// SCAN REPORT

MikroTik Cursor MCP

452 tools. 269 can modify or destroy data without limits.

60 destructive tools with no built-in limits. Policy required.

Last updated:

269 can modify or destroy data
183 read-only
452 tools total

Community server · catalogue entry verified 29/06/2026

How to control MikroTik Cursor MCP ↓

TOOL MAP

What MikroTik Cursor MCP exposes to your agents

Read (183) Write / Execute (209) Destructive / Financial (60)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous MikroTik Cursor MCP tools

Destructive · Critical mikrotik_clear_address_list This tool permanently and irreversibly deletes all entries from an address list with no undo capability. Destructive · High mikrotik_clear_logs This tool permanently deletes audit/diagnostic logs without the ability to recover them. Destructive · High mikrotik_delete_custom_chain This tool performs irreversible deletion of firewall chain configurations and their rules. Destructive · High mikrotik_remove_address_list_entry Removing firewall address list entries is a destructive operation that cannot be undone without re-creating the entry.

269 of MikroTik Cursor MCP's 452 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control MikroTik Cursor MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and MikroTik Cursor MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "mikrotik_clear_address_list": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "mikrotik_add_address_list_entry": {
    "limits": [
      {
        "counter": "mikrotik_add_address_list_entry_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "mikrotik_assess_command_risk": {
    "limits": [
      {
        "counter": "mikrotik_assess_command_risk_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register MikroTik Cursor MCP — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON MIKROTIK CURSOR →

Instant setup, no code required.

FULL CATALOGUE

All 452 MikroTik Cursor MCP tools

DESTRUCTIVE 60 tools
Destructive mikrotik_clear_address_list Removes all entries from a specific address list (⚠️ destructive!) Destructive mikrotik_clear_logs Clears all logs from MikroTik device Destructive mikrotik_delete_custom_chain Delete a custom chain and all its rules (⚠️ destructive!) Destructive mikrotik_remove_address_list_entry Removes an entry from a firewall address list Destructive mikrotik_remove_bonding_interface Remove bonding interface Destructive mikrotik_remove_bridge_port Removes an interface from its bridge Destructive mikrotik_remove_bridge_vlan Removes VLAN configuration from a bridge Destructive mikrotik_remove_capsman_configuration Removes a CAPsMAN configuration profile Destructive mikrotik_remove_capsman_datapath Removes a CAPsMAN datapath configuration Destructive mikrotik_remove_capsman_provisioning_rule Removes a CAPsMAN provisioning rule Destructive mikrotik_remove_certificate Removes a certificate from the device Destructive mikrotik_remove_container Removes a container Destructive mikrotik_remove_container_env Removes container environment Destructive mikrotik_remove_container_mount Removes container mount Destructive mikrotik_remove_container_veth Removes container veth interface Destructive mikrotik_remove_dhcp_server Removes a DHCP server from MikroTik device Destructive mikrotik_remove_dhcpv6_client Removes a DHCPv6 client Destructive mikrotik_remove_dhcpv6_lease Removes a DHCPv6 lease Destructive mikrotik_remove_dhcpv6_option Removes a DHCPv6 option Destructive mikrotik_remove_dhcpv6_server Removes a DHCPv6 server Destructive mikrotik_remove_dns_static Removes a static DNS entry Destructive mikrotik_remove_eoip_tunnel Remove EoIP tunnel Destructive mikrotik_remove_file Removes a file from MikroTik device Destructive mikrotik_remove_filter_rule Removes a firewall filter rule from MikroTik device Destructive mikrotik_remove_gre_tunnel Remove GRE tunnel Destructive mikrotik_remove_hotspot_server Remove hotspot server Destructive mikrotik_remove_ip_address Removes an IP address from MikroTik device Destructive mikrotik_remove_ip_pool Removes an IP pool from MikroTik device Destructive mikrotik_remove_ipv6_address Removes an IPv6 address Destructive mikrotik_remove_ipv6_address_list_entry Removes IPv6 address list entry Destructive mikrotik_remove_ipv6_filter_rule Removes an IPv6 firewall filter rule Destructive mikrotik_remove_ipv6_mangle_rule Removes an IPv6 mangle rule Destructive mikrotik_remove_ipv6_nat_rule Removes an IPv6 NAT rule Destructive mikrotik_remove_ipv6_pool Removes an IPv6 pool Destructive mikrotik_remove_ipv6_route Removes an IPv6 route Destructive mikrotik_remove_layer7_protocol Remove Layer 7 protocol matcher Destructive mikrotik_remove_mangle_rule Remove firewall mangle rule Destructive mikrotik_remove_nat_rule Removes a NAT rule from MikroTik device Destructive mikrotik_remove_openvpn_interface Removes an OpenVPN interface Destructive mikrotik_remove_pcq_queue Removes a PCQ queue type Destructive mikrotik_remove_pppoe_client Remove PPPoE client interface Destructive mikrotik_remove_queue_tree Removes a queue tree entry Destructive mikrotik_remove_raw_rule Remove firewall RAW rule Destructive mikrotik_remove_route Removes a route from MikroTik routing table Destructive mikrotik_remove_scheduled_task Removes a scheduled task Destructive mikrotik_remove_simple_queue Removes a simple queue Destructive mikrotik_remove_user Removes a user from MikroTik device Destructive mikrotik_remove_user_group Removes a user group from MikroTik device Destructive mikrotik_remove_user_ssh_key Removes an SSH key Destructive mikrotik_remove_vlan_interface Removes a VLAN interface from MikroTik device Destructive mikrotik_remove_vrrp_interface Remove VRRP interface Destructive mikrotik_remove_wireguard_interface Removes a WireGuard interface Destructive mikrotik_remove_wireguard_peer Removes a WireGuard peer Destructive mikrotik_remove_wireless_access_list_entry Removes a wireless access list entry (legacy systems only) Destructive mikrotik_remove_wireless_interface Removes a wireless interface from MikroTik device Destructive mikrotik_remove_wireless_security_profile Removes a wireless security profile (legacy systems only) Destructive mikrotik_reset_watchdog_ping_target Removes the ping target from watchdog monitoring Destructive mikrotik_restore_backup Restores a system backup on MikroTik device Destructive mikrotik_revoke_certificate Revokes a certificate (marks as not trusted) Destructive mikrotik_uninstall_package Uninstalls a package (⚠️ requires reboot)
EXECUTE 32 tools
Execute mikrotik_auto_discovery_ospf_complete Complete OSPF auto-discovery and configuration for a site Execute mikrotik_bandwidth_test Run bandwidth test to another MikroTik device Execute mikrotik_clear_bgp_session Reset BGP session Execute mikrotik_create_basic_firewall_setup Creates a basic firewall setup with common security rules Execute mikrotik_create_container Creates a container Execute mikrotik_disable_interface Disables a network interface Execute mikrotik_disable_watchdog Disables the watchdog Execute mikrotik_disable_wireless_interface Disables a wireless interface Execute mikrotik_enable_bridge_vlan_filtering Enables VLAN filtering on a bridge Execute mikrotik_enable_capsman Enables CAPsMAN (Controlled Access Point System Manager) Execute mikrotik_enable_interface Enables a network interface Execute mikrotik_enable_openvpn_client Enable OpenVPN client interface (will attempt connection) Execute mikrotik_enable_package Enables a package (requires reboot) Execute mikrotik_enable_watchdog Enables and configures the watchdog Execute mikrotik_enter_safe_mode Enter MikroTik Safe Mode for safe configuration changes with automatic rollback Execute mikrotik_execute_approved_operation Execute a previously approved MikroTik operation with full safety measures (Safe Mode, log monitoring, state v Execute mikrotik_execute_with_intelligent_workflow Execute a MikroTik command using intelligent risk-based workflow. Automatically determines if the operation is Execute mikrotik_force_exit_safe_mode Force exit Safe Mode immediately (emergency use only) Execute mikrotik_force_vrrp_master Force VRRP interface to become master (sets priority to 255) Execute mikrotik_import_configuration Imports a configuration script file Execute mikrotik_install_updates Installs downloaded package updates (⚠️ reboots router!) Execute mikrotik_ping Ping a host from the MikroTik router Execute mikrotik_reboot_system Reboots the MikroTik device (requires confirmation) Execute mikrotik_run_scheduled_task Manually runs a scheduled task immediately Execute mikrotik_set_watchdog_ping_target Sets the ping target for watchdog monitoring (reboots if ping fails) Execute mikrotik_setup_vpn_client Complete VPN client setup in one command (creates interface, adds IP, configures peer, tests) Execute mikrotik_sign_certificate Signs a certificate (self-sign or with CA) Execute mikrotik_start_container Starts a container Execute mikrotik_stop_container Stops a container Execute mikrotik_test_dns_query Tests a DNS query Execute mikrotik_traceroute Traceroute to a host from the MikroTik router Execute mikrotik_update_packages Checks for and downloads package updates
WRITE 177 tools
Write mikrotik_add_address_list_entry Adds an entry to a firewall address list with optional timeout Write mikrotik_add_bgp_network Advertise network via BGP Write mikrotik_add_bgp_peer Add BGP peer/neighbor Write mikrotik_add_blackhole_route Adds a blackhole route Write mikrotik_add_bonding_slave Add interface to bonding group Write mikrotik_add_bridge_port Adds an interface to a bridge Write mikrotik_add_bridge_vlan Adds VLAN configuration to a bridge Write mikrotik_add_default_route Adds a default route (0.0.0.0/0) Write mikrotik_add_dns_regexp Adds a DNS regexp entry for pattern matching Write mikrotik_add_dns_static Adds a static DNS entry Write mikrotik_add_ip_address Adds an IP address to an interface Write mikrotik_add_ipv6_address Adds an IPv6 address Write mikrotik_add_ipv6_address_list Adds address to IPv6 address list Write mikrotik_add_ipv6_route Adds an IPv6 route Write mikrotik_add_ospf_interface Configure OSPF on interface Write mikrotik_add_ospf_network Add network to OSPF Write mikrotik_add_route Adds a route to MikroTik routing table Write mikrotik_add_user Adds a new user to MikroTik device Write mikrotik_add_user_group Adds a new user group to MikroTik device Write mikrotik_add_walled_garden Add site to walled garden (accessible without login) Write mikrotik_add_wireguard_peer Adds a WireGuard peer to an interface Write mikrotik_auto_assign_ospf_subnet Automatically assign a unique OSPF subnet and Router ID for a site Write mikrotik_auto_configure_ospf_area Automatically configure OSPF area Write mikrotik_auto_configure_ospf_instance Automatically configure OSPF instance with proper settings Write mikrotik_auto_configure_ospf_interfaces Automatically configure OSPF interfaces Write mikrotik_auto_configure_ospf_networks Automatically configure OSPF networks for a subnet and router ID Write mikrotik_configure_dhcpv6_relay Configures DHCPv6 relay agent on an interface Write mikrotik_configure_ospf_authentication Configure OSPF authentication on interface Write mikrotik_configure_secure_services Configure secure IP services - restrict SSH, Winbox, and API to local network only, disable insecure services Write mikrotik_create_backup Creates a system backup on MikroTik device Write mikrotik_create_backup_schedule Creates a scheduled backup task Write mikrotik_create_basic_watchdog_monitor Creates a basic watchdog monitoring setup Write mikrotik_create_bgp_instance Create BGP routing instance Write mikrotik_create_bonding_interface Create bonding interface for link aggregation Write mikrotik_create_bridge Creates a bridge with advanced options (VLAN filtering, STP, IGMP) Write mikrotik_create_ca_certificate Creates a Certificate Authority (CA) certificate Write mikrotik_create_capsman_configuration Creates a CAPsMAN configuration profile Write mikrotik_create_capsman_datapath Creates a CAPsMAN datapath configuration Write mikrotik_create_capsman_provisioning_rule Creates a CAPsMAN provisioning rule Write mikrotik_create_certificate Creates a new self-signed certificate Write mikrotik_create_common_layer7_protocols Create common Layer 7 protocol matchers (YouTube, Netflix, Facebook, etc.) Write mikrotik_create_container_env Creates container environment variable Write mikrotik_create_container_mount Creates container mount point Write mikrotik_create_container_veth Creates container veth interface Write mikrotik_create_custom_chain_with_rules Create a complete custom chain with jump rule and rules inside it Write mikrotik_create_dhcp_network Creates a DHCP network configuration Write mikrotik_create_dhcp_pool Creates a DHCP address pool Write mikrotik_create_dhcp_server Creates a DHCP server on MikroTik device Write mikrotik_create_dhcpv6_client Creates a DHCPv6 client Write mikrotik_create_dhcpv6_option Creates a DHCPv6 option Write mikrotik_create_dhcpv6_server Creates a DHCPv6 server Write mikrotik_create_dhcpv6_static_lease Creates a DHCPv6 static lease Write mikrotik_create_eoip_tunnel Create EoIP (Ethernet over IP) tunnel Write mikrotik_create_filter_rule Creates a firewall filter rule on MikroTik device Write mikrotik_create_gre_tunnel Create GRE (Generic Routing Encapsulation) tunnel Write mikrotik_create_hotspot_profile Create hotspot profile with bandwidth/time limits Write mikrotik_create_hotspot_server Create hotspot server on interface Write mikrotik_create_hotspot_user Create hotspot user with credentials Write mikrotik_create_htb_queue_tree Creates hierarchical HTB queue tree structure Write mikrotik_create_ip_pool Creates an IP pool on MikroTik device Write mikrotik_create_ipv6_filter_rule Creates an IPv6 firewall filter rule Write mikrotik_create_ipv6_mangle_rule Creates an IPv6 mangle rule Write mikrotik_create_ipv6_nat_rule Creates an IPv6 NAT rule Write mikrotik_create_ipv6_pool Creates an IPv6 pool Write mikrotik_create_jump_rule Create a jump rule to redirect traffic to a custom chain Write mikrotik_create_layer7_protocol Create Layer 7 protocol matcher for deep packet inspection Write mikrotik_create_mangle_rule Create firewall mangle rule for packet/connection/routing marking Write mikrotik_create_nat_rule Creates a NAT rule on MikroTik device Write mikrotik_create_openvpn_client Creates an OpenVPN client interface Write mikrotik_create_ospf_area Configure OSPF area Write mikrotik_create_ospf_instance Create OSPF routing instance Write mikrotik_create_pcq_queue Creates a PCQ queue type for per-connection bandwidth management Write mikrotik_create_port_forward Easy port forwarding helper - forwards external port to internal IP Write mikrotik_create_pppoe_client Create PPPoE client for ISP connection Write mikrotik_create_priority_queue_tree Creates priority-based queue tree structure Write mikrotik_create_queue_tree Creates a queue tree entry for hierarchical bandwidth management Write mikrotik_create_raw_rule Create firewall RAW rule (bypasses connection tracking) Write mikrotik_create_route_filter Create route filter rule Write mikrotik_create_routing_mark Create routing mark for policy-based routing (helper) Write mikrotik_create_safe_mode_backup Create a backup before entering Safe Mode (recommended best practice) Write mikrotik_create_scheduled_task Creates a scheduled task on MikroTik device Write mikrotik_create_service_backup Create a backup of current IP services configuration Write mikrotik_create_simple_queue Creates a simple queue (bandwidth limit for IP/subnet) Write mikrotik_create_traffic_shaping_tree Creates complete traffic shaping tree with multiple classes Write mikrotik_create_vlan_aware_bridge Creates a complete VLAN-aware bridge setup Write mikrotik_create_vlan_interface Creates a VLAN interface on MikroTik device Write mikrotik_create_vrrp_ha_pair Create VRRP high-availability pair (master and backup) Write mikrotik_create_vrrp_interface Create VRRP interface for high-availability Write mikrotik_create_watchdog_script Creates a watchdog monitoring script Write mikrotik_create_wireguard_interface Creates a new WireGuard interface Write mikrotik_create_wireless_access_list Creates a wireless access list entry (legacy systems only) Write mikrotik_create_wireless_interface Creates a wireless interface on MikroTik device Write mikrotik_create_wireless_security_profile Creates a wireless security profile (legacy systems only) Write mikrotik_disable_address_list_entry Disables an address list entry Write mikrotik_disable_bridge_vlan_filtering Disables VLAN filtering on a bridge Write mikrotik_disable_capsman Disables CAPsMAN Write mikrotik_disable_dns_static Disables a static DNS entry Write mikrotik_disable_filter_rule Disables a firewall filter rule Write mikrotik_disable_igmp_snooping Disables IGMP snooping on a bridge Write mikrotik_disable_ip_service Disable an IP service Write mikrotik_disable_layer7_protocol Disable Layer 7 protocol matcher Write mikrotik_disable_nat_rule Disables a NAT rule Write mikrotik_disable_openvpn_client Disable OpenVPN client interface (safe, just disconnects) Write mikrotik_disable_package Disables a package (requires reboot) Write mikrotik_disable_queue_tree Disables a queue tree entry Write mikrotik_disable_route Disables a route Write mikrotik_disable_scheduled_task Disables a scheduled task Write mikrotik_disable_simple_queue Disables a simple queue Write mikrotik_disable_user Disables a user account Write mikrotik_disable_vrrp_interface Disable VRRP interface Write mikrotik_disable_wireguard_interface Disables a WireGuard interface Write mikrotik_disconnect_user Disconnects an active user session Write mikrotik_enable_address_list_entry Enables an address list entry Write mikrotik_enable_dns_static Enables a static DNS entry Write mikrotik_enable_filter_rule Enables a firewall filter rule Write mikrotik_enable_igmp_snooping Enables IGMP snooping on a bridge Write mikrotik_enable_ip_service Enable an IP service Write mikrotik_enable_layer7_protocol Enable Layer 7 protocol matcher Write mikrotik_enable_nat_rule Enables a NAT rule Write mikrotik_enable_ospf_instance Enable OSPF instance Write mikrotik_enable_queue_tree Enables a queue tree entry Write mikrotik_enable_route Enables a route Write mikrotik_enable_scheduled_task Enables a scheduled task Write mikrotik_enable_simple_queue Enables a simple queue Write mikrotik_enable_user Enables a user account Write mikrotik_enable_vrrp_interface Enable VRRP interface Write mikrotik_enable_wireguard_interface Enables a WireGuard interface Write mikrotik_enable_wireless_interface Enables a wireless interface Write mikrotik_exit_safe_mode Exit MikroTik Safe Mode and make all changes permanent Write mikrotik_expand_ip_pool Expands an existing IP pool by adding more ranges Write mikrotik_export_certificate Exports a certificate to a file Write mikrotik_export_dns_config Exports DNS configuration to a file Write mikrotik_flush_connections Flush connections from tracking table (⚠️ terminates connections!) Write mikrotik_flush_dns_cache Flushes the DNS cache Write mikrotik_flush_route_cache Flushes the route cache Write mikrotik_import_certificate Imports a certificate from a file on the router Write mikrotik_move_filter_rule Moves a firewall filter rule to a different position Write mikrotik_move_nat_rule Moves a NAT rule to a different position in the chain Write mikrotik_restore_default_services Restore IP services to default configuration (allow from anywhere) Write mikrotik_set_bridge_port_vlan Configures VLAN settings for a bridge port Write mikrotik_set_bridge_protocol Sets spanning tree protocol for a bridge Write mikrotik_set_container_registry Sets container registry Write mikrotik_set_container_tmpdir Sets container tmpdir Write mikrotik_set_dns_servers Sets DNS server configuration on MikroTik device Write mikrotik_set_ipv6_forward Enables/disables IPv6 forwarding Write mikrotik_set_ipv6_nd Configures IPv6 Neighbor Discovery Write mikrotik_set_ntp_client Configures NTP client for time synchronization Write mikrotik_set_safe_mode_timeout Set the Safe Mode timeout period (1-60 minutes) Write mikrotik_set_service_address Set the Write mikrotik_set_service_port Set the port for an IP service Write mikrotik_set_system_identity Sets system identity/name Write mikrotik_set_update_channel Sets the update channel for package updates Write mikrotik_set_user_ssh_keys Sets SSH public keys for a user Write mikrotik_set_vrrp_priority Set priority for a VRRP interface Write mikrotik_trust_certificate Marks a certificate as trusted Write mikrotik_update_address_list_entry Updates an existing address list entry Write mikrotik_update_bridge Updates bridge settings Write mikrotik_update_dns_static Updates an existing static DNS entry Write mikrotik_update_filter_rule Updates an existing firewall filter rule on MikroTik device Write mikrotik_update_ip_pool Updates an existing IP pool on MikroTik device Write mikrotik_update_layer7_protocol Update Layer 7 protocol matcher Write mikrotik_update_mangle_rule Update firewall mangle rule Write mikrotik_update_nat_rule Updates an existing NAT rule on MikroTik device Write mikrotik_update_openvpn_client Updates OpenVPN client settings Write mikrotik_update_queue_tree Updates queue tree settings Write mikrotik_update_route Updates an existing route in MikroTik routing table Write mikrotik_update_scheduled_task Updates an existing scheduled task Write mikrotik_update_simple_queue Updates a simple queue configuration Write mikrotik_update_user Updates an existing user on MikroTik device Write mikrotik_update_user_group Updates an existing user group on MikroTik device Write mikrotik_update_vlan_interface Updates an existing VLAN interface on MikroTik device Write mikrotik_update_vrrp_interface Update VRRP interface settings Write mikrotik_update_wireguard_interface Updates WireGuard interface settings Write mikrotik_update_wireguard_peer Updates WireGuard peer settings Write mikrotik_update_wireless_interface Updates an existing wireless interface Write mikrotik_update_wireless_security_profile Updates a wireless security profile (v6.x only) Write mikrotik_upload_file Uploads a file to MikroTik device
READ 183 tools
Read mikrotik_assess_command_risk Assess the risk level of a MikroTik command without executing it. Returns detailed risk analysis including war Read mikrotik_backup_info Gets detailed information about a backup file Read mikrotik_check_connection Check if a port/host is reachable Read mikrotik_check_route_path Checks the route path to a destination Read mikrotik_check_wireless_support Checks if the device supports wireless functionality Read mikrotik_create_export Creates a configuration export on MikroTik device Read mikrotik_dns_lookup Perform DNS lookup from the router Read mikrotik_download_file Downloads a file from MikroTik device Read mikrotik_download_package Downloads a package from a URL Read mikrotik_export_logs Exports logs to a file on the MikroTik device Read mikrotik_export_section Exports a specific configuration section Read mikrotik_export_user_config Exports user configuration to a file Read mikrotik_export_wireless_config Exports the complete wireless configuration Read mikrotik_get_active_users Gets currently active/logged-in users Read mikrotik_get_address_list_entry Gets detailed information about a specific address list entry (READ-ONLY, safe) Read mikrotik_get_arp_table Get ARP table entries Read mikrotik_get_bgp_status Get BGP status (READ-ONLY) Read mikrotik_get_bridge_settings Gets detailed settings for a bridge (READ-ONLY, safe) Read mikrotik_get_capsman_interface Gets detailed information about a CAPsMAN interface Read mikrotik_get_capsman_remote_cap Gets detailed information about a specific remote CAP Read mikrotik_get_capsman_status Gets CAPsMAN manager status Read mikrotik_get_certificate Gets detailed information about a specific certificate (READ-ONLY, safe) Read mikrotik_get_certificate_fingerprint Gets the fingerprint of a certificate (READ-ONLY, safe) Read mikrotik_get_configuration_summary Gets a summary of the current configuration (without sensitive data) Read mikrotik_get_connection_tracking View active connections (READ-ONLY, safe) Read mikrotik_get_container Gets container details Read mikrotik_get_container_config Gets container configuration Read mikrotik_get_dhcp_server Gets detailed information about a specific DHCP server Read mikrotik_get_dhcpv6_client Gets DHCPv6 client details Read mikrotik_get_dhcpv6_server Gets DHCPv6 server details Read mikrotik_get_dns_cache Gets the current DNS cache Read mikrotik_get_dns_cache_statistics Gets DNS cache statistics Read mikrotik_get_dns_settings Gets current DNS configuration Read mikrotik_get_dns_static Gets details of a specific static DNS entry Read mikrotik_get_filter_rule Gets detailed information about a specific firewall filter rule Read mikrotik_get_interface_monitor Monitor interface traffic in real-time (snapshot) Read mikrotik_get_interface_stats Gets traffic statistics for a specific interface Read mikrotik_get_interface_traffic Gets current traffic for an interface Read mikrotik_get_ip_address Gets detailed information about a specific IP address Read mikrotik_get_ip_pool Gets detailed information about a specific IP pool Read mikrotik_get_ip_service Get configuration for a specific IP service Read mikrotik_get_ipv6_address Gets IPv6 address details Read mikrotik_get_ipv6_nd_settings Gets IPv6 ND settings for interface Read mikrotik_get_ipv6_settings Gets global IPv6 settings Read mikrotik_get_layer7_protocol Get Layer 7 protocol matcher details (READ-ONLY, safe) Read mikrotik_get_license Gets RouterOS license information Read mikrotik_get_log_statistics Gets statistics about log entries Read mikrotik_get_logs Gets logs from MikroTik device with filtering options Read mikrotik_get_logs_by_severity Gets logs filtered by severity level Read mikrotik_get_logs_by_topic Gets logs for a specific topic/facility Read mikrotik_get_nat_rule Gets detailed information about a specific NAT rule Read mikrotik_get_neighbors Get neighboring MikroTik devices via MAC discovery Read mikrotik_get_ntp_client Gets NTP client configuration Read mikrotik_get_openvpn_server_status Get OpenVPN server status (READ-ONLY, safe) Read mikrotik_get_openvpn_status Get detailed status of OpenVPN interface (READ-ONLY, safe) Read mikrotik_get_ospf_assignments Get current OSPF subnet and Router ID assignments (READ-ONLY, safe) Read mikrotik_get_ospf_auto_discovery_status Get comprehensive OSPF auto-discovery status (READ-ONLY, safe) Read mikrotik_get_ospf_status Get OSPF status (READ-ONLY) Read mikrotik_get_package Gets detailed information about a specific package (READ-ONLY, safe) Read mikrotik_get_package_update_status Gets the current package update status (READ-ONLY, safe) Read mikrotik_get_pppoe_status Get PPPoE client status (READ-ONLY, safe) Read mikrotik_get_queue_tree Gets detailed information about a queue tree (READ-ONLY, safe) Read mikrotik_get_route Gets detailed information about a specific route Read mikrotik_get_route_cache Gets the route cache Read mikrotik_get_route_statistics Gets routing table statistics Read mikrotik_get_routerboard Gets RouterBOARD hardware information Read mikrotik_get_routing_table Gets a specific routing table Read mikrotik_get_safe_mode_history Get the history of changes made during the current Safe Mode session Read mikrotik_get_safe_mode_status Get the current Safe Mode status and configuration Read mikrotik_get_scheduled_task Gets detailed information about a specific scheduled task (READ-ONLY, safe) Read mikrotik_get_security_logs Gets security-related log entries Read mikrotik_get_service_status Get status summary of all IP services with security information Read mikrotik_get_system_clock Gets system clock settings Read mikrotik_get_system_events Gets system-related log events Read mikrotik_get_system_health Gets system health (temperature, voltage, fans) Read mikrotik_get_system_identity Gets system identity/name Read mikrotik_get_system_resources Gets system resource usage (CPU, RAM, disk, uptime) Read mikrotik_get_uptime Gets system uptime Read mikrotik_get_user Gets detailed information about a specific user Read mikrotik_get_user_group Gets detailed information about a specific user group Read mikrotik_get_vlan_interface Gets detailed information about a specific VLAN interface Read mikrotik_get_vpn_status Get comprehensive VPN status (interface, IP, peer, connectivity) Read mikrotik_get_vrrp_interface Get detailed information about a VRRP interface (READ-ONLY, safe) Read mikrotik_get_vrrp_status Get status of all VRRP interfaces (READ-ONLY, safe) Read mikrotik_get_watchdog_status Gets the current watchdog status and settings (READ-ONLY, safe) Read mikrotik_get_watchdog_types Lists available watchdog timer types (READ-ONLY, safe) Read mikrotik_get_wireguard_interface Gets detailed information about a WireGuard interface Read mikrotik_get_wireless_frequencies Gets available wireless frequencies (v6.x only) Read mikrotik_get_wireless_interface Gets detailed information about a specific wireless interface Read mikrotik_get_wireless_interface_monitor Gets real-time monitoring information for a wireless interface Read mikrotik_get_wireless_registration_table Gets the wireless registration table (connected clients) Read mikrotik_get_wireless_security_profile Gets wireless security profile details (legacy systems only) Read mikrotik_list_address_list_names Lists all unique address list names currently in use (READ-ONLY, safe) Read mikrotik_list_address_lists Lists firewall address list entries (READ-ONLY, safe) Read mikrotik_list_available_packages Lists all available packages that can be installed (READ-ONLY, safe) Read mikrotik_list_backups Lists backup files on MikroTik device Read mikrotik_list_bgp_networks List BGP networks (READ-ONLY) Read mikrotik_list_bgp_peers List BGP peers (READ-ONLY) Read mikrotik_list_bgp_routes View BGP routing table (READ-ONLY) Read mikrotik_list_bonding_interfaces List bonding (link aggregation) interfaces (READ-ONLY, safe) Read mikrotik_list_bridge_ports Lists bridge ports Read mikrotik_list_bridge_vlans Lists VLAN configurations on bridges (READ-ONLY, safe) Read mikrotik_list_bridges Lists bridge interfaces with advanced settings (READ-ONLY, safe) Read mikrotik_list_capsman_configurations Lists all CAPsMAN configuration profiles Read mikrotik_list_capsman_datapaths Lists all CAPsMAN datapath configurations Read mikrotik_list_capsman_interfaces Lists all CAPsMAN controlled wireless interfaces Read mikrotik_list_capsman_provisioning_rules Lists all CAPsMAN provisioning rules Read mikrotik_list_capsman_registration_table Lists all registered CAPsMAN clients Read mikrotik_list_capsman_remote_caps Lists all remote CAPs (Access Points) connected to this CAPsMAN Read mikrotik_list_certificates Lists certificates on MikroTik device (READ-ONLY, safe) Read mikrotik_list_container_envs Lists container environments Read mikrotik_list_container_mounts Lists container mounts Read mikrotik_list_container_veths Lists container veth interfaces Read mikrotik_list_containers Lists all containers Read mikrotik_list_custom_chains List all custom firewall chains in use (READ-ONLY, safe) Read mikrotik_list_dhcp_leases Lists DHCP leases on MikroTik device with host information Read mikrotik_list_dhcp_servers Lists DHCP servers on MikroTik device Read mikrotik_list_dhcpv6_clients Lists DHCPv6 clients Read mikrotik_list_dhcpv6_leases Lists DHCPv6 leases Read mikrotik_list_dhcpv6_options Lists DHCPv6 options Read mikrotik_list_dhcpv6_relays Lists DHCPv6 relay configurations (READ-ONLY, safe) Read mikrotik_list_dhcpv6_servers Lists DHCPv6 servers Read mikrotik_list_dns_static Lists static DNS entries Read mikrotik_list_eoip_tunnels List EoIP tunnels (READ-ONLY, safe) Read mikrotik_list_filter_rules Lists firewall filter rules on MikroTik device Read mikrotik_list_gre_tunnels List GRE tunnels (READ-ONLY, safe) Read mikrotik_list_hotspot_active List active hotspot sessions (READ-ONLY, safe) Read mikrotik_list_hotspot_profiles List hotspot profiles (READ-ONLY, safe) Read mikrotik_list_hotspot_servers List hotspot servers (READ-ONLY, safe) Read mikrotik_list_hotspot_users List hotspot users (READ-ONLY, safe) Read mikrotik_list_interfaces Lists all network interfaces Read mikrotik_list_ip_addresses Lists IP addresses on MikroTik device Read mikrotik_list_ip_pool_used Lists used addresses from IP pools Read mikrotik_list_ip_pools Lists IP pools on MikroTik device Read mikrotik_list_ip_services List all IP services and their current configuration Read mikrotik_list_ipv6_address_lists Lists IPv6 address lists Read mikrotik_list_ipv6_addresses Lists IPv6 addresses Read mikrotik_list_ipv6_filter_rules Lists IPv6 firewall filter rules Read mikrotik_list_ipv6_mangle_rules Lists IPv6 mangle rules Read mikrotik_list_ipv6_nat_rules Lists IPv6 NAT rules Read mikrotik_list_ipv6_neighbors Lists IPv6 neighbors Read mikrotik_list_ipv6_pools Lists IPv6 pools Read mikrotik_list_ipv6_routes Lists IPv6 routes Read mikrotik_list_layer7_protocols List Layer 7 protocol matchers (READ-ONLY, safe) Read mikrotik_list_mangle_rules List firewall mangle rules (READ-ONLY, safe) Read mikrotik_list_nat_rules Lists NAT rules on MikroTik device Read mikrotik_list_openvpn_interfaces Lists all OpenVPN client interfaces (READ-ONLY, safe) Read mikrotik_list_openvpn_servers Lists OpenVPN server interfaces (READ-ONLY, safe) Read mikrotik_list_ospf_auth_keys List OSPF authentication configurations (READ-ONLY, safe) Read mikrotik_list_ospf_neighbors List OSPF neighbors (READ-ONLY) Read mikrotik_list_ospf_routes View OSPF routes (READ-ONLY) Read mikrotik_list_packages Lists installed packages on MikroTik device (READ-ONLY, safe) Read mikrotik_list_pcq_queues Lists PCQ (Per Connection Queue) queue types (READ-ONLY, safe) Read mikrotik_list_port_forwards Lists all port forwarding rules (dstnat dst-nat rules) Read mikrotik_list_pppoe_clients List PPPoE client interfaces (READ-ONLY, safe) Read mikrotik_list_pppoe_servers List PPPoE servers (READ-ONLY, safe) Read mikrotik_list_queue_trees Lists queue tree entries (hierarchical QoS) (READ-ONLY, safe) Read mikrotik_list_queue_types Lists available queue types Read mikrotik_list_raw_rules List firewall RAW rules (READ-ONLY, safe) Read mikrotik_list_route_filters List route filters (READ-ONLY) Read mikrotik_list_routes Lists routes in MikroTik routing table Read mikrotik_list_routing_marks List all routing marks (READ-ONLY, safe) Read mikrotik_list_rules_in_chain List all rules in a specific firewall chain (READ-ONLY, safe) Read mikrotik_list_scheduled_tasks Lists scheduled tasks on MikroTik device (READ-ONLY, safe) Read mikrotik_list_simple_queues Lists simple queues (bandwidth limits) Read mikrotik_list_tunnels List all tunnel types (EoIP, GRE) (READ-ONLY, safe) Read mikrotik_list_user_groups Lists user groups on MikroTik device Read mikrotik_list_user_ssh_keys Lists SSH keys for a specific user Read mikrotik_list_users Lists users on MikroTik device Read mikrotik_list_vlan_interfaces Lists VLAN interfaces on MikroTik device Read mikrotik_list_vrrp_interfaces List VRRP (Virtual Router Redundancy Protocol) interfaces (READ-ONLY, safe) Read mikrotik_list_walled_garden List walled garden entries (READ-ONLY, safe) Read mikrotik_list_wireguard_interfaces Lists all WireGuard interfaces Read mikrotik_list_wireguard_peers Lists WireGuard peers Read mikrotik_list_wireless_access_list Lists wireless access list entries (legacy systems only) Read mikrotik_list_wireless_interfaces Lists wireless interfaces on MikroTik device Read mikrotik_list_wireless_security_profiles Lists wireless security profiles (legacy systems only) Read mikrotik_monitor_logs Monitors logs in real-time for a specified duration Read mikrotik_monitor_vrrp_interface Monitor VRRP interface for real-time status (READ-ONLY, safe) Read mikrotik_scan_mikrotik_neighbors Scan for MikroTik neighbors using MNDP (READ-ONLY, safe) Read mikrotik_scan_wireless_networks Scans for wireless networks using specified interface Read mikrotik_search_logs Searches logs for a specific term Read mikrotik_validate_configuration Validates the MikroTik MCP server configuration
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about MikroTik Cursor MCP

Can an AI agent delete data through the MikroTik Cursor MCP server? +

Yes. The MikroTik Cursor MCP server exposes 60 destructive tools including mikrotik_clear_address_list, mikrotik_clear_logs, mikrotik_delete_custom_chain. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through MikroTik Cursor MCP? +

The MikroTik Cursor MCP server has 177 write tools including mikrotik_add_address_list_entry, mikrotik_add_bgp_network, mikrotik_add_bgp_peer. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach MikroTik Cursor MCP.

How many tools does the MikroTik Cursor MCP server expose? +

452 tools across 4 categories: Destructive, Execute, Read, Write. 183 are read-only. 269 can modify, create, or delete data.

How do I enforce a policy on MikroTik Cursor MCP? +

Register the MikroTik Cursor MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MikroTik Cursor MCP tool call.

Deterministic rules across all 452 MikroTik Cursor MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MIKROTIK CURSOR →

Instant setup, no code required.

452 MikroTik Cursor MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.