teefloo avatar

Asuswrt Mcp

teefloo/asuswrt-mcp

Built for AsusWRT and AsusWRT-Merlin routers, this gives Claude SSH access to 42+ monitoring tools covering everything from connected clients and DHCP leases to Wi-Fi radio status and VPN configurations. The mutation side is locked down tight: all write operations require explicit confirmation flags, support dry runs, and won't touch firmware or allow arbitrary commands. You can restart services, toggle guest networks, manage port forwarding rules, and handle parental controls through allowlisted NVRAM operations. Useful when you want AI-assisted router administration without handing over root access or risking a factory reset from a hallucination.

GitHub stars
2
tools
11
auth
Secret needed
transport
STDIO
env vars
5
last updated
Apr 27, 2026

Tools

11 tools

Public tool metadata for what this MCP can expose to an agent.

asuswrt_restart_serviceRestart allowlisted services (httpd, firewall, wireless, dnsmasq, etc.)

Restart allowlisted services (httpd, firewall, wireless, dnsmasq, etc.)

No parameter schema in public metadata yet.

asuswrt_dhcp_serverEnable/disable DHCP server

Enable/disable DHCP server

No parameter schema in public metadata yet.

asuswrt_upnpEnable/disable UPnP

Enable/disable UPnP

No parameter schema in public metadata yet.

asuswrt_radioEnable/disable Wi-Fi radio bands

Enable/disable Wi-Fi radio bands

No parameter schema in public metadata yet.

asuswrt_guest_wifiEnable/disable guest Wi-Fi

Enable/disable guest Wi-Fi

No parameter schema in public metadata yet.

asuswrt_guest_lan_accessToggle LAN access for guest Wi-Fi

Toggle LAN access for guest Wi-Fi

No parameter schema in public metadata yet.

asuswrt_port_forwardingList, add, remove, enable/disable port forwarding rules

List, add, remove, enable/disable port forwarding rules

No parameter schema in public metadata yet.

asuswrt_vpn_serverEnable/disable OpenVPN server

Enable/disable OpenVPN server

No parameter schema in public metadata yet.

asuswrt_parental_accessList, block, unblock, remove parental control rules

List, block, unblock, remove parental control rules

No parameter schema in public metadata yet.

asuswrt_parental_block_allToggle block-all mode

Toggle block-all mode

No parameter schema in public metadata yet.

asuswrt_dhcp_reservationList, add, remove DHCP static reservations

List, add, remove DHCP static reservations

No parameter schema in public metadata yet.

Sponsors

Configuration

ASUSWRT_HOST*

Router IP address (e.g., 192.168.1.1)

ASUSWRT_SSH_USERNAME*

SSH username for router authentication

ASUSWRT_SSH_PASSWORD*secret

SSH password for router authentication

ASUSWRT_SSH_KEY_FILE

Path to SSH private key file (alternative to password)

ASUSWRT_ALLOW_MUTATIONS

Enable mutation tools (default: false)

Readme

AsusWRT MCP Server

Python 3.11+ MIT License Project Status: Active

mcp-name: io.github.teefloo/asuswrt-mcp

Model Context Protocol (MCP) server for secure, controlled administration of AsusWRT and AsusWRT-Merlin routers via SSH.

Overview

This MCP server provides AI assistants (like Claude, Cursor, etc.) with a safe interface to monitor and manage AsusWRT routers. It operates exclusively over SSH using allowlisted operations—no arbitrary command execution, no firmware modifications, and no factory resets.

Features

Read-Only Monitoring (42 tools)


View the full README on GitHub

Details

Repository
github.com/teefloo/asuswrt-mcp
Package
asuswrt-mcp
Transport
STDIO
Auth
Required
Registry
MCP registry, active