ClawHub

Mikrotik RouterOS

Manage MikroTik RouterOS devices via API to view status, firewall, network config, logs, users, backups, and run custom commands across multiple devices.

Audits

Pass
ClawScanReview

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalAdvisory

Multi-engine malware detections and file reputation.

Install

openclaw skills install mikrotik-routeros

MikroTik RouterOS Skill

description: Connect and manage MikroTik RouterOS devices via API. Supports viewing device status, firewall rules, network configuration, and executing custom RouterOS commands.

Connect and manage MikroTik RouterOS devices via API.

Features

  • View device status (system info, CPU, memory, storage)
  • View firewall rules (filter, NAT, mangle)
  • View network configuration (interfaces, IP addresses, routes, DNS)
  • Execute custom RouterOS commands
  • Support for multi-device connection

Configuration

Option 1: TOOLS.md (Recommended)

Add device info in ~/.openclaw/workspace/TOOLS.md:

MikroTik Devices

  • office: 192.168.88.1, admin, empty password

Password format:

  • Empty password: write empty password, no password, none, or leave blank
  • With password: write the password string directly

Option 2: Environment Variables

export MIKROTIK_HOST=192.168.88.1
export MIKROTIK_USER=admin
export MIKROTIK_PASS=        # empty password
# or
export MIKROTIK_PASS=yourpassword  # with password

Priority: Environment Variables > TOOLS.md > Defaults

Usage

📊 Device Status

  • Show mikrotik device status
  • Check office mikrotik status
  • Check router health

🔥 Firewall

  • Show firewall rules
  • mikrotik firewall configuration
  • Show NAT rules
  • Check office firewall

🔌 Network Interfaces

  • Show network interfaces
  • mikrotik interface list
  • Show IP address configuration

📋 DHCP

  • Show DHCP configuration
  • Show DHCP leases

📡 ARP Table

  • Show ARP table
  • Show ARP cache

🔐 WireGuard

  • Show WireGuard configuration
  • Show VPN peers

👤 Users

  • Show user configuration
  • Show PPP users

📝 Logs

  • Show system logs
  • Show recent logs

🔧 Services

  • Show system services
  • Show API/SSH ports

💾 Backup Configuration

  • Backup configuration
  • Backup router configuration

🧹 Clean Storage

  • Clean storage
  • Check for deletable files

🔐 API Configuration

  • Configure API access
  • Show API service configuration

📈 Traffic Statistics

  • Show interface traffic
  • Show traffic statistics

🔌 Interface Details

  • Show interface details
  • Show ether1 details

🏷️ VLAN

  • Show VLAN configuration
  • Show VLAN list

🌉 Bridge

  • Show bridge configuration
  • Show bridge ports

📊 Queues/Bandwidth

  • Show queue configuration
  • Show bandwidth limits
  • Show rate limit rules

🌐 Routing

  • Show routing configuration
  • Show OSPF status
  • Show BGP peers

🌡️ System Health

  • Show system health
  • Show temperature/voltage/fan

📅 Scheduled Tasks

  • Show scheduled tasks
  • Show cron jobs

📡 Neighbor Discovery

  • Show neighbor devices
  • Show network device discovery

🔗 Active Connections

  • Show active connections
  • Show connection statistics

🏓 Ping Test

  • ping 8.8.8.8 on mikrotik

📡 Network Scan

  • Scan local network
  • Scan 192.168.1.0/24
  • Find MikroTik devices

🎯 Custom Commands

  • execute /system/resource/print on mikrotik
  • run routeros command /ip/address/print
  • execute /interface/print on office device

🖥️ Multi-device Support

If multiple devices are configured, you can specify the device name in the command:

  • Show server-room mikrotik status
  • Show home firewall rules

Dependencies

  • Device API enabled (default port 8728)
  • Network reachable

File Structure

├── SKILL.md # Skill description (this file) ├── handler.py # Command processor └── mikrotik-api/ # API client library ├── init.py ├── client.py # API client ├── commands.py # Command wrappers ├── cli.py # CLI tool └── scanner.py # Network scanner

Notes

⚠️ Security Warnings

  1. Network Scan Risks

    • mikrotik scan actively scans the local subnet, generating network discovery traffic.
    • May trigger security alerts in production networks.
    • Recommendation: Run in isolated/test networks or obtain permission from the network administrator first.

  2. Credential Security

    • ❌ DO NOT save router admin passwords in plaintext in public or unencrypted TOOLS.md.
    • ✅ Recommended: Use environment variables (MIKROTIK_HOST/MIKROTIK_USER/MIKROTIK_PASS).
    • ✅ Recommended: Use temporary credentials for short-term sessions and delete after use.

  3. Local Commands and Permissions

    • scanner.py uses subprocess to call system commands (ip/hostname).
    • Requires opening UDP sockets for network scanning.
    • Ensure: The environment allows these operations.

Changelog

v1.8.6 (2026-03-30)

  • Translated entire skill to English (Original by Xiage).
  • Updated attribution and maintainer info.

v1.8.5 (2026-03-09)

  • 🔍 Refactored network scanning - Switched to API port scanning.
  • 📊 Optimized scan results.
  • 🔧 Updated scanner.py.

v1.8.4 (2026-03-08)

  • 💾 New backup configuration feature.
  • 🧹 New storage cleanup feature.
  • 🔐 New API configuration view.

v1.8.2 (2026-03-06)

  • 🔧 Fixed firmware display bug.
  • 📋 Added device model and serial number.
  • 📶 New wireless client query (CAPsMAN).
  • 🎯 Onboarding optimization for new users.
  • 🔍 Optimized network scanning.
  • 🆕 Added network scanning (Winbox-like).