wg-easy-mcpYour WireGuard VPN, spoken to

An MCP server for wg-easy v15: list, create and revoke VPN clients, pull configs and QR codes, and read server status — from Claude, Codex or any MCP client.

Get started

Tools reference

GitHub

Eleven tools, one API
Full client lifecycle over the wg-easy v15 REST API — including .conf files, QR codes and one-time download links — with partial updates that merge into the current client state instead of overwriting it.
Runs anywhere stdio does
A single npx command, a Claude Desktop JSON block, a Codex TOML entry or a multi-arch container image with an SBOM and build provenance.
Safe by default
Deleting a client needs a server-issued confirmation token, admin secrets are redacted, upstream content is marked untrusted, and relaxed TLS is scoped to one connection instead of the whole process.

The server holds no state beyond short-lived delete confirmation tokens; wg-easy remains the source of truth.

wg-easy-mcpYour WireGuard VPN, spoken to

Eleven tools, one API

Runs anywhere stdio does

Safe by default