mcp-pfsense (felhen-ai)
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/felhen-ai/mcp-pfsense |
|---|---|
| Category | Network/firewall |
| Systems touched | pfSense (via pfrest REST API): firewall rules, DHCP, DNS, services, logs, gateways |
| Access (as described) | configurable |
| License / price | MIT / free |
| GitHub stars | 6 |
| Read tools | get_system_status, get_interfaces, list_firewall_rules, list_firewall_aliases, list_dhcp_leases, list_dhcp_static_mappings, list_dns_host_overrides, get_pending_changes, get_gateway_status, get_arp_table, list_services, get_firewall_logs |
| Write / delete / exec tools | add/delete_firewall_rule, add/delete_dhcp_static_mapping, add/delete_dns_host_override, apply_changes, restart_service (destructive need confirm=true) |
| Read-only mode | Partial: writes are staged like the WebGUI (applied:false) until apply_changes(subsystem, confirm=true) or apply=true on the write; destructive ops need a second call with confirm=true |
| Safety notes | Staged-write design is solid, but apply_changes also activates anything a human left pending in the WebGUI. Default PFSENSE_VERIFY_SSL=false — turn verify on for real certs. Prefer a least-privilege pfrest user over admin. Alternative with broader coverage: gensecaihq/pfsense-mcp-server (120★, 300+ tools). |
| Verified | yes (README review 2026-11-07) |
| Notes | 20 tools. Actively updated (push 2026-11-04); in MCP Registry as io.github.felhen-ai/mcp-pfsense. Requires pfrest on the firewall. Added 2026-11-07. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.