PacketFabric
by PacketFabric · remote · local (pypi) · no sign-in to list tools · v0.2.4 · published by GitHub user PacketFabric
Query and manage PacketFabric NaaS: ports, virtual circuits, cloud routers, pricing, metrics.
16 tools: 1 change things and 15 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads15Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http packetfabric https://mcp.packetfabric.com/mcp --header 'Authorization: <your-authorization>'Findings
Matches of fixed checks, with the text they matched.
- Warnpf_call_endpoint
The server marks "pf_call_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "pf_call_endpoint" says "call": a word for a change.
- Infopf_get_account
The description mentions "credentials".
What this check looks forMatched text
description: "..., type). Good first call to confirm credentials work."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
16 tools
Changes things 1Claude Code: ask
pf_call_endpointCall any PacketFabric API endpoint by operation_id.1 finding
Why it is in this group
- The name "pf_call_endpoint" says "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "pf_call_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "pf_call_endpoint" says "call": a word for a change.
Description, as the server wrote it Call any PacketFabric API endpoint by operation_id. Reads run immediately. Writes (create/modify/delete — may create billable services) are only possible when the server was started with PF_ALLOW_WRITES=true, and return a dry-run preview unless confirm=true. Always show the user the preview and get explicit approval before re-calling with confirm=true.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
Only reads 15Claude Code: allow
pf_describe_endpointShow parameters, request body schema and response shape for one endpoint.No findings
Why it is in this group
- The name "pf_describe_endpoint" says "describe": a word for reading.
Description, as the server wrote it Show parameters, request body schema and response shape for one endpoint. Call this before pf_call_endpoint for anything you haven't used yet.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_find_locationsFind PacketFabric locations / POPs (data center, address, market, status, port types).No findings
Why it is in this group
- The name "pf_find_locations" says "find": a word for reading.
Description, as the server wrote it Find PacketFabric locations / POPs (data center, address, market, status, port types).
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_get_accountGet the current PacketFabric customer account (name, account number, UUID, type).1 finding
Why it is in this group
- The name "pf_get_account" says "get": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "..., type). Good first call to confirm credentials work."
Description, as the server wrote it Get the current PacketFabric customer account (name, account number, UUID, type). Good first call to confirm credentials work.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_get_maintenancesCurrent and upcoming maintenance windows, optionally for a POP or market.No findings
Why it is in this group
- The name "pf_get_maintenances" says "get": a word for reading.
Description, as the server wrote it Current and upcoming maintenance windows, optionally for a POP or market.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_get_portGet full details for one port by circuit id (e.g.No findings
Why it is in this group
- The name "pf_get_port" says "get": a word for reading.
Description, as the server wrote it Get full details for one port by circuit id (e.g. PF-AP-LAX1-1234).
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_get_pricingLook up list pricing (MRC/NRC) for a PacketFabric product between locations.No findings
Why it is in this group
- The name "pf_get_pricing" says "get": a word for reading.
Description, as the server wrote it Look up list pricing (MRC/NRC) for a PacketFabric product between locations. Read-only, no order is created. vcbwc = backbone virtual circuit bandwidth.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_get_trafficTraffic rate time series for a port (or one VC on a port).No findings
Why it is in this group
- The name "pf_get_traffic" says "get": a word for reading.
Description, as the server wrote it Traffic rate time series for a port (or one VC on a port).
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_api_areasList the areas (tags) of the PacketFabric API with counts of read and write operations.No findings
Why it is in this group
- The name "pf_list_api_areas" says "list": a word for reading.
Description, as the server wrote it List the areas (tags) of the PacketFabric API with counts of read and write operations. Use this to orient yourself before pf_search_endpoints.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_cloud_connectionsList Layer-2 cloud connections (hosted or dedicated) to AWS, Azure, Google, Oracle, IBM.No findings
Why it is in this group
- The name "pf_list_cloud_connections" says "list": a word for reading.
Description, as the server wrote it List Layer-2 cloud connections (hosted or dedicated) to AWS, Azure, Google, Oracle, IBM.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_cloud_router_connectionsList Cloud Router connections (AWS/Azure/GCP/Oracle/IBM, ports, IPsec) across the account or for one router.No findings
Why it is in this group
- The name "pf_list_cloud_router_connections" says "list": a word for reading.
Description, as the server wrote it List Cloud Router connections (AWS/Azure/GCP/Oracle/IBM, ports, IPsec) across the account or for one router.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_cloud_routersList Cloud Routers (L3 NaaS routers) on the account with ASN, capacity, regions.No findings
Why it is in this group
- The name "pf_list_cloud_routers" says "list": a word for reading.
Description, as the server wrote it List Cloud Routers (L3 NaaS routers) on the account with ASN, capacity, regions.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_point_to_pointList point-to-point (wavelength-style) services.No findings
Why it is in this group
- The name "pf_list_point_to_point" says "list": a word for reading.
Description, as the server wrote it List point-to-point (wavelength-style) services.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_portsList the account's ports (physical access ports, LAGs, cloud ports) with speed, status, POP.No findings
Why it is in this group
- The name "pf_list_ports" says "list": a word for reading.
Description, as the server wrote it List the account's ports (physical access ports, LAGs, cloud ports) with speed, status, POP.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_list_servicesList the account's virtual circuits / services (backbone VCs, cloud connections, IX, marketplace).No findings
Why it is in this group
- The name "pf_list_services" says "list": a word for reading.
Description, as the server wrote it List the account's virtual circuits / services (backbone VCs, cloud connections, IX, marketplace).
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
pf_search_endpointsSearch all PacketFabric API endpoints by keyword.No findings
Why it is in this group
- The name "pf_search_endpoints" says "search": a word for reading.
Description, as the server wrote it Search all PacketFabric API endpoints by keyword. Returns operation_ids to pass to pf_describe_endpoint / pf_call_endpoint.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.2.4. Values in angle brackets are yours to fill in.
claude mcp add --transport http packetfabric https://mcp.packetfabric.com/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__packetfabric__pf_list_api_areas",
"mcp__packetfabric__pf_search_endpoints",
"mcp__packetfabric__pf_describe_endpoint",
"mcp__packetfabric__pf_get_account",
"mcp__packetfabric__pf_list_ports",
"mcp__packetfabric__pf_get_port",
"mcp__packetfabric__pf_list_services",
"mcp__packetfabric__pf_list_point_to_point",
"mcp__packetfabric__pf_list_cloud_routers",
"mcp__packetfabric__pf_list_cloud_router_connections",
"mcp__packetfabric__pf_list_cloud_connections",
"mcp__packetfabric__pf_find_locations",
"mcp__packetfabric__pf_get_pricing",
"mcp__packetfabric__pf_get_traffic",
"mcp__packetfabric__pf_get_maintenances"
],
"ask": [
"mcp__packetfabric__pf_call_endpoint"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as packetfabric. Review it before you use it.
