Mikrotik MCP Server

What the code does

We read the source, 1 d ago · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    in_container = os.path.exists("/.dockerenv") or os.environ.get("container") == "docker"

  key_filename: /config/keys/id_ed25519   # SSH private key, preferred over a password

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add mikrotik-mcp -- uvx mcp-server-mikrotik

{
  "mcpServers": {
    "mikrotik-mcp": {
      "command": "uvx",
      "args": [
        "mcp-server-mikrotik"
      ]
    }
  }
}

[mcp_servers.mikrotik-mcp]
command = "uvx"
args = ["mcp-server-mikrotik"]

{
  "mcpServers": {
    "mikrotik-mcp": {
      "command": "uvx",
      "args": [
        "mcp-server-mikrotik"
      ]
    }
  }
}

{
  "servers": {
    "mikrotik-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "mcp-server-mikrotik"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: MIKROTIK_HOST (IP address or hostname of the MikroTik router (single-device mode; default: 127.0.0.1). Not needed when an inventory is configured), MIKROTIK_USERNAME (SSH username for the MikroTik router (single-device mode; default: admin)), MIKROTIK_PASSWORD (SSH password for the MikroTik router (single-device mode)), MIKROTIK_PORT (SSH port of the MikroTik router (single-device mode; default: 22)), MIKROTIK_KEY_FILENAME (Path to SSH private key file for key-based authentication (single-device mode)), MIKROTIK_READ_ONLY (When true, expose only tools that do not modify RouterOS or its file store. Use a read-only RouterOS account as defence in depth), MIKROTIK_SENSITIVE_HIDING (When true, redact recognized credentials and private key material from tool results, MCP notifications, and logs, and omit tools that return opaque sensitive payloads), MIKROTIK_INVENTORY_FILE (Path to a YAML file listing multiple MikroTik devices (title, host, port, username, password, key_filename, tags, region). See docs/reference/inventory), MIKROTIK_INVENTORY (Inline multi-device inventory as a YAML (or JSON) list; takes precedence over MIKROTIK_INVENTORY_FILE and the single-device variables. Holds credentials).