Meraki Magic MCP

MERAKI_API_KEY="your_api_key_here" MERAKI_ORG_ID="your_org_id_here" MERAKI_BASE_URL="https://api.meraki.com/api/v1" # Optional: Performance tuning ENABLE_CACHING=true CACHE_TTL_SECONDS=300 READ_ONLY_MODE=true

Get your API key from:Meraki Dashboard → Organization → Settings → Dashboard API access

READ_ONLY_MODEdefaults totrueto block create/update/delete/remove operations. SetREAD_ONLY_MODE=falseonly when you intend to make changes. Delete/remove calls also requireconfirm_destructive_action=true.

UseMERAKI_BASE_URLto point the MCP server at another Meraki region or compatible Dashboard API base URI.

There are three ways to deploy Meraki Magic MCP:

- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:%APPDATA%\Claude\claude_desktop_config.json

Usemeraki-mcp.pyinstead ofmeraki-mcp-dynamic.pyin the config above.

The dynamic MCP automatically stays current with Meraki's API:

# Manually update SDK pip install --upgrade meraki

The dynamic MCP includes several optimizations:

The Dynamic MCP provides two ways to access Meraki APIs:
-

Pre-registered tools(12 most common operations):

- getOrganizations,getOrganizationAdmins,getOrganizationNetworks
- getNetworkClients,getNetworkEvents,getDeviceSwitchPorts
- And 6 more common operations

- Access ALL 804+ Meraki API methods
- Example:call_meraki_api(section="appliance", method="getNetworkApplianceFirewallL3FirewallRules", parameters={"networkId": "L_123"})
- Destructive methods requireconfirm_destructive_action=trueinparameters

Get all admins in my organization Show me firewall rules for network "Main Office" Update switch port 12 on device ABC123 to enable BPDU guard Get wireless clients from the last hour Create a new network named "Branch Office"

The following tools are available in the manual MCP (meraki-mcp.py).The dynamic MCP provides access to these and 760+ additional endpoints through the genericcall_meraki_apitool.

- get_organizations()- Get a list of organizations the user has access to
- get_organization_details(org_id)- Get details for a specific organization
- get_organization_status(org_id)- Get the status and health of an organization
- get_organization_inventory(org_id)- Get the inventory for an organization
- get_organization_license(org_id)- Get the license state for an organization
- get_organization_conf_change(org_id)- Get the org change state for an organization

- get_organization_admins(org_id)- Get a list of organization admins
- create_organization_admin(org_id, email, name, org_access, tags, networks)- Create a new organization admin
- get_organization_api_requests(org_id, timespan)- Get organization API request history
- get_organization_webhook_logs(org_id, timespan)- Get organization webhook logs

- get_networks(org_id)- Get a list of networks from Meraki
- create_network(name, tags, productTypes, org_id, copyFromNetworkId)- Create a new network
- delete_network(network_id, confirm_destructive_action)- Delete a network in Meraki
- get_network_details(network_id)- Get details for a specific network
- update_network(network_id, update_data)- Update a network's properties

- get_network_events(network_id, timespan, per_page)- Get network events history
- get_network_event_types(network_id)- Get available network event types
- get_network_alerts_history(network_id, timespan)- Get network alerts history
- get_network_alerts_settings(network_id)- Get network alerts settings
- update_network_alerts_settings(network_id, defaultDestinations, alerts)- Update network alerts settings

- get_clients(network_id, timespan)- Get a list of clients from a network
- get_client_details(network_id, client_id)- Get details for a specific client
- get_client_usage(network_id, client_id)- Get the usage history for a client
- get_client_policy(network_id, client_id)- Get the policy for a specific client
- update_client_policy(network_id, client_id, device_policy, group_policy_id)- Update policy for a client

- get_network_traffic(network_id, timespan)- Get traffic analysis data for a network

- get_devices(org_id)- Get a list of devices from Meraki
- get_network_devices(network_id)- Get a list of devices in a specific network
- get_device_details(serial)- Get details for a specific device by serial number
- get_device_status(serial)- Get the current status of a device
- get_device_uplink(serial)- Get the uplink status of a device

- update_device(serial, device_settings)- Update a device in the Meraki organization
- claim_devices(network_id, serials)- Claim one or more devices into a Meraki network
- remove_device(network_id, serial, confirm_destructive_action)- Remove a device from its network
- reboot_device(serial)- Reboot a device

- get_device_clients(serial, timespan)- Get clients connected to a specific device

- ping_device(serial, target_ip, count)- Ping a device from another device
- get_device_ping_results(serial, ping_id)- Get results from a device ping test
- cable_test_device(serial, ports)- Run cable test on device ports
- get_device_cable_test_results(serial, cable_test_id)- Get results from a device cable test

- blink_device_leds(serial, duration)- Blink device LEDs for identification
- wake_on_lan_device(serial, mac)- Send wake-on-LAN packet to a device

- get_wireless_ssids(network_id)- Get wireless SSIDs for a network
- update_wireless_ssid(network_id, ssid_number, ssid_settings)- Update a wireless SSID
- get_wireless_settings(network_id)- Get wireless settings for a network

- get_wireless_rf_profiles(network_id)- Get wireless RF profiles for a network
- create_wireless_rf_profile(network_id, name, band_selection_type, kwargs)- Create a wireless RF profile
- get_wireless_channel_utilization(network_id, timespan)- Get wireless channel utilization history
- get_wireless_signal_quality(network_id, timespan)- Get wireless signal quality history
- get_wireless_connection_stats(network_id, timespan)- Get wireless connection statistics
- get_wireless_client_connectivity_events(network_id, client_id, timespan)- Get wireless client connectivity events

- get_switch_ports(serial)- Get ports for a switch
- update_switch_port(serial, port_id, name, tags, enabled, vlan)- Update a switch port
- get_switch_vlans(network_id)- Get VLANs for a network
- create_switch_vlan(network_id, vlan_id, name, subnet, appliance_ip)- Create a switch VLAN

- get_switch_port_statuses(serial)- Get switch port statuses
- cycle_switch_ports(serial, ports)- Cycle (restart) switch ports
- get_switch_access_control_lists(network_id)- Get switch access control lists
- update_switch_access_control_lists(network_id, rules)- Update switch access control lists
- get_switch_qos_rules(network_id)- Get switch QoS rules
- create_switch_qos_rule(network_id, vlan, protocol, src_port, kwargs)- Create a switch QoS rule

- get_security_center(network_id)- Get security information for a network
- get_vpn_status(network_id)- Get VPN status for a network
- get_firewall_rules(network_id)- Get firewall rules for a network
- update_firewall_rules(network_id, rules)- Update firewall rules for a network

- get_appliance_vpn_site_to_site(network_id)- Get appliance VPN site-to-site configuration
- update_appliance_vpn_site_to_site(network_id, mode, hubs, subnets)- Update appliance VPN site-to-site configuration
- get_appliance_content_filtering(network_id)- Get appliance content filtering settings
- update_appliance_content_filtering(network_id, kwargs)- Update appliance content filtering settings
- get_appliance_security_events(network_id, timespan)- Get appliance security events
- get_appliance_traffic_shaping(network_id)- Get appliance traffic shaping settings
- update_appliance_traffic_shaping(network_id, global_bandwidth_limits)- Update appliance traffic shaping settings

- get_camera_video_settings(network_id, serial)- Get video settings for a camera
- get_camera_quality_settings(network_id)- Get quality and retention settings for cameras

- get_camera_analytics_live(serial)- Get live camera analytics
- get_camera_analytics_overview(serial, timespan)- Get camera analytics overview
- get_camera_analytics_zones(serial)- Get camera analytics zones
- generate_camera_snapshot(serial, timestamp)- Generate a camera snapshot
- get_camera_sense(serial)- Get camera sense configuration
- update_camera_sense(serial, sense_enabled, mqtt_broker_id, audio_detection)- Update camera sense configuration

- create_action_batch(org_id, actions, confirmed, synchronous)- Create an action batch for bulk operations
- get_action_batch_status(org_id, batch_id)- Get action batch status
- get_action_batches(org_id)- Get all action batches for an organization

- SsidUpdateSchema- Wireless SSID configuration
- FirewallRule- Firewall rule configuration
- DeviceUpdateSchema- Device update parameters
- NetworkUpdateSchema- Network update parameters
- AdminCreationSchema- Admin creation parameters
- ActionBatchSchema- Action batch configuration
- VpnSiteToSiteSchema- VPN site-to-site configuration
- ContentFilteringSchema- Content filtering settings
- TrafficShapingSchema- Traffic shaping configuration
- CameraSenseSchema- Camera sense settings
- SwitchQosRuleSchema- Switch QoS rule configuration
- Error Handling: Always check API responses for errors
- Rate Limiting: The Meraki API has rate limits; use appropriate delays (or use dynamic MCP with caching)
- Batch Operations: Use action batches for bulk operations
- Validation: Use the provided schemas for data validation
- Monitoring: Regularly check network events and alerts
- Security: Keep API keys secure and rotate them regularly
- Authentication Errors: Verify your API key is correct and has appropriate permissions
- Rate Limiting: If you encounter rate limiting, implement delays between requests (or use dynamic MCP with caching)
- Network Not Found: Ensure the network ID is correct and accessible
- Device Not Found: Verify the device serial number is correct and the device is online

USE AT YOUR OWN RISK: This MCP server is designed for development, testing, and educational purposes. Running this software in production environments is done entirely at your own risk. The authors and contributors are not responsible for any damages, data loss, service interruptions, or other issues that may arise from the use of this software in production environments.

SECURITY CONSIDERATIONS: This software requires access to your Meraki API credentials. Ensure that:

NO WARRANTY: The authors disclaim all warranties, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. In no event shall the authors be liable for any claim, damages, or other liability arising from the use of this software.

SUPPORT**: This is an open-source project. For production use, consider implementing additional testing, monitoring, and support mechanisms appropriate for your environment.