night4me/pfsense-mcp-server

pfsense-mcp-server

Safe, least-privilege pfSense access for AI assistants. MCP server that gives an AI assistant strongly typed, read-only visibility into one pfSense appliance — system, network, firewall, DHCP, DNS, VPN, certificates, and diagnostics — without raw shell access, an unaudited scripting surface, or any way to change the appliance by accident.

What it does

• 95 public READ tools + 1 documentation guidance tool. Covers roughly 90% of pfSense's useful REST API READ surface. Every tool is strongly typed (Pydantic) — no untyped JSON passthrough.
• 0 WRITE tools by default. A fully built, twice live-verified protected-WRITE path exists but requires an explicit operator opt-in — see Safety by default.
• Ask it things like: "List my VLANs and which interface each one rides on," "Is my WAN gateway up right now?", "Which certificates expire soon?", "What DHCP leases are active on the LAN?" — every question maps to one typed, capability-gated tool.

Safety by default

• READ-oriented public MCP surface, 0 default-reachable WRITE. Enforced by an automated snapshot test, not just documented — a change to the public tool contract that isn't reflected in the approved snapshot fails CI.
• **Exp