adguard-mcp
Provides tools for managing AdGuard Home instances and AdGuardHome Sync, including status, stats, DNS query log, filter lists, user rules, clients, blocked services, DNS configuration, SafeSearch, SafeBrowsing, and synchronization between instances. Supports reading, safe writes, and destructive operations.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@adguard-mcpwhat's the current protection status?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
adguard-mcp
MCP server exposing AdGuard Home read/write tools across one or more instances, plus AdGuardHome Sync status and control. 33 tools (14 reads / 13 safe-writes / 6 destructive). Three-tier write gating: reads are open, writes require confirm: true, destructive ops require confirm: true + destructive: true.
Tools
Reads (14): adguard_status, adguard_stats, adguard_query_log, adguard_list_filter_lists, adguard_list_user_rules, adguard_list_clients, adguard_list_blocked_services_catalog, adguard_check_host, adguard_get_blocked_services, adguard_get_dns_config, adguard_get_safesearch_settings, adguard_sync_status, adguard_sync_health, adguard_sync_logs.
Tool | Description |
| Server status + protection state ( |
| Stats window: top queries, blocked counts, clients ( |
| DNS query log slice with filters ( |
| Subscribed blocklists + allowlists ( |
| Custom user rules ( |
| Configured named clients ( |
| Available service IDs to block ( |
| Test what AGH would do with a hostname: filter decision, matched rules, CNAME chain, IPs ( |
| Global blocked-services list + weekly schedule ( |
| DNS upstreams, bootstrap, cache, parallel resolution, blocking mode ( |
| SafeSearch enabled state + per-engine flags ( |
| AdGuardHome Sync origin/replica status ( |
| AdGuardHome Sync health check ( |
| AdGuardHome Sync in-memory logs ( |
Safe writes (13, require confirm: true): adguard_add_user_rule, adguard_remove_user_rule, adguard_add_filter_list, adguard_remove_filter_list, adguard_toggle_filter_list, adguard_set_client_blocked_services, adguard_refresh_filter_lists, adguard_add_client, adguard_update_client, adguard_set_blocked_services, adguard_toggle_safesearch, adguard_toggle_safebrowsing, adguard_sync_run.
Tool | Description |
| Append a single user filter rule ( |
| Remove a single user filter rule by exact match ( |
| Subscribe to a new blocklist or allowlist URL ( |
| Unsubscribe from a filter list by URL ( |
| Enable or disable a subscribed filter list ( |
| Set per-client blocked services + schedule ( |
| Force refresh subscribed filter lists immediately ( |
| Register a new named client with per-client settings ( |
| Full update for an existing named client; body is nested |
| Set GLOBAL blocked services + optional weekly schedule; accepts HH:MM strings or ms ( |
| Enable or disable SafeSearch globally with per-engine flags ( |
| Enable or disable AGH SafeBrowsing ( |
| Trigger AdGuardHome Sync immediately ( |
Destructive (6, require confirm: true + destructive: true): adguard_replace_user_rules, adguard_toggle_protection, adguard_delete_client, adguard_clear_query_log, adguard_reset_stats, adguard_sync_clear_logs.
Tool | Description |
| Wholesale replace the user rules block ( |
| Enable or disable global filtering; off stops ALL blocking ( |
| Remove a configured named client; per-client rules and stats are lost ( |
| Wipe the DNS query log ( |
| Zero the stats window ( |
| Clear AdGuardHome Sync in-memory logs ( |
Configuration
Set per-instance env vars. At least one instance is required.
ADGUARD_PRIMARY_URL=http://192.168.1.10
ADGUARD_PRIMARY_USERNAME=admin
ADGUARD_PRIMARY_PASSWORD=<password>
# Optional second instance:
ADGUARD_SECONDARY_URL=http://192.168.1.11
ADGUARD_SECONDARY_USERNAME=admin
ADGUARD_SECONDARY_PASSWORD=<password>
# Optional: which instance is default when a tool omits the `instance` arg:
ADGUARD_DEFAULT_INSTANCE=primaryInstance names are derived from the env-var middle segment (case-insensitive). Add ADGUARD_LIVINGROOM_URL/USERNAME/PASSWORD and the MCP picks it up on next start.
Every tool accepts optional instance: "<name>" to address a non-default box.
AdGuardHome Sync is optional and uses a separate env prefix so it does not collide with AdGuard Home instance names:
ADGUARDHOME_SYNC_URL=http://192.0.2.10:8080
# Optional, only when the Sync API is configured with Basic auth:
ADGUARDHOME_SYNC_USERNAME=sync
ADGUARDHOME_SYNC_PASSWORD=<password>ADGUARD_SYNC_URL/USERNAME/PASSWORD is also accepted as an alias and is reserved for the Sync server, not an AdGuard Home instance named sync.
If neither Sync URL env var is set, Sync tools remain listed but return a clear config error when called.
Install
npm install -g @solomonneas/adguard-mcpOr run via npx:
npx -y @solomonneas/adguard-mcpSetup
Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"adguard": {
"command": "npx",
"args": ["-y", "@solomonneas/adguard-mcp"],
"env": {
"ADGUARD_PRIMARY_URL": "http://192.168.1.10",
"ADGUARD_PRIMARY_USERNAME": "admin",
"ADGUARD_PRIMARY_PASSWORD": "your-password"
}
}
}
}Claude Code
claude mcp add adguard -s user -- npx -y @solomonneas/adguard-mcpThen export env vars in your shell (~/.bashrc, ~/.zshrc) or pass --env flags.
OpenClaw
Plugin loads automatically once installed. Config goes in your ~/.openclaw/openclaw.json plugins.entries.adguard (or use the bundled openclaw.plugin.json):
{
"plugins": {
"entries": {
"adguard": {
"package": "@solomonneas/adguard-mcp",
"activation": { "onStartup": true }
}
}
}
}Env vars from ~/.openclaw/workspace/.env are inherited by the plugin.
Hermes Agent
Add to ~/.config/hermes/agents.yaml:
mcp_servers:
adguard:
command: npx
args: ["-y", "@solomonneas/adguard-mcp"]
env:
ADGUARD_PRIMARY_URL: http://192.168.1.10
ADGUARD_PRIMARY_USERNAME: admin
ADGUARD_PRIMARY_PASSWORD: your-passwordCodex CLI
~/.codex/config.toml:
[mcp_servers.adguard]
command = "npx"
args = ["-y", "@solomonneas/adguard-mcp"]
[mcp_servers.adguard.env]
ADGUARD_PRIMARY_URL = "http://192.168.1.10"
ADGUARD_PRIMARY_USERNAME = "admin"
ADGUARD_PRIMARY_PASSWORD = "your-password"Safety
Credentials only live in memory after env-load and are redacted from logs and error messages.
Tier 2 writes require an explicit
confirm: truearg; the JSON schema documents this on every write tool.Tier 3 destructive ops additionally require
destructive: true. The model cannot disable protection or overwrite the rules block from a hallucinated tool call.
License
MIT
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/solomonneas/adguard-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server