How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

RouterOS Firewall API

Firewall rules, NAT, and address lists

RouterOS Firewall API is one of 11 APIs that RouterOS publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 4 JSON Schema definitions.

Tagged areas include Firewall. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and 4 JSON Schemas.

This API exposes 8 operations across 4 paths, and defines 6 schemas. It is described by OpenAPI 3.2.0, at version 7.1+.

Requests are made against a single base URL, https://{routerIP}/rest.

8 operations 4 paths 6 schemas 1 DELETE3 GET1 PATCH3 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
7.1+
Base URL
https://{router-ip}/rest
Authentication
HTTP Basic
Resource Areas
1

Authentication & Security 1

RouterOS Firewall API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (basicAuth). By default, every request must be authenticated.

  • basicAuth — HTTP Basic Auth using RouterOS console credentials

Paths & Operations 8

Across 4 paths, the API surfaces 8 operations — 1 DELETE, 3 GET, 1 PATCH, 3 PUT. Each is listed below with its method, path, parameters, and response codes.

Firewall 8

Firewall rules, NAT, and address lists

GET
/ip/firewall/filter
List Firewall Filter Rules
listFirewallFilters 2 params → 200
PUT
/ip/firewall/filter
Add Firewall Filter Rule
addFirewallFilter body → 201
PATCH
/ip/firewall/filter/{id}
Update Firewall Filter Rule
updateFirewallFilter 1 param body → 200
DELETE
/ip/firewall/filter/{id}
Delete Firewall Filter Rule
deleteFirewallFilter 1 param → 204
GET
/ip/firewall/nat
List Firewall NAT Rules
listFirewallNat 1 param → 200
PUT
/ip/firewall/nat
Add Firewall NAT Rule
addFirewallNat body → 201
GET
/ip/firewall/address-list
List Firewall Address Lists
listFirewallAddressLists 1 param → 200
PUT
/ip/firewall/address-list
Add Firewall Address List Entry
addFirewallAddressListEntry body → 201

Schemas 6

The contract defines 6 schemas that model the data the API accepts and returns. The most detailed are FirewallFilter (10 properties), FirewallFilterCreate (9 properties), FirewallNat (9 properties), FirewallNatCreate (7 properties). Each schema is shown below with its type and property counts.

AddressList
object
RouterOS firewall address list entry
7 properties
FirewallFilter
object
RouterOS firewall filter rule
10 properties
AddressListCreate
object
4 properties 2 required
FirewallNat
object
RouterOS NAT rule
9 properties
FirewallNatCreate
object
7 properties 2 required
FirewallFilterCreate
object
9 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

routeros-firewall-api-openapi.yml Raw ↑

Other APIs RouterOS publishes across the network.

RouterOS TCP API
RouterOS Bridge API
RouterOS DHCP API
RouterOS DNS API
RouterOS Interface API
RouterOS IP Address API
RouterOS Routing API
RouterOS System API
RouterOS VPN API
RouterOS Wireless API
Where this information came from

This is an independent, third-party profile of RouterOS Firewall API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.