Atlas / MCP servers / lidless-labs / Adguardctrl

AdguardctrlSAFE

Name: Adguardctrl
Author: lidless-labs

mcp/lidless-labs/adguardctrl

MCP server by lidless-labs · ad blocking · adguard home · dns · Audited 2026-10-12

One bad call can take down your DNS filtering. adguardctrl gates every AdGuard Home write behind confirm and destructive flags. CLI plus MCP adapter, no daemon.

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

1 1r · 0w · 0d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

adguardctrl

An operator control CLI for AdGuard Home, with an MCP adapter for assistant workflows and back-compatible launchers.

Website · Quickstart

adguardctrl is an operator control CLI for AdGuard Home, the self-hosted DNS sinkhole. It gives shell, cron, CI, and assistant workflows one typed control surface for inspecting network-wide DNS filtering across one or more boxes. The npm package remains @solomonneas/adguard-mcp for compatibility and still ships the back-compatible adguard-mcp bin; new MCP launchers can start the adapter with adguardctrl mcp.

What it does

adguardctrl speaks the AdGuard Home API across one or more instances, plus optional AdGuardHome Sync status and control. The direct CLI is read-only today, covering server status, stats, the DNS query log, filter lists, named clients, DNS rewrites, DNS and TLS config, DHCP status, and a check-host lookup that shows exactly what AdGuard would do with a hostname.

For assistant clients, adguardctrl mcp starts the stdio MCP adapter used by Claude Desktop, Claude Code, Codex CLI, OpenClaw, Hermes, and other Model Context Protocol clients. That adapter keeps

Read from source at commit 362784dbf9a9OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add adguard-mcp -- npx -y @solomonneas/[email protected]

claude-desktop

{
  "mcpServers": {
    "adguard-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@solomonneas/[email protected]"
      ]
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`AdGuard`	read	AdGuard Home control: status/stats/query log + user-rule and filter-list management + per-client service blocks. Multi-instance via env. Three-tier write gating.

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (2 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (12)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/tools/access_config_diagnostics.test.ts:4

import { AdGuardClient } from "../../src/adguard-client.ts";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/tools/access_config_diagnostics.test.ts:5

import { WriteGateError } from "../../src/gates.ts";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/tools/access_config_diagnostics.test.ts:6

import { createAdguardGetAccessListTool } from "../../src/tools/adguard_get_access_list.ts";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/tools/access_config_diagnostics.test.ts:7

import { createAdguardSetAccessListTool } from "../../src/tools/adguard_set_access_list.ts";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/tools/access_config_diagnostics.test.ts:8

import { createAdguardGetQuerylogConfigTool } from "../../src/tools/adguard_get_querylog_config.ts";