fortigate-mcp-server
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/alpadalar/fortigate-mcp-server |
|---|---|
| Category | Network/firewall |
| Systems touched | FortiGate / FortiOS 7.4–7.6: policies, address/service objects, VIPs, static routes, security/monitor visibility |
| Access (as described) | configurable |
| License / price | MIT / free |
| GitHub stars | 40 |
| Read tools | list_devices, get_device_status, list_firewall_policies, list_address/service_objects, list_virtual_ips, list_static_routes, get_routing_table, list_interfaces, security/admin/SSL-VPN/local-in visibility, address/service groups, schedules, IP pools, SNAT maps, system resources, license/HA, ARP, DHCP leases, IPsec status, firewall sessions, analyze_policy_hygiene |
| Write / delete / exec tools | add/remove_device; create/update/delete firewall policy, address/service object, VIP, static route (all gated) |
| Read-only mode | Yes: server.allow_writes defaults false; set true or FORTIGATE_MCP_ALLOW_WRITES=1 to enable mutations |
| Safety notes | Keep allow_writes false for monitoring. Prefer API token over password (password login deprecated on FortiOS 7.6+). verify_ssl must stay true. Unauthenticated HTTP must stay on 127.0.0.1; require_auth before binding 0.0.0.0. FortiOS 8.0 not verified. |
| Verified | yes (README review 2026-11-07) |
| Notes | 52 unique tools. Same author as ActiveDirectoryMCP already in the seed. Updated 2026-10-21. Added 2026-11-07. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.