fortigate-mcp-server by alpadalar: safety score
D 51 Provisional Not reviewed Not tested read-only mode
fortigate-mcp-server by alpadalar is a community MCP server for Fortinet with 17 read, 9 write and 4 destructive tools. It has a read-only mode and its access requirements are unknown; its provisional OpsMCP grade is D (51%), last checked 16 Oct 2026.
A comprehensive Model Context Protocol (MCP) server for managing FortiGate devices.
Access not scored. 3 of 4 factors scored.
Can it change or delete things?
Yes. The extracted tools include at least one destructive tool, so it can change or delete things.
| Tool | Class |
|---|---|
add_device Add new device
from the name (add) | Write |
create_address_object Create address object
from the name (create) | Write |
create_firewall_policy Create new rule
from the name (create) | Write |
create_service_object Create service object
from the name (create) | Write |
create_static_route Create static route
from the name (create) | Write |
create_virtual_ip Create virtual IP
from the name (create) | Write |
delete_firewall_policy Delete rule
from the name (delete) | Destructive |
delete_static_route Delete static route
from the name (delete) | Destructive |
delete_virtual_ip Delete virtual IP
from the name (delete) | Destructive |
get_device_status Get device status
from the name (get) | Read |
get_interface_status Get interface status
from the name (get) | Read |
get_routing_table Get routing table
from the name (get) | Read |
get_schema_info Schema information
from the name (get) | Read |
get_sslvpn_settings Get SSL-VPN settings and portal bookmarks (bookmark credentials redacted)
from the name (get) | Read |
get_static_route_detail Get static route detail
from the name (get) | Read |
get_virtual_ip_detail Get virtual IP detail
from the name (get) | Read |
list_address_objects List address objects
from the name (list) | Read |
list_admins List admin accounts (secret fields redacted;
from the name (list) | Read |
list_devices List registered devices
from the name (list) | Read |
list_firewall_policies List firewall rules
from the name (list) | Read |
list_interfaces List interfaces
from the name (list) | Read |
list_local_in_policies List IPv4 local-in policies (IPv6
from the name (list) | Read |
list_security_profiles List security profiles (antivirus, IPS, web filter, application control)
from the name (list) | Read |
list_service_objects List service objects
from the name (list) | Read |
list_static_routes List static routes
from the name (list) | Read |
list_virtual_ips List virtual IPs
from the name (list) | Read |
remove_device Remove device
from the name (remove) | Destructive |
update_firewall_policy Update rule
from the name (update) | Write |
update_static_route Update static route
from the name (update) | Write |
update_virtual_ip Update virtual IP
from the name (update) | Write |
Score
51 of 100 points (51%). A factor that was not scored counts as 0 of its full weight.
| Factor | Points | Full weight | Status |
|---|---|---|---|
| Tool capability | 30 | 35 | Scored |
| Access | unknown | 25 | Not scored |
| Maintenance | 10 | 20 | Scored |
| Publisher | 11 | 20 | Scored |
Tool capability
17 read, 9 write, 4 destructive.
The repository mentions a read-only mode. View the repository.
Access
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Scope | unknown | unknown | unknown |
| Where it runs | unknown | unknown | unknown |
| Credentials | unknown | unknown | unknown |
Maintenance
| Part | Value | Points |
|---|---|---|
| Last commit | 9 days | 8 of 8 |
| Releases | no releases | 0 of 6 |
| Issues | 1 closed / 4 issues (0.25) | 2 of 6 |
Publisher
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Who publishes it | Individual | 3 of 8 | GitHub owner type is User (alpadalar). |
| Registry listing | Not listed | 2 of 5 | No latest registry entry from search='fortigate-mcp-server' had repository github.com/alpadalar/fortigate-mcp-server. |
| License | MIT | 4 of 4 | GitHub SPDX license MIT. |
| Stars | 37 | 1 of 2 | 37 GitHub stars. |
| Repository age | 423 days | 1 of 1 | Repository created 2025-08-19T08:45:14Z. |
What this score does not cover
This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.
Access needed
Environment variables: unknown. The registry entry does not list any.
Maintenance
- Archived
- no
- Last commit
- 6 Oct 2026 · d58f9a2
- Latest release
- no releases
- Issues
- 3 open · 1 closed
- Stars
- 37
- License
- MIT
- Repository created
- 19 Aug 2025
npm and PyPI
- npm
- No npm package in the registry entry.
- PyPI
- No PyPI package in the registry entry.
- Maintainers
- unknown
Install
uv sync --locked
pip install -e .Other Fortinet servers
Badge
Sources for this listing
github:fortigate mcp in:name,description