MCP.Market

Unifi MCP server

by enuno·io.github.enuno/unifi-mcp-server·v0.2.0·275 stars
No reviews yet

An MCP server that leverages official UniFi API

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

275 stars

Reviews

Write one

Nobody has reviewed Unifi yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Unifi tools (100, 35 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • adopt_device

    Adopt a pending device onto the specified site (requires confirm=True).

  • authorize_guest

    Authorize a guest client for network access (requires confirm=True).

  • block_client

    Block a client from accessing the network (requires confirm=True).

  • bulk_delete_voucherswrite action

    Bulk delete vouchers using a filter expression (requires confirm=True).

  • configure_guest_portal

    Configure guest portal settings (requires confirm=True).

  • configure_smart_queue

    Configure Smart Queue Management (SQM) for bufferbloat mitigation (requires confirm=True).

  • create_acl_rulewrite action

    Create a new ACL rule (requires confirm=True).

  • create_firewall_rulewrite action

    Create a new firewall rule (requires confirm=True).

  • create_firewall_zonewrite action

    Create a new firewall zone (requires confirm=True).

  • create_hotspot_packagewrite action

    Create a new hotspot package (requires confirm=True).

  • create_networkwrite action

    Create a new network/VLAN (requires confirm=True).

  • create_port_forwardwrite action

    Create a port forwarding rule (requires confirm=True).

  • create_proav_profilewrite action

    Create a QoS profile from a ProAV or reference template (requires confirm=True).

  • create_qos_profilewrite action

    Create a new QoS profile with comprehensive traffic shaping (requires confirm=True).

  • create_radius_accountwrite action

    Create a new RADIUS account (requires confirm=True).

  • create_radius_profilewrite action

    Create a new RADIUS profile (requires confirm=True).

  • create_traffic_routewrite action

    Create a new policy-based traffic routing rule (requires confirm=True).

  • create_voucherswrite action

    Create new hotspot vouchers (requires confirm=True).

  • create_wlanwrite action

    Create a new wireless network/SSID (requires confirm=True).

  • debug_api_request

    Debug tool to query arbitrary UniFi API endpoints.

  • delete_acl_rulewrite action

    Delete an ACL rule (requires confirm=True).

  • delete_backupwrite action

    Delete a backup file from the controller (requires confirm=True).

  • delete_firewall_rulewrite action

    Delete a firewall rule (requires confirm=True).

  • delete_hotspot_packagewrite action

    Delete a hotspot package (requires confirm=True).

  • delete_networkwrite action

    Delete a network (requires confirm=True).

  • delete_port_forwardwrite action

    Delete a port forwarding rule (requires confirm=True).

  • delete_qos_profilewrite action

    Delete a QoS profile (requires confirm=True).

  • delete_radius_accountwrite action

    Delete a RADIUS account (requires confirm=True).

  • delete_radius_profilewrite action

    Delete a RADIUS profile (requires confirm=True).

  • delete_traffic_routewrite action

    Delete a traffic routing rule (requires confirm=True).

  • delete_voucherwrite action

    Delete a specific voucher (requires confirm=True).

  • delete_wlanwrite action

    Delete a wireless network (requires confirm=True).

  • disable_smart_queue

    Disable Smart Queue Management (SQM) (requires confirm=True).

  • download_backup

    Download a backup file to local storage.

  • execute_port_actionwrite action

    Execute an action on a specific port (power-cycle, enable, disable) (requires confirm=True).

  • get_acl_rule

    Get details for a specific ACL rule.

  • get_application_info

    Get UniFi Network application information.

  • get_backup_details

    Get detailed information about a specific backup.

  • get_backup_schedule

    Get the configured automated backup schedule for a site.

  • get_backup_status

    Get the status of an ongoing or completed backup operation.

  • get_client_details

    Get detailed information for a specific client.

  • get_client_dpi

    Get DPI statistics for a specific client.

  • get_client_statistics

    Retrieve bandwidth and connection statistics for a client.

  • get_device_details

    Get detailed information for a specific device.

  • get_device_statistics

    Retrieve real-time statistics for a device.

  • get_dpi_statistics

    Get Deep Packet Inspection statistics for a site.

  • get_guest_portal_config

    Get guest portal configuration for a site.

  • get_network_details

    Get detailed network configuration.

  • get_network_statistics

    Retrieve network usage statistics for a site.

  • get_qos_profile

    Get details for a specific QoS profile.

  • get_radius_profile

    Get details for a specific RADIUS profile.

  • get_restore_status

    Get the status of an ongoing or completed restore operation.

  • get_site_details

    Get detailed site information.

  • get_site_statistics

    Retrieve site-wide statistics.

  • get_smart_queue_config

    Get Smart Queue Management (SQM) configuration for bufferbloat mitigation.

  • get_subnet_info

    Get subnet and DHCP information for a network.

  • get_voucher

    Get details for a specific voucher.

  • get_wlan_statistics

    Get WiFi usage statistics for a site or specific WLAN.

  • health_check

    Health check endpoint to verify server is running.

  • limit_bandwidth

    Apply bandwidth restrictions to a client (requires confirm=True).

  • list_acl_rules

    List all ACL rules for a site.

  • list_active_clients

    List currently connected clients.

  • list_all_sites

    List all accessible sites.

  • list_backups

    List all available backups for a site.

  • list_devices_by_type

    Filter devices by type (uap, usw, ugw).

  • list_firewall_rules

    List all firewall rules in a site.

  • list_firewall_zones

    List all firewall zones for a site.

  • list_hotspot_packages

    List all hotspot packages for a site.

  • list_pending_devices

    List devices awaiting adoption on the specified site.

  • list_port_forwards

    List all port forwarding rules in a site.

  • list_proav_templates

    List available ProAV protocol templates (Dante, Q-SYS, SDVoE, AVB, RAVENNA, NDI, SMPTE 2110) and reference profiles.

  • list_qos_profiles

    List all QoS profiles for traffic prioritization and shaping.

  • list_radius_accounts

    List all RADIUS accounts for a site.

  • list_radius_profiles

    List all RADIUS profiles for a site.

  • list_top_applications

    List top applications by bandwidth usage.

  • list_traffic_routes

    List all policy-based traffic routing rules.

  • list_vlans

    List all VLANs in a site.

  • list_vouchers

    List all hotspot vouchers for a site.

  • list_wan_connections

    List all WAN connections for a site.

  • list_wlans

    List all wireless networks (SSIDs) in a site.

  • locate_device

    Enable/disable LED locate mode on a device (requires confirm=True).

  • reconnect_client

    Force a client to reconnect (requires confirm=True).

  • restart_device

    Restart a UniFi device (requires confirm=True).

  • restore_backup

    Restore the UniFi controller from a backup file (requires confirm=True).

  • schedule_backups

    Configure automated backup schedule (requires confirm=True).

  • search_clients

    Search clients by MAC, IP, or hostname.

  • search_devices

    Search devices by name, MAC, or IP address.

  • trigger_backup

    Trigger a backup operation on the UniFi controller (requires confirm=True).

  • unblock_client

    Unblock a previously blocked client (requires confirm=True).

  • update_acl_rulewrite action

    Update an existing ACL rule (requires confirm=True).

  • update_firewall_rulewrite action

    Update an existing firewall rule (requires confirm=True).

  • update_firewall_zonewrite action

    Update an existing firewall zone (requires confirm=True).

  • update_networkwrite action

    Update an existing network (requires confirm=True).

  • update_qos_profilewrite action

    Update an existing QoS profile (requires confirm=True).

  • update_radius_profilewrite action

    Update an existing RADIUS profile (requires confirm=True).

  • update_traffic_routewrite action

    Update an existing traffic routing rule (requires confirm=True).

  • update_wlanwrite action

    Update an existing wireless network (requires confirm=True).

  • upgrade_device

    Trigger firmware upgrade for a device (requires confirm=True).

  • validate_backup

    Validate a backup file before restore.

  • validate_proav_profile

    Validate ProAV profile requirements and provide recommendations.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan86 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Unifi compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
Tools
100
the typical server has 7
Tools that change things
35%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
275
more than 95% of 28,688 servers

What its tools let an agent do: 62 read · 13 create · 10 change · 12 delete · 3 run or deploy

Install Unifi in Claude Code, Cursor or VS Code

Runs npx -y unifi-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add unifi-mcp-server -- npx -y unifi-mcp-server
Add to Cursor

What the publisher says

From the Unifi repository's README, as published. We do not edit it. Read it on GitHub

UniFi MCP Server

A Model Context Protocol (MCP) server that exposes the UniFi Network Controller API today and is evolving into a production-grade multi-domain platform for Protect, Access, and enterprise-scale orchestration.

See SPEC.md for the architecture target and DEVELOPMENT_PLAN.md for the phase roadmap.

Operator quick start

Objective

Give operators a fast, safe reading order for understanding what the server does today, what it is becoming, and which docs govern rollout decisions.

Prerequisites

  • You know which UniFi API mode the deployment uses: local, cloud-ea, or cloud-v1.
  • You know whether the runtime is stdio, HTTP, SSE, or streamable HTTP.
  • You have read the phase target in SPEC.md and the current work item in DEVELOPMENT_PLAN.md.

Procedure

  1. Confirm the current stable release and current phase focus.
  2. Read SPEC.md for architecture intent and DEVELOPMENT_PLAN.md for sequencing.
  3. Use API.md and docs/UNIFI_API.md for implementation surface details.
  4. Use the phase runbooks in NETWORKPLAYBOOK.md, HARBORSETUP.md, MULTICONTROLLER.md, METRICS.md, WEBHOOKSETUP.md, and A2A.md when operating or extending phase 5 systems.
  5. For release work, consult RELEASECHECKLIST.md and docs/RELEASEPROCESS.md before tagging or publishing.

Verification

  • The chosen API mode matches the runtime configuration.
  • The current phase and the documented roadmap agree.
  • The operator can point to the correct runbook before making a change.

Rollback

  • If the selected runbook does not match the deployed capability, stop and reconcile docs before changing production state.

Common failure modes

  • README claims outrun the codebase.
  • Operators follow phase language without checking the specific runbook.
  • Release or rollout decisions are made from the README alone instead of the canonical docs.

📋 Version Notice

Current Stable Release: 0.2.5 (May 1, 2026) 🎉

Installation:

pip install unifi-mcp-server

Roadmap focus:

  • Phase 3: native Protect API integration (camera/NVR/device/view/event read tools and resources now wired; PTZ and media streams still in progress)
  • Phase 4: testing, polish, minor gaps, runbooks, skills, and developer workflow hardening
  • Phase 5: multi-controller orchestration, dry-run, RBAC, audit logging, metrics, A2A, webhooks, Access API work, and tool exposure profiles

See: RELEASENOTES0.2.5.md for complete changelog.

Current Development Posture

  • Current repo codebase: ~220 async tool functions across 40+ modules
  • Phases 0–2 are complete
  • Phase 3 (Protect API integration) is the active implementation target
  • The architectural target is documented in SPEC.md
  • The canonical roadmap is DEVELOPMENT_PLAN.md

Previous Release - v0.2.4 (2026-02-19):

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Unifi: common questions

Is Unifi MCP server safe?
Mostly: it is graded B (83/100). Read the Unifi safety report
How do I install Unifi?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Unifi need an API key?
Yes. The registry entry asks for UNIFI_PASSWORD.
Is Unifi maintained?
The last commit was 37 days ago (2026-09-28). The latest release is v0.2.0.
How does Unifi compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); tools 100 (the typical server has 7); tools that change things 35% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.