Nexus Dashboard

A comprehensive Model Context Protocol (MCP) server for Cisco Nexus Dashboard, enabling AI agents like Claude to interact with Nexus Dashboard APIs for intelligent network automation and management.

-

Complete API Coverage: Access to 638+ operations across 5 Nexus Dashboard APIs

- Manage API (146 endpoints): Fabrics, switches, VLANs, VRFs, networks, interfaces
- Analyze API: Telemetry, insights, anomalies, compliance
- Infrastructure API: System health, licensing, user management
- OneManage API: Device inventory, topology
- Orchestration API: Workflows and automation

- HTTPS with self-signed certificates (auto-generated)
- Multi-user authentication with role-based access control (RBAC)
- Read-only mode by default with explicit edit mode enablement
- Fernet-encrypted credential storage
- Complete audit logging with client IP tracking
- Granular operation whitelisting per role

- Next.js-based management interface with HTTPS
- User and role management
- Real-time system health monitoring
- Audit log viewer with CSV export
- Cluster management with connection testing
- Security configuration dashboard
- API guidance and workflow management

- PostgreSQL database for persistence
- Docker-based deployment with host networking
- Complete audit trail for compliance
- LDAP integration support

- Docker20.10+ and Docker Compose 2.0+
- Cisco Nexus Dashboard4.1+ with NDFC 12.x
- Node.js18+ (for remote MCP access via mcp-remote)

git clone https://github.com/beye91/nexus-dashboard-mcp.git cd nexus-dashboard-mcp # Create environment file with your server's IP address echo "CERT_SERVER_IP=YOUR_SERVER_IP" > .env

ReplaceYOUR_SERVER_IPwith your server's actual IP address (e.g.,192.168.1.213).

- Generate self-signed SSL certificates automatically
- Start PostgreSQL database (port 15432)
- Start Web API with HTTPS (port 8444)
- Start Web UI with HTTPS (port 7443)
- Start MCP Server for Claude integration

Accept the self-signed certificate warning

- Username:admin
- Email:admin@example.com
- Password:Admin123!(or your preferred password)

- Navigate toClusterspage
- Click "Add New Cluster"
- Enter your Nexus Dashboard details
- Click "Test Connection" to verify
- Save the cluster configuration

Add to your Claude Desktop configuration:

macOS:~/Library/Application Support/Claude/claude_desktop_config.jsonWindows:%APPDATA%\Claude\claude_desktop_config.jsonLinux:~/.config/Claude/claude_desktop_config.json

{ "mcpServers": { "nexus-dashboard": { "command": "npx", "args": [ "mcp-remote@latest", "https://YOUR_SERVER_IP:8444/mcp/sse", "--transport", "sse-only" ] } } }

ReplaceYOUR_SERVER_IPwith your server's IP address.

Note:Since we use self-signed certificates, you may need to setNODE_TLS_REJECT_UNAUTHORIZED=0in your environment or accept the certificate in your system's trust store.

Local Deployment (same machine as Docker)

{ "mcpServers": { "nexus-dashboard": { "command": "docker", "args": [ "exec", "-i", "nexus-mcp-server", "python", "src/main.py" ] } } }

Restart Claude Desktop, and you'll see the Nexus Dashboard tools available!

External Clients (Browser, Claude Desktop) | [HTTPS/TLS] | +---------------+---------------+ | | Port 7443 Port 8444 | | +----------+----------+ +---------------+--------------+ | Web UI | | Web API | | (Next.js) |--->| (FastAPI) | | HTTPS Proxy | | +----------+ +---------+ | +---------------------+ | | REST API | | MCP SSE | | | +----------+ +---------+ | +---------------+--------------+ | +----------------------+----------------------+ | | | +--------+--------+ +--------+--------+ +--------+--------+ | PostgreSQL | | MCP Server | | Nexus Dashboard | | Port 15432 | | (stdio) | | Clusters | +-----------------+ +-----------------+ +-----------------+ Certificate Volume: /app/certs/ (auto-generated on first startup)

# Your server's IP address (for SSL certificate SAN) CERT_SERVER_IP=192.168.1.213 # Security (generate unique keys for production) ENCRYPTION_KEY=your-unique-fernet-key SESSION_SECRET_KEY=your-random-secret-key # Optional: Nexus Dashboard defaults (can be configured via Web UI) NEXUS_CLUSTER_URL=https://nexus-dashboard.example.com NEXUS_USERNAME=admin NEXUS_PASSWORD=YourPassword

python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"

# SSL Certificate Configuration CERT_DAYS=365 # Certificate validity (default: 365) CERT_CN=nexus-dashboard # Certificate common name # Security EDIT_MODE_ENABLED=false # Enable write operations MCP_API_TOKEN=your-token # Optional: Require token for MCP access # Logging LOG_LEVEL=INFO # DEBUG, INFO, WARNING, ERROR

Self-signed certificates are automatically generated on first startup:

- Stored in Docker volumenexus-mcp-certs
- Valid for 365 days (configurable viaCERT_DAYS)
- Includes localhost, 127.0.0.1, and your server IP in SAN

docker volume rm nexus-mcp-certs docker compose up -d

The platform supports multiple users with role-based access control:

- Admin Role: Full access to all operations
- Operator Role: Read access + specific write operations
- Viewer Role: Read-only access

Users can be managed through the Web UI underSecurity > Users.
- Change default admin passwordafter initial setup
- KeepEDIT_MODE_ENABLED=falseunless write operations are needed
- Use strong encryption keysfor production
- Review audit logsregularly for unauthorized activity
- Limit network accessto the server

- Quick Start Guide- Get up and running in 5 minutes
- Architecture Overview- System design and components
- User Guide- Comprehensive usage documentation
- Web UI Guide- Managing the system via web interface
- Claude Desktop Setup- Detailed Claude integration
- Deployment Guide- Production deployment recommendations
- Multi-User RBAC- Role-based access control
- API Guidance System- Customizing API behavior

docker compose ps docker compose logs -f

# View certificate details docker compose exec web-api openssl x509 -in /app/certs/server.crt -text -noout # Regenerate certificates docker volume rm nexus-mcp-certs docker compose up -d

# Connect to database docker compose exec postgres psql -U mcp_user -d nexus_mcp # Check tables \dt # View audit logs SELECT * FROM audit_log ORDER BY timestamp DESC LIMIT 10;

# Test API endpoint curl -k https://localhost:8444/api/health # Test Web UI curl -k https://localhost:7443

# Clone repository git clone https://github.com/beye91/nexus-dashboard-mcp.git cd nexus-dashboard-mcp # Create virtual environment python -m venv venv source venv/bin/activate # Install dependencies pip install -r requirements.txt # Start database only docker compose up postgres -d # Run API locally python src/api/web_api.py # Run Web UI in dev mode cd web-ui npm install npm run dev

This project is licensed under the Apache License 2.0 - see theLICENSEfile for details.

Connect to, configure, and monitor Cisco network devices like routers and switches via SSH.