What’s new in Mikro Manager

Every release, newest first — what it adds, what it fixes.

Version 1.0

Coming soon

The first release: everyday MikroTik RouterOS work on the Mac — CGNAT, a security audit, WireGuard, DNS, time, logs and snapshots — with every change shown as a plan before anything is written.

  • One client, one page

    Type an address, a public address and port, a MAC, a PPPoE username or a hostname — and see the lease, session, CGNAT placement, queue and live flows. ⌘K opens it.

  • CGNAT pools, planned

    Describe a pool and get the whole netmap rule set, diffed against the router and applied only once you approve.

  • Who had that address?

    A public address and source port resolve to the private client behind it — by arithmetic, with no session logging.

  • Port exhaustion, seen first

    Sample the connection table for each block’s port budget and its busiest clients, before customers notice.

  • A security audit

    Seventeen read-only hardening checks. Each finding comes with the command that fixes it, ready to paste.

  • WireGuard peers

    Keys are generated on your Mac, so only the public key reaches the router. Each client gets a config file and a QR code.

  • Snapshots that diff cleanly

    Counters and uptimes are filtered out, so a diff shows only what really changed. One is taken on every connect.

  • HTTPS without the detour

    Set Up HTTPS Access creates the certificate and the REST service over the console, then trusts that certificate and no other.

  • The router at a glance

    Model, RouterOS version and uptime; live CPU, memory and storage; board sensors and pending firmware.

  • DNS, time and logs

    Resolvers, DNS over HTTPS and static entries; NTP presets for the router’s region; the log, filtered.

Requires macOS 14 or later and a MikroTik router running RouterOS 7.

Get Mikro Manager

Distributed through the Mac App Store — sandboxed, signed, and updated automatically.

Coming soon to the Mac App Store.

Requires macOS 14 or later, and a RouterOS v7 device with the REST API enabled.