keenetic-mcp: Keenetic router control
keenetic-mcp
MCP server for Keenetic routers: the agent lists devices and Wi-Fi, changes rules through the RCI API and installs nothing on the router
- 29 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The agent receives the router admin password and can block devices, bring interfaces down and create networks
- A careless interface shutdown or segment deletion can cut off your own access to the router
Install
- Works in
Manual install
/plugin marketplace add salatmaster/keenetic-mcp
/plugin install keenetic@keeneticThen run the wizard: npx -y keenetic-mcp init.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent receives the router admin password and can block devices, bring interfaces down and create networks
- A careless interface shutdown or segment deletion can cut off your own access to the router
This is third-party code. Review the repository files before installing.
What it does
The server talks to the router's built-in RCI HTTP interface in KeeneticOS over your local network, so no USB drive, Entware or firmware change is needed. On request the agent shows who is using the channel, the signal of a device, whether the internet is reachable and what the routing table holds. Write tools include update_device (rename, block, assign a routing policy, schedule or priority), set_interface_state, create_segment and delete_segment for a guest or IoT network with Wi-Fi, DHCP and VPN, plus save_config. Changes apply to the running configuration and vanish on reboot until you ask to save. Before the first change in a session the server takes a backup, and each write is read back and compared. The escape-hatch tool rci_call reaches any API path. The plugin carries four skills (keenetic-rci, keenetic-safe-changes, keenetic-segments, keenetic-troubleshoot) that teach the agent the API tree, safe change order, building isolated segments and diagnosing internet and Wi-Fi problems.
Who it is for. For owners and admins of Keenetic routers who want to ask an agent about their home network in plain words instead of using the web interface.
Good fit when
- You need to see which device is pulling the most traffic right now
- You want to block a camera or gadget temporarily and confirm the rule took effect
- You build a guest or IoT network with its own Wi-Fi, DHCP and a VPN route
- You diagnose a lost internet link or weak Wi-Fi: the plugin has an ordered playbook
- You need a configuration backup in a local file before experiments
Not a fit when
- The router is from another vendor: the server works only with RCI in KeeneticOS
- The agent must not change the network: run the server with --read-only and the write tools are not registered at all
- You need remote access from outside: the server only reaches the LAN and has no cloud channel
- You are not ready to give the agent the router admin password
Example request
Show active devices sorted by traffic and block the hallway camera until morningMCP
- Transport
- stdio
- Authentication
- key is optional
Environment variables
KEENETIC_HOST- Router address, overrides wizard settings.
KEENETIC_USER- Router admin login.
KEENETIC_PASSWORDsecret- Admin password, handy for containers; otherwise read from the keychain.
Limitations
Node.js for npx and a router administrator account are required. Verified on a Keenetic Ultra (KN-1811) with KeeneticOS 5.1.3; on other models the toolset adapts to the components present. RCI has no public documentation, so some API paths are described in the docs/rci-api.md notes. The router sometimes accepts wrong commands silently, which is why the server reads back every write. The wizard puts the password in the system keychain, and only the address and login land in the settings file. Plugins pin `keenetic-mcp@^0`, tracking the major version.
How to disable. Remove the server from your client, for example codex mcp remove keenetic or claude mcp remove keenetic, and uninstall the plugin through /plugin. The password sits in the system keychain and can be deleted there by hand.
FAQ
How do I connect a Keenetic router to Claude Code over MCP?
Run /plugin marketplace add salatmaster/keenetic-mcp and /plugin install keenetic@keenetic, then start npx -y keenetic-mcp init in a terminal. The wizard finds the router by the default gateway, checks the password and stores it in the keychain.
Do I need to install anything on the Keenetic router itself?
No. The server uses the built-in RCI interface over the local network; no USB drive, Entware or firmware change is needed.
Are changes on the router saved immediately?
No, they apply to the running configuration and vanish on reboot until save_config is called. The server never calls it itself, and it takes a backup before the first change in a session.
How do I stop the agent from changing Keenetic settings?
Start the server with --read-only. The write tools are then not registered, so the agent never sees them.
What does the keenetic-segments skill in the plugin do?
It teaches the agent to build an isolated network that the router really lists in its web interface. A segment is backed by a VLAN, and without it a guest network carries traffic but never appears in the segment list.
Discussion
No questions or reviews yet.
Related
MCP serversAn MCP server for MikroTik routers: the agent reads and changes RouterOS configuration over SSH on a chat request
A Node.js manager for MCP servers: it starts local servers, connects remote ones and gives a client one address, with a REST API for control
MCP server for Kubernetes: the agent reads cluster state, diagnoses pod failures and runs operations through kubectl
A secure MCP runtime through which an agent operates local machines, servers and containers
An agent runs servers through a catalog of declared actions: policy decides what runs and what waits for a person
An MCP server for Linux diagnostics: an AI client reads services, logs and network on local and remote hosts, read-only
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| keenetic-mcp: Keenetic router control (this entry) | no | key is optional | 29 | |
| MCP SSH Manager | no | API key | 527 | reaches servers over SSH rather than a router through its API |
| ha-mcp | no | API key | 5,333 | controls a smart home in Home Assistant rather than the router network |
README in short
The text covers installation for Claude Code and Codex, universal JSON for other clients and a setup wizard that stores the password in the keychain. Then come tables of read tools, write tools and the rci_call fallback, a safety section and a list of verified models. It also explains how RCI works and where the API notes live.