Cisco SSH MCP Server

A Model Context Protocol (MCP) server for managing SSH connections to Cisco network devices. This server provides tools for connecting to, configuring, and monitoring Cisco routers and switches through SSH.

Features

• Multiple SSH Connections: Manage connections to multiple Cisco devices simultaneously
• Command Execution: Execute any CLI command on connected devices
• Configuration Management: Enter config mode and apply configuration changes
• Show Commands: Execute show commands with optional output parsing
• Raw Terminal Access: Send raw text for interactive sessions
• Connection Management: List, connect, and disconnect from devices
• Secure Authentication: Support for password and key-based authentication

Installation

npm install
npm run build

Usage

As an MCP Server

Configure your MCP client (like Cline) to use this server:

{
  "mcpServers": {
    "cisco-ssh": {
      "command": "node",
      "args": ["path/to/cisco-ssh-mcp/dist/index.js"]
    }
  }
}

Command Line Usage

# Start the MCP server
npm start

# Start with default connection parameters
cisco-ssh-mcp --host 192.168.1.1 --username admin

Available Tools

cisco_connect

Connect to a Cisco device via SSH.

Parameters:

• `host` (required): IP address or hostname
• `username` (required): SSH username
• `password`: SSH password
• `privateKey`: Private key for authentication
• `port`: SSH port (default: 22)
• `connectionId`: Unique identifier for the connection

cisco_exec

Execute a command on a connected device.

Parameters:

• `command` (required): Command to execute
• `connectionId`: Which connection to use
• `timeout`: Command timeout in milliseconds

cisco_config

Enter configuration mode and execute configuration commands.

Parameters:

• `commands` (required): Array of configuration commands
• `connectionId`: Which connection to use
• `save`: Whether to save config after changes

cisco_show

Execute show commands with optional output parsing.

Parameters:

• `command` (required): Show command to execute
• `connectionId`: Which connection to use
• `parseOutput`: Parse output into structured format

cisco_send_raw

Send raw text to the SSH connection.

Parameters:

• `text` (required): Raw text to send
• `connectionId`: Which connection to use
• `waitForPrompt`: Wait for command prompt

cisco_list_connections

List all active SSH connections.

cisco_disconnect

Disconnect from a device.

Parameters:

• `connectionId`: Connection to disconnect

Examples

Connecting to a Device

// Connect using password
{
  "tool": "cisco_connect",
  "arguments": {
    "host": "192.168.1.1",
    "username": "admin",
    "password": "cisco123",
    "connectionId": "router1"
  }
}

// Connect using SSH key
{
  "tool": "cisco_connect",
  "arguments": {
    "host": "192.168.1.1",
    "username": "admin",
    "privateKey": "-----BEGIN RSA PRIVATE KEY-----\\n...",
    "connectionId": "router1"
  }
}

Executing Commands

// Show interface status
{
  "tool": "cisco_show",
  "arguments": {
    "command": "show ip interface brief",
    "parseOutput": true
  }
}

// Configure an interface
{
  "tool": "cisco_config",
  "arguments": {
    "commands": [
      "interface GigabitEthernet0/1",
      "ip address 192.168.10.1 255.255.255.0",
      "no shutdown"
    ],
    "save": true
  }
}

Security Considerations

• Use SSH keys instead of passwords when possible
• Implement proper network segmentation for management traffic
• Enable logging for all commands executed
• Use dedicated management VLANs
• Implement proper access controls and authentication

Troubleshooting

• Connection Timeout: Check network connectivity and SSH service on device
• Authentication Failed: Verify credentials and SSH configuration
• Command Timeout: Increase timeout values for slow devices
• Permission Denied: Ensure user has appropriate privileges

License

MIT License - see LICENSE file for details.