← Back to search

io.github.antonio-mello-ai/mcp-pfsense

antonio-mello-ai Scanned 17d ago

Manage pfSense firewalls through AI assistants — rules, DHCP, DNS, and more

MCP Registry ↗
C
73.3 / 100

Versions

0.1.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 19

list_dhcp_leases
annotations: none low

List active DHCP leases showing IP, MAC, hostname, and lease times.

list_dhcp_static_mappings
annotations: none low

List DHCP static mappings (IP reservations), optionally filtered by interface. Each mapping carries `parent_id` (its DHCP server / interface) — pass that as `interface` to delete_dhcp_static_mapping.

interface string
get_system_status
annotations: none low

Get pfSense system status including version, CPU, memory, uptime, and temperature.

get_interfaces
annotations: none low

List all network interfaces with status and configuration.

list_firewall_rules
annotations: none low

List firewall rules, optionally filtered by interface.

interface string
add_firewall_rule
annotations: none low

Add a firewall rule. Type is 'pass', 'block', or 'reject'. The rule is staged (not active) until apply_changes('firewall') is called or apply=true is passed here.

type str apply bool descr str source str dstport string protocol string interface str ipprotocol str destination str
delete_firewall_rule
annotations: none low

Delete a firewall rule by its ID (the `id` from list_firewall_rules). Requires confirm=true. Staged until apply_changes('firewall') is called or apply=true is passed.

apply bool confirm bool rule_id int
list_firewall_aliases
annotations: none low

List firewall aliases (IP groups, port groups, URL lists).

add_dhcp_static_mapping
annotations: none low

Create a DHCP static mapping (IP reservation) for a MAC address. Staged until apply_changes('dhcp') is called or apply=true is passed.

mac str apply bool descr str ipaddr str hostname str interface str
delete_dhcp_static_mapping
annotations: none low

Delete a DHCP static mapping. Requires confirm=true. `interface` is the mapping's DHCP server — the `parent_id` value returned by list_dhcp_static_mappings; `mapping_id` is its `id` there. Staged until apply_changes('dhcp') is called or apply=true is passed.

apply bool confirm bool interface str mapping_id int
list_dns_host_overrides
annotations: none low

List DNS Resolver host overrides (local DNS entries).

add_dns_host_override
annotations: none low

Create a DNS host override entry in Unbound DNS Resolver. Staged until apply_changes('dns') is called or apply=true is passed.

ip str host str apply bool descr str domain str
delete_dns_host_override
annotations: none low

Delete a DNS host override by ID. Requires confirm=true. Staged until apply_changes('dns') is called or apply=true is passed.

apply bool confirm bool override_id int
get_pending_changes
annotations: none low

Check whether a subsystem ('firewall', 'dhcp' or 'dns') has staged, unapplied changes.

subsystem str
apply_changes
annotations: none low

Apply ALL staged changes of a subsystem ('firewall', 'dhcp' or 'dns'). Requires confirm=true. This reloads the subsystem, activating every pending change — including any a human staged in the pfSense WebGUI and has not reviewed yet.

confirm bool subsystem str
get_gateway_status
annotations: none low

Get gateway status including latency, packet loss, and online state.

get_arp_table
annotations: none low

Get ARP table showing connected devices (IP, MAC, interface).

list_services
annotations: none low

List all services and their running status.

restart_service
annotations: none low

Restart a service by name. Requires confirm=true.

name str confirm bool

Permissions 1

network medium
Server uses network capabilities via: httpx

Scan Findings 54

low
Tool 'get_system_status' has no annotations annotation_checker · 100%
low
Tool 'get_interfaces' has no annotations annotation_checker · 100%
low
Tool 'list_firewall_rules' has no annotations annotation_checker · 100%
low
Tool 'add_firewall_rule' has no annotations annotation_checker · 100%
low
Tool 'delete_firewall_rule' has no annotations annotation_checker · 100%
low
Tool 'list_firewall_aliases' has no annotations annotation_checker · 100%
low
Tool 'list_dhcp_leases' has no annotations annotation_checker · 100%
low
Tool 'list_dhcp_static_mappings' has no annotations annotation_checker · 100%
low
Tool 'add_dhcp_static_mapping' has no annotations annotation_checker · 100%
low
Tool 'delete_dhcp_static_mapping' has no annotations annotation_checker · 100%
low
Tool 'list_dns_host_overrides' has no annotations annotation_checker · 100%
low
Tool 'add_dns_host_override' has no annotations annotation_checker · 100%
low
Tool 'delete_dns_host_override' has no annotations annotation_checker · 100%
low
Tool 'get_pending_changes' has no annotations annotation_checker · 100%
low
Tool 'apply_changes' has no annotations annotation_checker · 100%
low
Tool 'get_gateway_status' has no annotations annotation_checker · 100%
low
Tool 'get_arp_table' has no annotations annotation_checker · 100%
low
Tool 'list_services' has no annotations annotation_checker · 100%
low
Tool 'restart_service' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.3.0,<2 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.3.0,<2 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_system_status manifest_parser · 90%
info
Tool: get_interfaces manifest_parser · 90%
info
Tool: list_firewall_rules manifest_parser · 90%
info
Tool: add_firewall_rule manifest_parser · 90%
info
Tool: delete_firewall_rule manifest_parser · 90%
info
Tool: list_firewall_aliases manifest_parser · 90%
info
Tool: list_dhcp_leases manifest_parser · 90%
info
Tool: list_dhcp_static_mappings manifest_parser · 90%
info
Tool: add_dhcp_static_mapping manifest_parser · 90%
info
Tool: delete_dhcp_static_mapping manifest_parser · 90%
info
Tool: list_dns_host_overrides manifest_parser · 90%
info
Tool: add_dns_host_override manifest_parser · 90%
info
Tool: delete_dns_host_override manifest_parser · 90%
info
Tool: get_pending_changes manifest_parser · 90%
info
Tool: apply_changes manifest_parser · 90%
info
Tool: get_gateway_status manifest_parser · 90%
info
Tool: get_arp_table manifest_parser · 90%
info
Tool: list_services manifest_parser · 90%
info
Tool: restart_service manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%