OpenWrt Network Diagnostics MCP
Provides read-only network diagnostics for OpenWrt routers, including system snapshots, config state inspection, DNS tracing, client observation, flow inspection, bounded packet capture, subscription status, log reading, and snapshot comparison.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@OpenWrt Network Diagnostics MCPTroubleshoot my network, start with a snapshot and inspect flows"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
OpenWrt Network Diagnostics MCP
面向 OpenWrt、Nikki 与 Mihomo 的只读诊断 MCP。它向 Agent 提供路由器侧 Observation、机械 Correlation 和证据缺口;故障判断与修复决策仍由 Agent 结合客户端证据完成。
0.2 只支持已经实机验证的组合:FriendlyElec NanoPi R5S、ImmortalWrt 25.12、Nikki、Mihomo 与 firewall4/nftables。所有 Evidence bundle 使用 schema_version: 2。
准备
Windows 工作站安装 Node.js 24 和 OpenSSH Client。
SSH config 存在可免交互登录的
Host openwrt。路由器安装
conntrack、tcpdump、yq、ip、nft与ubus。Mihomo external controller 在路由器 loopback 的 9090 端口可用。
MIHOMO_SECRET只通过 MCP 子进程环境变量提供。
SSH config 示例:
Host openwrt
HostName 192.0.2.1
User root
IdentityFile C:/Users/<you>/.ssh/openwrt_ed25519完成标准:以下命令输出设备信息且不要求密码。
ssh -o BatchMode=yes openwrt "ubus call system board"Related MCP server: Linux MCP Server
安装与检查
cd D:\Workspace\OpenWrt-MCP
npm ci
npm run checknpm run check 会编译项目并运行 Node.js 内置测试。构建输出位于 dist/,不提交到 Git。
启动
$env:MIHOMO_SECRET = Read-Host "Mihomo secret" -MaskInput
npm run build
npm startMCP 使用 stdio:stdout 只承载协议,审计摘要写入 stderr。正常退出会关闭 Mihomo SSH 隧道。
Codex 注册与验证步骤见 Codex 客户端配置示例。
Agent 取证流程
先调用
snapshot_network建立系统、接口、路由、防火墙与能力基线。默认detail=summary;只有需要完整但仍有界的规范化证据时才使用detail=full。按问题范围调用
inspect_config_state或trace_dns。把 generated config 与 runtime state 视为不同来源。用户准备复现时调用
observe_client,窗口为 5–60 秒。双栈设备可显式提供client_ipv6;MCP 不自动认定 IPv4/IPv6 属于同一设备。已知客户端与目标后调用
inspect_flow,关联 DNS、Mihomo、同地址族转发路由、nftables 与严格过滤的 conntrack;必要时可显式使用detail=full。现有证据不足时由 Agent 显式调用
capture_flow。默认 30 秒,接口自动按客户端回程路由选择;同一时间只运行一个长观察或抓包。修改前后分别运行
snapshot_network,再用compare_snapshots计算字段差异。
MCP 不返回 verdict、confidence、root cause 或修复建议。没有捕获到连接表示证据缺失,不表示静态规则实际命中或未命中。
工具
工具 | 返回的路由器侧事实 |
| 系统、网络、服务、监听、路由、nftables 与能力快照 |
| Nikki 生成配置摘要、文件身份、Mihomo runtime 与 provider 摘要 |
| router-local、Mihomo、LAN listener、bootstrap DNS 与地址属性 |
| 指定客户端窗口内的新连接、Mihomo 日志与 conntrack 事件 |
| 指定流的 DNS、实际代理链、转发路由、nftables 与 conntrack |
| 有界 tcpdump 包元数据和 TCP/UDP/DNS 机械摘要 |
| Nikki 缓存文件身份、更新时间与 Mihomo provider 状态 |
| 按来源、窗口、条数和文本过滤的脱敏日志 |
| 当前 MCP 进程内两个快照的字段级差异 |
实机 smoke test
smoke test 会从指定 LAN 客户端建立真实 Google HTTPS/TLS 流量,验证九个工具、同流量关联、脱敏以及长任务清理。
$env:MIHOMO_SECRET = Read-Host "Mihomo secret" -MaskInput
npm run smoke:live -- 192.0.2.20完成标准:进程退出码为 0,九个工具均返回 schema v2;必需 Observation 成功,不支持的 bootstrap endpoint 被明确标记;summary 小于 full;并输出 secret_leaked: false。
安全边界
只执行固定、校验后的 SSH 命令与 Mihomo GET 请求。
不提供任意 shell、原始 BPF、配置写入、服务重启、策略切换、连接删除或软件安装。
不返回订阅 URL、认证字段、节点凭据、私钥、完整配置或 PCAP。
抓包不落盘,最多 60 秒、200 条包元数据、snaplen 256,并受字节上限和取消信号约束。
快照只保存在当前 MCP 进程内,进程退出后失效。
Available Tools
9 toolscapture_flowCapture bounded packet metadataCRead-only
Run an explicitly requested, non-persistent packet capture using a generated restricted filter.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | ||
| domain | No | ||
| duration | No | ||
| protocol | No | ||
| client_ip | Yes | ||
| interface | No | auto | |
| client_ipv6 | No | ||
| destination_ip | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds 'non-persistent' and 'generated restricted filter,' which are behavioral details not captured by the annotations, giving the agent a clearer sense of what the tool does and its side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that states the core action and key constraints without wasted words. It is concise, though it sacrifices completeness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 8 parameters and no output schema, but the description fails to explain what the capture returns, what 'bounded' means, or how parameters map to the filter. This is inadequate for an agent to use the tool correctly and safely.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage and 8 parameters, the description provides no explanation of how parameters like client_ip, port, domain, or protocol shape the generated filter. This is a critical gap for a tool with so many parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs a packet capture, which is a specific verb+resource, and the title adds 'bounded packet metadata.' However, it doesn't explicitly distinguish from sibling tools like observe_client or inspect_flow, though 'non-persistent' and 'generated restricted filter' hint at a unique approach.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. The phrase 'explicitly requested' implies on-demand use, but there are no explicit scenarios, prerequisites, or exclusions provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
compare_snapshotsCompare two in-memory network snapshotsARead-only
Return mechanically computed field changes between snapshots from the current MCP process.
| Name | Required | Description | Default |
|---|---|---|---|
| after_id | Yes | ||
| before_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=true and destructiveHint=false, covering the safety profile. The description adds that the computation is mechanical and restricted to the current MCP process, but it does not disclose behavior for invalid/missing snapshot IDs or return format expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no filler words. It immediately conveys the action and object, making it highly scannable for an agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description should explain the return structure, but it only says 'field changes' without specifying format or error handling. The tool is simple and annotations cover safety, but given the missing output schema, the description is not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only says 'between snapshots,' leaving before_id and after_id semantics to be inferred from names. It does not clarify which parameter is the baseline or their temporal order, so the description fails to compensate for the lack of schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Return mechanically computed field changes between snapshots from the current MCP process' – a specific verb (return) and resource (field changes between snapshots). It distinguishes itself from sibling tools like snapshot_network (which creates snapshots) and read_logs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates that the tool operates on in-memory snapshots from the current MCP process, implying a prerequisite that snapshots must have been captured. However, it does not explicitly name alternatives or state when not to use this tool, so there are no exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspect_config_stateInspect Nikki and Mihomo configuration stateARead-only
Compare whitelisted Nikki generated startup fields with Mihomo runtime General state and provider summaries.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is known. The description adds the specific comparison scope but does not disclose return format, pagination, or any potential side effects—though for a read-only compare, this is acceptable. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that is front-loaded with the core action. Every word contributes meaning, with no fluff or repetition of the title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no parameters and strong read-only annotations, the description is mostly complete. It clearly states what is compared, but the term 'whitelisted' and the nature of 'provider summaries' remain undefined, and there is no output schema to clarify the result format. Still, it covers essential points.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and schema coverage is 100% (vacuously). Per the baseline rule for 0 params, a score of 4 is appropriate. The description doesn't need to explain parameters but does add context about what is being compared, slightly enhancing understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool compares whitelisted Nikki-generated startup fields with Mihomo runtime General state and provider summaries. It uses a specific verb ('Compare') and identifies the exact resources, distinguishing it from sibling tools like inspect_flow or snapshot_network.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, notably 'compare_snapshots', which also involves comparison. There are no explicit exclusions or context cues to help the agent choose between these related tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspect_flowInspect one target flowBRead-only
Correlate live Mihomo, routing, aggregated nftables, and conntrack evidence for a client and destination.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | ||
| detail | No | summary | |
| domain | No | ||
| protocol | No | ||
| client_ip | Yes | ||
| client_ipv6 | No | ||
| destination_ip | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint true and destructiveHint false, so the description's focus on 'evidence' aligns without adding much safety-relevant context. It does not disclose potential performance costs, required permissions, or interpretation details, which would exceed what annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the primary verb and resources. It is concise and free of filler, though the heavy jargon ('Mihomo', 'nftables', 'conntrack') may hinder quick comprehension for unfamiliar agents.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 7 parameters, no output schema, and complex multi-source correlation, the one-sentence description lacks essential context. It does not describe what the returned evidence looks like, how to interpret the correlation, or how to use parameters like 'detail' or 'protocol'.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries the full burden for explaining parameters. It mentions 'client and destination' (client_ip, destination_ip) but fails to clarify port, detail, domain, protocol, or client_ipv6. This is insufficient given the 7-parameter schema with enums and defaults.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Correlate live Mihomo, routing, aggregated nftables, and conntrack evidence for a client and destination.' It uses a specific verb ('correlate') and resource list, and the focus on a client/destination differentiates it from sibling tools like inspect_config_state or trace_dns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit guidance on when to use this tool versus alternatives. It implies a targeted investigation of a flow, but there is no mention of exclusions or alternative tools like capture_flow or trace_dns, leaving the agent to infer the appropriate context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspect_subscriptionsInspect subscription control-plane stateARead-only
Return safe Nikki cache metadata and Mihomo provider summaries without URLs or credentials.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, and the description adds significant context: it returns 'safe' metadata and explicitly excludes 'URLs or credentials'. This goes beyond the annotations by clarifying what content the tool will and will not expose, which is valuable for an agent. No additional behavioral traits (e.g., error behavior) are disclosed, but the annotation coverage lowers the bar.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that efficiently conveys the tool's purpose, scope, and safety guarantee. There is no redundant or filler content; every word contributes to understanding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters, no output schema, and strong annotations, the description provides enough information for an agent to select and invoke it correctly. It explains what the tool returns and what it deliberately excludes, making it complete for this low-complexity tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the description carries no burden for explaining parameter meaning. The baseline for 0 params is 4, and the description does not add or need to add parameter-related details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Return') and resource ('Nikki cache metadata and Mihomo provider summaries'), and explicitly notes what is excluded ('without URLs or credentials'). This clearly distinguishes it from sibling inspection tools like inspect_config_state and inspect_flow, which focus on other aspects of state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies that this tool is for reviewing subscription-related metadata and provider summaries, but it provides no explicit guidance on when to use it versus sibling tools. There are no stated prerequisites, exclusions, or alternative tool recommendations, so it falls into 'implied usage' rather than clear context or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
observe_clientObserve one LAN clientBRead-only
Observe bounded Mihomo connection/log activity and conntrack state associated with one client address.
| Name | Required | Description | Default |
|---|---|---|---|
| duration | No | ||
| client_ip | Yes | ||
| client_ipv6 | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the read-only nature is covered. The description adds the 'bounded' aspect (likely referring to the duration limit) and specifies the observed data types, but it does not disclose additional behavioral traits such as output format, side effects, or timing behavior beyond what the schema implies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that starts with the action verb and packs the essential scope into minimal words. There is no fluff or repetition, making it easy for an agent to quickly parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of an output schema, the description should explain what the tool returns or how results are presented. It mentions 'connection/log activity and conntrack state' as the observed data, which gives an idea of the output domain, but it does not specify the format, structure, or whether results are aggregated or streamed. The 'bounded' hint suggests a time-limited observation, but this is not fully elaborated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It only vaguely references 'one client address' and 'bounded' activity, without explaining the distinct roles of client_ip vs client_ipv6 or clarifying how duration (default 60, min 5, max 60) influences the observation. This under-specification is a significant gap for a three-parameter tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Observe') and clearly identifies the resource ('Mihomo connection/log activity and conntrack state') scoped to one client address. It distinguishes from broader sibling tools like snapshot_network or inspect_flow by emphasizing the single-client focus, though 'bounded' is somewhat ambiguous without referencing the duration parameter.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'one client address' implies this tool is for observing a specific LAN client, providing a clear use case. However, it offers no explicit guidance on when to use it over alternatives (e.g., inspect_flow for general flow inspection) and no exclusions or conditions indicating when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_logsRead bounded router-side logsARead-only
Read filtered and redacted OpenWrt, Nikki, or newly observed Mihomo logs.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| contains | No | ||
| duration | No | ||
| max_records | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate a safe read-only operation, and the description adds valuable behavioral context: logs are filtered and redacted, and Mihomo logs are 'newly observed'—implying a checkpoint mechanism. This goes beyond the structured annotations and clarifies output expectations, though it still leaves the exact redaction and 'newly observed' semantics somewhat vague.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that immediately states the action and scope. Every word contributes meaning, with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the tool is simple and annotations cover safety, the description omits important behavioral details such as the meaning of 'bounded' (from the title), return format, and the semantics of 'newly observed'. With no output schema, this leaves moderate ambiguity. It is adequate but not thorough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the description provides no parameter-level explanations. It mentions 'filtered' which loosely aligns with `contains`, but does not clarify duration, max_records, or the source enum's differences. The agent must infer parameter behavior from names and constraints alone, which is insufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action (Read) with a defined scope (filtered and redacted logs from OpenWrt, Nikki, or Mihomo). It distinguishes itself from sibling tools, none of which are log-readers, and mentions filtering and redaction which add precision.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. The description implies it is for reading router-side logs, but does not explicitly state scenarios, prerequisites, or exclusions. Sibling tools exist for network inspection but no comparison is offered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
snapshot_networkSnapshot OpenWrt network stateARead-only
Collect a bounded router-side network snapshot and retain it in memory for later comparison.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | summary |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds useful behavioral context beyond the annotations: it reveals that the snapshot is 'bounded' (resource-limited) and that it is 'retained in memory' (a stateful side effect), which the read-only and non-destructive annotations do not convey. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the core action and purpose, with no unnecessary words or repetition of annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description adequately covers the tool's purpose and memory retention behavior, but it omits parameter semantics and does not explain how the retained snapshot is retrieved or used by sibling tools like compare_snapshots. Given the simplicity of the tool and the presence of annotations, the description is minimally viable but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter, 'detail', is documented in the schema with an enum (summary/full) and a default, but the description does not explain what the difference between these values is or how they affect the snapshot. With schema coverage at 0%, the description's silence on the parameter leaves its meaning ambiguous.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb ('Collect') and resource ('bounded router-side network snapshot'), and explicitly mentions its purpose ('retain it in memory for later comparison'), distinguishing it from siblings like compare_snapshots (which performs the comparison) and capture_flow (which captures traffic).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage before comparison by stating 'retain it in memory for later comparison', but it does not explicitly state when to use this tool versus alternatives such as capture_flow or inspect_config_state, nor does it provide exclusion criteria or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trace_dnsCollect router-side DNS evidenceARead-only
Compare OpenWrt and Mihomo DNS observations, generated DNS settings, Fake-IP addresses, and listeners.
| Name | Required | Description | Default |
|---|---|---|---|
| qtype | No | A | |
| domain | Yes | ||
| server | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds behavioral context by listing the compared elements (observations, generated settings, Fake-IP addresses, listeners), which clarifies what the tool actually inspects. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, front-loaded with the verb and object, with no wasted words. It communicates scope effectively in under 20 words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only compare tool with 3 parameters and no output schema, the description gives a high-level overview but lacks details on return value format, how to interpret comparisons, or parameter effects. It is adequate but not comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not mention domain, qtype, or server parameters. It gives an indirect hint that a domain is needed (DNS observations), but qtype and server semantics remain undocumented. The description fails to compensate for the missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Compare' and identifies the exact resources: OpenWrt and Mihomo DNS observations, generated DNS settings, Fake-IP addresses, and listeners. This clearly distinguishes it from sibling tools like snapshot_network or read_logs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies a diagnostic comparison use case but does not explicitly state when to prefer this tool over alternatives or mention exclusions. It provides clear context (router-side DNS evidence) but lacks direct guidance on selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
9 tool updates
v0.2.0- First observed
capture_flow - First observed
compare_snapshots - First observed
inspect_config_state - First observed
inspect_flow - First observed
inspect_subscriptions - First observed
observe_client - First observed
read_logs - First observed
snapshot_network - First observed
trace_dns
TDQS
Most tools target clearly distinct diagnostic aspects (snapshot, config, DNS, client, flow, capture, subscriptions, logs). The only potential overlap is between observe_client and inspect_flow, but their descriptions clarify different scopes (client-level vs. flow-level).
All tool names follow a consistent verb_noun pattern in snake_case (e.g., snapshot_network, inspect_config_state, capture_flow). Even with repeated verbs like 'inspect', the nouns clearly differentiate the tools.
9 tools is well-scoped for a specialized network diagnostics server, covering both data collection and analysis without unnecessary bloat or missing core functionality.
The tool set covers major diagnostic workflows: snapshots, config comparison, DNS tracing, client observation, flow inspection, packet capture, subscription metadata, and logs. Minor gaps exist such as an explicit connectivity test or snapshot management, but core capabilities are solid.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Read-only MCP server for turva.dev, an agent-readiness audit and advisory service.
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
Read-only MCP server for AIStatusDashboard status, incidents, metrics, and fallback recommendations.
2,000+ MCP servers read at source level. Know what one does before you connect. Free, no key.
Related MCP Servers
- AlicenseAqualityDmaintenanceA Model Context Protocol server providing network diagnostic tools for AI agents, including connectivity testing, batch operations, local network info, and pcap analysis.344MIT
- AlicenseNot gradedqualityBmaintenanceA read-only MCP server for Linux and macOS system administration, diagnostics, and troubleshooting, supporting remote SSH execution and multi-host management.Apache 2.0
- FlicenseAqualityCmaintenanceA secure, read-only MCP server for AI-powered system monitoring. It provides real-time OS metrics, config discovery, and safe log tailing to enable autonomous infrastructure audits without shell access risks.4-
- FlicenseNot gradedqualityCmaintenanceMCP server for managing OPNsense firewalls, providing read-only tools for firewall rules, aliases, interface statistics, and gateway status with multi-instance support.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/gomixo/openwrt-network-diagnostics-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server