generate_security_health_reportLABSCO SUMMARY
Core mode is the one to start in — the dangerous tools are not registered at all.
The full toolset, delete calls included, is not something to hand an agent on day one, and the split here is enforced by the server rather than by prompt instructions: in core mode the write tools never reach the model. The health report tool is the other reason to look — it orchestrates the read tools itself and hands back a scored summary instead of raw inventory.
What it is
A Node server that exposes Cisco Intersight's API as tools, with two modes. By the README's count, core mode registers 66 essential read-only tools for safe exploration, and all-tools mode the complete 199+ toolset with full create, update and delete. Filtering happens server-side, so destructive operations are not merely discouraged in all-tools mode — they are absent in core mode.
What you get
- Inventory and telemetry:
list_compute_blades,list_compute_rack_units,get_server_telemetry,get_chassis_telemetry,get_power_statistics,get_thermal_statistics - Risk and compliance:
list_tam_security_advisorieswith CVE information,list_tam_advisory_instancesfor which devices are affected,list_firmware_runningacross the estate - Fabric and policy management: VLANs, VSANs, port channels, LACP, QoS, plus boot, BIOS, SNMP, Syslog and NTP policies with full CRUD in all-tools mode
generate_security_health_reportruns a multi-phase analysis and returns component scores with prioritised remediation steps- Automation references:
get_terraform_examples,get_ansible_examples,get_python_examplesandget_powershell_examplespull real code from Cisco's own repositories
Requirements
Intersight API credentials — a Key ID and a secret key file — set as INTERSIGHT_API_KEY_ID and INTERSIGHT_API_SECRET_KEY_PATH, with INTERSIGHT_BASE_URL pointing at https://intersight.com/api/v1. INTERSIGHT_TOOL_MODE chooses core or all. The npm package is intersight-mcp, version 1.0.16; build with npm install and npm run build on Node.js 16+ and point the client at build/index.js.
Setup effort
Build from source
USE CASES
01
Finding out what is broken right now
Ask for powered-on servers carrying critical alarms instead of clicking through the Intersight dashboard.
02
Checking exposure to a security advisory
Pull the security advisories, then list exactly which devices are affected.
03
Auditing firmware drift
List running firmware across the infrastructure and look for versions that no longer match.
04
Producing a report someone else will read
Run the health check and hand over scored findings with prioritised actions rather than a dump.
05
Writing infrastructure-as-code against Intersight
Pull working Terraform modules or Ansible playbooks from Cisco's repositories into the conversation.
170 tools
Listed in project docs. Your client may show a different list.
get_server_telemetryget_chassis_telemetryget_adapter_telemetryget_top_resourceslist_processor_unitslist_memory_unitslist_storage_controllerslist_physical_drivesget_power_statisticsget_thermal_statisticsget_ansible_examplesget_terraform_examplesget_python_examplesget_powershell_exampleslist_fabric_portsget_fabric_portlist_fabric_uplink_portslist_fabric_server_portslist_fabric_port_operationslist_fabric_flow_control_policiesget_fabric_flow_control_policycreate_fabric_flow_control_policyupdate_fabric_flow_control_policydelete_fabric_flow_control_policylist_fabric_link_control_policiesget_fabric_link_control_policycreate_fabric_link_control_policyupdate_fabric_link_control_policydelete_fabric_link_control_policylist_fabric_lacp_policiesget_fabric_lacp_policycreate_fabric_lacp_policyupdate_fabric_lacp_policydelete_fabric_lacp_policylist_fabric_system_qos_policiesget_fabric_system_qos_policylist_fabric_multicast_policiesget_fabric_multicast_policycreate_fabric_multicast_policyupdate_fabric_multicast_policydelete_fabric_multicast_policylist_equipment_tpmsget_equipment_tpmlist_boot_device_boot_modeslist_boot_device_boot_securitieslist_storage_local_disk_policiesget_storage_local_disk_policycreate_storage_local_disk_policyupdate_storage_local_disk_policydelete_storage_local_disk_policylist_sdcard_policiesget_sdcard_policycreate_sdcard_policyupdate_sdcard_policydelete_sdcard_policylist_kvm_policiesget_kvm_policycreate_kvm_policyupdate_kvm_policydelete_kvm_policylist_virtual_media_policiesget_virtual_media_policycreate_virtual_media_policyupdate_virtual_media_policydelete_virtual_media_policylist_deviceconnector_policiesget_deviceconnector_policylist_certificatemanagement_policiesget_certificatemanagement_policylist_snmp_policiesget_snmp_policycreate_snmp_policyupdate_snmp_policydelete_snmp_policylist_syslog_policiesget_syslog_policycreate_syslog_policyupdate_syslog_policydelete_syslog_policylist_ntp_policiesget_ntp_policycreate_ntp_policyupdate_ntp_policydelete_ntp_policylist_smtp_policiesget_smtp_policycreate_smtp_policyupdate_smtp_policydelete_smtp_policylist_adapter_config_policiesget_adapter_config_policycreate_adapter_config_policyupdate_adapter_config_policydelete_adapter_config_policylist_fabric_port_channelsget_fabric_port_channelcreate_fabric_port_channelupdate_fabric_port_channeldelete_fabric_port_channellist_fabric_vlansget_fabric_vlancreate_fabric_vlanupdate_fabric_vlandelete_fabric_vlanlist_fabric_vsansget_fabric_vsancreate_fabric_vsanupdate_fabric_vsandelete_fabric_vsanlist_ippool_blocksget_ippool_blockcreate_ippool_blockupdate_ippool_blockdelete_ippool_blocklist_macpool_blocksget_macpool_blockcreate_macpool_blockupdate_macpool_blockdelete_macpool_blocklist_fcpool_blocksget_fcpool_blockcreate_fcpool_blockupdate_fcpool_blockdelete_fcpool_blocklist_pool_leaseslist_compute_bladeslist_compute_rack_unitslist_compute_boardslist_storage_virtual_driveslist_storage_flex_flash_controllerslist_storage_flex_flash_driveslist_equipment_io_cardslist_equipment_sys_io_ctrlslist_firmware_runninglist_firmware_upgradeslist_licenseslist_workflowsget_workflowlist_workflow_taskslist_pci_deviceslist_graphics_cardslist_bios_unitslist_management_controllerslist_management_interfaceslist_terminal_audit_logslist_top_systemsget_top_systemlist_hcl_operating_systemslist_hcl_operating_system_vendorslist_hcl_hyperflex_compatibilitylist_tam_advisoriesget_tam_advisorylist_tam_advisory_instanceslist_tam_security_advisoriesget_tam_advisory_countlist_vnicsget_vnicupdate_vnicdelete_vniclist_lan_connectivity_policiesget_lan_connectivity_policylist_eth_adapter_policieslist_eth_qos_policieslist_eth_network_group_policieslist_fan_moduleslist_psu_unitsdelete_poolcreate_vniccreate_vlan_groupBEFORE YOU INSTALL
What to know first
Tools you get
170 tools named in the project's documentation.
Requires
- Node.js 16+
- INTERSIGHT_API_KEY_ID in your environment
- INTERSIGHT_API_SECRET_KEY_PATH in your environment
Where it runs
The documented client runs the server on your machine.
INSTALLATION
Connect your client
You clone and build this one yourself.
Server setup
TERMINAL
git clone https://github.com/jim-coyne/Intersight_MCP
cd Intersight_MCP1. Build the Server
TERMINAL
npm install
npm run buildMCP Clients
Claude Desktop
CLAUDE DESKTOP · JSON
{
"mcpServers": {
"intersight": {
"command": "node",
"args": [
"<YOUR_PATH_TO_INTERSIGHT_MCP>/build/index.js"
],
"env": {
"INTERSIGHT_API_KEY_ID": "<YOUR_INTERSIGHT_API_KEY_ID>",
"INTERSIGHT_API_SECRET_KEY_PATH": "<YOUR_INTERSIGHT_API_SECRET_KEY_PATH>",
"INTERSIGHT_BASE_URL": "https://intersight.com/api/v1",
"INTERSIGHT_TOOL_MODE": "core"
}
}
}
}
