Back to Browse

Iot Mcp Servers MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for the Eclipse Ditto digital twin HTTP API (things, policies, connections, more).

About

MCP server for the Eclipse Ditto digital twin HTTP API (things, policies, connections, more).

Security Report

4.8
Use Caution4.8High Risk

This IoT MCP server for Eclipse Ditto demonstrates solid security practices with proper authentication handling, appropriate input validation, and well-scoped permissions matching its stated purpose. Environment variables are used correctly for credential storage, and dangerous operations like deletes require explicit confirmation. Minor code quality observations around exception handling and logging specificity do not materially impact the security posture. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Base URL of the Ditto HTTP API, e.g. http://localhost:8080Optional

Environment variable: DITTO_BASE_URL

Basic auth username for the Things/Policies/Messages/Search APIOptional

Environment variable: DITTO_USERNAME

Basic auth password for the Things/Policies/Messages/Search APIRequired

Environment variable: DITTO_PASSWORD

Bearer token, used instead of Basic auth for the same APIRequired

Environment variable: DITTO_BEARER_TOKEN

Basic auth username for the separate DevOps/Connections realmOptional

Environment variable: DITTO_DEVOPS_USERNAME

Basic auth password for the separate DevOps/Connections realmRequired

Environment variable: DITTO_DEVOPS_PASSWORD

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-nagarjunr-eclipse-ditto": {
      "env": {
        "DITTO_BASE_URL": "your-ditto-base-url-here",
        "DITTO_PASSWORD": "your-ditto-password-here",
        "DITTO_USERNAME": "your-ditto-username-here",
        "DITTO_BEARER_TOKEN": "your-ditto-bearer-token-here",
        "DITTO_DEVOPS_PASSWORD": "your-ditto-devops-password-here",
        "DITTO_DEVOPS_USERNAME": "your-ditto-devops-username-here"
      },
      "args": [
        "eclipse-ditto-mcp-server"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

IoT MCP Servers

MCP (Model Context Protocol) servers for IoT platforms — giving AI agents full read/write access to device registries, digital twins, and telemetry.

Python License: MIT CI MCP Registry

Servers

ServerPlatformToolsPackage
eclipse-dittoEclipse Ditto digital twins (open source; also compatible with Bosch IoT Things and other Ditto-based deployments)48PyPI
mqttMQTT 5.0 — the standard IoT pub/sub protocol (any broker: Mosquitto, EMQX, HiveMQ, AWS IoT Core, etc.)7PyPI
aws-iot-coreAWS IoT Core — device registry, shadows, jobs, rules, messaging48PyPI
azure-iot-hubAzure IoT Hub — device registry, twins, direct methods, jobs, messaging25PyPI
sparkplug-bSparkplug B — MQTT + protobuf convention for industrial/SCADA data (birth/death, sequenced metrics, commands)13PyPI

Each row links to that server's README for its full tool list, required environment variables, and setup/testing notes.

Structure

Each server is a standalone directory under this repo — its own pyproject.toml, uv.lock, Dockerfile, and mcp.json example config. No shared library layer: every server is independently runnable and dockerizable.

<server-name>/
├── <server-name>mcpserver.py   # FastMCP server (single file)
├── pyproject.toml              # own dependencies
├── uv.lock
├── Dockerfile
├── mcp.json                    # example MCP client config
└── README.md                   # tools, env vars, setup for this server

Requirements

  • Python 3.12+
  • uv for dependency management and running servers
  • Docker, only if you want to run a server's own test suite against a real/emulated instance (see that server's README)

Quick start

Install straight from PyPI with uv or pipx — no clone needed:

uvx eclipse-ditto-mcp-server      # or: mqtt5-mcp-server / aws-iot-core-mcp-server / azure-iot-hub-mcp-server / sparkplug-b-mcp-server

Or run from a clone of this repo:

git clone https://github.com/nagarjunr/iot-mcp-servers.git
cd iot-mcp-servers/<server-name>
uv sync
uv run <server-name>mcpserver.py

Each server reads its configuration from environment variables (connection strings, broker host, credentials, etc.) — see that server's README for the full list.

Using with an MCP client

Each server directory has an mcp.json with a ready-to-use client config example (Claude Desktop / VS Code / any MCP client). Copy the relevant block into your client's config, filling in the environment variables described in that server's README. All servers are also listed on the official MCP registry under io.github.nagarjunr/<server-name>.

Design principles

  • Read-only by default, writes explicit. Tools default to read/list operations. Any write tool is called out explicitly in that server's README. Create/replace tools default to create-only (overwrite=False) — race-free via conditional headers where the target API supports them (e.g. Ditto's If-None-Match), otherwise a documented describe-then-create check. Delete tools, where a server needs them, require an explicit confirm=True — there is no bulk/cascading delete.
  • No vendor lock-in. Connectors target the open protocol/API (e.g. Eclipse Ditto's HTTP API, the MQTT wire protocol), not a single vendor's proprietary extension of it, so they work against any compatible deployment. Exception: cloud-provider services like AWS IoT Core are inherently vendor-specific — no lock-in claim applies there, but no cross-vendor abstraction is invented either.
  • Tested against the real thing, with documented exceptions where no free real instance exists. Each server is verified against a real instance of the target platform (usually via Docker), not hand-rolled mocks. mqtt and sparkplug-b run against a real Eclipse Mosquitto broker (sparkplug-b's tests simulate the "device" side with the same real protocol library the server uses, so both ends of the wire are genuine). aws-iot-core is tested against moto (AWS IoT Core has no free local emulator; LocalStack's IoT support requires a paid plan). azure-iot-hub is tested against respx for its REST tools; its one AMQP-only tool (send_c2d_message — Azure IoT Hub's cloud-to-device send has no REST binding) is tested against a local fake AMQP endpoint built for this repo, since no moto-equivalent exists for Azure and no free Azure IoT Hub emulator exists at all. These are genuine emulators/protocol-level fakes, not naive mocks — see each server's README for specifics and caveats.

Contributing

Adding a new server? Follow the structure and design principles above, add its row to the Servers table, and make sure its test suite runs against a real or faithfully-emulated instance of the target platform (document any exception, as aws-iot-core and azure-iot-hub do). Issues and PRs welcome.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!