← Back to search

Aruba Central MCP

shigechika Scanned just now

MCP server for Aruba Central: expose AP, switch, and client status to AI assistants

C
69.5 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 17

health_check
annotations: none low

Report server version and Aruba Central backend authentication. Call this at session start (or after a tool-call timeout) to confirm the MCP is up, see which version is running, and verify the Aruba Central backend can be authenticated. Lightweight: it builds the client and obtains an OAuth2 access token (GreenLake SSO, reusing the cached token) — it does NOT fetch APs, switches, clients, or any other data endpoint. Always returns the same keys: ``status`` (healthy / degraded / error), ``service``, ``version``, ``base_url`` (the configured ARUBA_CENTRAL_BASE_URL, empty string if unset), and ``auth`` (ok / error / missing-env). On a degraded or error result, ``detail`` carries the reason.

list_aps
annotations: none low

List access points with device-level overview. Use this for AP inventory and availability checks. For RF details (channel, utilization, noise floor), use list_radios instead. Args: site: Filter by site name (exact match, server-side). Empty for all. status: Filter by status (e.g. "ONLINE", "OFFLINE"). Empty for all.

site str status str
list_switches
annotations: none low

List all switches from Aruba Central. Returns switch name, status, model, type, IP, firmware, and MAC address.

list_clients
annotations: none low

List connected wireless clients with connection details. Returns client name, MAC, IP, SSID, band, SNR, connected AP, and auth type. For a single client's full details, use find_client_by_mac instead. Args: ssid: Filter by SSID name (exact match, server-side). Empty for all. band: Filter by wireless band (exact match, server-side). Empty for all.

band str ssid str
find_client_by_mac
annotations: none low

Look up a single client by MAC address (wireless or wired). Returns detailed info including OS, manufacturer, VLAN, and connection status. Uses direct API lookup (no full-list scan). Args: mac_address: Client MAC address (e.g. "aa:bb:cc:dd:ee:ff").

mac_address str
get_ap_status
annotations: none low

Get detailed status of a specific access point by name. Args: ap_name: AP device name (case-insensitive).

ap_name str
get_site_summary
annotations: none low

Get a summary of all sites with AP and client counts. Aggregates data across all APs and clients, grouped by site name. Shows total APs, online/offline counts, and client count per site.

list_radios
annotations: none low

List AP radios with RF details. Use this for RF troubleshooting: channel assignment, channel utilization, noise floor, and TX power. Each AP typically has 2-3 radios (one per band). Args: site: Filter by site name (exact match, server-side). Empty for all. band: Filter by band (e.g. "2.4 GHz", "5 GHz"). Empty for all.

band str site str
list_bssids
annotations: none low

List all BSSIDs (per-radio, per-SSID broadcast identifiers). Useful for identifying which radio on which AP is broadcasting a specific SSID. Each AP radio broadcasts one BSSID per WLAN. Args: site: Filter by site name (exact match, server-side). Empty for all.

site str
list_wlans
annotations: none low

List configured WLANs (SSIDs) with security and VLAN settings. Shows each WLAN's name, band, operational status, security level, and VLAN assignment. Args: site_id: Filter by site ID. Empty for all. serial_number: Filter by AP serial number. Empty for all.

site_id str serial_number str
list_swarms
annotations: none low

List all AP swarms (clusters) from Aruba Central. Returns cluster name, conductor AP, site, IP, and firmware version. Args: site: Filter by site name (exact match, server-side). Empty for all.

site str
get_top_aps
annotations: none low

Get top access points ranked by bandwidth usage over a time range. Returns a ranked list of APs sorted by descending bandwidth consumption. Args: usage_type: "wireless" (Wi-Fi traffic), "wired" (uplink traffic), or "total" (wireless + wired combined). Default: "total". site_id: Filter by site ID. Empty for all sites. limit: Maximum number of APs to return (1-25, default 10). start_at: Start time in RFC 3339 format (e.g. "2025-01-01T00:00:00Z"). Max 30 days range. Defaults to 24 hours ago if omitted. end_at: End time in RFC 3339 format. Defaults to current time if omitted.

limit int end_at str site_id str start_at str usage_type str
get_ap_throughput
annotations: none low

Get throughput trend for a specific AP as a time-series table. Returns timestamped TX/RX throughput in bps. Defaults to last 3 hours. Args: serial_number: AP serial number (use list_aps or get_ap_status to find it). interface_type: "WIRELESS" (Wi-Fi), "WIRED" (Ethernet uplink), or "LTE". start_at: Start time in RFC 3339 format. Defaults to 3 hours ago. end_at: End time in RFC 3339 format. Defaults to current time.

end_at str start_at str serial_number str interface_type str
get_clients_trend
annotations: none low

Get client count trend over time, grouped by a chosen dimension. Useful for capacity planning and usage pattern analysis. Args: site_id: Filter by site ID. Empty for all. site_name: Filter by site name. Empty for all. start_at: Start time in RFC 3339 format (max 1 month range). Must not be in the future. end_at: End time in RFC 3339 format. Must not be in the future. group_by: Dimension to group by. Supported values: - Any client_type: TYPE, ROLE, VLAN - WIRELESS only: WLAN, RADIO, SECURITY, PROTOCOL Default is TYPE. client_type: Client category: ALL, WIRELESS, or WIRED. Default is ALL. Must be WIRELESS when group_by is WLAN, RADIO, SECURITY, or PROTOCOL (the API returns 400 otherwise).

end_at str site_id str group_by str start_at str site_name str client_type str
get_top_clients_by_usage
annotations: none low

Get top clients ranked by bandwidth usage. Args: site_id: Filter by site ID. Empty for all. site_name: Filter by site name. Empty for all. start_at: Start time in RFC 3339 format (max 1 month range). end_at: End time in RFC 3339 format. limit: Maximum number of clients to return (1-100, default 5).

limit int end_at str site_id str start_at str site_name str
get_client_mobility_trail
annotations: none low

Get roaming history for a wireless client as a time-series table. Shows which APs the client connected to, when, and on which SSID. Useful for troubleshooting connectivity issues or tracking movement. Defaults to last 3 hours. Args: mac_address: Client MAC address (e.g. "aa:bb:cc:dd:ee:ff"). start_at: Start time in RFC 3339 format. Defaults to 3 hours ago. end_at: End time in RFC 3339 format. Defaults to current time.

end_at str start_at str mac_address str
daily_brief
annotations: none low

Run a morning AP health check across all sites. Fetches all access points and aggregates their online/offline status by site. Sites whose offline AP ratio is *strictly greater than* ``offline_threshold`` percent are flagged as WARNING (uses ``>``, so a site with exactly ``offline_threshold`` % offline is still OK). Args: offline_threshold: Percentage of offline APs that triggers a WARNING (default 10.0). Sites at or below this threshold appear in the OK section. Pass 0.0 to flag any site with at least one offline AP. Output tiers: - CRITICAL — API connection failure - WARNING — offline AP ratio strictly above threshold - OK — offline ratio at or below threshold Returns a Markdown summary with site-level AP counts and anomaly details.

offline_threshold float

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 55

low
Tool 'health_check' has no annotations annotation_checker · 100%
low
Tool 'list_aps' has no annotations annotation_checker · 100%
low
Tool 'list_switches' has no annotations annotation_checker · 100%
low
Tool 'list_clients' has no annotations annotation_checker · 100%
low
Tool 'find_client_by_mac' has no annotations annotation_checker · 100%
low
Tool 'get_ap_status' has no annotations annotation_checker · 100%
low
Tool 'get_site_summary' has no annotations annotation_checker · 100%
low
Tool 'list_radios' has no annotations annotation_checker · 100%
low
Tool 'list_bssids' has no annotations annotation_checker · 100%
low
Tool 'list_wlans' has no annotations annotation_checker · 100%
low
Tool 'list_swarms' has no annotations annotation_checker · 100%
low
Tool 'get_top_aps' has no annotations annotation_checker · 100%
low
Tool 'get_ap_throughput' has no annotations annotation_checker · 100%
low
Tool 'get_clients_trend' has no annotations annotation_checker · 100%
low
Tool 'get_top_clients_by_usage' has no annotations annotation_checker · 100%
low
Tool 'get_client_mobility_trail' has no annotations annotation_checker · 100%
low
Tool 'daily_brief' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.2,<2 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2,<2 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: health_check manifest_parser · 90%
info
Tool: list_aps manifest_parser · 90%
info
Tool: list_switches manifest_parser · 90%
info
Tool: list_clients manifest_parser · 90%
info
Tool: find_client_by_mac manifest_parser · 90%
info
Tool: get_ap_status manifest_parser · 90%
info
Tool: get_site_summary manifest_parser · 90%
info
Tool: list_radios manifest_parser · 90%
info
Tool: list_bssids manifest_parser · 90%
info
Tool: list_wlans manifest_parser · 90%
info
Tool: list_swarms manifest_parser · 90%
info
Tool: get_top_aps manifest_parser · 90%
info
Tool: get_ap_throughput manifest_parser · 90%
info
Tool: get_clients_trend manifest_parser · 90%
info
Tool: get_top_clients_by_usage manifest_parser · 90%
info
Tool: get_client_mobility_trail manifest_parser · 90%
info
Tool: daily_brief manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%