mikrotik-mcp
An MCP server that allows agents to manage MikroTik RouterOS devices via the binary API. It addresses firewall rules by their real .id rather than list position to prevent misconfiguration. It supports 34 tools covering system info, interfaces, IP addressing, firewall filter, NAT, DHCP, DNS, routes, and logs.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Manage firewall filter rules by real ID
- Configure NAT and IP addressing
- Read system info and interfaces
- Manage DHCP leases and DNS
Source and maintenance
- Last repository push
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
mikrotik-mcp 0.3.0
{
"version": "0.3.0",
"transport": "stdio",
"identifier": "mikrotik-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"environmentVariables": [
{
"name": "MIKROTIK_HOST",
"format": "string",
"isRequired": true,
"description": "IP address or hostname of the router, e.g. 192.168.88.1"
},
{
"name": "MIKROTIK_USERNAME",
"format": "string",
"isRequired": true,
"description": "RouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password."
},
{
"name": "MIKROTIK_PASSWORD",
"format": "string",
"isRequired": true,
"description": "Password for that user."
},
{
"name": "MIKROTIK_PORT",
"format": "number",
"description": "API port: 8729 for api-ssl (default), 8728 for plaintext."
},
{
"name": "MIKROTIK_TLS",
"format": "boolean",
"description": "Use the TLS API. Defaults to true; turning it off sends the router password over the network in the clear."
},
{
"name": "MIKROTIK_TLS_FINGERPRINT",
"format": "string",
"description": "SHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted."
},
{
"name": "MIKROTIK_TIMEOUT",
"format": "number",
"description": "Connection timeout in seconds. Defaults to 10."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mikrotik-mcp-mcp": {
"command": "uvx",
"args": [
"mikrotik-mcp==0.3.0"
],
"env": {
"MIKROTIK_HOST": "<YOUR_MIKROTIK_HOST>",
"MIKROTIK_USERNAME": "<YOUR_MIKROTIK_USERNAME>",
"MIKROTIK_PASSWORD": "<YOUR_MIKROTIK_PASSWORD>",
"MIKROTIK_PORT": "<YOUR_MIKROTIK_PORT>",
"MIKROTIK_TLS": "<YOUR_MIKROTIK_TLS>",
"MIKROTIK_TLS_FINGERPRINT": "<YOUR_MIKROTIK_TLS_FINGERPRINT>",
"MIKROTIK_TIMEOUT": "<YOUR_MIKROTIK_TIMEOUT>"
}
}
}
}Cline
{
"mcpServers": {
"mikrotik-mcp-mcp": {
"command": "uvx",
"args": [
"mikrotik-mcp==0.3.0"
],
"env": {
"MIKROTIK_HOST": "<YOUR_MIKROTIK_HOST>",
"MIKROTIK_USERNAME": "<YOUR_MIKROTIK_USERNAME>",
"MIKROTIK_PASSWORD": "<YOUR_MIKROTIK_PASSWORD>",
"MIKROTIK_PORT": "<YOUR_MIKROTIK_PORT>",
"MIKROTIK_TLS": "<YOUR_MIKROTIK_TLS>",
"MIKROTIK_TLS_FINGERPRINT": "<YOUR_MIKROTIK_TLS_FINGERPRINT>",
"MIKROTIK_TIMEOUT": "<YOUR_MIKROTIK_TIMEOUT>"
}
}
}
}VS Code
{
"servers": {
"mikrotik-mcp-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"mikrotik-mcp==0.3.0"
],
"env": {
"MIKROTIK_HOST": "<YOUR_MIKROTIK_HOST>",
"MIKROTIK_USERNAME": "<YOUR_MIKROTIK_USERNAME>",
"MIKROTIK_PASSWORD": "<YOUR_MIKROTIK_PASSWORD>",
"MIKROTIK_PORT": "<YOUR_MIKROTIK_PORT>",
"MIKROTIK_TLS": "<YOUR_MIKROTIK_TLS>",
"MIKROTIK_TLS_FINGERPRINT": "<YOUR_MIKROTIK_TLS_FINGERPRINT>",
"MIKROTIK_TIMEOUT": "<YOUR_MIKROTIK_TIMEOUT>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"mikrotik-mcp-mcp": {
"command": "uvx",
"args": [
"mikrotik-mcp==0.3.0"
],
"env": {
"MIKROTIK_HOST": "<YOUR_MIKROTIK_HOST>",
"MIKROTIK_USERNAME": "<YOUR_MIKROTIK_USERNAME>",
"MIKROTIK_PASSWORD": "<YOUR_MIKROTIK_PASSWORD>",
"MIKROTIK_PORT": "<YOUR_MIKROTIK_PORT>",
"MIKROTIK_TLS": "<YOUR_MIKROTIK_TLS>",
"MIKROTIK_TLS_FINGERPRINT": "<YOUR_MIKROTIK_TLS_FINGERPRINT>",
"MIKROTIK_TIMEOUT": "<YOUR_MIKROTIK_TIMEOUT>"
}
}
}
}Let your agent find its tools
Find servers like mikrotik-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.