Skip to main content
Glama

disable_mangle_rule

Disable an existing MikroTik firewall mangle rule by matching its comment (optionally chain). Preview first with confirm=False, then apply with confirm=True; errors if no match or ambiguous.

Instructions

Disable an EXISTING firewall mangle rule (/ip/firewall/mangle set disabled=yes), resolved by its comment - optionally narrowed by chain.

Same "never creates a rule" guarantee and comment-based resolution as enable_mangle_rule.

WRITE tool, guarded: blocked entirely unless the server is running with MIKROTIK_ALLOW_WRITE=true. Call with confirm=False (the default) to get a before/after preview without changing anything; call again with confirm=True to actually apply it. Errors clearly if no rule matches comment (narrowed by chain), or if more than one still does (AmbiguousResourceError).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
chainNo
commentYes
confirmNo
device_nameYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv1.11.0

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does so: it discloses the write guard (env var gate), the default confirm=False preview vs confirm=True apply behavior, the 'never creates a rule' guarantee, and the exact error conditions (no match, or AmbiguousResourceError on multiple matches). That is well beyond what the schema provides.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action and the resolution key, then the guard, then the confirm flow. The parenthetical RouterOS command adds concrete context rather than filler, though the paragraph structure is slightly rambling compared to a tight two-sentence form.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given an output schema exists, return values need not be described. The remaining obligations for a guarded write tool — preconditions, confirmation protocol, ambiguity errors, and the no-create guarantee — are all present, so an agent can call it correctly without further discovery.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate. It explains comment (the resolution key), chain (optional narrowing of the match), and confirm (preview vs apply). device_name is left unexplained, which is the only gap, but the semantics of the risky parameters are fully covered.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Disable an EXISTING firewall mangle rule'), gives the underlying RouterOS command, and explicitly distinguishes itself from its counterpart 'enable_mangle_rule' and from creation behavior. An agent can pick it out of the large sibling list immediately.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clear usage context: it operates on an existing rule resolved by comment, may be narrowed by chain, and carries the explicit 'blocked unless MIKROTIK_ALLOW_WRITE=true' precondition plus a two-step confirm flow. It does not spell out when to prefer it over e.g. disable_firewall_rule or disable_nat_rule, but the domain is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools