@usex/mikrotik-mcp 1.0.0 → 2.0.0

package/README.md

@@ -1,20 +1,20 @@
 <div align="center">
   <img src="assets/logo.svg" alt="@usex/mikrotik-mcp" width="440" />
-  <p><strong>A Bun-native MCP server that turns one or more MikroTik routers into 466 tools your AI can drive.</strong><br/>
+  <p><strong>A Bun-native MCP server that turns one or more MikroTik routers into 640 tools your AI can drive.</strong><br/>
   Firewall · routing · DHCP/DNS · wireless · QoS · and a complete VPN suite — over SSH, with transactional Safe Mode.</p>
 
   <p>
     <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/License-MIT-7C3AED.svg"></a>
     <img alt="Runtime: Bun" src="https://img.shields.io/badge/runtime-Bun%20%E2%89%A5%201.3-06B6D4.svg">
     <img alt="TypeScript" src="https://img.shields.io/badge/TypeScript-strict-6366F1.svg">
-    <img alt="MCP" src="https://img.shields.io/badge/MCP-466%20tools-1F2937.svg">
+    <img alt="MCP" src="https://img.shields.io/badge/MCP-640%20tools-1F2937.svg">
     <a href="docs/"><img alt="Docs" src="https://img.shields.io/badge/docs-reference-7C3AED.svg"></a>
   </p>
 </div>
 
 ---
 
-`@usex/mikrotik-mcp` exposes **MikroTik RouterOS** as **466 [Model Context Protocol](https://modelcontextprotocol.io)
+`@usex/mikrotik-mcp` exposes **MikroTik RouterOS** as **640 [Model Context Protocol](https://modelcontextprotocol.io)
 tools across 51 modules**, so an AI client (Claude Desktop, Claude Code, any MCP
 client) can read and configure your router in plain language. It speaks to the
 device over **SSH** — no agent, no API package to install on RouterOS — runs on
@@ -46,7 +46,7 @@ in memory and auto-reverts if your session drops, so you can't lock yourself out
 
 ## Why it's different
 
-- 🧰 **Breadth** — 466 tools covering the whole device: L2 (bridge, VLAN, wireless,
+- 🧰 **Breadth** — 640 tools covering the whole device: L2 (bridge, VLAN, wireless,
   PoE), L3 (addressing, routing, DHCP, DNS), security (firewall, NAT, address-lists,
   certificates), QoS (queues), and system ops (users, logs, backups, scheduler).
 - 🔐 **A complete VPN suite** — WireGuard, IPsec (IKEv1/IKEv2), L2TP, PPTP, SSTP,
@@ -87,7 +87,7 @@ mikrotik-mcp serve
 against the server (from source):
 
 ```bash
-bun run inspect        # opens the Inspector UI to browse/run all 466 tools
+bun run inspect        # opens the Inspector UI to browse/run all 640 tools
 ```
 
 **Prefer SSH keys over a password?** Point the server at a key file instead — and
@@ -115,7 +115,7 @@ bun run build            # bundle to dist/
 
 ## The tool catalog
 
-**466 tools across 51 modules.** Full, always-current reference (parameters +
+**640 tools across 51 modules.** Full, always-current reference (parameters +
 risk per tool) is generated from source: **[docs/tools-reference.md](docs/tools-reference.md)**.
 
 | Group | Tools | Modules |
@@ -233,16 +233,30 @@ flags (highest precedence last: defaults → env → flags).
 | `MIKROTIK_DEVICES` | `--devices` | — | Inline JSON of named devices |
 | `MIKROTIK_MCP__TRANSPORT` | `--transport` | `stdio` | `stdio` / `streamable-http` / `sse` |
 | `MIKROTIK_MCP__PORT` | `--mcp-port` | `8000` | HTTP bind port |
+| `MIKROTIK_DASHBOARD__ENABLED` | `--dashboard` | `false` | Real-time observability dashboard ([docs](docs/observability.md)) |
 
 Full table (incl. HTTP host, allow-lists, timeouts, `MIKROTIK_LOG_LEVEL`):
 **[docs/configuration.md](docs/configuration.md)**.
 
+### Observability dashboard (optional)
+
+A localhost-only web dashboard that intercepts **every** tool call the LLM makes
+— live feed of inputs/outputs (secrets redacted), latency percentiles, error
+rate and per-tool/risk/device analytics — persisted to a Bun-native SQLite store
+and served on its own port alongside any transport:
+
+```bash
+mikrotik-mcp serve --dashboard          # → http://127.0.0.1:9090
+```
+
+See **[docs/observability.md](docs/observability.md)**.
+
 ## Schemas
 
 `schemas/` ships machine-readable JSON Schemas, **generated from the TypeScript
 source** (`bun run gen:schemas`) so they can never drift:
 
-- `schemas/tool-catalog.json` — all 466 tools with risk, description, and input schema
+- `schemas/tool-catalog.json` — all 640 tools with risk, description, and input schema
 - `schemas/tools/<name>.json` — per-tool input schema
 - `schemas/config.schema.json` — the runtime configuration
 
@@ -255,12 +269,13 @@ source** (`bun run gen:schemas`) so they can never drift:
 | [Multiple devices](docs/multi-device.md) | Manage several routers; per-call targeting |
 | [Connecting clients](docs/connecting-clients.md) | Claude Desktop, stdio, HTTP |
 | [Transports](docs/transports.md) | stdio / HTTP / SSE, DNS-rebinding |
+| **[Observability](docs/observability.md)** | Real-time dashboard: live feed + analytics, SQLite |
 | [Safe Mode](docs/safe-mode.md) | Transactional changes |
 | **[VPN guide](docs/vpn-guide.md)** | Every tunnel type + how to build it |
 | [Prompts](docs/prompts.md) | The 9 guided workflows |
 | [Architecture](docs/architecture.md) | How it's built |
 | [Security](docs/security.md) | Credentials, risk gating |
-| [Tool reference](docs/tools-reference.md) | All 466 tools |
+| [Tool reference](docs/tools-reference.md) | All 640 tools |
 | [MCP Inspector](docs/inspector.md) | Test tools/prompts in the UI or CLI |
 | [Development](docs/development.md) · [Docker](docs/docker.md) | Build, test, deploy |