ADD OPNSense MCP Server

[vespo92]

Add OPNsense MCP Server

Description

Adds OPNsense MCP server to enable firewall and network management through LLM interfaces with Infrastructure as Code capabilities.

Server Details

Server: https://github.com/vespo92/OPNSenseMCP

Motivation and Context

This MCP server enables LLMs to interact with OPNsense firewalls, allowing users to manage their network infrastructure through natural language. Users can:

• Create and manage VLANs and network interfaces
• Configure firewall rules with intelligent templates
• Manage DNS blocklists for content filtering
• Search and identify devices on the network
• Deploy network configurations as Infrastructure as Code
• Backup and restore firewall configurations

The server provides a secure, API-based integration that makes network administration more accessible while maintaining security best practices. It's designed as part of a larger vision for AI-assisted home infrastructure automation.

How Has This Been Tested?

✅ Tested with Claude Desktop on Windows 10/11, macOS, and Linux
✅ Verified with OPNsense 24.x versions
✅ Tested all core functions: VLAN management, firewall rules, DNS blocking, device discovery
✅ Infrastructure as Code deployment tested with complex network scenarios
✅ Connection test scripts included (npm run test:api)
✅ Error handling tested with invalid credentials, network failures, and resource conflicts
✅ Performance tested with Redis and PostgreSQL caching layers
✅ Production use in home network environment for 3+ months

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update

Checklist

• I have read the MCP Protocol Documentation
• My changes follow MCP security best practices
• I have updated the server's README accordingly
• I have tested this with an LLM client
• My code follows the repository's style guidelines
• New and existing tests pass locally
• I have added appropriate error handling
• I have documented all environment variables and configuration options

Additional Information

Key Features

• Network Management: VLAN creation, interface configuration, DHCP lease monitoring
• Firewall Control: Rule management with presets for common scenarios
• DNS Security: Domain blocking with category-based filters
• IaC Support: Declarative network configuration with state tracking
• Caching: Optional Redis/PostgreSQL integration for performance
• TypeScript: Fully typed implementation with comprehensive error handling

Security Considerations

• No hardcoded credentials - all configuration via environment variables
• API key/secret authentication required
• SSL/TLS support with certificate validation options
• Input validation on all operations
• Sanitized error messages to prevent information leakage

Future Roadmap

This server is the foundation for a larger ecosystem of home infrastructure MCP servers, with planned integrations for:

• Docker/Kubernetes (container orchestration)
• TrueNAS (storage management)
• Unified IaC orchestrator across all services

Example Usage

// In Claude Desktop
"Create a guest VLAN on interface igc3 with tag 10"
"Block all social media sites on my network"
"Show me all devices connected to the IoT network"
"Set up firewall rules for a Minecraft server"

---

[olaservo]

Thanks for your contribution to the servers list. This has been merged in this combined PR: #2143

This is a new process we're trying out, so if you see any issues feel free to re-open the PR and tag me.