VMware NSX Security MCP Server

VMware NSX DFW microsegmentation and security MCP skill - 22 tools for distributed firewall policies/rules, security groups, VM tags, the DFW exclusion list, Traceflow packet tracing, and IDPS. It runs locally over stdio via the published package.

People who work with agent skills, ai skill and codex and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-15 · ★ 4 · #32 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

Python servers · how we verify → /methodology

01 · Install VMware NSX Security

before you install - you'll need

Set VMWARE_NSX_SECURITY_CONFIG before connecting.

Claude Code

claude mcp add zw008-vmware-nsx-security -- uvx vmware-nsx-security

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "zw008-vmware-nsx-security": {
      "command": "uvx",
      "args": [
        "vmware-nsx-security"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license no standard license detected - usage rights unclear; check the repo before commercial use

pypi package vmware-nsx-security - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.zw008 is GitHub-verified and matches the repo owner

03 · What VMware NSX Security can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.11.1 · 2026-09-15

No CLI read wrote ~/.vmware/audit.db - only MCP calls and CLI writes (@guarded) did. A live · vmware-aria resource list left the audit row count unchanged while the same read over MCP added a row. · Every CLI command…

v1.11.0 · 2026-09-12

CLI writes are authorised and audited under their MCP tool names. A deny rule · in ~/.vmware/rules.yaml names an operation, and the seven guarded CLI commands · were checked under their Python function names instead…

v1.10.0 · 2026-09-02

Breaking for automation. tag remove ran unattended and now asks twice, like · the three other destructive commands here. It takes no bypass flag, so a script · that called it without input will wait. Use --dry-run to…

04 · Who maintains VMware NSX Security

VMware NSX Security is maintained by zw008. We track 13 MCP servers from zw008 - 13 actively maintained, 114 combined GitHub stars, oldest repo from Feb 2026. Full record: all servers from zw008.

05 · Facts

repository: github.com/zw008/vmware-nsx-security
category: security - ranked #32 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-15)
registry: io.github.zw008/vmware-nsx-security (active, first published 2026-05-08 · 29 versions)
packages: pypi:vmware-nsx-security

06 · VMware NSX Security FAQ

What is VMware NSX Security?

Is VMware NSX Security still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-15 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install VMware NSX Security?

Run `uvx vmware-nsx-security`. The README documents one environment variable (VMWARE_NSX_SECURITY_CONFIG) to set first. Set VMWARE_NSX_SECURITY_CONFIG before connecting. You can also paste the ready-made client config above.

Does VMware NSX Security run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to VMware NSX Security

Alternatives to VMware NSX Security

Maintained security servers if VMware NSX Security isn't the fit.

Pairs well with

Servers that cover what VMware NSX Security doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · 1Claw Vault · Cybersec Toolkit · Change This File · Keyblind · Codemore

More Python MCP servers · VMware Pilot · VMware Storage · VMware VKS · Zwldarren Akshare One MCP · Tgms · see all