catalyst-sdwan-super-mcp 0.1.0

FastMCP server for the Cisco Catalyst SD-WAN Manager (vManage) API, generated dynamically from the official OpenAPI specs.

catalyst-sdwan-super-mcp

A FastMCP server that exposes the Cisco Catalyst SD-WAN Manager (vManage) REST API as MCP tools, so any MCP-compatible LLM client (Claude Desktop, Claude Code, Cursor, …) can query and manage your SD-WAN overlay.

Tools are generated dynamically from the official OpenAPI specs — drop in a new spec, the tools rebuild themselves. No per-version Python.

Documentation: https://thomaschristory.github.io/catalyst-sdwan-super-mcp/

---

Try it in 60 seconds against the Cisco DevNet sandbox

git clone https://github.com/thomaschristory/catalyst-sdwan-super-mcp.git
cd catalyst-sdwan-super-mcp
uv sync

# Credentials for Cisco's public always-on SD-WAN sandbox
cat > .env <<'EOF'
VMANAGE_USERNAME=devnetuser
VMANAGE_PASSWORD=RG!_Yw919_83
EOF

uv run sdwan-mcp        # stdio, read-only, adaptive tool splitting (default)

The shipped config.yaml points at sandbox-sdwan-2.cisco.com and ships specs for vManage 20.15, 20.16, and 20.18 in specs/. 20.18 is the default. You don't need a vManage of your own to try it.

Supported vManage versions: 20.15+. Older releases are out of scope — see issue #13.

---

What you get

• Adaptive tool splitting. A size-driven splitter (max_actions_per_tool, default 150) chops huge OpenAPI sections into right-sized tools — 360 tools on 20.18 RW out of the box, all under the cap. See docs/guides/tool-splitting.md.
• Read-only by default. --read-write registers POST/PUT/DELETE/PATCH explicitly.
• Two auth modes: JWT (vManage 20.18.1+) and JSESSIONID + XSRF (older).
• Three transports: stdio, SSE, streamable-HTTP.
• Version diff: sdwan-mcp --diff 20.15 20.18 shows added/removed/changed operations before upgrade.
• Docker: multi-stage image, specs mounted as a volume so versions ship without rebuilding.

---

Project layout

sdwan_mcp/          source package
  server.py         entrypoint, CLI
  config.py         YAML + env interpolation
  loader.py         spec loading, adaptive splitting, indexing
  auth.py           JWT + session login
  dispatcher.py     httpx client, param routing
  tools.py          dynamic MCP tool registration
  diff.py           version diff utility
tests/              pytest suite (respx for HTTP)
docs/               mkdocs-material site, deployed to GitHub Pages
specs/{version}/    OpenAPI YAML/JSON, one folder per vManage version
.github/workflows/  lint, test, docker, docs, release

---

Architecture quick look

See docs/architecture/overview.md. At a glance:

LLM ──(MCP)──► FastMCP ──► tools.py ──► dispatcher.py ──► httpx ──► vManage
                  ▲                           │
                  │           auth.py ◄───────┘
              loader.py
                  ▲
              specs/{version}/*.{yaml,json}

---

Status

v0.0.1 — alpha. Works against the DevNet sandbox; read-only mode is the safe default. Known gaps tracked as GitHub issues.

License: Apache 2.0.