Secure RouterOS automation

Use the MikroTik API remotely without exposing it

The RouterOS API can automate users, profiles, backups and network checks. It should be reached through a private channel with an account limited to the operations the application actually requires.

Create my SunVPN access View documentation

Least privilege

Do not use the main administrator account in an integration. A dedicated account reduces the impact of a compromised password or key.

API and API-SSL

API-SSL adds TLS when available. In every case, keep the tunnel, filter source addresses and protect credentials in the application.

What you get

Automation without manual intervention

Limited service account

API traffic carried through the tunnel

Auditable remote operations

How it works

  1. 1

    Create a RouterOS group with minimal permissions.

  2. 2

    Create a separate application account.

  3. 3

    Permit API access only from tunnel addresses.

Related guides

Connect Mikhmon Online to your MikroTik Host Mikhmon online for Hotspot management Sell Hotspot vouchers through Mobile Money Open Webfig remotely and securely

Frequently asked questions

Which account should the API use?

A dedicated service account with only the required permissions.

Should the API be public?

No. Prefer a VPN or a strict source-address allowlist.

Can backups be automated?

Yes, with a process that also protects the storage and transfer of generated files.

Ready to manage your MikroTik remotely?

Create your SunVPN account and configure your first connection in a few steps.

Démarrer maintenant