Netex Suite
Talk to your network infrastructure in natural language through Claude Code.
Netex Suite is a collection of MCP server plugins that give Claude Code deep visibility into your network -- UniFi access points, OPNsense firewalls, VLANs, VPN tunnels, DNS, DHCP, and more. Ask questions, run diagnostics, and make changes conversationally, with a safety model designed for production networks.
Full Documentation · Getting Started · Report an Issue
Install
/plugin install bluminal/emberai:unifi
/plugin install bluminal/emberai:opnsense
/plugin install bluminal/emberai:netex
Install whichever plugins match your stack. Each works independently. The netex umbrella plugin auto-discovers installed vendor plugins and coordinates operations that span multiple systems.
What You Can Do
Once installed, you can talk to your network the way you'd talk to a senior network engineer. Here are a few examples.
Diagnose a connectivity issue
"The security cameras on VLAN 40 can't reach their NVR. Can you trace the path and check for firewall blocks?"
Claude inspects your UniFi topology, identifies the relevant VLAN interfaces on OPNsense, checks firewall rules for inter-VLAN traffic, and reports exactly where the traffic is being dropped -- with the specific rule that's blocking it.
Audit your firewall posture
"Review all my firewall rules and flag anything that looks too permissive or redundant."
Claude pulls every rule across your OPNsense interfaces, analyzes them for overly broad source/destination ranges, shadowed rules that never match, and missing egress restrictions. You get a prioritized list of findings with recommended fixes.
Provision a new site end-to-end
"Provision the new remote office: create VLANs for corporate, IoT, and guest, set up firewall isolation, configure DHCP scopes, and enable the guest WiFi with client isolation."
Claude builds a change plan covering both your UniFi controller and OPNsense gateway, runs it through the OutageRiskAgent and NetworkSecurityAgent for safety review, then presents the full plan for your approval before touching anything.
Plugins
unifi (v0.1.0)
UniFi network intelligence. Connects to your UniFi gateway's local API or the Cloud Site Manager.
- Topology discovery and device inventory
- Site and device health monitoring
- WiFi channel utilization and RF analysis
- Client search, location, and traffic inspection
- Firmware status across your fleet
- Security audit (firewall rules, ACLs, port forwards, zone-based policies)
- Configuration drift detection with baseline snapshots
- Write operations: create networks, WLANs, port profiles
UniFi Plugin Docs
opnsense (v0.2.0)
OPNsense gateway intelligence. Full coverage of the OPNsense REST API.
- Interface and VLAN management
- Firewall rule analysis and creation
- Static routing and gateway monitoring
- VPN tunnel status (IPsec, WireGuard, OpenVPN)
- DNS management (Unbound) with DNS-over-TLS forwarding
- DHCP configuration and lease audit (dnsmasq and Kea)
- IDS/IPS management (Suricata) with alert triage
- Live diagnostics (ping, traceroute, DNS lookup, packet capture)
- Firmware and plugin management
OPNsense Plugin Docs
netex (v0.3.0)
Cross-vendor orchestration umbrella. Coordinates installed vendor plugins to perform operations that span multiple systems.
- Unified topology map across all vendors
- Cross-vendor health dashboard
- VLAN provisioning that touches both switch and firewall in one operation
- Policy verification and compliance checking
- Security audit across your entire stack
- Post-change policy sync to ensure consistency
- Site provisioning workflows
Netex Plugin Docs
Safety Model
Networks are critical infrastructure. Netex Suite is built around a human-in-the-loop assistant model -- not an autonomous agent. Every write operation goes through a three-step gate:
bluminal