@mhdd_24/netextender-mcp

MCP server for SonicWall NetExtender on Windows. Use it from Cursor or any MCP client to check VPN status, list profiles, connect, and disconnect via nxcli.exe.

Same layout as @mhdd_24/timelog-mcp: config-driven tools, env defaults, stdio MCP server.

Full documentation: docs/WIKI.md

Tools

| Tool | Purpose (timelog equivalent) | |------|------------------------------| | vpn_status | Check connection (whoami) | | list_vpn_profiles | List saved profiles (list_time_types) | | vpn_connect | Connect VPN (log_time) | | vpn_disconnect | Disconnect VPN |

Prerequisites

| Requirement | Notes | |-------------|--------| | Windows | Uses SonicWall nxcli.exe (NetExtender 10.3+) | | NetExtender installed | Default path: C:\Program Files\SonicWall\SSL-VPN\NetExtender\nxcli.exe | | VPN credentials | Set in MCP env or pass per tool call |

Project layout

netextender-mcp/
  src/
    index.ts
    env.ts
    config/netextender.config.ts
    interfaces/netextender.ts
    services/netextenderCliService.ts
    tools/
      index.ts
      statusTool.ts
      listProfilesTool.ts
      connectTool.ts
      disconnectTool.ts
  package.json
  tsconfig.json
  README.md

Local development

cd netextender-mcp
npm install
npm run build
npm run dev

Copy .env.example to .env for local testing.

Configure Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "netextender": {
      "command": "node",
      "args": ["C:/codeBase/netextender-mcp/dist/index.js"],
      "env": {
        "NETEXTENDER_CLI": "C:/Program Files/SonicWall/SSL-VPN/NetExtender/nxcli.exe",
        "NETEXTENDER_PROFILE": "<your-profile>",
        "NETEXTENDER_SERVER": "host:port",
        "NETEXTENDER_DOMAIN": "<your-domain>",
        "NETEXTENDER_USERNAME": "<your-vpn-username>",
        "NETEXTENDER_PASSWORD": "<your-vpn-password>",
        "NETEXTENDER_ALWAYS_TRUST": "true"
      }
    }
  }
}

After publishing to npm:

"netextender": {
  "command": "npx",
  "args": ["-y", "@mhdd_24/netextender-mcp"],
  "env": { ... }
}

Restart Cursor after saving.

Environment variables

| Variable | Required | Purpose | |----------|----------|---------| | NETEXTENDER_CLI | No* | Path to nxcli.exe (auto-detected) | | NETEXTENDER_PROFILE | No | Default connection profile name | | NETEXTENDER_SERVER | No | Default host:port | | NETEXTENDER_DOMAIN | No | Default VPN domain | | NETEXTENDER_USERNAME | No | Default username | | NETEXTENDER_PASSWORD | No | Default password | | NETEXTENDER_ALWAYS_TRUST | No | true to pass --always-trust |

* Required if NetExtender is not in the default install path.

Never commit VPN passwords. Keep them in MCP env only.

Usage in chat

Run vpn_status on the netextender MCP.

vpn_connect using profile <your-profile>.

vpn_disconnect

list_vpn_profiles

Notes

• nxcli connection list may return current session status while connected (SonicWall CLI behavior).
• OTP / Duo / SAML flows may need interactive approval outside MCP.
• Uses nxcli from NetExtender 10.3+ (not legacy necli.exe).

License

ISC