OpenWrt MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 10 Oct 2026.
MCP server that runs on an OpenWrt router: deny-by-default policy, audit log, rollback-armed changes
What the code does
We read the source, 1 d ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return resolveExisting(filepath.Join(tgt, rest), depth+1)
key := fs.String("key", "~/.ssh/openwrt_mcp", "private key for the bridge (made if absent)")
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to OpenWrt MCP
same job, measured the same wayMCP server for MikroTik RouterOS: typed tools, dry-run, RBAC, audit logs, and rollback.
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
Check if an MCP server's tool definitions changed after approval, from a signed public log.
Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log.
Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.
Safe-by-default MCP for OpenShift / Kubernetes: projects, pods, logs, deployments, routes.
Check if an MCP server tool changed or hides injection patterns before you trust it.
OpenWrt MCP — questions
Answers built from our own checks of this server.