WAC510 MCP

A local FastMCP server for one NETGEAR WAC510 access point. It talks directly to the stock firmware's local HTTPS interface and keeps one asynchronous connection pool open for efficient calls.

The WAC510 protocol is undocumented. This implementation was validated against production firmware V9.9.6.8.

The server targets one AP per process. It does not use NETGEAR Insight, SSH, or SNMP.

Requirements

• Python 3.14.7
• uv
• A WAC510 reachable through its local management URL

Expected startup failures are rendered as concise Rich panels with corrective guidance. Unexpected programming errors retain their tracebacks.

Install the locked environment:

uv sync

After the first PyPI release, run the server without cloning the repository:

uvx wac510-mcp

Run

Start the local OAuth-protected HTTP server:

uv run wac510-mcp

Connect your MCP client to:

http://127.0.0.1:8000/mcp

The MCP client's OAuth flow opens a page titled WAC510 MCP. Enter the access point URL, username, password, and optional connection settings. The server verifies that the device is a WAC510 before authorization completes.

Example URL-based MCP configuration:

{
  "mcpServers": {
    "wac510": {
      "url": "http://127.0.0.1:8000/mcp"
    }
  }
}

The server always hides FastMCP's startup banner. No environment variable or launch flag is required.

Stored settings

Settings are saved under the platform's user configuration directory. On Linux, the default location is:

~/.config/wac510-mcp/

settings.enc contains the encrypted AP configuration. settings.key contains its local encryption key. Both files use owner-only permissions, and the password is never rendered back into the setup page. OAuth clients and access tokens remain in memory; after a server restart, the MCP client authenticates again and the page reuses the saved settings.

TLS verification defaults to off because the AP normally uses a self-signed certificate. The setup page can enable verification or specify a private CA bundle.

Safety

Read tools run immediately. Configuration writes require confirm=true. Disruptive operations require the exact tokens returned in their tool descriptions:

• REBOOT
• RESTORE_CONFIGURATION
• UPGRADE_FIRMWARE
• FACTORY_RESET

The raw tools make the server maximally capable. They expose the AP's private JSON protocol, so inspect a read payload before applying it.

For example, read an arbitrary firmware field with raw_query:

{
  "payload": {
    "system": {
      "basicSettings": {
        "apName": ""
      }
    }
  }
}

Pass the returned hierarchy with changed leaf values to apply_configuration first without confirmation. Review its redacted preview, then repeat the call with confirm=true.

Tools

• list_capabilities and list_endpoints describe the reverse-engineered surface.
• device_info, list_clients, radio_status, and traffic_statistics provide common reads.
• query_capabilities reads any selection of 18 management domains with bounded concurrency.
• raw_query accepts any /socketCommunication read selector.
• apply_configuration applies arbitrary configuration after a preview and confirmation.
• raw_request calls any discovered JSON endpoint with endpoint-specific confirmation.
• download_file and upload_file support logs, configuration, packet captures, ACL files, restore, and firmware files.
• reboot and factory_reset require exact confirmation tokens.

Development

uv run pytest
uv run mypy src tests

The live test suite is read-only and opt-in. Its environment variables exist only for automated testing; normal users configure the server through OAuth:

WAC510_LIVE_TEST=1 uv run pytest tests/test_live_readonly.py -q