# Netmon

Connects an AI agent to a Netmon appliance so it can read devices, alerts, logs, flows, and Windows-agent data. It fits setups that need local access.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed
- Author: Netmon-Services
- License: MPL-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Netmon-Services/netmon-mcpd
- Updated: 2026-09-11
- HTML: https://affpapa.org/en/nevibecode/mcp/netmon

## What it does

Netmon is an MCP server connection for querying a Netmon appliance from an AI coding client. The agent can inspect devices, interfaces, logs, NetFlow records, Suricata alerts, captures, and Windows-agent data. Access follows the operator account’s permissions and tag restrictions.

The client-side bridge is a local Node process. It forwards JSON-RPC traffic to the appliance’s `/mcp` endpoint over HTTPS. You need MCP enabled on Netmon 7.0.20 or later, an account with the `API` permission, and a personal token with the required `mcp:*` scopes. When the bridge runs outside Claude Desktop, use Node 18 or later. A self-signed appliance certificate makes a direct HTTP entry fail in Claude Code, so the bridge is the relevant setup.

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- inspect Netmon devices and interfaces
- find Suricata alerts and syslog records
- review NetFlow data and captures
- check Windows-agent information
- identify hosts that are down

## Example prompts
- Show me the Netmon devices that are currently down.
- Find Suricata alerts from last week and group them by host.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33989
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81163
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119231
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47577
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43902

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md