pf-network-docs

Turn a $5,000/yr IT Glue subscription into a local workflow — generate network topology docs, asset inventories, config sheets, and runbooks from CSV exports in minutes.

Installation

1. Download the pf-network-docs.plugin file
2. Open Claude Desktop and navigate to Settings > Plugins
3. Click Install Plugin and select the downloaded .plugin file
4. The plugin will be installed and available immediately

Note: All data stays local on your machine. No external API calls or cloud storage required.

Why This Exists

Small MSPs with 1-10 technicians pay $4,680-11,880/year for IT Glue just to document client networks. The core value — readable topology docs, asset inventories, configuration sheets, and runbooks — can be generated directly from CSV exports with Claude. This plugin is an alternative to that workflow included with your subscription, with data that processed within the Cowork environment and documents you can customize.

Quick Start

1. Install the pf-network-docs plugin in Cowork
2. Run /network-docs:network-docs-setup — creates folders and copies templates
3. Export your client's device list as CSV (from nmap, your RMM, or manually)
4. Run /network-docs:network-docs-import — parse your CSV into structured asset data
5. Run /network-docs:network-docs-topology — get a professional topology DOCX in seconds

Or run the full pipeline with /network-docs:network-docs-full.

Commands

Command	Description
/network-docs:network-docs-setup	Initialize workspace, check dependencies, copy templates
/network-docs:network-docs-import	Import asset inventory from CSV/XLSX or conversational entry
/network-docs:network-docs-topology	Generate network topology document
/network-docs:network-docs-configs	Generate device configuration sheets from pasted configs
/network-docs:network-docs-runbook	Generate runbooks/SOPs for common MSP tasks
/network-docs:network-docs-audit	Generate credential and security audit checklist
/network-docs:network-docs-full	Run complete pipeline end-to-end
/network-docs:network-docs-status	Show pipeline progress and output file locations

How It Works

CSV/XLSX (nmap, RMM, manual)
       ↓
/network-docs-import → processing/nd-assets.json
       ↓
/network-docs-topology → outbound/nd-topology-{date}.docx
/network-docs-configs  → outbound/nd-configs-{device}.docx
/network-docs-runbook  → outbound/nd-runbook-{type}.docx
/network-docs-audit    → outbound/nd-audit-{date}.docx

All outputs are also saved to pf-network-docs/outputs/ in your workspace for persistence across sessions.

What It's an Alternative To

SaaS Tool	Annual Cost	Key Overlap
IT Glue (Select + Network Glue)	$4,680-11,880/yr	Asset inventory, topology docs, runbooks
Hudu	$2,400-6,000/yr	Asset management, network documentation
Liongard	$3,600-9,600/yr	Configuration documentation

Key Differentiators

• Included with subscription vs $4,680-11,880/yr (IT Glue) or $2,400-6,000/yr (Hudu)
• Data stays local — no client network data uploaded to a vendor's cloud
• Customizable templates — not locked into rigid IT Glue fields; edit Word docs directly
• Plain-language topology — narrative descriptions clients can actually read, not just device lists
• Works from any CSV — no agent installation, no RMM dependency, no Network Glue add-on

Feature Comparison

Feature	pf-network-docs	IT Glue	Hudu
Asset inventory	✅ Full	✅ Full	✅ Full
Network topology docs	✅ Full	⚠️ Needs $395/mo add-on	⚠️ Partial
Runbook generation	✅ Full (AI-generated)	✅ Enterprise tier only	❌ None
Device config sheets	✅ Full	⚠️ Manual entry	⚠️ Manual entry
Security audit checklist	✅ Full	⚠️ Manual	❌ None
Credential vault	❌ None	✅ Full	✅ Full
Real-time network discovery	❌ None (CSV import)	✅ With add-on	⚠️ Partial
Multi-user collaboration	❌ None	✅ Full	✅ Full
PSA/RMM integrations	❌ None	✅ Full	✅ Partial
Data stays local	✅ Always	❌ Cloud only	❌ Cloud only
Custom output templates	✅ Full	❌ Rigid fields	❌ Rigid fields
CIS/NIST compliance mapping	✅ Full (CIS v8, NIST CSF 2.0)	❌ None	❌ None
Firmware EOL detection	✅ Auto (Cisco, Fortinet, pfSense)	❌ None	⚠️ Partial (Liongard)
CIS Benchmark hardening checks	✅ Advisory notes	❌ None	❌ None
RFC-aware IP validation	✅ Full (RFC 1918/5737/6890)	❌ None	❌ None
Annual cost	included with your subscription	$4,680-11,880	$2,400-6,000

Estimated Cost per Use

Disclaimer: Token estimates are approximate and based on typical usage patterns measured from skill prompt sizes. Actual costs vary with input data size, conversation length, and complexity. Estimates use Claude Sonnet 4.6 pricing ($3/1M input, $15/1M output). Cowork and Claude Desktop subscription users (Pro/Max/Team) are not charged per-token — these estimates apply only to direct Anthropic API usage. Running stages individually in fresh sessions uses fewer input tokens than running the full pipeline sequentially, because pipeline mode accumulates conversation history across stages.

Per skill (run individually in a fresh session):

Stage	Skill Prompt	User Input	Total Input	Output	Est. Cost
network-docs-runbook	~4.5K	~800	~8.2K	~4.5K	~$0.09
network-docs-topology	~5.6K	~800	~9.2K	~5.6K	~$0.11
network-docs-audit	~8.1K	~800	~11.8K	~4.0K	~$0.10
network-docs-import	~6.2K	~2.0K	~11.0K	~2.0K	~$0.06
network-docs-configs	~5.4K	~200	~8.4K	~1.5K	~$0.05
Standalone total			~48.5K	~17.6K	~$0.41

Full pipeline (all stages in one session — context accumulates):

Stage	Base Input	+ History	Total Input	Output	Est. Cost
network-docs-runbook	~8.7K	0	~8.7K	~4.5K	~$0.09
network-docs-topology	~9.8K	~5.3K	~15.1K	~5.6K	~$0.13
network-docs-audit	~12.3K	~11.7K	~24.0K	~4.0K	~$0.13
network-docs-import	~11.6K	~16.5K	~28.1K	~2.0K	~$0.11
network-docs-configs	~9.0K	~20.5K	~29.5K	~1.5K	~$0.11
Pipeline total			~105.5K	~17.6K	~$0.58

Running the full pipeline once typically costs $0.41–$0.75 in API tokens (Claude Sonnet 4.6).

AI-Powered Features

1. Network Topology Synthesis: Generates professional topology narratives with Cisco three-tier architecture pattern detection and NIST CSF PR.AC-5 segmentation analysis
2. Smart Device Classification: Categorizes devices using vendor keyword matching, with NIST SP 800-53 RA-2 criticality scoring (high/medium/standard)
3. RFC-Aware IP Validation: Classifies addresses per RFC 1918/5737/6890 — flags APIPA, loopback, documentation-only, and public IPs in private networks
4. CIS Benchmark Hardening Advisories: Config sheets include automated checks against CIS Cisco IOS benchmarks (Telnet, SNMP version, NTP, syslog, SSH)
5. Runbook Generation with ITIL v4 Alignment: SOPs include change type classification (Standard/Normal/Emergency) and RFC 2119 requirement levels
6. Compliance-Mapped Security Audit: Every finding references CIS Controls v8, NIST CSF 2.0, and NIST SP 800-53 controls; checklist items map to PCI DSS v4.0 and SOC 2 criteria
7. Vendor Firmware EOL Detection: Identifies potentially end-of-life firmware (Cisco IOS <15.x, FortiOS <7.0, pfSense, MikroTik)
8. IEEE 802.1Q VLAN Validation: Flags VLAN IDs outside 1-4094 range and CIS Controls v8 §12.2 warning for VLAN 1 production use
9. Context-Aware Documentation: Adapts all output to client environment specifics rather than generic templates
10. Network Segmentation Analysis: Detects flat networks and recommends VLAN segmentation per CIS Controls v8 §12.2 and PCI DSS v4.0 Req 1.2.1

Known Limitations & Workarounds

This is a Claude Cowork plugin, not a traditional SaaS application. It has architectural constraints you should know about before adopting it.

Limitation	Impact	Workaround
No real-time API integrations	Cannot auto-discover devices like IT Glue Network Glue	Export CSV from nmap/RMM (adds 15-30 min/client)
No persistent database	Asset records are local JSON files, no cloud search	Each client gets a folder; local file search covers 90% of lookups
No multi-user collaboration	Two technicians cannot edit simultaneously	Store client folders in Dropbox/OneDrive shared with your team
No live credential vault	Cannot replace IT Glue's encrypted password vault	Plugin documents WHERE credentials are stored — use 1Password/Bitwarden as the vault
Session-based operation	Cannot send automated alerts when docs become stale	Set a monthly calendar reminder to run /network-docs-audit to refresh

Context & Performance Guide

Session Management

Claude's context window (200K tokens) is shared across the entire session. For the full pipeline, start a fresh Cowork session before running /network-docs:network-docs-full.

Data Volume

Tested with up to 200 devices in a single run. For networks with 200+ devices, run each pipeline stage separately (import → topology → audit) in fresh sessions.

Tips for Best Results

1. Provide input data as a CSV file rather than pasting it — file reading is more context-efficient
2. Keep messages concise during pipeline runs
3. For the highest quality output, run each stage separately in a fresh session (the plugin saves state between stages)
4. Use consistent hostname formats in your CSV (e.g., CLIENT-DEVICE-01) for better device-type inference

Degradation Signals

If responses become shorter or skip sections, start a new session and re-run the current stage.

Requirements

• Claude Desktop or Cowork mode
• Python 3 (pre-installed in Cowork VM)
• python-docx and openpyxl (auto-installed by setup)

Important Disclaimers

• AI-Generated Content: This plugin uses AI (LLM) technology which can produce inaccurate or incomplete outputs. All content should be treated as a starting point and reviewed for accuracy before use.
• Not Professional Advice: Outputs do not constitute legal, financial, tax, medical, or other professional advice. Consult qualified professionals before making decisions based on generated content.
• No Compliance Guarantee: References to industry standards, regulations, or guidelines are for informational purposes only. This plugin does not guarantee compliance with any law or regulation. Users are responsible for verifying all outputs meet their specific regulatory requirements.
• No Endorsement or Affiliation: Mention of third-party products, standards, or organizations does not imply endorsement, partnership, or certification by those entities.