Search / io.github.hexamatic/pihole-mcp
Pi-hole MCP Server
L0· runs locallyManage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.
v0.9.0 · active · repository · website · descriptor JSON · versions
Search / io.github.hexamatic/pihole-mcp
L0· runs locallyManage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.
v0.9.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"pihole-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"PIHOLE_URL",
"-e",
"PIHOLE_PASSWORD",
"-e",
"PIHOLE_READ_ONLY",
"-e",
"PIHOLE_TLS_SKIP_VERIFY",
"-e",
"PIHOLE_REQUEST_TIMEOUT",
"-e",
"PIHOLE_MAX_RETRIES",
"-e",
"PIHOLE_RETRY_MAX_DELAY",
"ghcr.io/hexamatic/pihole-mcp:0.9.0"
],
"env": {
"PIHOLE_URL": "${PIHOLE_URL}",
"PIHOLE_PASSWORD": "${PIHOLE_PASSWORD}",
"PIHOLE_READ_ONLY": "false",
"PIHOLE_TLS_SKIP_VERIFY": "false",
"PIHOLE_REQUEST_TIMEOUT": "30s",
"PIHOLE_MAX_RETRIES": "3",
"PIHOLE_RETRY_MAX_DELAY": "8s"
}
}
}
}claude mcp add pihole-mcp -e "PIHOLE_URL=${PIHOLE_URL}" -e "PIHOLE_PASSWORD=${PIHOLE_PASSWORD}" -e "PIHOLE_READ_ONLY=false" -e "PIHOLE_TLS_SKIP_VERIFY=false" -e "PIHOLE_REQUEST_TIMEOUT=30s" -e "PIHOLE_MAX_RETRIES=3" -e "PIHOLE_RETRY_MAX_DELAY=8s" -- docker run -i --rm -e PIHOLE_URL -e PIHOLE_PASSWORD -e PIHOLE_READ_ONLY -e PIHOLE_TLS_SKIP_VERIFY -e PIHOLE_REQUEST_TIMEOUT -e PIHOLE_MAX_RETRIES -e PIHOLE_RETRY_MAX_DELAY ghcr.io/hexamatic/pihole-mcp:0.9.0[mcp_servers.pihole-mcp]
command = "docker"
args = ["run", "-i", "--rm", "-e", "PIHOLE_URL", "-e", "PIHOLE_PASSWORD", "-e", "PIHOLE_READ_ONLY", "-e", "PIHOLE_TLS_SKIP_VERIFY", "-e", "PIHOLE_REQUEST_TIMEOUT", "-e", "PIHOLE_MAX_RETRIES", "-e", "PIHOLE_RETRY_MAX_DELAY", "ghcr.io/hexamatic/pihole-mcp:0.9.0"]
env = { "PIHOLE_URL" = "${PIHOLE_URL}", "PIHOLE_PASSWORD" = "${PIHOLE_PASSWORD}", "PIHOLE_READ_ONLY" = "false", "PIHOLE_TLS_SKIP_VERIFY" = "false", "PIHOLE_REQUEST_TIMEOUT" = "30s", "PIHOLE_MAX_RETRIES" = "3", "PIHOLE_RETRY_MAX_DELAY" = "8s" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"pihole-mcp": {
"type": "local",
"command": [
"docker",
"run",
"-i",
"--rm",
"-e",
"PIHOLE_URL",
"-e",
"PIHOLE_PASSWORD",
"-e",
"PIHOLE_READ_ONLY",
"-e",
"PIHOLE_TLS_SKIP_VERIFY",
"-e",
"PIHOLE_REQUEST_TIMEOUT",
"-e",
"PIHOLE_MAX_RETRIES",
"-e",
"PIHOLE_RETRY_MAX_DELAY",
"ghcr.io/hexamatic/pihole-mcp:0.9.0"
],
"enabled": true,
"environment": {
"PIHOLE_URL": "{env:PIHOLE_URL}",
"PIHOLE_PASSWORD": "{env:PIHOLE_PASSWORD}",
"PIHOLE_READ_ONLY": "false",
"PIHOLE_TLS_SKIP_VERIFY": "false",
"PIHOLE_REQUEST_TIMEOUT": "30s",
"PIHOLE_MAX_RETRIES": "3",
"PIHOLE_RETRY_MAX_DELAY": "8s"
}
}
}
}{
"mcpServers": {
"pihole-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"PIHOLE_URL",
"-e",
"PIHOLE_PASSWORD",
"-e",
"PIHOLE_READ_ONLY",
"-e",
"PIHOLE_TLS_SKIP_VERIFY",
"-e",
"PIHOLE_REQUEST_TIMEOUT",
"-e",
"PIHOLE_MAX_RETRIES",
"-e",
"PIHOLE_RETRY_MAX_DELAY",
"ghcr.io/hexamatic/pihole-mcp:0.9.0"
],
"env": {
"PIHOLE_URL": "${PIHOLE_URL}",
"PIHOLE_PASSWORD": "${PIHOLE_PASSWORD}",
"PIHOLE_READ_ONLY": "false",
"PIHOLE_TLS_SKIP_VERIFY": "false",
"PIHOLE_REQUEST_TIMEOUT": "30s",
"PIHOLE_MAX_RETRIES": "3",
"PIHOLE_RETRY_MAX_DELAY": "8s"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=pihole-mcp&config=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%3D%3D"
}{
"servers": {
"pihole-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"PIHOLE_URL",
"-e",
"PIHOLE_PASSWORD",
"-e",
"PIHOLE_READ_ONLY",
"-e",
"PIHOLE_TLS_SKIP_VERIFY",
"-e",
"PIHOLE_REQUEST_TIMEOUT",
"-e",
"PIHOLE_MAX_RETRIES",
"-e",
"PIHOLE_RETRY_MAX_DELAY",
"ghcr.io/hexamatic/pihole-mcp:0.9.0"
],
"env": {
"PIHOLE_URL": "${PIHOLE_URL}",
"PIHOLE_PASSWORD": "${PIHOLE_PASSWORD}",
"PIHOLE_READ_ONLY": "false",
"PIHOLE_TLS_SKIP_VERIFY": "false",
"PIHOLE_REQUEST_TIMEOUT": "30s",
"PIHOLE_MAX_RETRIES": "3",
"PIHOLE_RETRY_MAX_DELAY": "8s"
}
}
}
}{
"mcpServers": {
"pihole-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"PIHOLE_URL",
"-e",
"PIHOLE_PASSWORD",
"-e",
"PIHOLE_READ_ONLY",
"-e",
"PIHOLE_TLS_SKIP_VERIFY",
"-e",
"PIHOLE_REQUEST_TIMEOUT",
"-e",
"PIHOLE_MAX_RETRIES",
"-e",
"PIHOLE_RETRY_MAX_DELAY",
"ghcr.io/hexamatic/pihole-mcp:0.9.0"
],
"env": {
"PIHOLE_URL": "${PIHOLE_URL}",
"PIHOLE_PASSWORD": "${PIHOLE_PASSWORD}",
"PIHOLE_READ_ONLY": "false",
"PIHOLE_TLS_SKIP_VERIFY": "false",
"PIHOLE_REQUEST_TIMEOUT": "30s",
"PIHOLE_MAX_RETRIES": "3",
"PIHOLE_RETRY_MAX_DELAY": "8s"
}
}
}
}extensions:
"pihole-mcp":
enabled: true
name: "pihole-mcp"
type: stdio
cmd: "docker"
args:
- "run"
- "-i"
- "--rm"
- "-e"
- "PIHOLE_URL"
- "-e"
- "PIHOLE_PASSWORD"
- "-e"
- "PIHOLE_READ_ONLY"
- "-e"
- "PIHOLE_TLS_SKIP_VERIFY"
- "-e"
- "PIHOLE_REQUEST_TIMEOUT"
- "-e"
- "PIHOLE_MAX_RETRIES"
- "-e"
- "PIHOLE_RETRY_MAX_DELAY"
- "ghcr.io/hexamatic/pihole-mcp:0.9.0"
envs:
"PIHOLE_URL": "${PIHOLE_URL}"
"PIHOLE_PASSWORD": "${PIHOLE_PASSWORD}"
"PIHOLE_READ_ONLY": "false"
"PIHOLE_TLS_SKIP_VERIFY": "false"
"PIHOLE_REQUEST_TIMEOUT": "30s"
"PIHOLE_MAX_RETRIES": "3"
"PIHOLE_RETRY_MAX_DELAY": "8s"
timeout: 300
Placeholders to fill from your own secret store: ${PIHOLE_PASSWORD}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website ~liveness-unmeasured ~updated-39d-ago -unpinned-packages(1)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
ghcr.io/hexamatic/pihole-mcp:0.9.0 | oci | unpinned | – | PIHOLE_PASSWORD |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.hexamatic/pihole-mcp",
"icons": [
{
"src": "https://raw.githubusercontent.com/hexamatic/pihole-mcp/main/assets/logo-256.png",
"sizes": [
"256x256"
],
"mimeType": "image/png"
},
{
"src": "https://raw.githubusercontent.com/hexamatic/pihole-mcp/main/assets/logo-120.png",
"sizes": [
"120x120"
],
"mimeType": "image/png"
},
{
"src": "https://raw.githubusercontent.com/hexamatic/pihole-mcp/main/assets/logo.svg",
"sizes": [
"any"
],
"mimeType": "image/svg+xml"
}
],
"title": "Pi-hole MCP Server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.9.0",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/hexamatic/pihole-mcp:0.9.0",
"registryType": "oci",
"environmentVariables": [
{
"name": "PIHOLE_URL",
"format": "string",
"isRequired": true,
"description": "Base URL of your Pi-hole web interface. For multiple Pi-holes use PIHOLE_1_URL, PIHOLE_2_URL, ... instead.",
"placeholder": "http://192.168.1.2"
},
{
"name": "PIHOLE_PASSWORD",
"format": "string",
"isSecret": true,
"isRequired": true,
"description": "Pi-hole admin password, or an application password (recommended — bypasses TOTP 2FA)"
},
{
"name": "TZ",
"format": "string",
"description": "IANA timezone for rendered timestamps, e.g. Australia/Adelaide. Defaults to UTC in the container."
},
{
"name": "PIHOLE_READ_ONLY",
"format": "boolean",
"default": "false",
"description": "Expose only inspection tools. Every tool that can change Pi-hole is hidden and rejected if called."
},
{
"name": "PIHOLE_TLS_SKIP_VERIFY",
"format": "boolean",
"default": "false",
"description": "Set to true only for a Pi-hole serving a self-signed HTTPS certificate. A trusted certificate is the better fix."
},
{
"name": "PIHOLE_REQUEST_TIMEOUT",
"format": "string",
"default": "30s",
"description": "HTTP request timeout as a Go duration, e.g. 30s or 1m"
},
{
"name": "PIHOLE_MAX_RETRIES",
"format": "number",
"default": "3",
"description": "Retries after a transient Pi-hole API failure; 0 disables retrying"
},
{
"name": "PIHOLE_RETRY_MAX_DELAY",
"format": "string",
"default": "8s",
"description": "Upper bound on a single exponential-backoff wait, as a Go duration"
}
]
}
],
"repository": {
"id": "1202418772",
"url": "https://github.com/hexamatic/pihole-mcp",
"source": "github"
},
"websiteUrl": "https://github.com/hexamatic/pihole-mcp",
"description": "Manage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync."
}