MikroTik RouterOS MCP server

by StefanKnol·io.github.StefanKnol/mikrotik-mcp·v0.2.0

MikroTik RouterOS over the binary API, addressing rules by real .id not list position.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

New

0 stars

Reviews

Nobody has reviewed MikroTik RouterOS yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan9 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 4 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add mikrotik-mcp -- uvx mikrotik-mcp

Is MikroTik RouterOS MCP server safe?: Mostly: it is graded B (83/100). Read the MikroTik RouterOS safety report
How do I install MikroTik RouterOS?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does MikroTik RouterOS need an API key?: Yes. The registry entry asks for MIKROTIK_PASSWORD.
Is MikroTik RouterOS maintained?: The last commit was 5 days ago (2026-09-15). The latest release is v0.2.0.

Local package. It runs on your machine, not through the gateway.

MIKROTIK_HOSTIP address or hostname of the router, e.g. 192.168.88.1
MIKROTIK_USERNAMERouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password.
MIKROTIK_PASSWORDsecretPassword for that user.
MIKROTIK_PORTAPI port: 8729 for api-ssl (default), 8728 for plaintext.
MIKROTIK_TLSUse the TLS API. Defaults to true; turning it off sends the router password over the network in the clear.
MIKROTIK_TLS_FINGERPRINTSHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted.
MIKROTIK_TIMEOUTConnection timeout in seconds. Defaults to 10.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/stefanknol-mikrotik-mcp.svg)](https://mcp.market/server/stefanknol-mikrotik-mcp)