// SCAN REPORT

ASUS Merlin Router MCP Server

47 tools. 23 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

23 can modify or destroy data

24 read-only

47 tools total

Community server · catalogue entry verified 12/06/2026

How to control ASUS Merlin Router MCP Server ↓

TOOL MAP

What ASUS Merlin Router MCP Server exposes to your agents

Read (24) Write / Execute (17) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous ASUS Merlin Router MCP Server tools

Destructive · Medium remove_dhcp_reservation Removing a DHCP reservation is an irreversible deletion of a network configuration entry. Destructive · Medium remove_keyword_filter Removing a keyword filter is an irreversible deletion of a configuration entry. Destructive · Medium remove_mac_filter Removing a MAC filter entry is an irreversible deletion of a network access control rule. Destructive · High remove_network_service_filter_rule Removing a network service filter rule is an irreversible deletion of a security policy.

23 of ASUS Merlin Router MCP Server's 47 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ASUS Merlin Router MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and ASUS Merlin Router MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "remove_dhcp_reservation": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_dhcp_reservation": {
    "limits": [
      {
        "counter": "add_dhcp_reservation_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "download_file": {
    "limits": [
      {
        "counter": "download_file_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register ASUS Merlin Router MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ASUS MERLIN ROUTER →

Free to start. No card required.

FULL CATALOGUE

All 47 ASUS Merlin Router MCP Server tools

DESTRUCTIVE 6 tools

Destructive remove_dhcp_reservation Remove DHCP reservation by MAC or IP address Destructive remove_keyword_filter Remove keyword from filter list Destructive remove_mac_filter Remove device from MAC filter Destructive remove_network_service_filter_rule Remove network service filter rule by matching all criteria exactly Destructive remove_url_filter Remove URL pattern from global filter list Destructive remove_vpn_routing_policy Remove device from VPN Director routing (Asuswrt-Merlin firmware only). Device will return to normal routing (

EXECUTE 5 tools

Execute execute_command Execute a custom command on the router via SSH. WARNING: NEVER use this for file operations (reading, writing, Execute restart_service Restart a specific router service (e.g., wireless, vpnclient1, httpd) Execute block_device_internet Block or unblock device from internet access (parental controls) Execute reboot_router Reboot the router. WARNING: This will disconnect all clients. Execute set_nvram_variable Set a NVRAM variable value. WARNING: Incorrect values can break router configuration.

WRITE 12 tools

Write add_dhcp_reservation Reserve IP address for specific MAC address (static DHCP lease) Write add_keyword_filter Add keyword to filter list (blocks URLs containing the keyword) Write add_mac_filter Add device to MAC filter (whitelist or blacklist) for WiFi access control Write add_network_service_filter_rule Add network service filter rule to block/allow specific services by IP and port. Deny list blocks services dur Write add_url_filter Add URL pattern to global filter list (blacklist or whitelist depending on mode) Write add_vpn_routing_policy Route specific device through VPN client using VPN Director (Asuswrt-Merlin firmware only). Adds device to VPN Write set_firewall_config Configure firewall settings including enable/disable main firewall, DoS protection, logging mode, WAN ping res Write set_network_service_filter_mode Enable or disable network service filter deny/allow list Write set_network_service_filter_schedule Configure network service filter schedule (active days and time ranges). Format: days as 7-digit string (Sun-S Write set_system_log_config Configure system log settings (log levels, remote syslog server) Write set_url_filter_mode Set URL filter mode to blacklist (block listed URLs) or whitelist (allow only listed URLs) Write upload_file Upload a file to the router via SCP with MD5 verification. Use this for creating or editing router files. Work

READ 24 tools

Read download_file Download a file from the router via SCP Read get_aiprotection_status Get AiProtection (Trend Micro) security status including malicious sites blocking, two-way IPS, and infected d Read get_all_network_devices Get comprehensive list of all network devices (DHCP + static + ARP) with detailed info Read get_connected_devices List all devices connected to the router (via DHCP) Read get_firewall_status Get comprehensive firewall status and configuration including main firewall, DoS protection, logging, WAN ping Read get_keyword_filter_status Get keyword filter status including enabled state, number of rules, and schedule Read get_network_service_filter_status Get network service filter status including deny list and allow list configuration, rules, and schedule Read get_nvram_variable Get the value of a specific NVRAM variable Read get_router_info Get router system information (uptime, memory, CPU, firmware version) Read get_system_log Get system log entries from the router with optional filtering Read get_url_filter_status Get global URL filter status including enabled state, filter mode (blacklist/whitelist), number of rules, and Read get_vpn_server_status Get detailed VPN server status including connected clients Read get_vpn_server_users Get list of users authorized to connect to VPN servers Read get_vpn_status Get status of VPN clients and servers Read get_wifi_status Get WiFi status for all radios (2.4GHz, 5GHz, etc.) Read list_blocked_devices Show devices with internet access restrictions Read list_dhcp_reservations Show all current DHCP reservations Read list_keyword_filters List all configured keyword filter rules Read list_mac_filters Show current MAC filters with friendly formatting Read list_network_service_filter_rules List network service filter rules for deny or allow list Read list_processes List running processes on the router Read list_url_filters List all configured URL filter rules with status and mode Read list_vpn_policies List all VPN Director routing rules (Asuswrt-Merlin firmware only). Shows which devices are configured to rout Read read_file Read contents of a file on the router

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about ASUS Merlin Router MCP Server

Can an AI agent delete data through the ASUS Merlin Router MCP Server MCP server? +

Yes. The ASUS Merlin Router MCP Server server exposes 6 destructive tools including remove_dhcp_reservation, remove_keyword_filter, remove_mac_filter. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ASUS Merlin Router MCP Server? +

The ASUS Merlin Router MCP Server server has 12 write tools including add_dhcp_reservation, add_keyword_filter, add_mac_filter. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ASUS Merlin Router MCP Server.

How many tools does the ASUS Merlin Router MCP Server MCP server expose? +

47 tools across 4 categories: Destructive, Execute, Read, Write. 24 are read-only. 23 can modify, create, or delete data.

How do I enforce a policy on ASUS Merlin Router MCP Server? +

Register the ASUS Merlin Router MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ASUS Merlin Router MCP Server tool call.

Deterministic rules across all 47 ASUS Merlin Router MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ASUS MERLIN ROUTER →

Free to start. No card required.

47 ASUS Merlin Router MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.