Connect Your Network Source of Truth to AI
The agent reads your NetBox, Nautobot, and live CLIs — read-only — and builds runnable labs from real data.
See It in Action
Describe a network — or point the agent at your NetBox — and get a running multi-vendor lab you can SSH into.
Trusted by network engineers worldwide
Integrations that respect your source of truth
Three MCP connectors ship in the product — read-only by design, wired for the change-rehearsal loop.
Read-only by construction
The agent is granted an allow-list of read tools — exact names, never a wildcard. Write and delete tools are never attached.
The alternative
DIY agent wiring hands the model a full API token and hopes the system prompt says “don't write.”
Source of truth → running lab
NetBox/Nautobot records become a deployed multi-vendor lab you can SSH into — rehearse the change before production.
The alternative
Topology exporters hand you YAML to maintain; model-based twins can't run a single show command.
Live network, still read-only
show-command access via Nornir with credentials brokered from your Nautobot at call time — NetPilot never stores them.
The alternative
Homegrown scripts with device passwords in env vars and nothing between the model and enable mode.
Three built in, then anything
NetBox, Nautobot, and Nornir ship in-product on every plan. Any MCP-enabled tool connects on Signature & Enterprise.
The alternative
Point integrations cover one inventory tool; every new system in your stack means more glue code for your team.
What does each NetBox, Nautobot, and Nornir connector do?
Every connector exposes a curated, read-only tool surface to the agent — nothing more.
NetBox
Speaks to the official read-only NetBox MCP server you host: devices, sites, prefixes, object search, and changelogs. Ask “what changed this week?” or “build a lab from site DC-East” — the agent reads the records and does the rest.
Nautobot
The full read surface of your Nautobot MCP server: devices, interfaces, racks, IPAM, circuits, tenants, GraphQL queries, and job logs. The mutating tools — create, update, delete, run-job — are never attached.
Nornir
Live read-only CLI access to your real network: show commands only, enforced server-side. Inventory and credentials are brokered from your Nautobot at call time and executed in your environment — NetPilot never stores them.
These three are the starting point, not the list. With Signature & Enterprise, NetPilot connects to anything MCP-enabled — and every integration is custom-built to fit your workflow: if it has an API, NetPilot connects to it. Talk to us about your stack →
From records to a running network
The agent turns source-of-truth data into a deployed, verifiable lab — and checks it against reality.
The agent reads your source of truth
Devices, interfaces, prefixes, free IPs, changelogs — the agent queries your NetBox or Nautobot directly in chat and designs the matching topology from what's really there.
From records to running configs
Per-vendor configs generated to match the deployed reality — then the lab boots on real network OSes (9+ and growing) you can SSH into and verify by hand.
Validate — source of truth vs lab vs live
Snapshot and diff lab state, spot-check the live network with read-only show commands, and catch drift between intended and actual before it bites a change window.
What you can do with a connector enabled
Ask in plain English — the agent picks the right read-only tools, and everything it builds is verifiable on real CLIs.
Twin lab from a NetBox site
“Build a lab from my NetBox site DC-East” — the agent pulls devices, interfaces, and prefixes, then deploys a matching multi-vendor lab on real NOSes.
IPAM answers in seconds
Free /28s, available IPs, VLAN and VRF lookups straight from Nautobot — asked and answered in the same chat that builds the lab.
Change rehearsal
Pull the affected segment from your source of truth, deploy the twin, apply the candidate change, and diff pre/post state — before production.
Drift detection
Compare intended state (NetBox/Nautobot records) against live state (show-command output) in one conversation and get the delta.
Read-only live checks
“Run show ip bgp summary on core-rtr-01” — Nornir executes read-only show commands with credentials brokered from your Nautobot, never stored.
Changelog forensics
“What changed in NetBox this week?” — the agent reads changelogs and job logs, without the ability to run or modify anything.
NetPilot connectors vs the DIY pipeline
The honest comparison: exporter scripts and hand-wired MCP servers work — they just cost engineering time NetPilot spends for you.
Bottom line
Pick the DIY pipeline when you need:
- •Free and open source, with full control of every YAML file and image
- •Runs fully offline on your own hardware
Pick NetPilot when you need:
- •Connector in minutes, read-only by construction — no glue code to write or maintain
- •The agent turns source-of-truth records into a running, SSH-able lab and validates the change
Verdict:DIY wins for hands-on control and zero budget; NetPilot wins when the goal is rehearsing real changes from real data — connected, deployed, and validated in one conversation.
Frequently asked questions
How teams connect their source of truth to NetPilot — safely
Where the connectors pay off
Network Change Validation
Rehearse BGP, ACL, and routing changes on a runnable mirror before production.
Network Digital Twin
A twin you can actually run — built from your source of truth, real CLIs via SSH.
NetPilot for Enterprise
Two-way MCP, custom integrations, on-prem options, and founder-led onboarding.
Connect your source of truth
Talk to us about wiring NetPilot into your stack — or add a NetBox, Nautobot, or Nornir connector yourself and ask the agent what's really in your network.
Bigger stack? Talk to us about custom MCP integrations