Back to Home
ebarron icon

ONTAP-MCP

Verified Safe

by ebarron

Overview

A Model Context Protocol (MCP) server providing comprehensive access to NetApp ONTAP storage systems, supporting STDIO and HTTP transports for multi-cluster management, volume lifecycle operations, data protection, and NFS/CIFS access control.

Installation

Run Command
node build/index.js --http=3000

Environment Variables

  • ONTAP_CLUSTERS
  • MCP_SESSION_INACTIVITY_TIMEOUT
  • MCP_SESSION_MAX_LIFETIME
  • NODE_ENV
  • PORT

Security Notes

The server's `OntapApiClient` explicitly disables SSL/TLS certificate validation (`rejectUnauthorized: false`) for API calls to ONTAP clusters, which is a significant security risk as it makes the connection vulnerable to man-in-the-middle attacks. The HTTP transport also enables Cross-Origin Resource Sharing (CORS) from any origin (`origin: '*'`), which is insecure for production deployments. For demo purposes, plaintext credentials can be stored in `demo/clusters.json`, which is a local security risk, though explicitly documented as for demo/lab use only and git-ignored.

Similar Servers

Stats

Interest Score25
Security Score5
Cost ClassLow
Stars1
Forks1
Last Update2026-01-06

Tags

NetApp ONTAPMCP ServerStorage ManagementMulti-ClusterJSON-RPCHTTP/SSEAutomation