opnsensemcp by vespo92 for OPNsense: safety score

C 55 Provisional Not reviewed Not tested read-only mode

opnsensemcp by vespo92 is a community MCP server for OPNsense with 4 read, 6 write and 2 destructive tools. It has a read-only mode and its access requirements are unknown; its provisional OpsMCP grade is C (55%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

MCP Server for OPNSense to act as IaC proxy

Publisher's description

Not listed under a registry name in this fetch. · version v0.11.0

Access not scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Can it change or delete things?

Yes. The extracted tools include at least one destructive tool, so it can change or delete things.

Classified from the tool name, or from the description when the name has no listed verb. Tool extraction read the highest-priority source files and may have missed others.

12 tools

Tool Class
arp_list
List ARP table entries from the name (list)
Read
backup_create
Create configuration backup from the name (create)
Write
firewall_create_rule
Create a new rule from the name (create)
Write
firewall_delete_rule
Delete a rule from the name (delete)
Destructive
firewall_list_rules
List all firewall rules from the name (list)
Read
firewall_update_rule
Update existing rule from the name (update)
Write
interface_list
List network interfaces from the name (list)
Read
nat_create_outbound_rule
Create NAT rule from the name (create)
Write
nat_list_outbound
List outbound NAT rules from the name (list)
Read
nat_set_mode
Set NAT mode from the name (set)
Write
system_execute_command
Execute CLI command from the name (execute)
Destructive
vlan_create
Create VLAN from the name (create)
Write

Score

55 of 100 points (55%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor Points Full weight Status
Tool capability 28 35 Scored
Access unknown 25 Not scored
Maintenance 16 20 Scored
Publisher 11 20 Scored

Tool capability

4 read, 6 write, 2 destructive.

The repository mentions a read-only mode. View the repository.

Access

PartValuePointsWhere this came from
Scope unknown unknown unknown
Where it runs unknown unknown unknown
Credentials unknown unknown unknown

Maintenance

PartValuePoints
Last commit 26 days 8 of 8
Releases 190 days 2 of 6
Issues 13 closed / 14 issues (0.93) 6 of 6

Publisher

PartValuePointsWhere this came from
Who publishes it Individual 3 of 8 GitHub owner type is User (vespo92).
Registry listing Not listed 2 of 5 No latest registry entry from search='opnsensemcp' had repository github.com/vespo92/opnsensemcp.
License MIT 4 of 4 GitHub SPDX license MIT.
Stars 90 1 of 2 90 GitHub stars.
Repository age 492 days 1 of 1 Repository created 2025-06-11T04:49:27Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Environment variables: unknown. The registry entry does not list any.

Maintenance

Archived
no
Last commit
20 Sep 2026 · c2313b4
Latest release
v0.11.0 · 8 Apr 2026
Issues
1 open · 13 closed
Stars
90
License
MIT
Repository created
11 Jun 2025

npm and PyPI

npm
No npm package in the registry entry.
PyPI
No PyPI package in the registry entry.
Maintainers
unknown

Install

Source: readme. This is the published command, not a rewritten one.

npm install -g opnsense-mcp-server

Badge

The SVG is generated for this server. The embed links to this server page.

OpsMCP grade C, 55 out of 100, provisional

Sources for this listing

No latest registry entry from search='opnsensemcp' had repository github.com/vespo92/opnsensemcp.