"WireGuard" matching MCP tools:

• create_tunnelA

  AnchoredIPA

  Provision a peer and return its WireGuard configuration. Three routing modes, and the right one depends on the machine. source (the default) sends only traffic from the leased address through us and leaves the default route alone — but it is written with wg-quick PostUp rules that invoke `ip`, so it runs on Linux under wg-quick and nowhere else. On macOS it aborts and deletes the interface. full works in every client but claims the default route, so it cannot run beside an always-on corporate VPN. destinations routes only the addresses you name. It needs no PostUp and takes no default route, so it runs in any client on any platform, and it matches what is usually being bought — one partner seeing a fixed address. It survives beside a VPN that installs a default route, but not one that captures traffic below the routing table. It cannot receive inbound connections from anywhere but those destinations.

  ConnectorNo auth

• deploy_vpnA

  mcpA

  Stands up a redu VPN gateway (WireGuard tunnelled over wstunnel on WSS/443) on your PRIVATE network, so you (or your team) can reach the private IPs of the VMs you deployed on redu, over a single https endpoint — no UDP, no extra ports. This is the TENANT VPN for reaching your OWN deployed resources; it is NOT a general internet VPN. GUARDRAIL: the first call does NOT deploy — it returns the plan + hourly cost for approval, because it creates a BILLED VM. Show the user, get their explicit 'go', then call again with confirm:true (required even in yolo mode). The gateway asset is redu's, deployed onto YOUR VM (you can SSH in to read it). Fresh WireGuard keys are generated per deploy; the client PRIVATE key is returned ONCE and is never stored server-side.

  ConnectorNo auth

• wireguard_mtuA

  calc.engineerA

  Calculate the optimal MTU for a WireGuard VPN tunnel interface with a detailed overhead breakdown. Accounts for WireGuard header (32 bytes), outer IP header (20 bytes IPv4 or 40 bytes IPv6), UDP header (8 bytes), and optional PPPoE encapsulation (8 bytes). Prevents fragmentation and PMTUD black holes by computing the maximum inner packet size that fits within the physical link MTU. Essential for WireGuard setup on residential ISP connections (PPPoE), IPv6 tunnels, and any VPN where incorrect MTU causes slow or stalled connections.

  ConnectorNo auth

• list_vpn_plansA

  BuyUKeSIM — eSIM & UK Number MCPA

  List the BuyUKeSIM VPN access plans (7/15/30/90/180/365 days, USD price) and the server countries currently available, with protocols (WireGuard, OpenVPN, VLESS). VPN access, no account, paid in crypto. Read-only; buy a plan with purchase_vpn.

  ConnectorNo auth

• provision_resumeA

  EmailMCPB

  Resume provisioning from where you left off. Automatically detects the current phase and advances: WireGuard connection → DNS setup → TLS → verification. Run this after each user action (connecting WireGuard, adding DNS records).

  ConnectorNo auth

• get_vpn_configA

  BuyUKeSIM — eSIM & UK Number MCPA

  Fetch a VPN client configuration for one server on a VPN order. Needs the order_id and its short lookup/magic code (both returned by purchase_vpn), a protocol (wireguard, openvpn or vless) and a server_id from list_vpn_plans. Returns the config file text, ready to import into any standard client. No wallet key needed - the order code is the credential. Call it again for another server or protocol; there is no limit.

  ConnectorNo auth

• provision_startA

  EmailMCPB

  Phase 1: Create a cloud VPS with dedicated IP. Generates WireGuard config. Returns the IP and instructions to connect. Supports DigitalOcean, Vultr, Hetzner, OVH.

  ConnectorNo auth

• request_email_ipA

  EmailMCPB

  Request a dedicated WireGuard IP for email sending. Submits to the provisioning queue.

  ConnectorNo auth

• check_ip_statusA

  EmailMCPB

  Check the status of a pending WireGuard IP provisioning request

  ConnectorNo auth