@usex/mikrotik-mcp 3.23.0 → 3.24.0

package/schemas/tools/add_pimsm_interface_template.json

@@ -21,6 +21,30 @@
       "description": "Hello interval, e.g. \"30s\"",
       "type": "string"
     },
+    "hello_delay": {
+      "description": "Max random delay before the first Hello, e.g. \"5s\"",
+      "type": "string"
+    },
+    "join_prune_period": {
+      "description": "Interval between periodic Join/Prune messages, e.g. \"1m\"",
+      "type": "string"
+    },
+    "join_tracking_support": {
+      "description": "Enable explicit Join/Prune tracking support",
+      "type": "boolean"
+    },
+    "override_interval": {
+      "description": "Randomized Join override interval, e.g. \"2s500ms\"",
+      "type": "string"
+    },
+    "propagation_delay": {
+      "description": "Expected link propagation delay, e.g. \"500ms\"",
+      "type": "string"
+    },
+    "source_addresses": {
+      "description": "Source IP address(es) used for PIM messages on these interfaces",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/add_radius_server.json

@@ -43,6 +43,20 @@
     "domain": {
       "type": "string"
     },
+    "protocol": {
+      "description": "Transport protocol used to reach the server (default udp)",
+      "type": "string",
+      "enum": ["udp", "radsec"]
+    },
+    "certificate": {
+      "description": "Certificate name to present when protocol is radsec",
+      "type": "string"
+    },
+    "accounting_backup": {
+      "default": false,
+      "description": "Mark this entry as a backup accounting server",
+      "type": "boolean"
+    },
     "comment": {
       "type": "string"
     },
@@ -57,6 +71,7 @@
     "service",
     "authentication_port",
     "accounting_port",
+    "accounting_backup",
     "disabled"
   ],
   "additionalProperties": false

package/schemas/tools/add_rip_instance.json

@@ -14,6 +14,10 @@
     "vrf": {
       "type": "string"
     },
+    "routing_table": {
+      "description": "Routing table to install routes into",
+      "type": "string"
+    },
     "redistribute": {
       "description": "Comma list, e.g. \"connected,static\"",
       "type": "string"

package/schemas/tools/add_rip_interface_template.json

@@ -14,6 +14,14 @@
     "passive": {
       "type": "boolean"
     },
+    "split_horizon": {
+      "description": "Enable split-horizon loop prevention",
+      "type": "boolean"
+    },
+    "poison_reverse": {
+      "description": "Advertise back with infinite metric",
+      "type": "boolean"
+    },
     "key_chain": {
       "description": "Key-chain name for authentication",
       "type": "string"

package/schemas/tools/add_romon_port.json

@@ -24,6 +24,10 @@
     "disabled": {
       "default": false,
       "type": "boolean"
+    },
+    "comment": {
+      "description": "Free-form comment for the port entry",
+      "type": "string"
     }
   },
   "required": ["interface", "disabled"],

package/schemas/tools/add_route.json

@@ -50,6 +50,14 @@
     "check_gateway": {
       "description": "\"ping\" or \"arp\"",
       "type": "string"
+    },
+    "suppress_hw_offload": {
+      "description": "Exclude route from hardware (HW) offloading",
+      "type": "boolean"
+    },
+    "type": {
+      "description": "\"unicast\" (default), \"blackhole\", \"unreachable\", or \"prohibit\"",
+      "type": "string"
     }
   },
   "required": ["dst_address", "gateway", "disabled"],

package/schemas/tools/add_routing_rule.json

@@ -33,11 +33,6 @@
       "minimum": -9007199254740991,
       "maximum": 9007199254740991
     },
-    "max_prefix": {
-      "type": "integer",
-      "minimum": -9007199254740991,
-      "maximum": 9007199254740991
-    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/add_script.json

@@ -11,6 +11,10 @@
       "type": "string",
       "description": "Script source code (may contain spaces/semicolons)"
     },
+    "policy": {
+      "description": "Permission policy list, e.g. 'read,write,test,policy'",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/add_switch_rule.json

@@ -19,6 +19,14 @@
       "description": "Destination IP/mask",
       "type": "string"
     },
+    "src_address6": {
+      "description": "Source IPv6 address/mask",
+      "type": "string"
+    },
+    "dst_address6": {
+      "description": "Destination IPv6 address/mask",
+      "type": "string"
+    },
     "src_mac_address": {
       "description": "Source MAC/mask",
       "type": "string"
@@ -43,6 +51,11 @@
       "description": "MAC protocol, e.g. 'ip', 'arp', 'vlan' or a number",
       "type": "string"
     },
+    "vlan_header": {
+      "description": "Match on VLAN tag presence",
+      "type": "string",
+      "enum": ["any", "not-present", "present"]
+    },
     "vlan_id": {
       "type": "string"
     },

package/schemas/tools/add_traffic_generator_stream.json

@@ -22,6 +22,24 @@
       "description": "Transmit rate in bits/second",
       "type": "string"
     },
+    "num": {
+      "description": "Stream number (0-15)",
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 15
+    },
+    "pps": {
+      "description": "Target throughput in packets per second",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "mbps": {
+      "description": "Target throughput in megabits per second",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/add_user_manager_limitation.json

@@ -15,6 +15,52 @@
       "description": "Upload rate limit, e.g. '10M'",
       "type": "string"
     },
+    "rate_limit_min_rx": {
+      "description": "Guaranteed (CIR) download rate, e.g. '2M'",
+      "type": "string"
+    },
+    "rate_limit_min_tx": {
+      "description": "Guaranteed (CIR) upload rate, e.g. '2M'",
+      "type": "string"
+    },
+    "rate_limit_burst_rx": {
+      "description": "Download burst rate, e.g. '20M'",
+      "type": "string"
+    },
+    "rate_limit_burst_tx": {
+      "description": "Upload burst rate, e.g. '20M'",
+      "type": "string"
+    },
+    "rate_limit_burst_threshold_rx": {
+      "description": "Download burst threshold rate",
+      "type": "string"
+    },
+    "rate_limit_burst_threshold_tx": {
+      "description": "Upload burst threshold rate",
+      "type": "string"
+    },
+    "rate_limit_burst_time_rx": {
+      "description": "Download burst time, e.g. '10s'",
+      "type": "string"
+    },
+    "rate_limit_burst_time_tx": {
+      "description": "Upload burst time, e.g. '10s'",
+      "type": "string"
+    },
+    "rate_limit_priority": {
+      "description": "Queue priority (1-8)",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "download_limit": {
+      "description": "Download transfer cap in bytes, e.g. '5G'",
+      "type": "string"
+    },
+    "upload_limit": {
+      "description": "Upload transfer cap in bytes, e.g. '5G'",
+      "type": "string"
+    },
     "transfer_limit": {
       "description": "Total transfer cap, e.g. '10G'",
       "type": "string"
@@ -23,6 +69,14 @@
       "description": "Uptime cap, e.g. '1d'",
       "type": "string"
     },
+    "reset_counters_interval": {
+      "description": "Interval to auto-reset usage counters",
+      "type": "string"
+    },
+    "reset_counters_start_time": {
+      "description": "Start time for counter reset interval",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     }

package/schemas/tools/add_user_manager_router.json

@@ -21,6 +21,13 @@
       "minimum": -9007199254740991,
       "maximum": 9007199254740991
     },
+    "protocol": {
+      "description": "RADIUS transport protocol for this client (e.g. radius, radsec)",
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    },
     "disabled": {
       "default": false,
       "type": "boolean"

package/schemas/tools/add_user_manager_user.json

@@ -24,6 +24,14 @@
       "description": "Custom RADIUS attributes",
       "type": "string"
     },
+    "caller_id": {
+      "description": "Caller ID the user is restricted to (e.g. MAC)",
+      "type": "string"
+    },
+    "otp_secret": {
+      "description": "Base32 OTP shared secret for two-factor auth",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/add_wireguard_peer.json

@@ -29,6 +29,40 @@
       "description": "seconds as string e.g. \"25\"",
       "type": "string"
     },
+    "name": {
+      "description": "optional peer name label",
+      "type": "string"
+    },
+    "private_key": {
+      "description": "peer's private key (lets the router generate this peer's client config)",
+      "type": "string"
+    },
+    "responder": {
+      "description": "only respond to handshakes, never initiate (for road-warrior clients)",
+      "type": "boolean"
+    },
+    "client_address": {
+      "description": "client tunnel address(es) for the generated client config",
+      "type": "string"
+    },
+    "client_dns": {
+      "description": "DNS server(s) written into the generated client config",
+      "type": "string"
+    },
+    "client_endpoint": {
+      "description": "server endpoint host[:port] written into the generated client config",
+      "type": "string"
+    },
+    "client_keepalive": {
+      "description": "client persistent-keepalive for the generated config e.g. \"25s\"",
+      "type": "string"
+    },
+    "client_listen_port": {
+      "description": "listen-port written into the generated client config",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/allow_device.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "allow_device",
+  "type": "object",
+  "properties": {
+    "mac": {
+      "type": "string",
+      "description": "Device MAC address to unblock"
+    }
+  },
+  "required": ["mac"],
+  "additionalProperties": false
+}

package/schemas/tools/block_device.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "block_device",
+  "type": "object",
+  "properties": {
+    "mac": {
+      "type": "string",
+      "description": "Device MAC address to block"
+    },
+    "comment": {
+      "description": "Optional reason, appended to the rule label",
+      "type": "string"
+    }
+  },
+  "required": ["mac"],
+  "additionalProperties": false
+}

package/schemas/tools/create_bridge.json

@@ -28,6 +28,81 @@
       "type": "integer",
       "minimum": -9007199254740991,
       "maximum": 9007199254740991
+    },
+    "ageing_time": {
+      "description": "Host table entry timeout, e.g. '5m'",
+      "type": "string"
+    },
+    "arp": {
+      "description": "ARP resolution mode",
+      "type": "string",
+      "enum": ["disabled", "enabled", "proxy-arp", "reply-only", "local-proxy-arp"]
+    },
+    "arp_timeout": {
+      "description": "ARP entry timeout, e.g. '30s' or 'auto'",
+      "type": "string"
+    },
+    "auto_mac": {
+      "description": "Automatically pick the bridge MAC from a member port",
+      "type": "boolean"
+    },
+    "admin_mac": {
+      "description": "Static bridge MAC address (requires auto_mac=false)",
+      "type": "string"
+    },
+    "priority": {
+      "description": "STP/RSTP bridge priority, e.g. '0x8000'",
+      "type": "string"
+    },
+    "ether_type": {
+      "description": "Service VLAN (S-tag) EtherType when VLAN filtering",
+      "type": "string",
+      "enum": ["0x8100", "0x88a8", "0x9100"]
+    },
+    "pvid": {
+      "description": "Bridge-level default port VLAN ID",
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 4094
+    },
+    "frame_types": {
+      "description": "Default accepted frame types for ports",
+      "type": "string",
+      "enum": ["admit-all", "admit-only-untagged-and-priority-tagged", "admit-only-vlan-tagged"]
+    },
+    "ingress_filtering": {
+      "description": "Default ingress VLAN filtering for ports",
+      "type": "boolean"
+    },
+    "dhcp_snooping": {
+      "description": "Enable DHCP snooping",
+      "type": "boolean"
+    },
+    "igmp_snooping": {
+      "description": "Enable IGMP/MLD snooping",
+      "type": "boolean"
+    },
+    "fast_forward": {
+      "description": "Enable Fast Forward optimization",
+      "type": "boolean"
+    },
+    "mvrp": {
+      "description": "Enable Multiple VLAN Registration Protocol",
+      "type": "boolean"
+    },
+    "forward_delay": {
+      "description": "STP forward delay timer, e.g. '15s'",
+      "type": "string"
+    },
+    "max_message_age": {
+      "description": "STP maximum message age, e.g. '20s'",
+      "type": "string"
+    },
+    "transmit_hold_count": {
+      "description": "STP transmit hold count",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
     }
   },
   "required": ["name", "vlan_filtering", "disabled"],

package/schemas/tools/create_certificate.json

@@ -33,9 +33,29 @@
       "description": "Country code (C), e.g. 'US'",
       "type": "string"
     },
+    "state": {
+      "description": "State or province (ST)",
+      "type": "string"
+    },
+    "locality": {
+      "description": "Locality / city (L)",
+      "type": "string"
+    },
     "organization": {
       "description": "Organization (O)",
       "type": "string"
+    },
+    "unit": {
+      "description": "Organizational unit (OU)",
+      "type": "string"
+    },
+    "subject_alt_name": {
+      "description": "Subject Alternative Name(s), e.g. 'DNS:example.com,IP:1.2.3.4'",
+      "type": "string"
+    },
+    "trusted": {
+      "description": "Whether the certificate is trusted for chain verification",
+      "type": "boolean"
     }
   },
   "required": ["name", "common_name", "key_size", "days_valid"],

package/schemas/tools/create_dhcp_network.json

@@ -39,6 +39,29 @@
         "type": "string"
       }
     },
+    "dhcp_option_set": {
+      "description": "Named option set (`/ip dhcp-server option sets`) to append",
+      "type": "string"
+    },
+    "dns_none": {
+      "description": "Do not send any DNS server to clients (overrides dns_servers)",
+      "type": "boolean"
+    },
+    "next_server": {
+      "description": "Next-server (siaddr) address for PXE/TFTP boot",
+      "type": "string"
+    },
+    "boot_file_name": {
+      "description": "Boot file name (option 67) for PXE/TFTP boot",
+      "type": "string"
+    },
+    "caps_manager": {
+      "description": "CAPsMAN address(es) advertised to CAPs via DHCP",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
     "comment": {
       "type": "string"
     }

package/schemas/tools/create_dhcp_server.json

@@ -29,6 +29,40 @@
     "delay_threshold": {
       "type": "string"
     },
+    "add_arp": {
+      "description": "Add dynamic ARP entry for each lease (use with reply-only ARP on the interface)",
+      "type": "boolean"
+    },
+    "always_broadcast": {
+      "description": "Always send replies as broadcast",
+      "type": "boolean"
+    },
+    "bootp_support": {
+      "description": "Which BOOTP requests to answer",
+      "type": "string",
+      "enum": ["none", "static", "dynamic"]
+    },
+    "conflict_detection": {
+      "description": "Ping/ARP-probe an address before offering it to detect conflicts",
+      "type": "boolean"
+    },
+    "use_radius": {
+      "description": "Use RADIUS for leases (accounting = RADIUS accounting only)",
+      "type": "string",
+      "enum": ["yes", "no", "accounting"]
+    },
+    "relay": {
+      "description": "DHCP relay address this server services",
+      "type": "string"
+    },
+    "server_address": {
+      "description": "Override the server identifier address sent to clients",
+      "type": "string"
+    },
+    "lease_script": {
+      "description": "Script run on lease assign/release",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     }

package/schemas/tools/create_eoip_tunnel.json

@@ -25,6 +25,40 @@
       "description": "Keepalive interval/retries, e.g. '10s,3'",
       "type": "string"
     },
+    "dont_fragment": {
+      "description": "Don't-fragment behavior",
+      "type": "string",
+      "enum": ["inherit", "no"]
+    },
+    "clamp_tcp_mss": {
+      "description": "Clamp TCP MSS to the tunnel MTU",
+      "type": "boolean"
+    },
+    "allow_fast_path": {
+      "description": "Allow FastPath processing for this tunnel",
+      "type": "boolean"
+    },
+    "ipsec_secret": {
+      "description": "Pre-shared key to auto-create an IPsec policy securing the tunnel",
+      "type": "string"
+    },
+    "dscp": {
+      "description": "DSCP for encapsulated packets: 'inherit' or 0-63",
+      "type": "string"
+    },
+    "mac_address": {
+      "description": "MAC address of the EoIP interface",
+      "type": "string"
+    },
+    "arp": {
+      "description": "Address Resolution Protocol mode for the interface",
+      "type": "string",
+      "enum": ["disabled", "enabled", "local-proxy-arp", "proxy-arp", "reply-only"]
+    },
+    "arp_timeout": {
+      "description": "ARP entry timeout, e.g. '30s' or 'auto'",
+      "type": "string"
+    },
     "mtu": {
       "type": "integer",
       "minimum": -9007199254740991,