Read-only MCP on pfrest so I stop screenshotting the webGUI for AI help

Same loop every time: pfSense webGUI, firewall, aliases, DHCP, WireGuard, screenshot, paste, agent wants one more page.

I put a read-only MCP server on top of pfSense-pkg-RESTAPI (pfrest):

• X-API-Key
• GET only
• Redacts WireGuard private/preshared keys, passwords, bcrypt hashes, etc.
• System, interfaces, gateways, firewall/aliases, NAT, DHCP, DNS overrides, WireGuard, ARP

Package Read only on, Key auth only, dedicated user with GET privileges. Prefer pfrest 2.9.0 or newer (GHSA-8q8g).

I can DM the GitHub link. What's the worst "just open the GUI and check" ask you get from an agent?