---
bezeichner: "io.github.StefanKnol/mikrotik-mcp"
art: "mcp_server"
slug: "io-github-stefanknol-mikrotik-mcp"
paketkoordinate: "pypi:mikrotik-mcp"
status: "aktiv"
homepage: "https://github.com/StefanKnol/mikrotik-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.StefanKnol"
registerseite: "https://tracevero.com/mcp/io-github-stefanknol-mikrotik-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "MikroTik RouterOS over the binary API, addressing rules by real .id not list position."
version: "0.3.0"
roh_umgebungsvariablen: "MIKROTIK_HOST, MIKROTIK_USERNAME, MIKROTIK_PASSWORD, MIKROTIK_PORT, MIKROTIK_TLS, MIKROTIK_TLS_FINGERPRINT, MIKROTIK_TIMEOUT"
roh_geheime_pflichtvariablen: "MIKROTIK_PASSWORD"
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/StefanKnol/mikrotik-mcp"
roh_paketquellen: "pypi"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-21"
roh_aktualisiert_am: "2026-09-21"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "mikrotik-mcp"
roh_paketversionen: "0.3.0"
roh_laufzeithinweise: "uvx"
roh_umgebungsformate: "boolean, number, string"
roh_umgebungsbeschreibungen: "MIKROTIK_HOST=IP address or hostname of the router, e.g. 192.168.88.1 · MIKROTIK_PASSWORD=Password for that user. · MIKROTIK_PORT=API port: 8729 for api-ssl (default), 8728 for plaintext. · MIKROTIK_TIMEOUT=Connection timeout in seconds. Defaults to 10. · MIKROTIK_TLS=Use the TLS API. Defaults to true; turning it off sends the router password over the network in the clear. · MIKROTIK_TLS_FINGERPRINT=SHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted. · MIKROTIK_USERNAME=RouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"mikrotik-mcp\",\"version\":\"0.3.0\",\"runtimeHint\":\"uvx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"MIKROTIK_HOST\",\"description\":\"IP address or hostname of the router, e.g. 192.168.88.1\",\"format\":\"string\",\"required\":true,\"secret\":false},{\"name\":\"MIKROTIK_USERNAME\",\"description\":\"RouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password.\",\"format\":\"string\",\"required\":true,\"secret\":false},{\"name\":\"MIKROTIK_PASSWORD\",\"description\":\"Password for that user.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"MIKROTIK_PORT\",\"description\":\"API port: 8729 for api-ssl (default), 8728 for plaintext.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"MIKROTIK_TLS\",\"description\":\"Use the TLS API. Defaults to true; turning it off sends the router password over the network in the clear.\",\"format\":\"boolean\",\"required\":false,\"secret\":false},{\"name\":\"MIKROTIK_TLS_FINGERPRINT\",\"description\":\"SHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MIKROTIK_TIMEOUT\",\"description\":\"Connection timeout in seconds. Defaults to 10.\",\"format\":\"number\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# MikroTik RouterOS

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | true | MCP-Register | 2026-09-16T01:17:01.931Z | abgeleitet | roh_geheime_pflichtvariablen: MIKROTIK_PASSWORD; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-09-16T01:17:01.931Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-09-16T01:17:01.931Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-09-16T01:17:01.931Z | abgeleitet | roh_repository_url: https://github.com/StefanKnol/mikrotik-mcp |
| Description (raw) | MikroTik RouterOS over the binary API, addressing rules by real .id not list position. | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Declared version | 0.3.0 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Environment variables (raw) | MIKROTIK_HOST, MIKROTIK_USERNAME, MIKROTIK_PASSWORD, MIKROTIK_PORT, MIKROTIK_TLS, MIKROTIK_TLS_FINGERPRINT, MIKROTIK_TIMEOUT | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Required secret variables (raw) | MIKROTIK_PASSWORD | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Repository (raw) | https://github.com/StefanKnol/mikrotik-mcp | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Package registries (raw) | pypi | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-21 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-21 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Package identifiers (raw) | mikrotik-mcp | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Package versions (raw) | 0.3.0 | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |
| Runtime hints (raw) | uvx | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Environment variable formats (raw) | boolean, number, string | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Environment variable descriptions (raw) | MIKROTIK_HOST=IP address or hostname of the router, e.g. 192.168.88.1 · MIKROTIK_PASSWORD=Password for that user. · MIKROTIK_PORT=API port: 8729 for api-ssl (default), 8728 for plaintext. · MIKROTIK_TIMEOUT=Connection timeout in seconds. Defaults to 10. · MIKROTIK_TLS=Use the TLS API. Defaults to true; turning it off sends the router password over the network in the clear. · MIKROTIK_TLS_FINGERPRINT=SHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted. · MIKROTIK_USERNAME=RouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password. | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"pypi","identifier":"mikrotik-mcp","version":"0.3.0","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"MIKROTIK_HOST","description":"IP address or hostname of the router, e.g. 192.168.88.1","format":"string","required":true,"secret":false},{"name":"MIKROTIK_USERNAME","description":"RouterOS user. Use a dedicated account rather than admin; its group must carry the `api` policy, and a group without it is rejected with the same error as a wrong password.","format":"string","required":true,"secret":false},{"name":"MIKROTIK_PASSWORD","description":"Password for that user.","format":"string","required":true,"secret":true},{"name":"MIKROTIK_PORT","description":"API port: 8729 for api-ssl (default), 8728 for plaintext.","format":"number","required":false,"secret":false},{"name":"MIKROTIK_TLS","description":"Use the TLS API. Defaults to true; turning it off sends the router password over the network in the clear.","format":"boolean","required":false,"secret":false},{"name":"MIKROTIK_TLS_FINGERPRINT","description":"SHA-256 of the router certificate. MikroTik's API-SSL certificate is self-signed, so pinning this is what makes the connection authenticated rather than merely encrypted.","format":"string","required":false,"secret":false},{"name":"MIKROTIK_TIMEOUT","description":"Connection timeout in seconds. Defaults to 10.","format":"number","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-22T01:17:01.638Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-stefanknol|io.github.StefanKnol]]

---

- Registry page: <https://tracevero.com/mcp/io-github-stefanknol-mikrotik-mcp>
- Retrieved on: 2026-10-11
