ACI Model Context Protocol (MCP) Server

A comprehensive MCP server for configuring and managing Cisco ACI (Application Centric Infrastructure) fabrics through the APIC REST API.

Overview

This MCP server provides 35+ tools for complete ACI fabric management, including:

• Tenant Management: Create, list, get, update, and delete tenants

• Application Profiles: Manage application profiles within tenants

• Endpoint Groups (EPGs): Configure and manage endpoint groups

• Bridge Domains: Create and manage Layer 2 domains

• VRFs: Manage Virtual Routing and Forwarding instances

• Contracts: Define and manage security policies

• Health Monitoring: Monitor fabric health and faults

• Node Management: Manage fabric nodes and interfaces

Related MCP server: Hyperfabric MCP Server

Installation

Prerequisites

• Node.js 18+ and npm

• Access to a Cisco APIC controller

• Valid APIC credentials (username/password or certificate)

Setup

1. Clone and Install:

   cd aci-mcp-server
   npm install

2. Configure Authentication:

   Option A: Environment Variables

   cp .env.example .env
   # Edit .env with your APIC details
   export ACI_APIC_URL="https://your-apic.domain.com"
   export ACI_USERNAME="admin"
   export ACI_PASSWORD="your_password"

   Option B: Configuration Files

   cp aci-config.json.example aci-config.json
   # Edit aci-config.json with your settings

   Option C: Certificate Authentication

   export ACI_APIC_URL="https://your-apic.domain.com"
   export ACI_USERNAME="admin"
   export ACI_CERT_NAME="your-cert-name"
   export ACI_PRIVATE_KEY_PATH="/path/to/private.key"

3. Build the Server:

   npm run build

4. Test Connection:

   npm start
   # Should connect to APIC and display available tools

Configuration

Authentication Methods

The server supports two authentication methods:

1. Username/Password: Standard APIC login

2. Certificate: X.509 certificate-based authentication (recommended for production)

Tool Configuration

Configure which tools are available using aci-mcp-config.json:

{
  "serverConfig": {
    "name": "aci",
    "toolSelectionMode": "whitelist",
    "enableAllTools": false,
    "tenantFocus": "production"
  },
  "toolConfiguration": {
    "enabledTools": ["list_tenants", "get_fabric_health", ...],
    "disabledTools": []
  }
}

Tool Modes:

• core: Essential tools (35 tools) - Default

• all: All available tools (50+ tools)

Environment Variable Configuration:

export ACI_TOOL_MODE=core          # or 'all'
export ACI_TENANT_FOCUS=production # Focus on specific tenant

Available Tools

Tenant Management (5 tools)

• list_tenants - List all tenants

• get_tenant - Get specific tenant details

• create_tenant - Create new tenant

• update_tenant - Update tenant configuration

• delete_tenant - Delete tenant

Application Profile Management (5 tools)

• list_application_profiles - List application profiles

• get_application_profile - Get specific application profile

• create_application_profile - Create new application profile

• update_application_profile - Update application profile

• delete_application_profile - Delete application profile

Endpoint Group Management (6 tools)

• list_endpoint_groups - List endpoint groups

• get_endpoint_group - Get specific EPG details

• create_endpoint_group - Create new EPG

• update_endpoint_group - Update EPG configuration

• delete_endpoint_group - Delete EPG

• get_endpoint_group_stats - Get EPG statistics

Bridge Domain Management (5 tools)

• list_bridge_domains - List bridge domains

• get_bridge_domain - Get specific bridge domain

• create_bridge_domain - Create new bridge domain

• update_bridge_domain - Update bridge domain

• delete_bridge_domain - Delete bridge domain

VRF Management (5 tools)

• list_vrfs - List VRFs

• get_vrf - Get specific VRF details

• create_vrf - Create new VRF

• update_vrf - Update VRF configuration

• delete_vrf - Delete VRF

Contract Management (8 tools)

• list_contracts - List contracts

• get_contract - Get contract details

• create_contract - Create new contract

• update_contract - Update contract

• delete_contract - Delete contract

• list_filters - List filters

• create_filter - Create new filter

• delete_filter - Delete filter

Health & Monitoring (8 tools)

• get_fabric_health - Get overall fabric health

• list_faults - List fabric faults

• get_fault_summary - Get fault summary by severity

• list_nodes - List fabric nodes

• get_node_health - Get node health status

• list_interfaces - List fabric interfaces

• get_interface_stats - Get interface statistics

• get_system_info - Get APIC system information