Mcp Pfsense
Bridges Claude to pfSense firewalls via the pfrest API package, giving you conversational control over 17 operations across system monitoring, firewall rules, DHCP reservations, DNS overrides, and service management. You can list and modify firewall rules by interface, manage static DHCP mappings, add Unbound DNS host overrides, check gateway health, and restart services. Destructive actions like deleting rules or restarting services use two-step confirmation to prevent accidents. Requires pfrest installed on your pfSense box and credentials with API access. Useful when you're managing home lab infrastructure or small business firewalls and want to query status, adjust rules, or check connected devices without leaving your AI assistant.
- GitHub stars
- 6
- tools
- 20
- transport
- STDIO
- last updated
- Nov 4, 2026
Tools
20 toolsPublic tool metadata for what this MCP can expose to an agent.
get_system_statusVersion, CPU, memory, uptime, temperature, network interfaces
Version, CPU, memory, uptime, temperature, network interfaces
No parameter schema in public metadata yet.
get_interfacesVersion, CPU, memory, uptime, temperature, network interfaces
Version, CPU, memory, uptime, temperature, network interfaces
No parameter schema in public metadata yet.
list_firewall_rulesRule management with interface filtering, alias listing
Rule management with interface filtering, alias listing
No parameter schema in public metadata yet.
add_firewall_ruleRule management with interface filtering, alias listing
Rule management with interface filtering, alias listing
No parameter schema in public metadata yet.
delete_firewall_ruleRule management with interface filtering, alias listing
Rule management with interface filtering, alias listing
No parameter schema in public metadata yet.
list_firewall_aliasesRule management with interface filtering, alias listing
Rule management with interface filtering, alias listing
No parameter schema in public metadata yet.
list_dhcp_leasesActive leases, IP reservations
Active leases, IP reservations
No parameter schema in public metadata yet.
list_dhcp_static_mappingsActive leases, IP reservations
Active leases, IP reservations
No parameter schema in public metadata yet.
add_dhcp_static_mappingActive leases, IP reservations
Active leases, IP reservations
No parameter schema in public metadata yet.
delete_dhcp_static_mappingActive leases, IP reservations
Active leases, IP reservations
No parameter schema in public metadata yet.
list_dns_host_overridesUnbound DNS Resolver host overrides
Unbound DNS Resolver host overrides
No parameter schema in public metadata yet.
add_dns_host_overrideUnbound DNS Resolver host overrides
Unbound DNS Resolver host overrides
No parameter schema in public metadata yet.
delete_dns_host_overrideUnbound DNS Resolver host overrides
Unbound DNS Resolver host overrides
No parameter schema in public metadata yet.
get_pending_changesSee what is staged per subsystem (firewall, dhcp, dns) and apply it
See what is staged per subsystem (firewall, dhcp, dns) and apply it
No parameter schema in public metadata yet.
apply_changesSee what is staged per subsystem (firewall, dhcp, dns) and apply it
See what is staged per subsystem (firewall, dhcp, dns) and apply it
No parameter schema in public metadata yet.
get_gateway_statusGateway health, connected devices, service status, recent raw firewall log entries
Gateway health, connected devices, service status, recent raw firewall log entries
No parameter schema in public metadata yet.
get_arp_tableGateway health, connected devices, service status, recent raw firewall log entries
Gateway health, connected devices, service status, recent raw firewall log entries
No parameter schema in public metadata yet.
list_servicesGateway health, connected devices, service status, recent raw firewall log entries
Gateway health, connected devices, service status, recent raw firewall log entries
No parameter schema in public metadata yet.
get_firewall_logsGateway health, connected devices, service status, recent raw firewall log entries
Gateway health, connected devices, service status, recent raw firewall log entries
No parameter schema in public metadata yet.
restart_serviceRestart any pfSense service
Restart any pfSense service
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
mcp-pfsense
MCP server for managing pfSense firewalls through AI assistants like Claude, ChatGPT, and Copilot.
Requires: pfrest package installed on your pfSense instance (provides the REST API).
Features
20 tools across 7 categories:
Details
- Repository
- github.com/felhen-ai/mcp-pfsense
- Package
mcp-pfsense- Transport
- STDIO
- Registry
- MCP registry, active