Skip to content

Connectors · MSP & PSA

SonicWall SonicOS MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SonicWall SonicOS and the rest of your systems. It gives your agent 349 SonicWall SonicOS actions (111 reads, 193 writes and 45 that wait for a confirmation) and holds the SonicWall SonicOS credential itself, so the agent never does. It paces SonicWall SonicOS's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "sonicwall_sonicos.access_rules_ipv4.list",  intent: "check which SonicWall SonicOS account is connected"}# List IPv4 access rules · read · 1 upstream call
  • 349actionsin one signed file
  • 111readlook, never change
  • 193writecreate and update
  • 45wait for a yesdestructive, confirmed first

Set up

Connect SonicWall SonicOS in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect SonicWall SonicOS.

    Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • usernameSonicOS administrator username (e.g. admin, or a dedicated full or read-only admin)
    • passwordThat administrator's password
    • hostWhere your SonicWall SonicOS lives: your host
    account { op: "connections.requirements", service: "sonicwall_sonicos" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "sonicwall_sonicos.access_rules_ipv4.list" }# list ipv4 access rules · read · 1 upstream callcheck { action: "sonicwall_sonicos.zones.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

SonicWall SonicOS at a glance

Sign-in
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
usernamepassword
Setup fields
host
Limits we pace to
120 calls a minute, per connection
API covered
SonicOS API (/api/sonicos), SonicOS 7.x, at your SonicWall SonicOS instance's API base URL, which you enter when connecting
Built from
SonicWall SonicOS's documentation, read 23 October 2026GitHubGitHubGitHub
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
111 of 111 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line SonicWall SonicOS up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in SonicWall SonicOS.

349 actions in 71 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 111readlook, never change
  • 193writecreate and update
  • 45destructivewait for a confirmation
  1. Local users

    12

    3 read · 6 write · 3 destructive

    List local users · Create local users · Get local user by name · Get local user by uuid

  2. Address groups ipv4

    11

    3 read · 6 write · 2 destructive

    Create IPv4 address groups · List IPv4 address groups · Get IPv4 address group by name · Get IPv4 address group by uuid

  3. Address groups ipv6

    11

    3 read · 6 write · 2 destructive

    Create IPv6 address groups · List IPv6 address groups · Get IPv6 address group by name · Get IPv6 address group by uuid

  4. Address objects FQDN

    11

    3 read · 6 write · 2 destructive

    Create FQDN address objects · List FQDN address objects · Get FQDN address object by name · Get FQDN address object by uuid

  5. Address objects ipv4

    11

    3 read · 6 write · 2 destructive

    Create IPv4 address objects · List IPv4 address objects · Get IPv4 address object by name · Get IPv4 address object by uuid

  6. Address objects ipv6

    11

    3 read · 6 write · 2 destructive

    Create IPv6 address objects · List IPv6 address objects · Get IPv6 address object by name · Get IPv6 address object by uuid

  7. Address objects mac

    11

    3 read · 6 write · 2 destructive

    Create MAC address objects · List MAC address objects · Get MAC address object by name · Get MAC address object by uuid

  8. Local groups

    11

    3 read · 6 write · 2 destructive

    List local user groups · Create local user groups · Get local user group by name · Get local user group by uuid

63 more areas · 260 actions
  • Schedules 11
  • Service groups 11
  • Service objects 11
  • Zones 11
  • Access rules ipv4 7
  • Access rules ipv6 7
  • Content filter profiles 7
  • Content filter uri lists 7
  • Dynamic DNS profiles ipv4 7
  • Dynamic DNS profiles ipv6 7
  • Interfaces ipv4 7
  • Ldap servers 7
  • Nat policies ipv4 7
  • Nat policies ipv6 7
  • Route policies ipv4 7
  • Route policies ipv6 7
  • VPN site to site ipv4 7
  • VPN site to site ipv6 7
  • VPN tunnel interfaces ipv4 7
  • Interfaces ipv6 6
  • Cloud secure edge 4
  • Switches 4
  • Clearpass servers 3
  • Dynamic external objects 3
  • NTP servers 3
  • Radius accounting servers 3
  • Radius servers 3
  • Session 3
  • SNMP users 3
  • Sonicpoint profiles 3
  • Sonicpoint vap objects 3
  • Sonicpoint vap profiles 3
  • SSO agents 3
  • SSO radius accounting clients 3
  • SSO terminal services agents 3
  • SSO third party API clients 3
  • Switch users 3
  • Tacacs accounting servers 3
  • Tacacs servers 3
  • Wireless vap objects 3
  • Wireless vap profiles 3
  • Administration 2
  • Botnet 2
  • Clearpass 2
  • Config 2
  • FTP 2
  • Log automation 2
  • Log aws 2
  • Packet monitor 2
  • Reporting 2
  • Security services 2
  • SFR mailing 2
  • Sonicos API settings 2
  • Sonicpoints 2
  • SSL VPN server 2
  • Switch radius 2
  • System 2
  • VPN group VPN ipv4 2
  • Wireless radio 2
  • Cli 1
  • Firmware 1
  • Routing 1
  • VPN policies 1

Top actions

The SonicWall SonicOS API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 4 of SonicWall SonicOS's 4 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
sonicwall_sonicos.access_rules_ipv4.listList IPv4 access rulesList every IPv4 access rule configured on the firewall.readsecurity.policy.list36 connectors
sonicwall_sonicos.local_users.listList local usersList every local user configured on the firewall.readidentity.user.list474 connectors
sonicwall_sonicos.local_groups.listList local user groupsList every local user group configured on the firewall.readidentity.group.list262 connectors
sonicwall_sonicos.interfaces_ipv4.listList IPv4 interfacesList every IPv4 interface configured on the firewall.readsecurity.network.list15 connectors
sonicwall_sonicos.zones.listList zonesList every zone configured on the firewall.readthis connector
sonicwall_sonicos.zones.createCreate zonesAdd one or more zones to the pending configuration.writethis connector
sonicwall_sonicos.session.loginLog in (start an API session)Authenticate with the connection's admin credentials and start a SonicOS API management session from the caller's IP. `override: true` pre-empts any other…writethis connector
sonicwall_sonicos.switches.listList managed switchsList every managed switch configured on the firewall.readthis connector
sonicwall_sonicos.schedules.listList schedulesList every schedule configured on the firewall.readthis connector
sonicwall_sonicos.snmp_users.listList SNMPv3 usersList every SNMPv3 user configured on the firewall.readthis connector
sonicwall_sonicos.switches.createCreate managed switchsAdd one or more managed switchs to the pending configuration.writethis connector
sonicwall_sonicos.cli.executeRun SonicOS CLI commandsSend SonicOS CLI commands, one per line, through the API and return the device's JSON status.destructivethis connector

Try it

Prompts to paste into Claude.

Each one names the SonicWall SonicOS actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List IPv4 access rules in SonicWall SonicOS and tell me what stands out.

    callssonicwall_sonicos.access_rules_ipv4.list

  2. Writewrite

    Create zones in SonicWall SonicOS. Show me exactly what you will send before you save it.

    callssonicwall_sonicos.zones.create

Governance for SonicWall SonicOS

Destructive actions wait for a yes.

45 SonicWall SonicOS actions are destructive. The first 10:

  • Run SonicOS CLI commandssonicwall_sonicos.cli.execute
  • Log out (end the API session)sonicwall_sonicos.session.logout
  • Restart the firewallsonicwall_sonicos.system.restart
  • Delete zone by namesonicwall_sonicos.zones.delete_by_name
  • Delete zone by uuidsonicwall_sonicos.zones.delete_by_uuid
  • Boot uploaded firmwaresonicwall_sonicos.firmware.boot_uploaded
  • Delete schedule by namesonicwall_sonicos.schedules.delete_by_name
  • Delete schedule by uuidsonicwall_sonicos.schedules.delete_by_uuid
  • Delete local user by namesonicwall_sonicos.local_users.delete_by_name
  • Delete local user by uuidsonicwall_sonicos.local_users.delete_by_uuid

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dosonicwall_sonicos.zones.delete_by_nameconfirm_policy: human

Delete zone by name?

intent: the user asked me to delete zone by name

run suspended · waiting for a named person · key sonicwall-sonicos-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "sonicwall-sonicos-agent",  allowed_actions: ["sonicwall_sonicos.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "sonicwall_sonicos.cli.execute", approver: "[email protected]" },    { match: "sonicwall_sonicos.session.logout", approver: "[email protected]" },    { match: "sonicwall_sonicos.system.restart", approver: "[email protected]" }  ]}
Illustrative. Scoped to SonicWall SonicOS only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What SonicWall SonicOS costs on actionlake.

Every SonicWall SonicOS action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 349 SonicWall SonicOS actions
  • 349actions pageeach page of a long list is one call
  • 111reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every SonicWall SonicOS action.

349 actions by area: the id your agent calls, what it does, and its effect.

Local users12
  • sonicwall_sonicos.local_users.createCreate local userswrite
  • sonicwall_sonicos.local_users.get_by_nameGet local user by nameread
  • sonicwall_sonicos.local_users.get_by_uuidGet local user by uuidread
  • sonicwall_sonicos.local_users.listList local usersread
  • sonicwall_sonicos.local_users.delete_by_nameDelete local user by namedestructive
  • sonicwall_sonicos.local_users.delete_by_uuidDelete local user by uuiddestructive
  • and 6 more in this area
Address groups ipv411
  • sonicwall_sonicos.address_groups_ipv4.createCreate IPv4 address groupswrite
  • sonicwall_sonicos.address_groups_ipv4.get_by_nameGet IPv4 address group by nameread
  • sonicwall_sonicos.address_groups_ipv4.get_by_uuidGet IPv4 address group by uuidread
  • sonicwall_sonicos.address_groups_ipv4.listList IPv4 address groupsread
  • sonicwall_sonicos.address_groups_ipv4.delete_by_nameDelete IPv4 address group by namedestructive
  • sonicwall_sonicos.address_groups_ipv4.delete_by_uuidDelete IPv4 address group by uuiddestructive
  • and 5 more in this area
Address groups ipv611
  • sonicwall_sonicos.address_groups_ipv6.createCreate IPv6 address groupswrite
  • sonicwall_sonicos.address_groups_ipv6.get_by_nameGet IPv6 address group by nameread
  • sonicwall_sonicos.address_groups_ipv6.get_by_uuidGet IPv6 address group by uuidread
  • sonicwall_sonicos.address_groups_ipv6.listList IPv6 address groupsread
  • sonicwall_sonicos.address_groups_ipv6.delete_by_nameDelete IPv6 address group by namedestructive
  • sonicwall_sonicos.address_groups_ipv6.delete_by_uuidDelete IPv6 address group by uuiddestructive
  • and 5 more in this area
Address objects FQDN11
  • sonicwall_sonicos.address_objects_fqdn.createCreate FQDN address objectswrite
  • sonicwall_sonicos.address_objects_fqdn.get_by_nameGet FQDN address object by nameread
  • sonicwall_sonicos.address_objects_fqdn.get_by_uuidGet FQDN address object by uuidread
  • sonicwall_sonicos.address_objects_fqdn.listList FQDN address objectsread
  • sonicwall_sonicos.address_objects_fqdn.delete_by_nameDelete FQDN address object by namedestructive
  • sonicwall_sonicos.address_objects_fqdn.delete_by_uuidDelete FQDN address object by uuiddestructive
  • and 5 more in this area
Address objects ipv411
  • sonicwall_sonicos.address_objects_ipv4.createCreate IPv4 address objectswrite
  • sonicwall_sonicos.address_objects_ipv4.get_by_nameGet IPv4 address object by nameread
  • sonicwall_sonicos.address_objects_ipv4.get_by_uuidGet IPv4 address object by uuidread
  • sonicwall_sonicos.address_objects_ipv4.listList IPv4 address objectsread
  • sonicwall_sonicos.address_objects_ipv4.delete_by_nameDelete IPv4 address object by namedestructive
  • sonicwall_sonicos.address_objects_ipv4.delete_by_uuidDelete IPv4 address object by uuiddestructive
  • and 5 more in this area
Address objects ipv611
  • sonicwall_sonicos.address_objects_ipv6.createCreate IPv6 address objectswrite
  • sonicwall_sonicos.address_objects_ipv6.get_by_nameGet IPv6 address object by nameread
  • sonicwall_sonicos.address_objects_ipv6.get_by_uuidGet IPv6 address object by uuidread
  • sonicwall_sonicos.address_objects_ipv6.listList IPv6 address objectsread
  • sonicwall_sonicos.address_objects_ipv6.delete_by_nameDelete IPv6 address object by namedestructive
  • sonicwall_sonicos.address_objects_ipv6.delete_by_uuidDelete IPv6 address object by uuiddestructive
  • and 5 more in this area
Address objects mac11
  • sonicwall_sonicos.address_objects_mac.createCreate MAC address objectswrite
  • sonicwall_sonicos.address_objects_mac.get_by_nameGet MAC address object by nameread
  • sonicwall_sonicos.address_objects_mac.get_by_uuidGet MAC address object by uuidread
  • sonicwall_sonicos.address_objects_mac.listList MAC address objectsread
  • sonicwall_sonicos.address_objects_mac.delete_by_nameDelete MAC address object by namedestructive
  • sonicwall_sonicos.address_objects_mac.delete_by_uuidDelete MAC address object by uuiddestructive
  • and 5 more in this area
Local groups11
  • sonicwall_sonicos.local_groups.createCreate local user groupswrite
  • sonicwall_sonicos.local_groups.get_by_nameGet local user group by nameread
  • sonicwall_sonicos.local_groups.get_by_uuidGet local user group by uuidread
  • sonicwall_sonicos.local_groups.listList local user groupsread
  • sonicwall_sonicos.local_groups.delete_by_nameDelete local user group by namedestructive
  • sonicwall_sonicos.local_groups.delete_by_uuidDelete local user group by uuiddestructive
  • and 5 more in this area
Schedules11
  • sonicwall_sonicos.schedules.createCreate scheduleswrite
  • sonicwall_sonicos.schedules.get_by_nameGet schedule by nameread
  • sonicwall_sonicos.schedules.get_by_uuidGet schedule by uuidread
  • sonicwall_sonicos.schedules.listList schedulesread
  • sonicwall_sonicos.schedules.delete_by_nameDelete schedule by namedestructive
  • sonicwall_sonicos.schedules.delete_by_uuidDelete schedule by uuiddestructive
  • and 5 more in this area
Service groups11
  • sonicwall_sonicos.service_groups.createCreate service groupswrite
  • sonicwall_sonicos.service_groups.get_by_nameGet service group by nameread
  • sonicwall_sonicos.service_groups.get_by_uuidGet service group by uuidread
  • sonicwall_sonicos.service_groups.listList service groupsread
  • sonicwall_sonicos.service_groups.delete_by_nameDelete service group by namedestructive
  • sonicwall_sonicos.service_groups.delete_by_uuidDelete service group by uuiddestructive
  • and 5 more in this area
Service objects11
  • sonicwall_sonicos.service_objects.createCreate service objectswrite
  • sonicwall_sonicos.service_objects.get_by_nameGet service object by nameread
  • sonicwall_sonicos.service_objects.get_by_uuidGet service object by uuidread
  • sonicwall_sonicos.service_objects.listList service objectsread
  • sonicwall_sonicos.service_objects.delete_by_nameDelete service object by namedestructive
  • sonicwall_sonicos.service_objects.delete_by_uuidDelete service object by uuiddestructive
  • and 5 more in this area
Zones11
  • sonicwall_sonicos.zones.createCreate zoneswrite
  • sonicwall_sonicos.zones.get_by_nameGet zone by nameread
  • sonicwall_sonicos.zones.get_by_uuidGet zone by uuidread
  • sonicwall_sonicos.zones.listList zonesread
  • sonicwall_sonicos.zones.delete_by_nameDelete zone by namedestructive
  • sonicwall_sonicos.zones.delete_by_uuidDelete zone by uuiddestructive
  • and 5 more in this area
Access rules ipv47
  • sonicwall_sonicos.access_rules_ipv4.createCreate IPv4 access ruleswrite
  • sonicwall_sonicos.access_rules_ipv4.get_by_uuidGet IPv4 access rule by uuidread
  • sonicwall_sonicos.access_rules_ipv4.listList IPv4 access rulesread
  • sonicwall_sonicos.access_rules_ipv4.updateUpdate IPv4 access ruleswrite
  • sonicwall_sonicos.access_rules_ipv4.delete_by_uuidDelete IPv4 access rule by uuiddestructive
  • sonicwall_sonicos.access_rules_ipv4.patch_by_uuidPatch IPv4 access rule by uuidwrite
  • and 1 more in this area
Access rules ipv67
  • sonicwall_sonicos.access_rules_ipv6.createCreate IPv6 access ruleswrite
  • sonicwall_sonicos.access_rules_ipv6.get_by_uuidGet IPv6 access rule by uuidread
  • sonicwall_sonicos.access_rules_ipv6.listList IPv6 access rulesread
  • sonicwall_sonicos.access_rules_ipv6.updateUpdate IPv6 access ruleswrite
  • sonicwall_sonicos.access_rules_ipv6.delete_by_uuidDelete IPv6 access rule by uuiddestructive
  • sonicwall_sonicos.access_rules_ipv6.patch_by_uuidPatch IPv6 access rule by uuidwrite
  • and 1 more in this area
Content filter profiles7
  • sonicwall_sonicos.content_filter_profiles.createCreate content filter profileswrite
  • sonicwall_sonicos.content_filter_profiles.get_by_nameGet content filter profile by nameread
  • sonicwall_sonicos.content_filter_profiles.listList content filter profilesread
  • sonicwall_sonicos.content_filter_profiles.updateUpdate content filter profileswrite
  • sonicwall_sonicos.content_filter_profiles.delete_by_nameDelete content filter profile by namedestructive
  • sonicwall_sonicos.content_filter_profiles.patch_by_namePatch content filter profile by namewrite
  • and 1 more in this area
Content filter uri lists7
  • sonicwall_sonicos.content_filter_uri_lists.createCreate content filter URI list objectswrite
  • sonicwall_sonicos.content_filter_uri_lists.get_by_nameGet content filter URI list object by nameread
  • sonicwall_sonicos.content_filter_uri_lists.listList content filter URI list objectsread
  • sonicwall_sonicos.content_filter_uri_lists.updateUpdate content filter URI list objectswrite
  • sonicwall_sonicos.content_filter_uri_lists.delete_by_nameDelete content filter URI list object by namedestructive
  • sonicwall_sonicos.content_filter_uri_lists.patch_by_namePatch content filter URI list object by namewrite
  • and 1 more in this area
Dynamic DNS profiles ipv47
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.createCreate IPv4 dynamic DNS profileswrite
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.get_by_nameGet IPv4 dynamic DNS profile by nameread
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.listList IPv4 dynamic DNS profilesread
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.updateUpdate IPv4 dynamic DNS profileswrite
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.delete_by_nameDelete IPv4 dynamic DNS profile by namedestructive
  • sonicwall_sonicos.dynamic_dns_profiles_ipv4.patch_by_namePatch IPv4 dynamic DNS profile by namewrite
  • and 1 more in this area
Dynamic DNS profiles ipv67
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.createCreate IPv6 dynamic DNS profileswrite
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.get_by_nameGet IPv6 dynamic DNS profile by nameread
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.listList IPv6 dynamic DNS profilesread
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.updateUpdate IPv6 dynamic DNS profileswrite
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.delete_by_nameDelete IPv6 dynamic DNS profile by namedestructive
  • sonicwall_sonicos.dynamic_dns_profiles_ipv6.patch_by_namePatch IPv6 dynamic DNS profile by namewrite
  • and 1 more in this area
Interfaces ipv47
  • sonicwall_sonicos.interfaces_ipv4.createCreate IPv4 interfaceswrite
  • sonicwall_sonicos.interfaces_ipv4.get_by_nameGet IPv4 interface by nameread
  • sonicwall_sonicos.interfaces_ipv4.listList IPv4 interfacesread
  • sonicwall_sonicos.interfaces_ipv4.updateUpdate IPv4 interfaceswrite
  • sonicwall_sonicos.interfaces_ipv4.delete_by_nameDelete IPv4 interface by namedestructive
  • sonicwall_sonicos.interfaces_ipv4.patch_by_namePatch IPv4 interface by namewrite
  • and 1 more in this area
Ldap servers7
  • sonicwall_sonicos.ldap_servers.createCreate LDAP serverswrite
  • sonicwall_sonicos.ldap_servers.get_by_nameGet LDAP server by nameread
  • sonicwall_sonicos.ldap_servers.listList LDAP serversread
  • sonicwall_sonicos.ldap_servers.updateUpdate LDAP serverswrite
  • sonicwall_sonicos.ldap_servers.delete_by_nameDelete LDAP server by namedestructive
  • sonicwall_sonicos.ldap_servers.patch_by_namePatch LDAP server by namewrite
  • and 1 more in this area
Nat policies ipv47
  • sonicwall_sonicos.nat_policies_ipv4.createCreate IPv4 NAT policyswrite
  • sonicwall_sonicos.nat_policies_ipv4.get_by_uuidGet IPv4 NAT policy by uuidread
  • sonicwall_sonicos.nat_policies_ipv4.listList IPv4 NAT policysread
  • sonicwall_sonicos.nat_policies_ipv4.updateUpdate IPv4 NAT policyswrite
  • sonicwall_sonicos.nat_policies_ipv4.delete_by_uuidDelete IPv4 NAT policy by uuiddestructive
  • sonicwall_sonicos.nat_policies_ipv4.patch_by_uuidPatch IPv4 NAT policy by uuidwrite
  • and 1 more in this area
Nat policies ipv67
  • sonicwall_sonicos.nat_policies_ipv6.createCreate IPv6 NAT policyswrite
  • sonicwall_sonicos.nat_policies_ipv6.get_by_uuidGet IPv6 NAT policy by uuidread
  • sonicwall_sonicos.nat_policies_ipv6.listList IPv6 NAT policysread
  • sonicwall_sonicos.nat_policies_ipv6.updateUpdate IPv6 NAT policyswrite
  • sonicwall_sonicos.nat_policies_ipv6.delete_by_uuidDelete IPv6 NAT policy by uuiddestructive
  • sonicwall_sonicos.nat_policies_ipv6.patch_by_uuidPatch IPv6 NAT policy by uuidwrite
  • and 1 more in this area
Route policies ipv47
  • sonicwall_sonicos.route_policies_ipv4.createCreate IPv4 route policyswrite
  • sonicwall_sonicos.route_policies_ipv4.get_by_uuidGet IPv4 route policy by uuidread
  • sonicwall_sonicos.route_policies_ipv4.listList IPv4 route policysread
  • sonicwall_sonicos.route_policies_ipv4.updateUpdate IPv4 route policyswrite
  • sonicwall_sonicos.route_policies_ipv4.delete_by_uuidDelete IPv4 route policy by uuiddestructive
  • sonicwall_sonicos.route_policies_ipv4.patch_by_uuidPatch IPv4 route policy by uuidwrite
  • and 1 more in this area
Route policies ipv67
  • sonicwall_sonicos.route_policies_ipv6.createCreate IPv6 route policyswrite
  • sonicwall_sonicos.route_policies_ipv6.get_by_uuidGet IPv6 route policy by uuidread
  • sonicwall_sonicos.route_policies_ipv6.listList IPv6 route policysread
  • sonicwall_sonicos.route_policies_ipv6.updateUpdate IPv6 route policyswrite
  • sonicwall_sonicos.route_policies_ipv6.delete_by_uuidDelete IPv6 route policy by uuiddestructive
  • sonicwall_sonicos.route_policies_ipv6.patch_by_uuidPatch IPv6 route policy by uuidwrite
  • and 1 more in this area
VPN site to site ipv47
  • sonicwall_sonicos.vpn_site_to_site_ipv4.createCreate IPv4 site-to-site VPN policyswrite
  • sonicwall_sonicos.vpn_site_to_site_ipv4.get_by_nameGet IPv4 site-to-site VPN policy by nameread
  • sonicwall_sonicos.vpn_site_to_site_ipv4.listList IPv4 site-to-site VPN policysread
  • sonicwall_sonicos.vpn_site_to_site_ipv4.updateUpdate IPv4 site-to-site VPN policyswrite
  • sonicwall_sonicos.vpn_site_to_site_ipv4.delete_by_nameDelete IPv4 site-to-site VPN policy by namedestructive
  • sonicwall_sonicos.vpn_site_to_site_ipv4.patch_by_namePatch IPv4 site-to-site VPN policy by namewrite
  • and 1 more in this area
VPN site to site ipv67
  • sonicwall_sonicos.vpn_site_to_site_ipv6.createCreate IPv6 site-to-site VPN policyswrite
  • sonicwall_sonicos.vpn_site_to_site_ipv6.get_by_nameGet IPv6 site-to-site VPN policy by nameread
  • sonicwall_sonicos.vpn_site_to_site_ipv6.listList IPv6 site-to-site VPN policysread
  • sonicwall_sonicos.vpn_site_to_site_ipv6.updateUpdate IPv6 site-to-site VPN policyswrite
  • sonicwall_sonicos.vpn_site_to_site_ipv6.delete_by_nameDelete IPv6 site-to-site VPN policy by namedestructive
  • sonicwall_sonicos.vpn_site_to_site_ipv6.patch_by_namePatch IPv6 site-to-site VPN policy by namewrite
  • and 1 more in this area
VPN tunnel interfaces ipv47
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.createCreate IPv4 tunnel-interface VPN policyswrite
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.get_by_nameGet IPv4 tunnel-interface VPN policy by nameread
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.listList IPv4 tunnel-interface VPN policysread
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.updateUpdate IPv4 tunnel-interface VPN policyswrite
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.delete_by_nameDelete IPv4 tunnel-interface VPN policy by namedestructive
  • sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.patch_by_namePatch IPv4 tunnel-interface VPN policy by namewrite
  • and 1 more in this area
Interfaces ipv66
  • sonicwall_sonicos.interfaces_ipv6.get_by_nameGet IPv6 interface by nameread
  • sonicwall_sonicos.interfaces_ipv6.listList IPv6 interfacesread
  • sonicwall_sonicos.interfaces_ipv6.updateUpdate IPv6 interfaceswrite
  • sonicwall_sonicos.interfaces_ipv6.update_by_nameReplace IPv6 interface by namewrite
  • sonicwall_sonicos.interfaces_ipv6.delete_by_nameDelete IPv6 interface by namedestructive
  • sonicwall_sonicos.interfaces_ipv6.patch_by_namePatch IPv6 interface by namewrite
Cloud secure edge4
  • sonicwall_sonicos.cloud_secure_edge.connectorsList Cloud Secure Edge connectorsread
  • sonicwall_sonicos.cloud_secure_edge.getGet Cloud Secure Edge settingsread
  • sonicwall_sonicos.cloud_secure_edge.synchronizeSynchronize Cloud Secure Edgewrite
  • sonicwall_sonicos.cloud_secure_edge.updateUpdate Cloud Secure Edge settingswrite
Switches4
  • sonicwall_sonicos.switches.createCreate managed switchswrite
  • sonicwall_sonicos.switches.infoGet managed switch informationread
  • sonicwall_sonicos.switches.listList managed switchsread
  • sonicwall_sonicos.switches.updateUpdate managed switchswrite
Clearpass servers3
  • sonicwall_sonicos.clearpass_servers.createCreate ClearPass serverswrite
  • sonicwall_sonicos.clearpass_servers.listList ClearPass serversread
  • sonicwall_sonicos.clearpass_servers.updateUpdate ClearPass serverswrite
Dynamic external objects3
  • sonicwall_sonicos.dynamic_external_objects.createCreate dynamic external objectswrite
  • sonicwall_sonicos.dynamic_external_objects.listList dynamic external objectsread
  • sonicwall_sonicos.dynamic_external_objects.updateUpdate dynamic external objectswrite
NTP servers3
  • sonicwall_sonicos.ntp_servers.createCreate NTP serverswrite
  • sonicwall_sonicos.ntp_servers.listList NTP serversread
  • sonicwall_sonicos.ntp_servers.updateUpdate NTP serverswrite
Radius accounting servers3
  • sonicwall_sonicos.radius_accounting_servers.createCreate RADIUS accounting serverswrite
  • sonicwall_sonicos.radius_accounting_servers.listList RADIUS accounting serversread
  • sonicwall_sonicos.radius_accounting_servers.updateUpdate RADIUS accounting serverswrite
Radius servers3
  • sonicwall_sonicos.radius_servers.createCreate RADIUS serverswrite
  • sonicwall_sonicos.radius_servers.listList RADIUS serversread
  • sonicwall_sonicos.radius_servers.updateUpdate RADIUS serverswrite
Session3
  • sonicwall_sonicos.session.config_modeEnter configuration modewrite
  • sonicwall_sonicos.session.loginLog in (start an API session)write
  • sonicwall_sonicos.session.logoutLog out (end the API session)destructive
SNMP users3
  • sonicwall_sonicos.snmp_users.createCreate SNMPv3 userswrite
  • sonicwall_sonicos.snmp_users.listList SNMPv3 usersread
  • sonicwall_sonicos.snmp_users.updateUpdate SNMPv3 userswrite
Sonicpoint profiles3
  • sonicwall_sonicos.sonicpoint_profiles.createCreate SonicPoint provisioning profileswrite
  • sonicwall_sonicos.sonicpoint_profiles.listList SonicPoint provisioning profilesread
  • sonicwall_sonicos.sonicpoint_profiles.updateUpdate SonicPoint provisioning profileswrite
Sonicpoint vap objects3
  • sonicwall_sonicos.sonicpoint_vap_objects.createCreate SonicPoint virtual access point objectswrite
  • sonicwall_sonicos.sonicpoint_vap_objects.listList SonicPoint virtual access point objectsread
  • sonicwall_sonicos.sonicpoint_vap_objects.updateUpdate SonicPoint virtual access point objectswrite
Sonicpoint vap profiles3
  • sonicwall_sonicos.sonicpoint_vap_profiles.createCreate SonicPoint virtual access point profileswrite
  • sonicwall_sonicos.sonicpoint_vap_profiles.listList SonicPoint virtual access point profilesread
  • sonicwall_sonicos.sonicpoint_vap_profiles.updateUpdate SonicPoint virtual access point profileswrite
SSO agents3
  • sonicwall_sonicos.sso_agents.createCreate SSO agentswrite
  • sonicwall_sonicos.sso_agents.listList SSO agentsread
  • sonicwall_sonicos.sso_agents.updateUpdate SSO agentswrite
SSO radius accounting clients3
  • sonicwall_sonicos.sso_radius_accounting_clients.createCreate SSO RADIUS accounting clientswrite
  • sonicwall_sonicos.sso_radius_accounting_clients.listList SSO RADIUS accounting clientsread
  • sonicwall_sonicos.sso_radius_accounting_clients.updateUpdate SSO RADIUS accounting clientswrite
SSO terminal services agents3
  • sonicwall_sonicos.sso_terminal_services_agents.createCreate SSO Terminal Services agentswrite
  • sonicwall_sonicos.sso_terminal_services_agents.listList SSO Terminal Services agentsread
  • sonicwall_sonicos.sso_terminal_services_agents.updateUpdate SSO Terminal Services agentswrite
SSO third party API clients3
  • sonicwall_sonicos.sso_third_party_api_clients.createCreate SSO third-party API clientswrite
  • sonicwall_sonicos.sso_third_party_api_clients.listList SSO third-party API clientsread
  • sonicwall_sonicos.sso_third_party_api_clients.updateUpdate SSO third-party API clientswrite
Switch users3
  • sonicwall_sonicos.switch_users.createCreate switch-controller userswrite
  • sonicwall_sonicos.switch_users.listList switch-controller usersread
  • sonicwall_sonicos.switch_users.updateUpdate switch-controller userswrite
Tacacs accounting servers3
  • sonicwall_sonicos.tacacs_accounting_servers.createCreate TACACS+ accounting serverswrite
  • sonicwall_sonicos.tacacs_accounting_servers.listList TACACS+ accounting serversread
  • sonicwall_sonicos.tacacs_accounting_servers.updateUpdate TACACS+ accounting serverswrite
Tacacs servers3
  • sonicwall_sonicos.tacacs_servers.createCreate TACACS+ serverswrite
  • sonicwall_sonicos.tacacs_servers.listList TACACS+ serversread
  • sonicwall_sonicos.tacacs_servers.updateUpdate TACACS+ serverswrite
Wireless vap objects3
  • sonicwall_sonicos.wireless_vap_objects.createCreate wireless virtual access point objectswrite
  • sonicwall_sonicos.wireless_vap_objects.listList wireless virtual access point objectsread
  • sonicwall_sonicos.wireless_vap_objects.updateUpdate wireless virtual access point objectswrite
Wireless vap profiles3
  • sonicwall_sonicos.wireless_vap_profiles.createCreate wireless virtual access point profileswrite
  • sonicwall_sonicos.wireless_vap_profiles.listList wireless virtual access point profilesread
  • sonicwall_sonicos.wireless_vap_profiles.updateUpdate wireless virtual access point profileswrite
Administration2
  • sonicwall_sonicos.administration.getGet global administration settingsread
  • sonicwall_sonicos.administration.updateUpdate global administration settingswrite
Botnet2
  • sonicwall_sonicos.botnet.getGet botnet filter settingsread
  • sonicwall_sonicos.botnet.updateUpdate botnet filter settingswrite
Clearpass2
  • sonicwall_sonicos.clearpass.getGet ClearPass network access control settingsread
  • sonicwall_sonicos.clearpass.updateUpdate ClearPass network access control settingswrite
Config2
  • sonicwall_sonicos.config.commitCommit pending configurationwrite
  • sonicwall_sonicos.config.pendingGet pending configuration changesread
FTP2
  • sonicwall_sonicos.ftp.getGet FTP log/report export settingsread
  • sonicwall_sonicos.ftp.updateUpdate FTP log/report export settingswrite
Log automation2
  • sonicwall_sonicos.log_automation.getGet log automation (email, syslog) settingsread
  • sonicwall_sonicos.log_automation.updateUpdate log automation (email, syslog) settingswrite
Log aws2
  • sonicwall_sonicos.log_aws.getGet AWS logging settingsread
  • sonicwall_sonicos.log_aws.updateUpdate AWS logging settingswrite
Packet monitor2
  • sonicwall_sonicos.packet_monitor.getGet packet monitor settingsread
  • sonicwall_sonicos.packet_monitor.updateUpdate packet monitor settingswrite
Reporting2
  • sonicwall_sonicos.reporting.high_availabilityGet high-availability statusread
  • sonicwall_sonicos.reporting.wwanGet WWAN (cellular) statusread
Security services2
  • sonicwall_sonicos.security_services.getGet security services settingsread
  • sonicwall_sonicos.security_services.updateUpdate security services settingswrite
SFR mailing2
  • sonicwall_sonicos.sfr_mailing.getGet AppFlow SFR mailing settingsread
  • sonicwall_sonicos.sfr_mailing.updateUpdate AppFlow SFR mailing settingswrite
Sonicos API settings2
  • sonicwall_sonicos.sonicos_api_settings.getGet SonicOS API settingsread
  • sonicwall_sonicos.sonicos_api_settings.updateUpdate SonicOS API settingswrite
Sonicpoints2
  • sonicwall_sonicos.sonicpoints.listList SonicPoint access pointsread
  • sonicwall_sonicos.sonicpoints.updateUpdate SonicPoint access pointswrite
SSL VPN server2
  • sonicwall_sonicos.ssl_vpn_server.getGet SSL VPN server settingsread
  • sonicwall_sonicos.ssl_vpn_server.updateUpdate SSL VPN server settingswrite
Switch radius2
  • sonicwall_sonicos.switch_radius.listList switch-controller RADIUS settingsread
  • sonicwall_sonicos.switch_radius.updateUpdate switch-controller RADIUS settingswrite
System2
  • sonicwall_sonicos.system.restartRestart the firewalldestructive
  • sonicwall_sonicos.system.versionGet firmware version and modelread
VPN group VPN ipv42
  • sonicwall_sonicos.vpn_group_vpn_ipv4.listList IPv4 GroupVPN policysread
  • sonicwall_sonicos.vpn_group_vpn_ipv4.updateUpdate IPv4 GroupVPN policyswrite
Wireless radio2
  • sonicwall_sonicos.wireless_radio.getGet wireless radio settingsread
  • sonicwall_sonicos.wireless_radio.updateUpdate wireless radio settingswrite
Cli1
  • sonicwall_sonicos.cli.executeRun SonicOS CLI commandsdestructive
Firmware1
  • sonicwall_sonicos.firmware.boot_uploadedBoot uploaded firmwaredestructive
Routing1
  • sonicwall_sonicos.routing.advanced_routing_dataGet advanced routing dataread
VPN policies1
  • sonicwall_sonicos.vpn_policies.list_allList all VPN policiesread

This index shows a sample of each area. All 349 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The SonicWall SonicOS MCP server, answered.

Is there a SonicWall SonicOS MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 349 SonicWall SonicOS actions across local users, address groups ipv4, address groups ipv6 and address objects FQDN, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SonicWall SonicOS.

What do I need to connect SonicWall SonicOS?

SonicOS administrator username (e.g. admin, or a dedicated full or read-only admin) and That administrator's password. Plus your host. The free call account { op: "connections.requirements", service: "sonicwall_sonicos" } lists exactly what to paste.

Can an AI agent delete or change things in SonicWall SonicOS?

Only if its key allows it, and only with an explicit confirmation. 45 SonicWall SonicOS actions are destructive, including run SonicOS CLI commands, log out (end the API session) and restart the firewall. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my SonicWall SonicOS API limit?

actionlake paces every call to the limits in the SonicWall SonicOS service file: 120 calls a minute per connection. Repeated reads are answered from cache (111 SonicWall SonicOS actions can be), which never reaches SonicWall SonicOS.

What does a SonicWall SonicOS action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (349 SonicWall SonicOS actions page). Cache hits, searches, dry runs and calls SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which SonicWall SonicOS API does it cover?

The SonicOS API (/api/sonicos), SonicOS 7.x at your SonicWall SonicOS instance's API base URL, which you enter when connecting. It is built from SonicWall SonicOS's documentation as read on 23 October 2026. 349 actions in 71 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my SonicWall SonicOS data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SonicWall SonicOS credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent SonicWall SonicOS today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.