A
licenseB
qualityB
maintenanceOPNsense firewall operations via API & mcp. Query ARP, DHCP, firewall rules, logs, interfaces, system status, and packet capture via STDIO or SSE.
14
12
MIT
Best OPNSense MCP Servers
OPNsense is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform.
Why this server?
Provides tools for managing OPNsense firewall operations, including ARP, DHCP, logs, rules, interfaces, system status, and packet capture.
Why this server?
Provides comprehensive firewall operations for OPNsense appliances: reading firmware, health, interfaces, gateways, rules, NAT, aliases, VPN (WireGuard/OpenVPN/IPsec), DHCP, and firewall logs, plus governed writes such as toggling rules, editing aliases, restarting services, applying staged changes, and rebooting.
AlicenseAqualityBmaintenanceGoverned OPNsense + pfSense firewall operations — gateway-health, rule-shadow, and blocked-traffic RCA, with guarded rule/alias writes, unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.351MITWhy this server?
Provides bounded access to OPNsense using a URL and API key/secret for exact-object reads, with writes enabled only when explicitly turned on.
AlicenseAqualityBmaintenanceProvides a secure, job-oriented MCP connector for NetBox device lookup, enabling retrieval of device identity, status, site, role, and primary IP by name or ID without write access or bulk enumeration.5Apache 2.0Why this server?
Provides tools to manage firewall rules, view network interfaces, manage DHCP leases, and monitor system status on an OPNsense firewall.
AlicenseAqualityDmaintenanceEnables interaction with OPNsense firewalls through MCP tools for managing firewall rules, interfaces, DHCP leases, and system monitoring.26MITWhy this server?
Provides a safety-first MCP server for OPNsense firewalls, with read-only tools for firewall rules and aliases, interfaces, services, ARP and routing tables, firewall states and logs, system information/resources, Suricata status, and DHCP leases. It also supports policy-checked planning and applying of firewall rule and alias changes, including diffs, human approval, verification, automatic revert, rollback, and a hash-chained audit log.
AlicenseBqualityBmaintenanceEnables AI clients to inspect OPNsense 26.7+ firewall state and, with policy and a separate write-capable API user, plan, approve, apply, verify, and automatically revert firewall rule and alias changes under hash-chained auditing.2148 PyPI1MITWhy this server?
Provides tools for interacting with the OPNsense firewall API, covering all core and plugin endpoints (searchable/describable index of ~2469 endpoints and 169 models). Supports generic API calls, model CRUD operations on any controller (search, get, add, set, delete, toggle, then apply), reading and writing a whole settings model, and curated tools for a system overview, service management, neighbor discovery, firewall log inspection, and ping. Writes are disabled unless explicitly enabled.
AlicenseAqualityBmaintenanceEnables agents to search and call the full OPNsense core and plugin API, perform model-validated CRUD and settings operations, and use curated firewall, service, and network tools with optional auto-revert writes.14BSD 2-Clause "Simplified"Why this server?
Provides tools for managing OPNsense firewalls, including system status, firewall rules, network diagnostics, DNS, DHCP, VPN, HAProxy, services, and security settings.
AlicenseAqualityBmaintenanceA secure MCP server for managing OPNsense firewalls through AI assistants. Provides 81 tools across system, firewall, network, DNS, DHCP, VPN, HAProxy, services, diagnostics, and security domains.81324 PyPI21MITWhy this server?
Enables comprehensive management of OPNsense firewall infrastructure via its REST API, including tools for firewall rules, DNS overrides, DHCP mappings, system diagnostics, configuration backups, and service control.
AlicenseAqualityDmaintenanceSlim OPNsense MCP Server — 62 tools for managing firewall infrastructure via the OPNsense REST API. Covers DNS/Unbound, Firewall rules, Diagnostics, Interfaces, DHCP (ISC + Kea), System/Backups, ACME/Let's Encrypt, and Firmware. No SSH, no shell, API-only with 3 runtime dependencies. AGPL-3.0 + Commercial dual-licensed.10054 npm2AGPL 3.0Why this server?
Inspects OPNsense config.xml changes and firewall rule modifications, providing risk assessment, shadowing notes, and embedded certificate checks.
AlicenseAqualityBmaintenanceProvides read-only network engineering analysis by parsing configs and logs to explain config changes, check CIS/PCI compliance, diagnose 802.1X issues, find embedded certificates, infer topology, and assess proposed changes before pushing them.12MIT