Netbird

Netbird is an MCP server that connects large language models to the Netbird zero-trust networking API. Designed for network engineers, system administrators, and security specialists, this server provides programmatic, read-only visibility into private overlay network configurations directly through MCP clients. By querying the Netbird API, it allows AI assistants to retrieve detailed information regarding active network peers, peer-specific port allocations, defined user groups, and traffic access policies. Operators can also inspect security posture check definitions, registered nameserver groups, and overall network boundaries. Because the tool exposes Netbird management endpoints to LLMs, technical teams can diagnose connectivity issues, verify firewall and routing policies, and summarize complex mesh network topologies using conversational natural language prompts. The server supports standard local command execution via stdio as well as standalone network deployments using Server-Sent Events or Docker containers.

Category: Cloud & Infrastructure

Tags: mesh-network, netbird, networking, vpn, zero-trust

Visit Netbird

How to install and configure Netbird

1. Obtain your Netbird API token from the Netbird management console. 2. Install the binary using Go by running go install github.com/aantti/mcp-netbird/cmd/mcp-netbird@latest or install via Smithery using npx -y @smithery/cli install @aantti/mcp-netbird --client claude. 3. Add the server entry to your MCP client configuration file (e.g., in Claude Desktop or ~/.codeium/windsurf/mcp_config.json): json { "mcpServers": { "netbird": { "command": "mcp-netbird", "args": [], "env": { "NETBIRD_API_TOKEN": "<your-api-token>" } } } } 4. If your client reports an ENOENT error, replace mcp-netbird with the absolute path to the installed binary. 5. Restart your client to start querying your Netbird network.

What you can do with Netbird

• Querying and analyzing active Netbird network peers and their connection details to troubleshoot mesh routing. - Auditing zero-trust access control policies and groups to verify security rules across organizational endpoints. - Reviewing network posture check configurations to ensure enrolled client machines meet required operational compliance criteria. - Inspecting ingress port allocations for specific peer devices to verify service exposure across the overlay. - Listing nameserver configurations and DNS settings associated with private networks for connectivity debugging.

Key facts

• https://github.com/aantti/mcp-netbird
• Cloud & Infrastructure, Security & Compliance
• mesh-network, netbird, networking, vpn, zero-trust

Part of MCP Servers

How do I install Netbird MCP Server?

You can install it using Go by running go install github.com/aantti/mcp-netbird/cmd/mcp-netbird@latest. Alternatively, you can clone the repository and run make install, use Smithery CLI to install it directly for Claude Desktop, or run it in a container using the provided Dockerfile.

What can Netbird MCP Server do?

It provides read-only inspection tools for Netbird overlay networks. Large language models can use it to list all network peers, inspect port allocations per peer, view network groups, review access policies, verify posture check settings, and check DNS nameservers.

Which MCP clients work with Netbird MCP Server?

It works with any MCP-compliant client that supports standard input/output (stdio) or Server-Sent Events (SSE) transports, including Claude Desktop, Codeium Windsurf, and the interactive MCP Inspector developer tool.

What environment variables are required?

The server requires the NETBIRD_API_TOKEN environment variable set to a valid token generated from the Netbird management console. Optionally, you can specify NETBIRD_HOST if you are connecting to a self-hosted instance rather than the default api.netbird.io.

Is Netbird MCP Server open source?

Yes, Netbird MCP Server is open source and licensed under the Apache License, Version 2.0. The source code is publicly accessible on GitHub.