OPNsense MCP Server

Example Use Cases

• 1

  Create, update, and batch-manage OPNsense firewall rules programmatically (including handling of API-created automation rules).

• 2

  Analyze and auto-fix routing and NAT problems across VLANs and DMZs, including making SSH-based outbound NAT changes and no-NAT exceptions.

• 3

  Run CLI commands, manipulate configuration files over SSH, restart services, and perform backups/restores on OPNsense systems.

Description

This MCP server provides a comprehensive interface for programmatic and AI-driven management of OPNsense firewalls. It implements CRUD firewall rule operations, SSH-based NAT configuration and fixes, network diagnostics (routing, ARP, interfaces), and direct CLI/SSH execution for system-level tasks. The project integrates with AI assistants (example: Claude Desktop) to automate complex networking tasks, troubleshoot issues, and persistently manage configuration with multiple fallbacks. It is designed to enable automation, accelerate troubleshooting, and safely apply configuration changes on OPNsense devices.