🧩

OPNsense Guard MCP Server

Name: OPNsense Guard
Author: io.github.d3ltasecurity

API key required

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

To add OPNsense Guard to Claude, run the install command below or copy the ready-made config for Claude Code, Claude Desktop, Cursor and VS Code further down. Restart your client after adding it and its tools show up in your next conversation. It needs 4 environment variables, listed below.

DevTools

Install

uvx opnsense-guard-mcp@0.1.1

Environment variables

OPNSENSE_URLSet in your MCP config

OPNSENSE_API_KEYSet in your MCP config

OPNSENSE_API_SECRETSet in your MCP config

OPNSENSE_CA_BUNDLESet in your MCP config

Install with your client

Terminal

claude mcp add opnsense-guard --env OPNSENSE_URL=<YOUR_OPNSENSE_URL> --env OPNSENSE_API_KEY=<YOUR_OPNSENSE_API_KEY> --env OPNSENSE_API_SECRET=<YOUR_OPNSENSE_API_SECRET> --env OPNSENSE_CA_BUNDLE=<YOUR_OPNSENSE_CA_BUNDLE> -- uvx opnsense-guard-mcp@0.1.1

Run this in a terminal to add the server to Claude Code.

What this does

OPNsense Guard exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.

Requirements

This server needs the following environment variables to be set before it can run:

OPNSENSE_URL
OPNSENSE_API_KEY
OPNSENSE_API_SECRET
OPNSENSE_CA_BUNDLE

Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).

Frequently asked questions

How do I install OPNsense Guard?

Run the Claude Code command in the install section to add OPNsense Guard to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.

Which clients work with OPNsense Guard?

This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to OPNsense Guard as well.

Does OPNsense Guard need an API key?

Yes. Before it can run, set these environment variables: OPNSENSE_URL, OPNSENSE_API_KEY, OPNSENSE_API_SECRET, OPNSENSE_CA_BUNDLE. They go in the env block of your MCP config.

Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.

Is this your MCP server?

Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.

Add this badge to your README

Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.

Markdown

[![Listed on clauderules.net](https://clauderules.net/api/badge/io-github-d3ltasecurity-opnsense-guard-mcp)](https://clauderules.net/mcp/io-github-d3ltasecurity-opnsense-guard-mcp)

HTML

<a href="https://clauderules.net/mcp/io-github-d3ltasecurity-opnsense-guard-mcp" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/io-github-d3ltasecurity-opnsense-guard-mcp" alt="Listed on clauderules.net" /></a>

More DevTools MCP servers

🔌

GitHub

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

🔌

Serena MCP: the IDE for your agent

A powerful toolkit for coding, providing semantic retrieval and editing capabilities.

🔌

Figma-Context-MCP

Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.

🔌

Inbox Zero

Search Gmail and Outlook, save drafts, manage email rules, and view email stats.

Alternatives to OPNsense Guard Best MCP servers for Git & Code Hosting Best MCP servers for GitHub