@usex/mikrotik-mcp 3.8.0 → 3.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.8.0",
+  "version": "3.9.1",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",

package/schemas/README.md

@@ -7,7 +7,7 @@ edit by hand — regenerate instead.
 | File                 | Contents                                                                                   |
 | -------------------- | ------------------------------------------------------------------------------------------ |
 | `config.schema.json` | The runtime configuration object (env vars / CLI flags).                                   |
-| `tool-catalog.json`  | Every one of the 706 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
+| `tool-catalog.json`  | Every one of the 707 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
 | `tools/<name>.json`  | The input JSON Schema for a single tool.                                                   |
 
 `risk` is derived from the MCP tool annotations:

package/schemas/tool-catalog.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "3.7.0",
+  "version": "3.8.0",
   "generated": "by scripts/gen-schemas.ts — do not edit by hand",
-  "toolCount": 706,
+  "toolCount": 707,
   "tools": [
     {
       "name": "list_interfaces",
@@ -11721,7 +11721,7 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "Lists WireGuard tunnel interfaces (`/interface wireguard print`). Returns each interface's name, listen-port, public-key, MTU, and running/disabled status. Supports filtering by name substring (name_filter), disabled-only, or running-only. For the peer table use list_wireguard_peers. Use the name from this output with get_wireguard_interface or update_wireguard_interface.",
+      "description": "`list_wireguard_interfaces` — READ / list / show / inspect all WireGuard tunnel interfaces (`/interface wireguard print`). The go-to tool to read the current WireGuard state on a device. Returns each interface's name, listen-port, public-key, MTU, and running/disabled status. Filter by name substring (name_filter), disabled-only, or running-only. For one interface's full detail use get_wireguard_interface; for the peer table use list_wireguard_peers; for interfaces AND peers in one call use get_wireguard_status.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",
@@ -11751,7 +11751,7 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "Retrieves full detail of a single WireGuard tunnel interface (`/interface wireguard print detail`) looked up by name. Returns listen-port, private-key, public-key, MTU, running state, and comment. For the peer table use get_wireguard_peer. Use list_wireguard_interfaces to discover available interface names.",
+      "description": "`get_wireguard_interface` — READ / get / show the full detail of ONE WireGuard tunnel interface (`/interface wireguard print detail`) looked up by name. Returns listen-port, private-key, public-key, MTU, running state, and comment. To list all interfaces use list_wireguard_interfaces; for that interface's peers use list_wireguard_peers; for interfaces AND peers in one call use get_wireguard_status.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",
@@ -11764,6 +11764,28 @@
         "additionalProperties": false
       }
     },
+    {
+      "name": "get_wireguard_status",
+      "title": "Get WireGuard Status (Interfaces + Peers)",
+      "risk": "read",
+      "annotations": {
+        "readOnlyHint": true,
+        "idempotentHint": true,
+        "openWorldHint": false
+      },
+      "description": "`get_wireguard_status` — READ the current WireGuard state on a device in ONE call: ALL tunnel interfaces AND ALL peers together. Use this FIRST to inspect / show / check WireGuard before changing anything (e.g. to read public keys, see which side initiates, or confirm the tunnel is up). Interfaces report name, listen-port, public-key, MTU and running state; peers report .id, interface, public-key, allowed-address, endpoint/current-endpoint, last-handshake time and rx/tx bytes. Combines list_wireguard_interfaces + list_wireguard_peers; optionally filter both to one interface with interface_filter.",
+      "inputSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "type": "object",
+        "properties": {
+          "interface_filter": {
+            "description": "Limit to one interface name, e.g. 'wg-mesh'",
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      }
+    },
     {
       "name": "update_wireguard_interface",
       "title": "Update WireGuard Interface",
@@ -11934,7 +11956,7 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "Lists all WireGuard peer entries (`/interface wireguard peers print`). Returns each peer's .id, interface, public-key, allowed-address, endpoint, last-handshake time, and rx/tx byte counters. Filter by interface name (interface_filter) or disabled-only. For the interface table use list_wireguard_interfaces. Use the .id from this output with get_wireguard_peer, update_wireguard_peer, remove_wireguard_peer, enable_wireguard_peer, or disable_wireguard_peer.",
+      "description": "`list_wireguard_peers` — READ / list / show / inspect all WireGuard peers (`/interface wireguard peers print`). Use this to read which peers are configured and whether the tunnel is up (handshake). Returns each peer's .id, interface, public-key, allowed-address, endpoint/current-endpoint, last-handshake time, and rx/tx byte counters. Filter by interface name (interface_filter) or disabled-only. For the interface table use list_wireguard_interfaces; for one peer's full detail use get_wireguard_peer; for interfaces AND peers in one call use get_wireguard_status. Use the .id from this output with update_wireguard_peer, remove_wireguard_peer, enable_wireguard_peer, or disable_wireguard_peer.",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",
@@ -11960,7 +11982,7 @@
         "idempotentHint": true,
         "openWorldHint": false
       },
-      "description": "Retrieves full detail of a single WireGuard peer (`/interface wireguard peers print detail`) by its .id. Returns public-key, allowed-address, endpoint, preshared-key presence, last-handshake time, and rx/tx bytes. For the interface table use get_wireguard_interface. Use list_wireguard_peers to obtain peer .id values.\n\nNotes:\n  peer_id: the .id from list_wireguard_peers, format \"*N\" or \"N\" e.g. \"*2\"",
+      "description": "`get_wireguard_peer` — READ / get / show the full detail of ONE WireGuard peer (`/interface wireguard peers print detail`) by its .id. Returns public-key, allowed-address, endpoint/current-endpoint, preshared-key presence, last-handshake time, and rx/tx bytes. To list all peers use list_wireguard_peers; for interfaces AND peers in one call use get_wireguard_status.\n\nNotes:\n  peer_id: the .id from list_wireguard_peers, format \"*N\" or \"N\" e.g. \"*2\"",
       "inputSchema": {
         "$schema": "https://json-schema.org/draft/2020-12/schema",
         "type": "object",

package/schemas/tools/get_wireguard_status.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "get_wireguard_status",
+  "type": "object",
+  "properties": {
+    "interface_filter": {
+      "description": "Limit to one interface name, e.g. 'wg-mesh'",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}