openziti avatar

OpenZiti Network Management

openziti/ziti-mcp-server

Brings OpenZiti network management into your AI workflow through natural language. Connects to the Ziti Management API and exposes operations for listing identities, checking service exposures, creating new identities, and spotting configuration issues. Supports four authentication modes: username/password, interactive device auth with browser flow, OAuth client credentials for service accounts, and mTLS certificates via identity files. You can lock it down to read-only tools or filter by pattern. Handy when you're managing zero-trust networks and want to query access policies or troubleshoot configurations without context-switching to the Ziti console. Pre-built binaries for macOS, Linux, and Windows, or build from Go source.

GitHub stars
3
tools
8
transport
STDIO
last updated
Mar 30, 2026

Tools

8 tools

Public tool metadata for what this MCP can expose to an agent.

loginUpdbConnect using username/password authentication

Connect using username/password authentication

No parameter schema in public metadata yet.

loginIdentityConnect using a Ziti identity JSON (mTLS certificate)

Connect using a Ziti identity JSON (mTLS certificate)

No parameter schema in public metadata yet.

loginClientCredentialsConnect using OAuth2 client credentials

Connect using OAuth2 client credentials

No parameter schema in public metadata yet.

loginDeviceAuthStart OAuth2 device auth flow (returns verification URL)

Start OAuth2 device auth flow (returns verification URL)

No parameter schema in public metadata yet.

completeLoginComplete a pending device-auth login after browser approval

Complete a pending device-auth login after browser approval

No parameter schema in public metadata yet.

logoutDisconnect from a Ziti network (clear profile credentials)

Disconnect from a Ziti network (clear profile credentials)

No parameter schema in public metadata yet.

listNetworksList all configured network profiles with connection status

List all configured network profiles with connection status

No parameter schema in public metadata yet.

selectNetworkSwitch the active network profile

Switch the active network profile

No parameter schema in public metadata yet.

Sponsors

Readme

OpenZiti MCP Server Banner

License Go Version

πŸš€ Getting Started β€’ πŸ•ΈοΈ Architecture β€’ πŸ” Authentication β€’ πŸ› οΈ Supported Tools β€’ πŸ”’ Security β€’ 🩺 Troubleshooting β€’ πŸ“‹ Debug Logs β€’ πŸ‘¨β€πŸ’» Development

The Ziti MCP Server is sponsored by NetFoundry as part of its portfolio of solutions for secure workloads and agentic computing. NetFoundry is the creator of OpenZiti and zrok.


View the full README on GitHub

Details

Repository
github.com/openziti/ziti-mcp-server
Package
https://github.com/openziti/ziti-mcp-server/releases/download/v0.11.0/ziti-mcp-server_darwin_amd64.mcpb
Transport
STDIO
Registry
MCP registry, active