
NetOps Field Notes
Config drift, CIS/PCI checks, 802.1X diagnosis, certs inside configs, topology, change pre-flight.
- tools
- 12
- transport
- STDIO
- last updated
- Nov 7, 2026
Tools
12 toolsPublic tool metadata for what this MCP can expose to an agent.
explain_config_diffWhat changed between two snapshots, grouped by section, risk-rated, in plain English.
What changed between two snapshots, grouped by section, risk-rated, in plain English.
No parameter schema in public metadata yet.
check_config_complianceDoes this config pass ten CIS/PCI checks, and what is the one-line fix for each miss.
Does this config pass ten CIS/PCI checks, and what is the one-line fix for each miss.
No parameter schema in public metadata yet.
diagnose_dot1xWhy won't this port authenticate, from the RADIUS log, the switchport config and/or the supplicant log.
Why won't this port authenticate, from the RADIUS log, the switchport config and/or the supplicant log.
No parameter schema in public metadata yet.
lookup_ise_failure_codeWhat does ISE step code 12514 (or 11036, 22056...) mean and what fixes it.
What does ISE step code 12514 (or 11036, 22056...) mean and what fixes it.
No parameter schema in public metadata yet.
find_certs_in_configWhich certificates are embedded in this config, and which are expiring, weak or self-signed.
Which certificates are embedded in this config, and which are expiring, weak or self-signed.
No parameter schema in public metadata yet.
check_tls_endpointThe same findings on the certificate a public host actually serves.
The same findings on the certificate a public host actually serves.
No parameter schema in public metadata yet.
extract_device_factsHostname, role, addresses, subnets, VLANs from a config.
Hostname, role, addresses, subnets, VLANs from a config.
No parameter schema in public metadata yet.
infer_topologyWhich of these devices share segments, as a Mermaid diagram.
Which of these devices share segments, as a Mermaid diagram.
No parameter schema in public metadata yet.
explain_firewall_changeAn OPNsense config.xml change, rule by rule, with risk grounds and shadowing notes.
An OPNsense config.xml change, rule by rule, with risk grounds and shadowing notes.
No parameter schema in public metadata yet.
preflight_changeIs this proposed change safe: risk, compliance regressions, blast radius, a gate verdict.
Is this proposed change safe: risk, compliance regressions, blast radius, a gate verdict.
No parameter schema in public metadata yet.
sanitize_configScrub secrets and map addresses consistently before a config goes anywhere.
Scrub secrets and map addresses consistently before a config goes anywhere.
No parameter schema in public metadata yet.
latest_field_noteWhat happened in networking this week.
What happened in networking this week.
No parameter schema in public metadata yet.
Sponsors
Readme
netops-field-notes-mcp
The things I check by hand on network gear, as tools your coding agent can call: what changed between two config snapshots and how much it matters, whether a config passes the CIS/PCI basics, why a port will not pass 802.1X, which certificates are hiding inside a config and when they expire, what a device is and what it sits next to, what an OPNsense rule change actually does, and whether a proposed change is safe to push.
Read-only. Deterministic — no model call, so two engineers get the same answer. No account, no telemetry, nothing read from your disk: configs and logs go in as text.
Install
Pin the version.
Claude Code
claude mcp add netops-field-notes -- uvx --from "git+https://github.com/getlarkwright/netops-field-notes-mcp@v0.1.1" netops-field-notes-mcp
Claude Desktop, Cursor, or any client with a JSON config
{
"mcpServers": {
"netops-field-notes": {
"command": "uvx",
"args": ["--from", "git+https://github.com/getlarkwright/netops-field-notes-mcp@v0.1.1", "netops-field-notes-mcp"]
}
}
}
Docker
Details
- Repository
- github.com/getlarkwright/netops-field-notes-mcp
- Website
- netopsfieldnotes.com
- Package
ghcr.io/getlarkwright/netops-field-notes-mcp:0.1.1- Transport
- STDIO
- Registry
- MCP registry, active