mcp server
under construction
MIT
rustopnsmcp
MCP server for OPNsense (in development)
Enterprise MCP server for OPNsense on the mecmcp foundation: scoped access, audited change control. Under construction and not ready for use.
About
rustopnsmcp is the OPNsense member of the mechub MCP server family, doing for OPNsense what rustjunosmcp does for Junos: a curated, scoped, audited MCP surface over one vendor's management API.
It is built on the shared mecmcp foundation. It is under construction and not operational; its tests run against synthetic fixtures only, and it must not be deployed against a real OPNsense firewall.
Features
- Phase 1 reads: system status, interfaces, firewall rules and aliases, NAT, routes, DHCP leases, gateways, firmware
- Phase 2a governed writes for firewall aliases through mecmcp change sets
- Phase 2b governed writes for firewall filter rules through the same change-set tools
- OPNsense REST API with an API key and secret; TLS always verified
- Writes persist to config.xml immediately and take effect on apply, so a partial apply is a reachable outcome