pfSense
pfSense MCP Server enables security administrators to manage their pfSense firewalls using natural language through AI assistants like Claude Desktop. Simply ask 'Show me blocked IPs' or 'Run a PCI compliance check' instead of navigating complex inte
What is pfSense?
pfSense is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to pfsense mcp server enables security administrators to manage their pfsense firewalls using natural language through ai assistants like claude desktop. simply ask 'show me blocked ips' or 'run a pci co...
pfSense MCP Server enables security administrators to manage their pfSense firewalls using natural language through AI assistants like Claude Desktop. Simply ask 'Show me blocked IPs' or 'Run a PCI compliance check' instead of navigating complex inte
This server falls under the Security and Developer Tools categories on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- pfSense MCP Server enables security administrators to manage
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx pfsense-mcp-serverConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use pfSense
The pfSense MCP Server gives security administrators the ability to manage their pfSense firewalls using natural language through AI assistants like Claude Desktop. It exposes over 327 tools across 17 operational domains including firewall rules, VPN management, DNS configuration, DHCP, routing, certificates, and system diagnostics. Instead of navigating pfSense's web GUI, administrators can ask questions like 'Show me blocked IPs' or 'Run a PCI compliance check' and receive structured, actionable results with a built-in safety framework for destructive operations.
Prerequisites
- Python 3.10 or later installed
- A pfSense firewall with the REST API enabled (pfSense Plus 23.09+ or pfSense CE with the fauxAPI package)
- pfSense API credentials: URL, and either an API key or username/password
- An MCP-compatible client such as Claude Desktop
Clone the repository
Clone the pfSense MCP Server repository from GitHub to your local machine.
git clone https://github.com/gensecaihq/pfsense-mcp-server.git
cd pfsense-mcp-serverInstall Python dependencies
Install the required Python packages using pip.
pip install -r requirements.txtConfigure environment variables
Copy the example environment file and edit it with your pfSense connection details. Set PFSENSE_URL to your firewall's address, AUTH_METHOD to 'api_key', 'basic', or 'jwt', and the corresponding credentials.
cp .env.example .env
# Edit .env and set:
# PFSENSE_URL=https://192.168.1.1
# AUTH_METHOD=api_key
# PFSENSE_API_KEY=your_api_key_hereConfigure your MCP client
Add the pfSense MCP server to your Claude Desktop configuration, pointing to the Python script in the cloned directory.
{
"mcpServers": {
"pfsense": {
"command": "python",
"args": ["/path/to/pfsense-mcp-server/server.py"],
"env": {
"PFSENSE_URL": "https://192.168.1.1",
"AUTH_METHOD": "api_key",
"PFSENSE_API_KEY": "your_api_key_here"
}
}
}
}Restart Claude Desktop and test connectivity
Restart Claude Desktop and ask it to show the pfSense system status. The server will confirm connection and show the list of available firewall management tools.
pfSense Examples
Client configuration
Claude Desktop configuration for the pfSense MCP server using API key authentication.
{
"mcpServers": {
"pfsense": {
"command": "python",
"args": ["/path/to/pfsense-mcp-server/server.py"],
"env": {
"PFSENSE_URL": "https://192.168.1.1",
"AUTH_METHOD": "api_key",
"PFSENSE_API_KEY": "your_api_key_here"
}
}
}
}Prompts to try
Example natural language commands to use with the pfSense MCP server.
- "Show me all active firewall rules on the WAN interface"
- "Block all traffic from IP address 203.0.113.5 on WAN"
- "Show me the current DHCP leases"
- "Run a PCI compliance check on this firewall"
- "List all active OpenVPN clients and their connection status"
- "What DNS entries are configured in Unbound?"Troubleshooting pfSense
Connection refused or SSL certificate error when connecting to pfSense
If pfSense uses a self-signed certificate, you may need to set PFSENSE_VERIFY_SSL=false in your .env file. Ensure PFSENSE_URL uses https:// and the correct port (default 443, or your custom web GUI port).
Authentication error: 401 or 403 from pfSense API
Verify your AUTH_METHOD matches how you configured the pfSense REST API. For api_key auth, ensure the key is created in pfSense under System > API. For basic auth, use your pfSense admin username and password.
Python module not found errors on startup
Ensure you ran 'pip install -r requirements.txt' in the same Python environment that Claude Desktop's MCP command uses. Consider using a virtual environment and specifying the full path to its Python binary in the MCP command.
Frequently Asked Questions about pfSense
What is pfSense?
pfSense is a Model Context Protocol (MCP) server that pfsense mcp server enables security administrators to manage their pfsense firewalls using natural language through ai assistants like claude desktop. simply ask 'show me blocked ips' or 'run a pci compliance check' instead of navigating complex inte It connects AI assistants to external tools and data sources through a standardized interface.
How do I install pfSense?
Follow the installation instructions on the pfSense GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with pfSense?
pfSense works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is pfSense free to use?
Yes, pfSense is open source and available under the MIT License license. You can use it freely in both personal and commercial projects.
pfSense Alternatives — Similar Security Servers
Looking for alternatives to pfSense? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up pfSense in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use pfSense?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.