How do I install the pfsense mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `PFSENSE_URL`, `AUTH_METHOD`, `PFSENSE_USERNAME`, `PFSENSE_PASSWORD`, `PFSENSE_VERSION`, `VERIFY_SSL`, `PFSENSE_API_KEY`, `MCP_API_KEY` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Pfsense MCP Server

Managing a pfSense firewall means clicking through web UI tabs, remembering field names, and hoping you don't fat-finger a rule that locks you out.

Local serverstdioPython

What is the Pfsense MCP Server?

Managing a pfSense firewall means clicking through web UI tabs, remembering field names, and hoping you don't fat-finger a rule that locks you out. With this MCP

What the server does

Every destructive operation requires explicit confirmation and shows you exactly what will happen
Automatic config backup before every delete/reboot — with a one-line rollback command
Rate limiting prevents runaway AI loops from flooding your firewall with rules
Input sanitization blocks command injection, path traversal, and XSS in every parameter

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
tvlc	WebGUI port type-mismatch report (#7)

How to install the Pfsense MCP Server

{
  "mcpServers": {
    "pfsense": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/gensecaihq/pfsense-mcp-server@v1.1.0",
        "pfsense-mcp-server"
      ],
      "env": {
        "PFSENSE_URL": "https://192.168.1.1",
        "AUTH_METHOD": "basic",
        "PFSENSE_USERNAME": "admin",
        "PFSENSE_PASSWORD": "YOUR_PFSENSE_PASSWORD",
        "PFSENSE_VERSION": "CE_2_8_1",
        "PFSENSE_CA_FILE": "/path/to/pfsense-ca.pem"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Variable	Description	Required
PFSENSE_URL	Declared in the maintainer’s client configuration.	Check documentation
AUTH_METHOD	Declared in the maintainer’s client configuration.	Check documentation
PFSENSE_USERNAME	Declared in the maintainer’s client configuration.	Check documentation
PFSENSE_PASSWORD	Declared in the maintainer’s client configuration.	Check documentation
PFSENSE_VERSION	Declared in the maintainer’s client configuration.	Check documentation
PFSENSE_CA_FILE	Declared in the maintainer’s client configuration.	Check documentation

Example prompts to try

“Use Pfsense to tvlc.”
“Use Pfsense to Domain.”
“Use Pfsense to Aliases.”

Frequently asked questions

Managing a pfSense firewall means clicking through web UI tabs, remembering field names, and hoping you don't fat-finger a rule that locks you out. With this MCP Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Pfsense MCP Server

Chrome DevTools

Official

Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.

Browser AutomationTypeScript★ 48.4k

Cloudflare

Official

Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.

Cloud & DevOpsRemoteTypeScript★ 2.9k

MC-Data Monitor

SQL pipeline observability and DBT integration monitor.

DatabasesRemote

Hardware-probe

Expert system hardware probe and performance diagnostic engine for AI, Gaming, and High-Performance workflows. This is a Model Context Protocol (MCP) server that provides deep system insights beyond…

Monitoring & Observability

Metro MCP

MCP server for US transit systems (DC Metro, NYC Subway) on Cloudflare Workers

Cloud & DevOpsRemoteTypeScript

Talos Linux

MCP server for Talos Linux — resources, services, logs, health, config, lifecycle via gRPC.

Monitoring & ObservabilityGo