NetBox MCP for NetBox: safety score

B 70 Provisional Not reviewed Not tested read-only mode

NetBox MCP is a community MCP server for NetBox with 9 read, 5 write and 3 destructive tools. It has a read-only mode and needs to run locally and a secret in an environment variable; its provisional OpsMCP grade is B (70%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

MCP server for NetBox DCIM/IPAM with read-only and dry-run modes

Publisher's description

io.github.mhajder/netbox-mcp · version 0.1.0

Access partly scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

NetBox GitHub Registry record Website Report this listing

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb.

17 tools

Tool	Class
`call_tool` Executes any discovered tool by name from the description (executes)	Destructive
`netbox_bulk_create_objects` Create up to 500 objects in one transaction \| from the name (create)	Write
`netbox_bulk_delete_objects` Delete up to 500 objects in one transaction ( from the name (delete)	Destructive
`netbox_bulk_update_objects` Update up to 500 objects in one transaction \| from the name (update)	Write
`netbox_create_branch` Create a netbox-branching branch (only with from the name (create)	Write
`netbox_create_object` Create one object \| from the name (create)	Write
`netbox_delete_object` Delete one object ( from the name (delete)	Destructive
`netbox_get_available` Free IPs / prefixes in a prefix or IP range, VLANs in a VLAN group, ASNs in an ASN range \| from the name (get)	Read
`netbox_get_changelogs` Change log entries, newest first \| from the name (get)	Read
`netbox_get_object` Get one object by ID \| from the name (get)	Read
`netbox_get_objects` List objects of a type with from the name (get)	Read
`netbox_get_status` NetBox version, plugins, workers, authenticated user and this server's modes \| from the name (get)	Read
`netbox_list_branches` List netbox-branching branches (only with from the name (list)	Read
`netbox_list_object_types` List supported object types and their endpoints (core and discovered plugin types) \| from the name (list)	Read
`netbox_search_objects` Free-text search ( from the name (search)	Read
`netbox_update_object` Partially update one object (PATCH) \| from the name (update)	Write
`search_tools` Finds matching tools and returns their full schemas from the name (search)	Read

Score

70 of 100 points (70%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	29	35	Scored
Access	12	25	Partly scored
Maintenance	17	20	Scored
Publisher	12	20	Scored

Tool capability

9 read, 5 write, 3 destructive.

The repository mentions a read-only mode. View the repository.

Access

Part	Value	Points	Where this came from
Scope	unknown	unknown	unknown
Where it runs	Local process	6 of 8	Registry package transport is stdio.
Credentials	Secret in an environment variable	6 of 7	Registry marked isSecret true for NETBOX_TOKEN, NETBOX_TOKEN, NETBOX_TOKEN

Maintenance

Part	Value	Points
Last commit	3 days	8 of 8
Releases	19 days	6 of 6
Issues	no issues filed	3 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Individual	3 of 8	GitHub owner type is User (mhajder).
Registry listing	Listed	5 of 5	Official registry server io.github.mhajder/netbox-mcp (status active).
License	MIT	4 of 4	GitHub SPDX license MIT.
Stars	3	0 of 2	3 GitHub stars.
Repository age	19 days	0 of 1	Repository created 2026-09-26T19:52:45Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Variable	Required	Secret	Default	Description
`NETBOX_URL`	yes	unknown	unset	NetBox base URL (e.g., https://netbox.example.com)
`NETBOX_TOKEN`	yes	yes	unset	NetBox API token: v2 (nbt_<key>.<token>, NetBox 4.5+) or legacy v1
`NETBOX_VERIFY_SSL`	unknown	unknown	true	Verify SSL certificates (true/false)
`NETBOX_TIMEOUT`	unknown	unknown	30	Total time allowed for one NetBox request, retries included (seconds)
`NETBOX_BRANCHING_ENABLED`	unknown	unknown	false	Enable netbox-branching support: branch tools and the 'branch' argument (requires the netbox-branching plugin) (true/false)
`NETBOX_BRANCH`	unknown	unknown	unset	Default netbox-branching branch (name or schema ID) for every call; requires NETBOX_BRANCHING_ENABLED=true
`NETBOX_PLUGIN_DISCOVERY`	unknown	unknown	false	Discover plugin object types from /api/core/object-types/ (true/false)
`READ_ONLY_MODE`	unknown	unknown	false	Hide all write tools (create, update, delete) (true/false)
`DRY_RUN_MODE`	unknown	unknown	false	Write tools only simulate changes and never modify NetBox (true/false)
`DISABLED_TAGS`	unknown	unknown	unset	Comma-separated tool tags to disable (e.g. delete,graphql,branching)
`LOG_LEVEL`	unknown	unknown	INFO	Logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
`RESPONSE_MAX_SIZE`	unknown	unknown	unset	Maximum tool response size in bytes (unset = unlimited)
`RATE_LIMIT_ENABLED`	unknown	unknown	false	Enable rate limiting
`RATE_LIMIT_MAX_REQUESTS`	unknown	unknown	60	Maximum requests per rate limit window
`RATE_LIMIT_WINDOW_MINUTES`	unknown	unknown	1	Rate limit window in minutes
`TOOL_SEARCH_ENABLED`	unknown	unknown	false	Enable FastMCP tool search transform
`TOOL_SEARCH_STRATEGY`	unknown	unknown	bm25	Tool search strategy (bm25 or regex)
`TOOL_SEARCH_MAX_RESULTS`	unknown	unknown	5	Maximum tool search results returned by search_tools
`MCP_HTTP_PORT`	unknown	unknown	8000	Port for HTTP server (default: 8000)
`MCP_TRANSPORT`	unknown	unknown	unset	MCP transport type (http for HTTP, stdio for stdio)

Maintenance

Archived: no
Last commit: 13 Oct 2026 · f784b80
Latest release: v0.1.0 · 26 Sep 2026
Issues: 0 open · 0 closed
Stars: 3
License: MIT
Repository created: 26 Sep 2026

npm and PyPI

npm: No npm package in the registry entry.
PyPI: netbox-mcp · version 0.1.0 · downloads last month 223 · published 26 Sep 2026
Maintainers: Mateusz Hajder

Install

Source: registry. This is the published command, not a rewritten one.

# requires NETBOX_URL: NetBox base URL (e.g., https://netbox.example.com)
# requires NETBOX_TOKEN: NetBox API token: v2 (nbt_<key>.<token>, NetBox 4.5+) or legacy v1
uvx netbox-mcp==0.1.0
docker run ghcr.io/mhajder/netbox-mcp:0.1.0

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP B provisional](https://opsmcp.dev/badge/mhajder-netbox-mcp.svg)](https://opsmcp.dev/servers/mhajder-netbox-mcp/)

Sources for this listing

registry:netbox

Official registry server io.github.mhajder/netbox-mcp (status active).