Cisco FMC Firewall Operations

MCP Server

Repository: CiscoDevNet/CiscoFMC-MCP-server-community
Transport: HTTP (http://<host>:8000/mcp) — requires HTTPS reverse proxy for production
Install: git clone + pip install -r requirements.txt + python -m sfw_mcp_fmc.server (or Docker)
Requires: FMC_BASE_URL, FMC_USERNAME, FMC_PASSWORD

Tool	What It Does
`list_fmc_profiles`	Discover all configured FMC instances (single or multi-FMC mode). Returns profile IDs, display names, and aliases. Use this first to select which FMC to query.
`find_rules_by_ip_or_fqdn`	Search rules within a specific access policy by IP address or FQDN. Matches source/destination network objects against the given indicator.
`find_rules_for_target`	Resolve FTD devices or HA clusters to their assigned access policies, then search those policies. Use when you know the firewall device name but not the policy name.
`search_access_rules`	FMC-wide rule search with multiple filter types: network indicators (IP, FQDN), identity indicators (SGT tags, realm users/groups), and policy name filters. The most powerful search tool.