@usex/mikrotik-mcp 3.5.0 → 3.7.0

package/schemas/tools/add_dhcp_client.json

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "add_dhcp_client",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string",
+      "description": "Interface to run the DHCP client on, e.g. 'ether1'"
+    },
+    "add_default_route": {
+      "default": true,
+      "description": "Install the received default gateway",
+      "type": "boolean"
+    },
+    "use_peer_dns": {
+      "default": true,
+      "type": "boolean"
+    },
+    "use_peer_ntp": {
+      "default": true,
+      "type": "boolean"
+    },
+    "disabled": {
+      "default": false,
+      "type": "boolean"
+    },
+    "comment": {
+      "type": "string"
+    }
+  },
+  "required": ["interface", "add_default_route", "use_peer_dns", "use_peer_ntp", "disabled"],
+  "additionalProperties": false
+}

package/schemas/tools/apply_traffic_shaping.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "apply_traffic_shaping",
+  "type": "object",
+  "properties": {
+    "classes": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Queue name, e.g. 'voip' or 'guest-cap'"
+          },
+          "target": {
+            "type": "string",
+            "description": "Target address/subnet this class applies to, e.g. '192.168.20.0/24'"
+          },
+          "max_limit": {
+            "type": "string",
+            "description": "RouterOS max-limit as 'upload/download', e.g. '10M/10M' (or a single value)"
+          },
+          "priority": {
+            "default": 8,
+            "description": "1 (highest) … 8 (lowest); lower number wins under contention",
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 8
+          },
+          "comment": {
+            "type": "string"
+          }
+        },
+        "required": ["name", "target", "max_limit", "priority"],
+        "additionalProperties": false
+      },
+      "description": "Shaping classes to create, in priority order"
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview the commands only (default); true = create the queues",
+      "type": "boolean"
+    }
+  },
+  "required": ["classes", "apply"],
+  "additionalProperties": false
+}

package/schemas/tools/audit_certificate_expiry.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "audit_certificate_expiry",
+  "type": "object",
+  "properties": {
+    "warn_within_days": {
+      "default": 30,
+      "description": "Flag certificates expiring within this many days as 'expiring soon'",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    }
+  },
+  "required": ["warn_within_days"],
+  "additionalProperties": false
+}

package/schemas/tools/audit_firewall_hardening.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "audit_firewall_hardening",
+  "type": "object",
+  "properties": {},
+  "additionalProperties": false
+}

package/schemas/tools/build_guest_hotspot.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "build_guest_hotspot",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string",
+      "description": "Interface/bridge the hotspot runs on, e.g. 'guest-bridge'"
+    },
+    "subnet": {
+      "default": "10.5.50.0/24",
+      "description": "Hotspot subnet",
+      "type": "string"
+    },
+    "gateway": {
+      "default": "10.5.50.1",
+      "description": "Router address in the hotspot subnet",
+      "type": "string"
+    },
+    "pool_range": {
+      "description": "DHCP/hotspot pool; defaults to .10–.254",
+      "type": "string"
+    },
+    "dns_name": {
+      "description": "Captive-portal hostname, e.g. 'guest.wifi'",
+      "type": "string"
+    },
+    "rate_limit": {
+      "default": "5M/5M",
+      "description": "Per-guest max-limit (rx/tx)",
+      "type": "string"
+    },
+    "walled_garden": {
+      "description": "Domains reachable before sign-in, e.g. ['*.stripe.com']",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview (default); true = build",
+      "type": "boolean"
+    }
+  },
+  "required": ["interface", "subnet", "gateway", "rate_limit", "apply"],
+  "additionalProperties": false
+}

package/schemas/tools/build_wireguard_mesh.json

@@ -0,0 +1,79 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "build_wireguard_mesh",
+  "type": "object",
+  "properties": {
+    "devices": {
+      "minItems": 2,
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Configured device names to include in the mesh (2+)"
+    },
+    "address_prefix": {
+      "default": "10.20.0.0/24",
+      "description": "Mesh subnet; each device gets <prefix>.<index+1> on its WireGuard interface",
+      "type": "string"
+    },
+    "interface": {
+      "default": "wg-mesh",
+      "description": "WireGuard interface name to create/use",
+      "type": "string"
+    },
+    "listen_port": {
+      "default": 13231,
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "topology": {
+      "default": "full-mesh",
+      "type": "string",
+      "enum": ["full-mesh", "hub-spoke"]
+    },
+    "hub": {
+      "description": "Hub device name (required when topology=hub-spoke)",
+      "type": "string"
+    },
+    "endpoints": {
+      "description": "Per-device public endpoint host override, e.g. {\"site-a\":\"a.example.com\"}",
+      "type": "object",
+      "propertyNames": {
+        "type": "string"
+      },
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "allowed_lans": {
+      "description": "Per-device LAN subnet to route through the tunnel, e.g. {\"site-a\":\"192.168.10.0/24\"}",
+      "type": "object",
+      "propertyNames": {
+        "type": "string"
+      },
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "persistent_keepalive": {
+      "default": "25s",
+      "type": "string"
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview the plan (default); true = build",
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "devices",
+    "address_prefix",
+    "interface",
+    "listen_port",
+    "topology",
+    "persistent_keepalive",
+    "apply"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/design_network_segment.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "design_network_segment",
+  "type": "object",
+  "properties": {
+    "vlan_id": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 4094
+    },
+    "name": {
+      "type": "string",
+      "description": "Name for the VLAN interface, e.g. 'guest'"
+    },
+    "subnet": {
+      "type": "string",
+      "description": "CIDR for the segment, e.g. '192.168.30.0/24'"
+    },
+    "gateway": {
+      "type": "string",
+      "description": "Router's address in the segment, e.g. '192.168.30.1'"
+    },
+    "bridge": {
+      "default": "bridge",
+      "description": "Bridge to put the VLAN on",
+      "type": "string"
+    },
+    "tagged_ports": {
+      "description": "Comma-separated trunk/tagged ports (+ the bridge)",
+      "type": "string"
+    },
+    "untagged_ports": {
+      "description": "Comma-separated access/untagged ports",
+      "type": "string"
+    },
+    "dhcp": {
+      "default": true,
+      "description": "Create a DHCP server + pool for the segment",
+      "type": "boolean"
+    },
+    "dhcp_range": {
+      "description": "Pool range; defaults to .10–.254 of the subnet",
+      "type": "string"
+    },
+    "internet": {
+      "default": true,
+      "description": "Allow internet access via srcnat masquerade",
+      "type": "boolean"
+    },
+    "isolate_from": {
+      "description": "Subnets this segment must NOT reach, e.g. ['192.168.1.0/24']",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview (default); true = build",
+      "type": "boolean"
+    }
+  },
+  "required": ["vlan_id", "name", "subnet", "gateway", "bridge", "dhcp", "internet", "apply"],
+  "additionalProperties": false
+}

package/schemas/tools/force_cloud_update.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "force_cloud_update",
+  "type": "object",
+  "properties": {},
+  "additionalProperties": false
+}

package/schemas/tools/forecast_link_saturation.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "forecast_link_saturation",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string",
+      "description": "Interface to sample, e.g. 'ether1-wan'"
+    },
+    "capacity_mbps": {
+      "default": 1000,
+      "description": "Link rated speed in Mbit/s (e.g. 1000 for gig)",
+      "type": "number"
+    },
+    "monthly_growth_pct": {
+      "default": 10,
+      "description": "Assumed month-over-month traffic growth %",
+      "type": "number"
+    }
+  },
+  "required": ["interface", "capacity_mbps", "monthly_growth_pct"],
+  "additionalProperties": false
+}

package/schemas/tools/forward_port.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "forward_port",
+  "type": "object",
+  "properties": {
+    "protocol": {
+      "default": "tcp",
+      "type": "string",
+      "enum": ["tcp", "udp"]
+    },
+    "external_port": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 65535
+    },
+    "internal_host": {
+      "type": "string",
+      "description": "LAN IP of the service, e.g. '192.168.1.10'"
+    },
+    "internal_port": {
+      "description": "Defaults to external_port",
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 65535
+    },
+    "wan_interface": {
+      "description": "Restrict the forward to this WAN interface",
+      "type": "string"
+    },
+    "lan_subnet": {
+      "description": "LAN subnet for hairpin NAT, e.g. '192.168.1.0/24'",
+      "type": "string"
+    },
+    "comment": {
+      "type": "string"
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview (default); true = create",
+      "type": "boolean"
+    }
+  },
+  "required": ["protocol", "external_port", "internal_host", "apply"],
+  "additionalProperties": false
+}

package/schemas/tools/generate_hotspot_vouchers.json

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "generate_hotspot_vouchers",
+  "type": "object",
+  "properties": {
+    "count": {
+      "default": 10,
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 200
+    },
+    "uptime_limit": {
+      "description": "Per-voucher uptime, e.g. '1h', '1d'",
+      "type": "string"
+    },
+    "profile": {
+      "description": "Hotspot user profile to assign",
+      "type": "string"
+    },
+    "code_prefix": {
+      "default": "g",
+      "description": "Prefix for the generated codes",
+      "type": "string"
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview codes (default); true = create",
+      "type": "boolean"
+    }
+  },
+  "required": ["count", "code_prefix", "apply"],
+  "additionalProperties": false
+}

package/schemas/tools/get_dhcp_client.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "get_dhcp_client",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string",
+      "description": "Interface name, e.g. 'ether1'"
+    }
+  },
+  "required": ["interface"],
+  "additionalProperties": false
+}

package/schemas/tools/get_ip_cloud.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "get_ip_cloud",
+  "type": "object",
+  "properties": {},
+  "additionalProperties": false
+}

package/schemas/tools/harden_firewall.json

@@ -0,0 +1,104 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "harden_firewall",
+  "type": "object",
+  "properties": {
+    "preset": {
+      "default": "standard",
+      "description": "Bundle to apply; 'custom' uses only the `protections` toggles",
+      "type": "string",
+      "enum": ["basic", "standard", "paranoid", "custom"]
+    },
+    "protections": {
+      "description": "Per-protection on/off, overriding/extending the preset",
+      "type": "object",
+      "propertyNames": {
+        "type": "string",
+        "enum": [
+          "state_hygiene",
+          "ssh_bruteforce",
+          "ddos_conn_limit",
+          "syn_flood",
+          "icmp_limit",
+          "port_scan",
+          "anti_spoof",
+          "raw_drops",
+          "mgmt_lockdown"
+        ]
+      },
+      "additionalProperties": {
+        "type": "boolean"
+      },
+      "required": [
+        "state_hygiene",
+        "ssh_bruteforce",
+        "ddos_conn_limit",
+        "syn_flood",
+        "icmp_limit",
+        "port_scan",
+        "anti_spoof",
+        "raw_drops",
+        "mgmt_lockdown"
+      ]
+    },
+    "trusted_sources": {
+      "description": "Address or address-list name always accepted first (anti-lockout)",
+      "type": "string"
+    },
+    "wan_interface": {
+      "description": "WAN interface (required for anti_spoof)",
+      "type": "string"
+    },
+    "mgmt_ports": {
+      "default": "22,8291,8728",
+      "description": "Management TCP ports",
+      "type": "string"
+    },
+    "ssh_ports": {
+      "default": "22",
+      "description": "Ports watched by the brute-force ladder",
+      "type": "string"
+    },
+    "conn_limit": {
+      "default": 100,
+      "description": "Per-source TCP connection cap",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "syn_rate": {
+      "default": "200,50:packet",
+      "type": "string"
+    },
+    "icmp_rate": {
+      "default": "50,10:packet",
+      "type": "string"
+    },
+    "apply": {
+      "default": false,
+      "description": "false = preview only (default); true = apply",
+      "type": "boolean"
+    },
+    "safe_mode": {
+      "default": true,
+      "description": "Apply through Safe Mode (auto-revert on lockout)",
+      "type": "boolean"
+    },
+    "i_accept_lockout_risk": {
+      "default": false,
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "preset",
+    "mgmt_ports",
+    "ssh_ports",
+    "conn_limit",
+    "syn_rate",
+    "icmp_rate",
+    "apply",
+    "safe_mode",
+    "i_accept_lockout_risk"
+  ],
+  "additionalProperties": false
+}

package/schemas/tools/list_dhcp_clients.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "list_dhcp_clients",
+  "type": "object",
+  "properties": {
+    "interface_filter": {
+      "description": "Substring match on interface",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/tools/onboard_wireguard_user.json

@@ -0,0 +1,39 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "onboard_wireguard_user",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string",
+      "description": "Existing WireGuard SERVER interface, e.g. 'wg-server'"
+    },
+    "user": {
+      "type": "string",
+      "description": "User/device label, e.g. 'alice-laptop'"
+    },
+    "address": {
+      "type": "string",
+      "description": "Tunnel IP to assign the client, e.g. '10.20.0.50'"
+    },
+    "endpoint": {
+      "type": "string",
+      "description": "Server public endpoint host:port, e.g. 'vpn.example.com:13231'"
+    },
+    "dns": {
+      "description": "DNS for the client, e.g. '10.20.0.1'",
+      "type": "string"
+    },
+    "allowed_ips": {
+      "default": "0.0.0.0/0",
+      "description": "Client AllowedIPs: '0.0.0.0/0' full-tunnel, or a LAN subnet for split-tunnel",
+      "type": "string"
+    },
+    "keepalive": {
+      "default": "25",
+      "description": "PersistentKeepalive seconds",
+      "type": "string"
+    }
+  },
+  "required": ["interface", "user", "address", "endpoint", "allowed_ips", "keepalive"],
+  "additionalProperties": false
+}

package/schemas/tools/remove_dhcp_client.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "remove_dhcp_client",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string"
+    }
+  },
+  "required": ["interface"],
+  "additionalProperties": false
+}

package/schemas/tools/remove_firewall_hardening.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "remove_firewall_hardening",
+  "type": "object",
+  "properties": {},
+  "additionalProperties": false
+}

package/schemas/tools/remove_threat_feed.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "remove_threat_feed",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "The feed id used when subscribing"
+    }
+  },
+  "required": ["name"],
+  "additionalProperties": false
+}

package/schemas/tools/remove_time_policy.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "remove_time_policy",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "description": "The policy id used when installing"
+    }
+  },
+  "required": ["name"],
+  "additionalProperties": false
+}

package/schemas/tools/renew_dhcp_client.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "renew_dhcp_client",
+  "type": "object",
+  "properties": {
+    "interface": {
+      "type": "string"
+    },
+    "release": {
+      "default": false,
+      "description": "true = release the lease; false = renew",
+      "type": "boolean"
+    }
+  },
+  "required": ["interface", "release"],
+  "additionalProperties": false
+}