OPNsense Firewall Manager
A modular MCP server that provides access to over 2,000 OPNsense firewall management methods through 88 specialized tools. It enables AI assistants to securely manage firewall rules, network interfaces, and system diagnostics using a type-safe TypeSc
What is OPNsense Firewall Manager?
OPNsense Firewall Manager is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to modular mcp server that provides access to over 2,000 opnsense firewall management methods through 88 specialized tools. it enables ai assistants to securely manage firewall rules, network interfaces,...
A modular MCP server that provides access to over 2,000 OPNsense firewall management methods through 88 specialized tools. It enables AI assistants to securely manage firewall rules, network interfaces, and system diagnostics using a type-safe TypeSc
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- A modular MCP server that provides access to over 2,000 OPNs
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx opnsense-mcp-serverConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use OPNsense Firewall Manager
OPNsense MCP Server is a modular TypeScript server that gives AI assistants secure, authenticated access to over 2,000 OPNsense firewall management methods through 88 specialized tool modules. Core tools cover firewall rules, network interfaces, VPN (OpenVPN, IPsec, WireGuard), DNS (Unbound), DHCP, diagnostics, authentication, and firmware management; an optional plugin layer adds 64 more tools for Nginx, HAProxy, Caddy, BIND, and ACME certificate automation. Network engineers and DevOps teams can use it to query firewall state, create rules, restart services, and run diagnostics using natural-language prompts instead of navigating the OPNsense web UI.
Prerequisites
- An OPNsense firewall reachable over HTTPS from the machine running the MCP server
- OPNsense API key and API secret (generated from OPNsense → System → Access → Users → your user → API Keys)
- Node.js 18 or later
- An MCP-compatible AI client such as Claude Desktop, Cursor, or Windsurf
Generate an OPNsense API key
Log in to your OPNsense web interface, navigate to System → Access → Users, edit your admin user, and create a new API key pair. Copy both the key and the secret — the secret is shown only once.
Install the MCP server package
Install the package globally via npm so it is available for npx invocation.
npm install -g @richard-stovall/opnsense-mcp-serverSet required environment variables
The server requires three environment variables. Optionally disable SSL verification if your OPNsense uses a self-signed certificate.
export OPNSENSE_URL="https://192.168.1.1"
export OPNSENSE_API_KEY="your_api_key"
export OPNSENSE_API_SECRET="your_api_secret"
# Optional: disable SSL verification for self-signed certs
export OPNSENSE_VERIFY_SSL="false"Enable plugin tools (optional)
To expose all 64 plugin module tools (Nginx, HAProxy, Caddy, etc.), set the INCLUDE_PLUGINS variable.
export INCLUDE_PLUGINS="true"Add to your MCP client configuration
Edit your claude_desktop_config.json and add the server entry with all required environment variables.
Restart your client and test
Restart Claude Desktop or your chosen client. Ask it to list active firewall rules to confirm the connection is working.
OPNsense Firewall Manager Examples
Client configuration
Full claude_desktop_config.json entry for OPNsense MCP Server with plugin tools enabled.
{
"mcpServers": {
"opnsense": {
"command": "npx",
"args": ["-y", "@richard-stovall/opnsense-mcp-server"],
"env": {
"OPNSENSE_URL": "https://192.168.1.1",
"OPNSENSE_API_KEY": "your-api-key",
"OPNSENSE_API_SECRET": "your-api-secret",
"OPNSENSE_VERIFY_SSL": "false",
"INCLUDE_PLUGINS": "true"
}
}
}
}Prompts to try
After connecting, use natural language to manage your OPNsense firewall.
- "List all active firewall rules and highlight any rules that allow inbound traffic from the internet on port 22."
- "Show the current status of the WireGuard VPN and list connected peers."
- "Run a DNS lookup for example.com using the Unbound resolver and show the response time."Troubleshooting OPNsense Firewall Manager
SSL certificate verification error on startup
If OPNsense is using a self-signed certificate, set OPNSENSE_VERIFY_SSL=false in the env block. For production environments, install a valid certificate from Let's Encrypt using the ACME plugin.
403 Forbidden when calling firewall tools
The OPNsense API user must have sufficient privileges. Navigate to System → Access → Users, edit the API user, and grant it the required privilege groups (e.g. Firewall, Interfaces, VPN). Then regenerate API credentials.
Plugin tools not appearing even with INCLUDE_PLUGINS=true
Plugin tools are only available if the corresponding OPNsense plugins are installed. Install the required plugins (e.g. os-nginx, os-haproxy) through OPNsense → System → Firmware → Plugins, then restart the MCP server.
Frequently Asked Questions about OPNsense Firewall Manager
What is OPNsense Firewall Manager?
OPNsense Firewall Manager is a Model Context Protocol (MCP) server that modular mcp server that provides access to over 2,000 opnsense firewall management methods through 88 specialized tools. it enables ai assistants to securely manage firewall rules, network interfaces, and system diagnostics using a type-safe typesc It connects AI assistants to external tools and data sources through a standardized interface.
How do I install OPNsense Firewall Manager?
Follow the installation instructions on the OPNsense Firewall Manager GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with OPNsense Firewall Manager?
OPNsense Firewall Manager works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is OPNsense Firewall Manager free to use?
Yes, OPNsense Firewall Manager is open source and available under the MIT License license. You can use it freely in both personal and commercial projects.
OPNsense Firewall Manager Alternatives — Similar Security Servers
Looking for alternatives to OPNsense Firewall Manager? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up OPNsense Firewall Manager in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use OPNsense Firewall Manager?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.