Add verify_ssl Option

[BMeach]

Proposed functionality

I would like the ability to add VERIFY_SSL=FALSE as an env var to disable SSL checking as the MCP server currently does not work on NetBox instances with Self Signed Certs

Use case

Gives users the ability to skip SSL validation on Self Signed certs.

External dependencies

No response

[BMeach]

Currently using Claude and the default configuration defined in the README.md I get the following response

Prompt:
What cisco devices are in my network from NetBox?

Response:
I'll help you find the Cisco devices in your network from NetBox. Let me query your NetBox instance for devices from Cisco.

netbox_get_objects
MCP Request

{
  `filters`: {
    `manufacturer`: `cisco`
  },
  `object_type`: `devices`
}

MCP Response

Error executing tool netbox_get_objects: HTTPSConnectionPool(host='192.168.130.76', port=443): Max retries exceeded with url: /api/dcim/devices/?manufacturer=cisco (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1028)')))

[geoffdavis]

Claude suggested that I could convince uv to do the right thing by setting the appropriate environment variables in the MCP configuration, if I had a copy of the self-signed cert somewhere on disk.

    "netbox": {
      "command": "uv",
      "args": [
        "--directory",
        "/Users/gadavis/src/netbox-mcp-server",
        "run",
        "server.py"
      ],
      "env": {
        "NETBOX_URL": "https://netbox.example.com/",
        "NETBOX_TOKEN": "MYTOKEN",
        "REQUESTS_CA_BUNDLE": "/Users/gadavis/foo_ca.crt",
        "SSL_CERT_FILE": "/Users/gadavis/foo_ca.crt",
        "CURL_CA_BUNDLE": "/Users/gadavis/foo_ca.crt"
      },
      "alwaysAllow": [
        "netbox_get_objects"
      ]
    }

[2o1o0]

On my side, as you need to clone the repo, I went in the code and changed the verify_ssl to False

https://github.com/netboxlabs/netbox-mcp-server/blob/main/netbox_client.py#L150