NetBox MCP

Name: NetBox MCP
Author: mhajder

by mhajderversion 0.3.0i★ –iRuns on your computer

Registry nameio.github.mhajder/netbox-mcp

Install

Overview

Description from the maker (original English)

MCP server for NetBox DCIM/IPAM with read-only and dry-run modes

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio, Streamable HTTP
Category: Other
You need to fill in: NETBOX_URL, NETBOX_TOKEN

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: NETBOX_URL, NETBOX_TOKEN, NETBOX_VERIFY_SSL, NETBOX_TIMEOUT, NETBOX_BRANCHING_ENABLED, NETBOX_BRANCH, NETBOX_PLUGIN_DISCOVERY, READ_ONLY_MODE, DRY_RUN_MODE, DISABLED_TAGS, LOG_LEVEL, RESPONSE_MAX_SIZE, RATE_LIMIT_ENABLED, RATE_LIMIT_MAX_REQUESTS, RATE_LIMIT_WINDOW_MINUTES, TOOL_SEARCH_ENABLED, TOOL_SEARCH_STRATEGY, TOOL_SEARCH_MAX_RESULTS

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

PyPIPython’s uv installed (for the uvx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "netbox": {
      "command": "uvx",
      "args": [
        "netbox-mcp"
      ],
      "env": {
        "NETBOX_URL": "your-value",
        "NETBOX_TOKEN": "your-value",
        "NETBOX_VERIFY_SSL": "your-value",
        "NETBOX_TIMEOUT": "your-value",
        "NETBOX_BRANCHING_ENABLED": "your-value",
        "NETBOX_BRANCH": "your-value",
        "NETBOX_PLUGIN_DISCOVERY": "your-value",
        "READ_ONLY_MODE": "your-value",
        "DRY_RUN_MODE": "your-value",
        "DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RESPONSE_MAX_SIZE": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add netbox --env NETBOX_URL=your-value --env NETBOX_TOKEN=your-value --env NETBOX_VERIFY_SSL=your-value --env NETBOX_TIMEOUT=your-value --env NETBOX_BRANCHING_ENABLED=your-value --env NETBOX_BRANCH=your-value --env NETBOX_PLUGIN_DISCOVERY=your-value --env READ_ONLY_MODE=your-value --env DRY_RUN_MODE=your-value --env DISABLED_TAGS=your-value --env LOG_LEVEL=your-value --env RESPONSE_MAX_SIZE=your-value --env RATE_LIMIT_ENABLED=your-value --env RATE_LIMIT_MAX_REQUESTS=your-value --env RATE_LIMIT_WINDOW_MINUTES=your-value --env TOOL_SEARCH_ENABLED=your-value --env TOOL_SEARCH_STRATEGY=your-value --env TOOL_SEARCH_MAX_RESULTS=your-value -- uvx netbox-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "netbox": {
      "command": "uvx",
      "args": [
        "netbox-mcp"
      ],
      "env": {
        "NETBOX_URL": "your-value",
        "NETBOX_TOKEN": "your-value",
        "NETBOX_VERIFY_SSL": "your-value",
        "NETBOX_TIMEOUT": "your-value",
        "NETBOX_BRANCHING_ENABLED": "your-value",
        "NETBOX_BRANCH": "your-value",
        "NETBOX_PLUGIN_DISCOVERY": "your-value",
        "READ_ONLY_MODE": "your-value",
        "DRY_RUN_MODE": "your-value",
        "DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RESPONSE_MAX_SIZE": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "netbox": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "netbox-mcp"
      ],
      "env": {
        "NETBOX_URL": "your-value",
        "NETBOX_TOKEN": "your-value",
        "NETBOX_VERIFY_SSL": "your-value",
        "NETBOX_TIMEOUT": "your-value",
        "NETBOX_BRANCHING_ENABLED": "your-value",
        "NETBOX_BRANCH": "your-value",
        "NETBOX_PLUGIN_DISCOVERY": "your-value",
        "READ_ONLY_MODE": "your-value",
        "DRY_RUN_MODE": "your-value",
        "DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RESPONSE_MAX_SIZE": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

NETBOX_URL required env
NetBox base URL (e.g., https://netbox.example.com)
NETBOX_TOKEN secret required env
NetBox API token: v2 (nbt_ . , NetBox 4.5+) or legacy v1
NETBOX_VERIFY_SSL env
Verify SSL certificates (true/false)
NETBOX_TIMEOUT env
Total time allowed for one NetBox request, retries included (seconds)
NETBOX_BRANCHING_ENABLED env
Enable netbox-branching support: branch tools and the 'branch' argument (requires the netbox-branching plugin) (true/false)
NETBOX_BRANCH env
Default netbox-branching branch (name or schema ID) for every call; requires NETBOX_BRANCHING_ENABLED=true
NETBOX_PLUGIN_DISCOVERY env
Discover plugin object types from /api/core/object-types/ (true/false)
READ_ONLY_MODE env
Hide all write tools (create, update, delete) (true/false)
DRY_RUN_MODE env
Write tools only simulate changes and never modify NetBox (true/false)
DISABLED_TAGS env
Comma-separated tool tags to disable (e.g. delete,graphql,branching)
LOG_LEVEL env
Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
RESPONSE_MAX_SIZE env
Maximum tool response size in bytes (unset = unlimited)
RATE_LIMIT_ENABLED env
Enable rate limiting
RATE_LIMIT_MAX_REQUESTS env
Maximum requests per rate limit window
RATE_LIMIT_WINDOW_MINUTES env
Rate limit window in minutes
TOOL_SEARCH_ENABLED env
Enable FastMCP tool search transform
TOOL_SEARCH_STRATEGY env
Tool search strategy (bm25 or regex)
TOOL_SEARCH_MAX_RESULTS env
Maximum tool search results returned by search_tools

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account mhajder, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 18333 servers in this category
Published to the registry more recently than 100% of the other 18333 servers in this category
Basic checks equal to or better than 100% of the other 18333 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is NetBox MCP safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: NETBOX_URL, NETBOX_TOKEN

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.3.0) reached the registry today.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Python (uv), Docker on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, Signoff

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated 2 days ago

Install

Signoff

by ayuanxx-max

Five gates that make an agent's 'done' provable: run them, read the verdict, audit the record.

Runs on your computerUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

NetBox MCP Server

Give AI agents structured access to NetBox, your network source of truth

Installation · Tools · Configuration · Security

NetBox MCP Server is a Python-based Model Context Protocol (MCP) server that gives AI assistants structured access to NetBox - the source of truth for network infrastructure (DCIM and IPAM). A small set of generic tools covers all 139 core object types of NetBox 4.7 (and plugin types, if enabled), plus specialised tools for search, change logs, GraphQL, free IP/prefix/VLAN allocation, prefix utilization, free rack space, cable tracing and connecting, config rendering, custom scripts and (optionally) netbox-branching. Writes can be hidden entirely (read-only mode) or simulated (dry-run mode).

✨ Features

Core Features

Query any NetBox object type with filtering, ordering and pagination through one tool
Keep responses small with fields, omit and brief - the tools steer the model to use them
Search many object types at once, with explicit reporting of failed and truncated types
Read the change log (who changed what, when) and NetBox status/version/plugins
Run read-only GraphQL queries for nested data in one round trip
List free IPs, prefixes, VLANs and ASNs; trace cable paths; render device configs
Compute prefix utilization (as the NetBox UI shows it) and find racks with room for a device

Management Operations

Create, update and delete any object type, singly or in bulk (NetBox runs a bulk write as one transaction)
Allocate the next free IP, prefix, VLAN or ASN atomically
Connect ports with a cable, naming them by device and port name
Run NetBox custom scripts (changes rolled back unless commit is set)
Optionally stage changes in a netbox-branching branch instead of main
Describe an object type's writable fields and choices before writing

Advanced Capabilities

Read-only mode hides every write tool; dry-run mode turns every write into a preview
NetBox v2 (Bearer nbt_...) and legacy v1 (Token ...) API tokens
Plugin object type discovery (e.g. netbox_dns.zone)
Filter validation that rejects filters NetBox would silently ignore (__in, multi-hop lookups)
Retries on 429/5xx without ever replaying a create after a server error
Tag-based tool filtering, optional tool-search transform, rate limiting and response size limit
Bearer token authentication for HTTP transport
Multiple transport options (STDIO, SSE, HTTP)
Optional Sentry integration for error tracking

🚀 Installation

Prerequisites

Python 3.11 to 3.15
A NetBox instance, version 4.2 or newer. Features added later (omit, v2 tokens, /api/authentication-check/) are used when the server detects them
A NetBox API token with the permissions you want the assistant to have. The token is the real security boundary: a read-only token cannot write, whatever this server's settings are

Quick Install from PyPI

The easiest way to get started is to install from PyPI:

# Using UV (recommended)

uvx netbox-mcp

Or using pip

pip install netbox-mcp

Remember to configure the environment variables for your NetBox instance before running the server:

# Create environment configuration

export NETBOX_URL=https://netbox.example.com export NETBOX_TOKEN=nbt_your-key.your-token

Install from Source

Clone the repository:

git clone https://github.com/mhajder/netbox-mcp.git

cd netbox-mcp

Install dependencies:

# Using UV (recommended)

uv sync

Or using pip

pip install -e .

Configure environment variables:

cp .env.example .env

Edit .env with your NetBox URL and API token

Run the server:

# Using UV (recommended)

uv run netbox-mcp

Or using the installed command directly

netbox-mcp

Using Docker

A Docker image is available on GitHub Packages for easy deployment.

docker pull ghcr.io/mhajder/netbox-mcp:latest

Development Setup

For development with additional tools:

# Clone and install with development dependencies

git clone https://github.com/mhajder/netbox-mcp.git cd netbox-mcp uv sync --group dev

Run tests

uv run pytest

Run with coverage

uv run pytest --cov=src/

Run linting and formatting

uv run ruff check . uv run ruff format .

Run type checking

uv run ty check .

Setup prek hooks

uv run prek install

🔧 Configuration

Environment Variables

# NetBox MCP Server Environment Configuration

NetBox Connection Details

NETBOX_URL=https://netbox.example.com

API Token - v2 tokens (nbt_ . , NetBox 4.5+) are sent as "Bearer",

legacy v1 tokens as "Token"

NETBOX_TOKEN=nbt_your-key.your-token

SSL Configuration

NETBOX_VERIFY_SSL=true

Total time allowed for one NetBox request, retries included (seconds)

NETBOX_TIMEOUT=30

Branching (requires the netbox-branching plugin)

Set NETBOX_BRANCHING_ENABLED true to add the branch tools and the 'branch'

argument to every tool. Off by default - leave it off on a NetBox without the plugin

NETBOX_BRANCHING_ENABLED=false

Default branch (name or schema ID) used by every call; empty = main.

Requires NETBOX_BRANCHING_ENABLED=true

NETBOX_BRANCH=

Plugin Discovery

Set NETBOX_PLUGIN_DISCOVERY true to expose plugin models (e.g. netbox_dns.zone)

NETBOX_PLUGIN_DISCOVERY=false

Read-Only Mode

Set READ_ONLY_MODE true to hide all write tools (create, update, delete)

READ_ONLY_MODE=false

Dry-Run Mode

Set DRY_RUN_MODE true to make every write tool only simulate the change:

it returns the request it would send and never modifies NetBox

DRY_RUN_MODE=false

Disabled Tags

Comma-separated list of tags to disable tools for (empty by default)

Example: DISABLED_TAGS=delete,graphql,branching

DISABLED_TAGS=

Logging Configuration

LOG_LEVEL=INFO

Response Size Limit

Maximum tool response size in bytes; larger responses are truncated (empty = unlimited)

RESPONSE_MAX_SIZE=

Rate Limiting

Set RATE_LIMIT_ENABLED true to enable rate limiting

RATE_LIMIT_ENABLED=false RATE_LIMIT_MAX_REQUESTS=60 RATE_LIMIT_WINDOW_MINUTES=1

Tool Search Transform (Optional)

Set TOOL_SEARCH_ENABLED true to replace full tool listings with search_tools + call_tool

TOOL_SEARCH_ENABLED=false

Search strategy: bm25 (natural language) or regex (pattern match)

TOOL_SEARCH_STRATEGY=bm25

Maximum number of tools returned by search_tools

TOOL_SEARCH_MAX_RESULTS=5

Sentry Error Tracking (Optional)

Set SENTRY_DSN to enable error tracking and performance monitoring

SENTRY_DSN=https://your-key@o12345.ingest.us.sentry.io/6789

Optional Sentry configuration

SENTRY_TRACES_SAMPLE_RATE=1.0

SENTRY_SEND_DEFAULT_PII=false

SENTRY_ENVIRONMENT=production

SENTRY_RELEASE=1.2.3

SENTRY_PROFILE_SESSION_SAMPLE_RATE=1.0

SENTRY_PROFILE_LIFECYCLE=trace

SENTRY_ENABLE_LOGS=true

MCP Transport Configuration

Transport type: 'stdio' (default), 'sse' (Server-Sent Events), or 'http' (HTTP Streamable)

'streamable-http' is accepted as an alias for 'http'. Any other value stops

the server at startup.

MCP_TRANSPORT=stdio

HTTP Transport Settings (used when MCP_TRANSPORT=sse or MCP_TRANSPORT=http)

Host to bind the HTTP server (default: 127.0.0.1)

MCP_HTTP_HOST=127.0.0.1

Port to bind the HTTP server (default: 8000)

MCP_HTTP_PORT=8000

Optional bearer token for authentication (leave empty for no auth)

MCP_HTTP_BEARER_TOKEN=

Set NETBOX_TOKEN_PASSTHROUGH true to make every client authenticate with its own

NetBox API token (Authorization: Bearer ); NetBox then applies that user's

permissions. NETBOX_TOKEN is ignored. Cannot be combined with MCP_HTTP_BEARER_TOKEN

NETBOX_TOKEN_PASSTHROUGH=false

🧰 Available Tools

Object types are named app.model, as NetBox itself names them (dcim.device, ipam.prefix, virtualization.virtualmachine). API paths such as dcim/devices are accepted too. With branching enabled, every tool that reads or writes objects also takes an optional branch argument.

Objects (read)

Tool	Description
`netbox_list_object_types`	List supported object types and their endpoints (core and discovered plugin types)
`netbox_get_objects`	List objects of a type with `filters`, `fields`, `omit`, `brief`, `ordering`, `limit`, `offset`
`netbox_get_object`	Get one object by ID
`netbox_search_objects`	Free-text search (`q`) across several object types at once
`netbox_describe_object_type`	Writable fields of a type: data type, required, choices
`netbox_get_changelogs`	Change log entries, newest first

Specialised (read)

Tool	Description
`netbox_get_status`	NetBox version, plugins, workers, authenticated user and this server's modes
`netbox_graphql_query`	Read-only GraphQL query (mutations are rejected)
`netbox_get_available`	Free IPs / prefixes in a prefix or IP range, VLANs in a VLAN group, ASNs in an ASN range
`netbox_trace_cable`	Full cable path from an interface, front/rear/console/power port or circuit termination
`netbox_render_config`	Render a device's or VM's configuration from its config template
`netbox_get_prefix_utilization`	Utilization of up to 25 prefixes, computed as NetBox's UI does (child prefixes for containers, IPs and utilized ranges otherwise)
`netbox_find_rack_space`	Racks in a site, location or list with room for a device of a given height (counts both faces for full-depth devices, and reservations)
`netbox_list_branches`	List netbox-branching branches (only with `NETBOX_BRANCHING_ENABLED=true`)

Write

Tool	Description
`netbox_create_object`	Create one object
`netbox_update_object`	Partially update one object (PATCH)
`netbox_bulk_create_objects`	Create up to 500 objects in one transaction
`netbox_bulk_update_objects`	Update up to 500 objects in one transaction
`netbox_allocate_available`	Allocate the next free IP, prefix, VLAN or ASN
`netbox_connect_cable`	Cable ports together, given by ID or by device and port name; refuses ports that are already cabled
`netbox_run_script`	Run a custom script and wait for its log and output; `commit` defaults to false (`destructiveHint`)
`netbox_create_branch`	Create a netbox-branching branch (only with `NETBOX_BRANCHING_ENABLED=true`)
`netbox_delete_object`	Delete one object (`destructiveHint`)
`netbox_bulk_delete_objects`	Delete up to 500 objects in one transaction (`destructiveHint`)

Tool Tags

Every tool is tagged netbox plus a group tag, which `DI

Only the beginning is shown; read the rest in the repo

NetBox MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

Signoff

README from the maker

NetBox MCP Server

✨ Features

Core Features

Management Operations

Advanced Capabilities

🚀 Installation

Prerequisites

Quick Install from PyPI

Or using pip

Install from Source

Or using pip

Edit .env with your NetBox URL and API token

Or using the installed command directly

Using Docker

Development Setup

Run tests

Run with coverage

Run linting and formatting

Run type checking

Setup prek hooks

🔧 Configuration

Environment Variables

NetBox Connection Details

API Token - v2 tokens (nbt_ . , NetBox 4.5+) are sent as "Bearer",

legacy v1 tokens as "Token"

SSL Configuration

Total time allowed for one NetBox request, retries included (seconds)

Branching (requires the netbox-branching plugin)

Set NETBOX_BRANCHING_ENABLED true to add the branch tools and the 'branch'

argument to every tool. Off by default - leave it off on a NetBox without the plugin

Default branch (name or schema ID) used by every call; empty = main.

Requires NETBOX_BRANCHING_ENABLED=true

Plugin Discovery

Set NETBOX_PLUGIN_DISCOVERY true to expose plugin models (e.g. netbox_dns.zone)

Read-Only Mode

Set READ_ONLY_MODE true to hide all write tools (create, update, delete)

Dry-Run Mode

Set DRY_RUN_MODE true to make every write tool only simulate the change:

it returns the request it would send and never modifies NetBox

Disabled Tags

Comma-separated list of tags to disable tools for (empty by default)

Example: DISABLED_TAGS=delete,graphql,branching

Logging Configuration

Response Size Limit

Maximum tool response size in bytes; larger responses are truncated (empty = unlimited)

Rate Limiting

Set RATE_LIMIT_ENABLED true to enable rate limiting

Tool Search Transform (Optional)

Set TOOL_SEARCH_ENABLED true to replace full tool listings with search_tools + call_tool

Search strategy: bm25 (natural language) or regex (pattern match)

Maximum number of tools returned by search_tools

Sentry Error Tracking (Optional)

Set SENTRY_DSN to enable error tracking and performance monitoring

SENTRY_DSN=https://your-key@o12345.ingest.us.sentry.io/6789

Optional Sentry configuration

SENTRY_TRACES_SAMPLE_RATE=1.0

SENTRY_SEND_DEFAULT_PII=false

SENTRY_ENVIRONMENT=production