MCP server for managing Cisco IS-IS network routing configuration and monitoring
ISIS-Network-Agent has 5 tools with basic verb-noun naming (get_*, set_*, configure_*), but critical gaps undermine quality. All tools have descriptions (10-60 chars), but 3 read-only tools lack input schemas entirely (schema score = 0). Two write tools have partial schemas with parameter descriptions. No output schemas documented. Error handling is minimal, validation exists but lacks recovery guidance. No tool annotations (readOnlyHint/destructiveHint). The server exposes credentials via environment variables (correct), but lacks audit logging and permission gates for destructive operations. Composition is reasonable (5 focused tools), but missing pagination, structured output, and error classification.
Configures the IS-IS NET. Format: 49.0001.1921.6800.0001.00
Retrieves the hostname, version, and uptime of the router.
Lists all interfaces and their current IP/Status.
Shows all active IS-IS adjacencies.
Enables (up) or Disables (down) a specific interface.
Three read-only tools (get_device_info, get_isis_neighbors, get_interfaces) have no input schemas.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract structured data. All tools return raw strings from CLI commands.
Destructive tools (configure_isis_net, set_interface_state) lack tool annotations (destructiveHint) and confirmation/dry-run support. No recovery guidance in error messages.
Error messages are generic ('Error: Invalid IS-IS NET format'). No recovery guidance, no actionable next steps for LLM. Missing error classification (retryable vs user-fixable).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 38 | 2026-07-28+ | v2 |
No audit logging or permission gates. Destructive operations (configure_isis_net, set_interface_state) execute without verifying caller authority or logging who made the change.