WireGuardAutoManager is a macOS utility that enables selective routing (split tunneling) using WireGuard, with automation and minimal friction.
Stop routing your entire connection through VPN just to access a few services.
- Route specific domains through VPN only
- Automatically resolve and update IPs when bringing up the tunnel (Autonomous Mode)
- Manage domain lists: add / remove domains, import / export
- Safe execution of
wg-quickwithout requiring full sudo usage - Built-in helper for installing WireGuard tools
- Status bar (menu bar) integration
Automatically resolves domain destinations before bringing up the tunnel. This removes the need for manual IP resolution and keeps routes updated.
Add domains you want routed through VPN. Import/export domain lists. Use "Get IPs" to manually refresh resolved destinations (this updates the tunnel configuration).
Paste your existing WireGuard config:
- Open your WireGuard client
- Edit your tunnel
- Copy the full configuration
- Disconnect the tunnel
- Paste into the app and save
To start: Activate Tunnel
This app avoids repeated sudo prompts by safely configuring access.
- Creates a scoped file in:
/etc/sudoers.d/wireguardmanager - Available actions:
- View Script — Shows exactly what will be executed
- Apply to Sudoers — Creates the permission file
- Remove from Sudoers — Cleans up everything created
You can inspect it manually:
sudo vi /etc/sudoers.d/wireguardmanagerThe permissions are restricted to this specific tunnel setup only.
- Open Directory — opens the app configuration folder
- Includes menu bar icon for quick access
Download and open the provided .dmg.
Requirements:
- macOS Apple Silicon only
If something breaks, congratulations, you are now part of QA.