--- bezeichner: "io.github.pete-builds/unifi" art: "mcp_server" slug: "io-github-pete-builds-unifi" paketkoordinate: "oci:ghcr.io/pete-builds/mcp-unifi:0.25.0" status: "aktiv" homepage: "https://pete-builds.github.io/mcp-unifi/" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.pete-builds" registerseite: "https://tracevero.com/mcp/io-github-pete-builds-unifi" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "entfernt" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log." version: "0.25.0" roh_umgebungsvariablen: "STUB_MODE, UNIFI_HOST, UNIFI_API_KEY, UNIFI_SITE, UNIFI_VERIFY_SSL, MCP_UNIFI_CONTROLLERS_FILE, MCP_UNIFI_MODULES_ENABLED, UNIFI_ACCESS_HOST, UNIFI_ACCESS_API_KEY, UNIFI_ACCESS_PORT, MCP_UNIFI_AUDIT_SINK, MCP_UNIFI_AUDIT_PATH" roh_geheime_pflichtvariablen: "" roh_transportarten: "streamable-http" roh_pfadargumente: "" roh_repository_url: "https://github.com/pete-builds/mcp-unifi" roh_paketquellen: "oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-02" roh_aktualisiert_am: "2026-10-02" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "ghcr.io/pete-builds/mcp-unifi:0.25.0" roh_paketversionen: "" roh_laufzeithinweise: "docker" roh_umgebungsformate: "string" roh_umgebungsbeschreibungen: "MCP_UNIFI_AUDIT_PATH=Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD. · MCP_UNIFI_AUDIT_SINK=Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed. · MCP_UNIFI_CONTROLLERS_FILE=Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl. · MCP_UNIFI_MODULES_ENABLED=Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred. · STUB_MODE=When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box. · UNIFI_ACCESS_API_KEY=UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false. · UNIFI_ACCESS_HOST=UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST. · UNIFI_ACCESS_PORT=HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port). · UNIFI_API_KEY=Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_HOST=IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_SITE=UniFi controller site name. Defaults to 'default'. · UNIFI_VERIFY_SSL=Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/pete-builds/mcp-unifi:0.25.0\",\"runtimeHint\":\"docker\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"STUB_MODE\",\"description\":\"When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_HOST\",\"description\":\"IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_API_KEY\",\"description\":\"Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"UNIFI_SITE\",\"description\":\"UniFi controller site name. Defaults to 'default'.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_VERIFY_SSL\",\"description\":\"Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_CONTROLLERS_FILE\",\"description\":\"Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_MODULES_ENABLED\",\"description\":\"Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_ACCESS_HOST\",\"description\":\"UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_ACCESS_API_KEY\",\"description\":\"UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"UNIFI_ACCESS_PORT\",\"description\":\"HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port).\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_AUDIT_SINK\",\"description\":\"Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_AUDIT_PATH\",\"description\":\"Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # UniFi Gateway ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | entfernt | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: streamable-http | | Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/pete-builds/mcp-unifi | | Description (raw) | Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.25.0 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft | | | Environment variables (raw) | STUB_MODE, UNIFI_HOST, UNIFI_API_KEY, UNIFI_SITE, UNIFI_VERIFY_SSL, MCP_UNIFI_CONTROLLERS_FILE, MCP_UNIFI_MODULES_ENABLED, UNIFI_ACCESS_HOST, UNIFI_ACCESS_API_KEY, UNIFI_ACCESS_PORT, MCP_UNIFI_AUDIT_SINK, MCP_UNIFI_AUDIT_PATH | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | streamable-http | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/pete-builds/mcp-unifi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | oci | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-02 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-02 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | ghcr.io/pete-builds/mcp-unifi:0.25.0 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft | | | Package versions (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | docker | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | MCP_UNIFI_AUDIT_PATH=Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD. · MCP_UNIFI_AUDIT_SINK=Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed. · MCP_UNIFI_CONTROLLERS_FILE=Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl. · MCP_UNIFI_MODULES_ENABLED=Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred. · STUB_MODE=When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box. · UNIFI_ACCESS_API_KEY=UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false. · UNIFI_ACCESS_HOST=UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST. · UNIFI_ACCESS_PORT=HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port). · UNIFI_API_KEY=Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_HOST=IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_SITE=UniFi controller site name. Defaults to 'default'. · UNIFI_VERIFY_SSL=Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/pete-builds/mcp-unifi:0.25.0","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"STUB_MODE","description":"When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box.","format":"string","required":false,"secret":false},{"name":"UNIFI_HOST","description":"IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.","format":"string","required":false,"secret":false},{"name":"UNIFI_API_KEY","description":"Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.","format":"string","required":false,"secret":true},{"name":"UNIFI_SITE","description":"UniFi controller site name. Defaults to 'default'.","format":"string","required":false,"secret":false},{"name":"UNIFI_VERIFY_SSL","description":"Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_CONTROLLERS_FILE","description":"Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_MODULES_ENABLED","description":"Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred.","format":"string","required":false,"secret":false},{"name":"UNIFI_ACCESS_HOST","description":"UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST.","format":"string","required":false,"secret":false},{"name":"UNIFI_ACCESS_API_KEY","description":"UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false.","format":"string","required":false,"secret":true},{"name":"UNIFI_ACCESS_PORT","description":"HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port).","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_AUDIT_SINK","description":"Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_AUDIT_PATH","description":"Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-pete-builds|io.github.pete-builds]] --- - Registry page: - Retrieved on: 2026-10-10