wg-easy MCP server
Administer wg-easy (WireGuard Easy) v15: manage VPN clients, configs, QR codes and server status
0 stars92 downloads/wk
Reviews
Write oneNobody has reviewed wg-easy yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
wg-easy tools (11, 3 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
create_clientwrite actionCreate a new WireGuard client. Keys and IP addresses are generated by wg-easy. Returns the new client ID. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.
delete_clientwrite actionPermanently delete a WireGuard client. This is irreversible: the client loses VPN access and its keys cannot be restored. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.
disable_clientDisable a WireGuard client. The client keeps its configuration but can no longer connect.
enable_clientEnable a WireGuard client so it can connect again. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.
generate_one_time_linkGenerate a one-time download link for a client configuration that can
get_clientGet the full details of a single WireGuard client.
get_client_configGet the WireGuard configuration file (wg .conf format) for a client. SENSITIVE: the output contains the client private key — treat it as a secret and do not repeat it unnecessarily.
get_client_qrcodeGet the client configuration as a QR code (SVG markup) for scanning with the WireGuard mobile app. SENSITIVE: the QR code encodes the client private key — treat it as a secret.
get_server_infoGet information about the wg-easy instance: release/update status, general settings and the WireGuard interface configuration. Secret fields (private keys, passwords) are redacted.
list_clientsList all WireGuard clients of the wg-easy instance, including their status (enabled/expired), addresses and traffic statistics.
update_clientwrite actionUpdate a WireGuard client. Only the provided fields are changed; all other settings are preserved. Asks a person first; where the client cannot show a dialog, call once to receive a token and again with it.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan25 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 4 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Install directly
Runs npx -y wg-easy-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add wg-easy-mcp -- npx -y wg-easy-mcp
wg-easy: common questions
- Is wg-easy MCP server safe?
- Mostly: it is graded B (83/100). Read the wg-easy safety report
- How do I install wg-easy?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does wg-easy need an API key?
- Yes. The registry entry asks for
WG_EASY_PASSWORD. - Is wg-easy maintained?
- The last commit was 4 days ago (2026-09-16). The latest release is v0.6.0.