MCP Servers / development / pfSense MCP Server

pfSense MCP Server

JSON →

stdionone★ 71development

Enables natural language interaction with pfSense firewalls through GenAI applications.

github ↗

Install

How to run this server

[ { "cmd": "pip install -r", "imports": [] } ]

server path: pfsense-mcp-server

Tools

What this server exposes

create_firewall_rule

Create a new firewall rule

update_firewall_rule

Update an existing firewall rule

delete_firewall_rule

Delete a firewall rule

reorder_firewall_rules

Reorder firewall rules

bulk_block_ips

Bulk block IP addresses

view_compiled_pf_ruleset

View compiled pf ruleset

create_alias

Create a new alias

update_alias

Update an existing alias

delete_alias

Delete an alias

add_address_to_alias

Add an address to an alias

remove_address_from_alias

Remove an address from an alias

create_port_forward

Create a port forward rule

update_port_forward

Update a port forward rule

delete_port_forward

Delete a port forward rule

create_outbound_nat_rule

Create an outbound NAT rule

update_outbound_nat_rule

Update an outbound NAT rule

delete_outbound_nat_rule

Delete an outbound NAT rule

create_one_to_one_nat_rule

Create a 1:1 NAT rule

update_one_to_one_nat_rule

Update a 1:1 NAT rule

delete_one_to_one_nat_rule

Delete a 1:1 NAT rule

create_openvpn_server

Create an OpenVPN server

update_openvpn_server

Update an OpenVPN server

delete_openvpn_server

Delete an OpenVPN server

get_openvpn_server_status

Get OpenVPN server status

create_openvpn_client

Create an OpenVPN client

update_openvpn_client

Update an OpenVPN client

delete_openvpn_client

Delete an OpenVPN client

get_openvpn_client_status

Get OpenVPN client status

apply_openvpn_changes

Apply OpenVPN changes

create_ipsec_tunnel

Create an IPsec tunnel

update_ipsec_tunnel

Update an IPsec tunnel

delete_ipsec_tunnel

Delete an IPsec tunnel

get_ipsec_tunnel_status

Get IPsec tunnel status

create_wireguard_peer

Create a WireGuard peer

update_wireguard_peer

Update a WireGuard peer

delete_wireguard_peer

Delete a WireGuard peer

get_wireguard_peer_status

Get WireGuard peer status

create_gateway

Create a gateway

update_gateway

Update a gateway

delete_gateway

Delete a gateway

create_gateway_group

Create a gateway group

update_gateway_group

Update a gateway group

delete_gateway_group

Delete a gateway group

create_static_route

Create a static route

update_static_route

Update a static route

delete_static_route

Delete a static route

set_default_gateway

Set the default gateway

create_unbound_host_override

Create an Unbound host override

update_unbound_host_override

Update an Unbound host override

delete_unbound_host_override

Delete an Unbound host override

create_unbound_domain_override

Create an Unbound domain override

update_unbound_domain_override

Update an Unbound domain override

delete_unbound_domain_override

Delete an Unbound domain override

create_unbound_access_list

Create an Unbound access list

update_unbound_access_list

Update an Unbound access list

delete_unbound_access_list

Delete an Unbound access list

create_dnsmasq_host_override

Create a dnsmasq host override

update_dnsmasq_host_override

Update a dnsmasq host override

delete_dnsmasq_host_override

Delete a dnsmasq host override

create_dnsmasq_domain_override

Create a dnsmasq domain override

update_dnsmasq_domain_override

Update a dnsmasq domain override

delete_dnsmasq_domain_override

Delete a dnsmasq domain override

get_dhcp_leases

Get DHCP leases

create_dhcp_static_mapping

Create a DHCP static mapping

update_dhcp_static_mapping

Update a DHCP static mapping

delete_dhcp_static_mapping

Delete a DHCP static mapping

create_dhcp_address_pool

Create a DHCP address pool

update_dhcp_address_pool

Update a DHCP address pool

delete_dhcp_address_pool

Delete a DHCP address pool

create_dhcp_custom_option

Create a DHCP custom option

update_dhcp_custom_option

Update a DHCP custom option

delete_dhcp_custom_option

Delete a DHCP custom option

update_dhcp_server_config

Update DHCP server configuration

create_certificate

Create a certificate

renew_certificate

Renew a certificate

export_certificate_pkcs12

Export a certificate in PKCS12 format

delete_certificate

Delete a certificate

create_certificate_authority

Create a certificate authority

delete_certificate_authority

Delete a certificate authority

create_certificate_revocation_list

Create a certificate revocation list

delete_certificate_revocation_list

Delete a certificate revocation list

create_user

Create a user account

update_user

Update a user account

delete_user

Delete a user account

create_group

Create a group

update_group

Update a group

delete_group

Delete a group

create_ldap_auth_server

Create an LDAP authentication server

update_ldap_auth_server

Update an LDAP authentication server

delete_ldap_auth_server

Delete an LDAP authentication server

create_radius_auth_server

Create a RADIUS authentication server

update_radius_auth_server

Update a RADIUS authentication server

delete_radius_auth_server

Delete a RADIUS authentication server

create_interface

Create an interface

update_interface

Update an interface

delete_interface

Delete an interface

create_vlan

Create a VLAN

update_vlan

Update a VLAN

delete_vlan

Delete a VLAN

create_bridge

Create a bridge

update_bridge

Update a bridge

delete_bridge

Delete a bridge

create_interface_group

Create an interface group

update_interface_group

Update an interface group

delete_interface_group

Delete an interface group

get_system_status

Get system status

get_system_settings

Get system settings

update_system_settings

Update system settings

run_diagnostics

Run system diagnostics

get_config_history

Get configuration history

restore_config_backup

Restore a configuration backup

reboot_system

Reboot the system

ping_host

Ping a host

start_service

Start a service

stop_service

Stop a service

restart_service

Restart a service

get_service_status

Get service status

update_ntp_settings

Update NTP settings

update_cron_settings

Update cron settings

update_ssh_settings

Update SSH settings

update_service_watchdog

Update service watchdog settings

get_firewall_logs

Get firewall logs

analyze_firewall_logs

Analyze firewall logs

create_traffic_shaper

Create a traffic shaper

update_traffic_shaper

Update a traffic shaper

delete_traffic_shaper

Delete a traffic shaper

create_queue

Create a queue

update_queue

Update a queue

delete_queue

Delete a queue

create_limiter

Create a limiter

update_limiter

Update a limiter

delete_limiter

Delete a limiter

create_schedule

Create a schedule

update_schedule

Update a schedule

delete_schedule

Delete a schedule

create_virtual_ip

Create a virtual IP

update_virtual_ip

Update a virtual IP

delete_virtual_ip

Delete a virtual IP

diagnose_connectivity

Diagnose connectivity issues

diagnose_blocked_traffic

Diagnose blocked traffic

diagnose_vpn

Diagnose VPN issues

diagnose_dhcp

Diagnose DHCP issues

diagnose_dns

Diagnose DNS issues

diagnose_high_availability

Diagnose high availability issues

run_full_health_report

Run a full system health report

install_package

Install a package

update_package

Update a package

delete_package

Delete a package

configure_haproxy

Configure HAProxy

configure_acme

Configure ACME/Let's Encrypt

configure_bind_dns

Configure BIND DNS

configure_freeradius

Configure FreeRADIUS

navigate_hateoas

Navigate HATEOAS links

manage_object_id

Manage object IDs

get_guardrail_status

Get guardrail status

Configuration

Environment & auth

authnone

envPFSENSE_URL

envPFSENSE_API_KEY

envMCP_API_KEY

Resources

githubhttps://github.com/gensecaihq/pfsense-mcp-server ↗