Skip to content

PacketFabric

by PacketFabric · remote · local (pypi) · no sign-in to list tools · v0.2.4 · published by GitHub user PacketFabric

Query and manage PacketFabric NaaS: ports, virtual circuits, cloud routers, pricing, metrics.

Changes · 1

16 tools: 1 change things and 15 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http packetfabric https://mcp.packetfabric.com/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • The server marks "pf_call_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "pf_call_endpoint" says "call": a word for a change.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "..., type). Good first call to confirm credentials work."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Changes things 1Claude Code: ask
  • pf_call_endpointCall any PacketFabric API endpoint by operation_id.1 finding

    Why it is in this group

    • The name "pf_call_endpoint" says "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "pf_call_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "pf_call_endpoint" says "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call any PacketFabric API endpoint by operation_id. Reads run immediately. Writes (create/modify/delete — may create billable services) are only possible when the server was started with PF_ALLOW_WRITES=true, and return a dry-run preview unless confirm=true. Always show the user the preview and get explicit approval before re-calling with confirm=true.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
Only reads 15Claude Code: allow
  • pf_describe_endpointShow parameters, request body schema and response shape for one endpoint.No findings

    Why it is in this group

    • The name "pf_describe_endpoint" says "describe": a word for reading.
    Description, as the server wrote it
    Show parameters, request body schema and response shape for one endpoint. Call this before pf_call_endpoint for anything you haven't used yet.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_find_locationsFind PacketFabric locations / POPs (data center, address, market, status, port types).No findings

    Why it is in this group

    • The name "pf_find_locations" says "find": a word for reading.
    Description, as the server wrote it
    Find PacketFabric locations / POPs (data center, address, market, status, port types).

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_get_accountGet the current PacketFabric customer account (name, account number, UUID, type).1 finding

    Why it is in this group

    • The name "pf_get_account" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "..., type). Good first call to confirm credentials work."

      What this check looks for
    Description, as the server wrote it
    Get the current PacketFabric customer account (name, account number, UUID, type). Good first call to confirm credentials work.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_get_maintenancesCurrent and upcoming maintenance windows, optionally for a POP or market.No findings

    Why it is in this group

    • The name "pf_get_maintenances" says "get": a word for reading.
    Description, as the server wrote it
    Current and upcoming maintenance windows, optionally for a POP or market.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_get_portGet full details for one port by circuit id (e.g.No findings

    Why it is in this group

    • The name "pf_get_port" says "get": a word for reading.
    Description, as the server wrote it
    Get full details for one port by circuit id (e.g. PF-AP-LAX1-1234).

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_get_pricingLook up list pricing (MRC/NRC) for a PacketFabric product between locations.No findings

    Why it is in this group

    • The name "pf_get_pricing" says "get": a word for reading.
    Description, as the server wrote it
    Look up list pricing (MRC/NRC) for a PacketFabric product between locations. Read-only, no order is created. vcbwc = backbone virtual circuit bandwidth.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_get_trafficTraffic rate time series for a port (or one VC on a port).No findings

    Why it is in this group

    • The name "pf_get_traffic" says "get": a word for reading.
    Description, as the server wrote it
    Traffic rate time series for a port (or one VC on a port).

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_api_areasList the areas (tags) of the PacketFabric API with counts of read and write operations.No findings

    Why it is in this group

    • The name "pf_list_api_areas" says "list": a word for reading.
    Description, as the server wrote it
    List the areas (tags) of the PacketFabric API with counts of read and write operations. Use this to orient yourself before pf_search_endpoints.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_cloud_connectionsList Layer-2 cloud connections (hosted or dedicated) to AWS, Azure, Google, Oracle, IBM.No findings

    Why it is in this group

    • The name "pf_list_cloud_connections" says "list": a word for reading.
    Description, as the server wrote it
    List Layer-2 cloud connections (hosted or dedicated) to AWS, Azure, Google, Oracle, IBM.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_cloud_router_connectionsList Cloud Router connections (AWS/Azure/GCP/Oracle/IBM, ports, IPsec) across the account or for one router.No findings

    Why it is in this group

    • The name "pf_list_cloud_router_connections" says "list": a word for reading.
    Description, as the server wrote it
    List Cloud Router connections (AWS/Azure/GCP/Oracle/IBM, ports, IPsec) across the account or for one router.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_cloud_routersList Cloud Routers (L3 NaaS routers) on the account with ASN, capacity, regions.No findings

    Why it is in this group

    • The name "pf_list_cloud_routers" says "list": a word for reading.
    Description, as the server wrote it
    List Cloud Routers (L3 NaaS routers) on the account with ASN, capacity, regions.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_point_to_pointList point-to-point (wavelength-style) services.No findings

    Why it is in this group

    • The name "pf_list_point_to_point" says "list": a word for reading.
    Description, as the server wrote it
    List point-to-point (wavelength-style) services.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_portsList the account's ports (physical access ports, LAGs, cloud ports) with speed, status, POP.No findings

    Why it is in this group

    • The name "pf_list_ports" says "list": a word for reading.
    Description, as the server wrote it
    List the account's ports (physical access ports, LAGs, cloud ports) with speed, status, POP.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_list_servicesList the account's virtual circuits / services (backbone VCs, cloud connections, IX, marketplace).No findings

    Why it is in this group

    • The name "pf_list_services" says "list": a word for reading.
    Description, as the server wrote it
    List the account's virtual circuits / services (backbone VCs, cloud connections, IX, marketplace).

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true
  • pf_search_endpointsSearch all PacketFabric API endpoints by keyword.No findings

    Why it is in this group

    • The name "pf_search_endpoints" says "search": a word for reading.
    Description, as the server wrote it
    Search all PacketFabric API endpoints by keyword. Returns operation_ids to pass to pf_describe_endpoint / pf_call_endpoint.

    Annotations the server declares

    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http packetfabric https://mcp.packetfabric.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__packetfabric__pf_list_api_areas",
      "mcp__packetfabric__pf_search_endpoints",
      "mcp__packetfabric__pf_describe_endpoint",
      "mcp__packetfabric__pf_get_account",
      "mcp__packetfabric__pf_list_ports",
      "mcp__packetfabric__pf_get_port",
      "mcp__packetfabric__pf_list_services",
      "mcp__packetfabric__pf_list_point_to_point",
      "mcp__packetfabric__pf_list_cloud_routers",
      "mcp__packetfabric__pf_list_cloud_router_connections",
      "mcp__packetfabric__pf_list_cloud_connections",
      "mcp__packetfabric__pf_find_locations",
      "mcp__packetfabric__pf_get_pricing",
      "mcp__packetfabric__pf_get_traffic",
      "mcp__packetfabric__pf_get_maintenances"
    ],
    "ask": [
      "mcp__packetfabric__pf_call_endpoint"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as packetfabric. Review it before you use it.