pfsense-mcp-server

Safe, least-privilege pfSense access for AI assistants. MCP server that gives an AI assistant strongly typed, read-only visibility into one pfSense appliance — system, network, firewall, DHCP, DNS, VPN, certificates, and diagnostics — without raw shell access, an unaudited scripting surface, or any way to change the appliance by accident.

I built this because I wanted AI assistance for pfSense without giving an LLM the ability to accidentally disconnect my own network — a firewall deserves a higher safety standard than “the model probably won’t make a bad change.” See Why this project exists for the full reasoning.

What it does

• 97 tools: 95 pfSense READ tools + 2 documentation guidance tools. Covers roughly 90% of pfSense’s useful REST API READ surface. Every tool is strongly typed (Pydantic) — no untyped JSON passthrough.
• 0 WRITE tools by default. A fully built, twice live-verified protected-change path exists but requires an explicit opt-in — see Safety levels below.
• Ask it things like: “List my VLANs and which interface each one rides on,” “Is my WAN gateway up right now?”, “Which certificates expire soon?”, “What DHCP leases are active on the LAN?” — every