Packet Tracer MCP
MCP server for Cisco Packet Tracer: an agent plans a network, builds it on the canvas and proves connectivity with ping.
- 343 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- `pt_send_raw` runs arbitrary JavaScript inside Packet Tracer with its privileges, including disk access.
- Agent install copies the extension into the Packet Tracer directory and changes MCP client settings.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/packet-tracer-mcpDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- `pt_send_raw` runs arbitrary JavaScript inside Packet Tracer with its privileges, including disk access.
- Agent install copies the extension into the Packet Tracer directory and changes MCP client settings.
This is third-party code. Review the repository files before installing.
What it does
Packet Tracer MCP gives an agent `pt_*` tools for Cisco Packet Tracer: topology planning, validation, plan auto-fix, JavaScript and IOS config generation, and live deployment on the canvas. It covers addressing and DHCP, static routes, OSPF, EIGRP, RIP, VLANs, ACLs, NAT, Cisco CME voice and an audit of the live configuration. Verification includes a real ping, a plan-versus-live diff and a per-layer packet log. Communication runs through a token-protected local HTTP bridge on `127.0.0.1` and the MCP Control Center extension inside Packet Tracer.
Who it is for. Students, teachers and network engineers who build labs in Cisco Packet Tracer and want to describe topology in words.
Good fit when
- A lab of three routers with OSPF and DHCP is built from one sentence.
- After the build, ping checks connectivity between the topology's computers.
- A security audit of the live router configuration is needed before handing in the work.
- Packet flow is studied through simulation steps and the per-layer decision log.
Not a fit when
- You need to manage real Cisco hardware: the server works with Packet Tracer.
- Packet Tracer is not installed or is older than 8.2.
- Arbitrary JavaScript inside Packet Tracer is unacceptable: the `pt_send_raw` tool does this by design.
Example request
Create a network with one switch and two PCs, deploy it to Packet Tracer and ping between the PCs.MCP
- Transport
- stdio
- Authentication
- not required
Limitations
Cisco Packet Tracer 8.2 and newer (tested on 9.0 and 9.0.1) on Windows or macOS is required; on Linux the server and skill work while the extension is added by hand. UI mode with device windows exists only on Windows. With agent install, Packet Tracer asks whether to enable the new module and you answer Yes. Versions before v0.6.0 had an unauthenticated bridge and are vulnerable; use v0.6.0 or newer with the V5 extension.
How to disable. Remove the `packet-tracer` entry from the MCP client configuration and disable the MCP Control Center module in Packet Tracer. The bridge token sits in the user data directory and is removed separately.
FAQ
What must be installed first?
Cisco Packet Tracer 8.2 or newer and `uv`, which brings its own Python. The server starts with `uvx packet-tracer-mcp`.
Can an agent do the install?
Yes. Give the agent the repository link and it installs the server, skill and extension from `llms-install.md`. You still confirm Packet Tracer's prompt about the new module by hand.
Is the local bridge safe?
The bridge listens on loopback only, every call carries a token and the Host header is checked against DNS rebinding. Versions before v0.6.0 were vulnerable.
What does `pt_send_raw` do?
It runs arbitrary JavaScript inside Packet Tracer. The README calls this a deliberate capability for an MCP client you trust.
Does it work on Linux?
The server, live deploy and device panel work; the extension is added by hand. The README records a check on Ubuntu 26.04.1.
Discussion
No questions or reviews yet.
Related
MCP serversDuring a network incident, an agent retrieves the route to a service while the administrator controls diagnostic access.
Cisco's local MCP server: an agent designs a network and builds L1, L2 and L3 diagrams in SVG and PowerPoint plus a device table
The mcpcap MCP server parses PCAP files for DNS, DHCP, ICMP, TCP and SIP and hands the agent structured JSON for network diagnostics
An MCP server for MikroTik routers: the agent reads and changes RouterOS configuration over SSH on a chat request
MCPM
mcpm
A package manager and registry for MCP on all platforms and clients: finds, adds and configures MCP servers, remembers the source and updates
CISRE’s MCP server gives an agent Kubernetes diagnostics and resource operations with a configurable namespace boundary.
README in short
The chain: the agent calls `pt_*`, the server plans and validates the topology, the HTTP bridge hands JavaScript to the extension inside Packet Tracer. With the extension window closed a file mailbox takes over.