@usex/mikrotik-mcp 3.25.0 → 3.27.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.25.0",
+  "version": "3.27.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",

package/schemas/README.md

@@ -7,7 +7,7 @@ edit by hand — regenerate instead.
 | File                 | Contents                                                                                   |
 | -------------------- | ------------------------------------------------------------------------------------------ |
 | `config.schema.json` | The runtime configuration object (env vars / CLI flags).                                   |
-| `tool-catalog.json`  | Every one of the 736 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
+| `tool-catalog.json`  | Every one of the 738 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
 | `tools/<name>.json`  | The input JSON Schema for a single tool.                                                   |
 
 `risk` is derived from the MCP tool annotations:

package/schemas/config.schema.json

@@ -86,7 +86,8 @@
         "port": 8000,
         "allowedHosts": "",
         "allowedOrigins": "",
-        "corsOrigins": ""
+        "corsOrigins": "",
+        "toolPageSize": 0
       },
       "type": "object",
       "properties": {
@@ -116,9 +117,23 @@
         "corsOrigins": {
           "default": "",
           "type": "string"
+        },
+        "toolPageSize": {
+          "default": 0,
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991
         }
       },
-      "required": ["transport", "host", "port", "allowedHosts", "allowedOrigins", "corsOrigins"],
+      "required": [
+        "transport",
+        "host",
+        "port",
+        "allowedHosts",
+        "allowedOrigins",
+        "corsOrigins",
+        "toolPageSize"
+      ],
       "additionalProperties": false
     },
     "s3": {

package/schemas/tool-catalog.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "3.24.0",
+  "version": "3.26.0",
   "generated": "by scripts/gen-schemas.ts — do not edit by hand",
-  "toolCount": 736,
+  "toolCount": 738,
   "tools": [
     {
       "name": "list_interfaces",
@@ -14314,21 +14314,17 @@
         "destructiveHint": false,
         "openWorldHint": false
       },
-      "description": "Signs an existing certificate template (`/certificate sign`) to produce a valid certificate. Omit `ca` to produce a self-signed certificate; supply the name of an existing CA certificate in `ca` to issue it under that CA. The certificate template to sign must already exist — create it first with `create_certificate`. Optionally override the common name at signing time via `common_name`. May run for several seconds while the device generates key material. Returns the signing operation output from the device.",
+      "description": "Signs an existing certificate template (`/certificate sign`) to produce a valid certificate. Omit `ca` to produce a self-signed certificate; supply the name of an existing CA certificate in `ca` to issue it under that CA. IMPORTANT: certificate stores are PER-DEVICE — the template (and the `ca`, if given) must live on the SAME router this runs on. A 'CA not found' error almost always means the template or CA was created on a different device; verify with list_certificates on this device first (and check the targeting). Set the common name (CN) when you create the template (create_certificate), not here — `/certificate sign` has no CN option. May run for several seconds while the device generates key material. Returns the signing operation output from the device.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",
         "properties": {
           "name": {
             "type": "string",
-            "description": "Name of the certificate to sign"
+            "description": "Name of the certificate template to sign"
           },
           "ca": {
-            "description": "Name of the CA certificate to sign with (omit to self-sign)",
-            "type": "string"
-          },
-          "common_name": {
-            "description": "Override the common name when signing",
+            "description": "Name of the CA certificate to sign with (must exist on THIS device; omit to self-sign)",
             "type": "string"
           }
         },
@@ -17872,7 +17868,51 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "Permanently delete an SSTP client tunnel interface (`/interface sstp-client remove [find name=...]`) by interface name. First verifies the interface exists (count-only check), then removes it; the tunnel is torn down immediately and the action is irreversible. Use `list_sstp_clients` to confirm the interface name before calling this tool. For L2TP, OpenVPN, or PPTP client interfaces see their respective tool scopes (`create_l2tp_client`, `create_ovpn_client`, `create_pptp_client`). To disable the interface without deleting it, no dedicated enable/disable tool exists in this scope — set `disabled=yes` via RouterOS directly. Returns a confirmation message on success or a not-found message if the name does not exist.",
+      "description": "Permanently delete an SSTP client tunnel interface (`/interface sstp-client remove [find name=...]`) by interface name. First verifies the interface exists (count-only check), then removes it; the tunnel is torn down immediately and the action is irreversible. Use `list_sstp_clients` to confirm the interface name before calling this tool. For L2TP, OpenVPN, or PPTP client interfaces see their respective tool scopes (`create_l2tp_client`, `create_ovpn_client`, `create_pptp_client`). To deactivate the interface without deleting it use `disable_sstp_client` (re-activate with `enable_sstp_client`). Returns a confirmation message on success or a not-found message if the name does not exist.",
+      "inputSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": ["name"],
+        "additionalProperties": false
+      }
+    },
+    {
+      "name": "enable_sstp_client",
+      "title": "Enable SSTP Client Interface",
+      "risk": "write-idempotent",
+      "annotations": {
+        "destructiveHint": false,
+        "idempotentHint": true,
+        "openWorldHint": false
+      },
+      "description": "Enables a disabled SSTP client interface (`/interface sstp-client enable [find name=...]`), causing the router to dial out and attempt the TLS connection to the remote SSTP server. Use to activate a tunnel that was created disabled or stopped with `disable_sstp_client`. For L2TP/PPTP/OpenVPN tunnels use their own enable tools. Identifies the interface by name — create one with `create_sstp_client`.",
+      "inputSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": ["name"],
+        "additionalProperties": false
+      }
+    },
+    {
+      "name": "disable_sstp_client",
+      "title": "Disable SSTP Client Interface",
+      "risk": "write-idempotent",
+      "annotations": {
+        "destructiveHint": false,
+        "idempotentHint": true,
+        "openWorldHint": false
+      },
+      "description": "Disables an active SSTP client interface (`/interface sstp-client disable [find name=...]`), tearing down the tunnel without removing its configuration. Use to temporarily stop a tunnel while preserving its settings for later reuse. To re-enable use `enable_sstp_client`; to permanently remove use `remove_sstp_client`.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",
@@ -21177,7 +21217,7 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "List all MikroTik devices registered in this server's configuration (server-side metadata — no RouterOS command is run, no SSH connection is opened). Use this to discover the exact device name strings required by the `device` argument on every other tool, especially when working across multiple routers (e.g. building a tunnel between two devices). Returns each device's name, username, host, port, auth method (key / password / none), optional description, and which entry is the default. Credentials and private-key material are never included in the output.",
+      "description": "List all MikroTik devices registered in this server's configuration (server-side metadata — no RouterOS command is run, no SSH connection is opened). Use this to discover the exact device name strings required by the `device` argument on every other tool, especially when working across multiple routers (e.g. building a tunnel between two devices). Returns each device's name, username, host, port, auth method (key / password / none), optional description, and which entry is the default. This name → host:port mapping is FIXED for the life of the server process — it does NOT change mid-session, so a given device name always reaches the same physical router. Call this to verify the exact target before any write/destructive change when several routers are configured. Credentials and private-key material are never included in the output.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",

package/schemas/tools/disable_sstp_client.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "disable_sstp_client",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    }
+  },
+  "required": ["name"],
+  "additionalProperties": false
+}

package/schemas/tools/enable_sstp_client.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "enable_sstp_client",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string"
+    }
+  },
+  "required": ["name"],
+  "additionalProperties": false
+}

package/schemas/tools/sign_certificate.json

@@ -5,14 +5,10 @@
   "properties": {
     "name": {
       "type": "string",
-      "description": "Name of the certificate to sign"
+      "description": "Name of the certificate template to sign"
     },
     "ca": {
-      "description": "Name of the CA certificate to sign with (omit to self-sign)",
-      "type": "string"
-    },
-    "common_name": {
-      "description": "Override the common name when signing",
+      "description": "Name of the CA certificate to sign with (must exist on THIS device; omit to self-sign)",
       "type": "string"
     }
   },