OPNsense MCP Server
Related Servers
Alternatives to OPNsense MCP Server
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityCmaintenanceAn MCP server for comprehensive OPNsense firewall management, enabling AI assistants to manage firewall rules, NAT, VLANs, and network diagnostics, plus execute SSH/CLI commands. Supports safety modes like read-only and dry-run for safe operation.118 npmMIT
- AlicenseNot gradedqualityFmaintenanceA modular MCP server that provides access to over 2,000 OPNsense firewall management methods through 88 specialized tools. It enables AI assistants to securely manage firewall rules, network interfaces, and system diagnostics using a type-safe TypeScript interface.332 npm85MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI clients to manage OPNsense firewall, interfaces, DHCP, DNS, routes, and services via natural language through 42 MCP tools.MIT
- AlicenseNot gradedqualityAmaintenanceManage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.Apache 2.0
- AlicenseNot gradedqualityAmaintenanceThis MCP server enables AI agents to inspect and modify an OPNsense firewall via natural language, using a compact set of generic tools and a resource registry to cover 96 CRUD operations.8 npmAGPL 3.0
- AlicenseAqualityCmaintenanceEnables interaction with OPNsense firewalls through MCP tools for managing firewall rules, interfaces, DHCP leases, and system monitoring.26MIT
TDQS
Scored across 81 tools
Most tools target distinct resource/action combinations, and the descriptions carefully steer usage (e.g. DHCP backend variants, MVC vs legacy firewall rules). A few pairs could still be confused—three DHCP lease listers, DNSBL set/update/reload, and config-section vs list-rules—but the descriptions provide enough guidance to avoid frequent misselection.
All tools share the opn_ prefix and use snake_case verb_noun naming for the most part, with clear CRUD clusters like add/update/delete/toggle. Minor deviations such as opn_mcp_info, opn_firewall_log, opn_pf_states, and opn_configure_mdns_repeater break the strict pattern but remain readable and predictable.
81 tools is far beyond the well-scoped range and falls into the 50+ extreme category. Even though OPNsense is a broad platform, this many tools creates agent selection overhead and could be consolidated around grouped resources or higher-level operations.
Core firewall rules, NAT, aliases, DNS overrides/DNSBL, dnsmasq ranges, HAProxy, and DDNS have reasonable CRUD coverage. However, many subsystems are read-only or incomplete—VPNs have status only, static routes cannot be managed, no ISC/Kea DHCP configuration exists, DNS forward zones lack CRUD, and certificate lifecycle is limited to listing.