You can. Both pfSense [0] and OPNsense [1] have good API coverage.

[0] https://pfrest.org/api-docs/ [1] https://docs.opnsense.org/development/api.html

The main pfsense dev who exited the project is working on just that. Forget the name.