I've been working on a self-hosted MikroTik Management controller tailored for MSP / Co-Managed IT use cases (Enuclea LLC). The focus is on smooth device discovery + adoption, classification-driven VLAN/firewall security defaults, one-click provisioning, and a simple onboard AI agent for common tasks.
Still very much a work in progress, but the bones are there. Screenshots attached:
[Attach 2–3 screenshots: WAN Security, AI Agent, VLAN list + port view]
Key features so far:
Plug device into Acquisition VLAN → discover via MNDP → Adopt (provisions ctr-admin + SSH key + heartbeat)
I'm also studying MikroDash closely for visual and observability inspiration — their real-time dashboard, port visualizer, and card system look fantastic. Would love to hear from the MikroDash author or anyone else running large MikroTik fleets on what management/provisioning features would be most valuable.
Open to feedback and ideas. Not ready for release yet, but happy to share progress as it evolves.
@enuclea-dan This is awesome! I'm really glad MikroDash can serve as inspiration for something like this.
I have been thinking about how I can eventually phase MikroDash from a purely monitoring tool to also serve as a router management tool. But I didn't want to dip my toes into that pond until I got the security posture and basics firmed up.
I have also been thinking about adding LLM capabilities in MikroDash. There are already some great MCP servers available that should make this a breeze.
What you built here looks very promising and is already sparking new ideas I would like to eventually implement.
@SecOps7 Exactly. There are a couple of great MCP servers. Leveraging tools/subs like AntiGravity or Grok build opens a few doors as well for agentic handling. I did exactly that, I took your visualization, added in and extended an MCP build then leveraged AntiGravity (agy) within the container.
Beautiful GUI (you do so flipping well here), frontier leverage and near Unifi level configuration all residing local on a Tik.
Hopefully it sparks ideas.
As an aside, I was on a recent trip and tethered to my phone. I gave the agent the directive:
"Connect me to the hotel wifi over 2ghz, NAT to eth2 and eth3, as well as wifi broadcast over my travel SSID on 5ghz."
I'm currently running MikroMCP in Claude Code an Hermes and its been amazing. I really like what you did here and all the additional features you already added. Some of these could be great additions to MikroDash too.
Let me know when you have the repo live. I might want to merge some of your code if that's okay. I really like the direction you went here.
Just an idea, can you both improved traffic logging with mikrotik and better firewall ruleset just comparable to Palo Alto and fortigate, on these platform it's too easy to match the traffic on which firewall ruleset it used because there was a dedicated uuid for each ruleset if you can do that that's powerful feature
I know MT doesn't have this natively there's no notion of UUID per ruleset I think this great if you can find a way close to other platform firewall logging and ruleset tracking is not the great strength of MT
Not a hard gap to close really. Check the log box and set a prefix. Displaying that in a UI is fairly trivial afterwards.
Where I'm struggling in consideration right now is user classification. A typical user is blown away by everything a Tik can do. Half the admins don't touch all the features (I'm absolutely in that group).
The best I've come up with, though not implemented.
1). Dumbed down UI for managed systems. A user level "feel good" view
2). Mom and pop level view, ie standard fire walling, interface setup, rudimentary controls (netgearify a Tik)
