MCP server for FortiManager JSON-RPC API. Manage firewall policies, devices, and scripts from AI assistants.
概览
A Model Context Protocol (MCP) server for FortiManager JSON-RPC API. This server enables AI assistants like Claude to interact with FortiManager for centralized firewall policy management, device provisioning, and network configuration. : This is an independent open-source project and is not affiliated with, endorsed by, or supported by Fortinet, Inc. FortiManager is a trademark of Fortinet, Inc. This MCP server can create, modify, and delete configurations on FortiManager. Misuse or misconfiguration can impact production networks. Use at your own risk. Always test in a non-production environment first and ensure appropriate ADOM permissions are configured.
README
以下为原文 README 节选，完整内容请查看原文。
FortiManager MCP Server
A Model Context Protocol (MCP) server for FortiManager JSON-RPC API. This server enables AI assistants like Claude to interact with FortiManager for centralized firewall policy management, device provisioning, and network configuration.
Note: This is an independent open-source project and is not affiliated with, endorsed by, or supported by Fortinet, Inc. FortiManager is a trademark of Fortinet, Inc.
Disclaimer: This MCP server can create, modify, and delete configurations on FortiManager. Misuse or misconfiguration can impact production networks. Use at your own risk. Always test in a non-production environment first and ensure appropriate ADOM permissions are configured.
Overview
This MCP server provides a comprehensive interface to FortiManager’s capabilities, allowing AI assistants to:
- Create and manage firewall policies and policy packages, including security-profile (UTM) inspection
- Configure firewall objects (addresses, services, VIPs)
- Add, provision, and manage FortiGate devices
- Configure device-DB interfaces, DHCP scopes, and wireless (VAPs, FortiAP/WTP profiles, managed APs)
- Execute CLI scripts on managed devices
- Configure provisioning and SD-WAN templates
- Monitor tasks and installations
- Manage ADOMs and workspace locking
Features
| Category | Capabilities |
|---|---|
| Policy Management | Create/update/delete firewall policies, manage policy packages, clone packages, security-profile (UTM) inspection fields |
| Object Management | Addresses, address groups, services, service groups, search objects |
| Device Management | Add/delete devices, bulk operations, device status, VDOM management |
| Device Configuration | Interfaces/VLAN subinterfaces, DHCP scopes, wireless VAPs/SSIDs, FortiAP (WTP) profiles and managed AP registration – all via the device DB, credential fields stripped from every read |
| Script Execution | Create/run CLI scripts, execute on devices/groups, view execution logs |
| Templates | System templates, CLI template groups, template assignment and validation |
| SD-WAN | SD-WAN templates, rule configuration, template assignment |
| System | System status, ADOM management, task monitoring, workspace locking |
Requirements
- Python: 3.12 or higher
- FortiManager: 7.x with JSON-RPC API access enabled
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"fortimanager": {
"command": "/path/to/fortimanager-mcp/.venv/bin/fortimanager-mcp",
"env": {
"FORTIMANAGER_HOST": "your-fmg-hostname",
"FORTIMANAGER_API_TOKEN": "your-api-token",
"FORTIMANAGER_VERIFY_SSL": "true",
"LOG_LEVEL": "INFO"
}
}
}
}