MCP server for managing MikroTik RouterOS devices — 65 tools over the RouterOS REST API with SSH fallback, KeePass-backed credentials, multi-device fan-out, and a read-only mode.
52 tools with consistent naming (verb_noun pattern: get_, list_, system-*) and descriptions present. However, 45 tools lack visible input schemas in the provided source excerpt, only ros-command and device-list show explicit schema definitions. Descriptions are adequate (100 - 200 chars typical) but many are generic ('Get X on one or all devices') without explaining WHEN to use them or what downstream tools need. No output schemas documented. Error handling and recovery guidance absent. Tool composition is sound (single responsibility), but parameter descriptions are minimal.
List all managed device IDs from the KeePass vault. Use this first to discover available targets before calling other tools.
45 of 52 tools lack visible input schemas in source. Only device-list and ros-command show explicit schema definitions.
45 tools have no descriptions in the provided source excerpt. Only device-list, ros-command, system-ntp-get, and system-snmp-get have descriptions visible.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 43 | <=2025-11-25 | v2 |
Execute a raw RouterOS CLI command on one or all devices via SSH. WRITE/EXECUTE tool: the command runs verbatim on every device matched by `target` and may change configuration, interrupt connectivity, or reboot hardware. There is no validation, preview, or rollback.
Get NTP client configuration on one or all devices
Get SNMP configuration on one or all devices
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields (e.g., device IDs for chaining). Baseline: 100% of A+ tools document return types.
ros-command is DESTRUCTIVE (can reboot hardware, interrupt connectivity) but lacks error handling guidance, dry-run option, or confirmation step. Agents may execute irreversible commands without safeguards.
Generic descriptions ('Get X on one or all devices') do not explain WHEN to use each tool vs. similar ones, or what downstream tools need. Baseline: A+ descriptions are 50 - 200 chars and answer what, when, and why.