Secure AsusWRT router administration via SSH — 42+ tools, guarded mutations
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-teefloo-asuswrt-mcp": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Secure AsusWRT router administration via SSH — 42+ tools, guarded mutations
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Click any tool to inspect its schema.
This server is missing a description.If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in other
MCP server for Spanning Cloud Backup — M365/GWS/Salesforce backups, restores, audit.
AI agent control of 3D printers — 432 tools for OctoPrint, Moonraker, Bambu, Prusa, Elegoo
MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
On-chain provenance lookup for AnchorRegistry. Resolve AR-IDs, hashes, and full trees. Authless.
MCP Security Weekly
Get CVE alerts and security updates for io.github.teefloo/asuswrt-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
mcp-name: io.github.teefloo/asuswrt-mcp
Model Context Protocol (MCP) server for secure, controlled administration of AsusWRT and AsusWRT-Merlin routers via SSH.
This MCP server provides AI assistants (like Claude, Cursor, etc.) with a safe interface to monitor and manage AsusWRT routers. It operates exclusively over SSH using allowlisted operations—no arbitrary command execution, no firmware modifications, and no factory resets.
| Category | Tools |
|---|---|
| Identity & Health | Router model, firmware version, uptime, load, memory |
| Network | LAN/WAN details, DNS config, IPv6 status, routing table |
| Clients | Connected clients, DHCP leases, ARP neighbors |
| Wireless | Radio status, SSIDs, guest networks, client counts per band |
| Services | Running processes, open ports, cron jobs |
| Storage | USB devices, mounts, partitions, filesystem usage |
| Security | UPnP, DDNS, Samba status, conntrack usage |
| VPN | OpenVPN server, WireGuard, VPN client profiles |
| Administration | Web admin ports, SSH/telnet access settings |
| Diagnostics | SSH TCP/banner/auth diagnostics, config snapshot |
All mutation tools require:
confirm: true parameterASUSWRT_ALLOW_MUTATIONS=true environment variabledry_run: true to preview changes| Tool | Description |
|---|---|
asuswrt_restart_service | Restart allowlisted services (httpd, firewall, wireless, dnsmasq, etc.) |
asuswrt_dhcp_server | Enable/disable DHCP server |
asuswrt_upnp | Enable/disable UPnP |
asuswrt_radio | Enable/disable Wi-Fi radio bands |
asuswrt_guest_wifi | Enable/disable guest Wi-Fi |
asuswrt_guest_lan_access | Toggle LAN access for guest Wi-Fi |
asuswrt_port_forwarding | List, add, remove, enable/disable port forwarding rules |
asuswrt_vpn_server | Enable/disable OpenVPN server |
asuswrt_parental_access | List, block, unblock, remove parental control rules |
asuswrt_parental_block_all | Toggle block-all mode |
asuswrt_dhcp_reservation | List, add, remove DHCP static reservations |
confirm=Truegit clone https://github.com/Teeflo/asuswrt-mcp.git
cd asuswrt-mcp
# Create virtual environment
python -m venv .venv
# Activate (Linux/macOS)
source .venv/bin/activate
# Activate (Windows)
.venv\Scripts\activate
# Install dependencies
pip install -e .
# Copy example configuration
cp .env.example .env
# Edit with your router credentials
# Use your favorite editor:
notepad .env # Windows
nano .env # Linux/macOS
.env# Required: Router connection
ASUSWRT_HOST=192.168.1.1
ASUSWRT_SSH_USERNAME=admin
ASUSWRT_SSH_PASSWORD=your_password
# Optional: SSH key authentication
# ASUSWRT_SSH_KEY_FILE=~/.ssh/id_rsa
# Optional: Enable mutations (disabled by default)
# ASUSWRT_ALLOW_MUTATIONS=t
... [View full README on GitHub](https://github.com/teefloo/asuswrt-mcp#readme)