opnsense-mcp-server

概述

这个 MCP 服务器充当 AI 助手与 OPNsense 防火墙之间的桥梁，通过模块化工具界面提供安全的 API 访问。它包含 88 个逻辑工具（每个模块一个），而非 2000+ 个单独工具，实现了完整的 API 覆盖，包括 752 个核心方法和 1271 个插件方法。服务器使用 TypeScript 构建，采用 @richard-stovall/opnsense-typescript-client 包实现类型安全，支持核心和插件模块。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• core_manage

  Core system functions including backup, reboot, and firmware information

  试试:Use core_manage to check system status试试:Perform a system backup using core_manage
• firewall_manage

  Firewall rules and aliases management

  试试:List all firewall aliases using firewall_manage试试:Add a new firewall rule with firewall_manage
• interfaces_manage

  Network interfaces configuration and management

  试试:Get information about all network interfaces using interfaces_manage试试:Configure a VLAN with interfaces_manage
• diagnostics_manage

  System diagnostics including ARP table and activity logs

  试试:View the ARP table using diagnostics_manage试试:Get system activity logs with diagnostics_manage
• auth_manage

  Authentication for users and groups

  试试:Search for users using auth_manage试试:Manage user groups with auth_manage
• firmware_manage

  Firmware update and management

  试试:Check for firmware updates using firmware_manage试试:Upgrade system firmware with firmware_manage
• openvpn_manage

  OpenVPN VPN instance management

  试试:List OpenVPN instances using openvpn_manage试试:Add a new OpenVPN instance with openvpn_manage
• ipsec_manage

  IPsec VPN tunnel and connection management

  试试:Search for IPsec tunnels using ipsec_manage试试:Check IPsec connection status with ipsec_manage
• wireguard_manage

  WireGuard VPN server and client management

  试试:List WireGuard servers using wireguard_manage试试:Manage WireGuard clients with wireguard_manage
• unbound_manage

  DNS resolver configuration and management

  试试:Search for host overrides using unbound_manage试试:Reconfigure the DNS service with unbound_manage
• dhcpv4_manage

  DHCP server configuration and lease management

  试试:Search for DHCP leases using dhcpv4_manage试试:Add a DHCP reservation with dhcpv4_manage
• plugin_nginx_manage

  Nginx web server configuration management

  试试:Get Nginx general configuration using plugin_nginx_manage试试:Search for Nginx upstreams with plugin_nginx_manage

可对比工具

安装

npm install -g @richard-stovall/opnsense-mcp-server

{
  "mcpServers": {
    "opnsense": {
      "command": "npx",
      "args": ["-y", "@richard-stovall/opnsense-mcp-server"],
      "env": {
        "OPNSENSE_URL": "https://192.168.1.1",
        "OPNSENSE_API_KEY": "your-api-key",
        "OPNSENSE_API_SECRET": "your-api-secret",
        "OPNSENSE_VERIFY_SSL": "false"
      }
    }
  }
}

FAQ

如何启用插件工具？

在参数中添加 '--plugins' 或在环境变量中设置 'INCLUDE_PLUGINS': 'true'。

遇到连接问题该怎么办？

验证 OPNsense API 已启用，检查 API 密钥权限，确保 IP/主机名可访问，对于自签名证书考虑使用 '--no-verify-ssl'。

opnsense-mcp-server 对比