@usex/mikrotik-mcp 4.23.0 → 5.0.0

package/schemas/tools/abort_rollout.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "abort_rollout",
+  "type": "object",
+  "properties": {
+    "rollout_id": {
+      "type": "string",
+      "description": "Rollout id from start_rollout"
+    },
+    "reason": {
+      "description": "Recorded in the rollout history",
+      "type": "string"
+    }
+  },
+  "required": ["rollout_id"],
+  "additionalProperties": false
+}

package/schemas/tools/abort_transaction.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "abort_transaction",
+  "type": "object",
+  "properties": {
+    "txn_id": {
+      "type": "string",
+      "description": "Transaction id from begin_transaction"
+    },
+    "reason": {
+      "description": "Recorded in the transaction log",
+      "type": "string"
+    }
+  },
+  "required": ["txn_id"],
+  "additionalProperties": false
+}

package/schemas/tools/add_alert_rule.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "add_alert_rule",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Unique id — keys muting and history, so make it stable."
+    },
+    "trigger": {
+      "type": "string",
+      "description": "The trigger as a JSON object (see the description)."
+    },
+    "channels": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": ["slack", "discord", "ntfy", "webhook", "mcp"]
+      },
+      "description": "Where to deliver."
+    },
+    "severity": {
+      "default": "medium",
+      "type": "string",
+      "enum": ["low", "medium", "high", "critical"]
+    },
+    "description": {
+      "description": "Human-readable title used in the message.",
+      "type": "string"
+    },
+    "for": {
+      "description": "Hold time before firing, e.g. '2m'.",
+      "type": "string"
+    },
+    "cooldown": {
+      "default": "15m",
+      "description": "Minimum gap between fires.",
+      "type": "string"
+    }
+  },
+  "required": ["id", "trigger", "channels", "severity", "cooldown"],
+  "additionalProperties": false
+}

package/schemas/tools/add_ipv6_route.json

@@ -13,7 +13,7 @@
     },
     "type": {
       "type": "string",
-      "enum": ["unicast", "blackhole", "unreachable", "prohibit"]
+      "enum": ["unicast", "blackhole"]
     },
     "distance": {
       "type": "integer",

package/schemas/tools/add_route.json

@@ -56,8 +56,9 @@
       "type": "boolean"
     },
     "type": {
-      "description": "\"unicast\" (default), \"blackhole\", \"unreachable\", or \"prohibit\"",
-      "type": "string"
+      "description": "\"unicast\" (default) or \"blackhole\" (drop silently). RouterOS v7 has no \"unreachable\"/\"prohibit\" route types.",
+      "type": "string",
+      "enum": ["unicast", "blackhole"]
     }
   },
   "required": ["dst_address", "gateway", "disabled"],

package/schemas/tools/add_schedule.json

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "add_schedule",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "description": "Job id, e.g. 'nightly-security'. Letters, digits and hyphens."
+    },
+    "cron": {
+      "type": "string",
+      "description": "5-field cron, e.g. \"0 3 * * *\" for every day at 03:00."
+    },
+    "tool": {
+      "type": "string",
+      "description": "Auditor to run — one of the schedulable tools listed above."
+    },
+    "devices": {
+      "description": "Device names, or 'all' (the default) for every configured device.",
+      "anyOf": [
+        {
+          "type": "string",
+          "const": "all"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ]
+    },
+    "notify_on": {
+      "description": "Which deltas raise an alert. Default: new + worsened.",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": ["new", "worsened", "resolved", "improved"]
+      }
+    },
+    "retain_days": {
+      "description": "How long run history is kept. Default 90.",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740991
+    }
+  },
+  "required": ["id", "cron", "tool"],
+  "additionalProperties": false
+}

package/schemas/tools/add_script.json

@@ -9,7 +9,7 @@
     },
     "source": {
       "type": "string",
-      "description": "Script source code (may contain spaces/semicolons)"
+      "description": "Script source code, VERBATIM (may contain spaces/semicolons/quotes — they are quoted and escaped for the console automatically). Never HTML-escape it: pass `<`, `>`, `&` as themselves, since `&lt;`/`&gt;`/`&amp;` are stored literally and break comparisons."
     },
     "policy": {
       "description": "Permission policy list, e.g. 'read,write,test,policy'",

package/schemas/tools/add_traffic_flow_target.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "add_traffic_flow_target",
+  "type": "object",
+  "properties": {
+    "dst_address": {
+      "type": "string",
+      "description": "Collector IP — the address of this MCP host as the router sees it"
+    },
+    "port": {
+      "default": 2055,
+      "description": "Collector UDP port",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740991
+    },
+    "version": {
+      "default": "9",
+      "description": "Export version; prefer 9 or ipfix",
+      "type": "string",
+      "enum": ["1", "5", "9", "ipfix"]
+    },
+    "v9_template_refresh": {
+      "description": "Packets between template resends (v9/IPFIX)",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740991
+    },
+    "v9_template_timeout": {
+      "description": "Time between template resends, e.g. \"30s\" — lower means faster first decode",
+      "type": "string"
+    }
+  },
+  "required": ["dst_address", "port", "version"],
+  "additionalProperties": false
+}

package/schemas/tools/add_transaction_step.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "add_transaction_step",
+  "type": "object",
+  "properties": {
+    "txn_id": {
+      "type": "string",
+      "description": "Transaction id from begin_transaction"
+    },
+    "target_device": {
+      "type": "string",
+      "description": "Which participant this command runs on"
+    },
+    "command": {
+      "type": "string",
+      "description": "Full RouterOS CLI command, e.g. \"/ip address add address=...\""
+    }
+  },
+  "required": ["txn_id", "target_device", "command"],
+  "additionalProperties": false
+}

package/schemas/tools/analyze_flows.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "analyze_flows",
+  "type": "object",
+  "properties": {
+    "window": {
+      "default": "1h",
+      "description": "How far back to look",
+      "type": "string",
+      "enum": ["5m", "15m", "1h", "6h", "24h"]
+    },
+    "address": {
+      "description": "Focus the whole report on one address",
+      "type": "string"
+    },
+    "anomaly_ratio": {
+      "default": 3,
+      "description": "Flag a talker at this multiple of its baseline",
+      "type": "number",
+      "exclusiveMinimum": 0
+    }
+  },
+  "required": ["window", "anomaly_ratio"],
+  "additionalProperties": false
+}

package/schemas/tools/begin_transaction.json

@@ -0,0 +1,109 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "begin_transaction",
+  "type": "object",
+  "properties": {
+    "devices": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Configured device names taking part, in the order they should be prepared"
+    },
+    "commit_order": {
+      "description": "Order commits are issued in (defaults to `devices`); the safest device goes LAST",
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "jump_host": {
+      "description": "Participant the others are reached through — warns unless it commits last",
+      "type": "string"
+    },
+    "assertions": {
+      "description": "Checks run against the prepared-but-uncommitted fleet",
+      "type": "array",
+      "items": {
+        "anyOf": [
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "const": "ping"
+              },
+              "from": {
+                "type": "string",
+                "description": "Device that sends the ping"
+              },
+              "to": {
+                "type": "string",
+                "description": "Target address"
+              }
+            },
+            "required": ["kind", "from", "to"],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "const": "wireguard-peer-handshake"
+              },
+              "device": {
+                "type": "string"
+              },
+              "peer": {
+                "type": "string",
+                "description": "Peer public key"
+              }
+            },
+            "required": ["kind", "device", "peer"],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "const": "route-present"
+              },
+              "device": {
+                "type": "string"
+              },
+              "dst": {
+                "type": "string",
+                "description": "Destination prefix, e.g. \"10.0.0.0/30\""
+              }
+            },
+            "required": ["kind", "device", "dst"],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "const": "reachable"
+              },
+              "device": {
+                "type": "string"
+              }
+            },
+            "required": ["kind", "device"],
+            "additionalProperties": false
+          }
+        ]
+      }
+    },
+    "label": {
+      "description": "Human label, e.g. \"site-a↔site-b tunnel\"",
+      "type": "string"
+    }
+  },
+  "required": ["devices"],
+  "additionalProperties": false
+}

package/schemas/tools/block_attacker.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "block_attacker",
+  "type": "object",
+  "properties": {
+    "incident_id": {
+      "type": "string",
+      "description": "Incident to act on, from list_attack_incidents."
+    },
+    "timeout": {
+      "description": "How long, e.g. '1h', '1d00:00:00'. Empty string means permanent (needs confirm).",
+      "type": "string"
+    },
+    "confirm": {
+      "default": false,
+      "description": "Actually apply it. Default false = dry run.",
+      "type": "boolean"
+    }
+  },
+  "required": ["incident_id", "confirm"],
+  "additionalProperties": false
+}

package/schemas/tools/check_policy_snapshot.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "check_policy_snapshot",
+  "type": "object",
+  "properties": {
+    "snapshot_id": {
+      "description": "Snapshot id to evaluate",
+      "type": "string"
+    },
+    "config_text": {
+      "description": "Raw `/export` text to evaluate instead",
+      "type": "string"
+    },
+    "device": {
+      "description": "Label the report with this device name",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/tools/commit_transaction.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "commit_transaction",
+  "type": "object",
+  "properties": {
+    "txn_id": {
+      "type": "string",
+      "description": "Transaction id from begin_transaction"
+    }
+  },
+  "required": ["txn_id"],
+  "additionalProperties": false
+}

package/schemas/tools/configure_attack_response.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "configure_attack_response",
+  "type": "object",
+  "properties": {
+    "check_address": {
+      "description": "Ask whether this address would be refused, and why.",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/tools/diff_explanations.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "diff_explanations",
+  "type": "object",
+  "properties": {
+    "before_snapshot_id": {
+      "description": "The earlier snapshot",
+      "type": "string"
+    },
+    "after_snapshot_id": {
+      "description": "The later snapshot",
+      "type": "string"
+    },
+    "before_text": {
+      "description": "The earlier `/export` text",
+      "type": "string"
+    },
+    "after_text": {
+      "description": "The later `/export` text",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/tools/explain_device.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "explain_device",
+  "type": "object",
+  "properties": {
+    "snapshot_id": {
+      "description": "Explain a stored snapshot instead of the live device",
+      "type": "string"
+    },
+    "config_text": {
+      "description": "Explain this raw `/export` text instead",
+      "type": "string"
+    },
+    "diagram": {
+      "default": true,
+      "description": "Include the Mermaid topology diagram",
+      "type": "boolean"
+    }
+  },
+  "required": ["diagram"],
+  "additionalProperties": false
+}

package/schemas/tools/explain_policy_finding.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "explain_policy_finding",
+  "type": "object",
+  "properties": {
+    "rule_id": {
+      "type": "string",
+      "description": "Rule id from the report"
+    },
+    "device": {
+      "description": "Which device's report, when several were checked",
+      "type": "string"
+    }
+  },
+  "required": ["rule_id"],
+  "additionalProperties": false
+}

package/schemas/tools/explain_rule_reachability.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "explain_rule_reachability",
+  "type": "object",
+  "properties": {
+    "snapshot_id": {
+      "type": "string"
+    },
+    "config_text": {
+      "type": "string"
+    },
+    "chain": {
+      "description": "Restrict to one chain, e.g. `input`",
+      "type": "string"
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/tools/explain_section.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "explain_section",
+  "type": "object",
+  "properties": {
+    "section": {
+      "type": "string",
+      "enum": [
+        "identity",
+        "exposure",
+        "topology",
+        "addressing",
+        "internet",
+        "firewall",
+        "vpn",
+        "services",
+        "unknowns"
+      ],
+      "description": "Which area to explain"
+    },
+    "snapshot_id": {
+      "description": "Explain a stored snapshot instead of the live device",
+      "type": "string"
+    },
+    "config_text": {
+      "description": "Explain this raw `/export` text instead",
+      "type": "string"
+    }
+  },
+  "required": ["section"],
+  "additionalProperties": false
+}

package/schemas/tools/export_policy_report.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "export_policy_report",
+  "type": "object",
+  "properties": {
+    "format": {
+      "default": "markdown",
+      "type": "string",
+      "enum": ["markdown", "json", "sarif"]
+    },
+    "device": {
+      "description": "Which device's report, when several were checked",
+      "type": "string"
+    },
+    "artifact": {
+      "description": "SARIF artifact path the findings point at (default `<device>.rsc`)",
+      "type": "string"
+    }
+  },
+  "required": ["format"],
+  "additionalProperties": false
+}

package/schemas/tools/flow_top_talkers.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "flow_top_talkers",
+  "type": "object",
+  "properties": {
+    "dimension": {
+      "default": "source",
+      "description": "What to rank by",
+      "type": "string",
+      "enum": ["source", "destination", "conversation", "application"]
+    },
+    "window": {
+      "default": "1h",
+      "description": "How far back to look",
+      "type": "string",
+      "enum": ["5m", "15m", "1h", "6h", "24h"]
+    },
+    "limit": {
+      "default": 10,
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 100
+    },
+    "address": {
+      "description": "Restrict to flows touching this address",
+      "type": "string"
+    }
+  },
+  "required": ["dimension", "window", "limit"],
+  "additionalProperties": false
+}

package/schemas/tools/get_alert_history.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "get_alert_history",
+  "type": "object",
+  "properties": {
+    "hours": {
+      "default": 24,
+      "description": "Window in hours.",
+      "type": "number",
+      "exclusiveMinimum": 0,
+      "maximum": 720
+    },
+    "rule_id": {
+      "description": "Restrict to a single rule id.",
+      "type": "string"
+    },
+    "limit": {
+      "default": 100,
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 1000
+    }
+  },
+  "required": ["hours", "limit"],
+  "additionalProperties": false
+}

package/schemas/tools/get_attack_incident.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "get_attack_incident",
+  "type": "object",
+  "properties": {
+    "id": {
+      "type": "string",
+      "description": "Incident id from list_attack_incidents."
+    }
+  },
+  "required": ["id"],
+  "additionalProperties": false
+}