Enterprise DNA
M MCP Servers Developer low

vespo92/OPNSenseMCP

by Various

MCP Server for OPNSense to act as IaC proxy

V

MCP

vespo92/OPNSenseMCP

Added 1 June 2026

Overview

This MCP server acts as an infrastructure as code proxy for OPNSense firewalls. It exposes OPNSense configuration endpoints through the Model Context Protocol, enabling programmatic management and automation. Built in TypeScript, it connects MCP-capable clients to the OPNSense API.

Best for

Best for
Developers managing OPNSense firewalls who want to use AI assistants for infrastructure tasks.

Use cases

  • Configure OPNSense firewall rules programmatically
  • Automate network policy changes via AI tools
  • Integrate OPNSense into IaC workflows using MCP

Notes

This MCP server acts as an infrastructure as code proxy for OPNSense firewalls. It exposes OPNSense configuration endpoints through the Model Context Protocol, enabling programmatic management and automation. Built in TypeScript, it connects MCP-capable clients to the OPNSense API.

52 stars on GitHub. Last updated 2026-05-23. Licensed MIT.

Use cases

  • Configure OPNSense firewall rules programmatically
  • Automate network policy changes via AI tools
  • Integrate OPNSense into IaC workflows using MCP

Pros

  • Leverages the MCP standard for interoperability with AI assistants
  • Written in TypeScript with 52 stars, indicating community interest
  • Provides a clean IaC interface to OPNSense without manual CLI

Cons

  • Requires an MCP-compatible client or framework to function
  • Depends on OPNSense API availability and proper authentication setup
  • Limited to OPNSense; does not cover other network devices

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.

Pros

  • Leverages the MCP standard for interoperability with AI assistants
  • Written in TypeScript with 52 stars, indicating community interest
  • Provides a clean IaC interface to OPNSense without manual CLI

Cons

  • Requires an MCP-compatible client or framework to function
  • Depends on OPNSense API availability and proper authentication setup
  • Limited to OPNSense; does not cover other network devices