fortinet-mcp-server

A complete Model Context Protocol (MCP) server for Fortinet FortiOS 7.6.6, exposing the entire REST API (1536 endpoints) as typed MCP tools usable from Claude Desktop, Cursor, or any MCP-compatible client.

• 150+ specific typed tools organized by functional area
• 5 generic pass-through tools that cover all 1536 FortiOS API endpoints
• Async HTTP client with Bearer-token authentication
• Full support for CMDB, Monitor, Log, and Service API sections
• Safe against self-signed certificates (configurable)
• Compatible with multi-VDOM environments

| Module | Tools | Description | |--------|-------|-------------| | Generic | 5 | cmdb_list/get/create/update/delete, monitor_get/action, log_get, service_call — cover ALL endpoints | | System | 27 | Interfaces, DNS, NTP, admins, DHCP, SNMP, certificates, VDOMs, syslog | | Firewall | 32 | Policies (IPv4/IPv6), addresses, address groups, services, VIPs, IP pools, schedules, sessions | | VPN | 22 | IPsec Phase 1/2, SSL VPN portals/settings, tunnel up/down, VPN certificates | | Router | 17 | Static routes, OSPF, BGP, RIP, prefix lists, route maps, SD-WAN health | | User | 18 | Local users, groups, RADIUS, LDAP, TACACS+, SAML, authenticated sessions | | Monitor | 18 | ARP, FortiView top talkers, endpoint control, IPS stats, switch controller, config backup | | Log | 18 | Traffic, event, VPN, user, virus, webfilter, IPS, app-ctrl, DNS logs + log config | | Security | 29 | IPS, AV, webfilter, app control, DLP, email filter, DNS filter, WAF, ICAP, ssh-filter, ZTNA | | Wireless | 18 | AP profiles, WTPs, SSIDs (VAPs), Hotspot 2.0, connected clients, rogue APs |

Total: 204+ tools

• Python 3.11+
• uv package manager (or pip)
• Fortinet FortiGate with FortiOS 7.6.x
• A REST API admin account on the FortiGate

1. Go to **System > Administrators*