// MCP TOOL REFERENCE

OPNSENSE MCP SERVER TOOLS

81 tools from the OPNsense MCP Server MCP Server, categorised by risk level.

// ALL 81 OPNSENSE MCP SERVER TOOLS

READ 41 tools

Read opn_arp_table Get the ARP table showing IP-to-MAC address mappings. Read opn_crowdsec_alerts opn_crowdsec_alerts Read opn_crowdsec_status opn_crowdsec_status Read opn_dns_lookup opn_dns_lookup Read opn_dns_stats Get Unbound DNS resolver statistics (queries, cache hits, uptime). Read opn_download_config opn_download_config Read opn_firewall_log opn_firewall_log Read opn_gateway_status Get gateway status including dpinger health checks. Read opn_get_config_section opn_get_config_section Read opn_get_dnsbl opn_get_dnsbl Read opn_haproxy_get opn_haproxy_get Read opn_haproxy_search opn_haproxy_search Read opn_haproxy_status Get HAProxy load balancer status and backend health. Read opn_interface_stats Get per-interface traffic statistics (bytes in/out, packets, errors). Read opn_ipsec_status opn_ipsec_status Read opn_ipv6_status opn_ipv6_status Read opn_list_acme_certs opn_list_acme_certs Read opn_list_cron_jobs List scheduled cron jobs configured in OPNsense. Read opn_list_ddns_accounts opn_list_ddns_accounts Read opn_list_dhcp_leases opn_list_dhcp_leases Read opn_list_dns_forwards List Unbound DNS forward zones (domain-specific DNS servers). Read opn_list_dns_overrides List Unbound DNS host overrides (local DNS records). Read opn_list_dnsbl opn_list_dnsbl Read opn_list_dnsmasq_leases opn_list_dnsmasq_leases Read opn_list_dnsmasq_ranges opn_list_dnsmasq_ranges Read opn_list_firewall_aliases List firewall alias definitions (IP lists, port groups, GeoIP, URLs). Read opn_list_firewall_categories List firewall rule categories. Read opn_list_firewall_rules opn_list_firewall_rules Read opn_list_kea_leases opn_list_kea_leases Read opn_list_nat_rules opn_list_nat_rules Read opn_list_services List system services and their running status. Read opn_list_static_routes opn_list_static_routes Read opn_mcp_info Get MCP server version and runtime configuration. Read opn_mdns_repeater_status opn_mdns_repeater_status Read opn_ndp_table opn_ndp_table Read opn_openvpn_status opn_openvpn_status Read opn_pf_states Query the active PF (packet filter) state table. Read opn_scan_config opn_scan_config Read opn_security_audit opn_security_audit Read opn_system_status opn_system_status Read opn_wireguard_status opn_wireguard_status

WRITE 23 tools

Write opn_toggle_alias opn_toggle_alias Write opn_toggle_firewall_rule opn_toggle_firewall_rule Write opn_add_alias opn_add_alias Write opn_add_ddns_account opn_add_ddns_account Write opn_add_dns_override opn_add_dns_override Write opn_add_dnsbl_allowlist opn_add_dnsbl_allowlist Write opn_add_dnsmasq_range opn_add_dnsmasq_range Write opn_add_firewall_category opn_add_firewall_category Write opn_add_firewall_rule opn_add_firewall_rule Write opn_add_icmpv6_rules opn_add_icmpv6_rules Write opn_add_nat_rule opn_add_nat_rule Write opn_configure_mdns_repeater opn_configure_mdns_repeater Write opn_haproxy_add opn_haproxy_add Write opn_haproxy_update opn_haproxy_update Write opn_set_dnsbl opn_set_dnsbl Write opn_set_rule_categories opn_set_rule_categories Write opn_update_alias opn_update_alias Write opn_update_ddns_account opn_update_ddns_account Write opn_update_dns_override opn_update_dns_override Write opn_update_dnsbl opn_update_dnsbl Write opn_update_dnsmasq_range opn_update_dnsmasq_range Write opn_update_firewall_rule opn_update_firewall_rule Write opn_update_nat_rule opn_update_nat_rule

DESTRUCTIVE 9 tools

Destructive opn_delete_alias opn_delete_alias Destructive opn_delete_ddns_account Delete a Dynamic DNS account by UUID and apply the configuration. Destructive opn_delete_dns_override opn_delete_dns_override Destructive opn_delete_dnsmasq_range Delete a dnsmasq DHCP range by UUID and apply the configuration. Destructive opn_delete_firewall_category opn_delete_firewall_category Destructive opn_delete_firewall_rule opn_delete_firewall_rule Destructive opn_delete_nat_rule opn_delete_nat_rule Destructive opn_haproxy_delete opn_haproxy_delete Destructive opn_remove_dnsbl_allowlist opn_remove_dnsbl_allowlist

EXECUTE 8 tools

Execute opn_confirm_changes opn_confirm_changes Execute opn_haproxy_configtest Validate HAProxy configuration syntax before applying. Execute opn_ping opn_ping Execute opn_reconfigure_ddclient opn_reconfigure_ddclient Execute opn_reconfigure_dnsmasq opn_reconfigure_dnsmasq Execute opn_reconfigure_haproxy opn_reconfigure_haproxy Execute opn_reconfigure_unbound opn_reconfigure_unbound Execute opn_traceroute Trace the network path from OPNsense to a destination host.

// FAQ

How many tools does the OPNsense MCP Server MCP server have? +

The OPNsense MCP Server MCP server exposes 81 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on OPNsense MCP Server tools? +

Route the OPNsense MCP Server server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do OPNsense MCP Server tools fall into? +

OPNsense MCP Server tools are categorised as Read (41), Write (23), Destructive (9), Execute (8). Each category has a recommended default policy.

Enforce policy on every OPNsense MCP Server tool call.

Start from OPNsense MCP Server, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.