MIKRO100 - Failed to List MikroTik Address-List Entries

Agent error code #MIKRO100 indicates that the agent could not read the firewall address-list it is supposed to manage. This is the first call the agent makes before either adding or removing an entry, so a failure here usually points at a permissions or REST availability problem rather than a missing list.

If the list simply has no entries yet, RouterOS returns [] (not an error). Receiving this error means the call itself failed.

Common causes include:

• The user lacks the read policy on the group
• The REST API returned an unexpected response shape, usually accompanying an upstream proxy that rewrites the response
• The router is intermittently unreachable

Steps to Resolve

Verify Read Permissions

1. In RouterOS, open System > Users > Groups and find the group used by the service user
2. Confirm both read and rest-api policies are enabled
3. Save and retry

Test the Read Manually

1. From the agent host, run: curl -ku '<user>:<pass>' 'https://<router-host>/rest/ip/firewall/address-list?list=<your-list-name>'
2. A successful call returns a JSON array (possibly empty)
3. If you see an authorization error, fix the group policies (see #MIKRO002)
4. If the call hangs or returns HTML, troubleshoot connectivity (see #MIKRO000, #MIKRO004) before retrying

Still Having Issues?

We can help you out, contact us at support@knocknoc.io.