RouterOS API and REST API

Two interfaces expose the same console menus, parameters and permissions as the CLI (the CLI reference describes them): the REST API (JSON over HTTPS, easiest from any language) and the binary API (persistent TCP connection with sentences, supports listen streams and tags).

Least privilege first

Give every client its own user in its own group. Never hand an admin password to an automation or an AI assistant; give it a read-only user and add write access only for actions it truly needs.

/user/group/add name=rest-read policy=read,api,rest-api
/user/add name=monitoring group=rest-read password="use-a-long-random-password" address=192.168.88.10/32