Skip to content

Releases: akari-sora/synology-nas-cli

Release list

synology-nas-cli 1.0.0

synology-nas-cli 1.0.0 Latest
Latest

Choose a tag to compare

View all tags
@akari-sora akari-sora released this 30 Oct 09:53
v1.0.0
453e94d

First public release of nas: a zero-dependency Python CLI and MCP server for Synology DSM 7, with a one-command audit and fix for the 2026 C3RB3R / .L0CK3D ransomware campaign.

Hand it to your agent: paste this into Claude Code, Codex, Cursor, Gemini CLI, OpenCode or Grok Bot:

Use https://gitlab.com/aa22396584/synology-nas-cli to audit and fix my Synology NAS at https://192.0.2.10:5001. Follow docs/AGENT-RUNBOOK.md.

What's in it

  • Audit and one-command fix (nas incident, nas incident fix): DSM version vs. SA-26:13, vulnerable packages (SA-26:14), firewall, QuickConnect, UPnP port forwards, public ports, external and failed sign-ins, AutoBlock, SMB1, the built-in admin, snapshot schedules, the immutable-snapshot trap on models without WORM, ransom notes, and CVE-2024-10441 exploit attempts. Every change is shown as before -> after with the DSM API calls and UI path, applied in order, then read back.
  • Indicators of compromise (nas incident --deep): one read-only root collector checks cron, /bin, accounts, SSH keys, processes and root-only logs.
  • Files being encrypted right now (nas incident contain, nas incident rescue): freeze the encryptor processes, pause sync/backup/containers, capture memory and recover keys with c3rb3r-rescue.
  • Monitoring (nas alert, nas alert-deploy): installs a 10-minute check on the NAS that pushes changes to any webhook (generic JSON, Grok Bot routines) and points DSM's own notifications at the same URL.
  • Everyday operations: status, health, logs, net, services, pkg, volume, tailscale, upgrade (manual DSM update from Synology's servers), and raw api.
  • For agents: --json everywhere, --no-input, documented exit codes and JSON Schemas, nas setup / nas doctor onboarding, a stdio MCP server (nas mcp), two skills, llms.txt, and a Grok Bot guide.
  • Credentials your way: 1Password (op), any password command, the OS keychain, environment variables, or a prompt; 2-step verification with trusted-device tokens; DSM certificate pinned on first use.

Install

git clone https://gitlab.com/aa22396584/synology-nas-cli.git && cd synology-nas-cli && ./bin/nas --version
# or
pip install https://gitlab.com/api/v4/projects/aa22396584%2Fsynology-nas-cli/packages/generic/synology-nas-cli/1.0.0/synology_nas_cli-1.0.0-py3-none-any.whl

Python 3.8+ (standard library only), macOS, Linux, Windows. Docs: README, docs/AGENT-RUNBOOK.md, docs/INCIDENT-C3RB3R.md, docs/HARDENING.md, docs/TROUBLESHOOTING.md, docs/GROK-BOT.md.

Not affiliated with Synology Inc. MIT license.

Downloads and release page (canonical): https://gitlab.com/aa22396584/synology-nas-cli/-/releases/v1.0.0

Assets 2
Loading