// SCAN REPORT

SD-WAN MCP Server

18 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 12 Jun 2026

1 can modify or destroy data

17 read-only

18 tools total

Community server · catalogue entry verified 12/06/2026

How to control SD-WAN MCP Server ↓

TOOL MAP

What SD-WAN MCP Server exposes to your agents

Read (17) Write / Execute (1) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous SD-WAN MCP Server tools

Write · Medium authenticate Authentication establishes a session (creates session state on the server), which is a Write operation.

1 of SD-WAN MCP Server's 18 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control SD-WAN MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and SD-WAN MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "authenticate": {
    "limits": [
      {
        "counter": "authenticate_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_bfd_session_health": {
    "limits": [
      {
        "counter": "check_bfd_session_health_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register SD-WAN MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SD-WAN →

Free to start. No card required.

FULL CATALOGUE

All 18 SD-WAN MCP Server tools

WRITE 1 tools

Write authenticate Authenticate with the SD-WAN management server to establish session

READ 17 tools

Read check_bfd_session_health Monitor BFD session health across all devices Read filter_devices_by_status Filter devices by operational status Read get_bfd_sessions Get BFD sessions for a device Read get_bfd_state Get BFD (Bidirectional Forwarding Detection) state for a device Read get_device_alerts Get alerts and warnings for devices Read get_device_config Get device configuration Read get_device_counters Get device counters and statistics Read get_device_health_summary Get comprehensive health summary across all devices Read get_device_monitor Get device monitoring information Read get_fabric_devices Get list of all fabric devices Read get_interface_statistics Get interface statistics for all devices Read get_network_topology Get network topology information based on device connections Read get_session_status Check current authentication session status Read get_top_interfaces_by_traffic Get top interfaces ranked by traffic utilization Read get_tunnel_statistics Get tunnel statistics for a device Read monitor_interface_utilization Monitor interface utilization and identify high-usage interfaces Read generate_network_report Generate comprehensive network status report

FAQ

Questions about SD-WAN MCP Server

How do I prevent bulk modifications through SD-WAN MCP Server? +

The SD-WAN MCP Server server has 1 write tools including authenticate. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach SD-WAN MCP Server.

How many tools does the SD-WAN MCP Server MCP server expose? +

18 tools across 2 categories: Read, Write. 17 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on SD-WAN MCP Server? +

Register the SD-WAN MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every SD-WAN MCP Server tool call.

Deterministic rules across all 18 SD-WAN MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SD-WAN →

Free to start. No card required.

18 SD-WAN MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.