Cisco Meraki setup

ConfigView pulls Meraki data through one Dashboard API key. The key belongs to a dashboard administrator and inherits that admin’s access — so the inventory follows the admin’s organization membership, not a per-network install. You will end up with 1 secret in ConfigView (MERAKI_API_KEY) when setup is complete. This integration covers the whole Meraki estate. Wi-Fi troubleshooting. Alongside the SSID and RF configuration, it captures the evidence you actually need when someone says “the wifi is broken”: which step of the connection failed (association, authentication, DHCP, DNS), per-client and per-AP latency and packet loss, channel utilization, rogue APs, mesh health, and the raw wireless event log. Organization governance. Who can administer the dashboard and whether they have 2FA, what the SSO configuration asserts, what you are licensed for and when it expires, which hardware you own but have not deployed, when each device goes end-of-support, the dashboard password policy, and a full log of who called the API from where. These are org-wide and cost one call each regardless of estate size. Security appliance (MX). The LAN and WAN sides of every MX: VLANs and DHCP scopes, the full firewall rule set in evaluation order, port forwarding and NAT, content filtering, intrusion detection and malware protection state, site-to-site and third-party VPN, traffic shaping and SD-WAN uplink preference, warm-spare pairing, and live WAN uplink status with public IP per circuit. Switching (MS). Every physical port with its VLAN, PoE, STP guard and access policy, plus live status — link speed, duplex, errors, PoE draw and client count per port. Alongside it the network-wide switching config: STP bridge priority, ACLs, QoS and DSCP mapping, storm control, rogue-DHCP policy and ARP inspection, multicast and OSPF. Network-wide. The things that belong to a site rather than a product family: local Meraki accounts used for Client VPN and splash, group policies, where alerts route and what actually fired, the four telemetry export paths, LLDP/CDP topology, and the appliance and switch event logs. Camera, sensor, cellular gateway and Systems Manager. Footage retention and camera access roles, sensor readings and alert thresholds, cellular uplink signal and eSIM inventory, and MDM devices, users, profiles and trusted access. See the verification warning below before relying on these.

⚠️ Required: a full-organization read-only admin
A Meraki API key inherits the permissions of the admin who generated it. ConfigView requires an admin with organization-wide access — read-only is enough, and is what we recommend. If you use a network-scoped admin instead:

Networks outside that admin’s scope are missing from the inventory entirely

Organizations, Assurance Alerts, and every byDevice / byNetwork org-wide collector return partial data or 403

The gaps are silent — they look like “we have no APs there” rather than an error

Create the key from a full organization admin. Read-only is sufficient for every script in this integration; ConfigView never writes to Meraki.

Step 1: Enable Dashboard API access

API access is off by default on a Meraki organization.

Sign in to the Meraki dashboard as a full organization admin
Go to Organization → Settings
Scroll to Dashboard API access
Tick Enable access to the Cisco Meraki Dashboard API
Click Save changes

Repeat this for every organization you want ConfigView to inventory. If the key can see an org but API access is switched off there, every call against it returns 404 — the health check flags this explicitly.

Step 2: Generate the API key

Still signed in as that admin, click your profile name (top right) → My profile
Scroll to the API access section
Click Generate new API key
Copy the key immediately — it is a 40-character hex string and it is shown only once. Meraki will not display it again; you would have to revoke and regenerate.

Use a dedicated service admin. The key dies with the admin account that owns it. If you generate it from a person’s account and that person leaves, ingestion stops. Create a dedicated read-only org admin (for example configview-api@yourcompany.com), and generate the key from there.

Step 3: Add the secret to ConfigView

Go to your ConfigView dashboard: https://{companyname}.configview.com/admin/integrations/
Under Credentials, enter each value and click the save icon on its row:
Secret name: MERAKI_API_KEY
Secret value: Paste the 40-character key from Step 2

Step 4: Choose which parts of Meraki to collect

Meraki is split into six folders in /admin/integrations/, because a folder is what you tick — and there is no point creating switch tables for an organization that owns no switches.

Folder	Collectors	Enable when
Cisco Meraki	60	Always — this one is required. Organizations, networks, devices, licensing, admins, the audit log, and network-wide settings.
Cisco Meraki – Wireless	44	You have MR access points
Cisco Meraki – Security Appliance	42	You have MX appliances
Cisco Meraki – Switching	27	You have MS switches
Cisco Meraki – Camera, Sensor, Cellular & MDM	39	You have MV, MT, MG or Systems Manager
Cisco Meraki – Logs	4	Rarely. See below.

The core Cisco Meraki folder is required. Every other folder’s collectors depend on meraki/meraki_get_organizations.py, meraki_get_networks.py and meraki_get_devices.py for their organization, network and device context.If the core folder is not enabled, those dependencies cannot resolve and the dependent collectors refuse to run rather than publishing results built on a stale snapshot. You will see Dependency meraki/... not found - is the 'meraki' folder enabled? in the activity log.

MERAKI_API_KEY is one secret shared by all six folders — you enter it once, not per folder.

About the Logs folder

Cisco Meraki – Logs holds the high-volume append-only streams: the appliance and switch event logs, and the API request log. They are in their own folder and off by default deliberately — ConfigView is an asset inventory, not a log ingestion product, and these tables grow without bound in a way the configuration tables do not. Enable them only if you have a specific question they answer, and expect to manage their growth. Note that the admin audit log is not in this folder — Configuration Change Log lives in the core folder, because “who changed what” is governance rather than telemetry.

Load order

Parents must run before children. ConfigView wires the dependencies automatically, but load order still matters for first-run timing.

Foundation — enable these first

Everything else reads its context from these four tables.

Script	Notes
Organizations	Every org the API key can see. All other scripts depend on this.
Networks	All networks per org. The wireless collectors filter this to networks with a `wireless` product type. Depends on Organizations.
Devices	Full hardware inventory (MR, MS, MX, MV…). The per-AP scripts read the `wireless` rows. Depends on Organizations.
Device Statuses	Online / offline / alerting / dormant, plus public IP, uplink IP, gateway and DNS per device. Depends on Organizations.

Wi-Fi troubleshooting — the ones that answer “why is it broken”

Script	Notes
Failed Connections	The single most useful table here. One row per failed client connection with the exact `failure_step` — `assoc`, `auth`, `dhcp`, or `dns` — plus client MAC, AP serial, SSID and VLAN. Start every Wi-Fi investigation here.
Connection Stats (Network)	Aggregate success vs. failure counts per network over the window.
Connection Stats by Client / by AP	The same breakdown attributed to a specific client MAC or AP serial — tells you whether a problem is one laptop or one access point.
Latency Stats (Network) / by Client / by AP	Average latency split by traffic class (background, best-effort, video, voice). Voice latency is the one users feel.
Packet Loss by AP / by Client	Upstream and downstream loss counts and percentages.
Channel Utilization by AP	How congested each band is per AP, right now.
Channel Utilization History	10-minute utilization buckets over the last day — use this to find when it degraded. Meraki only accepts a 600-second resolution on this endpoint.
Air Marshal (Rogue APs)	Every foreign SSID/BSSID your APs can hear, with channel, encryption, and whether it is contained. The usual culprit behind unexplained interference.
Assurance Alerts	Meraki’s own health alerts, with severity and resolution state.
Wireless Event Log	Raw wireless events — association, deauthentication, DHCP, 802.1X. The most granular record available.
Mesh Statuses	Mesh route and performance per repeater. Only meaningful on networks with mesh APs.
AP CPU Load	Time-series CPU load per AP. A pegged AP drops clients.
AP Ethernet & PoE Status	Uplink negotiation, duplex, speed, and PoE standard per AP port. Catches the “AP keeps rebooting” caused by an underpowered PoE switch port.
Client Counts by AP	Online client count per AP — reveals uneven load.
AP Live Radio Status	Live per-radio BSSID, channel, width, and power.
SSID Statuses by AP (BSSIDs)	Org-wide view of which AP is broadcasting which SSID, on what channel, at what power.

Wireless configuration — the “settings” half

Script	Notes
SSIDs	All 15 SSID slots per network: auth mode, encryption, VLAN tagging, band selection, minimum bitrate, bandwidth limits, RADIUS servers, 802.11w/r. The per-SSID scripts below depend on this and only walk SSIDs where `enabled = 1`.
Wireless Settings	Network-level meshing, IPv6 bridging, LED state, regulatory domain and 6 GHz permission.
RF Profiles	Per-band min/max power, valid auto channels, channel width, RX-SOP, band steering, client balancing.
RF Profile Assignments by AP	Which RF profile each AP actually has applied.
AP Radio Settings	Per-AP manual channel and target power overrides. A manual override left on one AP is a classic root cause — this table is how you find it.
Radio RRM by Network	Auto-RF / RRM state per network.
SSID L3 Firewall Rules / L7 Firewall Rules	Per-SSID rules, in order. Answers “why can’t this SSID reach that subnet”.
SSID Traffic Shaping	Per-client bandwidth limits and DSCP/PCP tagging rules.
SSID Splash Settings	Captive portal configuration per SSID.
Splash Login Attempts	Who authenticated against the captive portal, and whether it succeeded.
SSID Identity PSKs	iPSK entries with their group policy. Passphrases are never stored — see the note below.
SSID EAP Override	EAP/EAPOL timeouts and retry counts. Tune these when 802.1X clients fail intermittently.
SSID Availability Schedules	Time windows when each SSID is broadcast.
SSID Device-Type Policies	Per-device-type group policy assignment.
SSID VPN / Concentrator	Concentrator, failover, and split-tunnel configuration.
SSID Bonjour Forwarding	Bonjour/mDNS forwarding rules — relevant to AirPlay and printer discovery complaints.
SSID Hotspot 2.0	Passpoint configuration.
AP Ethernet Port Profiles	Port profile definitions applied to AP ethernet ports.
Bluetooth Settings	BLE scanning and advertising per network.
Alternate Management Interface	Out-of-band management VLAN and protocols.
Air Marshal Rules / Air Marshal Settings	Org-wide rogue-AP containment rules and the default policy per network.
Clients	Every client seen in the window: MAC, IP, OS, manufacturer, VLAN, SSID, usage, and which AP it last attached to.

Organization governance — access, licensing, and audit

These are all org-wide: one API call each, no matter how large the estate. They depend only on Organizations.

Script	Notes
Org Admins	Every dashboard administrator with their `org_access` level, `two_factor_auth_enabled`, whether they hold an API key, and when they were last active. `org_access = 'full' AND two_factor_auth_enabled = 0` is the row an auditor asks for.
SAML Roles	What each SSO-asserted role grants. A `full` role nobody reviews is a standing risk — it grants org-wide access to anyone the IdP puts in that group.
SAML SSO Enabled / SAML Identity Providers	Whether SSO is on, and the IdP consumer/login URLs and certificate fingerprint.
Login Security Policy	Password expiry, minimum length, reuse rules, lockout threshold, idle timeout, whether 2FA is enforced, and any API-key IP restrictions. Every column is a compliance answer.
License Overview	One row per licensed model, plus overall status and expiry date. Join against `meraki_devices` to find models you are running but not licensed for.
Co-term Licenses	Individual license keys with claim date, duration, and `expired` / `invalidated` flags. Per-device-licensing orgs answer 400 here and are skipped.
Inventory Devices (incl. unclaimed)	Everything the org owns, not just what is deployed. A row with a NULL `network_id` is hardware you paid for and never assigned. Also the only place EOX (`eox_status`, `eox_end_of_sale_at`, `eox_end_of_support_at`) appears — this is how you find gear that is past end-of-sale.
Device Availability (all families)	Up/down for every product family in one table. `meraki_device_statuses` is the wireless-shaped view; this one does not assume an AP.
Device Status Rollup	Counts by online / alerting / offline / dormant.
Power Supply Slots	One row per PSU slot on switches. A slot reading `not connected` on a switch that is supposed to be redundant is the alertable row.
Uplink Loss & Latency	Per-sample loss and latency for each WAN uplink — the WAN-side counterpart to the wireless packet-loss collectors. Meraki caps this endpoint at a 5-minute window, so it does not use the 24-hour lookback.
Configuration Change Log (admin audit)	The admin audit log. Who changed what, on which page, old value to new value. Distinct from the event logs, which are data-plane (DHCP, port up, association) and say nothing about who; and from the API request log below, which records the call but not the resulting change. `page = 'via API'` marks a change made through the API rather than the dashboard.
API Request Log	Who called the API, from which `source_ip`, with which key, and what came back. This is how you notice a key being used from outside your estate.
API Response Code Counts	Non-zero response codes over the window — a fast read on whether an integration is erroring.
Firmware Upgrade History / by Device	Every upgrade with from/to version and status, org-wide and per device.
Org SNMP Settings	`v2c_enabled` with a community string is a finding, not a setting.
Policy Objects / Policy Object Groups	Reusable CIDR/FQDN objects referenced by firewall rules.
Adaptive Policy Groups / ACLs / Policies / Enabled Networks	Adaptive policy (SGT-based segmentation), where it is licensed and enabled.
Config Templates	Templates and their bound product types.
Org Alert Profiles	Org-wide alert rules and their recipients.
Webhook Delivery Log / Webhook Alert Types	Webhook deliveries with response codes, plus the ~73 alert types available to subscribe to.
Action Batches	Bulk config changes submitted through the API. A failed batch is a change that silently did not apply.
Early Access Opt-Ins / Features Available	Beta features actually switched on. Explains behaviour that does not match the shipping documentation.
Branding Policies	MSP/multi-tenant orgs only; other orgs answer 400 and are skipped.
Top Devices / Clients / Client Manufacturers / SSIDs / Applications by Usage	Org-wide usage rollups. Top Applications needs traffic analysis enabled on the networks or it returns thin results.
Top Switches by Energy Usage	Per-switch energy draw.

Security appliance (MX) — the network edge

Network-scoped collectors walk every network whose product_types includes appliance; the per-MX ones walk devices where product_type = 'appliance'.

Script	Notes
MX VLANs	Subnet, gateway IP, DHCP mode and lease per VLAN, with DHCP reservation counts. The LAN-side map of each site.
MX VLAN Mode / MX Single LAN	Whether the network runs multiple VLANs or one flat LAN. They are mutually exclusive — the unused one returns 400 and is skipped.
MX Static Routes	Routes configured beyond the directly-connected VLANs.
MX L3 Firewall Rules	The outbound rule set, in evaluation order. `rule_index` is the order and the order is the behaviour — a permissive rule above a restrictive one makes the restrictive one dead.
MX L7 Firewall Rules	Application-layer rules. `value` is polymorphic in the API (a bare string for host/port rules, an `{id,name}` object for application categories); both are flattened into `value_id` / `value_name`.
MX Port Forwarding Rules	Every inbound hole punched through the MX. A rule with `allowed_ips` of `Any` is open to the whole internet — this is the table to audit first.
MX 1:1 NAT Rules / MX 1:Many NAT Rules	Public-to-private address mappings and their allowed inbound rules.
MX Inbound Firewall Rules / Cellular / Inbound Cellular	The remaining rule sets. Cellular variants only exist on MX models with an LTE modem.
MX Firewalled Services	Whether ICMP, web and SNMP are reachable on the MX’s WAN interface. `access = 'unrestricted'` means the internet can reach that service on your edge.
MX Firewall Settings	IP source guard / anti-spoofing mode.
MX Content Filtering / Categories	Blocked URL categories and patterns, plus the full category list available to block against.
MX Intrusion Detection	`mode` is `disabled`, `detection`, or `prevention`. When it is `disabled` Meraki returns nothing else — which is itself the finding.
MX Malware Protection	AMP mode with any allow-listed URLs and file hashes.
MX Site-to-Site VPN	Hub/spoke mode and exported subnets.
MX BGP	BGP state, AS number and neighbours for SD-WAN deployments.
MX Global Bandwidth Limits / Traffic Shaping Rules / Uplink Bandwidth	Shaping policy: global caps, per-rule per-client limits with DSCP tags, and per-uplink bandwidth. `0` means unlimited, not zero.
MX Uplink Selection / SD-WAN	Which WAN is preferred, whether load balancing is on, and the WAN/VPN traffic preference rules.
MX Custom Performance Classes	Latency/jitter/loss thresholds referenced by uplink preference rules.
MX LAN Ports	Per-port access vs trunk, native VLAN, allowed VLANs, and whether untagged traffic is dropped.
MX Warm Spare (HA)	High-availability pairing. `enabled = 1` with a `spare_serial` means an MX is sitting idle until failover — worth knowing before someone decommissions it as unused hardware.
MX Connectivity Monitoring Destinations	The probe targets behind the uplink loss and latency numbers.
MX Appliance Settings	Routed vs passthrough deployment mode, client tracking method, and the dynamic DNS hostname the MX registers.
MX WAN Uplink Status	One row per WAN interface per MX — status, private and public IP, gateway, DNS, and how the address was assigned. This is where you find the current public IP of each site.
MX Uplink Usage by Network	Bytes sent and received per uplink per MX over the window.
MX Uplink Status Rollup	Uplink counts by status.
MX Third-Party VPN Peers	Non-Meraki IPsec peers. The IKE pre-shared key is never stored — only `secret_is_set`.
MX Site-to-Site VPN Firewall Rules	Org-wide rules applied to traffic crossing the VPN.
MX VPN Status by Network / MX VPN Peer Stats	Per-network VPN state and per-peer latency, loss and usage. Orgs with no site-to-site VPN get a 400 and are skipped.
MX Security Events (IDS/AMP)	Intrusion and malware events. Returns nothing while IDS and AMP are disabled.
MX Org Intrusion Allow-list	IDS rules explicitly allowed — i.e. suppressed org-wide.
MX WAN Interface Config	The configured WAN side per MX (static vs DHCP, VLAN tagging, PPPoE), as opposed to the live status above.
MX Performance Score	Appliance utilisation. A score approaching 100 means the MX is the bottleneck, not the circuit.
MX DHCP Pool Utilisation	Used vs free addresses per DHCP scope — catches a pool about to exhaust before clients stop getting leases.
MX Delegated IPv6 Prefixes	IPv6 prefix delegation, where used.

Switching (MS) — ports and the switching fabric

Network-scoped collectors walk networks whose product_types includes switch; the per-switch ones walk devices where product_type = 'switch'.

Script	Notes
Switch Port Config	The primary port table — one row per physical port with VLAN, voice VLAN, allowed VLANs, PoE, STP guard, UDLD, DAI trust, port profile and mirroring. Most “why is this device on the wrong VLAN” questions end here.
Switch Port Status & Usage	Live per-port status: link speed, duplex, errors and warnings, client count, PoE draw in watt-hours, and traffic rate. A duplex mismatch or a failing cable shows up in `errors`.
Switch Port Config (org-wide, 1 call) / Switch Port Status (org-wide, 1 call)	The same two questions answered for the whole estate in a single request each, with a smaller field set. Pick these or the per-device pair, not both — on a large estate the per-device fan-out is one call per switch.
Switch Port Rollup	Estate-wide port counts by status, media and link speed.
Switch Network Settings	Management VLAN, combined power mode, uplink selection and failback.
Switch STP / Bridge Priority	RSTP state and per-switch bridge priority. A priority of 0 marks the intended root bridge — if that is not the switch you expect, the topology is not what you think it is.
Switch Access Control Lists	Switch ACL rules in evaluation order.
Switch Access Policies (802.1X)	RADIUS-backed port authentication policies. RADIUS shared secrets are not returned by the API.
Switch QoS Rules / Switch QoS Rule Order	DSCP marking per VLAN, protocol and port, plus the evaluation order as a separate joinable table.
Switch DSCP to CoS Mappings	How DSCP markings map into switch queues — relevant when voice traffic is not getting priority despite being tagged.
Switch Storm Control	Broadcast, multicast and unknown-unicast thresholds as percentages. `100` means storm control is effectively off.
Switch DHCP Server Policy	Rogue-DHCP protection. `default_policy = 'allow'` with an empty blocked list means any device on the network can hand out leases.
Switch ARP Inspection Warnings / Trusted Servers	Switches that support dynamic ARP inspection but have no trusted port — enabling DAI would break them — and the configured trusted servers.
Switch Multicast Settings / Rendezvous Points	IGMP snooping and unknown-multicast flooding. Snooping off with flooding on is a classic cause of switch-wide traffic storms.
Switch OSPF	OSPF state, timers and areas for layer-3 switching, including the v3 (IPv6) block.
Switch L3 Interfaces / Switch L3 Static Routes	SVIs and static routes on switches that route. Layer-2-only models return 400 and are skipped.
Switch Link Aggregations	LAG membership, which can span switches.
Switch Stacks	Physical stack membership.
Switch MTU	Default MTU and any per-switch overrides.
Switch Alternate Management Interface	Out-of-band management VLAN and protocols.
Switch Warm Spare	Layer-3 switch redundancy pairing.

Network-wide — the things that belong to a site, not a product

These walk every network in the organization, regardless of hardware. The two event-log collectors are the exception: they are filtered to networks that have the matching product type.

Script	Notes
Meraki Auth Users (local accounts)	Accounts that exist only inside Meraki — Client VPN and splash logins. They are in no other identity system ConfigView collects, so they are invisible to an Okta or Google access review. `never_expires` flags authorizations with no expiry date.
Group Policies / Group Policy by Client	The policies that VLANs, SSIDs and clients bind to, and which client actually has which one applied. Without these, the `group_policy_id` columns elsewhere are unresolvable.
VLAN Profiles	Named VLAN sets, with the name-to-ID mapping.
Network Alert Settings	One row per alert type per network (~36). An alert that is enabled but has no destination goes nowhere — `enabled = 1 AND has_destination = 0` is the query that finds them.
Alert History	What actually fired and whether each destination was reached. Includes `settings_changed` entries carrying the full before/after of a config change — the closest thing Meraki has to a per-network change log.
Webhook HTTP Servers / Payload Templates	Where webhooks post and the Liquid templates that shape them. The shared secret is write-only and never returned by the API.
Syslog Servers	One row per target. No rows means nothing is shipped off-box — which is a retention and forensics answer, not just a config detail.
Network SNMP Settings	Per-network SNMP, separate from the org-level setting. `access = 'community'` means a cleartext credential in config.
NetFlow Settings / Traffic Analysis Settings	The remaining export paths. Traffic analysis being `disabled` is why the org-wide top-applications and per-client usage endpoints return thin results.
Network Settings	Local and remote status page exposure. A local status page enabled with `local_status_page_password_set = 0` means anyone on the LAN can reach device config.
Firmware Status by Product	Current firmware per product type with the last and next scheduled upgrade. The org-level firmware table is history; this answers “what version is this site on right now”.
Client Count & Usage Overview / Client Bandwidth History	Network-wide client counts and a ~60-bucket bandwidth time series per run.
Topology Nodes / Topology Links	The physical topology Meraki derives from LLDP and CDP. Links is how you find which switch port an AP is actually plugged into — both ends are flattened to a/b sides with the discovered port IDs.
Floor Plans	AP placement, where floor plans have been uploaded. The image is not stored, only its URL and dimensions.
Appliance Event Log / Switch Event Log	The MX and MS event streams — DHCP leases, VPN, uplink transitions, port up/down, STP changes, PoE, 802.1X. Previously dropped entirely; only the wireless log was collected. See the row-growth note below.
Event Types Reference	The ~269 event types a network can emit with their category, so an `event_type` in the log tables resolves to a description without a hard-coded mapping.

Camera, sensor, cellular gateway and Systems Manager

These are the least-verified collectors in the integration. Every other family on this page was validated field-by-field against a live organization. No organization available during development owned MV, MT, MG or Systems Manager hardware, so for most of these the column names come from Cisco’s published OpenAPI spec — which has been wrong twice already on this integration.Four are confirmed, because they answer at the organization level even with no hardware present: Camera Permission Scopes, Cellular eSIM Service Providers, Systems Manager APNs Certificate, and the wrapper shape of Cellular eSIM Inventory.If you own this hardware, treat your first run as the verification step and check for columns that come back unexpectedly NULL. tools/meraki_null_audit.py in the master-scripts repo does exactly that.

Every collector below is gated on product_types / product_type, so on an organization without the hardware it makes zero API calls and inserts zero rows.

Script	Notes
Camera Permission Scopes / Camera Roles	Who can view which footage. Permission scopes are confirmed; roles are not.
Camera Quality & Retention Profiles / (per device)	`max_retention_days` is the compliance column — how long footage is kept before it rolls off.
Camera Video Settings	`external_rtsp_enabled` with an `rtsp_url` means the stream is reachable off the camera.
Camera Sense / Analytics Zones / Custom Analytics / Artifacts / Boundary Areas / Boundary Lines	MV Sense detection, zones, and the custom analytics pipeline.
Camera Schedules / Camera Wireless Profiles / Onboarding Status	Recording schedules, wireless config, and claim state. The camera wireless PSK is never stored — only `psk_is_set`.
Sensor Readings (latest)	One row per sensor per metric. The payload is metric-shaped, so temperature, humidity, door, water, battery, CO2, TVOC, PM2.5, noise, air quality, power, voltage, current and button each get their own column.
Sensor Alert Profiles	The thresholds that decide when a sensor alerts — the temperature above which a server room is a problem — and who gets told.
Sensor Alerts (current) / Overview / MQTT Brokers / Relationships	Alerting state by metric, MQTT export, and which camera a sensor is paired with.
Cellular Gateway Uplink Status	Signal strength (RSRP/RSRQ), provider, APN and ICCID per MG uplink.
Cellular eSIM Inventory / Service Providers / Provider Accounts	eSIM estate and the carriers available to activate against.
Cellular Gateway DHCP / Subnet Pool / Uplink Settings / Connectivity Monitoring / LAN / Port Forwarding	The MG’s LAN-side and WAN-side configuration.
Systems Manager APNs Certificate	The Apple Push certificate MDM depends on. When it expires, every managed Apple device silently stops responding. Stored as PEM — parse the expiry at query time. It is a public certificate, not a private key.
Systems Manager Devices / Users / Profiles / Target Groups	The MDM inventory. Overlaps conceptually with Kandji and Intune — expect to reconcile rather than treat either as sole truth.
Systems Manager Trusted Access Configs / User Access Devices	Certificate-based network access granted to managed devices, with the SSID each unlocks and its expiry.
Systems Manager VPP Accounts / Admin Roles	Apple Volume Purchase Program accounts with token expiry, and limited-scope MDM admin roles.

Credentials are never stored

Two fields are deliberately dropped before anything is written to the database:

psk on meraki_wireless_ssids — the pre-shared key for PSK SSIDs
passphrase on meraki_wireless_ssid_identity_psks — iPSK passphrases
secret on meraki_appliance_vpn_third_party_peers — the IPsec pre-shared key for third-party VPN peers. Only secret_is_set is recorded.
psk on meraki_camera_wireless_profiles — the pre-shared key for camera wireless profiles. Only psk_is_set is recorded.

They are stripped from the flattened columns and from the raw_json snapshot, and replaced with [redacted]. A ConfigView database dump can therefore never become a Wi-Fi passphrase dump. If you need to verify a PSK, use the Meraki dashboard.

Rate limits and scheduling

Meraki allows 10 requests per second per organization (burst +10, max 30 in 2 seconds) and 100 requests/second per source IP. That ceiling is shared with every other application hitting the same org, including Meraki’s own integrations. ConfigView paces evenly rather than bursting, defaulting to 5 requests/second — half the budget, leaving room for whatever else touches the org. 429 responses carry a Retry-After header, which the collectors honour before retrying. Cost scales with the size of the estate:

Org-wide collectors — 1 call each, regardless of size
Per-network collectors — 1 call per wireless network
Per-AP collectors — 1 call per access point (2 scripts)
Per-SSID collectors — 1 call per enabled SSID per network (11 scripts). Disabled SSID slots are skipped, which is usually a 5× saving

For a site with 10 networks, 3 enabled SSIDs each, and 100 APs, a full sweep is roughly 800 calls — under three minutes. Daily is a sensible cadence for the configuration scripts; the health and event scripts are worth running more often, since they look back over a 24-hour window. The time-windowed scripts (failed connections, connection and latency stats, packet loss, Air Marshal, clients, channel utilization history) use a 24-hour lookback. Each run stores a fresh snapshot under its own run_at, so history accumulates in the table even though each call only asks for a day.

Watch these three for row growth

Most tables here are small — tens to hundreds of rows per run. Three are not, and they are the ones to re-schedule or disable if the database grows faster than you want:

Table	Rows per run	Why
`meraki_air_marshal`	thousands to tens of thousands	Every foreign BSSID your APs can hear. In a dense office building this is dominated by neighbouring networks, not yours.
`meraki_wireless_ap_cpu_load`	~260 per AP	A 5-minute CPU sample series per access point over the 24-hour window.
`meraki_network_health_channel_utilization`	~144 per AP radio	10-minute buckets over 24 hours, per radio.
`meraki_network_events_appliance`	up to 1,000 per network	The MX event stream. Bounded at one page of 1,000 events per run rather than walking the full window — on a busy network that is the last few hours, not 24 hours. The same bound the wireless event log already uses.
`meraki_network_events_switch`	up to 1,000 per network	The MS event stream, same bound.

They are genuinely useful, so they are enabled by default — but on a daily schedule they are the bulk of your row growth. If Air Marshal is noisy for you, a weekly cadence still catches a persistent rogue.

Table reference

Table	Meraki endpoint	Key columns
`meraki_organizations`	`GET /organizations`	org_id, org_name, url, api_enabled, licensing_model, cloud_region_name, cloud_region_host
`meraki_networks`	`GET /organizations/{org_id}/networks`	network_id, network_name, product_types, time_zone, tags, enrollment_string, url
`meraki_devices`	`GET /organizations/{org_id}/devices`	network_id, serial, name, model, mac, lan_ip, firmware
`meraki_device_statuses`	`GET /organizations/{org_id}/devices/statuses`	network_id, serial, name, mac, model, product_type, status
`meraki_wireless_ssid_statuses`	`GET /organizations/{org_id}/wireless/ssids/statuses/byDevice`	network_id, network_name, serial, device_name, bssid, ssid_name, ssid_number
`meraki_wireless_client_counts`	`GET /organizations/{org_id}/wireless/clients/overview/byDevice`	network_id, serial, clients_online
`meraki_wireless_channel_utilization`	`GET /organizations/{org_id}/wireless/devices/channelUtilization/byDevice`	network_id, serial, mac, band, wifi_percentage, non_wifi_percentage, total_percentage
`meraki_wireless_packet_loss_by_device`	`GET /organizations/{org_id}/wireless/devices/packetLoss/byDevice`	network_id, network_name, serial, device_name, device_mac, downstream_total, downstream_lost
`meraki_wireless_packet_loss_by_client`	`GET /organizations/{org_id}/wireless/devices/packetLoss/byClient`	network_id, network_name, client_id, client_mac, downstream_total, downstream_lost, downstream_loss_pct
`meraki_wireless_ap_ethernet_statuses`	`GET /organizations/{org_id}/wireless/devices/ethernet/statuses`	network_id, serial, device_name, power_mode, ac_connected, poe_connected, aggregation_enabled
`meraki_wireless_rf_profile_assignments`	`GET /organizations/{org_id}/wireless/rfProfiles/assignments/byDevice`	network_id, serial, device_name, model, rf_profile_id, rf_profile_name, is_indoor_default
`meraki_assurance_alerts`	`GET /organizations/{org_id}/assurance/alerts`	alert_id, network_id, network_name, category_type, alert_type, title, description
`meraki_air_marshal_rules`	`GET /organizations/{org_id}/wireless/airMarshal/rules`	network_id, rule_id, rule_type, match_string, match_type, created_at, updated_at
`meraki_air_marshal_settings`	`GET /organizations/{org_id}/wireless/airMarshal/settings/byNetwork`	network_id, default_policy
`meraki_wireless_radio_rrm`	`GET /organizations/{org_id}/wireless/radio/rrm/byNetwork`	network_id, network_name, time_zone, busy_hour_json, channel_json, fra_json, ai_json
`meraki_wireless_ap_cpu_load`	`GET /organizations/{org_id}/wireless/devices/system/cpu/load/history`	network_id, network_name, serial, device_name, model, mac, cpu_count
`meraki_wireless_settings`	`GET /networks/{network_id}/wireless/settings`	meshing_enabled, ipv6_bridge_enabled, location_analytics_enabled, upgrade_strategy, upgrade_predownload_enabled, led_lights_on, multicast_to_unicast_enabled
`meraki_wireless_ssids`	`GET /networks/{network_id}/wireless/ssids`	ssid_number, name, enabled, splash_page, auth_mode, encryption_mode, wpa_encryption_mode
`meraki_wireless_rf_profiles`	`GET /networks/{network_id}/wireless/rfProfiles`	rf_profile_id, name, client_balancing_enabled, min_bitrate_type, band_selection_type, band_operation_mode, band_steering_enabled
`meraki_wireless_failed_connections`	`GET /networks/{network_id}/wireless/failedConnections`	ts, client_mac, serial, ssid_number, vlan, radio, failure_step
`meraki_wireless_connection_stats`	`GET /networks/{network_id}/wireless/connectionStats`	assoc, auth, dhcp, dns, success, timespan_seconds
`meraki_wireless_client_connection_stats`	`GET /networks/{network_id}/wireless/clients/connectionStats`	client_mac, assoc, auth, dhcp, dns, success, timespan_seconds
`meraki_wireless_device_connection_stats`	`GET /networks/{network_id}/wireless/devices/connectionStats`	serial, assoc, auth, dhcp, dns, success, timespan_seconds
`meraki_wireless_latency_stats`	`GET /networks/{network_id}/wireless/latencyStats`	background_avg_ms, best_effort_avg_ms, video_avg_ms, voice_avg_ms, background_distribution_json, best_effort_distribution_json, video_distribution_json
`meraki_wireless_client_latency_stats`	`GET /networks/{network_id}/wireless/clients/latencyStats`	client_mac, background_avg_ms, best_effort_avg_ms, video_avg_ms, voice_avg_ms, timespan_seconds
`meraki_wireless_device_latency_stats`	`GET /networks/{network_id}/wireless/devices/latencyStats`	serial, background_avg_ms, best_effort_avg_ms, video_avg_ms, voice_avg_ms, timespan_seconds
`meraki_air_marshal`	`GET /networks/{network_id}/wireless/airMarshal`	ssid, bssid, contained, channels, encryption, types, manufacturers
`meraki_wireless_mesh_statuses`	`GET /networks/{network_id}/wireless/meshStatuses`	serial, mesh_route, latest_mbps, latest_metric, latest_usage_percentage
`meraki_network_health_channel_utilization`	`GET /networks/{network_id}/networkHealth/channelUtilization`	serial, model, tags, radio, start_time, end_time, utilization_total
`meraki_clients`	`GET /networks/{network_id}/clients`	client_id, mac, ip, ip6, ip6_local, description, user
`meraki_wireless_events`	`GET /networks/{network_id}/events`	occurred_at, event_type, description, category, client_id, client_description, client_mac
`meraki_splash_login_attempts`	`GET /networks/{network_id}/splashLoginAttempts`	name, login, ssid, login_at, gateway_device_mac, client_mac, client_id
`meraki_wireless_bluetooth_settings`	`GET /networks/{network_id}/wireless/bluetooth/settings`	scanning_enabled, advertising_enabled, uuid, major_minor_assignment_mode, major, minor, esl_enabled
`meraki_wireless_alternate_mgmt_interface`	`GET /networks/{network_id}/wireless/alternateManagementInterface`	enabled, vlan_id, protocols, access_points_json
`meraki_wireless_ethernet_port_profiles`	`GET /networks/{network_id}/wireless/ethernet/ports/profiles`	profile_id, name, is_default, ports_json, usb_ports_json
`meraki_wireless_radio_settings`	`GET /devices/{serial}/wireless/radio/settings`	rf_profile_id, two_four_channel, two_four_target_power, five_channel, five_channel_width, five_target_power
`meraki_wireless_ap_status`	`GET /devices/{serial}/wireless/status`	ssid_name, ssid_number, enabled, band, bssid, channel, channel_width
`meraki_wireless_ssid_l3_firewall_rules`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/firewall/l3FirewallRules`	rule_index, comment, policy, protocol, ip_ver, dest_port, dest_cidr
`meraki_wireless_ssid_l7_firewall_rules`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/firewall/l7FirewallRules`	rule_index, policy, rule_type, value
`meraki_wireless_ssid_traffic_shaping`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/trafficShaping/rules`	traffic_shaping_enabled, default_rules_enabled, rule_index, definitions_json, per_client_limit_up, per_client_limit_down, per_client_settings
`meraki_wireless_ssid_splash_settings`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/splash/settings`	splash_page, use_splash_url, splash_url, splash_timeout, use_redirect_url, redirect_url, welcome_message
`meraki_wireless_ssid_identity_psks`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/identityPsks`	identity_psk_id, name, group_policy_id, email, wifi_personal_network_id, expires_at
`meraki_wireless_ssid_schedules`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/schedules`	enabled, range_index, start_day, start_time, end_day, end_time
`meraki_wireless_ssid_eap_override`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/eapOverride`	timeout, max_retries, identity_retries, identity_timeout, eapol_key_retries, eapol_key_timeout_ms
`meraki_wireless_ssid_device_type_policies`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/deviceTypeGroupPolicies`	enabled, device_type, device_policy, group_policy_id
`meraki_wireless_ssid_hotspot20`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/hotspot20`	enabled, operator_name, venue_name, venue_type, network_access_type, domains, roam_consort_ois
`meraki_wireless_ssid_bonjour_forwarding`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/bonjourForwarding`	enabled, exception_enabled, rule_index, description, vlan_id, services
`meraki_wireless_ssid_vpn`	`GET /networks/{network_id}/wireless/ssids/{ssid_number}/vpn`	concentrator_network_id, concentrator_vlan_id, concentrator_name, failover_request_ip, failover_heartbeat_interval, failover_idle_timeout, split_tunnel_enabled
`meraki_org_admins`	`GET /organizations/{org_id}/admins`	admin_id, name, email, authentication_method, org_access, account_status, two_factor_auth_enabled
`meraki_org_saml`	`GET /organizations/{org_id}/saml`	saml_enabled, sp_initiated_subdomain, sp_initiated_idp_id
`meraki_org_saml_idps`	`GET /organizations/{org_id}/saml/idps`	idp_id, consumer_url, sso_login_url, slo_logout_url, x509_cert_sha1_fingerprint, vision_consumer_url
`meraki_org_saml_roles`	`GET /organizations/{org_id}/samlRoles`	role_id, role, org_access, network_count, network_ids, tags
`meraki_org_login_security`	`GET /organizations/{org_id}/loginSecurity`	enforce_password_expiration, password_expiration_days, enforce_different_passwords, num_different_passwords, enforce_strong_passwords, minimum_password_length, enforce_account_lockout
`meraki_org_licenses_overview`	`GET /organizations/{org_id}/licenses/overview`	status, expiration_date, licensed_model, licensed_count
`meraki_org_licensing_coterm`	`GET /organizations/{org_id}/licensing/coterm/licenses`	license_key, duration_days, mode, started_at, claimed_at, invalidated_at, invalidated
`meraki_org_inventory_devices`	`GET /organizations/{org_id}/inventory/devices`	serial, name, mac, model, sku, network_id, order_number
`meraki_org_config_templates`	`GET /organizations/{org_id}/configTemplates`	template_id, name, product_types, time_zone
`meraki_org_policy_objects`	`GET /organizations/{org_id}/policyObjects`	object_id, name, category, type, cidr, fqdn, ip
`meraki_org_policy_object_groups`	`GET /organizations/{org_id}/policyObjects/groups`	group_id, name, category, object_ids, network_ids, created_at, updated_at
`meraki_org_adaptive_policy_acls`	`GET /organizations/{org_id}/adaptivePolicy/acls`	acl_id, acl_name, description, ip_version, rule_index, rule_policy, rule_protocol
`meraki_org_adaptive_policy_groups`	`GET /organizations/{org_id}/adaptivePolicy/groups`	group_id, name, sgt, description, is_default_group, required_ip_mappings, policy_object_count
`meraki_org_adaptive_policy_policies`	`GET /organizations/{org_id}/adaptivePolicy/policies`	adaptive_policy_id, source_group_id, source_group_name, source_group_sgt, destination_group_id, destination_group_name, destination_group_sgt
`meraki_org_adaptive_policy_settings`	`GET /organizations/{org_id}/adaptivePolicy/settings`	enabled_network_id
`meraki_org_alert_profiles`	`GET /organizations/{org_id}/alerts/profiles`	alert_profile_id, type, enabled, description, network_tags, recipient_emails, recipient_http_server_ids
`meraki_org_snmp`	`GET /organizations/{org_id}/snmp`	v2c_enabled, v2_community_string, v3_enabled, v3_auth_mode, v3_priv_mode, v3_user, peer_ips
`meraki_org_api_requests`	`GET /organizations/{org_id}/apiRequests`	admin_id, method, host, path, query_string, user_agent, ts
`meraki_org_configuration_changes`	`GET /organizations/{org_id}/configurationChanges`	ts, admin_id, admin_name, admin_email, network_id, network_name, network_url
`meraki_org_api_requests_overview`	`GET /organizations/{org_id}/apiRequests/overview`	response_code, request_count
`meraki_org_firmware_upgrades`	`GET /organizations/{org_id}/firmware/upgrades`	upgrade_id, upgrade_batch_id, network_id, network_name, status, scheduled_time, completed_at
`meraki_org_firmware_upgrades_by_device`	`GET /organizations/{org_id}/firmware/upgrades/byDevice`	serial, name, device_status, detailed_status, upgrade_id, upgrade_batch_id, upgrade_status
`meraki_org_device_availabilities`	`GET /organizations/{org_id}/devices/availabilities`	serial, name, mac, product_type, status, network_id, tags
`meraki_org_device_statuses_overview`	`GET /organizations/{org_id}/devices/statuses/overview`	status, device_count
`meraki_org_device_power_modules`	`GET /organizations/{org_id}/devices/powerModules/statuses/byDevice`	serial, device_name, mac, product_type, network_id, tags, slot_number
`meraki_org_uplinks_loss_latency`	`GET /organizations/{org_id}/devices/uplinksLossAndLatency`	network_id, serial, uplink, probe_ip, sample_ts, loss_percent, latency_ms
`meraki_org_top_devices`	`GET /organizations/{org_id}/summary/top/devices/byUsage`	device_name, serial, mac, model, product_type, network_id, network_name
`meraki_org_top_clients`	`GET /organizations/{org_id}/summary/top/clients/byUsage`	client_id, client_name, mac, network_id, network_name, usage_total_kb, usage_upstream_kb
`meraki_org_top_client_manufacturers`	`GET /organizations/{org_id}/summary/top/clients/manufacturers/byUsage`	manufacturer, client_count, usage_total_kb, usage_upstream_kb, usage_downstream_kb
`meraki_org_top_ssids`	`GET /organizations/{org_id}/summary/top/ssids/byUsage`	ssid_name, client_count, usage_total_kb, usage_upstream_kb, usage_downstream_kb, usage_percentage
`meraki_org_top_applications`	`GET /organizations/{org_id}/summary/top/applications/byUsage`	application, usage_total_kb, usage_upstream_kb, usage_downstream_kb, usage_percentage
`meraki_org_top_switches_by_energy`	`GET /organizations/{org_id}/summary/top/switches/byEnergyUsage`	device_name, mac, model, network_id, network_name, energy_usage_total
`meraki_org_webhook_logs`	`GET /organizations/{org_id}/webhooks/logs`	logged_at, sent_at, network_id, alert_type, alert_type_id, url, response_code
`meraki_org_webhook_alert_types`	`GET /organizations/{org_id}/webhooks/alertTypes`	alert_type_id, alert_type
`meraki_org_action_batches`	`GET /organizations/{org_id}/actionBatches`	batch_id, organization_id, confirmed, synchronous, status_completed, status_failed, status_errors
`meraki_org_early_access_opt_ins`	`GET /organizations/{org_id}/earlyAccess/features/optIns`	opt_in_id, short_name, created_at, limit_scope_to_network_ids
`meraki_org_early_access_features`	`GET /organizations/{org_id}/earlyAccess/features`	short_name, name, topic, description_short, description_long, is_org_scoped_only, advantage
`meraki_org_branding_policies`	`GET /organizations/{org_id}/brandingPolicies`	branding_policy_id, name, enabled, admin_settings_applies_to, admin_settings_values
`meraki_appliance_vlans`	`GET /networks/{network_id}/appliance/vlans`	vlan_id, name, appliance_ip, subnet, group_policy_id, template_vlan_type, dns_nameservers
`meraki_appliance_vlans_settings`	`GET /networks/{network_id}/appliance/vlans/settings`	vlans_enabled
`meraki_appliance_single_lan`	`GET /networks/{network_id}/appliance/singleLan`	subnet, appliance_ip, mandatory_dhcp_enabled, ipv6_enabled
`meraki_appliance_static_routes`	`GET /networks/{network_id}/appliance/staticRoutes`	static_route_id, name, subnet, gateway_ip, gateway_vlan_id, enabled
`meraki_appliance_fw_l3_rules`	`GET /networks/{network_id}/appliance/firewall/l3FirewallRules`	rule_index, comment, policy, protocol, src_port, src_cidr, dest_port
`meraki_appliance_fw_l7_rules`	`GET /networks/{network_id}/appliance/firewall/l7FirewallRules`	rule_index, policy, rule_type, value_id, value_name
`meraki_appliance_fw_port_forwarding`	`GET /networks/{network_id}/appliance/firewall/portForwardingRules`	rule_index, name, lan_ip, uplink, public_port, local_port, allowed_ips
`meraki_appliance_fw_one_to_one_nat`	`GET /networks/{network_id}/appliance/firewall/oneToOneNatRules`	rule_index, name, public_ip, lan_ip, uplink
`meraki_appliance_fw_one_to_many_nat`	`GET /networks/{network_id}/appliance/firewall/oneToManyNatRules`	rule_index, public_ip, uplink, port_rule_count
`meraki_appliance_fw_cellular_rules`	`GET /networks/{network_id}/appliance/firewall/cellularFirewallRules`	rule_index, comment, policy, protocol, src_port, src_cidr, dest_port
`meraki_appliance_fw_inbound_rules`	`GET /networks/{network_id}/appliance/firewall/inboundFirewallRules`	rule_index, comment, policy, protocol, src_port, src_cidr, dest_port
`meraki_appliance_fw_inbound_cellular_rules`	`GET /networks/{network_id}/appliance/firewall/inboundCellularFirewallRules`	rule_index, comment, policy, protocol, src_port, src_cidr, dest_port
`meraki_appliance_firewalled_services`	`GET /networks/{network_id}/appliance/firewall/firewalledServices`	service, access, allowed_ips
`meraki_appliance_fw_settings`	`GET /networks/{network_id}/appliance/firewall/settings`	ip_source_guard_mode
`meraki_appliance_content_filtering`	`GET /networks/{network_id}/appliance/contentFiltering`	blocked_category_count, blocked_category_ids, blocked_category_names, blocked_url_patterns, allowed_url_patterns, url_category_list_size
`meraki_appliance_content_filtering_categories`	`GET /networks/{network_id}/appliance/contentFiltering/categories`	category_id, category_name
`meraki_appliance_security_intrusion`	`GET /networks/{network_id}/appliance/security/intrusion`	mode, ids_rulesets, protected_networks_use_default, protected_networks_included, protected_networks_excluded
`meraki_appliance_security_malware`	`GET /networks/{network_id}/appliance/security/malware`	mode, allowed_url_count, allowed_file_count
`meraki_appliance_vpn_site_to_site`	`GET /networks/{network_id}/appliance/vpn/siteToSiteVpn`	mode, hub_count, hub_network_ids, exported_subnet_count, exported_subnets
`meraki_appliance_vpn_bgp`	`GET /networks/{network_id}/appliance/vpn/bgp`	enabled, as_number, ibgp_hold_timer, router_id, neighbor_count
`meraki_appliance_traffic_shaping`	`GET /networks/{network_id}/appliance/trafficShaping`	global_limit_up_kbps, global_limit_down_kbps
`meraki_appliance_traffic_shaping_rules`	`GET /networks/{network_id}/appliance/trafficShaping/rules`	rule_index, default_rules_enabled, priority, dscp_tag_value, per_client_settings, per_client_limit_up_kbps, per_client_limit_down_kbps
`meraki_appliance_traffic_shaping_uplink_bandwidth`	`GET /networks/{network_id}/appliance/trafficShaping/uplinkBandwidth`	uplink, limit_up_kbps, limit_down_kbps
`meraki_appliance_traffic_shaping_uplink_selection`	`GET /networks/{network_id}/appliance/trafficShaping/uplinkSelection`	default_uplink, load_balancing_enabled, failover_immediate_enabled, wan_traffic_preference_count, vpn_traffic_preference_count
`meraki_appliance_custom_performance_classes`	`GET /networks/{network_id}/appliance/trafficShaping/customPerformanceClasses`	performance_class_id, name, max_latency_ms, max_jitter_ms, max_loss_percentage
`meraki_appliance_ports`	`GET /networks/{network_id}/appliance/ports`	port_number, enabled, port_type, drop_untagged_traffic, vlan, allowed_vlans, access_policy
`meraki_appliance_warm_spare`	`GET /networks/{network_id}/appliance/warmSpare`	enabled, primary_serial, spare_serial, uplink_mode, virtual_ip1, virtual_ip2
`meraki_appliance_connectivity_monitoring`	`GET /networks/{network_id}/appliance/connectivityMonitoringDestinations`	destination_ip, description, is_default
`meraki_appliance_settings`	`GET /networks/{network_id}/appliance/settings`	client_tracking_method, deployment_mode, dynamic_dns_enabled, dynamic_dns_prefix, dynamic_dns_url
`meraki_appliance_uplink_statuses`	`GET /organizations/{org_id}/appliance/uplink/statuses`	network_id, serial, model, ha_enabled, ha_role, last_reported_at, interface
`meraki_appliance_uplinks_usage_by_network`	`GET /organizations/{org_id}/appliance/uplinks/usage/byNetwork`	network_id, network_name, serial, interface, sent_bytes, received_bytes
`meraki_appliance_uplinks_status_overview`	`GET /organizations/{org_id}/appliance/uplinks/statuses/overview`	status, uplink_count
`meraki_appliance_vpn_third_party_peers`	`GET /organizations/{org_id}/appliance/vpn/thirdPartyVPNPeers`	name, public_ip, remote_id, local_id, private_subnets, ike_version, ipsec_policies_preset
`meraki_appliance_vpn_firewall_rules`	`GET /organizations/{org_id}/appliance/vpn/vpnFirewallRules`	rule_index, comment, policy, protocol, src_port, src_cidr, dest_port
`meraki_appliance_vpn_statuses`	`GET /organizations/{org_id}/appliance/vpn/statuses`	network_id, network_name, device_serial, device_status, vpn_mode, exported_subnets, meraki_vpn_peer_count
`meraki_appliance_vpn_stats`	`GET /organizations/{org_id}/appliance/vpn/stats`	network_id, network_name, peer_network_id, peer_network_name, avg_latency_ms, sent_kilobytes, received_kilobytes
`meraki_appliance_security_events`	`GET /organizations/{org_id}/appliance/security/events`	ts, event_type, device_mac, client_name, client_mac, client_ip, src_ip
`meraki_appliance_org_security_intrusion`	`GET /organizations/{org_id}/appliance/security/intrusion`	rule_id, message
`meraki_appliance_device_uplink_settings`	`GET /devices/{serial}/appliance/uplinks/settings`	interface, enabled, vlan_tagging_enabled, vlan_id, ipv4_assignment_mode, ipv4_address, ipv4_gateway
`meraki_appliance_device_performance`	`GET /devices/{serial}/appliance/performance`	perf_score
`meraki_appliance_device_dhcp_subnets`	`GET /devices/{serial}/appliance/dhcp/subnets`	subnet, vlan_id, used_count, free_count
`meraki_appliance_device_prefixes_delegated`	`GET /devices/{serial}/appliance/prefixes/delegated`	prefix, origin_type, origin_interfaces
`meraki_switch_settings`	`GET /networks/{network_id}/switch/settings`	management_vlan, use_combined_power, power_exception_count, uplink_client_sampling_enabled, mac_blocklist_enabled, uplink_failback_enabled, uplink_candidates
`meraki_switch_stp`	`GET /networks/{network_id}/switch/stp`	rstp_enabled, stp_priority, switch_serials, stack_ids, switch_profiles
`meraki_switch_acls`	`GET /networks/{network_id}/switch/accessControlLists`	rule_index, comment, policy, ip_version, protocol, src_cidr, src_port
`meraki_switch_access_policies`	`GET /networks/{network_id}/switch/accessPolicies`	access_policy_number, name, access_policy_type, host_mode, guest_vlan_id, radius_servers, radius_accounting_enabled
`meraki_switch_port_schedules`	`GET /networks/{network_id}/switch/portSchedules`	port_schedule_id, name
`meraki_switch_qos_rules`	`GET /networks/{network_id}/switch/qosRules`	qos_rule_id, vlan, protocol, src_port, dst_port, dscp
`meraki_switch_qos_rules_order`	`GET /networks/{network_id}/switch/qosRules/order`	rule_position, qos_rule_id
`meraki_switch_storm_control`	`GET /networks/{network_id}/switch/stormControl`	broadcast_threshold, multicast_threshold, unknown_unicast_threshold, combined_traffic_types
`meraki_switch_dhcp_server_policy`	`GET /networks/{network_id}/switch/dhcpServerPolicy`	default_policy, email_alerts_enabled, arp_inspection_enabled, allowed_server_count, blocked_server_count, always_allowed_server_count
`meraki_switch_arp_inspection_warnings`	`GET /networks/{network_id}/switch/dhcpServerPolicy/arpInspection/warnings/byDevice`	serial, name, supports_inspection, has_trusted_port, url
`meraki_switch_arp_inspection_trusted_servers`	`GET /networks/{network_id}/switch/dhcpServerPolicy/arpInspection/trustedServers`	trusted_server_id, mac, vlan, ipv4_address
`meraki_switch_dscp_to_cos`	`GET /networks/{network_id}/switch/dscpToCosMappings`	dscp, cos, title
`meraki_switch_link_aggregations`	`GET /networks/{network_id}/switch/linkAggregations`	link_aggregation_id, member_port_count, member_serials
`meraki_switch_mtu`	`GET /networks/{network_id}/switch/mtu`	default_mtu_size, override_count
`meraki_switch_routing_multicast`	`GET /networks/{network_id}/switch/routing/multicast`	igmp_snooping_enabled, flood_unknown_multicast_enabled, override_count
`meraki_switch_multicast_rendezvous_points`	`GET /networks/{network_id}/switch/routing/multicast/rendezvousPoints`	rendezvous_point_id, interface_ip, interface_name, multicast_group
`meraki_switch_ospf`	`GET /networks/{network_id}/switch/routing/ospf`	enabled, hello_timer_seconds, dead_timer_seconds, md5_authentication_enabled, area_count, v3_enabled, v3_hello_timer_seconds
`meraki_switch_stacks`	`GET /networks/{network_id}/switch/stacks`	stack_id, name, member_count, member_serials
`meraki_switch_alternate_management_interface`	`GET /networks/{network_id}/switch/alternateManagementInterface`	enabled, vlan_id, protocols
`meraki_switch_ports_overview`	`GET /organizations/{org_id}/switch/ports/overview`	ports_total, active_total, inactive_total, active_rj45_total, active_sfp_total, inactive_rj45_total, inactive_sfp_total
`meraki_switch_ports_by_switch`	`GET /organizations/{org_id}/switch/ports/bySwitch`	serial, switch_name, mac, model, network_id, network_name, port_id
`meraki_switch_port_statuses_by_switch`	`GET /organizations/{org_id}/switch/ports/statuses/bySwitch`	serial, switch_name, mac, model, network_id, network_name, port_id
`meraki_switch_ports`	`GET /devices/{serial}/switch/ports`	port_id, port_name, tags, enabled, poe_enabled, port_type, vlan
`meraki_switch_port_statuses`	`GET /devices/{serial}/switch/ports/statuses`	port_id, enabled, status, is_uplink, speed, duplex, errors
`meraki_switch_routing_interfaces`	`GET /devices/{serial}/switch/routing/interfaces`	interface_id, name, subnet, interface_ip, vlan_id, default_gateway, multicast_routing
`meraki_switch_routing_static_routes`	`GET /devices/{serial}/switch/routing/staticRoutes`	static_route_id, name, subnet, next_hop_ip, advertise_via_ospf_enabled, prefer_over_ospf_routes_enabled
`meraki_switch_device_warm_spare`	`GET /devices/{serial}/switch/warmSpare`	enabled, primary_serial, spare_serial
`meraki_network_auth_users`	`GET /networks/{network_id}/merakiAuthUsers`	auth_user_id, email, name, account_type, is_admin, created_at, authorization_count
`meraki_network_group_policies`	`GET /networks/{network_id}/groupPolicies`	group_policy_id, name, splash_auth_settings, scheduling_enabled, bandwidth_settings, bandwidth_limit_up_kbps, bandwidth_limit_down_kbps
`meraki_network_policies_by_client`	`GET /networks/{network_id}/policies/byClient`	client_id, client_name, group_policy_id, policy_name, policy_type, ssid_numbers
`meraki_network_vlan_profiles`	`GET /networks/{network_id}/vlanProfiles`	iname, name, is_default, vlan_name_count, vlan_group_count, vlan_names
`meraki_network_alerts_settings`	`GET /networks/{network_id}/alerts/settings`	alert_type, enabled, dest_emails, dest_snmp, dest_all_admins, dest_http_server_ids, has_destination
`meraki_network_alerts_history`	`GET /networks/{network_id}/alerts/history`	occurred_at, alert_type_id, alert_type, device_serial, device_name, email_sent_at, push_sent_at
`meraki_network_webhook_http_servers`	`GET /networks/{network_id}/webhooks/httpServers`	http_server_id, name, url, payload_template_id, payload_template_name
`meraki_network_webhook_payload_templates`	`GET /networks/{network_id}/webhooks/payloadTemplates`	payload_template_id, name, template_type, body
`meraki_network_syslog_servers`	`GET /networks/{network_id}/syslogServers`	host, port, roles
`meraki_network_snmp`	`GET /networks/{network_id}/snmp`	access, community_string, user_count
`meraki_network_netflow`	`GET /networks/{network_id}/netflow`	reporting_enabled, collector_ip, collector_port, eta_enabled, eta_dst_port
`meraki_network_traffic_analysis`	`GET /networks/{network_id}/trafficAnalysis`	mode, custom_pie_chart_item_count
`meraki_network_settings`	`GET /networks/{network_id}/settings`	local_status_page_enabled, remote_status_page_enabled, secure_port_enabled, local_status_page_auth_enabled, local_status_page_auth_username, local_status_page_password_set, named_vlans_enabled
`meraki_network_firmware_upgrades`	`GET /networks/{network_id}/firmwareUpgrades`	product_type, current_version_id, current_firmware, current_short_name, current_release_type, current_release_date, last_upgrade_time
`meraki_network_clients_overview`	`GET /networks/{network_id}/clients/overview`	client_total, clients_with_heavy_usage, usage_average, usage_heavy_average
`meraki_network_clients_bandwidth_history`	`GET /networks/{network_id}/clients/bandwidthUsageHistory`	ts, total_kbps, upstream_kbps, downstream_kbps
`meraki_network_topology_nodes`	`GET /networks/{network_id}/topology/linkLayer`	derived_id, mac, node_type, is_root, device_serial, device_name, device_model
`meraki_network_topology_links`	`GET /networks/{network_id}/topology/linkLayer`	link_index, a_derived_id, a_node_type, a_serial, a_name, a_lldp_port, a_cdp_port
`meraki_network_floor_plans`	`GET /networks/{network_id}/floorPlans`	floor_plan_id, name, image_url, image_extension, image_url_expires_at, width, height
`meraki_network_events_appliance`	`GET /networks/{network_id}/events?productType=appliance`	occurred_at, event_type, description, category, client_id, client_description, client_mac
`meraki_network_events_switch`	`GET /networks/{network_id}/events?productType=switch`	occurred_at, event_type, description, category, client_id, client_description, client_mac
`meraki_network_event_types`	`GET /networks/{network_id}/events/eventTypes`	category, event_type, description
`meraki_camera_permissions`	`GET /organizations/{org_id}/camera/permissions`	permission_id, name, level
`meraki_camera_roles`	`GET /organizations/{org_id}/camera/roles`	role_id, name, applied_org_wide
`meraki_camera_onboarding_statuses`	`GET /organizations/{org_id}/camera/onboarding/statuses`	serial, network_id, status, updated_at
`meraki_camera_custom_analytics_artifacts`	`GET /organizations/{org_id}/camera/customAnalytics/artifacts`	artifact_id, organization_id, name, status_type, status_message
`meraki_camera_boundaries_areas`	`GET /organizations/{org_id}/camera/boundaries/areas/byDevice`	serial, boundary_id, boundary_type
`meraki_camera_boundaries_lines`	`GET /organizations/{org_id}/camera/boundaries/lines/byDevice`	serial, boundary_id, boundary_type
`meraki_camera_quality_retention_profiles`	`GET /networks/{network_id}/camera/qualityRetentionProfiles`	profile_id, name, max_retention_days, motion_based_retention_enabled, restricted_bandwidth_mode_enabled, audio_recording_enabled, cloud_archive_enabled
`meraki_camera_schedules`	`GET /networks/{network_id}/camera/schedules`	schedule_id, name
`meraki_camera_wireless_profiles`	`GET /networks/{network_id}/camera/wirelessProfiles`	profile_id, name, ssid_name, ssid_auth_mode, ssid_encryption_mode, psk_is_set, applied_device_count
`meraki_camera_quality_and_retention`	`GET /devices/{serial}/camera/qualityAndRetention`	profile_id, motion_based_retention_enabled, audio_recording_enabled, restricted_bandwidth_mode_enabled, quality, resolution, motion_detector_version
`meraki_camera_video_settings`	`GET /devices/{serial}/camera/videoSettings`	external_rtsp_enabled, rtsp_url
`meraki_camera_sense`	`GET /devices/{serial}/camera/sense`	sense_enabled, mqtt_broker_id, audio_detection_enabled, detection_model_id
`meraki_camera_analytics_zones`	`GET /devices/{serial}/camera/analytics/zones`	zone_id, label, zone_type
`meraki_camera_custom_analytics`	`GET /devices/{serial}/camera/customAnalytics`	enabled, artifact_id
`meraki_sensor_readings_latest`	`GET /organizations/{org_id}/sensor/readings/latest`	serial, network_id, network_name, metric, reading_ts, temperature_celsius, temperature_fahrenheit
`meraki_sensor_alerts_current`	`GET /organizations/{org_id}/sensor/alerts/current/overview/byMetric`	metric, alerting_count, supported_metrics
`meraki_sensor_alerts_overview`	`GET /organizations/{org_id}/sensor/alerts/overview/byMetric`	start_ts, end_ts, metric, alert_count
`meraki_sensor_alert_profiles`	`GET /networks/{network_id}/sensor/alerts/profiles`	profile_id, name, schedule_id, schedule_name, serials, recipient_emails, recipient_sms_numbers
`meraki_sensor_mqtt_brokers`	`GET /networks/{network_id}/sensor/mqttBrokers`	mqtt_broker_id, enabled
`meraki_sensor_relationships`	`GET /networks/{network_id}/sensor/relationships`	serial, device_name, device_product_type, related_serial, related_product_type
`meraki_cellular_uplink_statuses`	`GET /organizations/{org_id}/cellularGateway/uplink/statuses`	network_id, serial, model, last_reported_at, interface, status, ip
`meraki_cellular_esims_inventory`	`GET /organizations/{org_id}/cellularGateway/esims/inventory`	eid, iccid, status, device_serial, device_model, network_id, provider_name
`meraki_cellular_esim_service_providers`	`GET /organizations/{org_id}/cellularGateway/esims/serviceProviders`	name, is_bootstrap, logo_url
`meraki_cellular_esim_accounts`	`GET /organizations/{org_id}/cellularGateway/esims/serviceProviders/accounts`	account_id, title, username, provider_name, last_updated_at
`meraki_cellular_dhcp`	`GET /networks/{network_id}/cellularGateway/dhcp`	dhcp_lease_time, dns_nameservers, custom_dns_servers
`meraki_cellular_subnet_pool`	`GET /networks/{network_id}/cellularGateway/subnetPool`	mask, cidr, deployment_mode
`meraki_cellular_uplink_settings`	`GET /networks/{network_id}/cellularGateway/uplink`	bandwidth_limit_up_kbps, bandwidth_limit_down_kbps
`meraki_cellular_connectivity_monitoring`	`GET /networks/{network_id}/cellularGateway/connectivityMonitoringDestinations`	destination_ip, description, is_default
`meraki_cellular_device_lan`	`GET /devices/{serial}/cellularGateway/lan`	device_name, device_lan_ip, device_subnet, fixed_ip_assignment_count, reserved_ip_range_count
`meraki_cellular_device_port_forwarding`	`GET /devices/{serial}/cellularGateway/portForwardingRules`	rule_index, name, lan_ip, public_port, local_port, protocol, access
`meraki_sm_apns_cert`	`GET /organizations/{org_id}/sm/apnsCert`	cert_pem, cert_length
`meraki_sm_vpp_accounts`	`GET /organizations/{org_id}/sm/vppAccounts`	vpp_account_id, name, email, token_expires_at, last_force_synced_at
`meraki_sm_admin_roles`	`GET /organizations/{org_id}/sm/admins/roles`	role_id, name, scope, tags
`meraki_sm_devices`	`GET /networks/{network_id}/sm/devices`	device_id, name, serial, wifi_mac, os_name, system_model, system_type
`meraki_sm_users`	`GET /networks/{network_id}/sm/users`	user_id, email, full_name, username, display_name, is_external, has_password
`meraki_sm_profiles`	`GET /networks/{network_id}/sm/profiles`	profile_id, name, description, scope, tags, payload_types
`meraki_sm_target_groups`	`GET /networks/{network_id}/sm/targetGroups`	target_group_id, name, scope, tags
`meraki_sm_trusted_access_configs`	`GET /networks/{network_id}/sm/trustedAccessConfigs`	trusted_access_config_id, name, ssid_name, scope, access_start_at, access_end_at, tags
`meraki_sm_user_access_devices`	`GET /networks/{network_id}/sm/userAccessDevices`	user_access_device_id, name, email, mac, username, system_type, trusted_access_connection_count

Every table also carries org_id, org_name, a raw_json copy of the source object, and a run_at batch timestamp. Network-scoped tables add network_id and network_name; per-AP tables add serial and device_name; per-SSID tables add ssid_number and ssid_name.

Troubleshooting

Everything returns 404. Dashboard API access is not enabled on that organization. See Step 1 — it is a per-org switch, and enabling it in one org does nothing for the others. 401 on every call. The key was revoked, or the admin account that owns it was deactivated. Generate a new one and update the secret. Some networks are missing. The key belongs to a network-scoped admin. Regenerate it from a full organization admin. Wireless tables are empty but meraki_devices has rows. Check product_types on meraki_networks — the wireless collectors only walk networks that include wireless. A network of MX/MS hardware with no MR access points is correctly skipped. Per-SSID tables are empty. They depend on meraki_wireless_ssids and only walk SSIDs with enabled = 1. Run the SSIDs script first; if every SSID slot is disabled, there is genuinely nothing to fetch. A single script logs 400/403/404 and continues. That is deliberate. Hotspot 2.0, Bluetooth, mesh, and the alternate management interface are not supported on every hardware generation or licence tier, so an unavailable endpoint is skipped with a log line rather than failing the whole run.

What you can’t ingest with this setup

Per-client connectivity events (GET /networks/{id}/wireless/clients/{clientId}/connectivityEvents). One call per client — infeasible to sweep for an estate of any size. The network-level Wireless Event Log covers the same ground in aggregate. Open a feature request if you need per-client depth for a named investigation.
Live tools (ping, cable test, throughput test, packet capture). These are on-demand actions against a device, not inventory — they mutate state and take seconds to minutes to return. Out of scope for a scheduled collector.
Signal-quality, client-count, data-rate and usage history. Deliberately left out of this pass to keep row growth predictable. The Channel Utilization History script is included as the representative time-series. Request the others if you want them.
Live tools and on-demand actions remain out of scope, as above. Beyond those, every read endpoint Cisco exposes on the Dashboard API is now collected.

Platform

Integrations

⚠️ Required: a full-organization read-only admin

Step 1: Enable Dashboard API access

Step 2: Generate the API key

Step 3: Add the secret to ConfigView

Step 4: Choose which parts of Meraki to collect

About the Logs folder

Load order

Foundation — enable these first

Wi-Fi troubleshooting — the ones that answer “why is it broken”

Wireless configuration — the “settings” half

Organization governance — access, licensing, and audit

Security appliance (MX) — the network edge

Switching (MS) — ports and the switching fabric

Network-wide — the things that belong to a site, not a product

Camera, sensor, cellular gateway and Systems Manager

Credentials are never stored

Rate limits and scheduling

Watch these three for row growth

Table reference

Troubleshooting

What you can’t ingest with this setup

​⚠️ Required: a full-organization read-only admin

​Step 1: Enable Dashboard API access

​Step 2: Generate the API key

​Step 3: Add the secret to ConfigView

​Step 4: Choose which parts of Meraki to collect

​About the Logs folder

​Load order

​Foundation — enable these first

​Wi-Fi troubleshooting — the ones that answer “why is it broken”

​Wireless configuration — the “settings” half

​Organization governance — access, licensing, and audit

​Security appliance (MX) — the network edge

​Switching (MS) — ports and the switching fabric

​Network-wide — the things that belong to a site, not a product

​Camera, sensor, cellular gateway and Systems Manager

​Credentials are never stored

​Rate limits and scheduling

​Watch these three for row growth

​Table reference

​Troubleshooting

​What you can’t ingest with this setup

⚠️ Required: a full-organization read-only admin

Step 1: Enable Dashboard API access

Step 2: Generate the API key

Step 3: Add the secret to ConfigView

Step 4: Choose which parts of Meraki to collect

About the Logs folder

Load order

Foundation — enable these first

Wi-Fi troubleshooting — the ones that answer “why is it broken”

Wireless configuration — the “settings” half

Organization governance — access, licensing, and audit

Security appliance (MX) — the network edge

Switching (MS) — ports and the switching fabric

Network-wide — the things that belong to a site, not a product

Camera, sensor, cellular gateway and Systems Manager

Credentials are never stored

Rate limits and scheduling

Watch these three for row growth

Table reference

Troubleshooting

What you can’t ingest with this setup