pfSense MCP Server
JSON →Enables natural language interaction with pfSense firewalls through GenAI applications.
Install
pip install -r Tools · 155
- create_firewall_rule Create a new firewall rule
- update_firewall_rule Update an existing firewall rule
- delete_firewall_rule Delete a firewall rule
- reorder_firewall_rules Reorder firewall rules
- bulk_block_ips Bulk block IP addresses
- view_compiled_pf_ruleset View compiled pf ruleset
- create_alias Create a new alias
- update_alias Update an existing alias
- delete_alias Delete an alias
- add_address_to_alias Add an address to an alias
- remove_address_from_alias Remove an address from an alias
- create_port_forward Create a port forward rule
- update_port_forward Update a port forward rule
- delete_port_forward Delete a port forward rule
- create_outbound_nat_rule Create an outbound NAT rule
- update_outbound_nat_rule Update an outbound NAT rule
- delete_outbound_nat_rule Delete an outbound NAT rule
- create_one_to_one_nat_rule Create a 1:1 NAT rule
- update_one_to_one_nat_rule Update a 1:1 NAT rule
- delete_one_to_one_nat_rule Delete a 1:1 NAT rule
- create_openvpn_server Create an OpenVPN server
- update_openvpn_server Update an OpenVPN server
- delete_openvpn_server Delete an OpenVPN server
- get_openvpn_server_status Get OpenVPN server status
- create_openvpn_client Create an OpenVPN client
- update_openvpn_client Update an OpenVPN client
- delete_openvpn_client Delete an OpenVPN client
- get_openvpn_client_status Get OpenVPN client status
- apply_openvpn_changes Apply OpenVPN changes
- create_ipsec_tunnel Create an IPsec tunnel
- update_ipsec_tunnel Update an IPsec tunnel
- delete_ipsec_tunnel Delete an IPsec tunnel
- get_ipsec_tunnel_status Get IPsec tunnel status
- create_wireguard_peer Create a WireGuard peer
- update_wireguard_peer Update a WireGuard peer
- delete_wireguard_peer Delete a WireGuard peer
- get_wireguard_peer_status Get WireGuard peer status
- create_gateway Create a gateway
- update_gateway Update a gateway
- delete_gateway Delete a gateway
- create_gateway_group Create a gateway group
- update_gateway_group Update a gateway group
- delete_gateway_group Delete a gateway group
- create_static_route Create a static route
- update_static_route Update a static route
- delete_static_route Delete a static route
- set_default_gateway Set the default gateway
- create_unbound_host_override Create an Unbound host override
- update_unbound_host_override Update an Unbound host override
- delete_unbound_host_override Delete an Unbound host override
- create_unbound_domain_override Create an Unbound domain override
- update_unbound_domain_override Update an Unbound domain override
- delete_unbound_domain_override Delete an Unbound domain override
- create_unbound_access_list Create an Unbound access list
- update_unbound_access_list Update an Unbound access list
- delete_unbound_access_list Delete an Unbound access list
- create_dnsmasq_host_override Create a dnsmasq host override
- update_dnsmasq_host_override Update a dnsmasq host override
- delete_dnsmasq_host_override Delete a dnsmasq host override
- create_dnsmasq_domain_override Create a dnsmasq domain override
- update_dnsmasq_domain_override Update a dnsmasq domain override
- delete_dnsmasq_domain_override Delete a dnsmasq domain override
- get_dhcp_leases Get DHCP leases
- create_dhcp_static_mapping Create a DHCP static mapping
- update_dhcp_static_mapping Update a DHCP static mapping
- delete_dhcp_static_mapping Delete a DHCP static mapping
- create_dhcp_address_pool Create a DHCP address pool
- update_dhcp_address_pool Update a DHCP address pool
- delete_dhcp_address_pool Delete a DHCP address pool
- create_dhcp_custom_option Create a DHCP custom option
- update_dhcp_custom_option Update a DHCP custom option
- delete_dhcp_custom_option Delete a DHCP custom option
- update_dhcp_server_config Update DHCP server configuration
- create_certificate Create a certificate
- renew_certificate Renew a certificate
- export_certificate_pkcs12 Export a certificate in PKCS12 format
- delete_certificate Delete a certificate
- create_certificate_authority Create a certificate authority
- delete_certificate_authority Delete a certificate authority
- create_certificate_revocation_list Create a certificate revocation list
- delete_certificate_revocation_list Delete a certificate revocation list
- create_user Create a user account
- update_user Update a user account
- delete_user Delete a user account
- create_group Create a group
- update_group Update a group
- delete_group Delete a group
- create_ldap_auth_server Create an LDAP authentication server
- update_ldap_auth_server Update an LDAP authentication server
- delete_ldap_auth_server Delete an LDAP authentication server
- create_radius_auth_server Create a RADIUS authentication server
- update_radius_auth_server Update a RADIUS authentication server
- delete_radius_auth_server Delete a RADIUS authentication server
- create_interface Create an interface
- update_interface Update an interface
- delete_interface Delete an interface
- create_vlan Create a VLAN
- update_vlan Update a VLAN
- delete_vlan Delete a VLAN
- create_bridge Create a bridge
- update_bridge Update a bridge
- delete_bridge Delete a bridge
- create_interface_group Create an interface group
- update_interface_group Update an interface group
- delete_interface_group Delete an interface group
- get_system_status Get system status
- get_system_settings Get system settings
- update_system_settings Update system settings
- run_diagnostics Run system diagnostics
- get_config_history Get configuration history
- restore_config_backup Restore a configuration backup
- reboot_system Reboot the system
- ping_host Ping a host
- start_service Start a service
- stop_service Stop a service
- restart_service Restart a service
- get_service_status Get service status
- update_ntp_settings Update NTP settings
- update_cron_settings Update cron settings
- update_ssh_settings Update SSH settings
- update_service_watchdog Update service watchdog settings
- get_firewall_logs Get firewall logs
- analyze_firewall_logs Analyze firewall logs
- create_traffic_shaper Create a traffic shaper
- update_traffic_shaper Update a traffic shaper
- delete_traffic_shaper Delete a traffic shaper
- create_queue Create a queue
- update_queue Update a queue
- delete_queue Delete a queue
- create_limiter Create a limiter
- update_limiter Update a limiter
- delete_limiter Delete a limiter
- create_schedule Create a schedule
- update_schedule Update a schedule
- delete_schedule Delete a schedule
- create_virtual_ip Create a virtual IP
- update_virtual_ip Update a virtual IP
- delete_virtual_ip Delete a virtual IP
- diagnose_connectivity Diagnose connectivity issues
- diagnose_blocked_traffic Diagnose blocked traffic
- diagnose_vpn Diagnose VPN issues
- diagnose_dhcp Diagnose DHCP issues
- diagnose_dns Diagnose DNS issues
- diagnose_high_availability Diagnose high availability issues
- run_full_health_report Run a full system health report
- install_package Install a package
- update_package Update a package
- delete_package Delete a package
- configure_haproxy Configure HAProxy
- configure_acme Configure ACME/Let's Encrypt
- configure_bind_dns Configure BIND DNS
- configure_freeradius Configure FreeRADIUS
- navigate_hateoas Navigate HATEOAS links
- manage_object_id Manage object IDs
- get_guardrail_status Get guardrail status
Environment variables
PFSENSE_URLPFSENSE_API_KEYMCP_API_KEY
Links
★ 71 GitHub stars