rosetta
Health Uyari
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 7 GitHub stars
Code Basarisiz
- eval() — Dynamic code execution via eval() in .github/workflows/release.yml
- process.env — Environment variable access in .github/workflows/release.yml
- fs module — File system access in .github/workflows/release.yml
Permissions Gecti
- Permissions — No dangerous permissions requested
This server acts as an MCP tool providing AI assistants with searchable, structured access to the complete MikroTik RouterOS documentation, hardware specs, and changelogs. It relies on a SQLite full-text search database rather than vector embeddings to retrieve highly specific technical data.
Security Assessment
Overall Risk: Medium. The core functionality of the server is safe, acting strictly as a local or network-based read-only database for documentation. However, the automated rule scan raised a critical flag for dynamic code execution via `eval()` inside the GitHub Actions release workflow (`.github/workflows/release.yml`). While this `eval()` call is restricted to the CI/CD pipeline and does not affect the runtime application, it presents a supply chain risk if malicious pull requests or external scripts manipulate the build process. There are no hardcoded secrets and the runtime application requires no dangerous system permissions.
Quality Assessment
The project is fresh and actively maintained, with its most recent code pushed today. It is fully open-source under the permissive MIT license. However, community trust and visibility are currently very low; it only has 7 GitHub stars. Despite the low visibility, the README is highly detailed and provides excellent, comprehensive instructions for seamless deployment directly onto MikroTik hardware or a local workstation.
Verdict
Use with caution — the application itself is a secure, local database, but you should audit the CI/CD workflow or build the SQLite database locally to mitigate the supply chain risks identified in the release automation.
MCP Server with RouterOS docs + commands + products + changelogs, using SQLite-as-RAG, sourced from MikroTik
rosetta
MCP server that gives AI assistants searchable access to the complete MikroTik RouterOS documentation — 317 pages, 4,860 properties, 40,000-entry command tree, hardware specs for 144 products, 518 YouTube video transcripts, and direct links to help.mikrotik.com.
If you need MikroTik docs, you likely have a MikroTik. Install rosetta once as a container on your router using RouterOS /app, and any AI assistant on the network can use it. Or run it locally on your workstation. No AI required — rosetta includes a terminal browser for searching the database directly.
SQL-as-RAG
Instead of vector embeddings, rosetta uses SQLite FTS5 full-text search as the retrieval layer — SQL-as-RAG. For structured technical docs, BM25 ranking with porter stemming beats vector similarity: terms like dhcp-snooping and /ip/firewall/filter are exact tokens, not fuzzy embeddings. No API keys, no vector database — just a single SQLite file that searches in milliseconds.
What's Inside
| Data Source | Coverage |
|---|---|
| Documentation pages | 317 pages (~515K words) from help.mikrotik.com |
| Property definitions | 4,860 with types, defaults, descriptions |
| Command tree | 5,114 commands, 551 dirs, 34K arguments |
| Version history | 46 RouterOS versions tracked (7.9–7.23beta2) |
| Hardware products | 144 devices — specs, pricing, block diagrams |
| Performance benchmarks | 2,874 tests across 125 devices (ethernet + IPSec) |
| YouTube transcripts | 518 videos, ~1,890 chapter-level segments |
| Callout blocks | 1,034 warnings, notes, and tips |
Documentation covers RouterOS v7 only, aligned with the long-term release (~7.22) at export time.
Install on MikroTik (/app)
RouterOS 7.22+ includes the /app feature for running containers directly on the router. This is the simplest way to deploy rosetta — install once, and any AI assistant on your network can connect to the MCP endpoint URL shown in the router UI.
Requirements: RouterOS 7.22+, x86 or ARM64 architecture (CCR, RB5009, hAP ax series, CHR, etc.), container package installed, device-mode enabled.
1. Enable containers (two reboots required)
If you haven't already enabled the container package and device-mode:
# Install the container package (router reboots automatically)
/system/package/update/check-for-updates duration=10s
/system/package/enable container
# Apply changes restarts the router
After reboot:
# Enable container device-mode (requires physical power cycle or button press — follow the on-screen prompt)
/system/device-mode/update mode=advanced container=yes
See MikroTik's Container documentation for full prerequisites and troubleshooting.
2. Add the rosetta app
/app/add use-https=yes disabled=no yaml="name: rosetta
descr: \"RouterOS Docs for AI assistants - use URL as MCP server\"
page: https://tikoci.github.io/p/rosetta
category: development
icon: https://tikoci.github.io/p/rosetta.svg
default-credentials: \"none - just use 'ui-url' as the MCP server in your AI assistant\"
url-path: /mcp
auto-update: true
services:
rosetta:
image: ghcr.io/tikoci/rosetta:latest
container_name: mcp-server
ports:
- 9803:8080/tcp:web
"
That's it. RouterOS downloads the container image, configures networking and firewall redirects, and starts the MCP server. The auto-update: true setting pulls the latest image on each boot.
3. Get the MCP endpoint URL
The URL to use with your AI assistant is shown as UI URL in WebFig (App → rosetta), or from the CLI:
:put [/app/get rosetta ui-url]
This URL includes the /mcp path and is ready to paste into any MCP client that supports HTTP transport. With use-https=yes, the URL uses HTTPS with a MikroTik-managed *.routingthecloud.net certificate.
4. Configure your AI assistant
Point any HTTP-capable MCP client at the URL from the previous step:
{ "url": "https://app-rosetta.XXX.routingthecloud.net/mcp" }
CHR note: Cloud Hosted Router in free or trial mode does not include the
/ip/cloudservice needed for HTTPS certificates. Setuse-https=noon the /app — the URL will use HTTP instead. The UI URL always reflects the correct protocol.
HTTP option: On any platform, you may choose
use-https=noif you prefer HTTP or are on an isolated network.
Browse the database from the router: If rosetta is running as a
/app, you can use/container/shellto access the TUI browser directly:/container/shell app-rosetta # /app/rosetta browse
Install Locally (with Bun)
Run rosetta on your workstation using Bun. The MCP server runs over stdio — no network configuration needed. The database downloads automatically on first launch (~50 MB compressed).
Quick setup
bunx @tikoci/rosetta --setup
This downloads the database and prints config snippets for all supported MCP clients. Copy-paste the config for your client and you're done.
Need to force a database reload later? Use:
bunx @tikoci/rosetta --refresh
Configure your MCP client
VS Code CopilotOpen the Command Palette (Cmd+Shift+P / Ctrl+Shift+P), choose "MCP: Add Server…", select "Command (stdio)", enter bunx as the command, and @tikoci/rosetta as the argument.
Or add to User Settings JSON (Cmd+Shift+P → "Preferences: Open User Settings (JSON)"):
"mcp": {
"servers": {
"rosetta": {
"command": "bunx",
"args": ["@tikoci/rosetta"]
}
}
}
Claude Code
claude mcp add rosetta -- bunx @tikoci/rosetta
Claude Desktop
Edit your Claude Desktop config file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"rosetta": {
"command": "bunx",
"args": ["@tikoci/rosetta"]
}
}
}
PATH note: Claude Desktop on macOS doesn't always inherit your shell PATH. If
bunxisn't found, use the full path (typically~/.bun/bin/bunx). Runbunx @tikoci/rosetta --setupto print the full-path config.
Restart Claude Desktop after editing.
CursorOpen Settings → MCP and add a new server:
{
"mcpServers": {
"rosetta": {
"command": "bunx",
"args": ["@tikoci/rosetta"]
}
}
}
OpenAI Codex
codex mcp add rosetta -- bunx @tikoci/rosetta
GitHub Copilot CLINote: ChatGPT Apps require a remote HTTPS MCP endpoint. Use the MikroTik /app install or another container platform for a hosted endpoint, or Codex CLI for local stdio.
Inside a copilot session, type /mcp add:
- Server Name:
routeros-rosetta - Server Type: 2 (STDIO)
- Command:
bunx @tikoci/rosetta
Install Bun (if you don't have it):
# macOS / Linux
curl -fsSL https://bun.sh/install | bash
# Windows
powershell -c "irm bun.sh/install.ps1 | iex"
Auto-update:
bunxchecks the npm registry each session and uses the latest published version automatically. The database in~/.rosetta/ros-help.dbpersists across updates.
Browse Without AI
Rosetta includes a terminal-based "card catalog" browser — no AI assistant or MCP client required. It searches the same database the MCP tools use, with a keyboard-driven REPL modeled after a 1980s library terminal.
bunx @tikoci/rosetta browse
Type a search query to find documentation pages, then select a numbered result to drill in. Beyond page search, the browser covers every data source in the database:
| Command | What it searches |
|---|---|
| (bare text) | Documentation pages (default) |
dev <query> |
Device hardware specs, block diagrams, benchmarks |
cmd [path] |
Command tree hierarchy |
prop <name> |
Property definitions (scoped to current page when viewing one) |
cal [query] |
Warnings, notes, and tips |
cl [version] |
Changelogs — cl breaking for breaking changes only |
vid <query> |
YouTube video transcripts with timestamped chapter links |
diff <from> <to> |
Command tree diff between RouterOS versions |
tests [type] |
Cross-device performance benchmarks |
ver |
Live-fetch current RouterOS versions |
Type help for the full command list. URLs are clickable in terminals that support OSC 8 hyperlinks (iTerm2, Windows Terminal, GNOME Terminal, etc.).
The browser is also useful as a test harness — it interacts with the data the same way an AI agent would through MCP, so gaps or rough edges visible here often point to MCP tool improvements too.
From a router: If rosetta is installed as a
/app, access the browser via/container/shell app-rosettathen/app/rosetta browse.
Try It
Ask your AI assistant questions like:
- "What are the DHCP server properties in RouterOS?"
- "How do I set up a bridge VLAN?"
- "Is the /container command available in RouterOS 7.12?"
- "Show me warnings about hardware offloading"
- "Which MikroTik routers have L3HW offload, and more than 8 ports of 48V PoE? Include cost."
- "Compare the RB5009 and CCR2004 IPSec throughput at 1518-byte packets."
- "My BGP routes stopped working after upgrading from 7.15 to 7.22 — what changed in the routing commands?"
MCP Tools
The server exposes 13 tools designed to work together — agents start with routeros_search and drill into specific data as needed:
| Tool | What it does |
|---|---|
routeros_search |
Start here. Unified search with input classifier — returns pages + related callouts, videos, properties, changelogs, devices, skills |
routeros_get_page |
Full page content by ID or title, section-aware for large pages |
routeros_lookup_property |
Property by exact name — type, default, description |
routeros_command_tree |
Browse the command hierarchy (/ip/firewall/filter style) |
routeros_search_changelogs |
Changelogs filtered by version range, category, breaking flag |
routeros_command_version_check |
Which RouterOS versions include a command path |
routeros_command_diff |
Added/removed commands between two RouterOS versions |
routeros_device_lookup |
Hardware specs — filter by architecture, RAM, PoE, wireless, etc. |
routeros_search_tests |
Cross-device ethernet and IPSec benchmarks |
routeros_dude_search |
FTS across archived Dude wiki docs (separate from RouterOS search) |
routeros_dude_get_page |
Full Dude wiki page by ID or title, with screenshot metadata |
routeros_stats |
Database health and coverage stats |
routeros_current_versions |
Live-fetch current RouterOS versions from MikroTik |
Each tool description includes workflow arrows (→ next_tool) and empty-result hints so agents chain tools effectively.
The server also exposes MCP Resources for bulk data and supplemental content — CSV datasets (rosetta://datasets/...), schema documentation (rosetta://schema...), and agent skill guides (rosetta://skills/{name}) from tikoci/routeros-skills. Skills are community-created, human-reviewed guides served with provenance attribution. See MANUAL.md for details.
RTFM for Details
For additional install options, HTTP transport configuration, data source details, and the database schema, see MANUAL.md.
Contributing
See CONTRIBUTING.md for building from source, running tests, development setup, and the release process.
License
MIT
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi