cml-mcp
by xorrkaz
Overview
The cml-mcp server acts as an interface for LLM applications to interact with Cisco Modeling Labs (CML), enabling creation and management of network topologies and devices.
Installation
docker run -d --rm --name cml-mcp -p 9000:9000 -e CML_URL=<URL_OF_CML_SERVER> -e CML_MCP_TRANSPORT=http xorrkaz/cml-mcp:latestEnvironment Variables
- CML_URL
- CML_USERNAME
- CML_PASSWORD
- PYATS_USERNAME
- PYATS_PASSWORD
- PYATS_AUTH_PASS
- CML_MCP_TRANSPORT
- CML_MCP_BIND
- CML_MCP_PORT
Security Notes
The server explicitly disables TLS/SSL certificate verification (`verify=False` for httpx and `ssl_verify=False` for virl2_client) when communicating with the CML server. This is a critical security vulnerability that makes all communications susceptible to Man-in-the-Middle (MITM) attacks, allowing an attacker to intercept and potentially modify sensitive CML credentials and data. Additionally, PyATS credentials for device access have hardcoded default values ('cisco'), posing a risk if not overridden by environment variables. While basic authentication via `X-Authorization` is used, the lack of TLS verification severely compromises its security.
Similar Servers
fastmcp
FastMCP is a Python framework for building and interacting with Model Context Protocol (MCP) servers. It provides client and server capabilities, enabling the creation of AI agents and services through definable tools, resources, and prompts. It supports various transports, authentication methods, logging, and background task execution, with strong integration for OpenAPI specifications.
mcp-scanner
A Python tool for scanning Model Context Protocol (MCP) servers and tools to detect potential security findings by leveraging Cisco AI Defense API, YARA rules, and LLM-as-a-judge.
mcp-interviewer
A Python CLI tool designed to evaluate, test, and generate reports on Model Context Protocol (MCP) servers to ensure compatibility and quality for LLM agent use cases.
zeromcp
A minimal, pure Python Model Context Protocol (MCP) server for exposing tools, resources, and prompts via HTTP/SSE and Stdio transports.