NetBox MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 137 installs a week from pypi. Last commit 26 Sep 2026.
MCP server for NetBox DCIM/IPAM with read-only and dry-run modes
Today is the operative word: we check NetBox MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add netbox-mcp -- uvx netbox-mcp
{
"mcpServers": {
"netbox-mcp": {
"args": [
"netbox-mcp"
],
"command": "uvx"
}
}
}
[mcp_servers.netbox-mcp]
command = "uvx"
args = ["netbox-mcp"]
{
"mcpServers": {
"netbox-mcp": {
"args": [
"netbox-mcp"
],
"command": "uvx"
}
}
}
{
"mcpServers": {
"netbox-mcp": {
"args": [
"netbox-mcp"
],
"command": "uvx"
}
}
}
This one needs environment variables set before it will start:
NETBOX_URL (NetBox base URL (e.g., https://netbox.example.com)), NETBOX_TOKEN (NetBox API token: v2 (nbt_<key>.<token>, NetBox 4.5+) or legacy v1), NETBOX_VERIFY_SSL (Verify SSL certificates (true/false)), NETBOX_TIMEOUT (Total time allowed for one NetBox request, retries included (seconds)), NETBOX_BRANCHING_ENABLED (Enable netbox-branching support: branch tools and the 'branch' argument (requires the netbox-branching plugin) (true/false)), NETBOX_BRANCH (Default netbox-branching branch (name or schema ID) for every call; requires NETBOX_BRANCHING_ENABLED=true), NETBOX_PLUGIN_DISCOVERY (Discover plugin object types from /api/core/object-types/ (true/false)), READ_ONLY_MODE (Hide all write tools (create, update, delete) (true/false)), DRY_RUN_MODE (Write tools only simulate changes and never modify NetBox (true/false)), DISABLED_TAGS (Comma-separated tool tags to disable (e.g. delete,graphql,branching)), LOG_LEVEL (Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)), RESPONSE_MAX_SIZE (Maximum tool response size in bytes (unset = unlimited)), RATE_LIMIT_ENABLED (Enable rate limiting), RATE_LIMIT_MAX_REQUESTS (Maximum requests per rate limit window), RATE_LIMIT_WINDOW_MINUTES (Rate limit window in minutes), TOOL_SEARCH_ENABLED (Enable FastMCP tool search transform), TOOL_SEARCH_STRATEGY (Tool search strategy (bm25 or regex)), TOOL_SEARCH_MAX_RESULTS (Maximum tool search results returned by search_tools), MCP_HTTP_PORT (Port for HTTP server (default: 8000)), MCP_TRANSPORT (MCP transport type (http for HTTP, stdio for stdio)).
The author declared them in the registry entry; get the values from the project itself.
SSH server management for agents, with per-server read-only and allowlist security modes
MCP server for the Longhorn distributed storage manager API, with a --read-only mode.
Governed MCP server for DMTF Redfish BMCs. Read-only by default; writes are opt-in and dry-run.
Secure read-only MCP server for Slack workspaces
Read-only MCP server for querying Kenda token spend and waste
MCP server for Node-RED: flows, nodes. Works with any instance.
Read-only MCP server for Trino: queries run as the user, and Trino's own policies decide.
Read-only MCP server for public WeJob jobs, formations, and companies.
Answers built from our own checks of this server.