MikroMCP
NPM · MIKROMCP · SCANNED SEP 20
MCP server for MikroTik RouterOS: typed tools, dry-run, RBAC, audit logs, and rollback.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security99
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 42 of 147 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to AliKarami/MikroMCP). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 14 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability75
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 15241 tokens (~124/item across 122 items; 122 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety97
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 7 of 8 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "ping" implies "send" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 123 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the MikroMCP MCP server?
MikroMCP runs locally as an npm package, launched with npx -y mikromcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mikromcp
claude mcp add alikarami-mikromcp -- npx -y mikromcp
{
"mcpServers": {
"alikarami-mikromcp": {
"command": "npx",
"args": [
"-y",
"mikromcp"
]
}
}
} {
"servers": {
"alikarami-mikromcp": {
"command": "npx",
"args": [
"-y",
"mikromcp"
]
}
}
} codex mcp add alikarami-mikromcp -- npx -y mikromcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"alikarami-mikromcp": {
"type": "local",
"command": [
"npx",
"-y",
"mikromcp"
],
"enabled": true
}
}
} openclaw mcp add alikarami-mikromcp --command npx --arg -y --arg mikromcp
mcp_servers:
alikarami-mikromcp:
command: "npx"
args: ["-y", "mikromcp"] {
"McpServers": {
"alikarami-mikromcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"mikromcp"
]
}
}
} assistant mcp add alikarami-mikromcp -t stdio -c npx -a -y mikromcp
{
"mcpServers": {
"alikarami-mikromcp": {
"command": "npx",
"args": [
"-y",
"mikromcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
- Security disclosure: unverified → pass ▲ functional
- 19 Sept 26 0
- Security disclosure: pass → unverified ▼ functional
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes. Other categories moved too: Supply Chain Security rose 1.
- 16 Sept 26 −3
- Stability: pass → 0.80 functional
- 15 Sept 26 +1
- Stability: 0.97 → pass security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 −3
- Stability: pass → 0.80 functional
- Package version: 1.8.0 → 1.11.0 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/mikromcp@1.11.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | AliKarami/MikroMCP |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/AliKarami/MikroMCP/.github/workflows/release.yml@refs/tags/v1.11.0 |
| Rekor log index | 2723383711 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:c76356c9095f2707cba9c4964ff7e3de0ca3b1cc7ad92d991a8f6057c2f218d3031b4b3d614c616555078fd89b31a938a38e8a79d6173ac72cf6aa84b |
Background: How many MCP packages publish verified provenance →
Dependencies 147 packages
| Packages resolved | 147 |
|---|---|
| Stale | 42 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
manage_routing_table Manage Routing Table ~130
Create or remove a custom routing table. Idempotent by table name. Supports dry-run mode.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| fib | boolean | – | Whether to sync this table with the FIB |
| name | string | yes | Routing table name (idempotency key) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
manage_scheduled_job Manage Scheduled Job ~198
Add, update, remove, enable, or disable a RouterOS scheduler entry. Idempotent by name. add throws CONFLICT if name exists; update throws NOT_FOUND if it does not. Supports dry-run.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| comment | string | – | Optional comment |
| dryRun | boolean | – | Preview changes without applying. |
| interval | string | – | Run interval (e.g. 00:05:00 for every 5 minutes) |
| name | string | yes | Job name — idempotency key |
| onEvent | string | – | Script name or inline command to run (required on add) |
| routerId | string | – | Router ID; omit to use the default router. |
| startDate | string | – | Start date (e.g. jan/01/2000) |
| startTime | string | – | Start time (e.g. 00:00:00) |
No output schema declared.
No examples provided.
manage_script Manage Script ~171
Add, update, or remove a RouterOS script. Idempotent by name. add throws CONFLICT if the name already exists; update throws NOT_FOUND if it does not. Supports dry-run.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| comment | string | – | Optional comment |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dontRequirePermissions | boolean | – | Allow script to run without elevated permissions |
| dryRun | boolean | – | Preview changes without applying. |
| name | string | yes | Script name — idempotency key |
| routerId | string | – | Router ID; omit to use the default router. |
| source | string | – | Script body (required for add and update) |
No output schema declared.
No examples provided.
manage_upgrade Manage Upgrade ~136
Trigger a RouterOS package update check or install. 'check' queries the update server for new packages. 'install' downloads and applies the update — the router will reboot automatically. Supports dry-run.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | check — trigger a check for available updates; install — download and install the latest update (triggers reboot) |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview the action without executing |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
manage_user Manage User ~192
Add, remove, enable, disable, or set the password for a local RouterOS user. Idempotent by name: add returns already_exists if a user with the same name and group already exists.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| address | string | – | Allowed source address or range |
| comment | string | – | Optional comment |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| group | string | – | Group name (required for add; e.g. 'read', 'write', 'full') |
| name | string | yes | Username — idempotency key |
| password | string | – | Password (required for add and set-password) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
manage_user_group Manage User Group ~162
Add, update, or remove a local RouterOS user group. Idempotent by name: add returns already_exists if a group with the same name and policy already exists.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| name | string | yes | Group name — idempotency key |
| policy | string | – | Comma-separated policy list (e.g. 'read,write,ftp') |
| routerId | string | – | Router ID; omit to use the default router. |
| skin | string | – | Optional skin name for the group |
No output schema declared.
No examples provided.
manage_vlan Manage VLAN Interface ~232
Add, remove, enable, or disable a VLAN interface. Idempotent by name: add returns already_exists when a VLAN with matching name, vlan-id, and parent interface exists. Supports dry-run mode.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| comment | string | – | Optional comment (add only) |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| disabled | boolean | – | Whether to create the VLAN disabled (add only) |
| dryRun | boolean | – | Preview changes without applying. |
| mtu | integer | – | MTU size (add only) |
| name | string | yes | VLAN interface name — idempotency key (alphanumeric, hyphens, underscores, max 15 chars) |
| parentInterface | string | – | Parent interface name (e.g., ether1, bridge1; required for add) |
| routerId | string | – | Router ID; omit to use the default router. |
| vlanId | integer | – | VLAN ID (1-4094; required for add) |
No output schema declared.
No examples provided.
manage_vrrp_instance Manage VRRP Instance ~207
Add, remove, enable, or disable a VRRP instance. Idempotent by name: add returns already_exists if an instance with the same name, interface, and VRID already exists.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| comment | string | – | Optional comment |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| interface | string | – | Master interface (required for add) |
| interval | integer | – | Advertisement interval in seconds |
| name | string | yes | VRRP interface name — idempotency key |
| priority | integer | – | Router priority (1–254) |
| routerId | string | – | Router ID; omit to use the default router. |
| version | string | – | VRRP protocol version |
| vrid | integer | – | Virtual router ID (required for add) |
No output schema declared.
No examples provided.
manage_wifi_interface Manage WiFi Interface ~144
Enable, disable, or update SSID settings on a WiFi interface. At least one of disabled or ssid must be provided.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| disabled | boolean | – | Set to true to disable, false to enable |
| dryRun | boolean | – | Preview changes without applying. |
| name | string | yes | WiFi interface name (e.g. wifi1, wlan1) |
| routerId | string | – | Router ID; omit to use the default router. |
| ssid | string | – | New SSID to set |
No output schema declared.
No examples provided.
manage_wireguard_interface Manage WireGuard Interface ~182
Add, remove, enable, or disable a WireGuard interface. Idempotent by name. RouterOS generates the private key on create — it is never passed in. The public key is returned after creation.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| comment | string | – | Optional comment |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| listenPort | integer | – | UDP listen port (RouterOS picks one if omitted) |
| mtu | integer | – | MTU (default 1420) |
| name | string | yes | Interface name — idempotency key (e.g. wg0) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
manage_wireguard_peer Manage WireGuard Peer ~215
Add or remove a WireGuard peer. Idempotent by public key: add returns already_exists if a peer with the same public key already exists on the interface.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action to perform |
| allowedAddress | string | – | Allowed IP address/CIDR for this peer (e.g. 10.0.0.2/32) |
| comment | string | – | Optional comment |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview changes without applying. |
| endpoint | string | – | Peer endpoint as IP:port (e.g. 1.2.3.4:51820) |
| interface | string | yes | WireGuard interface name (e.g. wg0) |
| publicKey | string | yes | Peer public key in base64 format (44 characters) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
ping Ping ~120
Send ICMP echo requests from the router to a target address. Returns per-packet RTT and summary statistics. 100% packet loss is a valid result, not an error.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Target IP address or hostname to ping |
| count | integer | – | Number of ICMP echo requests (1–20) |
| routerId | string | – | Router ID; omit to use the default router. |
| routingTable | – | – | Routing table to use for the ping |
| size | integer | – | Packet size in bytes (14–65535) |
No output schema declared.
No examples provided.
plan_changes Plan Changes ~83
Preview a sequence of write operations: each step runs with dryRun=true against live state, returning affected paths and the predicted action per step. Use apply_plan to execute the same steps for real.
| Name | Type | Req | Description |
|---|---|---|---|
| routerId | string | – | Router ID; omit to use the default router. |
| steps | array | yes | Ordered list of write operations to preview (up to 10) |
No output schema declared.
No examples provided.
reboot Reboot ~119
Trigger a controlled router reboot with an optional delay. Supports dry-run. Use this tool instead of run_command for reboots — run_command's deny list blocks /system reboot*.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| delay | integer | – | Seconds before rebooting (0–3600) |
| dryRun | boolean | – | Preview the reboot without executing |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
rollback_change Rollback Change ~160
Restore device state to before a write, identified by its journal ID. RouterOS: reads the before-snapshot, diffs against live state, and applies the reverse. SwOS: re-POSTs the exact pre-write '.b' blob. Use dryRun=true to preview. Requires MIKROMCP_DATA_DIR (defaults to data/).
| Name | Type | Req | Description |
|---|---|---|---|
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview the restore plan without applying changes |
| journalId | string | yes | Journal entry ID from write-journal.ndjson to roll back |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
run_command Run Command ~151
Execute an arbitrary RouterOS console command via SSH. Guarded by an allow/deny policy (built-in deny list blocks destructive commands; tighten via cmdAllow in routers.yaml or MIKROMCP_CMD_ALLOW). Prefer dedicated tools (reboot, etc.) where available. Output capped at 4000 characters.
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | RouterOS console command to execute |
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview the command without executing (validates allow/deny policy only) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
run_script Run Script ~106
Execute a named RouterOS script. Fire-and-forget — the script runs asynchronously and its output is written to the router system log. Use get_log after calling this tool to see results.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| name | string | yes | Name of the script to execute |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
set_system_clock Set System Clock ~145
Set the system date, time, and/or timezone on a MikroTik router. Idempotent: returns already_set if the values already match. Supports dry-run.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Date in RouterOS format: mon/dd/yyyy (e.g. jan/02/2006) |
| dryRun | boolean | – | Preview changes without applying. |
| routerId | string | – | Router ID; omit to use the default router. |
| time | string | – | Time in RouterOS format: hh:mm:ss (e.g. 15:04:05) |
| timeZoneName | string | – | IANA timezone name (e.g. Europe/London, UTC) |
No output schema declared.
No examples provided.
torch Torch ~119
Capture a real-time traffic snapshot on a router interface. The tool call blocks for the duration (seconds) and returns top flows by bytes. readOnlyHint true — auto-retry enabled.
| Name | Type | Req | Description |
|---|---|---|---|
| dstAddress | – | – | Filter by destination IP address |
| duration | integer | – | Capture duration in seconds (1–30) |
| interface | string | yes | Interface name to monitor (e.g. ether1, bridge1) |
| routerId | string | – | Router ID; omit to use the default router. |
| srcAddress | – | – | Filter by source IP address |
No output schema declared.
No examples provided.
traceroute Traceroute ~102
Trace the network path from the router to a target address. Returns an ordered hop list with RTT per hop. Timeouts and partial results are valid responses.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Target IP address or hostname to trace |
| count | integer | – | Probes per hop (1–5) |
| maxHops | integer | – | Maximum number of hops (1–30) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
upload_file Upload File ~136
Upload a text file to a router, overwriting any existing file of the same name. Prefers SFTP (encrypted, over SSH) and falls back to plaintext FTP if SFTP is unavailable. Requires SSH (or FTP) access for the router user. Dry-run tests connectivity only.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | File content to upload (text) |
| dryRun | boolean | – | Validate SFTP or FTP connectivity without writing the target file |
| name | string | yes | Target filename on the router (e.g. flash/my-script.rsc) |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
write_swos_blob Write SwOS Blob ~307
Mutate a SwOS '.b' endpoint on a MikroTik switch. The full endpoint blob is read, the given fields are merged in, and the entire blob is written back (the firmware only accepts whole-blob writes); untouched fields are re-sent byte-for-byte, and a field this firmware does not expose is refused rather than injected. dryRun defaults to true — preview first. Every result reports whether the schema has been verified against the switch's firmware. The pre-write blob is snapshotted, so the change can be undone with rollback_change. Returns no_change when the values already match.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmationToken | string | – | Token from a prior APPROVAL_REQUIRED response. Re-submit the identical call with this token to confirm the destructive action. |
| dryRun | boolean | – | Preview the resulting blob without writing to the switch. |
| endpoint | string | yes | '.b' endpoint to write |
| fields | object | yes | Values to set, keyed by decoded field name (from list_swos_endpoints) or by a raw wire key already present in the blob — anything else is rejected. Option fields take the enum name (e.g. 'auto'); tex… |
| routerId | string | – | Router ID; omit to use the default router. |
No output schema declared.
No examples provided.
What is the MikroMCP MCP server?
MikroMCP is an MCP server listed in the public MCP registry as io.github.AliKarami/mikromcp. MCP server for MikroTik RouterOS: typed tools, dry-run, RBAC, audit logs, and rollback. This page covers its npm package (mikromcp).
Is the MikroMCP MCP server safe to use?
MikroMCP scores 94 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the MikroMCP MCP server expose?
MikroMCP exposes 122 tools: get_system_status, list_interfaces, manage_ip_address, list_dhcp_leases, manage_dhcp_lease, and 117 more. Their descriptions and schemas cost roughly 15,117 tokens of context every time the server is loaded.
Is the MikroMCP MCP server still maintained?
MikroMCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the MikroMCP MCP server under?
MikroMCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.