Is io.github.itunified-io/opnsense safe to use?

io.github.itunified-io/opnsense has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.itunified-io/opnsense?

io.github.itunified-io/opnsense can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.itunified-io/opnsense?

io.github.itunified-io/opnsense is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.itunified-io/opnsense actively maintained?

io.github.itunified-io/opnsense is actively maintained — last commit was 24 days ago. It has 1 GitHub stars.

io.github.itunified-io/opnsense

OPNsense MCP Server — 72 tools for DNS, Firewall, DHCP, ACME, Routing, VLANs & more

1 0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 24d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

DevOps Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-itunified-io-opnsense": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-itunified-io-opnsense)](https://mcppedia.org/s/io-github-itunified-io-opnsense)

Read me

What io.github.itunified-io/opnsense does

Slim OPNsense MCP Server for managing firewall infrastructure via the OPNsense REST API.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

34/100across 5 weighted dimensions

How we score →

0255075100

−66

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.itunified-io/opnsense safe to use?: io.github.itunified-io/opnsense has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.itunified-io/opnsense?: io.github.itunified-io/opnsense can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.itunified-io/opnsense?: io.github.itunified-io/opnsense is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.itunified-io/opnsense actively maintained?: io.github.itunified-io/opnsense is actively maintained — last commit was 24 days ago. It has 1 GitHub stars.

Similar servers

Others in devops / security

View all →

Mcp Gitlab96

MCP server for using the GitLab API

1.6k 12

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Alibabacloud Devops Mcp Server92

Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform. It provides a set of tools that interact with Yunxiao's API, allowing AI assistants to manage Codeup repository, Project, Pipeline, Packages etc.

116 7

Mcp Gitlab Server92

Enhanced MCP server for GitLab: group projects listing and activity tracking

51 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.itunified-io/opnsense and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

DevOps Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-itunified-io-opnsense": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-itunified-io-opnsense)](https://mcppedia.org/s/io-github-itunified-io-opnsense)

Read me

What io.github.itunified-io/opnsense does

Slim OPNsense MCP Server for managing firewall infrastructure via the OPNsense REST API.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

mcp-opnsense

Slim OPNsense MCP Server for managing firewall infrastructure via the OPNsense REST API.

No SSH. No shell execution. API-only. 3 runtime dependencies.

Features
Quick Start
HashiCorp Vault Integration (Optional)
Claude Code Integration
Environment Variables
Available Tools (62)
Claude Code Skills
Known Limitations
Security
Development
License
Enterprise Edition

Enterprise Edition

For audit + compliance reporting, multi-firewall fleet operations, encrypted backup orchestration, capacity forecasting, advanced IDS tuning, and Q-Feeds Premium feeds, see the commercial tier:

mcp-opnsense-enterprise — €29/month/seat

Tier comparison:

Tier	This repo	Enterprise repo
License	AGPL-3.0-only	Commercial (Ed25519 JWT)
Pricing	Free	€29/mo/seat
Tools	112 (basic CRUD + diagnostics)	+ ~35 (audit, compliance, fleet, backup_ops, capacity, ha, ids_advanced, qfeeds_premium)
Use case	Single-firewall ops	Multi-firewall + audit/compliance workflows

Trial token: sales@itunified.io.

Features

62 tools across 8 domains:

DNS/Unbound (12) — Host overrides, forwards, blocklist, cache management
Firewall (8) — Rules, aliases, NAT, apply changes
Diagnostics (8) — ARP, routes, ping, traceroute, DNS lookup, firewall states/logs
Interfaces (3) — List, configuration, statistics (read-only)
DHCP (5) — Leases, static mappings (ISC DHCPv4 + Kea dual support)
System (7) — Info, backup (list/download/revert), certificate listing, service control
ACME/Let's Encrypt (14) — Accounts, challenges, certificates, renewal, settings
Firmware/Plugins (5) — Version info, plugin management

Quick Start

npm install
cp .env.example .env   # Edit with your OPNsense API credentials
npm run build
node dist/index.js     # stdio transport for MCP

HashiCorp Vault Integration (Optional)

mcp-opnsense supports opportunistic AppRole authentication against a HashiCorp Vault instance. When Vault env vars are present, the server fetches OPNsense credentials from KV v2 at startup. If they are absent, the server falls back silently to direct env vars or MCP_SECRETS_FILE — no configuration change or restart required.

How It Works

At startup, the server checks for NAS_VAULT_ADDR in process.env.
If set, it authenticates via AppRole (NAS_VAULT_ROLE_ID + NAS_VAULT_SECRET_ID), reads the secret at <NAS_VAULT_KV_MOUNT>/data/<path>, and maps the KV fields to OPNsense env vars.
If NAS_VAULT_ADDR is not set (or any Vault call fails), a single warning line is written to stderr and the server continues with whatever env vars are already available.
The Vault client us

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

34/100across 5 weighted dimensions

How we score →

0255075100

−66

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.itunified-io/opnsense safe to use?: io.github.itunified-io/opnsense has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.itunified-io/opnsense?: io.github.itunified-io/opnsense can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.itunified-io/opnsense?: io.github.itunified-io/opnsense is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.itunified-io/opnsense actively maintained?: io.github.itunified-io/opnsense is actively maintained — last commit was 24 days ago. It has 1 GitHub stars.

Similar servers

Others in devops / security

View all →

Mcp Gitlab96

MCP server for using the GitLab API

1.6k 12

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Alibabacloud Devops Mcp Server92

116 7

Mcp Gitlab Server92

Enhanced MCP server for GitLab: group projects listing and activity tracking

51 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.itunified-io/opnsense and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

io.github.itunified-io/opnsense

Install in your client

What io.github.itunified-io/opnsense does

Test This Server

Why this score

34/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.itunified-io/opnsense

Install in your client

What io.github.itunified-io/opnsense does

Test This Server

mcp-opnsense

Table of Contents

Enterprise Edition

Features

Quick Start

HashiCorp Vault Integration (Optional)

How It Works

Why this score

34/100across 5 weighted dimensions

Security

Reviews

Frequently Asked Questions

Similar servers

Discussion

mcp-opnsense

Table of Contents

Enterprise Edition

Features

Quick Start

HashiCorp Vault Integration (Optional)

How It Works