Atlas / MCP servers / mechubsec / rustjunosmcp

rustjunosmcpBLOCK

Name: rustjunosmcp
Author: mechubsec

mcp/mechubsec/rustjunosmcp

MCP server by mechubsec · juniper · junos · mcp · Audited 2026-10-11

⚑ Report / re-scan Source ↗

MCP server for Juniper Junos devices, built on rustnetconf.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

—

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

rust-junosmcp

One MCP server for Juniper Junos and SRX devices, in Rust a mechub project — sovereign network-security automation

Unofficial / community project. This repository is an independent, community-driven project. It is not affiliated with, endorsed by, sponsored by, or supported by Hewlett Packard Enterprise or Juniper Networks. "HPE", "Juniper", "SRX", "JUNOS", "Security Director" and "Juniper Mist" are trademarks of their respective owners and are used here only to describe what this software interoperates with. Please direct support and licensing questions about those products to the respective vendors.

A Model Context Protocol server for Juniper Junos and SRX devices, written in Rust. The single rust-junosmcp process exposes the core Junos tools and, by default, the SRX security workflows through one tool registry and endpoint. It is drop-in compatible with Juniper/junos-mcp-server on the inventory format and core tool surface, but built on async Rust (rustEZ + rustnetconf) instead of PyEZ.

Beyond Juniper/junos-mcp-server

Drop-in on devices.json and the core tools — plus a lot the Python/PyEZ server doesn't have:

Safer config — commit_check_config (validate, never commit), confirmed commits with auto-rollback, and discard_candidate to unstick a dirty candidate.
Device lifecycle — staged upgrade_junos (image → install → reboot → verify), SCP transfer_file/fetch_file, PFE commands.
Scale & UX — parallel session-pooled batch (~1.7× faster), | last N/| count

Read from source at commit 160c40382bb8OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (oci)

claude mcp add rustjunosmcp:0.27.5 -- docker run -i --rm ghcr.io/mechubsec/rustjunosmcp:0.27.5:None stdio

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (17 observation(s))
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (25)

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

rust-junosmcp-core/src/inventory.rs:593

"ssh_config":"/home/u/.ssh/config_jh",

Why it matters. touches a credential store

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

rust-junosmcp-core/src/inventory.rs:598

assert_eq!(e.ssh_config, Some(PathBuf::from("/home/u/.ssh/config_jh")));

Why it matters. touches a credential store

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

rust-junosmcp-core/src/tools/transfer_file.rs:190

let s = scrub_scp_stderr("Load key \"/root/.ssh/id_ed25519\": invalid format");

Why it matters. touches a credential store

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

rust-junosmcp-core/src/tools/transfer_file.rs:2170

private_key_path: "/etc/jmcp/ssh/id_ed25519".into(),

Why it matters. touches a credential store

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

packaging/systemd/rust-junosmcp.service:69

IPAddressDeny=169.254.169.254/32

Why it matters. cloud metadata endpoint: the classic SSRF credential grab