UniFi Gateway

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-21T03:25:46.707326Z",
      "publishedAt": "2026-10-21T03:25:46.707326Z",
      "statusChangedAt": "2026-10-21T03:25:46.707326Z"
    }
  },
  "server": {
    "name": "io.github.pete-builds/unifi",
    "title": "UniFi Gateway",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.27.0",
    "packages": [
      {
        "transport": {
          "url": "http://localhost:3714/mcp",
          "type": "streamable-http"
        },
        "identifier": "ghcr.io/pete-builds/mcp-unifi:0.27.0",
        "runtimeHint": "docker",
        "registryType": "oci",
        "environmentVariables": [
          {
            "name": "STUB_MODE",
            "format": "string",
            "choices": [
              "true",
              "false"
            ],
            "default": "true",
            "description": "When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box."
          },
          {
            "name": "UNIFI_HOST",
            "format": "string",
            "description": "IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset."
          },
          {
            "name": "UNIFI_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset."
          },
          {
            "name": "UNIFI_SITE",
            "format": "string",
            "default": "default",
            "description": "UniFi controller site name. Defaults to 'default'."
          },
          {
            "name": "UNIFI_VERIFY_SSL",
            "format": "string",
            "choices": [
              "true",
              "false"
            ],
            "default": "false",
            "description": "Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert."
          },
          {
            "name": "MCP_UNIFI_CONTROLLERS_FILE",
            "format": "string",
            "description": "Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl."
          },
          {
            "name": "MCP_UNIFI_MODULES_ENABLED",
            "format": "string",
            "default": "network",
            "description": "Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred."
          },
          {
            "name": "UNIFI_ACCESS_HOST",
            "format": "string",
            "description": "UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST."
          },
          {
            "name": "UNIFI_ACCESS_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false."
          },
          {
            "name": "UNIFI_ACCESS_PORT",
            "format": "string",
            "default": "12445",
            "description": "HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port)."
          },
          {
            "name": "MCP_UNIFI_AUDIT_SINK",
            "format": "string",
            "choices": [
              "file",
              "stdout",
              "syslog"
            ],
            "default": "file",
            "description": "Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed."
          },
          {
            "name": "MCP_UNIFI_AUDIT_PATH",
            "format": "string",
            "default": "audit.jsonl",
            "description": "Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/pete-builds/mcp-unifi",
      "source": "github"
    },
    "websiteUrl": "https://pete-builds.github.io/mcp-unifi/",
    "description": "Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log."
  }
}