# OPNSenseMCP

> MCP Server for OPNSense to act as IaC proxy

- **URL**: https://www.freshcrate.ai/projects/OPNSenseMCP
- **Author**: vespo92
- **Category**: MCP Servers
- **Latest version**: `v0.11.0` (2026-04-08)
- **License**: MIT
- **Source**: https://github.com/vespo92/OPNSenseMCP
- **Language**: TypeScript
- **GitHub**: 45 stars, 8 forks
- **Registry**: github
- **Tags**: `typescript`

## Description

MCP Server for OPNSense to act as IaC proxy

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.11.0` | 2026-04-08 | High | ## What's Changed * chore(deps): Bump @types/uuid from 10.0.0 to 11.0.0 by @dependabot[bot] in https://github.com/vespo92/OPNSenseMCP/pull/16 * chore(ci): Bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/vespo92/OPNSenseMCP/pull/17 * chore(ci): Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/vespo92/OPNSenseMCP/pull/18 * chore(deps): Bump the production-dependencies group with 2 updates by @dependabot[bot] in https://github.com/vespo92/O |
| `v0.9.2` | 2025-12-07 | Low | ## What's New  ### Dependency Upgrades - **zod**: 3.25.62 → 4.1.13 (major upgrade with performance improvements) - **drizzle-orm**: 0.29.5 → 0.45.0 - **drizzle-kit**: 0.31.4 → 0.31.8  ### Breaking Changes Addressed - Zod v4: `ZodError.errors` renamed to `ZodError.issues`  ### Dependabot - Updated configuration to allow automatic updates for zod and drizzle-orm  ### Installation ```bash npx opnsense-mcp-server@0.9.2 ```  Or with Bun: ```bash bun run /path/to/OPNSenseMCP/src/index.ts ``` |
| `v0.9.1` | 2025-12-07 | Low | ## What's New  ### Security Fixes - **CRITICAL**: Upgraded `@modelcontextprotocol/sdk` from 0.5.0 to 1.24.3   - Fixes DNS rebinding vulnerability (HIGH severity) - Fixed axios DoS vulnerability  ### Bun Support 🚀 Now supports [Bun](https://bun.sh) for significantly faster startup times!  **New scripts:** - `bun run start:bun` - Run with Bun - `bun run dev:bun` - Development mode with hot reload - `bun run build:bun` - Build with Bun  **Claude Desktop with Bun:** ```json {   "mcpServers": { |
| `v0.9.0` | 2025-12-07 | Low | ## What's New  ### Features - **Modular Plugin Architecture**: Complete plugin system with SSE event streaming - **Dashboard**: Web-based monitoring interface - **Comprehensive Plugins**: Extended plugin ecosystem  ### Security - **Credential Leak Fixed**: Removed `.mcp.json` from git tracking (contained API keys) - **Enhanced .gitignore**: Added patterns for credentials, secrets, SSH keys, and tokens  ### Bug Fixes - Resolved all TypeScript build errors from merged PR - Fixed incorrect import n |
| `v0.8.2` | 2025-08-24 | Low | ## 🎉 Major Release: SSH-based NAT Management & Complete Repository Reorganization  ### 🚀 Key Features  #### NAT Management (NEW) - **Complete NAT control via SSH** - Since OPNsense doesn't expose NAT through REST API - **DMZ NAT fix** - Resolves inter-VLAN routing issues automatically - **NAT modes** - Support for automatic, hybrid, manual, and disabled modes - **No-NAT rules** - Create exception rules for internal traffic  #### Firewall Improvements - **Fixed automation rules visibility** - A |
| `v0.7.5` | 2025-08-20 | Low | ## 🐛 Bug Fixes  ### Critical: Fixed Firewall Rule Persistence Issue - **Problem**: Firewall rules were created successfully (returning UUIDs) but weren't persisting or showing up when listing rules - **Root Cause**: Incomplete configuration save - API was only calling `/firewall/filter/apply` without proper persistence  ### Solution Implemented: 1. **Enhanced `applyChanges()` method**:    - Now calls both `/firewall/filter/apply` and `/firewall/filter/reconfigure`    - Implements proper save/re |
| `v0.7.2` | 2025-08-07 | Low | **Full Changelog**: https://github.com/vespo92/OPNSenseMCP/compare/v0.7.1...v0.7.2 |
| `v0.7.1` | 2025-08-07 | Low | ## What's Changed * add MCP server badge by @punkpeye in https://github.com/vespo92/OPNSenseMCP/pull/1  ## New Contributors * @punkpeye made their first contribution in https://github.com/vespo92/OPNSenseMCP/pull/1  **Full Changelog**: https://github.com/vespo92/OPNSenseMCP/commits/v0.7.1 |
| `v0.7.3` | 2025-08-07 | Low | ## 🐛 Bug Fixes - Fixed ESM import paths missing .js extensions - Updated npx command to use --yes flag for better compatibility   - Added @latest to ensure newest version is fetched  ## 📚 Documentation - Updated all configuration examples with working syntax - Added troubleshooting section for connection issues - Improved Claude Code/Desktop setup instructions  ## 🔧 Configuration Working Claude Code configuration: ```json {   "mcpServers": {     "opnsense": {       "command": "npx",       "ar |

## Dependency audit

- **Score**: 97/100
- **Total deps**: 30
- **Resolved**: 29
- **Unresolved**: 1
- **License conflicts**: 0
- **Warnings**: 1
- **Scanned**: 2026-05-04

## Citation

- HTML: https://www.freshcrate.ai/projects/OPNSenseMCP
- Markdown: https://www.freshcrate.ai/projects/OPNSenseMCP.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/OPNSenseMCP/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._