### Render the onboarding script for a NAS

`GET /api/v1/admin/nas/{id}/onboarding-script`

Returns the RouterOS script that configures the device to talk to this platform: RADIUS client, accounting, the management tunnel and the captive portal redirect. Rendered for this specific device.

- Authentication: manager session (JWT) or API token
- Permission: `prm_nas_update` (Edit NAS)
- Risk: write

#### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `id` | path | integer | yes | NAS id. |

#### Note

The script contains the device's shared secret and tunnel credentials in the clear, because the router needs them. Treat the response as a secret, and do not log it.