MCP.Market

OpenWrt MCP server

by stanislav-testhub·io.github.stanislav-testhub/openwrt-mcp·v1.3.0
No reviews yet

MCP server that runs on an OpenWrt router: deny-by-default policy, audit log, rollback-armed changes

B70/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B70/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed OpenWrt MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OpenWrt MCP tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualityno auth information5/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 70/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OpenWrt MCP compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
70/100
higher than 35% of 48,255 servers

Install OpenWrt MCP in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the OpenWrt MCP repository's README, as published. We do not edit it. Read it on GitHub

openwrt-mcp -- an MCP server for OpenWrt 24.10 and 25.12

English · Русский · 简体中文

An MCP server that runs on an OpenWrt router, so Claude Code (or any MCP client) can inspect and change it -- behind deny-by-default policies, an audit log, and an automatic rollback for configuration changes.

Local and private. The server makes no outbound connections of its own and sends no telemetry; it listens on loopback and on a root-only socket, and talks to your client over an SSH session you set up. The tools that can make the router itself reach out (netdiag, pkgquery with refresh, pkgchange, sysupgrade check, the uciapply probes, ubus_call, exec) say so in their MCP annotations (openWorldHint), and each needs a grant from you. Secret values are masked in tool output by default, and a new WireGuard key never enters the conversation unless you ask for it.

Footprint. One static binary with no dependencies: 9.1 to 11.3 MB for the router architectures (9.6 MB on arm64, about 3.7 MB compressed in the release archive), about 10 MB resident on a GL-MT6000 right after start, and 23 tools in about 22 KB of tool descriptions. Every release file is checksummed and carries a build attestation.

Based on GlassOnTin/openwrt-mcp by Ian

Williams, which targets GL.iNet firmware 4.x (OpenWrt 21.02, opkg). This is a port to

stock OpenWrt 25.12 (apk, fw4/nftables, procd, netifd, LuCI JS). The security core is

upstream's; see Credits for what came from where.

Requirements

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

OpenWrt MCP: common questions

Is OpenWrt MCP server safe?
Mostly: it is graded B (70/100). Read the OpenWrt MCP safety report
Does OpenWrt MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is OpenWrt MCP maintained?
The last commit was 25 days ago (2026-10-10). The latest release is v1.3.0.
What can I use instead of OpenWrt MCP?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.

Alternatives to OpenWrt MCP

Same job from other publishers: the closest match first, then the best rated.