List configured MikroTik devices. Read-only; passwords are never included.

Get RouterOS identity + resource info (board, version, uptime, CPU/memory).

List network interfaces on a device.

List IPv4 addresses configured on a device.

List the IPv4 routing table of a device.

limit, if given, caps the number of rows returned (capped at 500); omit it to get the full table, mirroring logs' limit parameter.

List neighbors discovered via RouterOS neighbor discovery (CDP/MNDP/LLDP).

Read recent RouterOS log entries (most recent last).

limit must be positive and is capped at 500. topics, if given, is matched as a plain substring against each entry's topics field - no regex, no unbounded scans - and is applied BEFORE the limit cut: the full log is filtered by topics first, then the last limit matching entries are returned (not the last limit raw entries, then filtered - that would silently drop matches).

R1: this reads the whole /log table via librouteros' path().select() and slices in Python rather than asking RouterOS for only the last limit rows. librouteros' structured API doesn't expose a clean "give me only the tail" query for /log (RouterOS's own count-only print flags aren't reachable through path().select() the way a .limit()/offset would be), so a "request fewer rows" optimization here would mean building a fragile ad-hoc workaround for a table that is small in practice (a few hundred to low thousands of rows on RouterOS's own ring buffer). Left as-is; revisit if a real device turns out to have a much larger log buffer than expected.

Ping an address from a device. address must be a valid IPv4/IPv6 address or hostname.

List every guarded write operation and the RouterOS path/action it maps to.

Read-only: this only surfaces guard.ALLOWLIST's metadata (D3) - it does not perform or preview a write, and is not gated by MIKROTIK_ALLOW_WRITE.

Set a device's RouterOS identity (hostname).

WRITE tool, guarded: blocked entirely unless the server is running with MIKROTIK_ALLOW_WRITE=true. Call with confirm=False (the default) to get a before/after preview without changing anything; call again with confirm=True to actually apply it.