Is io.github.d3ltasecurity/opnsense-guard-mcp safe to use?

io.github.d3ltasecurity/opnsense-guard-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.d3ltasecurity/opnsense-guard-mcp?

io.github.d3ltasecurity/opnsense-guard-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.d3ltasecurity/opnsense-guard-mcp do?

io.github.d3ltasecurity/opnsense-guard-mcp provides 2 tools: dhcp_leases, pending. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.d3ltasecurity/opnsense-guard-mcp?

io.github.d3ltasecurity/opnsense-guard-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.d3ltasecurity/opnsense-guard-mcp actively maintained?

io.github.d3ltasecurity/opnsense-guard-mcp is actively maintained - last commit was 5 days ago. It has 1 GitHub stars.

io.github.d3ltasecurity/opnsense-guard-mcp

opnsense-guard-mcp

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

1 2 tools GitHub PyPI

No known CVEs

MIT license

Actively maintained

Last commit 5d ago

Works with most clients

Transport: stdio, http

2 tools · ~48 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 21h ago

Edit this pageView history

io.github.d3ltasecurity/opnsense-guard-mcp is an MCP server that safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes. Its tool list has not been published yet over stdio and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-d3ltasecurity-opnsense-guard-mcp": {
      "args": [
        "opnsense-guard-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-d3ltasecurity-opnsense-guard-mcp)](https://mcppedia.org/s/io-github-d3ltasecurity-opnsense-guard-mcp)

Read me

What io.github.d3ltasecurity/opnsense-guard-mcp does

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'opnsense-guard-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked opnsense-guard-mcp against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~48 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.d3ltasecurity/opnsense-guard-mcp safe to use?: io.github.d3ltasecurity/opnsense-guard-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.d3ltasecurity/opnsense-guard-mcp?: io.github.d3ltasecurity/opnsense-guard-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.d3ltasecurity/opnsense-guard-mcp do?: io.github.d3ltasecurity/opnsense-guard-mcp provides 2 tools: dhcp_leases, pending. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.d3ltasecurity/opnsense-guard-mcp?: io.github.d3ltasecurity/opnsense-guard-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.d3ltasecurity/opnsense-guard-mcp actively maintained?: io.github.d3ltasecurity/opnsense-guard-mcp is actively maintained - last commit was 5 days ago. It has 1 GitHub stars.

Similar servers

Others in security

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

io.github.arthurpanhku/dvalincode92

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

120 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.d3ltasecurity/opnsense-guard-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-d3ltasecurity-opnsense-guard-mcp": {
      "args": [
        "opnsense-guard-mcp"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-d3ltasecurity-opnsense-guard-mcp)](https://mcppedia.org/s/io-github-d3ltasecurity-opnsense-guard-mcp)

Read me

What io.github.d3ltasecurity/opnsense-guard-mcp does

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'opnsense-guard-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

opnsense-guard-mcp

A safety-first MCP server for OPNsense 26.7+.

Read-only by default. Every write is planned, policy-checked, logged, and auto-reverted unless you confirm it.

Status: alpha. Tested against a live OPNsense 26.7.4 with least-privilege API users: read tools, policy file, change planning with diffs, applying changes with verification and automatic revert, crash recovery, and a hash-chained audit log, over stdio or authenticated HTTPS. See DESIGN.md.

Not affiliated with Deciso B.V. "OPNsense" is a trademark of Deciso B.V.

What makes it different

	opnsense-guard-mcp
Default mode	read-only
Read path	GET, plus POST to exactly two search endpoints (states, rules) with a fixed three-field body; path allowlist, verb denylist, traversal/encoding rejected, redirects not followed
Writes	separate API user, exact endpoint allowlist, plan → policy check → human approval → apply → verify → auto-revert unless confirmed
Rollback on 26.7+	own object-level snapshots + revert (the savepoint API is gone in 26.7); survives restarts
Guardrails	allowlist policy file: interfaces, networks, rule limits, anti-lockout
Audit	hash-chained JSONL (`audit verify` detects edits); syslog planned
Transport	stdio, or Streamable HTTP that always needs a bearer token; optional TLS / mTLS
Dangerous tools	none exist: no reboot, firmware, service control, SSH or XML edits

Quick start (read-only)

In OPNsense (System → Access → Users), create a user with a scrambled password, no group (not admins) and these privileges, then create an API key for it. Skip any that aren't installed; the matching tool just reports "forbidden".

Privilege	Used by
Firewall: Rules [new]	`firewall_rules`, `firewall_rule_get`, planning
Firewall: Aliases (view-only)	`firewall_aliases`, planning
Status: Interfaces	`interfaces`
Status: Services	`service_list`
Diagnostics: ARP Table	`arp_table`
Diagnostics: Routing tables	`routing_table`
Diagnostics: Show States	`firewall_states`
Diagnostics: Logs: Firewall: Live View	`firewall_log`
Diagnostics: Logs: System	`system_log`
Lobby: Dashboard	`system_information`, `system_resources`, health probe
Services: Intrusion Detection	`suricata_*`
Services: DHCP: Kea(v4) / Services: Dnsmasq DNS/DHCP: Settings / Status: DHCP leases (ISC)	`dhcp_leases`: only the one you use
System: Firmware (optional)	`system_status`. It also allows installing updates, so leave it out unless you need it.

Most OPNsense privileges are not view-only (Firewall: Aliases is an exception): several of these also allow edits through the API. The server only sends GET requests with this key, except a search POST to two exact endpoints (diagnostics/firewall/query_states, firewall/filter/searchRule) with a body it builds itself (current, rowCount, searchPhrase); OPNsense answers those lists properly only over POST. Still keep the list short: the privileges are what OPNsense itself enforces.

Install:
```
pipx install opnsense-guard-mcp
```

Configure (copy .env.example to .env, or set env vars):

OPNSENSE_URL=https://firewall.example.internal
OPNSENSE_API_KEY=...
OPNSENSE_API_SECRET=...
OPNSENSE_CA_BUNDLE=/path/to/firewall-ca.pem   # or OPNSENSE_VERIFY_SSL=false

Check the config (does not contact the firewall):
```
opnsense-guard-mcp --check
```

Add to your MCP client, e.g. Claude Code:

claude mcp add opnsense -- opnsense-guard-mcp --env-file /path/to/.env

HTTP mode (shared server)

HTTP never runs without authentication. The server refuses to start if:

there are no tokens, or
it

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked opnsense-guard-mcp against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~48 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.d3ltasecurity/opnsense-guard-mcp safe to use?: io.github.d3ltasecurity/opnsense-guard-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.d3ltasecurity/opnsense-guard-mcp?: io.github.d3ltasecurity/opnsense-guard-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.d3ltasecurity/opnsense-guard-mcp do?: io.github.d3ltasecurity/opnsense-guard-mcp provides 2 tools: dhcp_leases, pending. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.d3ltasecurity/opnsense-guard-mcp?: io.github.d3ltasecurity/opnsense-guard-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.d3ltasecurity/opnsense-guard-mcp actively maintained?: io.github.d3ltasecurity/opnsense-guard-mcp is actively maintained - last commit was 5 days ago. It has 1 GitHub stars.

Similar servers

Others in security

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

io.github.arthurpanhku/dvalincode92

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

120 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.d3ltasecurity/opnsense-guard-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?