A PHP 8.4 client for the MikroTik RouterOS API.
This library provides a clean, modern interface for communicating with MikroTik RouterOS devices via their API protocol. Built with a layered architecture, it handles the low-level binary protocol details so you can focus on managing your network infrastructure. Features include a fluent query builder, SSL support, environment variable configuration, and a comprehensive test suite.
- Requirements
- Installation
- Quick Start
- Configuration
- Basic Usage
- Query Builder
- Streaming
- SSL
- Laravel Integration
- Migrating from routeros-api-php
- Roadmap
- License
- PHP 8.4 or higher
- MikroTik RouterOS device with API service enabled
composer require ocolin/routerosuse Ocolin\RouterOS\Client;
$client = new Client([
'host' => '192.168.88.1',
'username' => 'admin',
'password' => 'secret'
]);
$interfaces = $client->query( '/interface/print' );
foreach( $interfaces as $interface ) {
echo $interface['name'] . "\n";
}The client can be configured by passing an associative array, a Config object,
or any object whose properties match the configuration parameters. The array
approach is the most common and concise.
| Parameter | Type | Default | ENV Variable | Description |
|---|---|---|---|---|
| host | string | required | ROUTEROS_HOST |
IP address or hostname of device |
| username | string | admin |
ROUTEROS_USERNAME |
Username to authenticate with |
| password | string | '' |
ROUTEROS_PASSWORD |
Password to authenticate with |
| ssl | bool | false |
ROUTEROS_SSL |
Enable SSL connection |
| port | int | 8728 |
ROUTEROS_PORT |
Port for non-SSL connections |
| sslPort | int | 8729 |
ROUTEROS_SSL_PORT |
Port for SSL connections |
| timeout | int | 10 |
ROUTEROS_TIMEOUT |
Connection timeout in seconds |
| socketTimeout | int | 30 |
ROUTEROS_SOCKET_TIMEOUT |
Response timeout in seconds |
| sslVerify | bool | false |
ROUTEROS_SSL_VERIFY |
Verify SSL certificate |
$client = new Client([
'host' => '192.168.88.1',
'username' => 'admin',
'password' => 'secret'
]);$config = new Config([
'host' => '192.168.88.1',
]);
$client = new Client( $config );Environment variables can be used instead of passing configuration directly. The ENV variable names are listed in the parameters table above.
// .env file
ROUTEROS_HOST=192.168.88.1
ROUTEROS_USERNAME=admin
ROUTEROS_PASSWORD=secretTo support multiple devices, an optional prefix can be used:
// .env file
ROUTEROS_CORE_HOST=10.0.0.1
ROUTEROS_EDGE_HOST=10.0.0.2$core = new Client( envPrefix: 'CORE' );
$edge = new Client( envPrefix: 'EDGE' );There are three methods that can be used for inputting data to a device. A simple string command, an array of command words, or a Command object which provides methods for more complex queries.
This is good for simple single command queries that don't require any special conditions.
$interfaces = $client->query( command: '/interface/print' );
foreach( $interfaces as $interface )
{
echo $interface['name'] . PHP_EOL;
}Useful for advanced users who prefer working directly with the API syntax, or for sending commands not yet supported by the Command builder.
$interfaces = $client->query( command: [
'/interface/print',
'=disabled=no',
'?type=ether'
]);
foreach( $interfaces as $interface )
{
echo $interface['name'] . PHP_EOL;
}A Command object is included for making complex queries easier to type doesn't require that you know the API syntax.
use Ocolin\RouterOS\Command;
$interfaces = $client->query(
command: new Command('/interface/print')
->attribute( key: 'disabled', value: false )
->query( 'type' )->equals( 'ether' )
);
foreach( $interfaces as $interface )
{
echo $interface['name'] . PHP_EOL;
}The Command class allows you to create complex queries with a simple syntax. The Query takes one argument for the constructor, which is the RouterOS command word.
$command = new Command( '/interface/print' );In this example we are sending a simple command with no other parameters. The command word is always required by RouterOS.
The attribute method allows you to specify attributes to your query. This is useful when creating and modifying an object on the Mikrotik device. Each attribute has a name and a value. RouterOS uses "yes" and "no" for boolean attributes, but this client will automatically convert boolean for you.
$command = new Command( '/interface/print' )
->attribute( key: 'disabled', value: true );The query method allows you to filter the results of your query.
One way to add a query is by just using the constructor arguments. This is a means to manually enter the data without any helped functions.
// Get interfaces of type equal to ether
$command = new Command( '/interface/print' )
->query( key: 'type', value: 'ether', operator: '=' );// Get interfaces with any link-downs
$command = new Command( '/interface/print' )
->query( key: 'link-downs', value: 0, operator: '>' );This function takes a single value and which the key value must be equal to.
// Get interfaces of type equal to ether
$command = new Command( '/interface/print' )
->query( key: 'type' )->equals( 'ether' );This function takes a single value which the key value must be less than.
// Get interfaces with any no link-downs
$command = new Command( '/interface/print' )
->query( key: 'link-downs' )->lessThan( 1 );This function takes a single value which the key value must be greater than.
// Get interfaces with link-downs
$command = new Command( '/interface/print' )
->query( key: 'link-downs' )->greaterThan( 0 );Include if a property exists for the return results.
// Get interfaces with link-downs property
$command = new Command( '/interface/print' )
->query( key: 'link-downs' )->exists();Include if a property does not exist.
// Get interfaces without link-downs property
$command = new Command( '/interface/print' )
->query( key: 'link-downs' )->notExists();When using multiple queries, you can specify a logical operator to indicate if all the queries should be met, or if any should be met, or it they should not be met.
The logical operator must always come after your query parameters for RouterOS to understand it.
The and operator requires that all query parameters must be met. This is also the default operator so does not need to be specified.
// Get interfaces of type equal to ether AND has link-downs
$command = new Command( '/interface/print' )
->query( key: 'type' )->equals( 'ether' )
->query( key: 'link-downs' )->greaterThan( 0 )
->and();The or operator requires any of the query parameters to be met.
// Get interfaces of type equal to ether OR has link-downs
$command = new Command( '/interface/print' )
->query( key: 'type' )->equals( 'ether' )
->query( key: 'link-downs' )->greaterThan( 0 )
->or();This operator says to filter results to not contain the previous query parameter. Unlike AND and OR, this operator can be used prior to the end and can be specified for each query paramater.
// Get interfaces of type not a vlan
$command = new Command( '/interface/print' )
->query( key: 'type' )->equals( 'vlan' )
->not();The proplist allows you to limit the columns that are returned in your results.
$command = new Command( '/interface/print' )->proplist(['name', 'type']);Tag IDs can be added to queries.
$command = new Command( '/interface/print' )->tag( 123 );$command = new Command( '/interface/print' )->tag( 'abc' );There are a few alias functions which exist for those using method names found in other libraries.
The where method is an alias for the query method.
// Get interfaces without link-downs property
$command = new Command( '/interface/print' )
->where( key: 'link-downs' )->notExists();The equal method is an alias for the attribute method.
$command = new Command( '/interface/print' )
->equal( key: 'disabled', value: true );The operations method is an alias for the logical operator methods, using the same syntax as routeros-api-php.
$command = new Command( '/interface/print' )
->query( 'type' )->equals( 'ether' )
->query( 'type' )->equals( 'vlan' )
->operations( '|' );Some RouterOS commands return a continuous stream of data rather than a single
response. The most common example is the /interface/listen command which sends
updates whenever an interface changes state. The stream() method handles these
commands by returning a Generator that yields results one at a time as they arrive.
Unlike query() which collects all results and returns them as an array,
stream() never stops on its own — it will keep yielding results until you
break out of the loop or the connection is closed.
foreach( $client->stream( '/interface/listen' ) as $update ) {
echo $update['name'] . ' changed state' . PHP_EOL;
// Stop listening after first update
if( $someCondition ) {
break;
}
}The stream() method accepts the same input types as query() — a string
command, an array of words, or a Command object.
Note: To gracefully stop a streaming command, break out of the loop. Explicit command cancellation using
/cancelwill be available in a future release when concurrent command support is added.
The client supports SSL connections using RouterOS's secure API service. SSL is disabled by default and must be enabled in your configuration.
Before enabling SSL in the client, the api-ssl service must be configured on your RouterOS device. A certificate is required.
Generate a self-signed certificate directly on the router:
/certificate add name=api-ssl common-name=api-ssl
/certificate sign api-ssl
/ip service set api-ssl certificate=api-ssl
/ip service enable api-sslThen allow connections by setting the allowed address under IP → Services → api-ssl.
$client = new Client([
'host' => '192.168.88.1',
'username' => 'admin',
'password' => 'secret',
'ssl' => true,
'sslVerify' => false // set to true if using a trusted certificate
]);Note: Most RouterOS devices use self-signed certificates. Set
sslVerifytofalseunless you have installed a trusted certificate on your device.
This package includes a Service Provider for easy integration with Laravel applications.
Require the Laravel support package:
composer require illuminate/supportThe Service Provider will be automatically discovered by Laravel.
Publish the configuration file:
php artisan vendor:publish --provider="Ocolin\RouterOS\Laravel\ServiceProvider"This creates config/routeros.php in your Laravel application. Update your
.env file with your device credentials:
ROUTEROS_HOST=192.168.88.1
ROUTEROS_USERNAME=admin
ROUTEROS_PASSWORD=secret
The Client is automatically registered in Laravel's service container and
can be injected into your controllers, services, or jobs:
use Ocolin\RouterOS\Client;
class NetworkController extends Controller
{
public function __construct( private Client $client ) {}
public function interfaces() : array
{
return $this->client->query( '/interface/print' );
}
}This library was designed as a maintained alternative to the widely used but unmaintained routeros-api-php library. Several alias methods are included to ease migration.
| routeros-api-php | ocolin/routeros | Notes |
|---|---|---|
->where() |
->query() |
Alias included |
->equal() |
->attribute() |
Alias included |
->operations('|') |
->or() |
Alias included |
->operations('&') |
->and() |
Alias included |
->operations('!') |
->not() |
Alias included |
->tag() |
Coming in v2 | Not yet implemented |
The client is configured using an array or Config object rather than
separate setter methods. The parameter names are similar but not identical:
| routeros-api-php | ocolin/routeros |
|---|---|
host |
host |
user |
username |
pass |
password |
port |
port |
ssl |
ssl |
timeout |
timeout |
socket_timeout |
socketTimeout |
The following features are planned for future releases:
- Concurrent commands — multi-tag usage
- Streaming cancellation — explicit
/cancelcommand support - CLI-style input — parse RouterOS CLI syntax directly as command input
- Laravel integration — Facade for Laravel applications
This project is licensed under the MIT License. See the LICENSE file for details.