naftiko: 1.0.0-alpha2
info:
  label: RouterOS Network Management
  description: Unified network management capability for RouterOS-powered MikroTik devices. Combines IP address management,
    interface configuration, firewall policy, routing, DHCP, DNS, and wireless client monitoring into a single workflow for
    network administrators managing MikroTik infrastructure.
  tags:
  - RouterOS
  - MikroTik
  - Networking
  - Network Management
  - Firewall
  - Router
  - DHCP
  - DNS
  created: '2026-05-02'
  modified: '2026-05-06'
binds:
- namespace: env
  keys:
    ROUTEROS_USERNAME: ROUTEROS_USERNAME
    ROUTEROS_PASSWORD: ROUTEROS_PASSWORD
    ROUTEROS_HOST: ROUTEROS_HOST
capability:
  consumes:
  - type: http
    namespace: routeros
    baseUri: https://{{ROUTEROS_HOST}}/rest
    description: RouterOS REST API for network device management
    authentication:
      type: basic
      username: '{{ROUTEROS_USERNAME}}'
      password: '{{ROUTEROS_PASSWORD}}'
    resources:
    - name: ip-addresses
      path: /ip/address
      description: IP address configuration on interfaces
      operations:
      - name: list-ip-addresses
        method: GET
        description: List all IP address configurations
        outputRawFormat: json
        outputParameters:
        - name: addresses
          type: array
          value: $.
      - name: add-ip-address
        method: PUT
        description: Add a new IP address to an interface
        body:
          type: json
          data:
            address: '{{tools.address}}'
            interface: '{{tools.interface}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: ip-address-item
      path: /ip/address/{id}
      description: Single IP address record operations
      operations:
      - name: get-ip-address
        method: GET
        description: Get a specific IP address by ID
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
          description: RouterOS record ID (e.g., *1)
        outputRawFormat: json
        outputParameters:
        - name: address
          type: object
          value: $.
      - name: update-ip-address
        method: PATCH
        description: Update an IP address configuration
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        body:
          type: json
          data:
            address: '{{tools.address}}'
            interface: '{{tools.interface}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: delete-ip-address
        method: DELETE
        description: Delete an IP address
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
    - name: interfaces
      path: /interface
      description: Network interface management
      operations:
      - name: list-interfaces
        method: GET
        description: List all network interfaces
        inputParameters:
        - name: type
          in: query
          type: string
          required: false
          description: Filter by interface type
        - name: running
          in: query
          type: string
          required: false
          description: Filter by running state
        outputRawFormat: json
        outputParameters:
        - name: interfaces
          type: array
          value: $.
      - name: get-interface
        method: GET
        description: Get a specific interface by ID
        inputParameters:
        - name: id
          in: path
          type: string
          required: true
        outputRawFormat: json
        outputParameters:
        - name: interface
          type: object
          value: $.
    - name: firewall-filters
      path: /ip/firewall/filter
      description: Firewall filter rules
      operations:
      - name: list-firewall-filters
        method: GET
        description: List all firewall filter rules
        inputParameters:
        - name: chain
          in: query
          type: string
          required: false
        - name: action
          in: query
          type: string
          required: false
        outputRawFormat: json
        outputParameters:
        - name: rules
          type: array
          value: $.
      - name: add-firewall-filter
        method: PUT
        description: Add a new firewall filter rule
        body:
          type: json
          data:
            chain: '{{tools.chain}}'
            action: '{{tools.action}}'
            src-address: '{{tools.src_address}}'
            dst-address: '{{tools.dst_address}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: firewall-nat
      path: /ip/firewall/nat
      description: Firewall NAT rules
      operations:
      - name: list-firewall-nat
        method: GET
        description: List all NAT rules
        inputParameters:
        - name: chain
          in: query
          type: string
          required: false
        outputRawFormat: json
        outputParameters:
        - name: rules
          type: array
          value: $.
    - name: firewall-address-lists
      path: /ip/firewall/address-list
      description: Firewall address lists
      operations:
      - name: list-address-lists
        method: GET
        description: List firewall address list entries
        inputParameters:
        - name: list
          in: query
          type: string
          required: false
        outputRawFormat: json
        outputParameters:
        - name: entries
          type: array
          value: $.
      - name: add-address-list-entry
        method: PUT
        description: Add an entry to a named address list
        body:
          type: json
          data:
            list: '{{tools.list}}'
            address: '{{tools.address}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: routes
      path: /ip/route
      description: Routing table
      operations:
      - name: list-routes
        method: GET
        description: List all routes in the routing table
        inputParameters:
        - name: dst-address
          in: query
          type: string
          required: false
        - name: active
          in: query
          type: string
          required: false
        outputRawFormat: json
        outputParameters:
        - name: routes
          type: array
          value: $.
      - name: add-route
        method: PUT
        description: Add a new static route
        body:
          type: json
          data:
            dst-address: '{{tools.dst_address}}'
            gateway: '{{tools.gateway}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: system-resource
      path: /system/resource
      description: System resource information
      operations:
      - name: get-system-resource
        method: GET
        description: Get system resources including CPU, memory, and uptime
        outputRawFormat: json
        outputParameters:
        - name: resources
          type: object
          value: $.
    - name: system-identity
      path: /system/identity
      description: System hostname/identity
      operations:
      - name: get-system-identity
        method: GET
        description: Get the system hostname
        outputRawFormat: json
        outputParameters:
        - name: identity
          type: object
          value: $.
      - name: update-system-identity
        method: PATCH
        description: Update the system hostname
        body:
          type: json
          data:
            name: '{{tools.name}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: dhcp-leases
      path: /ip/dhcp-server/lease
      description: DHCP lease management
      operations:
      - name: list-dhcp-leases
        method: GET
        description: List all DHCP leases
        inputParameters:
        - name: dynamic
          in: query
          type: string
          required: false
        outputRawFormat: json
        outputParameters:
        - name: leases
          type: array
          value: $.
    - name: dns-settings
      path: /ip/dns
      description: DNS cache and configuration
      operations:
      - name: get-dns-settings
        method: GET
        description: Get DNS server configuration
        outputRawFormat: json
        outputParameters:
        - name: dns
          type: object
          value: $.
      - name: update-dns-settings
        method: PATCH
        description: Update DNS server configuration
        body:
          type: json
          data:
            servers: '{{tools.servers}}'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: wireless-clients
      path: /interface/wireless/registration-table
      description: Connected wireless clients
      operations:
      - name: list-wireless-clients
        method: GET
        description: List all connected wireless clients
        outputRawFormat: json
        outputParameters:
        - name: clients
          type: array
          value: $.
  exposes:
  - type: rest
    port: 8080
    namespace: network-management-api
    description: Unified REST API for RouterOS network device management.
    resources:
    - path: /v1/ip/addresses
      name: ip-addresses
      description: Manage IP address assignments on router interfaces
      operations:
      - method: GET
        name: list-ip-addresses
        description: List all IP addresses assigned to router interfaces
        call: routeros.list-ip-addresses
        outputParameters:
        - type: array
          mapping: $.
      - method: PUT
        name: add-ip-address
        description: Assign an IP address to a router interface
        call: routeros.add-ip-address
        with:
          address: rest.address
          interface: rest.interface
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/interfaces
      name: interfaces
      description: Network interface status and configuration
      operations:
      - method: GET
        name: list-interfaces
        description: List all network interfaces with status
        call: routeros.list-interfaces
        outputParameters:
        - type: array
          mapping: $.
    - path: /v1/firewall/filters
      name: firewall-filters
      description: Firewall packet filter rules
      operations:
      - method: GET
        name: list-firewall-filters
        description: List all firewall filter rules by chain and action
        call: routeros.list-firewall-filters
        with:
          chain: rest.chain
          action: rest.action
        outputParameters:
        - type: array
          mapping: $.
      - method: PUT
        name: add-firewall-filter
        description: Add a new firewall filter rule
        call: routeros.add-firewall-filter
        with:
          chain: rest.chain
          action: rest.action
          src-address: rest.src_address
          dst-address: rest.dst_address
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/firewall/nat
      name: firewall-nat
      description: Firewall NAT rules for masquerading and port forwarding
      operations:
      - method: GET
        name: list-firewall-nat
        description: List all NAT rules
        call: routeros.list-firewall-nat
        outputParameters:
        - type: array
          mapping: $.
    - path: /v1/firewall/address-lists
      name: address-lists
      description: Named address lists for use in firewall rules
      operations:
      - method: GET
        name: list-address-lists
        description: List all address list entries
        call: routeros.list-address-lists
        with:
          list: rest.list
        outputParameters:
        - type: array
          mapping: $.
      - method: PUT
        name: add-address-list-entry
        description: Add an IP address to a named firewall list
        call: routeros.add-address-list-entry
        with:
          list: rest.list
          address: rest.address
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/routing/routes
      name: routes
      description: Static and dynamic routing table entries
      operations:
      - method: GET
        name: list-routes
        description: List all routes in the routing table
        call: routeros.list-routes
        with:
          active: rest.active
        outputParameters:
        - type: array
          mapping: $.
      - method: PUT
        name: add-route
        description: Add a static route
        call: routeros.add-route
        with:
          dst-address: rest.dst_address
          gateway: rest.gateway
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/system/resource
      name: system-resource
      description: Device resource utilization and hardware information
      operations:
      - method: GET
        name: get-system-resource
        description: Get CPU, memory, storage, and uptime information
        call: routeros.get-system-resource
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/dhcp/leases
      name: dhcp-leases
      description: DHCP server lease table
      operations:
      - method: GET
        name: list-dhcp-leases
        description: List all DHCP leases including client hostnames and MAC addresses
        call: routeros.list-dhcp-leases
        outputParameters:
        - type: array
          mapping: $.
    - path: /v1/dns
      name: dns-settings
      description: DNS resolver configuration
      operations:
      - method: GET
        name: get-dns-settings
        description: Get DNS server configuration
        call: routeros.get-dns-settings
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: update-dns-settings
        description: Update DNS server addresses
        call: routeros.update-dns-settings
        with:
          servers: rest.servers
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/wireless/clients
      name: wireless-clients
      description: Connected wireless client monitoring
      operations:
      - method: GET
        name: list-wireless-clients
        description: List all currently connected wireless clients with signal strength
        call: routeros.list-wireless-clients
        outputParameters:
        - type: array
          mapping: $.
  - type: mcp
    port: 9090
    namespace: network-management-mcp
    transport: http
    description: MCP server for AI-assisted RouterOS network device management.
    tools:
    - name: list-ip-addresses
      description: List all IP addresses configured on router interfaces
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-ip-addresses
      outputParameters:
      - type: array
        mapping: $.
    - name: add-ip-address
      description: Assign a new IP address to a router interface (CIDR notation required)
      hints:
        readOnly: false
        idempotent: false
      call: routeros.add-ip-address
      with:
        address: tools.address
        interface: tools.interface
      outputParameters:
      - type: object
        mapping: $.
    - name: list-interfaces
      description: List all network interfaces with running status, type, and MAC address
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-interfaces
      outputParameters:
      - type: array
        mapping: $.
    - name: list-firewall-filters
      description: List firewall filter rules; filter by chain (input/forward/output) or action
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-firewall-filters
      with:
        chain: tools.chain
        action: tools.action
      outputParameters:
      - type: array
        mapping: $.
    - name: add-firewall-filter
      description: Add a packet filter rule specifying chain, action, source/destination addresses
      hints:
        readOnly: false
        idempotent: false
      call: routeros.add-firewall-filter
      with:
        chain: tools.chain
        action: tools.action
        src-address: tools.src_address
        dst-address: tools.dst_address
      outputParameters:
      - type: object
        mapping: $.
    - name: list-firewall-nat
      description: List NAT rules for masquerading, source NAT, and destination NAT
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-firewall-nat
      outputParameters:
      - type: array
        mapping: $.
    - name: list-address-lists
      description: List entries in named firewall address lists
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-address-lists
      with:
        list: tools.list
      outputParameters:
      - type: array
        mapping: $.
    - name: add-address-list-entry
      description: Block or classify an IP by adding it to a named firewall address list
      hints:
        readOnly: false
        idempotent: false
      call: routeros.add-address-list-entry
      with:
        list: tools.list
        address: tools.address
      outputParameters:
      - type: object
        mapping: $.
    - name: list-routes
      description: List routing table entries; optionally filter by active routes only
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-routes
      with:
        active: tools.active
      outputParameters:
      - type: array
        mapping: $.
    - name: add-route
      description: Add a static route with destination network and gateway
      hints:
        readOnly: false
        idempotent: false
      call: routeros.add-route
      with:
        dst-address: tools.dst_address
        gateway: tools.gateway
      outputParameters:
      - type: object
        mapping: $.
    - name: get-system-resource
      description: Get RouterOS device CPU load, memory usage, uptime, and version information
      hints:
        readOnly: true
        idempotent: true
      call: routeros.get-system-resource
      outputParameters:
      - type: object
        mapping: $.
    - name: list-dhcp-leases
      description: List all DHCP leases showing client hostname, MAC address, and assigned IP
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-dhcp-leases
      outputParameters:
      - type: array
        mapping: $.
    - name: get-dns-settings
      description: Get current DNS server addresses and cache configuration
      hints:
        readOnly: true
        idempotent: true
      call: routeros.get-dns-settings
      outputParameters:
      - type: object
        mapping: $.
    - name: list-wireless-clients
      description: List all connected wireless clients with signal strength, MAC address, and uptime
      hints:
        readOnly: true
        idempotent: true
      call: routeros.list-wireless-clients
      outputParameters:
      - type: array
        mapping: $.