@usex/mikrotik-mcp 1.0.0

package/schemas/tools/create_dhcp_network.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_dhcp_network",
+  "type": "object",
+  "properties": {
+    "network": {
+      "type": "string"
+    },
+    "gateway": {
+      "type": "string"
+    },
+    "netmask": {
+      "type": "string"
+    },
+    "dns_servers": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "domain": {
+      "type": "string"
+    },
+    "wins_servers": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "ntp_servers": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "dhcp_option": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "network",
+    "gateway"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_dhcp_pool.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_dhcp_pool",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "ranges": {
+      "type": "string",
+      "description": "IP range(s) e.g. \"192.168.1.1-192.168.1.100\""
+    },
+    "next_pool": {
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "name",
+    "ranges"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_dhcp_server.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_dhcp_server",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "interface": {
+      "type": "string"
+    },
+    "lease_time": {
+      "default": "1d",
+      "description": "Lease duration e.g. \"1d\", \"12h\", \"30m\", \"1h30m\"",
+      "type": "string"
+    },
+    "address_pool": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    },
+    "authoritative": {
+      "default": "yes",
+      "type": "string",
+      "enum": [
+        "yes",
+        "no",
+        "after-2sec-delay"
+      ]
+    },
+    "delay_threshold": {
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "name",
+    "interface",
+    "lease_time",
+    "disabled",
+    "authoritative"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_eoip_tunnel.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_eoip_tunnel",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Name for the new EoIP tunnel interface, e.g. 'eoip-to-hq'"
+    },
+    "remote_address": {
+      "type": "string",
+      "description": "Remote endpoint IP address"
+    },
+    "tunnel_id": {
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991,
+      "description": "Unique tunnel ID, must match on both peers"
+    },
+    "local_address": {
+      "description": "Local endpoint IP address",
+      "type": "string"
+    },
+    "keepalive": {
+      "description": "Keepalive interval/retries, e.g. '10s,3'",
+      "type": "string"
+    },
+    "mtu": {
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "comment": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "name",
+    "remote_address",
+    "tunnel_id",
+    "disabled"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_export.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_export",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "file_format": {
+      "default": "rsc",
+      "type": "string",
+      "enum": [
+        "rsc",
+        "json",
+        "xml"
+      ]
+    },
+    "export_type": {
+      "default": "full",
+      "type": "string",
+      "enum": [
+        "full",
+        "compact",
+        "verbose"
+      ]
+    },
+    "hide_sensitive": {
+      "default": true,
+      "type": "boolean"
+    },
+    "verbose": {
+      "default": false,
+      "type": "boolean"
+    },
+    "compact": {
+      "default": false,
+      "type": "boolean"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "file_format",
+    "export_type",
+    "hide_sensitive",
+    "verbose",
+    "compact"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_filter_rule.json

@@ -0,0 +1,96 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_filter_rule",
+  "type": "object",
+  "properties": {
+    "chain": {
+      "type": "string",
+      "enum": [
+        "input",
+        "forward",
+        "output"
+      ]
+    },
+    "action": {
+      "type": "string",
+      "enum": [
+        "accept",
+        "drop",
+        "reject",
+        "jump",
+        "log",
+        "passthrough",
+        "return",
+        "tarpit",
+        "fasttrack-connection"
+      ]
+    },
+    "src_address": {
+      "type": "string"
+    },
+    "dst_address": {
+      "type": "string"
+    },
+    "src_port": {
+      "type": "string"
+    },
+    "dst_port": {
+      "type": "string"
+    },
+    "protocol": {
+      "type": "string"
+    },
+    "in_interface": {
+      "type": "string"
+    },
+    "out_interface": {
+      "type": "string"
+    },
+    "connection_state": {
+      "description": "Comma-separated e.g. \"established,related,new,invalid\"",
+      "type": "string"
+    },
+    "connection_nat_state": {
+      "type": "string"
+    },
+    "src_address_list": {
+      "type": "string"
+    },
+    "dst_address_list": {
+      "type": "string"
+    },
+    "limit": {
+      "description": "RouterOS rate/burst string e.g. \"10,5:packet\"",
+      "type": "string"
+    },
+    "tcp_flags": {
+      "description": "RouterOS flag expression e.g. \"syn,!ack\"",
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    },
+    "log": {
+      "default": false,
+      "type": "boolean"
+    },
+    "log_prefix": {
+      "type": "string"
+    },
+    "place_before": {
+      "description": "Rule number or ID (*N) to insert before e.g. \"0\" or \"*3\"",
+      "type": "string"
+    }
+  },
+  "required": [
+    "chain",
+    "action",
+    "disabled",
+    "log"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_gre_tunnel.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_gre_tunnel",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Name for the new GRE tunnel interface, e.g. 'gre-to-hq'"
+    },
+    "remote_address": {
+      "type": "string",
+      "description": "Remote endpoint IP address"
+    },
+    "local_address": {
+      "description": "Local endpoint IP address",
+      "type": "string"
+    },
+    "keepalive": {
+      "description": "Keepalive interval/retries, e.g. '10s,3'",
+      "type": "string"
+    },
+    "dont_fragment": {
+      "description": "Don't-fragment behavior",
+      "type": "string",
+      "enum": [
+        "inherit",
+        "no"
+      ]
+    },
+    "clamp_tcp_mss": {
+      "description": "Clamp TCP MSS to the tunnel MTU",
+      "type": "boolean"
+    },
+    "mtu": {
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "comment": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "name",
+    "remote_address",
+    "disabled"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ip_pool.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ip_pool",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    },
+    "ranges": {
+      "type": "string",
+      "description": "Hyphen-separated range(s) e.g. \"192.168.1.1-192.168.1.100\". Multiple ranges comma-separated: \"10.0.0.1-10.0.0.50,10.0.0.100-10.0.0.120\""
+    },
+    "next_pool": {
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "name",
+    "ranges"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ipip_tunnel.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ipip_tunnel",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Name for the new IPIP tunnel interface, e.g. 'ipip-to-hq'"
+    },
+    "remote_address": {
+      "type": "string",
+      "description": "Remote endpoint IP address"
+    },
+    "local_address": {
+      "description": "Local endpoint IP address",
+      "type": "string"
+    },
+    "keepalive": {
+      "description": "Keepalive interval/retries, e.g. '10s,3'",
+      "type": "string"
+    },
+    "mtu": {
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "comment": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "name",
+    "remote_address",
+    "disabled"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ipsec_identity.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ipsec_identity",
+  "type": "object",
+  "properties": {
+    "peer": {
+      "type": "string",
+      "description": "Peer name this identity authenticates"
+    },
+    "auth_method": {
+      "default": "pre-shared-key",
+      "description": "Authentication method",
+      "type": "string",
+      "enum": [
+        "pre-shared-key",
+        "rsa-signature",
+        "digital-signature",
+        "eap",
+        "eap-radius"
+      ]
+    },
+    "secret": {
+      "description": "Pre-shared key secret",
+      "type": "string"
+    },
+    "my_id": {
+      "type": "string"
+    },
+    "remote_id": {
+      "type": "string"
+    },
+    "generate_policy": {
+      "type": "string",
+      "enum": [
+        "no",
+        "port-override",
+        "port-strict"
+      ]
+    },
+    "mode_config": {
+      "type": "string"
+    },
+    "policy_template_group": {
+      "type": "string"
+    },
+    "certificate": {
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "peer",
+    "auth_method"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ipsec_peer.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ipsec_peer",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Name for the new IPsec peer"
+    },
+    "address": {
+      "description": "Remote address, e.g. '203.0.113.1' or '0.0.0.0/0' for responder",
+      "type": "string"
+    },
+    "profile": {
+      "description": "Phase-1 profile name",
+      "type": "string"
+    },
+    "exchange_mode": {
+      "default": "ike2",
+      "description": "IKE exchange mode",
+      "type": "string",
+      "enum": [
+        "main",
+        "aggressive",
+        "ike2"
+      ]
+    },
+    "local_address": {
+      "type": "string"
+    },
+    "passive": {
+      "description": "Passive (responder only)",
+      "type": "boolean"
+    },
+    "send_initial_contact": {
+      "type": "boolean"
+    },
+    "comment": {
+      "type": "string"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "name",
+    "exchange_mode",
+    "disabled"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ipsec_policy.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ipsec_policy",
+  "type": "object",
+  "properties": {
+    "peer": {
+      "description": "Peer name this policy applies to",
+      "type": "string"
+    },
+    "src_address": {
+      "description": "Source subnet, e.g. '10.0.0.0/24'",
+      "type": "string"
+    },
+    "dst_address": {
+      "description": "Destination subnet, e.g. '10.0.1.0/24'",
+      "type": "string"
+    },
+    "protocol": {
+      "type": "string"
+    },
+    "action": {
+      "default": "encrypt",
+      "type": "string",
+      "enum": [
+        "encrypt",
+        "discard",
+        "none"
+      ]
+    },
+    "level": {
+      "type": "string",
+      "enum": [
+        "require",
+        "unique",
+        "use"
+      ]
+    },
+    "proposal": {
+      "description": "Phase-2 proposal name",
+      "type": "string"
+    },
+    "tunnel": {
+      "default": true,
+      "description": "Tunnel mode (vs transport)",
+      "type": "boolean"
+    },
+    "sa_src_address": {
+      "type": "string"
+    },
+    "sa_dst_address": {
+      "type": "string"
+    },
+    "template": {
+      "description": "Policy template (for dynamic policies)",
+      "type": "boolean"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "action",
+    "tunnel"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/create_ipsec_profile.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "create_ipsec_profile",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "Name for the new IPsec profile"
+    },
+    "dh_group": {
+      "default": "modp2048",
+      "description": "Diffie-Hellman group, e.g. 'modp2048'",
+      "type": "string"
+    },
+    "enc_algorithm": {
+      "description": "Encryption algorithm, e.g. 'aes-256'",
+      "type": "string"
+    },
+    "hash_algorithm": {
+      "default": "sha256",
+      "description": "Hash algorithm, e.g. 'sha256'",
+      "type": "string"
+    },
+    "lifetime": {
+      "description": "Phase-1 lifetime, e.g. '1d'",
+      "type": "string"
+    },
+    "nat_traversal": {
+      "description": "Enable NAT-T",
+      "type": "boolean"
+    },
+    "dpd_interval": {
+      "description": "Dead peer detection interval, e.g. '2m'",
+      "type": "string"
+    },
+    "dpd_maximum_failures": {
+      "description": "DPD max failures before drop",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    }
+  },
+  "required": [
+    "name",
+    "dh_group",
+    "hash_algorithm"
+  ],
+  "additionalProperties": false
+}