Fortinet MCP — Claude Code MCP server: what it does, how to install
Connects your AI agent to the Fortinet API. Audits FortiGate devices for outdated firmware, exposed SSL-VPN endpoints, admin logins, and license status.
Open on GitHubWhat Fortinet MCP does
The server reads live device metrics and configuration files directly from FortiGate firewalls. Instead of checking firewalls manually, you can query client hardware status through your assistant in a single prompt.
The installer places fortinet-cli and the fortinet-mcp binary into your environment. Stick strictly to standard input and output (stdio). Running the server in --transport http mode is currently unsafe because this release lacks request size limits and timeouts.
What it helps with
- detect outdated FortiGate firmware across customer firewalls
- identify public SSL-VPN exposure on client networks
- audit administrative accounts across all managed devices
- track expiration dates for active device licenses
Example prompts for the agent
- Check all FortiGate units for outdated firmware releases.
- Audit administrative accounts and SSL-VPN settings on client firewalls.
- List any FortiGate firewalls with licenses expiring soon.
How to install Fortinet MCP
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Fortinet MCP
How to install Fortinet MCP in Claude Code?
Register the source repository by running /plugin marketplace add Servosity/msp-skills, then install the package with /plugin install fortinet@msp-skills.
What does Fortinet MCP do?
It gives AI agents read access to FortiGate firewalls via API to inspect system configs, account lists, and licensing state.
Why should you avoid HTTP transport mode?
The current build lacks request body size boundaries and time constraints, so running --transport http poses security risks. Always use the default stdio transport.
