Drumworks/ssid-mcp

**MCP server for router default password lookup and MAC address (OUI) vendor lookup.**
ssid-mcp gives an AI agent four typed tools over ssid.ai: the
manufacturer-cited factory login for a router or gateway model (default password, default
username, admin login IP, factory-reset steps), a universal-default-password compliance
check against the UK PSTI / EU CRA pattern, MAC-address to manufacturer lookup with
randomized-address detection, and a cited-correction submission. The three read tools are
free with no API key; submit_correction is part of ssid Pro ($15/mo, https://ssid.ai/pricing).
(ssid.ai is the branded tool at that domain, not the generic "SSID" WiFi-network-name
term.)
Install
Add to any MCP-capable host (Claude Desktop, Cursor, etc.). No API key needed.
Node 18 or newer.
Also available over Streamable HTTP for clients that don't spawn a stdio child process:
POST https://ssid.ai/mcp/http (JSON-RPC 2.0, same four tools, initialize negotiates
protocol 2025-06-18).
Tools
get_router_defaults({ slug }) or get_router_defaults({ brand, model })
The factory login for a router or gateway model, cited to the manufacturer's own
documentation: default gateway IP, login host, admin username and password, credential
type, factory-reset steps, and the source URL. Null credential fields are the answer, not
a gap — credType and credTypeMeaning say why there is no factory password, so an agent
is never left to fill a blank with admin/admin. Brand + model is an exact resolve, not a
search: an inexact model returns up to five candidate slugs within that brand.
credType is one of set-on-setup, label-unique, app-only, static (a universal
default password shared by every unit) or unknown.
check_router_compliance({ slug })
Whether a router model still ships a universal default password — the pattern prohibited
for consumer connectable products under the UK PSTI Act (in force April 2024) and targeted
by the EU Cyber Resilience Act — read from the manufacturer-cited credential type, with the
Router Compliance Index totals for context. A documentation
reading, not legal advice; every result carries a basis line saying so.
lookup_mac({ mac })
Vendor, OUI, kind (universal / randomized / multicast / invalid), a randomized flag,
confidence and the source. Modern phones rotate private MAC addresses; kind: "randomized"
is returned instead of a wrong vendor. For the router's factory login, call
get_router_defaults next.
submit_correction({ slug, field, proposedValue, sourceUrl })
Propose a fix to a router model's default login IP, username, password, credential type,
or reset steps. Requires an official manufacturer sourceUrl — never applied
automatically, queued for verification against that source. Needs an ssid Pro key
(SSID_API_KEY, $15/mo at https://ssid.ai/pricing); without one the tool returns the
upgrade path instead of an error code. Humans can still report a wrong value for free at
https://ssid.ai/trust.
The dataset behind it
Numbers below were read from the live API at publish time (2026-09-11). Re-query
https://ssid.ai/compliance/data.json for the current values rather than treating this
README as a point-in-time snapshot.
| Metric | Value | Source |
|---|---|---|
| Router / gateway / mesh / AP models tracked | 424 | Manufacturer documentation, per-model cited |
| No longer ship a universal default password | **72%** (307 of 424) | Compliance Index |
| — set at first setup | 128 | |
| — unique password on the device label | 131 | |