Oxidized MCP

Name: Oxidized MCP
Author: mhajder

by mhajderversion 0.2.2i★ –iRuns on your computer

Registry nameio.github.mhajder/oxidized-mcp

Install

Overview

Description from the maker (original English)

MCP server for Oxidized network device configuration backups

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiVery new↓ 47/wk · ★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio, Streamable HTTP
Category: Other
You need to fill in: OXIDIZED_URL, OXIDIZED_PASSWORD

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: OXIDIZED_URL, OXIDIZED_USERNAME, OXIDIZED_PASSWORD, OXIDIZED_VERIFY_SSL, OXIDIZED_TIMEOUT, OXIDIZED_SEARCH_TIMEOUT, OXIDIZED_REDACT_NODE_VARS, READ_ONLY_MODE, OXIDIZED_DISABLED_TAGS, LOG_LEVEL, RATE_LIMIT_ENABLED, RATE_LIMIT_MAX_REQUESTS, RATE_LIMIT_WINDOW_MINUTES, TOOL_SEARCH_ENABLED, TOOL_SEARCH_STRATEGY, TOOL_SEARCH_MAX_RESULTS

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

PyPIPython’s uv installed (for the uvx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "oxidized": {
      "command": "uvx",
      "args": [
        "oxidized-mcp"
      ],
      "env": {
        "OXIDIZED_URL": "your-value",
        "OXIDIZED_USERNAME": "your-value",
        "OXIDIZED_PASSWORD": "your-value",
        "OXIDIZED_VERIFY_SSL": "your-value",
        "OXIDIZED_TIMEOUT": "your-value",
        "OXIDIZED_SEARCH_TIMEOUT": "your-value",
        "OXIDIZED_REDACT_NODE_VARS": "your-value",
        "READ_ONLY_MODE": "your-value",
        "OXIDIZED_DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add oxidized --env OXIDIZED_URL=your-value --env OXIDIZED_USERNAME=your-value --env OXIDIZED_PASSWORD=your-value --env OXIDIZED_VERIFY_SSL=your-value --env OXIDIZED_TIMEOUT=your-value --env OXIDIZED_SEARCH_TIMEOUT=your-value --env OXIDIZED_REDACT_NODE_VARS=your-value --env READ_ONLY_MODE=your-value --env OXIDIZED_DISABLED_TAGS=your-value --env LOG_LEVEL=your-value --env RATE_LIMIT_ENABLED=your-value --env RATE_LIMIT_MAX_REQUESTS=your-value --env RATE_LIMIT_WINDOW_MINUTES=your-value --env TOOL_SEARCH_ENABLED=your-value --env TOOL_SEARCH_STRATEGY=your-value --env TOOL_SEARCH_MAX_RESULTS=your-value -- uvx oxidized-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "oxidized": {
      "command": "uvx",
      "args": [
        "oxidized-mcp"
      ],
      "env": {
        "OXIDIZED_URL": "your-value",
        "OXIDIZED_USERNAME": "your-value",
        "OXIDIZED_PASSWORD": "your-value",
        "OXIDIZED_VERIFY_SSL": "your-value",
        "OXIDIZED_TIMEOUT": "your-value",
        "OXIDIZED_SEARCH_TIMEOUT": "your-value",
        "OXIDIZED_REDACT_NODE_VARS": "your-value",
        "READ_ONLY_MODE": "your-value",
        "OXIDIZED_DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "oxidized": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "oxidized-mcp"
      ],
      "env": {
        "OXIDIZED_URL": "your-value",
        "OXIDIZED_USERNAME": "your-value",
        "OXIDIZED_PASSWORD": "your-value",
        "OXIDIZED_VERIFY_SSL": "your-value",
        "OXIDIZED_TIMEOUT": "your-value",
        "OXIDIZED_SEARCH_TIMEOUT": "your-value",
        "OXIDIZED_REDACT_NODE_VARS": "your-value",
        "READ_ONLY_MODE": "your-value",
        "OXIDIZED_DISABLED_TAGS": "your-value",
        "LOG_LEVEL": "your-value",
        "RATE_LIMIT_ENABLED": "your-value",
        "RATE_LIMIT_MAX_REQUESTS": "your-value",
        "RATE_LIMIT_WINDOW_MINUTES": "your-value",
        "TOOL_SEARCH_ENABLED": "your-value",
        "TOOL_SEARCH_STRATEGY": "your-value",
        "TOOL_SEARCH_MAX_RESULTS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

OXIDIZED_URL required env
Oxidized web base URL (e.g., http://localhost:8888)
OXIDIZED_USERNAME env
HTTP Basic auth username (e.g., for a reverse proxy in front of oxidized-web)
OXIDIZED_PASSWORD secret env
HTTP Basic auth password
OXIDIZED_VERIFY_SSL env
Verify SSL certificates (true/false)
OXIDIZED_TIMEOUT env
Request timeout in seconds
OXIDIZED_SEARCH_TIMEOUT env
Timeout in seconds for configuration searches (oxidized-web reads every stored configuration)
OXIDIZED_REDACT_NODE_VARS env
Redact node vars (may contain device credentials) in tool output
READ_ONLY_MODE env
Enable read-only mode to restrict write operations
OXIDIZED_DISABLED_TAGS env
Comma-separated list of tags to disable tools for
LOG_LEVEL env
Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
RATE_LIMIT_ENABLED env
Enable rate limiting
RATE_LIMIT_MAX_REQUESTS env
Maximum requests per rate limit window
RATE_LIMIT_WINDOW_MINUTES env
Rate limit window in minutes
TOOL_SEARCH_ENABLED env
Enable FastMCP tool search transform
TOOL_SEARCH_STRATEGY env
Tool search strategy (bm25 or regex)
TOOL_SEARCH_MAX_RESULTS env
Maximum tool search results returned by search_tools

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account mhajder, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 18444 servers in this category
Published to the registry more recently than 98% of the other 18444 servers in this category
Basic checks equal to or better than 100% of the other 18444 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Oxidized MCP safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: OXIDIZED_URL, OXIDIZED_PASSWORD

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.2.2) reached the registry yesterday.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Python (uv), Docker on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, Tethered Trust

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

by formulahendryEarly↓ 66/wk★ 440Updated 14 months ago

Runs on your computer

Install

Remote Desktop Commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

by desktop-commanderGrowing★ 211Updated 3 days ago

Runs in the cloud✓ desktopcommander.app

Install

Tethered Trust

Fit, compatibility and recall checks for AI agents before they buy: verdicts, evidence, receipts.

by tetheredtrust.comVery newUpdated today

Runs in the cloud✓ tetheredtrust.com

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Oxidized MCP Server

Let AI agents search, compare and back up network device configs stored in Oxidized

Installation · Tools · Configuration · Security

Oxidized MCP Server is a Python-based Model Context Protocol (MCP) server that gives AI assistants access to Oxidized, the network device configuration backup tool. It talks to the oxidized-web REST API to list devices, check backup health, read and search device configurations, browse and diff configuration history, and queue backups. It supports read-only mode, tag-based tool filtering, and bearer token authentication for HTTP transports.

✨ Features

Core Features

List and filter managed devices by group, model and last backup status
Find devices by partial name, full name (group/name) or IP address
Summarise backup health: failures, devices never backed up and stale backups
Read the latest backed-up configuration of any device, paged for large configs
Search all configurations for a regular expression or literal text, with matching lines and context

Configuration History

List the stored configuration versions of a device (git output)
Read a device's configuration as it was at any version (full oid or short prefix)
Diff two versions, or just see the most recent change, as a unified diff

Operations

Queue an immediate backup of a device, optionally with a commit message and author
Reload the node list from its source (router.db, SQL, HTTP, ...)
Read-only mode hides every operation for safe monitoring

Advanced Capabilities

Node vars (often device credentials) are redacted in tool output by default
HTTP Basic auth for oxidized-web behind a reverse proxy
Rate limiting, SSL/TLS verification and configurable timeouts
Tag-based tool filtering and an optional tool-search transform
Bearer token authentication for HTTP transports

🚀 Installation

Prerequisites

Python 3.11 to 3.15
A running Oxidized instance with oxidized-web enabled
For version history and diffs: the Oxidized git (or gitcrypt) output

Quick Install from PyPI

The easiest way to get started is to install from PyPI:

# Using UV (recommended)

uvx oxidized-mcp

Or using pip

pip install oxidized-mcp

Remember to configure the environment variables for your Oxidized instance before running the server:

# Create environment configuration

export OXIDIZED_URL=http://localhost:8888

For more details, visit: https://pypi.org/project/oxidized-mcp/

Install from Source

Clone the repository:

git clone https://github.com/mhajder/oxidized-mcp.git

cd oxidized-mcp

Install dependencies:

# Using UV (recommended)

uv sync

Or using pip

pip install -e .

Configure environment variables:

cp .env.example .env

Edit .env with your Oxidized URL (and Basic auth credentials if needed)

Run the server:

# Using UV (recommended)

uv run oxidized-mcp

Or using the installed command directly

oxidized-mcp

Development Setup

For development with additional tools:

# Clone and install with development dependencies

git clone https://github.com/mhajder/oxidized-mcp.git cd oxidized-mcp uv sync --group dev

Run tests

uv run pytest

Run with coverage

uv run pytest --cov=src/

Run linting and formatting

uv run ruff check . uv run ruff format .

Run type checking

uv run ty check .

Setup prek hooks

uv run prek install

🔧 Configuration

Environment Variables

# Oxidized Connection Details

Base URL of oxidized-web (include the url_prefix if one is configured).

A query string (?...) is rejected; use the Basic auth settings below, or

percent-encode special characters in credentials put in the URL.

OXIDIZED_URL=http://localhost:8888

Optional HTTP Basic auth, e.g. for a reverse proxy in front of oxidized-web

OXIDIZED_USERNAME=

OXIDIZED_PASSWORD=

SSL Configuration

OXIDIZED_VERIFY_SSL=true OXIDIZED_TIMEOUT=30

Timeout for search_configs (oxidized-web reads every configuration)

OXIDIZED_SEARCH_TIMEOUT=300

Redact node vars (often device credentials) in tool output

OXIDIZED_REDACT_NODE_VARS=true

Read-Only Mode

Set READ_ONLY_MODE true to disable operations (trigger_node_backup, reload_nodes)

READ_ONLY_MODE=false

Disabled Tags

Comma-separated list of tags to disable tools for (empty by default)

Example: OXIDIZED_DISABLED_TAGS=search,diff

OXIDIZED_DISABLED_TAGS=

Logging Configuration

LOG_LEVEL=INFO

Rate Limiting (requests per minute)

Set RATE_LIMIT_ENABLED true to enable rate limiting

RATE_LIMIT_ENABLED=false RATE_LIMIT_MAX_REQUESTS=60 RATE_LIMIT_WINDOW_MINUTES=1

Tool Search Transform (Optional)

Set TOOL_SEARCH_ENABLED true to replace full tool listings with search_tools + call_tool

TOOL_SEARCH_ENABLED=false

Search strategy: bm25 (natural language) or regex (pattern match)

TOOL_SEARCH_STRATEGY=bm25

Maximum number of tools returned by search_tools

TOOL_SEARCH_MAX_RESULTS=5

Sentry Error Tracking (Optional)

Set SENTRY_DSN to enable error tracking and performance monitoring

SENTRY_DSN=https://your-key@o12345.ingest.us.sentry.io/6789

Optional Sentry configuration

SENTRY_TRACES_SAMPLE_RATE=1.0

SENTRY_SEND_DEFAULT_PII=false

SENTRY_ENVIRONMENT=production

SENTRY_RELEASE=1.2.3

SENTRY_PROFILE_SESSION_SAMPLE_RATE=1.0

SENTRY_PROFILE_LIFECYCLE=trace

SENTRY_ENABLE_LOGS=true

MCP Transport Configuration

Transport type: 'stdio' (default), 'sse' (Server-Sent Events), or 'http' (HTTP Streamable)

'streamable-http' is accepted as an alias for 'http'. Any other value stops

the server at startup.

MCP_TRANSPORT=stdio

HTTP Transport Settings (used when MCP_TRANSPORT=sse or MCP_TRANSPORT=http)

Host to bind the HTTP server (default: 127.0.0.1)

MCP_HTTP_HOST=127.0.0.1

Port to bind the HTTP server (default: 8000)

MCP_HTTP_PORT=8000

Optional bearer token for authentication (leave empty for no auth)

MCP_HTTP_BEARER_TOKEN=

Sentry Error Tracking & Monitoring (Optional)

The server optionally supports Sentry for error tracking, performance monitoring, and debugging. Sentry integration is completely optional and only initialized if configured.

Installation

To enable Sentry monitoring, install the optional dependency:

# Using UV (recommended)

uv sync --extra sentry

Configuration

Enable Sentry by setting the SENTRY_DSN environment variable in your .env file:

# Required: Sentry DSN for your project

SENTRY_DSN=https://your-key@o12345.ingest.us.sentry.io/6789

Optional: Performance monitoring sample rate (0.0-1.0, default: 1.0)

SENTRY_TRACES_SAMPLE_RATE=1.0

Optional: Include personally identifiable information (default: false).

Keep it off: with the MCP integration it records tool results, which are

full device configurations including secrets.

SENTRY_SEND_DEFAULT_PII=false

Optional: Environment name (e.g., "production", "staging")

SENTRY_ENVIRONMENT=production

Optional: Release version (auto-detected from package if not set)

SENTRY_RELEASE=1.2.2

Optional: Profiling - continuous profiling sample rate (0.0-1.0, default: 1.0)

SENTRY_PROFILE_SESSION_SAMPLE_RATE=1.0

Optional: Profiling - lifecycle mode for profiling (default: "trace")

Options: "all", "continuation", "trace"

SENTRY_PROFILE_LIFECYCLE=trace

Optional: Enable log capture as breadcrumbs and events (default: true)

SENTRY_ENABLE_LOGS=true

Features

When enabled, Sentry automatically captures:

Exceptions & Errors: All unhandled exceptions with full context
Performance Metrics: Request/response times and traces
MCP Integration: Detailed MCP server activity and interactions
Logs & Breadcrumbs: Application logs and event trails for debugging
Context Data: Environment, client info, and request parameters

Getting a Sentry DSN

Create a free account at sentry.io
Create a new Python project
Copy your DSN from the project settings
Set it in your .env file

Disabling Sentry

Sentry is completely optional. If you don't set SENTRY_DSN, the server will run normally without any Sentry integration, and no monitoring data will be collected.

🧰 Available Tools

Node Tools

list_nodes: List devices with optional filters (group, model, last run status, name/IP substring) and paging; group/model are filtered by Oxidized itself (/nodes/ / .json), so large inventories are not transferred in full
get_node: Get a single device's details and last backup run (accepts name or IP)
find_nodes: Find devices by partial name, full name or IP, exact matches first
get_backup_stats: Backup health summary - counts per status, group and model, success rate, failed / never backed up / stale devices; optionally for a single group or model

Configuration Tools

get_node_config: Get the latest backed-up configuration of a device (by name or IP), paged by lines (offset / max_lines)
search_configs: Search all configurations for a regex or literal text; returns matching lines with line numbers and optional context

Version History Tools

Require the Oxidized git or gitcrypt output.

list_node_versions: List stored configuration versions (oid, date, author, message), newest first
get_node_version: Get the configuration at a given version (full oid or unique prefix), paged by lines
diff_node_versions: Unified diff between two versions; defaults to the most recent change

Operation Tools

Hidden when READ_ONLY_MODE=true.

trigger_node_backup: Queue an immediate backup of a device, optionally recording a commit message and author
reload_nodes: Reload the whole node list from its source (a per-node reload is deliberately not offered: oxidized-web's /reload?node=X replaces the entire in-memory node list with the matching nodes)

🔒 Security & Safety Features

Read-Only Mode

The server supports a read-only mode that disables all write operations for safe monitoring:

READ_ONLY_MODE=true

When enabled, only tools tagged read-only are exposed: trigger_node_backup and reload_nodes are hidden, while every node, configuration and history tool stays available.

Tag-Based Tool Filtering

You can disable specific categories of tools by setting disabled tags:

OXIDIZED_DISABLED_TAGS=search,diff

Available tags include:

node - Node listing and lookup tools

Only the beginning is shown; read the rest in the repo

Oxidized MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

Tethered Trust

README from the maker

Oxidized MCP Server

✨ Features

Core Features

Configuration History

Operations

Advanced Capabilities

🚀 Installation

Prerequisites

Quick Install from PyPI

Or using pip

Install from Source

Or using pip

Edit .env with your Oxidized URL (and Basic auth credentials if needed)

Or using the installed command directly

Development Setup

Run tests

Run with coverage

Run linting and formatting

Run type checking

Setup prek hooks

🔧 Configuration

Environment Variables

Base URL of oxidized-web (include the url_prefix if one is configured).

A query string (?...) is rejected; use the Basic auth settings below, or

percent-encode special characters in credentials put in the URL.

Optional HTTP Basic auth, e.g. for a reverse proxy in front of oxidized-web

OXIDIZED_USERNAME=

OXIDIZED_PASSWORD=

SSL Configuration

Timeout for search_configs (oxidized-web reads every configuration)

Redact node vars (often device credentials) in tool output

Read-Only Mode

Set READ_ONLY_MODE true to disable operations (trigger_node_backup, reload_nodes)

Disabled Tags

Comma-separated list of tags to disable tools for (empty by default)

Example: OXIDIZED_DISABLED_TAGS=search,diff

Logging Configuration

Rate Limiting (requests per minute)

Set RATE_LIMIT_ENABLED true to enable rate limiting

Tool Search Transform (Optional)

Set TOOL_SEARCH_ENABLED true to replace full tool listings with search_tools + call_tool

Search strategy: bm25 (natural language) or regex (pattern match)

Maximum number of tools returned by search_tools

Sentry Error Tracking (Optional)

Set SENTRY_DSN to enable error tracking and performance monitoring

SENTRY_DSN=https://your-key@o12345.ingest.us.sentry.io/6789

Optional Sentry configuration

SENTRY_TRACES_SAMPLE_RATE=1.0

SENTRY_SEND_DEFAULT_PII=false

SENTRY_ENVIRONMENT=production

SENTRY_RELEASE=1.2.3

SENTRY_PROFILE_SESSION_SAMPLE_RATE=1.0

SENTRY_PROFILE_LIFECYCLE=trace

SENTRY_ENABLE_LOGS=true

MCP Transport Configuration

Transport type: 'stdio' (default), 'sse' (Server-Sent Events), or 'http' (HTTP Streamable)

'streamable-http' is accepted as an alias for 'http'. Any other value stops

the server at startup.