Skill: mikrotik
Version: 2026.7.0
Dispatcher: manage_network
Domain: networking
Description
Full MikroTik RouterOS v7 management — hotspot users, firewall rules, system stats, network diagnostics, and wireless control. Uses the routeros-client API on port 8728.
When to Use
Invoke when the user asks about:
- Active WiFi users / hotspot sessions
- Disconnecting, adding, or removing hotspot users
- Firewall blocking/unblocking an IP or MAC
- Router CPU, RAM, uptime, or interface stats
- Pinging or tracerouting from the router
- DNS cache flush
- Router reboot or backup
- DHCP leases, ARP table, wireless clients, routing table
Tools
read-only
| Tool |
Description |
system.stats |
CPU, RAM, uptime, interface stats |
users.active |
List currently connected hotspot users |
users.all |
List all provisioned hotspot users |
dhcp.leases |
Show DHCP leases |
arp.table |
Show ARP table |
interfaces |
List interfaces and link state |
wireless.clients |
List wireless associations |
ip.routes |
Show routing table |
workspace-write (default)
| Tool |
Description |
user.add |
Create hotspot user (profile, password, limit) |
user.remove |
Delete a hotspot user |
user.kick |
Disconnect an active session |
firewall.block |
Add drop rule for IP or MAC |
firewall.unblock |
Remove drop rule |
ping |
Ping test from router |
traceroute |
Traceroute from router |
dns.flush |
Flush RouterOS DNS cache |
danger-full-access
| Tool |
Description |
system.reboot |
Reboot router — requires confirm: true |
system.backup |
Create RouterOS config backup |
wireless.set_frequency |
Change wireless channel/frequency |
Parameters
{
"action": "user.kick",
"router": "main",
"params": { "username": "alice" }
}
Security Rules
- Never expose passwords in responses
- Always confirm destructive actions (kick / remove / reboot)
executeCLI() rejects shell metacharacters ` $ ( ) { } | ; & < >- All changes are logged to the rolling audit buffer
Configuration
| Env Var |
Default |
Description |
MIKROTIK_IP |
192.168.88.1 |
Router IP address |
MIKROTIK_PORT |
8728 |
RouterOS API port |
MIKROTIK_USER |
admin |
Router username |
MIKROTIK_PASS |
(required) |
Router password |
1---2name: mikrotik3description: Skill: mikrotik4---5# Skill: mikrotik67**Version:** 2026.7.0 8**Dispatcher:** `manage_network` 9**Domain:** networking1011## Description1213Full MikroTik RouterOS v7 management — hotspot users, firewall rules, system stats, network diagnostics, and wireless control. Uses the `routeros-client` API on port 8728.1415## When to Use1617Invoke when the user asks about:18- Active WiFi users / hotspot sessions19- Disconnecting, adding, or removing hotspot users20- Firewall blocking/unblocking an IP or MAC21- Router CPU, RAM, uptime, or interface stats22- Pinging or tracerouting from the router23- DNS cache flush24- Router reboot or backup25- DHCP leases, ARP table, wireless clients, routing table2627## Tools2829### read-only30| Tool | Description |31|---|---|32| `system.stats` | CPU, RAM, uptime, interface stats |33| `users.active` | List currently connected hotspot users |34| `users.all` | List all provisioned hotspot users |35| `dhcp.leases` | Show DHCP leases |36| `arp.table` | Show ARP table |37| `interfaces` | List interfaces and link state |38| `wireless.clients` | List wireless associations |39| `ip.routes` | Show routing table |4041### workspace-write (default)42| Tool | Description |43|---|---|44| `user.add` | Create hotspot user (profile, password, limit) |45| `user.remove` | Delete a hotspot user |46| `user.kick` | Disconnect an active session |47| `firewall.block` | Add drop rule for IP or MAC |48| `firewall.unblock` | Remove drop rule |49| `ping` | Ping test from router |50| `traceroute` | Traceroute from router |51| `dns.flush` | Flush RouterOS DNS cache |5253### danger-full-access54| Tool | Description |55|---|---|56| `system.reboot` | Reboot router — requires `confirm: true` |57| `system.backup` | Create RouterOS config backup |58| `wireless.set_frequency` | Change wireless channel/frequency |5960## Parameters6162```json63{64 "action": "user.kick",65 "router": "main",66 "params": { "username": "alice" }67}68```6970## Security Rules7172- Never expose passwords in responses73- Always confirm destructive actions (kick / remove / reboot)74- `executeCLI()` rejects shell metacharacters `` ` $ ( ) { } | ; & < > ``75- All changes are logged to the rolling audit buffer7677## Configuration7879| Env Var | Default | Description |80|---|---|---|81| `MIKROTIK_IP` | `192.168.88.1` | Router IP address |82| `MIKROTIK_PORT` | `8728` | RouterOS API port |83| `MIKROTIK_USER` | `admin` | Router username |84| `MIKROTIK_PASS` | *(required)* | Router password |
br3eze-code