NetBox MCP Server
NetBox MCP returns selected inventory fields, giving an agent a concise device and address selection without write access.
- 254 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- The agent receives device, address and audit information visible to the NetBox token.
Install
- Works in
Manual install
uv syncFirst recommended dependency setup from the local repository. Configure URL, token and client connection afterward.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The agent receives device, address and audit information visible to the NetBox token.
This is third-party code. Review the repository files before installing.
What it does
NetBox MCP Server reads network-inventory objects, filtered devices and addresses, object details and change history. It does not write to NetBox. Field selection reduces responses. Optional discovery adds plugin objects when supported by NetBox and token permissions. Results describe recorded inventory rather than live equipment probes.
Who it is for. NetBox network administrators retrieving devices, addresses and inventory changes through read-only agent access.
Good fit when
- An administrator selects a site’s devices and primary addresses.
- While reviewing an object, the team checks who changed its NetBox record and when.
- Address-space use is examined through saved IPAM records.
- An agent requests only the fields needed to answer a question about a large object.
Not a fit when
- You need to create or modify NetBox objects through this server.
- You need live network probing of device availability.
- The task requires GraphQL or server-code plugin extensions.
Example request
List DC14 devices with name, status and primary IP, then show one selected object’s recent changes.MCP
- Transport
- stdio, http
- Authentication
- API key
Environment variables
NETBOX_URLrequired- Your NetBox instance URL.
NETBOX_TOKENrequired, secret- Read-only NetBox API token.
MCP_AUTH_TOKENsecret- Separate Bearer token protecting HTTP access.
Limitations
A NetBox URL and token with object access are required, preferably a dedicated read-only role. HTTP lacks authentication without MCP_AUTH_TOKEN, so protect network access and use TLS. Plugin-object discovery is disabled by default and requires NetBox 4.2 or newer plus access to object types. Discovery failures leave the server running with core objects only and emit a diagnostic warning instead of exposing unavailable plugin objects.
How to disable. Disconnect the client, stop the server and revoke its dedicated NetBox token. Inventory data remains unchanged.
FAQ
Can it change data?
No. This server is read-only; writes need another approved tool.
How do I reduce output?
Supply required fields and verify enough evidence remains.
Why is a plugin object missing?
Set `ENABLE_PLUGIN_DISCOVERY=true` or `--enable-plugin-discovery` and restart the server. NetBox 4.2 or later and object-type access are needed; if discovery fails, only core objects remain.
What changed from older releases?
The launch changed from `server.py` to `netbox-mcp-server`; update client settings.
How do I check Claude Code connectivity?
Use `/mcp` or `claude mcp list`, then a small read query.
Discussion
No questions or reviews yet.
Related
MCP serversZabbix MCP Server (mpeirone)
Zabbix MCP Server
The MCP server exposes Zabbix API calls, documentation and method discovery with read-only and method-filter controls.
An MCP server built into the Netdata agent: metrics, logs, alerts and live process, service and container data for an AI assistant
An MCP server connects agents to UniFi infrastructure for device diagnostics, configuration reviews and approved changes
Zabbix MCP Server
zabbix-mcp-server
An MCP server for the whole Zabbix API: 237 tools, several Zabbix servers, scoped tokens and a read-only mode
A secure MCP runtime through which an agent operates local machines, servers and containers
Official Cloudflare MCP server: the agent drives the whole Cloudflare API by searching the spec and running code
README in short
Configuration supports environment, env files and command flags. Release Docker images include provenance information.