Asuswrt MCP server
io.github.teefloo/asuswrt-mcp·v0.1.1·2 starsSecure AsusWRT router administration via SSH — 42+ tools, guarded mutations
2 stars26 downloads/wk
Reviews
Write oneNobody has reviewed Asuswrt yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Asuswrt tools (47)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
asuswrt_admin_accessInspect web, SSH, and telnet administrative access settings.
asuswrt_arp_neighborsList ARP/IP neighbor entries known by the router.
asuswrt_capabilitiesReturn server capabilities, guardrails, and safe settings.
asuswrt_clientsList connected clients reported by the router.
asuswrt_config_snapshotFetch a redacted read-only configuration snapshot.
asuswrt_conntrack_statusInspect conntrack table usage and limits.
asuswrt_cron_jobsInspect scheduled cron jobs reported by cru.
asuswrt_ddns_statusInspect Dynamic DNS enablement and current provider settings.
asuswrt_dhcp_configInspect DHCP server pool settings and static reservations.
asuswrt_dhcp_leasesList active DHCP leases from dnsmasq.
asuswrt_dhcp_reservationList, add, or remove DHCP static reservations via SSH NVRAM.
asuswrt_dhcp_serverEnable or disable the DHCP server.
asuswrt_dns_configInspect WAN and LAN DNS settings reported by NVRAM.
asuswrt_guest_lan_accessToggle LAN access for a guest Wi-Fi slot.
asuswrt_guest_networksList guest Wi-Fi networks and LAN-access state.
asuswrt_guest_wifiEnable or disable a guest Wi-Fi slot.
asuswrt_healthFetch router identity and basic health data.
asuswrt_identityFetch router model and firmware identity.
asuswrt_interface_statsInspect per-interface RX/TX counters from /proc/net/dev.
asuswrt_ipv6_statusInspect IPv6 service, prefix, and router address details.
asuswrt_kernel_modulesInspect loaded kernel modules reported by lsmod.
asuswrt_lan_detailsInspect LAN interface, addressing, and DHCP presence.
asuswrt_mountsInspect mounted filesystems and mount options.
asuswrt_network_overviewFetch LAN, WAN, and routing overview details.
asuswrt_open_portsInspect listening TCP/UDP sockets reported by netstat.
asuswrt_parental_accessList or manage AsusWRT parental access rules.
asuswrt_parental_block_allToggle parental-control block-all mode.
asuswrt_partitionsInspect block-device partitions reported by the router kernel.
asuswrt_policy_routingInspect policy-routing rules reported by ip rule.
asuswrt_port_forwardingList, enable/disable, add, or remove port forwarding rules.
asuswrt_radioEnable or disable a main Wi-Fi radio band.
asuswrt_restart_serviceRestart an allowlisted AsusWRT service.
asuswrt_route_tableInspect the router IPv4 route table.
asuswrt_samba_statusInspect Samba/SMB status and related processes.
asuswrt_service_processesList key allowlisted router processes and services.
asuswrt_ssh_diagnosticsDiagnose SSH TCP reachability, banner exchange, and authentication.
asuswrt_storage_usageInspect storage/filesystem usage reported by the router.
asuswrt_system_statsFetch router uptime, load, and memory statistics.
asuswrt_time_syncInspect timezone and NTP synchronization settings.
asuswrt_upnpEnable or disable UPnP.
asuswrt_upnp_statusInspect UPnP enablement and housekeeping settings.
asuswrt_usb_overviewInspect USB/storage-related partitions, mounts, and filesystems.
asuswrt_vpn_overviewInspect configured VPN modes and related processes.
asuswrt_vpn_serverEnable or disable the OpenVPN server toggle.
asuswrt_wan_detailsInspect WAN protocol, IP, gateway, DNS, and interface details.
asuswrt_web_adminInspect web admin ports and related web processes.
asuswrt_wireless_overviewInspect wireless radios, SSIDs, and connected band counts.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 152 days ago8/15
- Maintainer identityregistry namespace matches repository owner6/10
How Asuswrt compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 69/100
- higher than 33% of 48,255 servers
- Tools
- 47
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 75% of 28,688 servers
- Downloads a week
- 26
- more than 13% of 12,191 servers with a package
What its tools let an agent do: 47 read
Install Asuswrt in Claude Code, Cursor or VS Code
claude mcp add asuswrt-mcp -- uvx asuswrt-mcp
What the publisher says
From the Asuswrt repository's README, as published. We do not edit it. Read it on GitHub
AsusWRT MCP Server
mcp-name: io.github.teefloo/asuswrt-mcp
Model Context Protocol (MCP) server for secure, controlled administration of AsusWRT and AsusWRT-Merlin routers via SSH.
Overview
This MCP server provides AI assistants (like Claude, Cursor, etc.) with a safe interface to monitor and manage AsusWRT routers. It operates exclusively over SSH using allowlisted operations—no arbitrary command execution, no firmware modifications, and no factory resets.
Features
Read-Only Monitoring (42 tools)
Mutation Tools (with safety guards)
All mutation tools require:
- confirm: true parameter
- ASUSWRTALLOWMUTATIONS=true environment variable
- Support for dry_run: true to preview changes
Safety Model
- No arbitrary SSH: Only allowlisted commands are executed via NVRAM and service calls
- No firmware operations: No flash, reset, or bootloader access
- Secret redaction: Passwords and sensitive data are never exposed in tool responses
- Dry-run support: Every mutation can be previewed before applying
- Confirmation required: Mutations require explicit confirm=True
- SSH-only transport: No exposure of the router's web API
Prerequisites
- Python 3.11+
- An AsusWRT or AsusWRT-Merlin router with SSH access enabled
- Network connectivity from the MCP client to the router
Installation
1. Clone and setup
git clone https://github.com/Teeflo/asuswrt-mcp.git
cd asuswrt-mcp
# Create virtual environment
python -m venv .venv
# Activate (Linux/macOS)
source .venv/bin/activate
# Activate (Windows)
.venv\Scripts\activate
# Install dependencies
pip install -e .2. Configure environment
# Copy example configuration
cp .env.example .env
# Edit with your router credentials
# Use your favorite editor:
notepad .env # Windows
nano .env # Linux/macOS3. Configure .env
# Required: Router connection
ASUSWRT_HOST=192.168.1.1
ASUSWRT_SSH_USERNAME=admin
ASUSWRT_SSH_PASSWORD=your_password
# Optional: SSH key authentication
# ASUSWRT_SSH_KEY_FILE=~/.ssh/id_rsa
# Optional: Enable mutations (disabled by default)Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Asuswrt: common questions
- Is Asuswrt MCP server safe?
- With care: it is graded C, so read the findings first (69/100). Read the Asuswrt safety report
- How do I install Asuswrt?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Asuswrt need an API key?
- Yes. The registry entry asks for
ASUSWRT_SSH_PASSWORD. - Is Asuswrt maintained?
- The last commit was 190 days ago (2026-04-28). The latest release is v0.1.1.
- How does Asuswrt compare with other MCP servers?
- safety score 69/100 (higher than 33% of 48,255 servers); tools 47 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.