Initial pfsense-mcp: REST API v2 based MCP server (72 tools)

src/pfsense_mcp/tools/vpn.py

@@ -0,0 +1,67 @@
+"""VPN status tools: OpenVPN, IPsec, WireGuard (plugin)."""
+
+from __future__ import annotations
+
+import json
+
+from mcp.server.fastmcp import FastMCP
+
+from pfsense_mcp.client import get_client
+
+
+def register(mcp: FastMCP) -> None:
+    @mcp.tool()
+    def pfsense_get_openvpn_status() -> str:
+        """Get OpenVPN server/client status with connected clients."""
+        client = get_client()
+        result = client.get("status/openvpn/servers")
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_list_openvpn_servers(limit: int = 50, offset: int = 0) -> str:
+        """List OpenVPN server configurations."""
+        client = get_client()
+        result = client.get("vpn/openvpn/servers", params={"limit": limit, "offset": offset})
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_list_openvpn_clients(limit: int = 50, offset: int = 0) -> str:
+        """List OpenVPN client configurations."""
+        client = get_client()
+        result = client.get("vpn/openvpn/clients", params={"limit": limit, "offset": offset})
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_get_ipsec_status() -> str:
+        """Get IPsec tunnel status (phase 1/2 SAs)."""
+        client = get_client()
+        result = client.get("status/ipsec/sas")
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_list_ipsec_phase1(limit: int = 50, offset: int = 0) -> str:
+        """List configured IPsec phase 1 entries."""
+        client = get_client()
+        result = client.get("vpn/ipsec/phase1s", params={"limit": limit, "offset": offset})
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_get_wireguard_status() -> str:
+        """Get WireGuard status (requires the WireGuard package to be installed)."""
+        client = get_client()
+        result = client.get("vpn/wireguard/settings")
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_list_wireguard_tunnels(limit: int = 50, offset: int = 0) -> str:
+        """List WireGuard tunnels (requires the WireGuard package)."""
+        client = get_client()
+        result = client.get("vpn/wireguard/tunnels", params={"limit": limit, "offset": offset})
+        return json.dumps(result, indent=2, default=str)
+
+    @mcp.tool()
+    def pfsense_list_wireguard_peers(limit: int = 100, offset: int = 0) -> str:
+        """List WireGuard peers (requires the WireGuard package)."""
+        client = get_client()
+        result = client.get("vpn/wireguard/peers", params={"limit": limit, "offset": offset})
+        return json.dumps(result, indent=2, default=str)