io.github.wiresage/mikrotik-mcp

claude mcp add mikrotik-mcp -e 'MIKROTIK_HOST=<MIKROTIK_HOST>' -e 'MIKROTIK_USERNAME=<MIKROTIK_USERNAME>' -e 'MIKROTIK_PASSWORD=<your mikrotik_password>' -e 'MIKROTIK_PORT=<MIKROTIK_PORT>' -e 'MIKROTIK_KEY_FILENAME=<MIKROTIK_KEY_FILENAME>' -e 'MIKROTIK_READ_ONLY=<MIKROTIK_READ_ONLY>' -e 'MIKROTIK_SENSITIVE_HIDING=<MIKROTIK_SENSITIVE_HIDING>' -e 'MIKROTIK_INVENTORY_FILE=<MIKROTIK_INVENTORY_FILE>' -e 'MIKROTIK_INVENTORY=<your mikrotik_inventory>' -- uvx mcp-server-mikrotik==0.26.2.0

{
    "mcpServers": {
        "mikrotik-mcp": {
            "command": "uvx",
            "args": [
                "mcp-server-mikrotik==0.26.2.0"
            ],
            "env": {
                "MIKROTIK_HOST": "<MIKROTIK_HOST>",
                "MIKROTIK_USERNAME": "<MIKROTIK_USERNAME>",
                "MIKROTIK_PASSWORD": "<your mikrotik_password>",
                "MIKROTIK_PORT": "<MIKROTIK_PORT>",
                "MIKROTIK_KEY_FILENAME": "<MIKROTIK_KEY_FILENAME>",
                "MIKROTIK_READ_ONLY": "<MIKROTIK_READ_ONLY>",
                "MIKROTIK_SENSITIVE_HIDING": "<MIKROTIK_SENSITIVE_HIDING>",
                "MIKROTIK_INVENTORY_FILE": "<MIKROTIK_INVENTORY_FILE>",
                "MIKROTIK_INVENTORY": "<your mikrotik_inventory>"
            }
        }
    }
}

Environment variables

• MIKROTIK_HOST IP address or hostname of the MikroTik router (single-device mode; default: 127.0.0.1). Not needed when an inventory is configured.
• MIKROTIK_USERNAME SSH username for the MikroTik router (single-device mode; default: admin)
• MIKROTIK_PASSWORD secret SSH password for the MikroTik router (single-device mode)
• MIKROTIK_PORT SSH port of the MikroTik router (single-device mode; default: 22)
• MIKROTIK_KEY_FILENAME Path to SSH private key file for key-based authentication (single-device mode)
• MIKROTIK_READ_ONLY When true, expose only tools that do not modify RouterOS or its file store. Use a read-only RouterOS account as defence in depth.
• MIKROTIK_SENSITIVE_HIDING When true, redact recognized credentials and private key material from tool results, MCP notifications, and logs, and omit tools that return opaque sensitive payloads.
• MIKROTIK_INVENTORY_FILE Path to a YAML file listing multiple MikroTik devices (title, host, port, username, password, key_filename, tags, region). See docs/reference/inventory.
• MIKROTIK_INVENTORY secret Inline multi-device inventory as a YAML (or JSON) list; takes precedence over MIKROTIK_INVENTORY_FILE and the single-device variables. Holds credentials.