Home › Cloud & Monitoring › wg-easy

wg-easy

Administer wg-easy (WireGuard Easy) v15: manage VPN clients, configs, QR codes and server status

TypeScript Local macOSWindowsLinux

★ 0 stars Last pushed 2026-09-22 License: MIT

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.6.0)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "wg-easy-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "WG_EASY_URL": "<YOUR_VALUE>",
        "WG_EASY_USERNAME": "<YOUR_VALUE>",
        "WG_EASY_PASSWORD": "<YOUR_VALUE>",
        "WG_EASY_INSECURE_TLS": "<YOUR_VALUE>",
        "WG_EASY_READ_ONLY": "<YOUR_VALUE>",
        "WG_EASY_ALLOW_TOOLS": "<YOUR_VALUE>",
        "WG_EASY_DENY_TOOLS": "<YOUR_VALUE>"
      }
    }
  }
}

WG_EASY_URL required — Base URL of the wg-easy web UI, e.g. https://vpn.example.com:51821
WG_EASY_USERNAME required — Username of a wg-easy admin account (2FA must be disabled)
WG_EASY_PASSWORD required secret — Password of the wg-easy admin account
WG_EASY_INSECURE_TLS — Set to true to accept self-signed TLS certificates (scoped to the wg-easy connection)
WG_EASY_READ_ONLY — Set to true to register only the read tools (default: false)
WG_EASY_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
WG_EASY_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever WG_EASY_ALLOW_TOOLS left

Package (oci)

docker run -i --rm ghcr.io/ni-c/wg-easy-mcp:0.6.0

Or add to your MCP client config:

{
  "mcpServers": {
    "wg-easy-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ni-c/wg-easy-mcp:0.6.0"
      ],
      "env": {
        "WG_EASY_URL": "<YOUR_VALUE>",
        "WG_EASY_USERNAME": "<YOUR_VALUE>",
        "WG_EASY_PASSWORD": "<YOUR_VALUE>",
        "WG_EASY_INSECURE_TLS": "<YOUR_VALUE>",
        "WG_EASY_READ_ONLY": "<YOUR_VALUE>",
        "WG_EASY_ALLOW_TOOLS": "<YOUR_VALUE>",
        "WG_EASY_DENY_TOOLS": "<YOUR_VALUE>"
      }
    }
  }
}

WG_EASY_URL required — Base URL of the wg-easy web UI, e.g. https://vpn.example.com:51821
WG_EASY_USERNAME required — Username of a wg-easy admin account (2FA must be disabled)
WG_EASY_PASSWORD required secret — Password of the wg-easy admin account
WG_EASY_INSECURE_TLS — Set to true to accept self-signed TLS certificates (scoped to the wg-easy connection)
WG_EASY_READ_ONLY — Set to true to register only the read tools (default: false)
WG_EASY_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
WG_EASY_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever WG_EASY_ALLOW_TOOLS left