Integration

ZeroTier Central integration

ZeroTier Central (central.zerotier.com, also called New Central) manages ZeroTier virtual networks organized as organizations, network groups and networks. An agent can create, configure and delete networks and network groups, list the devices on a network and authorize, deauthorize, reject, add, remove or re-address them, set flow rules (beta), grant or revoke IAM roles, invite users, read the subscription, and manage webhooks for organization events. Service accounts, API keys, webhook secret rotation, creating or deleting organizations and deleting the current user are not exposed, and webhook signing secret values are never returned; Legacy Central accounts (my.zerotier.com) use the separate ZeroTier Legacy Central API. Authentication is a service account API token (Essential plan or above), sent as Authorization: Bearer <token>.

Connect ZeroTier Central How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in ZeroTier Central.Built from the 51 ZeroTier Central tools below, on the connection you add once.

What you can do with ZeroTier Central

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Iam, 12 operations

add_network_group_iam_rolesAdd network group iam rolesPOSTGrant additional IAM roles to users on this network group without replacing existing roles.
add_network_iam_rolesAdd network iam rolesPOSTGrant additional IAM roles to users on this network without replacing existing roles.
add_organization_iam_rolesAdd organization iam rolesPOSTGrants additional roles to principals on this organization. Existing roles are preserved.
get_network_group_iamGet network group iamGETRetrieve all IAM role assignments for this network group.
get_network_iamGet network iamGETRetrieve all IAM role assignments for this network.
get_organization_iamGet organization iamGETReturns the current IAM role assignments for an organization.
remove_network_group_iam_rolesRemove network group iam rolesDELETERevoke IAM roles from users on this network group.
remove_network_iam_rolesRemove network iam rolesDELETERevoke IAM roles from users on this network.
remove_organization_iam_rolesRemove organization iam rolesDELETERemoves specific role assignments from this organization.
replace_network_group_iam_rolesReplace network group iam rolesPUTReplace all IAM role assignments on this network group. Existing roles not included in the request are removed.
replace_network_iam_rolesReplace network iam rolesPUTReplace all IAM role assignments on this network. Existing roles not included in the request are removed.
replace_organization_iam_rolesReplace organization iam rolesPUTReplaces the entire IAM policy for this organization. All existing role assignments are overwritten.

Network, 6 operations

create_networkCreate networkPOSTCreate a new network within a network group.
delete_networkDelete networkDELETEPermanently delete a network and all its members.
get_networkGet networkGETRetrieve details for a specific network by ID.
list_network_group_networksList network group networksGETList all networks within a network group. Optionally include device statistics and check specific permissions.
list_networksList networksGETList all networks the authenticated user has access to. Optionally filter by organization, include device statistics, and check specific permissions.
update_networkUpdate networkPOSTUpdate the name, description, or configuration of a network. Only provided fields are updated.

Network group, 6 operations

create_network_groupCreate network groupPOSTCreates a new network group within an organization.
delete_network_groupDelete network groupDELETEPermanently delete a network group. The networks of the group are also deleted.
get_network_groupGet network groupGETRetrieve details for a specific network group by ID.
list_network_groupsList network groupsGETList all network groups the authenticated user has access to. Optionally filter by organization, include statistics, and check specific permissions.
list_organization_network_groupsList organization network groupsGETReturns all network groups within an organization the authenticated user has access to.
update_network_groupUpdate network groupPOSTUpdate the name or description of a network group.

Member, 5 operations

add_network_membersAdd network membersPOSTAdd one or more devices to the network. Devices are not authorized until explicitly authorized.
get_network_memberGet network memberGETRetrieve details for a specific device member on a network.
list_network_membersList network membersGETRetrieve all device members on the network.
remove_network_membersRemove network membersDELETERemove one or more devices from the network by device ID.
update_network_memberUpdate network memberPOSTUpdate the configuration of a specific device member on a network.

Webhook, 5 operations

create_webhookCreate webhookPOSTCreates a webhook that sends an organization's chosen events to an HTTPS URL as POST requests signed with X-ZTC-Signature. The URL must be a public fully-qualified domain name. Returns the webhook (secret values are not returned).
delete_webhookDelete webhookDELETEDeletes a webhook; its endpoint stops receiving the organization's events.
get_webhookGet webhookGETReturns one webhook: its target URL, subscribed event types, description, organization ID, secret metadata and timestamps. Secret values are not returned.
list_webhooksList webhooksGETLists the webhooks of an organization, each with its ID, target URL, subscribed event types, description, secret metadata and timestamps. Secret values are not returned.
update_webhookUpdate webhookPOSTUpdates a webhook's target URL, subscribed event types or description. Returns the updated webhook (secret values are not returned).

Org, 3 operations

get_organizationGet organizationGETReturns details of a specific organization.
list_organizationsList organizationsGETReturns all organizations the authenticated user has access to.
update_organizationUpdate organizationPOSTUpdates properties of an existing organization. Only provided fields are updated.

Authorize, 2 operations

authorize_network_memberAuthorize network memberPOSTAuthorize a specific device to communicate on the network.
authorize_network_membersAuthorize network membersPOSTAuthorize multiple devices on the network by device ID. Authorized devices can communicate on the network.

De authorize, 2 operations

deauthorize_network_memberDeauthorize network memberPOSTDeauthorize a specific device, preventing it from communicating on the network.
deauthorize_network_membersDeauthorize network membersPOSTDeauthorize multiple devices on the network by device ID. Deauthorized devices can no longer communicate on the network.

Flow rule, 2 operations

get_network_flow_rulesGet network flow rulesGETRetrieve the current flow rules for a network. Flow rules control how traffic is routed between devices. This endpoint is in beta and may change.
update_network_flow_rulesUpdate network flow rulesPOSTUpdate the flow rules for a network. Supports two modes: `custom` for raw flow rule source, and `isolation` for managed network isolation with service filters. This endpoint is in beta and may change.

Reject, 2 operations

reject_network_memberReject network memberPOSTReject a specific device, blocking it from joining the network.
reject_network_membersReject network membersPOSTReject multiple devices on the network by device ID. Rejected devices are blocked from joining the network.

Check permission, 1 operation

check_permissionsCheck permissionsPOSTBatch-checks whether the authenticated user has specific permissions on one or more resources.

Iam tree, 1 operation

get_organization_iam_treeGet organization iam treeGETReturns the full hierarchical IAM structure for the organization, showing role assignments across all nested resources.

Invite user, 1 operation

invite_users_to_organizationInvite users to organizationPOSTSends email invitations to one or more users to join an organization.

Principal, 1 operation

search_organization_principalsSearch organization principalsGETSearches for users within an organization by email. Used for IAM assignment UIs.

Subscription, 1 operation

get_organization_subscriptionGet organization subscriptionGETReturns the current subscription plan and feature entitlements for an organization.

User, 1 operation

update_current_userUpdate current userPOSTUpdates the first and last name of the user who owns the API token. Only the fields sent are changed; returns the user record (ID, email, first and last name).

Use ZeroTier Central from Claude Code, Cursor or Codex

Connect ZeroTier Central in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its ZeroTier Central operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect ZeroTier Central

Create your workspace
Sign up free. Nothing to install.
Connect ZeroTier Central once
Add your ZeroTier Central connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.