Connectors · MSP & PSA
SonicWall SonicOS MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SonicWall SonicOS and the rest of your systems. It gives your agent 349 SonicWall SonicOS actions (111 reads, 193 writes and 45 that wait for a confirmation) and holds the SonicWall SonicOS credential itself, so the agent never does. It paces SonicWall SonicOS's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "sonicwall_sonicos.access_rules_ipv4.list", intent: "check which SonicWall SonicOS account is connected"}# List IPv4 access rules · read · 1 upstream call- 349actionsin one signed file
- 111readlook, never change
- 193writecreate and update
- 45wait for a yesdestructive, confirmed first
Set up
Connect SonicWall SonicOS in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect SonicWall SonicOS.
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
usernameSonicOS administrator username (e.g. admin, or a dedicated full or read-only admin)passwordThat administrator's passwordhostWhere your SonicWall SonicOS lives: your host
account { op: "connections.requirements", service: "sonicwall_sonicos" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "sonicwall_sonicos.access_rules_ipv4.list" }# list ipv4 access rules · read · 1 upstream callcheck { action: "sonicwall_sonicos.zones.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
SonicWall SonicOS at a glance
- Sign-in
- Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
usernamepassword- Setup fields
host- Limits we pace to
- 120 calls a minute, per connection
- API covered
- SonicOS API (/api/sonicos), SonicOS 7.x, at your SonicWall SonicOS instance's API base URL, which you enter when connecting
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 111 of 111 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 2, so ask can line SonicWall SonicOS up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in SonicWall SonicOS.
349 actions in 71 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 111readlook, never change
- 193writecreate and update
- 45destructivewait for a confirmation
Local users
123 read · 6 write · 3 destructive
List local users · Create local users · Get local user by name · Get local user by uuid
Address groups ipv4
113 read · 6 write · 2 destructive
Create IPv4 address groups · List IPv4 address groups · Get IPv4 address group by name · Get IPv4 address group by uuid
Address groups ipv6
113 read · 6 write · 2 destructive
Create IPv6 address groups · List IPv6 address groups · Get IPv6 address group by name · Get IPv6 address group by uuid
Address objects FQDN
113 read · 6 write · 2 destructive
Create FQDN address objects · List FQDN address objects · Get FQDN address object by name · Get FQDN address object by uuid
Address objects ipv4
113 read · 6 write · 2 destructive
Create IPv4 address objects · List IPv4 address objects · Get IPv4 address object by name · Get IPv4 address object by uuid
Address objects ipv6
113 read · 6 write · 2 destructive
Create IPv6 address objects · List IPv6 address objects · Get IPv6 address object by name · Get IPv6 address object by uuid
Address objects mac
113 read · 6 write · 2 destructive
Create MAC address objects · List MAC address objects · Get MAC address object by name · Get MAC address object by uuid
Local groups
113 read · 6 write · 2 destructive
List local user groups · Create local user groups · Get local user group by name · Get local user group by uuid
63 more areas · 260 actions
- Schedules 11
- Service groups 11
- Service objects 11
- Zones 11
- Access rules ipv4 7
- Access rules ipv6 7
- Content filter profiles 7
- Content filter uri lists 7
- Dynamic DNS profiles ipv4 7
- Dynamic DNS profiles ipv6 7
- Interfaces ipv4 7
- Ldap servers 7
- Nat policies ipv4 7
- Nat policies ipv6 7
- Route policies ipv4 7
- Route policies ipv6 7
- VPN site to site ipv4 7
- VPN site to site ipv6 7
- VPN tunnel interfaces ipv4 7
- Interfaces ipv6 6
- Cloud secure edge 4
- Switches 4
- Clearpass servers 3
- Dynamic external objects 3
- NTP servers 3
- Radius accounting servers 3
- Radius servers 3
- Session 3
- SNMP users 3
- Sonicpoint profiles 3
- Sonicpoint vap objects 3
- Sonicpoint vap profiles 3
- SSO agents 3
- SSO radius accounting clients 3
- SSO terminal services agents 3
- SSO third party API clients 3
- Switch users 3
- Tacacs accounting servers 3
- Tacacs servers 3
- Wireless vap objects 3
- Wireless vap profiles 3
- Administration 2
- Botnet 2
- Clearpass 2
- Config 2
- FTP 2
- Log automation 2
- Log aws 2
- Packet monitor 2
- Reporting 2
- Security services 2
- SFR mailing 2
- Sonicos API settings 2
- Sonicpoints 2
- SSL VPN server 2
- Switch radius 2
- System 2
- VPN group VPN ipv4 2
- Wireless radio 2
- Cli 1
- Firmware 1
- Routing 1
- VPN policies 1
Top actions
The SonicWall SonicOS API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 4 of SonicWall SonicOS's 4 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
sonicwall_sonicos.access_rules_ipv4.listList IPv4 access rules | List every IPv4 access rule configured on the firewall. | read | security.policy.list36 connectors |
sonicwall_sonicos.local_users.listList local users | List every local user configured on the firewall. | read | identity.user.list474 connectors |
sonicwall_sonicos.local_groups.listList local user groups | List every local user group configured on the firewall. | read | identity.group.list262 connectors |
sonicwall_sonicos.interfaces_ipv4.listList IPv4 interfaces | List every IPv4 interface configured on the firewall. | read | security.network.list15 connectors |
sonicwall_sonicos.zones.listList zones | List every zone configured on the firewall. | read | this connector |
sonicwall_sonicos.zones.createCreate zones | Add one or more zones to the pending configuration. | write | this connector |
sonicwall_sonicos.session.loginLog in (start an API session) | Authenticate with the connection's admin credentials and start a SonicOS API management session from the caller's IP. `override: true` pre-empts any other… | write | this connector |
sonicwall_sonicos.switches.listList managed switchs | List every managed switch configured on the firewall. | read | this connector |
sonicwall_sonicos.schedules.listList schedules | List every schedule configured on the firewall. | read | this connector |
sonicwall_sonicos.snmp_users.listList SNMPv3 users | List every SNMPv3 user configured on the firewall. | read | this connector |
sonicwall_sonicos.switches.createCreate managed switchs | Add one or more managed switchs to the pending configuration. | write | this connector |
sonicwall_sonicos.cli.executeRun SonicOS CLI commands | Send SonicOS CLI commands, one per line, through the API and return the device's JSON status. | destructive | this connector |
Try it
Prompts to paste into Claude.
Each one names the SonicWall SonicOS actions it will call, so you know what it reads and what it changes before you send it.
- Readread
List IPv4 access rules in SonicWall SonicOS and tell me what stands out.
calls
sonicwall_sonicos.access_rules_ipv4.list - Writewrite
Create zones in SonicWall SonicOS. Show me exactly what you will send before you save it.
calls
sonicwall_sonicos.zones.create
Governance for SonicWall SonicOS
Destructive actions wait for a yes.
45 SonicWall SonicOS actions are destructive. The first 10:
- Run SonicOS CLI commands
sonicwall_sonicos.cli.execute - Log out (end the API session)
sonicwall_sonicos.session.logout - Restart the firewall
sonicwall_sonicos.system.restart - Delete zone by name
sonicwall_sonicos.zones.delete_by_name - Delete zone by uuid
sonicwall_sonicos.zones.delete_by_uuid - Boot uploaded firmware
sonicwall_sonicos.firmware.boot_uploaded - Delete schedule by name
sonicwall_sonicos.schedules.delete_by_name - Delete schedule by uuid
sonicwall_sonicos.schedules.delete_by_uuid - Delete local user by name
sonicwall_sonicos.local_users.delete_by_name - Delete local user by uuid
sonicwall_sonicos.local_users.delete_by_uuid
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete zone by name?
intent: the user asked me to delete zone by name
account { op: "keys.create", name: "sonicwall-sonicos-agent", allowed_actions: ["sonicwall_sonicos.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "sonicwall_sonicos.cli.execute", approver: "[email protected]" }, { match: "sonicwall_sonicos.session.logout", approver: "[email protected]" }, { match: "sonicwall_sonicos.system.restart", approver: "[email protected]" } ]}Cost
What SonicWall SonicOS costs on actionlake.
Every SonicWall SonicOS action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 349 SonicWall SonicOS actions
- 349actions pageeach page of a long list is one call
- 111reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every SonicWall SonicOS action.
349 actions by area: the id your agent calls, what it does, and its effect.
Local users12
sonicwall_sonicos.local_users.createCreate local userswritesonicwall_sonicos.local_users.get_by_nameGet local user by namereadsonicwall_sonicos.local_users.get_by_uuidGet local user by uuidreadsonicwall_sonicos.local_users.listList local usersreadsonicwall_sonicos.local_users.delete_by_nameDelete local user by namedestructivesonicwall_sonicos.local_users.delete_by_uuidDelete local user by uuiddestructive- and 6 more in this area
Address groups ipv411
sonicwall_sonicos.address_groups_ipv4.createCreate IPv4 address groupswritesonicwall_sonicos.address_groups_ipv4.get_by_nameGet IPv4 address group by namereadsonicwall_sonicos.address_groups_ipv4.get_by_uuidGet IPv4 address group by uuidreadsonicwall_sonicos.address_groups_ipv4.listList IPv4 address groupsreadsonicwall_sonicos.address_groups_ipv4.delete_by_nameDelete IPv4 address group by namedestructivesonicwall_sonicos.address_groups_ipv4.delete_by_uuidDelete IPv4 address group by uuiddestructive- and 5 more in this area
Address groups ipv611
sonicwall_sonicos.address_groups_ipv6.createCreate IPv6 address groupswritesonicwall_sonicos.address_groups_ipv6.get_by_nameGet IPv6 address group by namereadsonicwall_sonicos.address_groups_ipv6.get_by_uuidGet IPv6 address group by uuidreadsonicwall_sonicos.address_groups_ipv6.listList IPv6 address groupsreadsonicwall_sonicos.address_groups_ipv6.delete_by_nameDelete IPv6 address group by namedestructivesonicwall_sonicos.address_groups_ipv6.delete_by_uuidDelete IPv6 address group by uuiddestructive- and 5 more in this area
Address objects FQDN11
sonicwall_sonicos.address_objects_fqdn.createCreate FQDN address objectswritesonicwall_sonicos.address_objects_fqdn.get_by_nameGet FQDN address object by namereadsonicwall_sonicos.address_objects_fqdn.get_by_uuidGet FQDN address object by uuidreadsonicwall_sonicos.address_objects_fqdn.listList FQDN address objectsreadsonicwall_sonicos.address_objects_fqdn.delete_by_nameDelete FQDN address object by namedestructivesonicwall_sonicos.address_objects_fqdn.delete_by_uuidDelete FQDN address object by uuiddestructive- and 5 more in this area
Address objects ipv411
sonicwall_sonicos.address_objects_ipv4.createCreate IPv4 address objectswritesonicwall_sonicos.address_objects_ipv4.get_by_nameGet IPv4 address object by namereadsonicwall_sonicos.address_objects_ipv4.get_by_uuidGet IPv4 address object by uuidreadsonicwall_sonicos.address_objects_ipv4.listList IPv4 address objectsreadsonicwall_sonicos.address_objects_ipv4.delete_by_nameDelete IPv4 address object by namedestructivesonicwall_sonicos.address_objects_ipv4.delete_by_uuidDelete IPv4 address object by uuiddestructive- and 5 more in this area
Address objects ipv611
sonicwall_sonicos.address_objects_ipv6.createCreate IPv6 address objectswritesonicwall_sonicos.address_objects_ipv6.get_by_nameGet IPv6 address object by namereadsonicwall_sonicos.address_objects_ipv6.get_by_uuidGet IPv6 address object by uuidreadsonicwall_sonicos.address_objects_ipv6.listList IPv6 address objectsreadsonicwall_sonicos.address_objects_ipv6.delete_by_nameDelete IPv6 address object by namedestructivesonicwall_sonicos.address_objects_ipv6.delete_by_uuidDelete IPv6 address object by uuiddestructive- and 5 more in this area
Address objects mac11
sonicwall_sonicos.address_objects_mac.createCreate MAC address objectswritesonicwall_sonicos.address_objects_mac.get_by_nameGet MAC address object by namereadsonicwall_sonicos.address_objects_mac.get_by_uuidGet MAC address object by uuidreadsonicwall_sonicos.address_objects_mac.listList MAC address objectsreadsonicwall_sonicos.address_objects_mac.delete_by_nameDelete MAC address object by namedestructivesonicwall_sonicos.address_objects_mac.delete_by_uuidDelete MAC address object by uuiddestructive- and 5 more in this area
Local groups11
sonicwall_sonicos.local_groups.createCreate local user groupswritesonicwall_sonicos.local_groups.get_by_nameGet local user group by namereadsonicwall_sonicos.local_groups.get_by_uuidGet local user group by uuidreadsonicwall_sonicos.local_groups.listList local user groupsreadsonicwall_sonicos.local_groups.delete_by_nameDelete local user group by namedestructivesonicwall_sonicos.local_groups.delete_by_uuidDelete local user group by uuiddestructive- and 5 more in this area
Schedules11
sonicwall_sonicos.schedules.createCreate scheduleswritesonicwall_sonicos.schedules.get_by_nameGet schedule by namereadsonicwall_sonicos.schedules.get_by_uuidGet schedule by uuidreadsonicwall_sonicos.schedules.listList schedulesreadsonicwall_sonicos.schedules.delete_by_nameDelete schedule by namedestructivesonicwall_sonicos.schedules.delete_by_uuidDelete schedule by uuiddestructive- and 5 more in this area
Service groups11
sonicwall_sonicos.service_groups.createCreate service groupswritesonicwall_sonicos.service_groups.get_by_nameGet service group by namereadsonicwall_sonicos.service_groups.get_by_uuidGet service group by uuidreadsonicwall_sonicos.service_groups.listList service groupsreadsonicwall_sonicos.service_groups.delete_by_nameDelete service group by namedestructivesonicwall_sonicos.service_groups.delete_by_uuidDelete service group by uuiddestructive- and 5 more in this area
Service objects11
sonicwall_sonicos.service_objects.createCreate service objectswritesonicwall_sonicos.service_objects.get_by_nameGet service object by namereadsonicwall_sonicos.service_objects.get_by_uuidGet service object by uuidreadsonicwall_sonicos.service_objects.listList service objectsreadsonicwall_sonicos.service_objects.delete_by_nameDelete service object by namedestructivesonicwall_sonicos.service_objects.delete_by_uuidDelete service object by uuiddestructive- and 5 more in this area
Zones11
sonicwall_sonicos.zones.createCreate zoneswritesonicwall_sonicos.zones.get_by_nameGet zone by namereadsonicwall_sonicos.zones.get_by_uuidGet zone by uuidreadsonicwall_sonicos.zones.listList zonesreadsonicwall_sonicos.zones.delete_by_nameDelete zone by namedestructivesonicwall_sonicos.zones.delete_by_uuidDelete zone by uuiddestructive- and 5 more in this area
Access rules ipv47
sonicwall_sonicos.access_rules_ipv4.createCreate IPv4 access ruleswritesonicwall_sonicos.access_rules_ipv4.get_by_uuidGet IPv4 access rule by uuidreadsonicwall_sonicos.access_rules_ipv4.listList IPv4 access rulesreadsonicwall_sonicos.access_rules_ipv4.updateUpdate IPv4 access ruleswritesonicwall_sonicos.access_rules_ipv4.delete_by_uuidDelete IPv4 access rule by uuiddestructivesonicwall_sonicos.access_rules_ipv4.patch_by_uuidPatch IPv4 access rule by uuidwrite- and 1 more in this area
Access rules ipv67
sonicwall_sonicos.access_rules_ipv6.createCreate IPv6 access ruleswritesonicwall_sonicos.access_rules_ipv6.get_by_uuidGet IPv6 access rule by uuidreadsonicwall_sonicos.access_rules_ipv6.listList IPv6 access rulesreadsonicwall_sonicos.access_rules_ipv6.updateUpdate IPv6 access ruleswritesonicwall_sonicos.access_rules_ipv6.delete_by_uuidDelete IPv6 access rule by uuiddestructivesonicwall_sonicos.access_rules_ipv6.patch_by_uuidPatch IPv6 access rule by uuidwrite- and 1 more in this area
Content filter profiles7
sonicwall_sonicos.content_filter_profiles.createCreate content filter profileswritesonicwall_sonicos.content_filter_profiles.get_by_nameGet content filter profile by namereadsonicwall_sonicos.content_filter_profiles.listList content filter profilesreadsonicwall_sonicos.content_filter_profiles.updateUpdate content filter profileswritesonicwall_sonicos.content_filter_profiles.delete_by_nameDelete content filter profile by namedestructivesonicwall_sonicos.content_filter_profiles.patch_by_namePatch content filter profile by namewrite- and 1 more in this area
Content filter uri lists7
sonicwall_sonicos.content_filter_uri_lists.createCreate content filter URI list objectswritesonicwall_sonicos.content_filter_uri_lists.get_by_nameGet content filter URI list object by namereadsonicwall_sonicos.content_filter_uri_lists.listList content filter URI list objectsreadsonicwall_sonicos.content_filter_uri_lists.updateUpdate content filter URI list objectswritesonicwall_sonicos.content_filter_uri_lists.delete_by_nameDelete content filter URI list object by namedestructivesonicwall_sonicos.content_filter_uri_lists.patch_by_namePatch content filter URI list object by namewrite- and 1 more in this area
Dynamic DNS profiles ipv47
sonicwall_sonicos.dynamic_dns_profiles_ipv4.createCreate IPv4 dynamic DNS profileswritesonicwall_sonicos.dynamic_dns_profiles_ipv4.get_by_nameGet IPv4 dynamic DNS profile by namereadsonicwall_sonicos.dynamic_dns_profiles_ipv4.listList IPv4 dynamic DNS profilesreadsonicwall_sonicos.dynamic_dns_profiles_ipv4.updateUpdate IPv4 dynamic DNS profileswritesonicwall_sonicos.dynamic_dns_profiles_ipv4.delete_by_nameDelete IPv4 dynamic DNS profile by namedestructivesonicwall_sonicos.dynamic_dns_profiles_ipv4.patch_by_namePatch IPv4 dynamic DNS profile by namewrite- and 1 more in this area
Dynamic DNS profiles ipv67
sonicwall_sonicos.dynamic_dns_profiles_ipv6.createCreate IPv6 dynamic DNS profileswritesonicwall_sonicos.dynamic_dns_profiles_ipv6.get_by_nameGet IPv6 dynamic DNS profile by namereadsonicwall_sonicos.dynamic_dns_profiles_ipv6.listList IPv6 dynamic DNS profilesreadsonicwall_sonicos.dynamic_dns_profiles_ipv6.updateUpdate IPv6 dynamic DNS profileswritesonicwall_sonicos.dynamic_dns_profiles_ipv6.delete_by_nameDelete IPv6 dynamic DNS profile by namedestructivesonicwall_sonicos.dynamic_dns_profiles_ipv6.patch_by_namePatch IPv6 dynamic DNS profile by namewrite- and 1 more in this area
Interfaces ipv47
sonicwall_sonicos.interfaces_ipv4.createCreate IPv4 interfaceswritesonicwall_sonicos.interfaces_ipv4.get_by_nameGet IPv4 interface by namereadsonicwall_sonicos.interfaces_ipv4.listList IPv4 interfacesreadsonicwall_sonicos.interfaces_ipv4.updateUpdate IPv4 interfaceswritesonicwall_sonicos.interfaces_ipv4.delete_by_nameDelete IPv4 interface by namedestructivesonicwall_sonicos.interfaces_ipv4.patch_by_namePatch IPv4 interface by namewrite- and 1 more in this area
Ldap servers7
sonicwall_sonicos.ldap_servers.createCreate LDAP serverswritesonicwall_sonicos.ldap_servers.get_by_nameGet LDAP server by namereadsonicwall_sonicos.ldap_servers.listList LDAP serversreadsonicwall_sonicos.ldap_servers.updateUpdate LDAP serverswritesonicwall_sonicos.ldap_servers.delete_by_nameDelete LDAP server by namedestructivesonicwall_sonicos.ldap_servers.patch_by_namePatch LDAP server by namewrite- and 1 more in this area
Nat policies ipv47
sonicwall_sonicos.nat_policies_ipv4.createCreate IPv4 NAT policyswritesonicwall_sonicos.nat_policies_ipv4.get_by_uuidGet IPv4 NAT policy by uuidreadsonicwall_sonicos.nat_policies_ipv4.listList IPv4 NAT policysreadsonicwall_sonicos.nat_policies_ipv4.updateUpdate IPv4 NAT policyswritesonicwall_sonicos.nat_policies_ipv4.delete_by_uuidDelete IPv4 NAT policy by uuiddestructivesonicwall_sonicos.nat_policies_ipv4.patch_by_uuidPatch IPv4 NAT policy by uuidwrite- and 1 more in this area
Nat policies ipv67
sonicwall_sonicos.nat_policies_ipv6.createCreate IPv6 NAT policyswritesonicwall_sonicos.nat_policies_ipv6.get_by_uuidGet IPv6 NAT policy by uuidreadsonicwall_sonicos.nat_policies_ipv6.listList IPv6 NAT policysreadsonicwall_sonicos.nat_policies_ipv6.updateUpdate IPv6 NAT policyswritesonicwall_sonicos.nat_policies_ipv6.delete_by_uuidDelete IPv6 NAT policy by uuiddestructivesonicwall_sonicos.nat_policies_ipv6.patch_by_uuidPatch IPv6 NAT policy by uuidwrite- and 1 more in this area
Route policies ipv47
sonicwall_sonicos.route_policies_ipv4.createCreate IPv4 route policyswritesonicwall_sonicos.route_policies_ipv4.get_by_uuidGet IPv4 route policy by uuidreadsonicwall_sonicos.route_policies_ipv4.listList IPv4 route policysreadsonicwall_sonicos.route_policies_ipv4.updateUpdate IPv4 route policyswritesonicwall_sonicos.route_policies_ipv4.delete_by_uuidDelete IPv4 route policy by uuiddestructivesonicwall_sonicos.route_policies_ipv4.patch_by_uuidPatch IPv4 route policy by uuidwrite- and 1 more in this area
Route policies ipv67
sonicwall_sonicos.route_policies_ipv6.createCreate IPv6 route policyswritesonicwall_sonicos.route_policies_ipv6.get_by_uuidGet IPv6 route policy by uuidreadsonicwall_sonicos.route_policies_ipv6.listList IPv6 route policysreadsonicwall_sonicos.route_policies_ipv6.updateUpdate IPv6 route policyswritesonicwall_sonicos.route_policies_ipv6.delete_by_uuidDelete IPv6 route policy by uuiddestructivesonicwall_sonicos.route_policies_ipv6.patch_by_uuidPatch IPv6 route policy by uuidwrite- and 1 more in this area
VPN site to site ipv47
sonicwall_sonicos.vpn_site_to_site_ipv4.createCreate IPv4 site-to-site VPN policyswritesonicwall_sonicos.vpn_site_to_site_ipv4.get_by_nameGet IPv4 site-to-site VPN policy by namereadsonicwall_sonicos.vpn_site_to_site_ipv4.listList IPv4 site-to-site VPN policysreadsonicwall_sonicos.vpn_site_to_site_ipv4.updateUpdate IPv4 site-to-site VPN policyswritesonicwall_sonicos.vpn_site_to_site_ipv4.delete_by_nameDelete IPv4 site-to-site VPN policy by namedestructivesonicwall_sonicos.vpn_site_to_site_ipv4.patch_by_namePatch IPv4 site-to-site VPN policy by namewrite- and 1 more in this area
VPN site to site ipv67
sonicwall_sonicos.vpn_site_to_site_ipv6.createCreate IPv6 site-to-site VPN policyswritesonicwall_sonicos.vpn_site_to_site_ipv6.get_by_nameGet IPv6 site-to-site VPN policy by namereadsonicwall_sonicos.vpn_site_to_site_ipv6.listList IPv6 site-to-site VPN policysreadsonicwall_sonicos.vpn_site_to_site_ipv6.updateUpdate IPv6 site-to-site VPN policyswritesonicwall_sonicos.vpn_site_to_site_ipv6.delete_by_nameDelete IPv6 site-to-site VPN policy by namedestructivesonicwall_sonicos.vpn_site_to_site_ipv6.patch_by_namePatch IPv6 site-to-site VPN policy by namewrite- and 1 more in this area
VPN tunnel interfaces ipv47
sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.createCreate IPv4 tunnel-interface VPN policyswritesonicwall_sonicos.vpn_tunnel_interfaces_ipv4.get_by_nameGet IPv4 tunnel-interface VPN policy by namereadsonicwall_sonicos.vpn_tunnel_interfaces_ipv4.listList IPv4 tunnel-interface VPN policysreadsonicwall_sonicos.vpn_tunnel_interfaces_ipv4.updateUpdate IPv4 tunnel-interface VPN policyswritesonicwall_sonicos.vpn_tunnel_interfaces_ipv4.delete_by_nameDelete IPv4 tunnel-interface VPN policy by namedestructivesonicwall_sonicos.vpn_tunnel_interfaces_ipv4.patch_by_namePatch IPv4 tunnel-interface VPN policy by namewrite- and 1 more in this area
Interfaces ipv66
sonicwall_sonicos.interfaces_ipv6.get_by_nameGet IPv6 interface by namereadsonicwall_sonicos.interfaces_ipv6.listList IPv6 interfacesreadsonicwall_sonicos.interfaces_ipv6.updateUpdate IPv6 interfaceswritesonicwall_sonicos.interfaces_ipv6.update_by_nameReplace IPv6 interface by namewritesonicwall_sonicos.interfaces_ipv6.delete_by_nameDelete IPv6 interface by namedestructivesonicwall_sonicos.interfaces_ipv6.patch_by_namePatch IPv6 interface by namewrite
Cloud secure edge4
sonicwall_sonicos.cloud_secure_edge.connectorsList Cloud Secure Edge connectorsreadsonicwall_sonicos.cloud_secure_edge.getGet Cloud Secure Edge settingsreadsonicwall_sonicos.cloud_secure_edge.synchronizeSynchronize Cloud Secure Edgewritesonicwall_sonicos.cloud_secure_edge.updateUpdate Cloud Secure Edge settingswrite
Switches4
sonicwall_sonicos.switches.createCreate managed switchswritesonicwall_sonicos.switches.infoGet managed switch informationreadsonicwall_sonicos.switches.listList managed switchsreadsonicwall_sonicos.switches.updateUpdate managed switchswrite
Clearpass servers3
sonicwall_sonicos.clearpass_servers.createCreate ClearPass serverswritesonicwall_sonicos.clearpass_servers.listList ClearPass serversreadsonicwall_sonicos.clearpass_servers.updateUpdate ClearPass serverswrite
Dynamic external objects3
sonicwall_sonicos.dynamic_external_objects.createCreate dynamic external objectswritesonicwall_sonicos.dynamic_external_objects.listList dynamic external objectsreadsonicwall_sonicos.dynamic_external_objects.updateUpdate dynamic external objectswrite
NTP servers3
sonicwall_sonicos.ntp_servers.createCreate NTP serverswritesonicwall_sonicos.ntp_servers.listList NTP serversreadsonicwall_sonicos.ntp_servers.updateUpdate NTP serverswrite
Radius accounting servers3
sonicwall_sonicos.radius_accounting_servers.createCreate RADIUS accounting serverswritesonicwall_sonicos.radius_accounting_servers.listList RADIUS accounting serversreadsonicwall_sonicos.radius_accounting_servers.updateUpdate RADIUS accounting serverswrite
Radius servers3
sonicwall_sonicos.radius_servers.createCreate RADIUS serverswritesonicwall_sonicos.radius_servers.listList RADIUS serversreadsonicwall_sonicos.radius_servers.updateUpdate RADIUS serverswrite
Session3
sonicwall_sonicos.session.config_modeEnter configuration modewritesonicwall_sonicos.session.loginLog in (start an API session)writesonicwall_sonicos.session.logoutLog out (end the API session)destructive
SNMP users3
sonicwall_sonicos.snmp_users.createCreate SNMPv3 userswritesonicwall_sonicos.snmp_users.listList SNMPv3 usersreadsonicwall_sonicos.snmp_users.updateUpdate SNMPv3 userswrite
Sonicpoint profiles3
sonicwall_sonicos.sonicpoint_profiles.createCreate SonicPoint provisioning profileswritesonicwall_sonicos.sonicpoint_profiles.listList SonicPoint provisioning profilesreadsonicwall_sonicos.sonicpoint_profiles.updateUpdate SonicPoint provisioning profileswrite
Sonicpoint vap objects3
sonicwall_sonicos.sonicpoint_vap_objects.createCreate SonicPoint virtual access point objectswritesonicwall_sonicos.sonicpoint_vap_objects.listList SonicPoint virtual access point objectsreadsonicwall_sonicos.sonicpoint_vap_objects.updateUpdate SonicPoint virtual access point objectswrite
Sonicpoint vap profiles3
sonicwall_sonicos.sonicpoint_vap_profiles.createCreate SonicPoint virtual access point profileswritesonicwall_sonicos.sonicpoint_vap_profiles.listList SonicPoint virtual access point profilesreadsonicwall_sonicos.sonicpoint_vap_profiles.updateUpdate SonicPoint virtual access point profileswrite
SSO agents3
sonicwall_sonicos.sso_agents.createCreate SSO agentswritesonicwall_sonicos.sso_agents.listList SSO agentsreadsonicwall_sonicos.sso_agents.updateUpdate SSO agentswrite
SSO radius accounting clients3
sonicwall_sonicos.sso_radius_accounting_clients.createCreate SSO RADIUS accounting clientswritesonicwall_sonicos.sso_radius_accounting_clients.listList SSO RADIUS accounting clientsreadsonicwall_sonicos.sso_radius_accounting_clients.updateUpdate SSO RADIUS accounting clientswrite
SSO terminal services agents3
sonicwall_sonicos.sso_terminal_services_agents.createCreate SSO Terminal Services agentswritesonicwall_sonicos.sso_terminal_services_agents.listList SSO Terminal Services agentsreadsonicwall_sonicos.sso_terminal_services_agents.updateUpdate SSO Terminal Services agentswrite
SSO third party API clients3
sonicwall_sonicos.sso_third_party_api_clients.createCreate SSO third-party API clientswritesonicwall_sonicos.sso_third_party_api_clients.listList SSO third-party API clientsreadsonicwall_sonicos.sso_third_party_api_clients.updateUpdate SSO third-party API clientswrite
Switch users3
sonicwall_sonicos.switch_users.createCreate switch-controller userswritesonicwall_sonicos.switch_users.listList switch-controller usersreadsonicwall_sonicos.switch_users.updateUpdate switch-controller userswrite
Tacacs accounting servers3
sonicwall_sonicos.tacacs_accounting_servers.createCreate TACACS+ accounting serverswritesonicwall_sonicos.tacacs_accounting_servers.listList TACACS+ accounting serversreadsonicwall_sonicos.tacacs_accounting_servers.updateUpdate TACACS+ accounting serverswrite
Tacacs servers3
sonicwall_sonicos.tacacs_servers.createCreate TACACS+ serverswritesonicwall_sonicos.tacacs_servers.listList TACACS+ serversreadsonicwall_sonicos.tacacs_servers.updateUpdate TACACS+ serverswrite
Wireless vap objects3
sonicwall_sonicos.wireless_vap_objects.createCreate wireless virtual access point objectswritesonicwall_sonicos.wireless_vap_objects.listList wireless virtual access point objectsreadsonicwall_sonicos.wireless_vap_objects.updateUpdate wireless virtual access point objectswrite
Wireless vap profiles3
sonicwall_sonicos.wireless_vap_profiles.createCreate wireless virtual access point profileswritesonicwall_sonicos.wireless_vap_profiles.listList wireless virtual access point profilesreadsonicwall_sonicos.wireless_vap_profiles.updateUpdate wireless virtual access point profileswrite
Administration2
sonicwall_sonicos.administration.getGet global administration settingsreadsonicwall_sonicos.administration.updateUpdate global administration settingswrite
Botnet2
sonicwall_sonicos.botnet.getGet botnet filter settingsreadsonicwall_sonicos.botnet.updateUpdate botnet filter settingswrite
Clearpass2
sonicwall_sonicos.clearpass.getGet ClearPass network access control settingsreadsonicwall_sonicos.clearpass.updateUpdate ClearPass network access control settingswrite
Config2
sonicwall_sonicos.config.commitCommit pending configurationwritesonicwall_sonicos.config.pendingGet pending configuration changesread
FTP2
sonicwall_sonicos.ftp.getGet FTP log/report export settingsreadsonicwall_sonicos.ftp.updateUpdate FTP log/report export settingswrite
Log automation2
sonicwall_sonicos.log_automation.getGet log automation (email, syslog) settingsreadsonicwall_sonicos.log_automation.updateUpdate log automation (email, syslog) settingswrite
Log aws2
sonicwall_sonicos.log_aws.getGet AWS logging settingsreadsonicwall_sonicos.log_aws.updateUpdate AWS logging settingswrite
Packet monitor2
sonicwall_sonicos.packet_monitor.getGet packet monitor settingsreadsonicwall_sonicos.packet_monitor.updateUpdate packet monitor settingswrite
Reporting2
sonicwall_sonicos.reporting.high_availabilityGet high-availability statusreadsonicwall_sonicos.reporting.wwanGet WWAN (cellular) statusread
Security services2
sonicwall_sonicos.security_services.getGet security services settingsreadsonicwall_sonicos.security_services.updateUpdate security services settingswrite
SFR mailing2
sonicwall_sonicos.sfr_mailing.getGet AppFlow SFR mailing settingsreadsonicwall_sonicos.sfr_mailing.updateUpdate AppFlow SFR mailing settingswrite
Sonicos API settings2
sonicwall_sonicos.sonicos_api_settings.getGet SonicOS API settingsreadsonicwall_sonicos.sonicos_api_settings.updateUpdate SonicOS API settingswrite
Sonicpoints2
sonicwall_sonicos.sonicpoints.listList SonicPoint access pointsreadsonicwall_sonicos.sonicpoints.updateUpdate SonicPoint access pointswrite
SSL VPN server2
sonicwall_sonicos.ssl_vpn_server.getGet SSL VPN server settingsreadsonicwall_sonicos.ssl_vpn_server.updateUpdate SSL VPN server settingswrite
Switch radius2
sonicwall_sonicos.switch_radius.listList switch-controller RADIUS settingsreadsonicwall_sonicos.switch_radius.updateUpdate switch-controller RADIUS settingswrite
System2
sonicwall_sonicos.system.restartRestart the firewalldestructivesonicwall_sonicos.system.versionGet firmware version and modelread
VPN group VPN ipv42
sonicwall_sonicos.vpn_group_vpn_ipv4.listList IPv4 GroupVPN policysreadsonicwall_sonicos.vpn_group_vpn_ipv4.updateUpdate IPv4 GroupVPN policyswrite
Wireless radio2
sonicwall_sonicos.wireless_radio.getGet wireless radio settingsreadsonicwall_sonicos.wireless_radio.updateUpdate wireless radio settingswrite
Cli1
sonicwall_sonicos.cli.executeRun SonicOS CLI commandsdestructive
Firmware1
sonicwall_sonicos.firmware.boot_uploadedBoot uploaded firmwaredestructive
Routing1
sonicwall_sonicos.routing.advanced_routing_dataGet advanced routing dataread
VPN policies1
sonicwall_sonicos.vpn_policies.list_allList all VPN policiesread
This index shows a sample of each area. All 349 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The SonicWall SonicOS MCP server, answered.
Is there a SonicWall SonicOS MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 349 SonicWall SonicOS actions across local users, address groups ipv4, address groups ipv6 and address objects FQDN, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SonicWall SonicOS.
What do I need to connect SonicWall SonicOS?
SonicOS administrator username (e.g. admin, or a dedicated full or read-only admin) and That administrator's password. Plus your host. The free call account { op: "connections.requirements", service: "sonicwall_sonicos" } lists exactly what to paste.
Can an AI agent delete or change things in SonicWall SonicOS?
Only if its key allows it, and only with an explicit confirmation. 45 SonicWall SonicOS actions are destructive, including run SonicOS CLI commands, log out (end the API session) and restart the firewall. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my SonicWall SonicOS API limit?
actionlake paces every call to the limits in the SonicWall SonicOS service file: 120 calls a minute per connection. Repeated reads are answered from cache (111 SonicWall SonicOS actions can be), which never reaches SonicWall SonicOS.
What does a SonicWall SonicOS action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (349 SonicWall SonicOS actions page). Cache hits, searches, dry runs and calls SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which SonicWall SonicOS API does it cover?
The SonicOS API (/api/sonicos), SonicOS 7.x at your SonicWall SonicOS instance's API base URL, which you enter when connecting. It is built from SonicWall SonicOS's documentation as read on 23 October 2026. 349 actions in 71 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my SonicWall SonicOS data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SonicWall SonicOS credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent SonicWall SonicOS today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.