wireguard_interfaces
List WireGuard interfaces on a MikroTik RouterOS device to inspect tunnel names, ports, public keys, MTU, and running/disabled status without exposing private keys.
Instructions
List WireGuard tunnel interfaces (/interface/wireguard): name, listen-port, public-key, running, disabled, mtu.
SECURITY: RouterOS's own /interface/wireguard reply carries the
interface's private-key - this is ALWAYS stripped before
returning (formatting.strip_sensitive_fields with
formatting.WIREGUARD_SENSITIVE_FIELDS), the same mechanism
wireguard_peers (v0.8) already used defensively for a peer's
private-key/preshared-key. A private-key never leaves this process.
See test_wireguard_interfaces_never_exposes_private_key.
Returns an empty list (never an error) for a device with no WireGuard package/interfaces at all - same convention as wireguard_peers.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| device_name | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |