--- title: "SonicWall SonicOS MCP server for AI agents - actionlake" description: "Give Claude 349 SonicWall SonicOS actions through one MCP server: local users. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/sonicwall-sonicos updated: 2026-10-23 --- Connectors · MSP & PSA # SonicWall SonicOS MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SonicWall SonicOS and the rest of your systems. It gives your agent 349 SonicWall SonicOS actions (111 reads, 193 writes and 45 that wait for a confirmation) and holds the SonicWall SonicOS credential itself, so the agent never does. It paces SonicWall SonicOS's limits and records every call. [Connect SonicWall SonicOS free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "sonicwall_sonicos.access_rules_ipv4.list", intent: "check which SonicWall SonicOS account is connected" } # List IPv4 access rules · read · 1 upstream call ``` - 349 actions in one signed file - 111 read look, never change - 193 write create and update - 45 wait for a yes destructive, confirmed first Set up ## Connect SonicWall SonicOS in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect SonicWall SonicOS. Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `username` SonicOS administrator username (e.g. admin, or a dedicated full or read-only admin) - `password` That administrator's password - `host` Where your SonicWall SonicOS lives: your host ``` account { op: "connections.requirements", service: "sonicwall_sonicos" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "sonicwall_sonicos.access_rules_ipv4.list" } # list ipv4 access rules · read · 1 upstream call check { action: "sonicwall_sonicos.zones.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` SonicWall SonicOS at a glance **Sign-in** Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `username` `password` **Setup fields** `host` **Limits we pace to** 120 calls a minute, per connection **API covered** SonicOS API (/api/sonicos), SonicOS 7.x, at your SonicWall SonicOS instance's API base URL, which you enter when connecting **Built from** SonicWall SonicOS's documentation, read 23 October 2026[GitHub](https://raw.githubusercontent.com/sonicwall/sonicos-automation/HEAD/sonicos/api.py) [GitHub](https://raw.githubusercontent.com/sonicwall/sonicos-automation/HEAD/credential_reset/playbook_mixins/networking.py) [GitHub](https://raw.githubusercontent.com/sonicwall/sonicos-automation/HEAD/cse-quickstart.py) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 111 of 111 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 2, so ask can line SonicWall SonicOS up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in SonicWall SonicOS. 349 actions in 71 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **111** read look, never change - **193** write create and update - **45** destructive wait for a confirmation 1. ### Local users 12 3 read · 6 write · 3 destructive List local users · Create local users · Get local user by name · Get local user by uuid 2. ### Address groups ipv4 11 3 read · 6 write · 2 destructive Create IPv4 address groups · List IPv4 address groups · Get IPv4 address group by name · Get IPv4 address group by uuid 3. ### Address groups ipv6 11 3 read · 6 write · 2 destructive Create IPv6 address groups · List IPv6 address groups · Get IPv6 address group by name · Get IPv6 address group by uuid 4. ### Address objects FQDN 11 3 read · 6 write · 2 destructive Create FQDN address objects · List FQDN address objects · Get FQDN address object by name · Get FQDN address object by uuid 5. ### Address objects ipv4 11 3 read · 6 write · 2 destructive Create IPv4 address objects · List IPv4 address objects · Get IPv4 address object by name · Get IPv4 address object by uuid 6. ### Address objects ipv6 11 3 read · 6 write · 2 destructive Create IPv6 address objects · List IPv6 address objects · Get IPv6 address object by name · Get IPv6 address object by uuid 7. ### Address objects mac 11 3 read · 6 write · 2 destructive Create MAC address objects · List MAC address objects · Get MAC address object by name · Get MAC address object by uuid 8. ### Local groups 11 3 read · 6 write · 2 destructive List local user groups · Create local user groups · Get local user group by name · Get local user group by uuid **63 more areas · 260 actions** - Schedules **11** - Service groups **11** - Service objects **11** - Zones **11** - Access rules ipv4 **7** - Access rules ipv6 **7** - Content filter profiles **7** - Content filter uri lists **7** - Dynamic DNS profiles ipv4 **7** - Dynamic DNS profiles ipv6 **7** - Interfaces ipv4 **7** - Ldap servers **7** - Nat policies ipv4 **7** - Nat policies ipv6 **7** - Route policies ipv4 **7** - Route policies ipv6 **7** - VPN site to site ipv4 **7** - VPN site to site ipv6 **7** - VPN tunnel interfaces ipv4 **7** - Interfaces ipv6 **6** - Cloud secure edge **4** - Switches **4** - Clearpass servers **3** - Dynamic external objects **3** - NTP servers **3** - Radius accounting servers **3** - Radius servers **3** - Session **3** - SNMP users **3** - Sonicpoint profiles **3** - Sonicpoint vap objects **3** - Sonicpoint vap profiles **3** - SSO agents **3** - SSO radius accounting clients **3** - SSO terminal services agents **3** - SSO third party API clients **3** - Switch users **3** - Tacacs accounting servers **3** - Tacacs servers **3** - Wireless vap objects **3** - Wireless vap profiles **3** - Administration **2** - Botnet **2** - Clearpass **2** - Config **2** - FTP **2** - Log automation **2** - Log aws **2** - Packet monitor **2** - Reporting **2** - Security services **2** - SFR mailing **2** - Sonicos API settings **2** - Sonicpoints **2** - SSL VPN server **2** - Switch radius **2** - System **2** - VPN group VPN ipv4 **2** - Wireless radio **2** - Cli **1** - Firmware **1** - Routing **1** - VPN policies **1** Top actions ## The SonicWall SonicOS API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 4 of SonicWall SonicOS's 4 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `sonicwall_sonicos.access_rules_ipv4.list` List IPv4 access rules | List every IPv4 access rule configured on the firewall. | read | `security.policy.list` 36 connectors | | `sonicwall_sonicos.local_users.list` List local users | List every local user configured on the firewall. | read | `identity.user.list` 474 connectors | | `sonicwall_sonicos.local_groups.list` List local user groups | List every local user group configured on the firewall. | read | `identity.group.list` 262 connectors | | `sonicwall_sonicos.interfaces_ipv4.list` List IPv4 interfaces | List every IPv4 interface configured on the firewall. | read | `security.network.list` 15 connectors | | `sonicwall_sonicos.zones.list` List zones | List every zone configured on the firewall. | read | this connector | | `sonicwall_sonicos.zones.create` Create zones | Add one or more zones to the pending configuration. | write | this connector | | `sonicwall_sonicos.session.login` Log in (start an API session) | Authenticate with the connection's admin credentials and start a SonicOS API management session from the caller's IP. `override: true` pre-empts any other… | write | this connector | | `sonicwall_sonicos.switches.list` List managed switchs | List every managed switch configured on the firewall. | read | this connector | | `sonicwall_sonicos.schedules.list` List schedules | List every schedule configured on the firewall. | read | this connector | | `sonicwall_sonicos.snmp_users.list` List SNMPv3 users | List every SNMPv3 user configured on the firewall. | read | this connector | | `sonicwall_sonicos.switches.create` Create managed switchs | Add one or more managed switchs to the pending configuration. | write | this connector | | `sonicwall_sonicos.cli.execute` Run SonicOS CLI commands | Send SonicOS CLI commands, one per line, through the API and return the device's JSON status. | destructive | this connector | Try it ## Prompts to paste into Claude. Each one names the SonicWall SonicOS actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List IPv4 access rules in SonicWall SonicOS and tell me what stands out. calls `sonicwall_sonicos.access_rules_ipv4.list` 2. Write write Create zones in SonicWall SonicOS. Show me exactly what you will send before you save it. calls `sonicwall_sonicos.zones.create` Governance for SonicWall SonicOS ## Destructive actions wait for a yes. 45 SonicWall SonicOS actions are destructive. The first 10: - Run SonicOS CLI commands `sonicwall_sonicos.cli.execute` - Log out (end the API session) `sonicwall_sonicos.session.logout` - Restart the firewall `sonicwall_sonicos.system.restart` - Delete zone by name `sonicwall_sonicos.zones.delete_by_name` - Delete zone by uuid `sonicwall_sonicos.zones.delete_by_uuid` - Boot uploaded firmware `sonicwall_sonicos.firmware.boot_uploaded` - Delete schedule by name `sonicwall_sonicos.schedules.delete_by_name` - Delete schedule by uuid `sonicwall_sonicos.schedules.delete_by_uuid` - Delete local user by name `sonicwall_sonicos.local_users.delete_by_name` - Delete local user by uuid `sonicwall_sonicos.local_users.delete_by_uuid` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do sonicwall_sonicos.zones.delete_by_name confirm_policy: **human** Delete zone by name? **intent:** the user asked me to delete zone by name run suspended · waiting for a named person · key _sonicwall-sonicos-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "sonicwall-sonicos-agent", allowed_actions: ["sonicwall_sonicos.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "sonicwall_sonicos.cli.execute", approver: "lead@example.com" }, { match: "sonicwall_sonicos.session.logout", approver: "lead@example.com" }, { match: "sonicwall_sonicos.system.restart", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to SonicWall SonicOS only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What SonicWall SonicOS costs on actionlake. Every SonicWall SonicOS action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 349 SonicWall SonicOS actions - 349 actions page each page of a long list is one call - 111 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every SonicWall SonicOS action. 349 actions by area: the id your agent calls, what it does, and its effect. **Local users 12** - `sonicwall_sonicos.local_users.create` Create local users write - `sonicwall_sonicos.local_users.get_by_name` Get local user by name read - `sonicwall_sonicos.local_users.get_by_uuid` Get local user by uuid read - `sonicwall_sonicos.local_users.list` List local users read - `sonicwall_sonicos.local_users.delete_by_name` Delete local user by name destructive - `sonicwall_sonicos.local_users.delete_by_uuid` Delete local user by uuid destructive - and 6 more in this area **Address groups ipv4 11** - `sonicwall_sonicos.address_groups_ipv4.create` Create IPv4 address groups write - `sonicwall_sonicos.address_groups_ipv4.get_by_name` Get IPv4 address group by name read - `sonicwall_sonicos.address_groups_ipv4.get_by_uuid` Get IPv4 address group by uuid read - `sonicwall_sonicos.address_groups_ipv4.list` List IPv4 address groups read - `sonicwall_sonicos.address_groups_ipv4.delete_by_name` Delete IPv4 address group by name destructive - `sonicwall_sonicos.address_groups_ipv4.delete_by_uuid` Delete IPv4 address group by uuid destructive - and 5 more in this area **Address groups ipv6 11** - `sonicwall_sonicos.address_groups_ipv6.create` Create IPv6 address groups write - `sonicwall_sonicos.address_groups_ipv6.get_by_name` Get IPv6 address group by name read - `sonicwall_sonicos.address_groups_ipv6.get_by_uuid` Get IPv6 address group by uuid read - `sonicwall_sonicos.address_groups_ipv6.list` List IPv6 address groups read - `sonicwall_sonicos.address_groups_ipv6.delete_by_name` Delete IPv6 address group by name destructive - `sonicwall_sonicos.address_groups_ipv6.delete_by_uuid` Delete IPv6 address group by uuid destructive - and 5 more in this area **Address objects FQDN 11** - `sonicwall_sonicos.address_objects_fqdn.create` Create FQDN address objects write - `sonicwall_sonicos.address_objects_fqdn.get_by_name` Get FQDN address object by name read - `sonicwall_sonicos.address_objects_fqdn.get_by_uuid` Get FQDN address object by uuid read - `sonicwall_sonicos.address_objects_fqdn.list` List FQDN address objects read - `sonicwall_sonicos.address_objects_fqdn.delete_by_name` Delete FQDN address object by name destructive - `sonicwall_sonicos.address_objects_fqdn.delete_by_uuid` Delete FQDN address object by uuid destructive - and 5 more in this area **Address objects ipv4 11** - `sonicwall_sonicos.address_objects_ipv4.create` Create IPv4 address objects write - `sonicwall_sonicos.address_objects_ipv4.get_by_name` Get IPv4 address object by name read - `sonicwall_sonicos.address_objects_ipv4.get_by_uuid` Get IPv4 address object by uuid read - `sonicwall_sonicos.address_objects_ipv4.list` List IPv4 address objects read - `sonicwall_sonicos.address_objects_ipv4.delete_by_name` Delete IPv4 address object by name destructive - `sonicwall_sonicos.address_objects_ipv4.delete_by_uuid` Delete IPv4 address object by uuid destructive - and 5 more in this area **Address objects ipv6 11** - `sonicwall_sonicos.address_objects_ipv6.create` Create IPv6 address objects write - `sonicwall_sonicos.address_objects_ipv6.get_by_name` Get IPv6 address object by name read - `sonicwall_sonicos.address_objects_ipv6.get_by_uuid` Get IPv6 address object by uuid read - `sonicwall_sonicos.address_objects_ipv6.list` List IPv6 address objects read - `sonicwall_sonicos.address_objects_ipv6.delete_by_name` Delete IPv6 address object by name destructive - `sonicwall_sonicos.address_objects_ipv6.delete_by_uuid` Delete IPv6 address object by uuid destructive - and 5 more in this area **Address objects mac 11** - `sonicwall_sonicos.address_objects_mac.create` Create MAC address objects write - `sonicwall_sonicos.address_objects_mac.get_by_name` Get MAC address object by name read - `sonicwall_sonicos.address_objects_mac.get_by_uuid` Get MAC address object by uuid read - `sonicwall_sonicos.address_objects_mac.list` List MAC address objects read - `sonicwall_sonicos.address_objects_mac.delete_by_name` Delete MAC address object by name destructive - `sonicwall_sonicos.address_objects_mac.delete_by_uuid` Delete MAC address object by uuid destructive - and 5 more in this area **Local groups 11** - `sonicwall_sonicos.local_groups.create` Create local user groups write - `sonicwall_sonicos.local_groups.get_by_name` Get local user group by name read - `sonicwall_sonicos.local_groups.get_by_uuid` Get local user group by uuid read - `sonicwall_sonicos.local_groups.list` List local user groups read - `sonicwall_sonicos.local_groups.delete_by_name` Delete local user group by name destructive - `sonicwall_sonicos.local_groups.delete_by_uuid` Delete local user group by uuid destructive - and 5 more in this area **Schedules 11** - `sonicwall_sonicos.schedules.create` Create schedules write - `sonicwall_sonicos.schedules.get_by_name` Get schedule by name read - `sonicwall_sonicos.schedules.get_by_uuid` Get schedule by uuid read - `sonicwall_sonicos.schedules.list` List schedules read - `sonicwall_sonicos.schedules.delete_by_name` Delete schedule by name destructive - `sonicwall_sonicos.schedules.delete_by_uuid` Delete schedule by uuid destructive - and 5 more in this area **Service groups 11** - `sonicwall_sonicos.service_groups.create` Create service groups write - `sonicwall_sonicos.service_groups.get_by_name` Get service group by name read - `sonicwall_sonicos.service_groups.get_by_uuid` Get service group by uuid read - `sonicwall_sonicos.service_groups.list` List service groups read - `sonicwall_sonicos.service_groups.delete_by_name` Delete service group by name destructive - `sonicwall_sonicos.service_groups.delete_by_uuid` Delete service group by uuid destructive - and 5 more in this area **Service objects 11** - `sonicwall_sonicos.service_objects.create` Create service objects write - `sonicwall_sonicos.service_objects.get_by_name` Get service object by name read - `sonicwall_sonicos.service_objects.get_by_uuid` Get service object by uuid read - `sonicwall_sonicos.service_objects.list` List service objects read - `sonicwall_sonicos.service_objects.delete_by_name` Delete service object by name destructive - `sonicwall_sonicos.service_objects.delete_by_uuid` Delete service object by uuid destructive - and 5 more in this area **Zones 11** - `sonicwall_sonicos.zones.create` Create zones write - `sonicwall_sonicos.zones.get_by_name` Get zone by name read - `sonicwall_sonicos.zones.get_by_uuid` Get zone by uuid read - `sonicwall_sonicos.zones.list` List zones read - `sonicwall_sonicos.zones.delete_by_name` Delete zone by name destructive - `sonicwall_sonicos.zones.delete_by_uuid` Delete zone by uuid destructive - and 5 more in this area **Access rules ipv4 7** - `sonicwall_sonicos.access_rules_ipv4.create` Create IPv4 access rules write - `sonicwall_sonicos.access_rules_ipv4.get_by_uuid` Get IPv4 access rule by uuid read - `sonicwall_sonicos.access_rules_ipv4.list` List IPv4 access rules read - `sonicwall_sonicos.access_rules_ipv4.update` Update IPv4 access rules write - `sonicwall_sonicos.access_rules_ipv4.delete_by_uuid` Delete IPv4 access rule by uuid destructive - `sonicwall_sonicos.access_rules_ipv4.patch_by_uuid` Patch IPv4 access rule by uuid write - and 1 more in this area **Access rules ipv6 7** - `sonicwall_sonicos.access_rules_ipv6.create` Create IPv6 access rules write - `sonicwall_sonicos.access_rules_ipv6.get_by_uuid` Get IPv6 access rule by uuid read - `sonicwall_sonicos.access_rules_ipv6.list` List IPv6 access rules read - `sonicwall_sonicos.access_rules_ipv6.update` Update IPv6 access rules write - `sonicwall_sonicos.access_rules_ipv6.delete_by_uuid` Delete IPv6 access rule by uuid destructive - `sonicwall_sonicos.access_rules_ipv6.patch_by_uuid` Patch IPv6 access rule by uuid write - and 1 more in this area **Content filter profiles 7** - `sonicwall_sonicos.content_filter_profiles.create` Create content filter profiles write - `sonicwall_sonicos.content_filter_profiles.get_by_name` Get content filter profile by name read - `sonicwall_sonicos.content_filter_profiles.list` List content filter profiles read - `sonicwall_sonicos.content_filter_profiles.update` Update content filter profiles write - `sonicwall_sonicos.content_filter_profiles.delete_by_name` Delete content filter profile by name destructive - `sonicwall_sonicos.content_filter_profiles.patch_by_name` Patch content filter profile by name write - and 1 more in this area **Content filter uri lists 7** - `sonicwall_sonicos.content_filter_uri_lists.create` Create content filter URI list objects write - `sonicwall_sonicos.content_filter_uri_lists.get_by_name` Get content filter URI list object by name read - `sonicwall_sonicos.content_filter_uri_lists.list` List content filter URI list objects read - `sonicwall_sonicos.content_filter_uri_lists.update` Update content filter URI list objects write - `sonicwall_sonicos.content_filter_uri_lists.delete_by_name` Delete content filter URI list object by name destructive - `sonicwall_sonicos.content_filter_uri_lists.patch_by_name` Patch content filter URI list object by name write - and 1 more in this area **Dynamic DNS profiles ipv4 7** - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.create` Create IPv4 dynamic DNS profiles write - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.get_by_name` Get IPv4 dynamic DNS profile by name read - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.list` List IPv4 dynamic DNS profiles read - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.update` Update IPv4 dynamic DNS profiles write - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.delete_by_name` Delete IPv4 dynamic DNS profile by name destructive - `sonicwall_sonicos.dynamic_dns_profiles_ipv4.patch_by_name` Patch IPv4 dynamic DNS profile by name write - and 1 more in this area **Dynamic DNS profiles ipv6 7** - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.create` Create IPv6 dynamic DNS profiles write - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.get_by_name` Get IPv6 dynamic DNS profile by name read - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.list` List IPv6 dynamic DNS profiles read - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.update` Update IPv6 dynamic DNS profiles write - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.delete_by_name` Delete IPv6 dynamic DNS profile by name destructive - `sonicwall_sonicos.dynamic_dns_profiles_ipv6.patch_by_name` Patch IPv6 dynamic DNS profile by name write - and 1 more in this area **Interfaces ipv4 7** - `sonicwall_sonicos.interfaces_ipv4.create` Create IPv4 interfaces write - `sonicwall_sonicos.interfaces_ipv4.get_by_name` Get IPv4 interface by name read - `sonicwall_sonicos.interfaces_ipv4.list` List IPv4 interfaces read - `sonicwall_sonicos.interfaces_ipv4.update` Update IPv4 interfaces write - `sonicwall_sonicos.interfaces_ipv4.delete_by_name` Delete IPv4 interface by name destructive - `sonicwall_sonicos.interfaces_ipv4.patch_by_name` Patch IPv4 interface by name write - and 1 more in this area **Ldap servers 7** - `sonicwall_sonicos.ldap_servers.create` Create LDAP servers write - `sonicwall_sonicos.ldap_servers.get_by_name` Get LDAP server by name read - `sonicwall_sonicos.ldap_servers.list` List LDAP servers read - `sonicwall_sonicos.ldap_servers.update` Update LDAP servers write - `sonicwall_sonicos.ldap_servers.delete_by_name` Delete LDAP server by name destructive - `sonicwall_sonicos.ldap_servers.patch_by_name` Patch LDAP server by name write - and 1 more in this area **Nat policies ipv4 7** - `sonicwall_sonicos.nat_policies_ipv4.create` Create IPv4 NAT policys write - `sonicwall_sonicos.nat_policies_ipv4.get_by_uuid` Get IPv4 NAT policy by uuid read - `sonicwall_sonicos.nat_policies_ipv4.list` List IPv4 NAT policys read - `sonicwall_sonicos.nat_policies_ipv4.update` Update IPv4 NAT policys write - `sonicwall_sonicos.nat_policies_ipv4.delete_by_uuid` Delete IPv4 NAT policy by uuid destructive - `sonicwall_sonicos.nat_policies_ipv4.patch_by_uuid` Patch IPv4 NAT policy by uuid write - and 1 more in this area **Nat policies ipv6 7** - `sonicwall_sonicos.nat_policies_ipv6.create` Create IPv6 NAT policys write - `sonicwall_sonicos.nat_policies_ipv6.get_by_uuid` Get IPv6 NAT policy by uuid read - `sonicwall_sonicos.nat_policies_ipv6.list` List IPv6 NAT policys read - `sonicwall_sonicos.nat_policies_ipv6.update` Update IPv6 NAT policys write - `sonicwall_sonicos.nat_policies_ipv6.delete_by_uuid` Delete IPv6 NAT policy by uuid destructive - `sonicwall_sonicos.nat_policies_ipv6.patch_by_uuid` Patch IPv6 NAT policy by uuid write - and 1 more in this area **Route policies ipv4 7** - `sonicwall_sonicos.route_policies_ipv4.create` Create IPv4 route policys write - `sonicwall_sonicos.route_policies_ipv4.get_by_uuid` Get IPv4 route policy by uuid read - `sonicwall_sonicos.route_policies_ipv4.list` List IPv4 route policys read - `sonicwall_sonicos.route_policies_ipv4.update` Update IPv4 route policys write - `sonicwall_sonicos.route_policies_ipv4.delete_by_uuid` Delete IPv4 route policy by uuid destructive - `sonicwall_sonicos.route_policies_ipv4.patch_by_uuid` Patch IPv4 route policy by uuid write - and 1 more in this area **Route policies ipv6 7** - `sonicwall_sonicos.route_policies_ipv6.create` Create IPv6 route policys write - `sonicwall_sonicos.route_policies_ipv6.get_by_uuid` Get IPv6 route policy by uuid read - `sonicwall_sonicos.route_policies_ipv6.list` List IPv6 route policys read - `sonicwall_sonicos.route_policies_ipv6.update` Update IPv6 route policys write - `sonicwall_sonicos.route_policies_ipv6.delete_by_uuid` Delete IPv6 route policy by uuid destructive - `sonicwall_sonicos.route_policies_ipv6.patch_by_uuid` Patch IPv6 route policy by uuid write - and 1 more in this area **VPN site to site ipv4 7** - `sonicwall_sonicos.vpn_site_to_site_ipv4.create` Create IPv4 site-to-site VPN policys write - `sonicwall_sonicos.vpn_site_to_site_ipv4.get_by_name` Get IPv4 site-to-site VPN policy by name read - `sonicwall_sonicos.vpn_site_to_site_ipv4.list` List IPv4 site-to-site VPN policys read - `sonicwall_sonicos.vpn_site_to_site_ipv4.update` Update IPv4 site-to-site VPN policys write - `sonicwall_sonicos.vpn_site_to_site_ipv4.delete_by_name` Delete IPv4 site-to-site VPN policy by name destructive - `sonicwall_sonicos.vpn_site_to_site_ipv4.patch_by_name` Patch IPv4 site-to-site VPN policy by name write - and 1 more in this area **VPN site to site ipv6 7** - `sonicwall_sonicos.vpn_site_to_site_ipv6.create` Create IPv6 site-to-site VPN policys write - `sonicwall_sonicos.vpn_site_to_site_ipv6.get_by_name` Get IPv6 site-to-site VPN policy by name read - `sonicwall_sonicos.vpn_site_to_site_ipv6.list` List IPv6 site-to-site VPN policys read - `sonicwall_sonicos.vpn_site_to_site_ipv6.update` Update IPv6 site-to-site VPN policys write - `sonicwall_sonicos.vpn_site_to_site_ipv6.delete_by_name` Delete IPv6 site-to-site VPN policy by name destructive - `sonicwall_sonicos.vpn_site_to_site_ipv6.patch_by_name` Patch IPv6 site-to-site VPN policy by name write - and 1 more in this area **VPN tunnel interfaces ipv4 7** - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.create` Create IPv4 tunnel-interface VPN policys write - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.get_by_name` Get IPv4 tunnel-interface VPN policy by name read - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.list` List IPv4 tunnel-interface VPN policys read - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.update` Update IPv4 tunnel-interface VPN policys write - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.delete_by_name` Delete IPv4 tunnel-interface VPN policy by name destructive - `sonicwall_sonicos.vpn_tunnel_interfaces_ipv4.patch_by_name` Patch IPv4 tunnel-interface VPN policy by name write - and 1 more in this area **Interfaces ipv6 6** - `sonicwall_sonicos.interfaces_ipv6.get_by_name` Get IPv6 interface by name read - `sonicwall_sonicos.interfaces_ipv6.list` List IPv6 interfaces read - `sonicwall_sonicos.interfaces_ipv6.update` Update IPv6 interfaces write - `sonicwall_sonicos.interfaces_ipv6.update_by_name` Replace IPv6 interface by name write - `sonicwall_sonicos.interfaces_ipv6.delete_by_name` Delete IPv6 interface by name destructive - `sonicwall_sonicos.interfaces_ipv6.patch_by_name` Patch IPv6 interface by name write **Cloud secure edge 4** - `sonicwall_sonicos.cloud_secure_edge.connectors` List Cloud Secure Edge connectors read - `sonicwall_sonicos.cloud_secure_edge.get` Get Cloud Secure Edge settings read - `sonicwall_sonicos.cloud_secure_edge.synchronize` Synchronize Cloud Secure Edge write - `sonicwall_sonicos.cloud_secure_edge.update` Update Cloud Secure Edge settings write **Switches 4** - `sonicwall_sonicos.switches.create` Create managed switchs write - `sonicwall_sonicos.switches.info` Get managed switch information read - `sonicwall_sonicos.switches.list` List managed switchs read - `sonicwall_sonicos.switches.update` Update managed switchs write **Clearpass servers 3** - `sonicwall_sonicos.clearpass_servers.create` Create ClearPass servers write - `sonicwall_sonicos.clearpass_servers.list` List ClearPass servers read - `sonicwall_sonicos.clearpass_servers.update` Update ClearPass servers write **Dynamic external objects 3** - `sonicwall_sonicos.dynamic_external_objects.create` Create dynamic external objects write - `sonicwall_sonicos.dynamic_external_objects.list` List dynamic external objects read - `sonicwall_sonicos.dynamic_external_objects.update` Update dynamic external objects write **NTP servers 3** - `sonicwall_sonicos.ntp_servers.create` Create NTP servers write - `sonicwall_sonicos.ntp_servers.list` List NTP servers read - `sonicwall_sonicos.ntp_servers.update` Update NTP servers write **Radius accounting servers 3** - `sonicwall_sonicos.radius_accounting_servers.create` Create RADIUS accounting servers write - `sonicwall_sonicos.radius_accounting_servers.list` List RADIUS accounting servers read - `sonicwall_sonicos.radius_accounting_servers.update` Update RADIUS accounting servers write **Radius servers 3** - `sonicwall_sonicos.radius_servers.create` Create RADIUS servers write - `sonicwall_sonicos.radius_servers.list` List RADIUS servers read - `sonicwall_sonicos.radius_servers.update` Update RADIUS servers write **Session 3** - `sonicwall_sonicos.session.config_mode` Enter configuration mode write - `sonicwall_sonicos.session.login` Log in (start an API session) write - `sonicwall_sonicos.session.logout` Log out (end the API session) destructive **SNMP users 3** - `sonicwall_sonicos.snmp_users.create` Create SNMPv3 users write - `sonicwall_sonicos.snmp_users.list` List SNMPv3 users read - `sonicwall_sonicos.snmp_users.update` Update SNMPv3 users write **Sonicpoint profiles 3** - `sonicwall_sonicos.sonicpoint_profiles.create` Create SonicPoint provisioning profiles write - `sonicwall_sonicos.sonicpoint_profiles.list` List SonicPoint provisioning profiles read - `sonicwall_sonicos.sonicpoint_profiles.update` Update SonicPoint provisioning profiles write **Sonicpoint vap objects 3** - `sonicwall_sonicos.sonicpoint_vap_objects.create` Create SonicPoint virtual access point objects write - `sonicwall_sonicos.sonicpoint_vap_objects.list` List SonicPoint virtual access point objects read - `sonicwall_sonicos.sonicpoint_vap_objects.update` Update SonicPoint virtual access point objects write **Sonicpoint vap profiles 3** - `sonicwall_sonicos.sonicpoint_vap_profiles.create` Create SonicPoint virtual access point profiles write - `sonicwall_sonicos.sonicpoint_vap_profiles.list` List SonicPoint virtual access point profiles read - `sonicwall_sonicos.sonicpoint_vap_profiles.update` Update SonicPoint virtual access point profiles write **SSO agents 3** - `sonicwall_sonicos.sso_agents.create` Create SSO agents write - `sonicwall_sonicos.sso_agents.list` List SSO agents read - `sonicwall_sonicos.sso_agents.update` Update SSO agents write **SSO radius accounting clients 3** - `sonicwall_sonicos.sso_radius_accounting_clients.create` Create SSO RADIUS accounting clients write - `sonicwall_sonicos.sso_radius_accounting_clients.list` List SSO RADIUS accounting clients read - `sonicwall_sonicos.sso_radius_accounting_clients.update` Update SSO RADIUS accounting clients write **SSO terminal services agents 3** - `sonicwall_sonicos.sso_terminal_services_agents.create` Create SSO Terminal Services agents write - `sonicwall_sonicos.sso_terminal_services_agents.list` List SSO Terminal Services agents read - `sonicwall_sonicos.sso_terminal_services_agents.update` Update SSO Terminal Services agents write **SSO third party API clients 3** - `sonicwall_sonicos.sso_third_party_api_clients.create` Create SSO third-party API clients write - `sonicwall_sonicos.sso_third_party_api_clients.list` List SSO third-party API clients read - `sonicwall_sonicos.sso_third_party_api_clients.update` Update SSO third-party API clients write **Switch users 3** - `sonicwall_sonicos.switch_users.create` Create switch-controller users write - `sonicwall_sonicos.switch_users.list` List switch-controller users read - `sonicwall_sonicos.switch_users.update` Update switch-controller users write **Tacacs accounting servers 3** - `sonicwall_sonicos.tacacs_accounting_servers.create` Create TACACS+ accounting servers write - `sonicwall_sonicos.tacacs_accounting_servers.list` List TACACS+ accounting servers read - `sonicwall_sonicos.tacacs_accounting_servers.update` Update TACACS+ accounting servers write **Tacacs servers 3** - `sonicwall_sonicos.tacacs_servers.create` Create TACACS+ servers write - `sonicwall_sonicos.tacacs_servers.list` List TACACS+ servers read - `sonicwall_sonicos.tacacs_servers.update` Update TACACS+ servers write **Wireless vap objects 3** - `sonicwall_sonicos.wireless_vap_objects.create` Create wireless virtual access point objects write - `sonicwall_sonicos.wireless_vap_objects.list` List wireless virtual access point objects read - `sonicwall_sonicos.wireless_vap_objects.update` Update wireless virtual access point objects write **Wireless vap profiles 3** - `sonicwall_sonicos.wireless_vap_profiles.create` Create wireless virtual access point profiles write - `sonicwall_sonicos.wireless_vap_profiles.list` List wireless virtual access point profiles read - `sonicwall_sonicos.wireless_vap_profiles.update` Update wireless virtual access point profiles write **Administration 2** - `sonicwall_sonicos.administration.get` Get global administration settings read - `sonicwall_sonicos.administration.update` Update global administration settings write **Botnet 2** - `sonicwall_sonicos.botnet.get` Get botnet filter settings read - `sonicwall_sonicos.botnet.update` Update botnet filter settings write **Clearpass 2** - `sonicwall_sonicos.clearpass.get` Get ClearPass network access control settings read - `sonicwall_sonicos.clearpass.update` Update ClearPass network access control settings write **Config 2** - `sonicwall_sonicos.config.commit` Commit pending configuration write - `sonicwall_sonicos.config.pending` Get pending configuration changes read **FTP 2** - `sonicwall_sonicos.ftp.get` Get FTP log/report export settings read - `sonicwall_sonicos.ftp.update` Update FTP log/report export settings write **Log automation 2** - `sonicwall_sonicos.log_automation.get` Get log automation (email, syslog) settings read - `sonicwall_sonicos.log_automation.update` Update log automation (email, syslog) settings write **Log aws 2** - `sonicwall_sonicos.log_aws.get` Get AWS logging settings read - `sonicwall_sonicos.log_aws.update` Update AWS logging settings write **Packet monitor 2** - `sonicwall_sonicos.packet_monitor.get` Get packet monitor settings read - `sonicwall_sonicos.packet_monitor.update` Update packet monitor settings write **Reporting 2** - `sonicwall_sonicos.reporting.high_availability` Get high-availability status read - `sonicwall_sonicos.reporting.wwan` Get WWAN (cellular) status read **Security services 2** - `sonicwall_sonicos.security_services.get` Get security services settings read - `sonicwall_sonicos.security_services.update` Update security services settings write **SFR mailing 2** - `sonicwall_sonicos.sfr_mailing.get` Get AppFlow SFR mailing settings read - `sonicwall_sonicos.sfr_mailing.update` Update AppFlow SFR mailing settings write **Sonicos API settings 2** - `sonicwall_sonicos.sonicos_api_settings.get` Get SonicOS API settings read - `sonicwall_sonicos.sonicos_api_settings.update` Update SonicOS API settings write **Sonicpoints 2** - `sonicwall_sonicos.sonicpoints.list` List SonicPoint access points read - `sonicwall_sonicos.sonicpoints.update` Update SonicPoint access points write **SSL VPN server 2** - `sonicwall_sonicos.ssl_vpn_server.get` Get SSL VPN server settings read - `sonicwall_sonicos.ssl_vpn_server.update` Update SSL VPN server settings write **Switch radius 2** - `sonicwall_sonicos.switch_radius.list` List switch-controller RADIUS settings read - `sonicwall_sonicos.switch_radius.update` Update switch-controller RADIUS settings write **System 2** - `sonicwall_sonicos.system.restart` Restart the firewall destructive - `sonicwall_sonicos.system.version` Get firmware version and model read **VPN group VPN ipv4 2** - `sonicwall_sonicos.vpn_group_vpn_ipv4.list` List IPv4 GroupVPN policys read - `sonicwall_sonicos.vpn_group_vpn_ipv4.update` Update IPv4 GroupVPN policys write **Wireless radio 2** - `sonicwall_sonicos.wireless_radio.get` Get wireless radio settings read - `sonicwall_sonicos.wireless_radio.update` Update wireless radio settings write **Cli 1** - `sonicwall_sonicos.cli.execute` Run SonicOS CLI commands destructive **Firmware 1** - `sonicwall_sonicos.firmware.boot_uploaded` Boot uploaded firmware destructive **Routing 1** - `sonicwall_sonicos.routing.advanced_routing_data` Get advanced routing data read **VPN policies 1** - `sonicwall_sonicos.vpn_policies.list_all` List all VPN policies read This index shows a sample of each area. All 349 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The SonicWall SonicOS MCP server, answered. **Is there a SonicWall SonicOS MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 349 SonicWall SonicOS actions across local users, address groups ipv4, address groups ipv6 and address objects FQDN, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SonicWall SonicOS. **What do I need to connect SonicWall SonicOS?** SonicOS administrator username (e.g. admin, or a dedicated full or read-only admin) and That administrator's password. Plus your host. The free call account { op: "connections.requirements", service: "sonicwall_sonicos" } lists exactly what to paste. **Can an AI agent delete or change things in SonicWall SonicOS?** Only if its key allows it, and only with an explicit confirmation. 45 SonicWall SonicOS actions are destructive, including run SonicOS CLI commands, log out (end the API session) and restart the firewall. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my SonicWall SonicOS API limit?** actionlake paces every call to the limits in the SonicWall SonicOS service file: 120 calls a minute per connection. Repeated reads are answered from cache (111 SonicWall SonicOS actions can be), which never reaches SonicWall SonicOS. **What does a SonicWall SonicOS action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (349 SonicWall SonicOS actions page). Cache hits, searches, dry runs and calls SonicWall SonicOS refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which SonicWall SonicOS API does it cover?** The SonicOS API (/api/sonicos), SonicOS 7.x at your SonicWall SonicOS instance's API base URL, which you enter when connecting. It is built from SonicWall SonicOS's documentation as read on 23 October 2026. 349 actions in 71 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my SonicWall SonicOS data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SonicWall SonicOS credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like SonicWall SonicOS Shares the most action names with - [Fortinet FortiGate 4](https://actionlake.com/connectors/fortinet-fortigate) - [KnowBe4 3](https://actionlake.com/connectors/knowbe4) - [Cisco Umbrella 3](https://actionlake.com/connectors/cisco-umbrella) - [Progress ShareFile 2](https://actionlake.com/connectors/progress-sharefile) - [ImmyBot 2](https://actionlake.com/connectors/immybot) - [runZero 2](https://actionlake.com/connectors/runzero) Joins with, on shared entities - [Cloudflare 2](https://actionlake.com/connectors/cloudflare) - [Palo Alto Networks Strata Cloud Manager / Prisma Access 2](https://actionlake.com/connectors/palo-alto-networks-strata-cloud-manager-prisma-access) - [Tenable Vulnerability Management 2](https://actionlake.com/connectors/tenable-vulnerability-management) - [HashiCorp Vault 1](https://actionlake.com/connectors/hashicorp-vault) - [Snyk 1](https://actionlake.com/connectors/snyk) - [VMware Carbon Black Cloud 1](https://actionlake.com/connectors/vmware-carbon-black-cloud) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by SonicWall SonicOS; the name is the vendor's own. Counts are from the SonicWall SonicOS service file, version 1.0.0. ## Give your agent SonicWall SonicOS today. [Connect SonicWall SonicOS free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/sonicwall-sonicos More: https://actionlake.com/llms.txt