MCP server · Security
Firewall AIops MCP server
by AIops-tools
Let your AI read and carefully change your OPNsense or pfSense firewall, with every action logged.
This is a helper that connects your AI assistant to your OPNsense or pfSense firewall. It lets the AI look at what is going on (rules, gateways, VPN, blocked traffic) and, when you ask, make small changes like turning a rule on or off. It is handy if you run a home or small office firewall and want plain-language answers without clicking through menus.
What is an MCP server? The 30-second version
On its own, your AI can only chat with you. An MCP server is a small helper program that gives your AI a new skill or a connection to an app or service. This one connects your AI to your OPNsense or pfSense firewall, so the AI can look things up there or do things for you when you ask. You install it once, point it at your firewall, and then just talk to your AI as usual.
What this MCP server does
You ask your AI a question in normal words, like why the internet dropped or which rules never get used. The AI passes that request to this helper. The helper talks to your firewall using its built-in web interface (the same one your browser uses). The firewall sends back the raw details, and the helper cleans them up and hands them to your AI. Your AI then explains the answer to you in plain language, and quietly writes down what it did in a log file.
What you can do with it
- Check firewall health, firmware, interfaces and gateways
- List filter rules and see which ones never get hit
- Find shadowed or redundant rules that do nothing
- See recent blocked traffic and guess if it is a scan or brute-force attempt
- Look at NAT port forwards, aliases, VPN sessions and DHCP leases
- Turn a rule on or off, or add and remove alias entries
- Preview a change before making it live, and undo reversible changes
Try asking your AI
- “Why did my internet drop this morning?”
- “Which firewall rules have never been used?”
- “Show me the top blocked source addresses in the last hour.”
- “Turn off the rule called test-allow-ssh and tell me what changed.”
What it gives back to you
You get back plain-language answers, lists and short summaries in the chat. For example, a list of rules with their names and hit counts, or a short explanation of why a gateway went down. When it makes a change, it tells you what it changed and records an undo note. It does not dump raw firewall files on you unless you ask.
Before you start
What you need
- An OPNsense or pfSense firewall you can reach on your network
- An API key (and secret for OPNsense) from your firewall, created in its user settings
- The uv tool installed on your computer (the install command uses it)
- A master password you choose, to unlock the encrypted secret store
Good to know
It can change your firewall, and a wrong change can cut off your internet or lock you out, so keep the API user read-only until you trust it and always review the dry-run first.
Install it with your AI
Add Firewall AIops MCP server to your AI, no technical skills needed
You don't install anything by hand. You copy one prompt, paste it into an AI that can work on your computer, and it checks, installs and connects the server for you, asking you when it needs something.
Sign in to get the install prompt
Members get a ready-made prompt that lets the Claude desktop app check Firewall AIops MCP server, install it and connect it for them, step by step. You don't need any technical skills: you copy, paste and answer a few questions. Your connected AI can also find and install any of the 4,609 MCP servers here for you.
Who it's for
Home lab owners, small office IT admins, and anyone who runs OPNsense or pfSense and wants to ask their AI questions instead of clicking through the firewall menus.
