AsusWRT MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ASUSWRT_HOST | No | The hostname or IP address of the AsusWRT router. | |
| ASUSWRT_SSH_PORT | No | SSH port for the router. Defaults to 22. | 22 |
| ASUSWRT_SSH_KEY_FILE | No | Path to the SSH private key file for authentication (key authentication is recommended). | |
| ASUSWRT_SSH_PASSWORD | No | SSH password for authentication. | |
| ASUSWRT_SSH_USERNAME | No | SSH username for the router. | |
| ASUSWRT_ALLOW_MUTATIONS | No | Whether to enable mutation tools. Defaults to false. | false |
| ASUSWRT_TIMEOUT_SECONDS | No | Connection timeout in seconds. Defaults to 10. | 10 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| asuswrt_capabilitiesB | Return server capabilities, guardrails, and safe settings. |
| asuswrt_healthA | Fetch router identity and basic health data. |
| asuswrt_ssh_diagnosticsA | Diagnose SSH TCP reachability, banner exchange, and authentication. |
| asuswrt_identityB | Fetch router model and firmware identity. |
| asuswrt_system_statsA | Fetch router uptime, load, and memory statistics. |
| asuswrt_network_overviewA | Fetch LAN, WAN, and routing overview details. |
| asuswrt_lan_detailsA | Inspect LAN interface, addressing, and DHCP presence. |
| asuswrt_wan_detailsA | Inspect WAN protocol, IP, gateway, DNS, and interface details. |
| asuswrt_dns_configA | Inspect WAN and LAN DNS settings reported by NVRAM. |
| asuswrt_dns_filter_statusB | Inspect DNS Filter/Director enablement and redacted configuration counts. |
| asuswrt_dns_privacy_statusB | Inspect DNS-over-TLS and DNSSEC posture using redacted rule counts only. |
| asuswrt_ipv6_statusA | Inspect IPv6 service, prefix, and router address details. |
| asuswrt_dhcp_configA | Inspect DHCP server pool settings and static reservations. |
| asuswrt_time_syncA | Inspect timezone and NTP synchronization settings. |
| asuswrt_web_adminB | Inspect web admin ports and related web processes. |
| asuswrt_admin_accessA | Inspect web, SSH, and telnet administrative access settings. |
| asuswrt_clientsB | List connected clients reported by the router. |
| asuswrt_dhcp_leasesB | List active DHCP leases from dnsmasq. |
| asuswrt_arp_neighborsA | List ARP/IP neighbor entries known by the router. |
| asuswrt_service_processesA | List key allowlisted router processes and services. |
| asuswrt_wireless_overviewB | Inspect wireless radios, SSIDs, and connected band counts. |
| asuswrt_firewall_statusB | Inspect firewall enablement and safe protection settings. |
| asuswrt_wireless_configA | Inspect per-radio Wi-Fi channel and security metadata without credentials. |
| asuswrt_qos_statusA | Inspect QoS enablement, configured mode, bandwidth, and redacted rule counts. |
| asuswrt_aiprotection_statusA | Inspect AiProtection feature enablement and non-secret DPI signature versions. |
| asuswrt_aimesh_statusA | Inspect AiMesh node counts and controller readiness without node identifiers. |
| asuswrt_vlan_guest_statusB | Inspect VLAN and guest segmentation state using redacted counts only. |
| asuswrt_dual_wan_statusA | Inspect Dual-WAN selection and uplink health without WAN addresses or policy payloads. |
| asuswrt_wps_statusA | Inspect WPS enablement and per-radio status without PIN material. |
| asuswrt_smart_connect_roaming_statusB | Inspect Smart Connect and roaming state without steering policies or client data. |
| asuswrt_wireless_advancedB | Inspect advanced per-radio Wi-Fi feature settings without credentials. |
| asuswrt_wireless_schedule_statusB | Inspect sanitized per-radio Wi-Fi scheduling state without raw v2 schedule payloads. |
| asuswrt_guest_networksB | List guest Wi-Fi networks and LAN-access state. |
| asuswrt_firmware_update_statusA | Inspect read-only firmware update status without checking, downloading, or flashing firmware. |
| asuswrt_interface_statsA | Inspect per-interface RX/TX counters from /proc/net/dev. |
| asuswrt_open_portsA | Inspect listening TCP/UDP sockets reported by netstat. |
| asuswrt_kernel_modulesA | Inspect loaded kernel modules reported by lsmod. |
| asuswrt_cron_jobsA | Inspect scheduled cron jobs reported by cru. |
| asuswrt_conntrack_statusA | Inspect conntrack table usage and limits. |
| asuswrt_samba_statusA | Inspect Samba/SMB status and related processes. |
| asuswrt_usb_overviewA | Inspect USB/storage partitions, mounts, filesystems, and sanitized disk-monitor health without device paths or identifiers. |
| asuswrt_storage_usageB | Inspect storage/filesystem usage reported by the router. |
| asuswrt_mountsA | Inspect mounted filesystems and mount options. |
| asuswrt_partitionsA | Inspect block-device partitions reported by the router kernel. |
| asuswrt_route_tableA | Inspect the router IPv4 route table. |
| asuswrt_policy_routingB | Inspect policy-routing rules reported by ip rule. |
| asuswrt_vpn_overviewB | Inspect configured VPN modes and related processes. |
| asuswrt_vpn_client_statusA | Inspect sanitized VPN client counts, WireGuard slot/runtime health, and VPN Fusion policy counts without credentials, endpoints, or peer details. |
| asuswrt_wan_watchdog_statusA | Inspect WAN watchdog and DNS-probe posture without returning probe targets or sensitive connectivity details. |
| asuswrt_logging_statusB | Inspect local and remote syslog posture without log destinations, paths, or process command details. |
| asuswrt_traffic_monitoring_statusB | Inspect sanitized traffic analyzer, web-history, and rstats/cstats posture without traffic or history records. |
| asuswrt_auxiliary_services_statusB | Inspect auxiliary router service posture without credentials, paths, clients, or raw service configuration. |
| asuswrt_upnp_statusA | Inspect UPnP enablement and housekeeping settings. |
| asuswrt_ddns_statusA | Inspect Dynamic DNS enablement and current provider settings. |
| asuswrt_config_snapshotA | Fetch a redacted read-only configuration snapshot. |
| asuswrt_restart_serviceC | Restart an allowlisted AsusWRT service. |
| asuswrt_dhcp_serverC | Enable or disable the DHCP server. |
| asuswrt_upnpC | Enable or disable UPnP. |
| asuswrt_guest_wifiC | Enable or disable a guest Wi-Fi slot. |
| asuswrt_radioC | Enable or disable a main Wi-Fi radio band. |
| asuswrt_guest_lan_accessC | Toggle LAN access for a guest Wi-Fi slot. |
| asuswrt_port_forwardingC | List, enable/disable, add, or remove port forwarding rules. |
| asuswrt_vpn_serverC | Enable or disable the OpenVPN server toggle. |
| asuswrt_remote_syslogB | Configure remote UDP syslog to one private IPv4 destination, or disable it, with confirmation and dry-run safeguards. |
| asuswrt_wireguard_clientB | Connect, disconnect, or restart an already-configured WireGuard client slot with confirmation and dry-run safeguards. |
| asuswrt_parental_accessC | List or manage AsusWRT parental access rules. |
| asuswrt_parental_block_allC | Toggle parental-control block-all mode. |
| asuswrt_dhcp_reservationC | List, add, or remove DHCP static reservations via SSH NVRAM. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| AsusWRT MCP capabilities | |
| Last redacted AsusWRT snapshot |
TDQS
Scored across 68 tools
Each tool targets a distinct router subsystem or action, and descriptions clearly scope them (e.g., DNS config vs. DNS filter vs. DNS privacy). However, the sheer number of similar status tools (e.g., multiple wireless and VPN statuses) increases the chance of misselection for broad queries.
All tools use the `asuswrt_` prefix and snake_case consistently, with clear, descriptive suffixes. The pattern is predictable across both read-only inspection and write/toggle tools.
68 tools is far beyond the typical range for a cohesive MCP server. While the router domain is complex, many status tools could be consolidated into fewer parameterized calls, making the set unnecessarily heavy and harder to navigate.
The surface covers a wide range of router management areas—network, wireless, firewall, VPN, DHCP, DNS, storage, logging, and parental controls—with both read and write operations. Minor gaps exist (e.g., no firmware upgrade or full QoS rule management), but core workflows are well supported.