// SCAN REPORT

HPE Aruba Networking Central MCP Server

148 tools. 40 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

40 can modify or destroy data

108 read-only

148 tools total

Community server · catalogue entry verified 03/07/2026

How to control HPE Aruba Networking Central MCP Server ↓

TOOL MAP

What HPE Aruba Networking Central MCP Server exposes to your agents

Read (108) Write / Execute (33) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous HPE Aruba Networking Central MCP Server tools

Destructive · High delete_group The tool permanently removes a configuration group, which cannot be undone. Destructive · High delete_site The tool performs an irreversible delete operation on a site within HPE Aruba Networking Central. Destructive · High delete_template The tool performs an irreversible deletion operation on templates used in network configuration management. Destructive · High delete_template_variables This tool permanently removes template variables from a device configuration.

40 of HPE Aruba Networking Central MCP Server's 148 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control HPE Aruba Networking Central MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and HPE Aruba Networking Central MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "archive_devices": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "acknowledge_alert": {
    "limits": [
      {
        "counter": "acknowledge_alert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "audit_security_posture": {
    "limits": [
      {
        "counter": "audit_security_posture_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register HPE Aruba Networking Central MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON HPE ARUBA NETWORKING CENTRAL →

Instant setup, no code required.

FULL CATALOGUE

All 148 HPE Aruba Networking Central MCP Server tools

DESTRUCTIVE 7 tools

Destructive archive_devices Archive devices from inventory. Destructive delete_group Delete a configuration group. Destructive delete_site Delete a site. Destructive delete_template Delete a template from a group. Destructive delete_template_variables Delete all template variables for a device. Destructive delete_user Delete a user. Destructive delete_wlan Delete a WLAN from a group.

EXECUTE 6 tools

Execute bounce_interface bounce_interface Execute cancel_firmware_upgrade Cancel an ongoing firmware upgrade. Execute push_config_commands push_config_commands Execute run_show_command run_show_command Execute run_show_commands run_show_commands Execute upgrade_firmware upgrade_firmware

WRITE 27 tools

Write acknowledge_alert Acknowledge/clear a specific alert by its ID. Write add_device_to_inventory Add a device to inventory. Write assign_auto_license Assign auto-license services. Write assign_subscription Assign subscription/license to devices. Write associate_devices_to_site Associate devices to a site. Write backup_config backup_config Write clone_group Clone an existing configuration group. Write create_group create_group Write create_guest_visitor Create a guest visitor/voucher for a portal. Write create_msp_customer Create a new MSP customer. Write create_site create_site Write create_template_variables Create template variables for a device. Write create_user Create a new user. Write create_wlan Create a new WLAN in a group. Write move_devices Move devices to a different group. Write replace_ap_cli_config Replace AP CLI configuration for a group or specific AP. Write replace_template_variables Replace all template variables for a device. Write save_config save_config Write set_switch_ssh_credentials Set SSH credentials for a switch device. Write unarchive_devices Unarchive devices from inventory. Write unassign_subscription Unassign subscription/license from devices. Write unassociate_devices_from_site Unassociate devices from a site. Write update_ap_settings Update settings for an Access Point. Write update_site update_site Write update_template_variables Update template variables for a device. Write update_user Update an existing user. Write update_wlan Update an existing WLAN.

READ 108 tools

Read audit_security_posture audit_security_posture Read compare_configs compare_configs Read get_aaa_status get_aaa_status Read get_access_lists get_access_lists Read get_alert_config Get alert/notification configuration and thresholds. Read get_alerts Get active alerts and notifications. Returns alerts like AP down, rogue Read get_all_reporting_radios Get telemetry data for all reporting radios. Read get_all_template_variables Get template variables for all devices. Read get_all_wlans Get all WLANs in a group. Read get_ap_cli_config Get AP CLI configuration for a group or specific AP. Read get_ap_details Get detailed live monitoring data for a specific AP by serial number. Read get_ap_neighbors Get RF neighbor information for an AP. Shows nearby APs and their Read get_ap_rf_summary Get AP RF environment summary. Returns noise floor, channel utilization, Read get_ap_settings Get settings for an Access Point. Read get_aps Get live AP monitoring data. Returns AP status (Up/Down), uptime, Read get_arp_table Get ARP table from an Aruba device. Shows IP-to-MAC address mappings. Read get_audit_trail_logs Get audit trail logs. Read get_auto_license_services Get auto-license service settings. Read get_bgp_summary get_bgp_summary Read get_client_count Get client count with breakdown by band, SSID, or site. Read get_client_details Get detailed information for a specific client by MAC address. Read get_clients Get all connected clients (wired and wireless). Returns client details Read get_cpu_memory_detail get_cpu_memory_detail Read get_device_config_details Get configuration details for a device. Read get_device_configuration Get the running configuration for a device. Read get_device_group Get the group assignment for a device. Read get_device_inventory Get device inventory. Read get_device_logs get_device_logs Read get_device_templates Get list of device templates. Read get_device_tunnels Get VPN/tunnel status for a device. Shows tunnel endpoints, Read get_enabled_services Get enabled license services. Read get_environment get_environment Read get_event_details Get details of a specific event. Read get_event_logs Get event logs. Read get_firmware_swarms Get firmware information for swarms. Read get_firmware_upgrade_status Get firmware upgrade status. Read get_firmware_versions Get available firmware versions. Read get_gateway_details Get detailed live monitoring data for a specific gateway by serial. Read get_gateways Get live gateway/controller monitoring data. Returns gateway status, Read get_group_device_templates Get device templates for a specific group. Read get_group_template_info Get template information for a specific group. Read get_groups Get list of configuration groups. Read get_guest_portals Get list of configured guest portals. Returns portal names, URLs, Read get_guest_visitors Get guest visitors for a portal. Returns visitor details, registration Read get_interface_counters get_interface_counters Read get_interface_errors get_interface_errors Read get_interface_status get_interface_status Read get_interfering_aps Get detected interfering access points. Read get_license_service_config Get license service configuration. Read get_license_stats Get license statistics. Read get_lldp_neighbors get_lldp_neighbors Read get_mac_address_table get_mac_address_table Read get_msp_country_codes Get list of country codes for MSP. Read get_msp_customers Get list of MSP customers. Read get_msp_devices Get MSP devices. Read get_msp_groups Get MSP groups. Read get_neighbor_aps Get detected neighbor access points. Read get_networks Get list of networks. Returns all configured networks with client Read get_ntp_status get_ntp_status Read get_ospf_neighbors get_ospf_neighbors Read get_poe_status get_poe_status Read get_presence_analytics Get presence analytics for a site. Returns visitor count, dwell time, Read get_presence_trend Get presence trend data over time for a site. Shows visitor traffic Read get_rogue_aps Get detected rogue access points. Read get_roles Get list of available user roles. Read get_route_table get_route_table Read get_running_config Get the full running configuration of an Aruba device. Read get_sites Get list of sites. Read get_spanning_tree get_spanning_tree Read get_startup_config Get the startup configuration of an Aruba device. Read get_subscription_keys Get subscription keys/licenses. Read get_suspect_aps Get detected suspect access points. Read get_switch_details Get detailed live monitoring data for a specific switch by serial. Read get_switch_port_details Get detailed information for a specific switch port including Read get_switch_ports Get port status for a switch. Returns per-port details: speed, duplex, Read get_switches Get live switch monitoring data. Returns switch status (Up/Down), uptime, Read get_system_info get_system_info Read get_template_text Get the text content of a template. Read get_template_variables Get template variables for a specific device. Read get_templates Get templates in a configuration group. Read get_topology_ap_lldp_neighbors Get LLDP neighbor information for an AP. Read get_topology_devices Get topology device information. Read get_topology_edges Get topology edge connections. Read get_topology_site Get topology information for a site. Read get_topology_tunnels Get tunnel topology information. Read get_topology_uplinks Get uplink topology information. Read get_user Get details of a specific user. Read get_visualrf_building_info Get detailed information for a building. Read get_visualrf_campus_info Get detailed information for a campus. Read get_visualrf_campus_list Get list of VisualRF campuses. Read get_visualrf_client_location Get location information for a specific client. Read get_visualrf_floor_aps Get Access Point locations on a floor. Read get_visualrf_floor_clients Get client locations on a floor. Read get_visualrf_floor_info Get detailed information for a floor. Read get_visualrf_rogue_location Get location information for a rogue AP. Read get_vlan_info get_vlan_info Read get_vrf_info get_vrf_info Read get_wan_tunnels Get WAN VPN tunnel status. Shows all SD-WAN/VPN tunnels, their health, Read get_wan_uplink_bandwidth Get WAN uplink bandwidth utilization for a specific device. Read get_wan_uplinks Get WAN uplink status and health. Returns uplink bandwidth usage, Read get_wids_client_attacks Get WIDS client attack detections. Read get_wids_events Get WIDS event history. Read get_wids_infrastructure_attacks Get WIDS infrastructure attack detections. Read get_wired_clients Get wired clients. Returns details like switch port, VLAN, speed, Read get_wireless_clients Get wireless clients. Returns details like SSID, signal, SNR, channel, Read get_wlan Get details of a specific WLAN. Read list_users Get list of users. Read refresh_api_token Manually refresh the OAuth2 access token.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about HPE Aruba Networking Central MCP Server

Can an AI agent delete data through the HPE Aruba Networking Central MCP Server MCP server? +

Yes. The HPE Aruba Networking Central MCP Server server exposes 7 destructive tools including archive_devices, delete_group, delete_site. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through HPE Aruba Networking Central MCP Server? +

The HPE Aruba Networking Central MCP Server server has 27 write tools including acknowledge_alert, add_device_to_inventory, assign_auto_license. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach HPE Aruba Networking Central MCP Server.

How many tools does the HPE Aruba Networking Central MCP Server MCP server expose? +

148 tools across 4 categories: Destructive, Execute, Read, Write. 108 are read-only. 40 can modify, create, or delete data.

How do I enforce a policy on HPE Aruba Networking Central MCP Server? +

Register the HPE Aruba Networking Central MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every HPE Aruba Networking Central MCP Server tool call.

Deterministic rules across all 148 HPE Aruba Networking Central MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HPE ARUBA NETWORKING CENTRAL →

Instant setup, no code required.

148 HPE Aruba Networking Central MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.