Tailscale RMCP vs OPNSenseMCP

A side-by-side look at the Tailscale RMCP and OPNSenseMCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

Tailscale RMCP logoTailscale RMCPSecurity · Local subprocess (stdio)Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.44FairAuth: not declaredOPNSenseMCP logoOPNSenseMCPSecurity · Local subprocess (stdio)MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language61GoodAuth: api key required

Verdict: choose Tailscale RMCP for security work as a local process; choose OPNSenseMCP for security as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

Tailscale RMCP logoChoose Tailscale RMCP when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
  • You have the keys it needs: TAILSCALE_API_KEY, TAILSCALE_TAILNET.
Explore Tailscale RMCP

OPNSenseMCP logoChoose OPNSenseMCP when

  • You need dedicated capabilities in the Security domain.
  • You prefer a local stdio subprocess transport.
  • Its auth model fits you: API key required.
  • You have the keys it needs: OPNSENSE_HOST, OPNSENSE_API_KEY, OPNSENSE_API_SECRET, OPNSENSE_VERIFY_SSL.
  • You want tools like firewall_list_rules, firewall_create_rule, firewall_update_rule.
Explore OPNSenseMCP

Feature & specification comparison

Rows where the two servers differ are marked.

SpecTailscale RMCP logoTailscale RMCPOPNSenseMCP logoOPNSenseMCP
CategorySecuritySecurity
Quality signal44/100 · Fair61/100 · Good
Install commandConfirmedConfirmed
TransportLocal subprocess (stdio)Local subprocess (stdio)
AuthNot declaredAPI key required
PricingNot declaredFree
Required env varsTAILSCALE_API_KEYTAILSCALE_TAILNETOPNSENSE_HOSTOPNSENSE_API_KEYOPNSENSE_API_SECRETOPNSENSE_VERIFY_SSL
Verified ownerCommunity listingCommunity listing
GitHub stars592
Directory activity 1 views 0 installs 0 upvotes 6 views 0 installs 0 upvotes
ToolsNot listed18

Tools & capabilities

Tailscale RMCP tools

No tool names declared yet. Check the project README from the listing page.

OPNSenseMCP tools 18

  • firewall_list_rulesList all firewall rules
  • firewall_create_ruleCreate a new rule
  • firewall_update_ruleUpdate existing rule
  • firewall_delete_ruleDelete a rule
  • firewall_apply_changesApply pending changes
  • nat_list_outboundList outbound NAT rules
  • nat_set_modeSet NAT mode
  • nat_create_outbound_ruleCreate NAT rule
  • nat_fix_dmzFix DMZ NAT issues
  • nat_analyze_configAnalyze NAT configuration
  • arp_listList ARP table entries
  • routing_diagnosticsDiagnose routing issues
  • +6 more on the listing page

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

Tailscale RMCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "tailscale-rmcp-2": {
      "command": "npx",
      "args": [
        "-y",
        "@dinglebear/rtailscale"
      ],
      "env": {
        "TAILSCALE_API_KEY": "YOUR_TAILSCALE_API_KEY_HERE",
        "TAILSCALE_TAILNET": "YOUR_TAILSCALE_TAILNET_HERE"
      }
    }
  }
}

OPNSenseMCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "vespo92-opnsensemcp": {
      "command": "npx",
      "args": [
        "-y",
        "opnsense-mcp-server"
      ],
      "env": {
        "OPNSENSE_HOST": "YOUR_OPNSENSE_HOST_HERE",
        "OPNSENSE_API_KEY": "YOUR_OPNSENSE_API_KEY_HERE",
        "OPNSENSE_API_SECRET": "YOUR_OPNSENSE_API_SECRET_HERE",
        "OPNSENSE_VERIFY_SSL": "YOUR_OPNSENSE_VERIFY_SSL_HERE"
      }
    }
  }
}

Frequently asked questions

Tailscale RMCP is categorized under Security and uses a local stdio subprocess. OPNSenseMCP belongs to Security and uses a local stdio subprocess. Pick Tailscale RMCP for security work and OPNSenseMCP for security.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

Tailscale RMCP has no declared pricing — check the project's own site. OPNSenseMCP is listed as free. Auth: api key required. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add tailscale-rmcp-2 and vespo92-opnsensemcp as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, Tailscale RMCP has a quality signal of 44/100 (Fair) with 1 views, 0 installs and 5 GitHub stars. OPNSenseMCP has 61/100 (Good) with 6 views, 0 installs and 92 GitHub stars.