Pi-hole MCP Server

by hexamatic·io.github.hexamatic/pihole-mcp·v0.9.0

Manage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.

B70/100grade B

What users say

No reviews yet

Safety scan

B70/100

Adoption

Growing

8 stars

Reviews

Nobody has reviewed Pi-hole MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 6 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 70/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add pihole-mcp -- docker run -i --rm ghcr.io/hexamatic/pihole-mcp:0.9.0

Is Pi-hole MCP Server safe?: Mostly: it is graded B (70/100). Read the Pi-hole MCP Server safety report
How do I install Pi-hole MCP Server?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Pi-hole MCP Server need an API key?: Yes. The registry entry asks for PIHOLE_PASSWORD.
Is Pi-hole MCP Server maintained?: The last commit was 7 days ago (2026-09-14). The latest release is v0.9.0.
What can I use instead of Pi-hole MCP Server?: Servers from other publishers that do the same job: Domain Liveness MCP server and Mikrotik MCP server.

Same job from other publishers: the closest match first, then the best rated.

Domain Liveness
Is this business's website still there? Checks apex and www, and DNS separately from HTTP.
not reviewed
Established
A
Mikrotik
MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.
not reviewed
Established
B

Local package. It runs on your machine, not through the gateway.

PIHOLE_URLBase URL of your Pi-hole web interface. For multiple Pi-holes use PIHOLE_1_URL, PIHOLE_2_URL, ... instead.
PIHOLE_PASSWORDsecretPi-hole admin password, or an application password (recommended — bypasses TOTP 2FA)
TZIANA timezone for rendered timestamps, e.g. Australia/Adelaide. Defaults to UTC in the container.
PIHOLE_READ_ONLYExpose only inspection tools. Every tool that can change Pi-hole is hidden and rejected if called.
PIHOLE_TLS_SKIP_VERIFYSet to true only for a Pi-hole serving a self-signed HTTPS certificate. A trusted certificate is the better fix.
PIHOLE_REQUEST_TIMEOUTHTTP request timeout as a Go duration, e.g. 30s or 1m
PIHOLE_MAX_RETRIESRetries after a transient Pi-hole API failure; 0 disables retrying
PIHOLE_RETRY_MAX_DELAYUpper bound on a single exponential-backoff wait, as a Go duration

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/hexamatic-pihole-mcp.svg)](https://mcp.market/server/hexamatic-pihole-mcp)