@usex/mikrotik-mcp 3.8.0 → 3.9.1

package/dist/cli.js

@@ -12753,10 +12753,15 @@ ${result}`;
     },
     async handler(a, ctx) {
       ctx.info("Configuring OpenVPN server");
-      const cmd = new Cmd("/interface ovpn-server server set").bool("enabled", a.enabled).opt("certificate", a.certificate).opt("auth", a.auth).opt("cipher", a.cipher).opt("netmask", a.netmask).opt("mode", a.mode).opt("port", a.port).opt("protocol", a.protocol).opt("default-profile", a.default_profile).bool("require-client-certificate", a.require_client_certificate).opt("max-mtu", a.max_mtu).build();
+      const params = () => new Cmd("/interface ovpn-server server set").opt("certificate", a.certificate).opt("auth", a.auth).opt("cipher", a.cipher).opt("netmask", a.netmask).opt("mode", a.mode).opt("port", a.port).opt("protocol", a.protocol).opt("default-profile", a.default_profile).bool("require-client-certificate", a.require_client_certificate).opt("max-mtu", a.max_mtu);
+      const cmd = params().bool("disabled", a.enabled === undefined ? undefined : !a.enabled).build();
       if (cmd === "/interface ovpn-server server set")
         return "No updates specified.";
-      const result = await executeMikrotikCommand(cmd, ctx);
+      let result = await executeMikrotikCommand(cmd, ctx);
+      if (a.enabled !== undefined && containsRawParserError(result)) {
+        const legacy = params().bool("enabled", a.enabled).build();
+        result = await executeMikrotikCommand(legacy, ctx);
+      }
       if (looksLikeError(result))
         return `Failed to configure OpenVPN server: ${result}`;
       const details = await executeMikrotikCommand("/interface ovpn-server server print", ctx);
@@ -20038,7 +20043,7 @@ ${details}` : "WireGuard interface created successfully.";
     name: "list_wireguard_interfaces",
     title: "List WireGuard Interfaces",
     annotations: READ,
-    description: "Lists WireGuard tunnel interfaces (`/interface wireguard print`). Returns each interface's" + " name, listen-port, public-key, MTU, and running/disabled status." + " Supports filtering by name substring (name_filter), disabled-only, or running-only." + " For the peer table use list_wireguard_peers." + " Use the name from this output with get_wireguard_interface or update_wireguard_interface.",
+    description: "`list_wireguard_interfaces` \u2014 READ / list / show / inspect all WireGuard tunnel interfaces" + " (`/interface wireguard print`). The go-to tool to read the current WireGuard state on a" + " device. Returns each interface's name, listen-port, public-key, MTU, and running/disabled" + " status. Filter by name substring (name_filter), disabled-only, or running-only." + " For one interface's full detail use get_wireguard_interface; for the peer table use" + " list_wireguard_peers; for interfaces AND peers in one call use get_wireguard_status.",
     inputSchema: {
       name_filter: z108.string().optional(),
       disabled_only: z108.boolean().default(false),
@@ -20063,7 +20068,7 @@ ${result}`;
     name: "get_wireguard_interface",
     title: "Get WireGuard Interface Details",
     annotations: READ,
-    description: "Retrieves full detail of a single WireGuard tunnel interface (`/interface wireguard print detail`)" + " looked up by name. Returns listen-port, private-key, public-key, MTU, running state, and comment." + " For the peer table use get_wireguard_peer." + " Use list_wireguard_interfaces to discover available interface names.",
+    description: "`get_wireguard_interface` \u2014 READ / get / show the full detail of ONE WireGuard tunnel interface" + " (`/interface wireguard print detail`) looked up by name. Returns listen-port, private-key," + " public-key, MTU, running state, and comment. To list all interfaces use" + " list_wireguard_interfaces; for that interface's peers use list_wireguard_peers; for" + " interfaces AND peers in one call use get_wireguard_status.",
     inputSchema: { name: z108.string() },
     async handler(a, ctx) {
       ctx.info(`Getting WireGuard interface details: name=${a.name}`);
@@ -20073,6 +20078,31 @@ ${result}`;
 ${result}`;
     }
   }),
+  defineTool({
+    name: "get_wireguard_status",
+    title: "Get WireGuard Status (Interfaces + Peers)",
+    annotations: READ,
+    description: "`get_wireguard_status` \u2014 READ the current WireGuard state on a device in ONE call: ALL tunnel" + " interfaces AND ALL peers together. Use this FIRST to inspect / show / check WireGuard before" + " changing anything (e.g. to read public keys, see which side initiates, or confirm the tunnel" + " is up). Interfaces report name, listen-port, public-key, MTU and running state; peers report" + " .id, interface, public-key, allowed-address, endpoint/current-endpoint, last-handshake time" + " and rx/tx bytes. Combines list_wireguard_interfaces + list_wireguard_peers; optionally filter" + " both to one interface with interface_filter.",
+    inputSchema: {
+      interface_filter: z108.string().optional().describe("Limit to one interface name, e.g. 'wg-mesh'")
+    },
+    async handler(a, ctx) {
+      ctx.info("Reading WireGuard status (interfaces + peers)");
+      const ifFilters = a.interface_filter ? [`name="${a.interface_filter}"`] : [];
+      const peerFilters = a.interface_filter ? [`interface="${a.interface_filter}"`] : [];
+      const interfaces = await executeMikrotikCommand(`/interface wireguard print${whereClause(ifFilters)}`, ctx);
+      const peers = await executeMikrotikCommand(`/interface wireguard peers print${whereClause(peerFilters)}`, ctx);
+      const ifBlock = isEmpty(interfaces) ? "(none)" : interfaces;
+      const peerBlock = isEmpty(peers) ? "(none)" : peers;
+      return `WIREGUARD INTERFACES:
+
+${ifBlock}
+
+WIREGUARD PEERS:
+
+${peerBlock}`;
+    }
+  }),
   defineTool({
     name: "update_wireguard_interface",
     title: "Update WireGuard Interface",
@@ -20185,7 +20215,7 @@ ${details}` : "WireGuard peer added successfully.";
     name: "list_wireguard_peers",
     title: "List WireGuard Peers",
     annotations: READ,
-    description: "Lists all WireGuard peer entries (`/interface wireguard peers print`)." + " Returns each peer's .id, interface, public-key, allowed-address, endpoint, last-handshake time, and rx/tx byte counters." + " Filter by interface name (interface_filter) or disabled-only." + " For the interface table use list_wireguard_interfaces." + " Use the .id from this output with get_wireguard_peer, update_wireguard_peer, remove_wireguard_peer," + " enable_wireguard_peer, or disable_wireguard_peer.",
+    description: "`list_wireguard_peers` \u2014 READ / list / show / inspect all WireGuard peers" + " (`/interface wireguard peers print`). Use this to read which peers are configured and" + " whether the tunnel is up (handshake). Returns each peer's .id, interface, public-key," + " allowed-address, endpoint/current-endpoint, last-handshake time, and rx/tx byte counters." + " Filter by interface name (interface_filter) or disabled-only. For the interface table use" + " list_wireguard_interfaces; for one peer's full detail use get_wireguard_peer; for interfaces" + " AND peers in one call use get_wireguard_status. Use the .id from this output with" + " update_wireguard_peer, remove_wireguard_peer, enable_wireguard_peer, or disable_wireguard_peer.",
     inputSchema: {
       interface_filter: z108.string().optional(),
       disabled_only: z108.boolean().default(false)
@@ -20207,7 +20237,7 @@ ${result}`;
     name: "get_wireguard_peer",
     title: "Get WireGuard Peer Details",
     annotations: READ,
-    description: "Retrieves full detail of a single WireGuard peer (`/interface wireguard peers print detail`) by its .id." + " Returns public-key, allowed-address, endpoint, preshared-key presence, last-handshake time, and rx/tx bytes." + " For the interface table use get_wireguard_interface." + ` Use list_wireguard_peers to obtain peer .id values.
+    description: "`get_wireguard_peer` \u2014 READ / get / show the full detail of ONE WireGuard peer" + " (`/interface wireguard peers print detail`) by its .id. Returns public-key, allowed-address," + " endpoint/current-endpoint, preshared-key presence, last-handshake time, and rx/tx bytes." + " To list all peers use list_wireguard_peers; for interfaces AND peers in one call use" + ` get_wireguard_status.
 
 ` + `Notes:
 ` + '  peer_id: the .id from list_wireguard_peers, format "*N" or "N" e.g. "*2"',
@@ -23276,7 +23306,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.8.0",
+  version: "3.9.1",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/index.js

@@ -12765,10 +12765,15 @@ ${result}`;
     },
     async handler(a, ctx) {
       ctx.info("Configuring OpenVPN server");
-      const cmd = new Cmd("/interface ovpn-server server set").bool("enabled", a.enabled).opt("certificate", a.certificate).opt("auth", a.auth).opt("cipher", a.cipher).opt("netmask", a.netmask).opt("mode", a.mode).opt("port", a.port).opt("protocol", a.protocol).opt("default-profile", a.default_profile).bool("require-client-certificate", a.require_client_certificate).opt("max-mtu", a.max_mtu).build();
+      const params = () => new Cmd("/interface ovpn-server server set").opt("certificate", a.certificate).opt("auth", a.auth).opt("cipher", a.cipher).opt("netmask", a.netmask).opt("mode", a.mode).opt("port", a.port).opt("protocol", a.protocol).opt("default-profile", a.default_profile).bool("require-client-certificate", a.require_client_certificate).opt("max-mtu", a.max_mtu);
+      const cmd = params().bool("disabled", a.enabled === undefined ? undefined : !a.enabled).build();
       if (cmd === "/interface ovpn-server server set")
         return "No updates specified.";
-      const result = await executeMikrotikCommand(cmd, ctx);
+      let result = await executeMikrotikCommand(cmd, ctx);
+      if (a.enabled !== undefined && containsRawParserError(result)) {
+        const legacy = params().bool("enabled", a.enabled).build();
+        result = await executeMikrotikCommand(legacy, ctx);
+      }
       if (looksLikeError(result))
         return `Failed to configure OpenVPN server: ${result}`;
       const details = await executeMikrotikCommand("/interface ovpn-server server print", ctx);
@@ -20050,7 +20055,7 @@ ${details}` : "WireGuard interface created successfully.";
     name: "list_wireguard_interfaces",
     title: "List WireGuard Interfaces",
     annotations: READ,
-    description: "Lists WireGuard tunnel interfaces (`/interface wireguard print`). Returns each interface's" + " name, listen-port, public-key, MTU, and running/disabled status." + " Supports filtering by name substring (name_filter), disabled-only, or running-only." + " For the peer table use list_wireguard_peers." + " Use the name from this output with get_wireguard_interface or update_wireguard_interface.",
+    description: "`list_wireguard_interfaces` \u2014 READ / list / show / inspect all WireGuard tunnel interfaces" + " (`/interface wireguard print`). The go-to tool to read the current WireGuard state on a" + " device. Returns each interface's name, listen-port, public-key, MTU, and running/disabled" + " status. Filter by name substring (name_filter), disabled-only, or running-only." + " For one interface's full detail use get_wireguard_interface; for the peer table use" + " list_wireguard_peers; for interfaces AND peers in one call use get_wireguard_status.",
     inputSchema: {
       name_filter: z109.string().optional(),
       disabled_only: z109.boolean().default(false),
@@ -20075,7 +20080,7 @@ ${result}`;
     name: "get_wireguard_interface",
     title: "Get WireGuard Interface Details",
     annotations: READ,
-    description: "Retrieves full detail of a single WireGuard tunnel interface (`/interface wireguard print detail`)" + " looked up by name. Returns listen-port, private-key, public-key, MTU, running state, and comment." + " For the peer table use get_wireguard_peer." + " Use list_wireguard_interfaces to discover available interface names.",
+    description: "`get_wireguard_interface` \u2014 READ / get / show the full detail of ONE WireGuard tunnel interface" + " (`/interface wireguard print detail`) looked up by name. Returns listen-port, private-key," + " public-key, MTU, running state, and comment. To list all interfaces use" + " list_wireguard_interfaces; for that interface's peers use list_wireguard_peers; for" + " interfaces AND peers in one call use get_wireguard_status.",
     inputSchema: { name: z109.string() },
     async handler(a, ctx) {
       ctx.info(`Getting WireGuard interface details: name=${a.name}`);
@@ -20085,6 +20090,31 @@ ${result}`;
 ${result}`;
     }
   }),
+  defineTool({
+    name: "get_wireguard_status",
+    title: "Get WireGuard Status (Interfaces + Peers)",
+    annotations: READ,
+    description: "`get_wireguard_status` \u2014 READ the current WireGuard state on a device in ONE call: ALL tunnel" + " interfaces AND ALL peers together. Use this FIRST to inspect / show / check WireGuard before" + " changing anything (e.g. to read public keys, see which side initiates, or confirm the tunnel" + " is up). Interfaces report name, listen-port, public-key, MTU and running state; peers report" + " .id, interface, public-key, allowed-address, endpoint/current-endpoint, last-handshake time" + " and rx/tx bytes. Combines list_wireguard_interfaces + list_wireguard_peers; optionally filter" + " both to one interface with interface_filter.",
+    inputSchema: {
+      interface_filter: z109.string().optional().describe("Limit to one interface name, e.g. 'wg-mesh'")
+    },
+    async handler(a, ctx) {
+      ctx.info("Reading WireGuard status (interfaces + peers)");
+      const ifFilters = a.interface_filter ? [`name="${a.interface_filter}"`] : [];
+      const peerFilters = a.interface_filter ? [`interface="${a.interface_filter}"`] : [];
+      const interfaces = await executeMikrotikCommand(`/interface wireguard print${whereClause(ifFilters)}`, ctx);
+      const peers = await executeMikrotikCommand(`/interface wireguard peers print${whereClause(peerFilters)}`, ctx);
+      const ifBlock = isEmpty(interfaces) ? "(none)" : interfaces;
+      const peerBlock = isEmpty(peers) ? "(none)" : peers;
+      return `WIREGUARD INTERFACES:
+
+${ifBlock}
+
+WIREGUARD PEERS:
+
+${peerBlock}`;
+    }
+  }),
   defineTool({
     name: "update_wireguard_interface",
     title: "Update WireGuard Interface",
@@ -20197,7 +20227,7 @@ ${details}` : "WireGuard peer added successfully.";
     name: "list_wireguard_peers",
     title: "List WireGuard Peers",
     annotations: READ,
-    description: "Lists all WireGuard peer entries (`/interface wireguard peers print`)." + " Returns each peer's .id, interface, public-key, allowed-address, endpoint, last-handshake time, and rx/tx byte counters." + " Filter by interface name (interface_filter) or disabled-only." + " For the interface table use list_wireguard_interfaces." + " Use the .id from this output with get_wireguard_peer, update_wireguard_peer, remove_wireguard_peer," + " enable_wireguard_peer, or disable_wireguard_peer.",
+    description: "`list_wireguard_peers` \u2014 READ / list / show / inspect all WireGuard peers" + " (`/interface wireguard peers print`). Use this to read which peers are configured and" + " whether the tunnel is up (handshake). Returns each peer's .id, interface, public-key," + " allowed-address, endpoint/current-endpoint, last-handshake time, and rx/tx byte counters." + " Filter by interface name (interface_filter) or disabled-only. For the interface table use" + " list_wireguard_interfaces; for one peer's full detail use get_wireguard_peer; for interfaces" + " AND peers in one call use get_wireguard_status. Use the .id from this output with" + " update_wireguard_peer, remove_wireguard_peer, enable_wireguard_peer, or disable_wireguard_peer.",
     inputSchema: {
       interface_filter: z109.string().optional(),
       disabled_only: z109.boolean().default(false)
@@ -20219,7 +20249,7 @@ ${result}`;
     name: "get_wireguard_peer",
     title: "Get WireGuard Peer Details",
     annotations: READ,
-    description: "Retrieves full detail of a single WireGuard peer (`/interface wireguard peers print detail`) by its .id." + " Returns public-key, allowed-address, endpoint, preshared-key presence, last-handshake time, and rx/tx bytes." + " For the interface table use get_wireguard_interface." + ` Use list_wireguard_peers to obtain peer .id values.
+    description: "`get_wireguard_peer` \u2014 READ / get / show the full detail of ONE WireGuard peer" + " (`/interface wireguard peers print detail`) by its .id. Returns public-key, allowed-address," + " endpoint/current-endpoint, preshared-key presence, last-handshake time, and rx/tx bytes." + " To list all peers use list_wireguard_peers; for interfaces AND peers in one call use" + ` get_wireguard_status.
 
 ` + `Notes:
 ` + '  peer_id: the .id from list_wireguard_peers, format "*N" or "N" e.g. "*2"',
@@ -21679,7 +21709,7 @@ function selectToolModules(filter = {}, catalog = moduleCatalog) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.8.0",
+  version: "3.9.1",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",