An MCP server that provides access to MikroTik routers via SSH. It focuses on configuration domains including firewall and NAT, routing, DHCP, DNS, and WireGuard “and more,” exposing router operations through the Model Context Protocol.

🛠️ Key Features

MikroTik router access over SSH
Firewall support
NAT support
Routing support
DHCP support
DNS support
WireGuard support
Topics include networking and MCP

🚀 Use Cases

Automating MikroTik router tasks through MCP
Managing core networking services such as DHCP and DNS
Performing firewall, NAT, and routing configuration via SSH
Integrating WireGuard-related router configuration

⚡ Developer Benefits

Uses Model Context Protocol for tool-style interaction
Built for networking use cases, including “networking-in-python” and “python” contexts
Clear domain coverage: firewall, NAT, routing, DHCP, DNS, WireGuard

⚠️ Limitations

Described interface is SSH-based for MikroTik routers, implying SSH connectivity requirements

Documentation

📚 Full Documentation - Complete guides, API reference, and examples

🌐 Prefer to read online? The same documentation is also published at www.mikrotik-mcp.com (docs) — an optional, web-friendly way to explore the project while reviewing the repo.

Quick Links

Installation Guide - Get started with MikroTik MCP

Testing Guide - Run integration tests

Claude Desktop Integration - Configure for Claude Desktop

MCP Inspector - Interactive testing tool

Contributing Guide - Help improve MikroTik MCP

Articles - Learning resources and tutorials

Diagrams - Architecture and design diagrams (draw.io)

Contributors ❤️

MikroTik MCP is built by the people below. Thank you for every commit, issue, review and idea.

Contributions of every kind are welcome: code, bug reports, documentation and reviews all move the project forward. Start with the Contributing Guide.

Install

Configuration

Environment variables

MIKROTIK_HOST

IP address or hostname of the MikroTik router (single-device mode; default: 127.0.0.1). Not needed when an inventory is configured.

MIKROTIK_USERNAME

SSH username for the MikroTik router (single-device mode; default: admin)

MIKROTIK_PASSWORDsecret

SSH password for the MikroTik router (single-device mode)

MIKROTIK_PORT

SSH port of the MikroTik router (single-device mode; default: 22)

MIKROTIK_KEY_FILENAME

Path to SSH private key file for key-based authentication (single-device mode)

MIKROTIK_READ_ONLY

When true, expose only tools that do not modify RouterOS or its file store. Use a read-only RouterOS account as defence in depth.

MIKROTIK_INVENTORY_FILE

Path to a YAML file listing multiple MikroTik devices (title, host, port, username, password, key_filename, tags, region). See docs/reference/inventory.

MIKROTIK_INVENTORYsecret

Inline multi-device inventory as a YAML (or JSON) list; takes precedence over MIKROTIK_INVENTORY_FILE and the single-device variables. Holds credentials.

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "mikrotik-mcp": {
      "command": "uvx",
      "args": [
        "mcp-server-mikrotik"
      ],
      "env": {
        "MIKROTIK_HOST": "<YOUR_MIKROTIK_HOST>",
        "MIKROTIK_USERNAME": "<YOUR_MIKROTIK_USERNAME>",
        "MIKROTIK_PASSWORD": "<YOUR_MIKROTIK_PASSWORD>",
        "MIKROTIK_PORT": "<YOUR_MIKROTIK_PORT>",
        "MIKROTIK_KEY_FILENAME": "<YOUR_MIKROTIK_KEY_FILENAME>",
        "MIKROTIK_READ_ONLY": "<YOUR_MIKROTIK_READ_ONLY>",
        "MIKROTIK_INVENTORY_FILE": "<YOUR_MIKROTIK_INVENTORY_FILE>",
        "MIKROTIK_INVENTORY": "<YOUR_MIKROTIK_INVENTORY>"
      }
    }
  }
}

io.github.jeff-nasseri/mikrotik-mcp

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

MikroTik MCP

Overview

Demo Videos

Claude Desktop

Inspector

Inventory

Documentation

Quick Links

Contributors ❤️

License

Install

Configuration

Related servers