Provides tools for managing TP-Link routers (Archer/AX series), including listing connected clients, router status, WiFi information, DHCP leases, ethernet port status, and rebooting the router via the router's web API.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@tplink-mcp list all connected clients"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
next time imma flash my own openwrt so i dont have to do this shit
A CLI + MCP tool for TP-Link Archer/AX routers, so you can manage the router from the terminal instead of the web UI. Reverse-engineered from the site's JS.
With uv, install it as a global tool - puts tplink and
tplink-mcp on your PATH:
uv tool install '.[mcp]' # from a local checkout
# uv tool install 'tplinkcli[mcp]' # once published to PyPIThen put your credentials in ~/.config/tplink/.env:
ROUTER_IP=192.168.0.1
ROUTER_USERNAME=admin
ROUTER_PASSWORD=your-router-passwordCredentials are also read from environment variables, a project-local .env, or a file
pointed to by $TPLINK_ENV (precedence, low → high: user config → project .env →
$TPLINK_ENV → env vars → --host/--password flags).
Related MCP server: miwifi-mcp
The router only allows one admin session at a time, so each tplink <command> logs
in, runs, and logs out, releasing the session for the web UI. For several commands in a
row, use the interactive session instead:
tplink # interactive session:
tplink> clients
tplink> raw status?form=internet --op read # no quoting needed in here
tplink> exit # logs outOne-shot commands:
tplink clients # connected devices with IP + MAC
tplink status # mode, WAN IP, uptime, CPU/mem, SSIDs
tplink wifi # SSID + on/off per band (passwords hidden; --reveal-secrets)
tplink stats # per-client wireless signal (dBm), PHY rate, band
tplink ports # physical ethernet port link status
tplink dhcp # DHCP leases
tplink watch clients|leases # live poll: print join/leave/IP-change diffs (Ctrl-C to stop)
tplink dhcp-config # DHCP server pool / lease time / DNS
tplink reservations # DHCP address reservations
tplink syslog --level ERROR --limit 50 # system log (DHCP/SAE/DFS events)
tplink radio 5g # radio settings for a band (channel, width, security)
tplink wifi-adv 5g # advanced: WMM, beacon/DTIM/RTS, tx power, OFDMA, TWT, band steering
tplink firmware # firmware/hardware version + cloud update check
tplink wan # WAN/internet status (JSON)
tplink ipv6 # IPv6 WAN + LAN status
tplink session # session age / login count
tplink dump -o snap.json # full-state snapshot (config-drift diffing)
tplink reboot # reboot (asks to confirm; --yes to skip)
tplink raw 'status?form=client_status' --op load --json # call any endpoint directlyQuote the raw path in your shell (the ? is a glob) — not needed inside the interactive
session. Add --json to most commands for machine-readable output.
Exposes the router to an AI agent — 24 tools including get_syslog, get_client_stats,
get_dhcp_settings/set_dhcp_settings, list_reservations/add_reservation,
get_wifi_radio/set_wifi_channel/set_wifi_security, get_wps/set_wps,
get_guest_network/set_guest_network, session_info, list_endpoints, and raw_request.
Wi-Fi passwords are redacted by default (reveal_secrets=true to opt in); radio-restarting
writes require confirm=true.
tplink-mcpExample Claude Code config (credentials via ~/.config/tplink/.env or inline env):
{
"mcpServers": {
"tplink": {
"command": "tplink-mcp",
"env": { "ROUTER_IP": "192.168.0.1", "ROUTER_PASSWORD": "..." }
}
}
}Work on the code from a checkout without installing globally:
uv sync --extra mcp # dev tools (pytest) are in the default dependency group
uv run pytest -q # crypto tests run offline (synthetic vectors only)
uv run tplink status # run against the router without a global install
uv tool install --force '.[mcp]' # reinstall the global tool after changesReserve an IP for a MAC (AA-BB-CC-DD-EE-FF). The correct fix for a device stuck in static-in-pool limbo — reserve it instead of relying on a static IP inside the pool.
Inputs: ip (required), mac (required), comment.
Ask the TP-Link cloud whether a firmware update is available (update_number>0 = yes).
Inputs: no named parameters. Returns: object
Current DHCP leases (hostname, IP, MAC, lease time).
Inputs: no named parameters. Returns: result
Physical ethernet port link status (WAN/LAN, up/down, speed, duplex).
Inputs: no named parameters. Returns: result
Per-client wireless stats for online clients: signal_dbm (RSSI), tx/rx_rate_kbps (negotiated PHY rate), band, online_seconds, packet counts. Turns "wifi is slow" into a one-call diagnosis (weak RSSI vs low PHY rate vs a specific band).
Inputs: no named parameters. Returns: result
DHCP server config: enable, pool ipaddr_start/end, leasetime (minutes), gateway, DNS.
Inputs: no named parameters. Returns: object
Current firmware version, hardware version, and model.
Inputs: no named parameters. Returns: object
Guest network config for a band. PSK redacted unless reveal_secrets=True.
Inputs: band, reveal_secrets. Returns: object
IPv6 WAN + LAN status: connection type/enable, LAN address & prefix, DNS, assign type.
Inputs: no named parameters. Returns: object
System log (newest first): [{time, level, type, content}]. Shows DHCP DECLINE loops, SAE/WPA handshake failures, DFS radar events, session kicks, etc. Filter by level (INFO/WARNING/ERROR) and/or log_type (see the router's categories).
Inputs: level, limit, log_type. Returns: result
Full radio settings for a band ('2g','5g','5g_2','6g'): ssid, channel, htmode (width), encryption, txpower, mu_mimo, airtime_fairness. PSK redacted unless reveal_secrets=True.
Inputs: band, reveal_secrets. Returns: object
Advanced radio settings ("Additional Settings"): tx power, MU-MIMO, WMM, AP isolation, airtime fairness, short GI, beacon interval, DTIM, RTS/fragmentation threshold, group-key update, plus the Wi-Fi 6 toggles OFDMA, TWT (Target Wake Time — phone power-save), and Smart Connect band steering.
Inputs: band. Returns: object
WPS global state ({wps: on/off}).
Inputs: no named parameters. Returns: object
List devices currently connected to the router (wired, wireless, guest).
Inputs: no named parameters. Returns: object
Known API endpoints for raw_request: [{form_path, operations, purpose, read_safe}]. Optionally filter to form paths/purposes containing a substring (e.g. 'dhcp', 'wireless').
Inputs: contains. Returns: result
DHCP address reservations: [{mac, ip, comment, hostname, enable}].
Inputs: no named parameters. Returns: result
Call any router endpoint, e.g. form_path='status?form=client_status', operation='load'.
An escape hatch — many forms need a specific operation ('load'/'write'/... not 'read').
Use list_endpoints() to discover valid form paths, operations, and shapes for this model.
Inputs: form_path (required), params, operation.
Reboot the router. Must be called with confirm=True to actually reboot.
Inputs: confirm. Returns: result
Delete the DHCP reservation for a MAC.
Inputs: mac (required).
Router overview: firmware/hardware version, operation mode, WAN IP, uptime, CPU/memory usage, SSIDs. Wi-Fi PSKs are redacted unless reveal_secrets=True.
Inputs: reveal_secrets. Returns: object
Session observability: age_seconds, login_count, stok_prefix — lets you see the auto-recovery (re-login) happen instead of trusting it silently.
Inputs: no named parameters. Returns: object
Update DHCP server settings (only the given fields). Restarts the DHCP server; existing leases keep their IP until renewal. leasetime is in minutes.
Inputs: enable, gateway, pri_dns, snd_dns, +3 more.
Turn a band's guest network on or off.
Inputs: band (required), enabled (required). Returns: result
Enable/disable OFDMA (Wi-Fi 6). ⚠️ Restarts the radios; clients drop briefly. confirm=True.
Inputs: enabled (required), confirm. Returns: result
Enable/disable Smart Connect band steering (single SSID across bands). ⚠️ Restarts the radios; clients drop briefly. Requires confirm=True.
Inputs: enabled (required), confirm. Returns: result
Enable/disable Target Wake Time (Wi-Fi 6 power-save; eases iOS/phone battery drain). ⚠️ Restarts the radios; clients drop briefly. Requires confirm=True.
Inputs: enabled (required), confirm. Returns: result
Enable or disable a wireless band ('2g', '5g', '5g_2', '6g').
Inputs: band (required), enabled (required). Returns: result
Set a band's channel (channel='auto' to auto-select) and optional width (htmode '20'/'40'/'80'). ⚠️ Restarts the radio: clients on that band drop for ~10 s; a DFS 5 GHz channel adds a ~60 s radar-scan quiet period. Requires confirm=True.
Inputs: band (required), channel (required), htmode, confirm. Returns: result
Set a band's security mode / PSK. ⚠️ Restarts the radio and disconnects EVERY client on that band until they re-auth with the new settings. Requires confirm=True.
Inputs: band (required), encryption (required), confirm, password. Returns: result
Set per-band tx power ('high'/'mid'/'low'), MU-MIMO, and/or airtime fairness. ⚠️ Restarts the radio; clients on the band drop briefly. Requires confirm=True.
Inputs: band (required), confirm, mu_mimo, txpower, +1 more. Returns: result
Set the advanced radio parameters for a band — WMM, AP isolation, beacon interval, DTIM period, RTS/fragmentation threshold, group-key update interval. ⚠️ Restarts the radio; clients on the band drop briefly. Requires confirm=True.
Inputs: band (required), wmm, dtim, confirm, +5 more. Returns: result
Enable or disable WPS globally.
Inputs: enabled (required). Returns: result
SSID, security and on/off state per band. Passwords redacted unless reveal_secrets=True.
Inputs: reveal_secrets. Returns: result
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 33 tools
The Wi-Fi read surface is split across wifi_info, get_wifi_radio, get_wireless_advanced, and router_status with overlapping SSID/security/txpower/MU-MIMO fields; set_wireless_advanced vs set_wireless_syspara also require close reading. Descriptions are detailed enough to resolve most cases, so overlap exists but is usually manageable.
Most names are snake_case and action-oriented, but the set mixes verb_noun patterns (get_firmware_info, list_clients, set_wifi_band) with noun-only names (router_status, wifi_info, dhcp_leases, ethernet_ports, session_info). It remains readable, but there is no single predictable naming convention throughout.
33 tools is beyond the 25-tool threshold and many are granular setters (set_ofdma, set_twt, set_smart_connect, set_wireless_syspara) that could plausibly be consolidated. The router domain is broad, but the tool surface feels heavy for what an agent can reliably select among.
Core Wi-Fi, DHCP, client diagnostics, reservations, and reboot workflows are covered, and raw_request/list_endpoints provide an escape hatch. However, common router administration areas like port forwarding, firewall/MAC filtering, LAN settings, VPN/QoS, and device blocking are absent as first-class tools.
IP intelligence, network diagnostics, and AI service availability tools for AI agents.
Connect AI assistants to authorized Windows and macOS devices for files, commands, and management.
Connect AI assistants to your approved computer for files, commands, browser and desktop tasks.
Control a real browser from AI agents: navigate, click, type, screenshot, read the page.