hpe-networking-mcp (secure-ssid/hpe-networking-mcp) is an MCP server listed on the M8ven Trust Index. It scores 89 out of 100, grade B. It declares 604 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Emerging

89/100

5 days ago

hpe-networking-mcp

Item: hpe-networking-mcp
Rating: 89
Author: M8ven

Low-token MCP server for HPE Networking automation, enabling search of Aruba/HPE docs, OpenAPI details, Central health checks, troubleshooting workflows, configuration management, and guarded ArubaOS 8 migrations and GreenLake Platform operations across platforms like Aruba Central, ClearPass, Mist, and Apstra.

→ secure-ssid/hpe-networking-mcp · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 16 days · every push re-verified

Who stands behind it

gmail.com (@secure-ssid) · Verified Publisher

Source: Glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

604 tools verified — handlers match their declared behaviour

415 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 13 credentials: AOS8_API_TOKEN, AOS8_PASSWORD, APSTRA_PASSWORD, APSTRA_API_TOKEN, AXIS_API_TOKEN, CLEARPASS_API_TOKEN, EDGECONNECT_API_TOKEN, MIST_API_TOKEN, MIST_CSRF_TOKEN, MCP_HTTP_BEARER_TOKEN, UXI_CLIENT_SECRET, POSTMAN_API_KEY, GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

Are you the publisher? Confirm or correct these findings.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configHPE_MCP_ROUTER_MODE

configHPE_MCP_ROUTER_EAGER_LOAD

configHPE_MCP_NORMALIZE_MACS

configAOS8_BASE_URLAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

🔐 secretAOS8_API_TOKENAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

configAOS8_USERNAMEAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

🔐 secretAOS8_PASSWORDAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

configAOS8_CLIENT_IPAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

configAOS8_SESSION_TTL_SECONDSAOS8_BASE_URL, preferred AOS8_USERNAME/AOS8_PASSWORD, optional AOS8_API_TOKEN, optional AOS8_CLIENT_IP, optional AOS8_SESSION_TTL_SECONDS

configAPSTRA_BASE_URLAPSTRA_BASE_URL, preferred APSTRA_USERNAME/APSTRA_PASSWORD, optional APSTRA_API_TOKEN

configAPSTRA_USERNAMEAPSTRA_BASE_URL, preferred APSTRA_USERNAME/APSTRA_PASSWORD, optional APSTRA_API_TOKEN

🔐 secretAPSTRA_PASSWORDAPSTRA_BASE_URL, preferred APSTRA_USERNAME/APSTRA_PASSWORD, optional APSTRA_API_TOKEN

🔐 secretAPSTRA_API_TOKENAPSTRA_BASE_URL, preferred APSTRA_USERNAME/APSTRA_PASSWORD, optional APSTRA_API_TOKEN

configAXIS_BASE_URLAXIS_BASE_URL, AXIS_API_TOKEN

🔐 secretAXIS_API_TOKENAXIS_BASE_URL, AXIS_API_TOKEN

configCLEARPASS_BASE_URLCLEARPASS_BASE_URL, CLEARPASS_API_TOKEN

🔐 secretCLEARPASS_API_TOKENCLEARPASS_BASE_URL, CLEARPASS_API_TOKEN

configCREDS_PATH

configEDGECONNECT_BASE_URLEDGECONNECT_BASE_URL, EDGECONNECT_API_TOKEN, optional EDGECONNECT_AUTH_HEADER, endpoint-specific EDGECONNECT_AI_SESSION_AUTHORIZATION

🔐 secretEDGECONNECT_API_TOKENEDGECONNECT_BASE_URL, EDGECONNECT_API_TOKEN, optional EDGECONNECT_AUTH_HEADER, endpoint-specific EDGECONNECT_AI_SESSION_AUTHORIZATION

configEDGECONNECT_AUTH_HEADEREDGECONNECT_BASE_URL, EDGECONNECT_API_TOKEN, optional EDGECONNECT_AUTH_HEADER, endpoint-specific EDGECONNECT_AI_SESSION_AUTHORIZATION

configEDGECONNECT_ALLOW_LEGACY_API

configGLP_GENERATED_REGION

configHPE_MCP_GLP_GENERATED_TOOLS

configHPE_MCP_TOOLSETS

configMIST_HOSTMIST_HOST, MIST_API_TOKEN

🔐 secretMIST_API_TOKENMIST_HOST, MIST_API_TOKEN

configMIST_SESSION_COOKIE

🔐 secretMIST_CSRF_TOKEN

configHPE_MCP_RAG_PREWARM

configHPE_MCP_PRODUCT_ACCESS

configMCP_TRANSPORT

configMCP_HOST

configMCP_PORT

configHPE_MCP_READONLY

configHPE_MCP_RAG_BACKEND

🔐 secretMCP_HTTP_BEARER_TOKEN. See [MCP client recipes](docs/mcp-client-recipes.md)

configUXI_CLIENT_IDUXI_CLIENT_ID, UXI_CLIENT_SECRET, optional UXI_BASE_URL, optional UXI_TOKEN_URL

🔐 secretUXI_CLIENT_SECRETUXI_CLIENT_ID, UXI_CLIENT_SECRET, optional UXI_BASE_URL, optional UXI_TOKEN_URL

configUXI_BASE_URLUXI_CLIENT_ID, UXI_CLIENT_SECRET, optional UXI_BASE_URL, optional UXI_TOKEN_URL

configUXI_TOKEN_URLUXI_CLIENT_ID, UXI_CLIENT_SECRET, optional UXI_BASE_URL, optional UXI_TOKEN_URL

configHPE_MCP_DIAGRAM_ICON_DIRnone required; optional HPE_MCP_DIAGRAM_ICON_DIR

configHPE_MCP_DIAGRAM_ALLOW_LARGE_ICONS

configHPE_MCP_PRODUCTS

configHPE_MCP_INGEST_PARALLEL

configBENCH_API_CALL_ALLOWANCE

configBENCH_TASK_SUCCESS_ALLOWANCE

🔐 secretPOSTMAN_API_KEY

configHF_HUB_OFFLINE

🔐 secretGITHUB_TOKEN

configHPE_MCP_CENTRAL_WRITES

configHPE_MCP_ACCESS_PROFILEsafe-read-only denies all writes; full-read-write allows all; custom uses per-platform gates below

configHPE_MCP_ALLOW_PLACEHOLDER_URLS

configMCP_ALLOWED_HOSTSexplicit /MCP_ALLOWED_ORIGINS and can be protected with

configMCP_ALLOWED_ORIGINSexplicit MCP_ALLOWED_HOSTS/ and can be protected with

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/secure-ssid/hpe-networking-mcp)](https://m8ven.ai/mcp/secure-ssid/hpe-networking-mcp)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 2c9560f2350570f5c4a6c2268955f7d641578c8e

code hash: 884a697f057b928eb17ee55dca13c92daf6cb4c4a9d8f828d706a60409f7163b

verified: 9/5/2026, 2:16:12 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client