Mmcp.market

VMware NSX MCP server

by zw008·io.github.zw008/vmware-nsx·v1.8.8
No reviews yet

VMware NSX networking management with 31 MCP tools: segments, gateways, NAT, routing, IPAM.

A94/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A94/100

full report

Adoption
Growing

5 stars385 downloads/wk

Reviews

Write one

Nobody has reviewed VMware NSX yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

VMware NSX tools (34, 12 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • _environment_for

    Report the environment a target declares, for policy scoping.

  • configure_tier0_bgp

    [WRITE] Configure BGP settings on a Tier-0 gateway's locale-service.

  • create_ip_poolwrite action

    [WRITE] Create an IP address pool with one static subnet and allocation range.

  • create_nat_rulewrite action

    [WRITE] Create a NAT rule on a Tier-1 gateway's USER NAT section.

  • create_segmentwrite action

    [WRITE] Create an overlay or VLAN-backed NSX network segment.

  • create_static_routewrite action

    [WRITE] Create a static route on a Tier-0 or Tier-1 gateway via the Policy API.

  • create_tier1_gatewaywrite action

    [WRITE] Create a Tier-1 gateway to route segments, optionally uplinked to a Tier-0.

  • delete_ip_poolwrite action

    [WRITE] Permanently delete an IP address pool.

  • delete_nat_rulewrite action

    [WRITE] Permanently delete a NAT rule from a Tier-1 gateway's USER NAT section.

  • delete_segmentwrite action

    [WRITE] Delete a network segment. WARNING: this disconnects all attached VMs.

  • delete_static_routewrite action

    [WRITE] Permanently delete a static route from a Tier-0 or Tier-1 gateway.

  • delete_tier1_gatewaywrite action

    [WRITE] Delete a Tier-1 gateway. WARNING: removes attached segments and NAT rules.

  • get_bgp_neighbors

    [READ] Get BGP configuration and neighbor status for a Tier-0 gateway.

  • get_edge_cluster_status

    [READ] Check status of an edge cluster (member health, overall status).

  • get_ip_pool_usage

    [READ] Get current IP allocations for one IP address pool.

  • get_logical_port_status

    [READ] Check realized state of all ports on a segment (first 50 ports).

  • get_nsx_manager_status

    [READ] Get NSX Manager cluster status (node health, control/management plane).

  • get_segment

    [READ] Get full details for one network segment, including its attached ports.

  • get_segment_port_for_vm

    [READ] Find which segment(s) a VM is attached to via its VIF attachments.

  • get_tier0_gateway

    [READ] Get configuration details for one Tier-0 gateway (north-south edge router).

  • get_tier1_gateway

    [READ] Get detailed info for one Tier-1 gateway.

  • get_transport_node_status

    [READ] Get realized runtime status of one transport node (ESXi host or Edge node).

  • list_edge_clusters

    [READ] List all edge clusters with member count and deployment type.

  • list_ip_pools

    [READ] List all IP address pools with subnets and usage summary.

  • list_nat_rules

    [READ] List NAT rules on a Tier-1 gateway (USER section).

  • list_nsx_alarms

    [READ] Get active NSX alarms at one severity, with feature, description, and entity.

  • list_segments

    [READ] List all NSX network segments with type, subnet, admin state, and port count.

  • list_static_routes

    [READ] List static routes on a Tier-0 or Tier-1 gateway.

  • list_tier0_gateways

    [READ] List all Tier-0 gateways with HA mode and transit subnets.

  • list_tier1_gateways

    [READ] List all Tier-1 gateways with linked Tier-0 path and route advertisement.

  • list_transport_nodes

    [READ] List all transport nodes (ESXi hosts and Edge nodes) with type and status.

  • list_transport_zones

    [READ] List all NSX transport zones — the overlay/VLAN boundaries segments attach to.

  • update_segmentwrite action

    [WRITE] Update an existing network segment (partial update via PATCH).

  • update_tier1_gatewaywrite action

    [WRITE] Partially update an existing Tier-1 gateway via PATCH.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan46 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the VMware NSX repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.vmware-skills/vmware-nsx -->

VMware NSX

Author: Wei Zhou, VMware by Broadcom — wei-wz.zhou@broadcom.com

This is a community-driven project by a VMware engineer, not an official VMware product.

For official VMware developer tools see developer.broadcom.com.

English | 中文

VMware NSX networking management: segments, gateways, NAT, routing, IPAM — 33 MCP tools, domain-focused.

NSX Policy API skill for NSX-T 3.0+ and NSX 4.x.

Companion Skills

Quick Install

# Via PyPI
uv tool install vmware-nsx-mgmt

# Or pip
pip install vmware-nsx-mgmt

Offline / Air-Gapped Install (from source)

This project uses the modern PEP 517 build system (hatchling), so there is no setup.py by design — that is expected, not a missing file. If you cloned the source and hit ERROR: File "setup.py" or "setup.cfg" not found ... editable mode currently requires a setuptools-based build, your pip is older than 21.3 and cannot do an editable (-e) install with a non-setuptools backend. Editable mode is a developer convenience, not needed to run the tool — do one of:

# From the source tree — a normal (non-editable) install builds a wheel:
pip install .              # NOT  pip install -e .

# ...or upgrade pip first, and editable works too:
pip install --upgrade pip && pip install -e .

For a truly air-gapped host, build the wheels on a connected machine and copy them over — the target then needs no network:

# On a connected machine, collect this package + its dependencies as wheels:
pip wheel . -w dist        # → dist/*.whl   (or: uv build, for just this package)

# Copy dist/ to the air-gapped host, then install offline:
pip install --no-index --find-links dist vmware-nsx-mgmt

Configuration

mkdir -p ~/.vmware-nsx
cp config.example.yaml ~/.vmware-nsx/config.yaml
# Edit with your NSX Manager credentials

echo "VMWARE_NSX_NSX_PROD_PASSWORD=your_password" > ~/.vmware-nsx/.env
chmod 600 ~/.vmware-nsx/.env

# Verify
vmware-nsx doctor

What This Skill Does

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add vmware-nsx -- uvx vmware-nsx-mgmt
Add to Cursor

VMware NSX: common questions

Is VMware NSX MCP server safe?
Yes, by our scan: it is graded A (94/100). Read the VMware NSX safety report
How do I install VMware NSX?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does VMware NSX need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is VMware NSX maintained?
The last commit was 6 days ago (2026-09-20). The latest release is v1.8.8.
What can I use instead of VMware NSX?
Servers from other publishers that do the same job: Mikrotik MCP server.

Alternatives to VMware NSX

Same job from other publishers: the closest match first, then the best rated.

  • Mikrotik
    MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.
    B

More from zw008 →