@usex/mikrotik-mcp 4.6.0 → 4.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/README.md +35 -28
  2. package/dist/cli.js +1 -1
  3. package/dist/index.js +1 -1
  4. package/dist/shared/{cli-hfhmh1qe.js → cli-s2s6hryh.js} +4725 -3226
  5. package/dist/shared/{cli-6xcbh1kn.js → cli-xfa5x65h.js} +1 -1
  6. package/dist/shared/{library-8hq0qqwm.js → library-6zh75zhp.js} +1 -1
  7. package/dist/shared/{library-399v2azd.js → library-wm3vc8kq.js} +4725 -3226
  8. package/dist/ui/observability.html +4 -4
  9. package/package.json +1 -1
  10. package/prompts/security-hardening-sweep.md +132 -0
  11. package/prompts/setup-eoip-tunnel-between-sites.md +119 -0
  12. package/prompts/setup-gre-tunnel-between-sites.md +163 -0
  13. package/prompts/setup-ipip-tunnel-between-sites.md +110 -0
  14. package/prompts/setup-openvpn-tunnel-between-sites.md +136 -0
  15. package/prompts/setup-sstp-tunnel-between-sites.md +136 -0
  16. package/prompts/setup-tunnel-between-sites.md +55 -8
  17. package/prompts/setup-vxlan-tunnel-between-sites.md +129 -0
  18. package/prompts/setup-wireguard-tunnel-between-sites.md +183 -0
  19. package/schemas/README.md +1 -1
  20. package/schemas/tool-catalog.json +674 -6
  21. package/schemas/tools/add_firewall_default_deny.json +25 -0
  22. package/schemas/tools/add_ip_address.json +7 -1
  23. package/schemas/tools/add_ipv6_address.json +7 -1
  24. package/schemas/tools/apply_security_hardening_fixes.json +25 -0
  25. package/schemas/tools/audit_account_hygiene.json +7 -0
  26. package/schemas/tools/audit_address_list_enforcement.json +7 -0
  27. package/schemas/tools/audit_certificate_hygiene.json +7 -0
  28. package/schemas/tools/audit_connection_tracking_helpers.json +7 -0
  29. package/schemas/tools/audit_dns_resolver_exposure.json +7 -0
  30. package/schemas/tools/audit_firewall_default_deny.json +7 -0
  31. package/schemas/tools/audit_ip_service_exposure.json +7 -0
  32. package/schemas/tools/audit_ipv6_firewall_baseline.json +7 -0
  33. package/schemas/tools/audit_kernel_ip_hardening.json +7 -0
  34. package/schemas/tools/audit_management_plane_exposure.json +7 -0
  35. package/schemas/tools/audit_network_segmentation.json +7 -0
  36. package/schemas/tools/audit_ssh_hardening.json +7 -0
  37. package/schemas/tools/bootstrap_ipv6_firewall_baseline.json +25 -0
  38. package/schemas/tools/enforce_address_list_blocking.json +25 -0
  39. package/schemas/tools/fix_certificate_crl_policy.json +25 -0
  40. package/schemas/tools/fix_password_policy.json +25 -0
  41. package/schemas/tools/harden_connection_tracking_helpers.json +25 -0
  42. package/schemas/tools/harden_dns_resolver_exposure.json +25 -0
  43. package/schemas/tools/harden_ip_service_exposure.json +25 -0
  44. package/schemas/tools/harden_kernel_ip_settings.json +25 -0
  45. package/schemas/tools/harden_management_plane_exposure.json +25 -0
  46. package/schemas/tools/harden_ssh_service.json +25 -0
  47. package/schemas/tools/run_security_hardening_audit.json +29 -0
package/schemas/tools/add_firewall_default_deny.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "add_firewall_default_deny",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_firewall_default_deny run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/add_ip_address.json CHANGED
@@ -22,12 +22,18 @@
22
22
  "disabled": {
23
23
  "default": false,
24
24
  "type": "boolean"
25
+ },
26
+ "allow_overlap": {
27
+ "default": false,
28
+ "description": "Bypass the duplicate/overlap guard to add a secondary address in an existing subnet",
29
+ "type": "boolean"
25
30
  }
26
31
  },
27
32
  "required": [
28
33
  "address",
29
34
  "interface",
30
- "disabled"
35
+ "disabled",
36
+ "allow_overlap"
31
37
  ],
32
38
  "additionalProperties": false
33
39
  }
package/schemas/tools/add_ipv6_address.json CHANGED
@@ -32,12 +32,18 @@
32
32
  "disabled": {
33
33
  "default": false,
34
34
  "type": "boolean"
35
+ },
36
+ "allow_overlap": {
37
+ "default": false,
38
+ "description": "Bypass the duplicate/overlap guard to add a secondary address in an existing prefix",
39
+ "type": "boolean"
35
40
  }
36
41
  },
37
42
  "required": [
38
43
  "address",
39
44
  "interface",
40
- "disabled"
45
+ "disabled",
46
+ "allow_overlap"
41
47
  ],
42
48
  "additionalProperties": false
43
49
  }
package/schemas/tools/apply_security_hardening_fixes.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "apply_security_hardening_fixes",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Explicit finding_id(s) from a prior run_security_hardening_audit. No blanket apply."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/audit_account_hygiene.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_account_hygiene",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_address_list_enforcement.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_address_list_enforcement",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_certificate_hygiene.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_certificate_hygiene",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_connection_tracking_helpers.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_connection_tracking_helpers",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_dns_resolver_exposure.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_dns_resolver_exposure",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_firewall_default_deny.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_firewall_default_deny",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_ip_service_exposure.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_ip_service_exposure",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_ipv6_firewall_baseline.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_ipv6_firewall_baseline",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_kernel_ip_hardening.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_kernel_ip_hardening",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_management_plane_exposure.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_management_plane_exposure",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_network_segmentation.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_network_segmentation",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/audit_ssh_hardening.json ADDED
@@ -0,0 +1,7 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "audit_ssh_hardening",
4
+ "type": "object",
5
+ "properties": {},
6
+ "additionalProperties": false
7
+ }
package/schemas/tools/bootstrap_ipv6_firewall_baseline.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "bootstrap_ipv6_firewall_baseline",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_ipv6_firewall_baseline run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/enforce_address_list_blocking.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "enforce_address_list_blocking",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_address_list_enforcement run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/fix_certificate_crl_policy.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "fix_certificate_crl_policy",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_certificate_hygiene run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/fix_password_policy.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "fix_password_policy",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_account_hygiene run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_connection_tracking_helpers.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_connection_tracking_helpers",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_connection_tracking_helpers run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_dns_resolver_exposure.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_dns_resolver_exposure",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_dns_resolver_exposure run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_ip_service_exposure.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_ip_service_exposure",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_ip_service_exposure run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_kernel_ip_settings.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_kernel_ip_settings",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_kernel_ip_hardening run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_management_plane_exposure.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_management_plane_exposure",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_management_plane_exposure run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/harden_ssh_service.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "harden_ssh_service",
4
+ "type": "object",
5
+ "properties": {
6
+ "finding_ids": {
7
+ "minItems": 1,
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string"
11
+ },
12
+ "description": "Specific finding_id(s) from a prior audit_ssh_hardening run to remediate."
13
+ },
14
+ "confirm": {
15
+ "default": false,
16
+ "description": "Must be true to write. false (default) returns a dry-run preview and changes nothing.",
17
+ "type": "boolean"
18
+ }
19
+ },
20
+ "required": [
21
+ "finding_ids",
22
+ "confirm"
23
+ ],
24
+ "additionalProperties": false
25
+ }
package/schemas/tools/run_security_hardening_audit.json ADDED
@@ -0,0 +1,29 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "title": "run_security_hardening_audit",
4
+ "type": "object",
5
+ "properties": {
6
+ "categories": {
7
+ "description": "Narrow to specific categories. Available: firewall_default_deny, address_list_enforcement, kernel_ip_hardening, ipv6_firewall_baseline, ssh_hardening, ip_service_exposure, connection_tracking_helpers, management_plane_exposure, account_hygiene, certificate_hygiene, network_segmentation, dns_resolver_exposure. Omit for all.",
8
+ "type": "array",
9
+ "items": {
10
+ "type": "string",
11
+ "enum": [
12
+ "firewall_default_deny",
13
+ "address_list_enforcement",
14
+ "kernel_ip_hardening",
15
+ "ipv6_firewall_baseline",
16
+ "ssh_hardening",
17
+ "ip_service_exposure",
18
+ "connection_tracking_helpers",
19
+ "management_plane_exposure",
20
+ "account_hygiene",
21
+ "certificate_hygiene",
22
+ "network_segmentation",
23
+ "dns_resolver_exposure"
24
+ ]
25
+ }
26
+ }
27
+ },
28
+ "additionalProperties": false
29
+ }