Administer wg-easy (WireGuard Easy) v15: manage VPN clients, configs, QR codes and server status
Connect Runs on your machine
claude mcp add wg-easy-mcp -e WG_EASY_URL=<WG_EASY_URL> -e WG_EASY_USERNAME=<WG_EASY_USERNAME> -e WG_EASY_PASSWORD=<WG_EASY_PASSWORD> -e WG_EASY_INSECURE_TLS=<WG_EASY_INSECURE_TLS> -e WG_EASY_READ_ONLY=<WG_EASY_READ_ONLY> -e WG_EASY_ALLOW_TOOLS=<WG_EASY_ALLOW_TOOLS> -e WG_EASY_DENY_TOOLS=<WG_EASY_DENY_TOOLS> -- npx -y [email protected]
{
"mcpServers": {
"wg-easy-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"WG_EASY_URL": "<WG_EASY_URL>",
"WG_EASY_USERNAME": "<WG_EASY_USERNAME>",
"WG_EASY_PASSWORD": "<WG_EASY_PASSWORD>",
"WG_EASY_INSECURE_TLS": "<WG_EASY_INSECURE_TLS>",
"WG_EASY_READ_ONLY": "<WG_EASY_READ_ONLY>",
"WG_EASY_ALLOW_TOOLS": "<WG_EASY_ALLOW_TOOLS>",
"WG_EASY_DENY_TOOLS": "<WG_EASY_DENY_TOOLS>"
}
}
}
}
{
"mcpServers": {
"wg-easy-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"WG_EASY_URL": "<WG_EASY_URL>",
"WG_EASY_USERNAME": "<WG_EASY_USERNAME>",
"WG_EASY_PASSWORD": "<WG_EASY_PASSWORD>",
"WG_EASY_INSECURE_TLS": "<WG_EASY_INSECURE_TLS>",
"WG_EASY_READ_ONLY": "<WG_EASY_READ_ONLY>",
"WG_EASY_ALLOW_TOOLS": "<WG_EASY_ALLOW_TOOLS>",
"WG_EASY_DENY_TOOLS": "<WG_EASY_DENY_TOOLS>"
}
}
}
}
{
"servers": {
"wg-easy-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"WG_EASY_URL": "<WG_EASY_URL>",
"WG_EASY_USERNAME": "<WG_EASY_USERNAME>",
"WG_EASY_PASSWORD": "<WG_EASY_PASSWORD>",
"WG_EASY_INSECURE_TLS": "<WG_EASY_INSECURE_TLS>",
"WG_EASY_READ_ONLY": "<WG_EASY_READ_ONLY>",
"WG_EASY_ALLOW_TOOLS": "<WG_EASY_ALLOW_TOOLS>",
"WG_EASY_DENY_TOOLS": "<WG_EASY_DENY_TOOLS>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
WG_EASY_URLRequired | Base URL of the wg-easy web UI, e.g. https://vpn.example.com:51821 |
WG_EASY_USERNAMERequired | Username of a wg-easy admin account (2FA must be disabled) |
WG_EASY_PASSWORDRequired, secret | Password of the wg-easy admin account |
WG_EASY_INSECURE_TLSOptional | Set to true to accept self-signed TLS certificates (scoped to the wg-easy connection) |
WG_EASY_READ_ONLYOptional | Set to true to register only the read tools (default: false) |
WG_EASY_ALLOW_TOOLSOptional | Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools) |
WG_EASY_DENY_TOOLSOptional | Comma-separated tool names or list_* prefixes to remove from whatever WG_EASY_ALLOW_TOOLS left |
Details
| Package | [email protected] (NPM, stdio) |
| Package | ghcr.io/ni-c/wg-easy-mcp:0.6.0 (OCI, stdio) |
| First published | 7 Sep 2026 |
| Last updated | 7 Sep 2026 |
| Registry name | io.github.ni-c/wg-easy-mcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
