# fortigate-readonly-mcp

Source: https://glimind.com/server/pypi%2Ffortigate-readonly-mcp
Registry id: `pypi/fortigate-readonly-mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "fortigate-readonly-mcp": {
      "command": "uvx",
      "args": [
        "fortigate-readonly-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add fortigate-readonly-mcp -- uvx fortigate-readonly-mcp
```

## Tools (37)

- `fortigate_compare_snapshots`: Compares two snapshots.
- `fortigate_explain_flow`: Explains the path of a flow through the Fortigate.
- `fortigate_export_readonly_snapshot`: Exports a read-only snapshot of the Fortigate state.
- `fortigate_find_policy_by_ip`: Finds firewall policies that match a given IP.
- `fortigate_find_policy_for_flow`: Finds the policy that applies to a given flow (src, dst, port, protocol).
- `fortigate_get_admin_access_surface`: Retrieves administrative access surface (e.g., HTTPS, SSH).
- `fortigate_get_auth_attack_summary`: Summarizes authentication attack attempts (e.g., brute force).
- `fortigate_get_dynamic_routing_status`: Retrieves dynamic routing status.
- `fortigate_get_external_attack_surface`: Detects external attack surface.
- `fortigate_get_firewall_policies`: Retrieves firewall policies.
- `fortigate_get_interface_health`: Retrieves interface health metrics.
- `fortigate_get_interfaces`: Retrieves the network interfaces and their status.
- `fortigate_get_ipsec_vpns`: Retrieves IPsec VPN tunnels and their status.
- `fortigate_get_local_in_policy`: Retrieves local-in policies.
- `fortigate_get_nat_overview`: Provides an overview of NAT configurations.
- `fortigate_get_policy_risk_summary`: Summarizes risk levels of firewall policies.
- `fortigate_get_policy_routes`: Retrieves policy routes.
- `fortigate_get_proxy_policy_overview`: Provides an overview of proxy policies.
- `fortigate_get_public_exposure`: Detects services exposed to the public internet.
- `fortigate_get_recent_errors`: Retrieves recent error logs.
- `fortigate_get_routes`: Retrieves the routing table.
- `fortigate_get_sdwan_status`: Retrieves SD-WAN status.
- `fortigate_get_security_profiles_overview`: Provides an overview of security profiles.
- `fortigate_get_ssl_vpn_lan_connections`: Retrieves SSL-VPN LAN connections.
- `fortigate_get_ssl_vpn_users`: Retrieves currently connected SSL-VPN users.
- `fortigate_get_system_status`: Retrieves the system status of the Fortigate (uptime, CPU, memory, sessions, mode).
- `fortigate_get_traffic_controls`: Retrieves traffic control configurations.
- `fortigate_get_vpn_error_summary`: Summarizes VPN errors.
- `fortigate_get_vpn_overview`: Provides an overview of VPN status.
- `fortigate_list_allowed_commands`: Lists the allowed read-only commands that can be executed on the Fortigate.
- `fortigate_lookup_route_for_ip`: Looks up the route for a given IP address.
- `fortigate_run_audit_readonly`: Runs a read-only audit of the Fortigate configuration.
- `fortigate_run_readonly_command`: Runs a read-only command on the Fortigate, validated against an allowlist.
- `fortigate_search_logs`: Searches logs with filters and returns up to 500 lines.
- `fortigate_search_traffic_logs`: Searches traffic logs with filters.
- `fortigate_sniff_packets`: Captures packets with a mandatory filter, limited to 20 packets.
- `fortigate_trace_session`: Traces sessions matching given filters (src_ip, dst_ip, dst_port, protocol).

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.