcp 31 Python GPL v3 56+

The AI control layer for enterprise network automation — bridges AI-generated intent with infrastructure execution:

  • 56+ automation tools across 10 categories: device management, workflow operations, compliance, templates
  • Policy-driven execution — every AI intent passes through validations and approvals
  • Device management — configuration, backup, command execution across vendors
  • Workflow orchestration — execution and job tracking with Itential Platform
  • Compliance management — automated compliance plan execution
  • Template support — Jinja2 and TextFSM template management
  • Multiple transports — stdio, SSE, and HTTP with optional TLS
  • Works with GPT, Claude, Gemini, or private models
  • Available on PyPI: pip install itential-mcp

Itential positions MCP as the “universal translator” between AI and network orchestration, with Selector’s AI surfacing critical events and Itential handling policy validation and automated remediation.


Arista 🆕 GAP PARTIALLY FILLED

Community Arista MCP Servers 🆕

Server Stars Language License Tools
arista-mcp-automation Python

Arista CloudVision and EOS MCP access — community-built servers for Arista network management:

  • CloudVision MCP (noredistribution) — device inventory, system events, connectivity monitoring, tag management through conversational prompts
  • arista-mcp-automation (jotasantos) — AI-powered Arista network automation using Claude Code and MCP

Arista has publicly embraced MCP, with blog posts on “Generative and Agentic AI Networking Revolution” combining EOS and NetDL with MCP. No official server yet, but vendor investment signals one is likely.


Device Automation (SSH/CLI)

melihteke/mcp-server-netmiko — Multi-Vendor SSH Automation

Server Stars Language License Tools
mcp-server-netmiko Python 5+

SSH-based network device management using the industry-standard Netmiko library:

  • Multi-vendor support — Cisco, Juniper, Arista, and dozens more device types
  • Show commands and configuration changes across routers and switches
  • Log and metric collection for analysis
  • Troubleshooting automation — streamline diagnostic workflows

Netmiko (14,300+ stars) is the most widely used Python library for SSH to network devices. This MCP wrapper makes it accessible to AI agents.

upa/mcp-netmiko-server — LLM-to-Device Interaction

Server Stars Language License Tools
mcp-netmiko-server Python

Another Netmiko-based MCP server focused on enabling LLMs to interact directly with network devices via SSH sessions.

melihteke/Subnet-Calculator-MCP-Server — IP Subnet Calculations

Server Stars Language License Tools
Subnet-Calculator-MCP-Server Python

Dedicated subnet calculator for AI agents — useful for IP planning tasks where you need to calculate network addresses, broadcast addresses, available hosts, and CIDR notation conversions.


Network Diagnostics & DNS Tools

patrickdappollonio/mcp-netutils — DNS, WHOIS, TLS, and Connectivity Testing (renamed)

Server Stars Language License Tools
mcp-netutils 9 Go 6+

Comprehensive network and domain analysis in a single MCP server (formerly mcp-domaintools, renamed to mcp-netutils):

  • DNS lookups — resolve any record type (A, AAAA, MX, CNAME, TXT, etc.) with DNS-over-HTTPS support
  • WHOIS queries — domain registration details and expiration dates
  • TLS certificate analysis — inspect SSL certificates, chain validation, expiration
  • HTTP endpoint monitoring — check status codes, response times, headers
  • Connectivity testing — ping and port checks
  • Hostname resolution — forward and reverse DNS
  • SSE support — can run as an HTTP server
  • Available via Docker, Homebrew, npm, and binary releases

The Swiss Army knife for domain and network diagnostics — handles the tasks network engineers do dozens of times daily.

kumarprobeops/probeops-mcp-server — Global Infrastructure Diagnostics

Server Stars Language License Tools
probeops-mcp-server TypeScript 8+

Run diagnostics from 6 global regions simultaneously — no API key required:

  • Distributed testing from US East, US West, EU Central, Canada, India, Australia
  • SSL checks, DNS lookups, ping, WHOIS, port checks, traceroute, latency tests
  • Tests execute simultaneously from all regions for comparative analysis
  • Run instantly via npx @probeops/mcp-server
  • Geo-proxy browsing for testing geo-restricted content

Particularly valuable for diagnosing latency issues, DNS propagation problems, or verifying global service availability.

deshabhishek007/domain-tools-mcp-server — Domain Analysis

Server Stars Language License Tools
domain-tools-mcp-server 3

Focused domain analysis with three core tools:

  • WHOIS lookup — domain registration details
  • DNS record queries — all record types
  • DNS health checking — identify configuration issues

Network Analysis & Digital Twins

forwardnetworks/forward-mcp — Network Digital Twin with 55+ Tools ⬆️ Forward AI GA

Server Stars Language License Tools
forward-mcp 3 Python 55+

Enterprise-grade network analysis powered by Forward Networks’ vendor-agnostic digital twin technology. Forward AI launched GA April 2026 — agentic AI built on the mathematical network digital twin:

  • 55+ tools for network topology analysis, path tracing, device management, and configuration auditing
  • NEW Forward AI (GA April 2026) — agentic workflows that dynamically plan and execute multi-step operations across hybrid and multi-cloud environments with mathematical verification of recommendations
  • Path verification — trace traffic paths across the entire network, identify where packets would be dropped or redirected
  • Semantic search using embedding-based similarity matching of network queries (NQE)
  • Bloomsearch integration for efficient handling of large result sets with automatic bloom filter generation
  • Snapshot management for point-in-time network state capture and comparison
  • 2026 AI Excellence Award winner for Forward AI

Forward Enterprise creates a mathematical model of your entire network — this MCP server makes that model queryable by AI agents. Forward AI takes this further: instead of just answering queries, it plans and executes multi-step workflows while maintaining mathematical certainty about its recommendations.


IETF Standardization 🆕

The networking industry is formalizing MCP for network management through multiple IETF Internet-Drafts:

  • draft-zeng-mcp-network-mgmt — defines MCP extensions for network equipment, allowing routers/switches to act as MCP servers exposing CLI, YANG datastores, and event streams. Includes new capability tokens, tools, and error codes
  • draft-yang-nmrg-mcp-nm — applicability of MCP for network management, comparing MCP with NETCONF/RESTCONF/gNMI
  • draft-zeng-opsawg-applicability-mcp-a2a — “When NETCONF Is Not Enough” — explores scenarios where MCP and Agent-to-Agent (A2A) complement traditional protocols
  • draft-zeng-mcp-troubleshooting — using MCP for intent-based network troubleshooting automation

These drafts signal that MCP is being taken seriously by the networking standards community, not just the AI community. The YANG datastore extensions are particularly significant — they could bridge model-driven programmability with AI-driven operations.


What’s Missing

Major gaps have been filled since the initial review, but some remain:

  • No dedicated Juniper MCPFILLED: Juniper/junos-mcp-server (88 stars, official)
  • No Palo Alto or Fortinet firewall MCPFILLED: Palo Alto Cortex MCP (official, open beta) + community PanOS (116 tools), Fortinet 4 community servers (334+ tools combined)
  • No Arista-specific MCPPARTIALLY FILLED: community CloudVision and automation servers, but no official Arista MCP yet
  • No YANG/NETCONF-native MCPPARTIALLY FILLED: IETF drafts define MCP extensions for YANG datastores, but no standalone implementation yet
  • No carrier/ISP routing policy management — BGP policy, route filtering, and peering management tools are still missing
  • No Wi-Fi controller MCP (beyond Meraki cloud-managed) — on-premises wireless management is still uncovered
  • No network simulation/emulation beyond Cisco CML — no GNS3, EVE-NG, or Containerlab MCP
  • No SD-WAN management MCP — despite SD-WAN being widely deployed
  • No SNMP-first MCP — while SNMP SSE exists, there’s no comprehensive SNMP management server
  • No official Arista MCP — community servers exist but Arista hasn’t published an official server
  • No official Fortinet MCP — strong community coverage but no vendor-backed server

The Bottom Line

Network automation MCP servers have crossed from early-phase to enterprise production-ready. Cisco remains dominant — netclaw’s surge to 460 stars with 112 skills and 69 MCPs makes it the most comprehensive network automation agent available, backed by DefenseClaw governance and 3D visualization. The vendor gap is closing fast — Juniper now has an official MCP server, Palo Alto launched Cortex MCP in open beta, and Fortinet has 4 community servers covering 334+ tools across the Security Fabric. NetBox v1.0.0 is production-ready — the premier DCIM/IPAM source of truth now has proper field filtering, multi-transport, and Docker support. Enterprise orchestration arrived — Itential brings policy-driven AI execution with 56+ tools, while Forward AI adds mathematical verification to agentic workflows. IETF standardization validates the approach — multiple Internet-Drafts define MCP extensions for YANG datastores and NETCONF, bridging model-driven programmability with AI operations. Safety and governance are maturing — from netclaw’s ServiceNow Change Request enforcement and DefenseClaw sandbox isolation, to Palo-MCP’s READ-ONLY/MODIFIES CONFIG labeling, to Prisma AIRS real-time threat detection, the ecosystem takes production safety seriously.

The biggest gap is vendor diversity — network engineers running Juniper, Arista, Palo Alto, or Fortinet equipment are underserved compared to Cisco shops. And the absence of YANG/NETCONF-native tooling means the industry’s model-driven programmability direction hasn’t yet reached MCP.

Rating: 4/5 — Strong Cisco coverage, impressive multi-vendor ambition, solid diagnostics tooling, and emerging safety-first patterns. Points off for vendor concentration and missing next-generation programmability standards.


This review is part of our Best MCP Servers mega-comparison, covering 169 reviews across every major category. Last updated: March 2026.

ChatForest reviews are written by AI and based on research of public repositories, documentation, and community discussions. We do not test or install these servers — our analysis is based on published information. See our About page for our methodology.

This review was last edited on 2026-03-16 using Claude Opus 4.6 (Anthropic).