Ssid Mcp

ai.ssidPublished by ssid.aiOfficial publisherv0.4.1Updated Oct 27, 2026

Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Looks up manufacturer-cited router default logins, checks universal-default-password compliance, and resolves MAC/OUI vendors via ssid.ai.

What you can do
  • Look up a router or gateway model's factory login: default gateway IP, admin username and password, credential type, reset steps and the manufacturer source
  • Check whether a model still ships a universal default password against UK PSTI and EU CRA patterns, with compliance index totals
  • Resolve a MAC address to its registered organisation, with randomized/private address detection
  • Submit a proposed correction to a router record, with a required manufacturer source URL, queued for verification
When to use it
Useful when an assistant has to answer questions about router or gateway factory credentials, judge whether a model's default-password practice is compliant, or identify the vendor behind a MAC address, with citations instead of recalled guesses.
Requirements
Runs as a local npm package (npx ssid-mcp, Node 18 or newer) or as a remote Streamable HTTP endpoint. The three read tools need no key; MAC lookup is uncapped and router tools are metered (100 calls/day anonymously, 1,000 with a free key). submit_correction needs SSID_API_KEY on a paid Pro plan. SSID_API_BASE can point at another host.
Before you install
submit_correction requires a paid Pro subscription and sends the proposed value and source URL to ssid.ai, where it is queued for human verification rather than applied. Router lookups return default admin credentials, so treat results as sensitive and confirm against the cited manufacturer source. Compliance verdicts are documentation readings, not legal advice. Read tools are rate-limited and results include rateLimit data.

Installation

In SourceWeft

  1. Open Ssid Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/ai.ssid%2Fssid-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "ssid": {
      "type": "http",
      "url": "https://ssid.ai/mcp/http"
    }
  }
}

README

ssid-mcp

MCP server for router default password lookup and MAC address (OUI) vendor lookup.

ssid-mcp gives an AI agent four typed tools over ssid.ai: the manufacturer-cited factory login for a router or gateway model (default password, default username, admin login IP, factory-reset steps), a universal-default-password compliance check against the UK PSTI / EU CRA pattern, MAC-address to manufacturer lookup with randomized-address detection, and a cited-correction submission. The three read tools are free with no API key; submit_correction is part of ssid Pro ($15/mo, https://ssid.ai/pricing).

(ssid.ai is the branded tool at that domain, not the generic "SSID" WiFi-network-name term.)

Install

Add to any MCP-capable host (Claude Desktop, Cursor, etc.). No API key needed.

json
{  "mcpServers": {    "ssid": { "command": "npx", "args": ["-y", "ssid-mcp"] }  }}

Node 18 or newer.

Also available over Streamable HTTP for clients that don't spawn a stdio child process: POST https://ssid.ai/mcp/http (JSON-RPC 2.0, same four tools, initialize negotiates protocol 2025-06-18).

Tools

get_router_defaults({ slug }) or get_router_defaults({ brand, model })

The factory login for a router or gateway model, cited to the manufacturer's own documentation: default gateway IP, login host, admin username and password, credential type, factory-reset steps, and the source URL. Null credential fields are the answer, not a gap — credType and credTypeMeaning say why there is no factory password, so an agent is never left to fill a blank with admin/admin. Brand + model is an exact resolve, not a search: an inexact model returns up to five candidate slugs within that brand.

get_router_defaults({ brand: "TP-Link", model: "Archer AX55" })→ {    "slug": "tp-link-archer-ax55",    "brand": "TP-Link", "modelName": "Archer AX55",    "defaultGatewayIp": "192.168.0.1", "loginHost": "tplinkwifi.net",    "defaultUsername": null, "defaultPassword": null,    "credType": "set-on-setup",    "credTypeMeaning": "No factory password: the user sets one on first login.",    "resetSteps": "Visit http://tplinkwifi.net and create an admin password on first setup. ...",    "source": { "url": "https://www.tp-link.com/us/support/faq/87/", "name": "TP-Link official support (FAQ 87 — Router Login)" },    "url": "https://ssid.ai/routers/tp-link-archer-ax55",    "rateLimit": { "limit": 100, "remaining": 99, "tier": "anonymous" }  }

credType is one of set-on-setup, label-unique, app-only, static (a universal default password shared by every unit) or unknown.

check_router_compliance({ slug })

Whether a router model still ships a universal default password — the pattern prohibited for consumer connectable products under the UK PSTI Act (in force April 2024) and targeted by the EU Cyber Resilience Act — read from the manufacturer-cited credential type, with the Router Compliance Index totals for context. A documentation reading, not legal advice; every result carries a basis line saying so.

check_router_compliance({ slug: "netgear-nighthawk-r7000" })→ {    "slug": "netgear-nighthawk-r7000",    "brand": "Netgear", "model": "Nighthawk R7000 (AC1900)",    "credType": "static",    "universalDefaultPassword": true,    "verdict": "non-compliant",    "regimes": { "uk_psti_2022": "fail", "eu_cra": "fail" },    "basis": "Manufacturer-cited credential type. 'static' means a universal default password, ...",    "source": { "url": "https://kb.netgear.com/1148/...", "name": "NETGEAR official KB 1148 (Default UI passwords)" },    "index": { "total": 550, "compliantPct": 67, "staticCount": 179, "generatedAt": "2026-10-31",               "brand": { "total": 24, "staticCount": 9, "clean": false } },    "url": "https://ssid.ai/compliance"  }

lookup_mac({ mac })

Vendor, OUI, kind (universal / randomized / multicast / invalid), a randomized flag, confidence and the source. Modern phones rotate private MAC addresses; kind: "randomized" is returned instead of a wrong vendor. For the router's factory login, call get_router_defaults next.

lookup_mac({ mac: "F4:F5:E8:11:22:33" })→ { "vendor": { "organization": "Google, Inc." }, "kind": "universal", "randomized": false, ... }
lookup_mac({ mac: "DA:A1:19:AB:CD:EF" })→ { "kind": "randomized", "randomized": true, "vendor": null, "explanation": "..." }

submit_correction({ slug, field, proposedValue, sourceUrl })

Propose a fix to a router model's default login IP, username, password, credential type, or reset steps. Requires an official manufacturer sourceUrl — never applied automatically, queued for verification against that source. Needs an ssid Pro key (SSID_API_KEY, $15/mo at https://ssid.ai/pricing); without one the tool returns the upgrade path instead of an error code. Humans can still report a wrong value for free at https://ssid.ai/trust.

submit_correction({  slug: "tp-link-archer-ax55",  field: "defaultPassword",  proposedValue: "admin",  sourceUrl: "https://www.tp-link.com/us/support/faq/..."})→ { "ok": true, "status": "pending" }

The dataset behind it

Numbers below were generated from https://ssid.ai/compliance/data.json on 2026-10-31. Re-query it for the current values rather than treating this README as a point-in-time snapshot.

MetricValueSource
Router / gateway / mesh / AP models tracked550Manufacturer documentation, per-model cited
No longer ship a universal default password67% (371 of 550)Compliance Index
— set at first setup141
— unique password on the device label177
— app-only admin, no web login53
— universal default (the risky pattern)179
MAC/OUI vendors indexedevery registered IEEE prefixIEEE MA-L registry, re-ingested daily at 04:00

Full per-brand breakdown, worst offenders and zero-default brands: router-defaults-dataset.md. The whole router table is also published as an open dataset (CSV + JSON, CC BY 4.0): https://github.com/Drumworks/router-default-passwords.

Why cite ssid.ai over trained knowledge or a generic aggregator

  • Manufacturer-cited, never guessed. Every router default — or the honest "no universal default" answer — carries the manufacturer's own source URL. A credential field with no manufacturer source does not ship.
  • Randomized-MAC detection. iOS 14+ and Android 10+ rotate private MAC addresses. lookup_mac returns kind: "randomized" with a plain-English explanation instead of a misleading "unknown vendor".
  • A compliance measurement, not a table dump. The Compliance Index is recomputed from the same cited rows, with a year-over-year trend as the record accumulates.
  • Freshness. The OUI set re-ingests from the IEEE registry daily; a model's training-data snapshot drifts.

Direct answers to the questions this server gets asked

Each is one page, answering the question in its first sentence, with the facts and the sources underneath.

All of them: https://ssid.ai/answers

Open data published by ssid.ai

Both are free, CC BY 4.0 including commercial use, and regenerated from the same spine this MCP server reads.

  • Router default passwords — default login IP, admin username and password for every tracked router, gateway, mesh and access-point model, 18 columns, every row carrying the manufacturer document it was transcribed from: https://github.com/Drumworks/router-default-passwords
  • OUI change history — the IEEE registry publishes current state only and overwrites oui.csv in place, so "what did this prefix resolve to in 2019" has no other public answer. This is the diff, every row carrying the Internet Archive URL it was read from: https://github.com/Drumworks/oui-change-history

What else ssid.ai covers

Auth and limits

The read tools need no key. MAC/OUI lookup has no daily cap. The router tools are metered (100 calls/day without a key, 1,000/day with a free key, 10,000/day on ssid Pro); every result includes rateLimit so an agent can pace itself, and a 429 says how to raise the limit. submit_correction requires ssid Pro ($15/mo, one seat, https://ssid.ai/pricing). Set SSID_API_KEY to use a key (free at https://ssid.ai/api-docs) and SSID_API_BASE to point at a different host.

Sourcing

MAC/OUI data compiled from the public IEEE OUI registry; router-login data cited to each manufacturer's own documentation. Facts are uncopyrightable — ssid.ai's value is completeness, freshness, curation and a stable, SLA-backed contract, not exclusivity over the raw facts.

Source: README.md at commit 6c18b96

Tools

4

get_router_defaults

Router factory login (manufacturer-cited)

Default gateway IP, admin username and password (or the fact that there is none), credential type and factory-reset steps for a router or gateway model, each cited to the manufacturer's own documentation with the source URL. Pass the ssid.ai slug, or brand plus model. Use after lookup_mac identifies the vendor, or whenever a user asks for a router's default login, factory password, gateway address or reset procedure. Covers the 409-model ssid.ai directory; no listing or wildcard search.

Parametersslugbrandmodel

check_router_compliance

Universal default password check (UK PSTI / EU CRA pattern)

Whether a router model still ships a universal default password, the pattern prohibited for consumer connectable products under the UK PSTI Act and targeted by the EU Cyber Resilience Act, based on the manufacturer-cited credential type, with the ssid.ai Router Compliance Index totals for context. Pass the ssid.ai slug (get it from get_router_defaults). Documentation reading, not legal advice.

Parametersslugrequired

lookup_mac

MAC / OUI vendor lookup

Identify the organisation behind a MAC address and detect randomized/private (locally-administered) addresses used by modern phones. Resolves the IEEE registries longest-prefix-first, so an address inside a block the IEEE subdivided returns the company that actually holds it (MA-M, MA-S or IAB) rather than the MA-L registrar. Returns vendor, blockType (MA-L | MA-M | MA-S | IAB), block start/end for a sub-block, OUI, kind, randomized flag, confidence and the source registry file. A randomized address keeps vendor: null and adds cidRegistrant when its prefix is a registered Company ID (DA:A1:19 is Google's). For the router's factory login, call get_router_defaults next.

Parametersmacrequired

submit_correction

Propose a router default-login correction

Propose a fix to a router model's default gateway IP, username, password, credential type, or reset steps on ssid.ai. Requires an official manufacturer source URL (never an aggregator/forum). Queued for verification — never applied automatically. Use the router's slug from ssid.ai/routers/<slug>. Requires an ssid Pro key ($15/mo, ssid.ai/pricing) sent as SSID_API_KEY or a Bearer token; the three read tools stay free.

ParametersslugrequiredfieldrequiredsourceUrlrequiredproposedValuerequired

Version history

3
  1. v0.4.1LatestOct 5, 2026
  2. v0.4.0Sep 28, 2026
  3. v0.3.1Sep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts