Back to Browse

Routerbase MCP Server

Developer ToolsModerate6.1MCP RegistryLocal
Free

Server data from the Official MCP Registry

Router defaults, PSTI/CRA compliance checks, and MAC lookup via the hosted ssid.ai MCP service.

About

Router defaults, PSTI/CRA compliance checks, and MAC lookup via the hosted ssid.ai MCP service.

Security Report

6.1
Moderate6.1Moderate Risk

routerbase is a thin forwarding client that sends tool calls to the hosted ssid.ai MCP endpoint, with an optional Bearer API key read from an environment variable and no hardcoded secrets, shell execution, or filesystem access. The network permission is expected for a router-defaults data service, and the only notable concerns are that the endpoint can be overridden via SSID_API_BASE, which would send the API key to any host, and that the upstream wire format is a documented reconstruction rather than a verified contract. Code quality is good, with zod validation, honest error handling, and offline tests. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-routerbase": {
      "args": [
        "-y",
        "@reneturcios/routerbase"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

routerbase

routerbase answers three kinds of questions about home routers: what a model's factory login defaults are (gateway, login host, username/password, credential type, reset steps, and the manufacturer source the record cites), whether a model complies with the UK PSTI and EU CRA rules against universal default passwords, and who made the network hardware behind a MAC address. One binary serves a command-line interface and a stdio MCP server.

The data lives in a hosted service. routerbase is a local stdio server that forwards each call as a JSON-RPC tools/call request to the ssid.ai MCP endpoint at https://ssid.ai/mcp/http; that wire shape is a documented reconstruction from the service's public description. Point it elsewhere with SSID_API_BASE (a host or a full endpoint URL).

Read tools are free with no key. Setting SSID_API_KEY raises the rate limits and is sent as a Bearer token when present. submit_correction is different: the upstream gates that write tool behind its Pro tier, so without SSID_API_KEY routerbase refuses with an explanation and sends nothing — a correction is never reported as submitted when it was not.

For lookup_mac, the address classification is worked out locally, for real: the address is parsed and normalised (colon, hyphen, dot, and bare-hex forms are accepted), the multicast and locally-administered bits of the first octet decide between multicast, randomized, and universal, and anything unparseable is invalid. Only the vendor/OUI part comes from the upstream call, and an invalid address is never sent upstream.

Install

npx @reneturcios/routerbase lookup_mac 00:1A:2B:3C:4D:5E

Or run the container image:

docker run -i ghcr.io/cloudcorprecords/routerbase

The container defaults to the MCP server (see below). Pass CLI arguments to use it as a CLI instead.

CLI

routerbase get_router_defaults --slug <slug>
routerbase get_router_defaults --brand <brand> --model <model>
routerbase check_router_compliance --slug <slug>
routerbase lookup_mac 00:1A:2B:3C:4D:5E
routerbase submit_correction --slug <slug> --field gateway_ip \
  --proposed-value 192.168.0.1 --source-url https://example.com/manual

routerbase --version

Successful commands print the result as JSON. Exit codes: 0 on success, 1 when a call fails (including an upstream error or the correction key gate), 2 for usage errors. get_router_defaults needs either --slug or both --brand and --model; anything less is an honest error, not a guess.

MCP server

One bin serves both faces. The mcp subcommand starts a stdio MCP server:

npx -y @reneturcios/routerbase mcp

MCP client configuration:

{
  "mcpServers": {
    "routerbase": {
      "command": "npx",
      "args": ["-y", "@reneturcios/routerbase", "mcp"],
      "env": {
        "SSID_API_KEY": "your key, optional for read tools"
      }
    }
  }
}

Tools

ToolInputWhat it returns
get_router_defaultsslug, or brand + modelThe manufacturer-cited factory login record for the model.
check_router_complianceslug (required)The model's standing under UK PSTI / EU CRA universal-default-password rules.
lookup_macmac (required)Local classification (universal / randomized / multicast / invalid), the normalised address and OUI, plus the upstream vendor payload.
submit_correctionslug, field, proposedValue, sourceUrl (all required)Queues a cited correction for verification. Requires SSID_API_KEY (Pro tier).

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner over test/*.test.ts, no network (fake fetch fixtures)
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!