mikro_fleet
Every account needs one. Scan the code with Google Authenticator, Microsoft Authenticator or 1Password, then type the 6 digits it shows.
An account that already exists on the router. The hub stores the password encrypted.
The router is removed from the app and its tunnel is closed on the hub. Paste this into the router's terminal to take off the tunnel, firewall rule and monitoring account it was given.
The last line turns the router's API service off. Set it back if something else uses it.
Paste this into the router's terminal (Winbox Terminal or SSH). It sets up the tunnel and a monitoring account. The router appears online within a minute.
The script contains the router's monitoring password, so don't share it.
No password stored, so this router can't be checked.
Change API password
Not enough checks yet.
Operators run the fleet. Admins can also manage users. New users set up an authenticator at their first sign in.