Which integrations are available for this server?

Provides tools for managing OPNsense firewall including system status, services, DHCP leases, DNS overrides, firewall rules, and NAT port forwards via the OPNsense REST API.

How do I use mcp-opnsense?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@mcp-opnsense show me the current firewall rules" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

mcp-opnsense

by aaronckj

Overview Schema Related Servers Score Discussions

Python

Remote

mcp-opnsense

MCP server for OPNsense firewall management. Exposes 16 tools for system status, services, DHCP, DNS overrides, firewall rules, and NAT port forwards via the OPNsense REST API.

Quick Start

With uvx (recommended):

OPNSENSE_HOST=https://192.168.1.1 \
OPNSENSE_API_KEY=yourkey \
OPNSENSE_API_SECRET=yoursecret \
uvx mcp-opnsense

With Docker:

docker run -i \
  -e OPNSENSE_HOST=https://10.0.0.1 \
  -e OPNSENSE_API_KEY=yourkey \
  -e OPNSENSE_API_SECRET=yoursecret \
  ghcr.io/aaronckj/mcp-opnsense:latest

Add to Claude Code:

claude mcp add opnsense -s user \
  -e OPNSENSE_HOST=https://10.0.0.1 \
  -e OPNSENSE_API_KEY=yourkey \
  -- uvx mcp-opnsense

Then set OPNSENSE_API_SECRET in your Claude Code MCP settings.

Related MCP server: OPNsense MCP Server

Creating API Credentials

In OPNsense: System → User Manager → Users → edit a user → API keys → Add key. Copy the key and secret (the secret is only shown once).

Configuration

Variable	Required	Default	Description
`OPNSENSE_API_KEY`	Yes	—	API key from OPNsense user manager
`OPNSENSE_API_SECRET`	Yes	—	API secret from OPNsense user manager
`OPNSENSE_HOST`	No	`https://192.168.1.1`	OPNsense host URL
`OPNSENSE_TIMEOUT`	No	`30`	HTTP timeout in seconds
`OPNSENSE_VERIFY_SSL`	No	`false`	Set to `true` if using a trusted certificate

Tools

Tool	Description
`system_status`	CPU, memory, uptime, firmware version
`get_gateways`	WAN gateway status and packet loss
`list_interfaces`	All interfaces with IPs and link state
`list_services`	All services and running status
`restart_service`	Restart a named service
`apply_changes`	Apply pending firewall changes
`list_dhcp_leases`	Active and static DHCP leases
`add_static_lease`	Add a static DHCP mapping
`list_dns_overrides`	Unbound host overrides
`add_dns_override`	Add a host override (auto-reconfigures)
`delete_dns_override`	Remove a host override by UUID (auto-reconfigures)
`list_firewall_rules`	All firewall filter rules
`add_firewall_rule`	Add a rule (auto-applies)
`delete_firewall_rule`	Delete a rule by UUID (auto-applies)
`list_port_forwards`	NAT port forward rules
`add_port_forward`	Add a port forward (auto-applies)

Development

git clone https://github.com/aaronckj/mcp-opnsense
cd mcp-opnsense
uv sync --extra dev
uv run pytest -v

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/aaronckj/mcp-opnsense'

If you have feedback or need assistance with the MCP directory API, please join our Discord server