MCP.Market

wg-easy MCP server

by ni-c·io.github.ni-c/wg-easy-mcp·v0.6.0
No reviews yet

Administer wg-easy (WireGuard Easy) v15: manage VPN clients, configs, QR codes and server status

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars37 downloads/wk

Reviews

Write one

Nobody has reviewed wg-easy yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

wg-easy tools (11, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_clientwrite action

    Create a new WireGuard client. Keys and IP addresses are generated by wg-easy. Returns the new client ID. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.

  • delete_clientwrite action

    Permanently delete a WireGuard client. This is irreversible: the client loses VPN access and its keys cannot be restored. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.

  • disable_client

    Disable a WireGuard client. The client keeps its configuration but can no longer connect.

  • enable_client

    Enable a WireGuard client so it can connect again. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.

  • generate_one_time_link

    Generate a one-time download link for a client configuration that can

  • get_client

    Get the full details of a single WireGuard client.

  • get_client_config

    Get the WireGuard configuration file (wg .conf format) for a client. SENSITIVE: the output contains the client private key — treat it as a secret and do not repeat it unnecessarily.

  • get_client_qrcode

    Get the client configuration as a QR code (SVG markup) for scanning with the WireGuard mobile app. SENSITIVE: the QR code encodes the client private key — treat it as a secret.

  • get_server_info

    Get information about the wg-easy instance: release/update status, general settings and the WireGuard interface configuration. Secret fields (private keys, passwords) are redacted.

  • list_clients

    List all WireGuard clients of the wg-easy instance, including their status (enabled/expired), addresses and traffic statistics.

  • update_clientwrite action

    Update a WireGuard client. Only the provided fields are changed; all other settings are preserved. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

no findings
  • Code scan25 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How wg-easy compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
Tools
11
the typical server has 7
Tools that change things
27%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
37
more than 28% of 12,191 servers with a package

What its tools let an agent do: 5 read · 2 create · 3 change · 1 delete

Install wg-easy in Claude Code, Cursor or VS Code

Runs npx -y wg-easy-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add wg-easy-mcp -- npx -y wg-easy-mcp
Add to Cursor

What the publisher says

From the wg-easy repository's README, as published. We do not edit it. Read it on GitHub

wg-easy-mcp

<!-- badges: start -->

<!-- badges: end -->

A Model Context Protocol (MCP) server for administering wg-easy (WireGuard Easy) instances.

Lets MCP clients like Claude Code, Claude Desktop or Codex manage your WireGuard VPN: list, create, update, enable/disable and delete clients, fetch configuration files and QR codes, and inspect the server status — all through the wg-easy v15 REST API.

Eleven tools is the ceiling, not the floor: WGEASYALLOW_TOOLS=essential registers a curated six instead, and a model picks the right tool far more reliably from six than from eleven — see choosing which tools load.

<!-- is resolved against the colour scheme of the page showing it, so GitHub picks the variant that matches its own theme toggle. npm strips and when it sanitises the README and keeps the , which is why that fallback brings its own dark card instead of relying on a media query. -->

What makes it different

The full client lifecycle over the wg-easy v15 REST API, including .conf files, QR codes and one-time download links.

Partial updates merge. An update reads the current client state and changes only the fields you named, instead of overwriting the rest with defaults.

disableclient stays ungated on purpose.** Every other write asks a person first through MCP elicitation; that one only ever withdraws access, and making it harder would be making the safe move the slow one.

Requirements

  • Node.js ≥ 22
  • A running wg-easy v15+ instance
  • 2FA (TOTP) must be disabled for the account used by this server — the wg-easy API only supports Basic Authentication and does not work with 2FA enabled

Note: The wg-easy REST API is not yet declared stable and may change between releases. This server targets wg-easy v15.

Configuration

Configuration is provided via environment variables:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

wg-easy: common questions

Is wg-easy MCP server safe?
Mostly: it is graded B (83/100). Read the wg-easy safety report
How do I install wg-easy?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does wg-easy need an API key?
Yes. The registry entry asks for WG_EASY_PASSWORD.
Is wg-easy maintained?
The last commit was 20 days ago (2026-10-15). The latest release is v0.6.0.
How does wg-easy compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); tools 11 (the typical server has 7); tools that change things 27% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from ni-c →