Unifi MCP Server

UniFi network, protect, and access devices managed via AI-driven agentic workflows.

Data last scanned yesterday · Reviewed 3 weeks ago

4820 tools★ 660PythonMIT

Overview

This repository provides a modular collection of MCP servers designed to integrate UniFi infrastructure with AI agents. It offers dedicated packages for managing UniFi Network, Protect, and Access systems, providing hundreds of specific tools for automated infrastructure monitoring and interaction. Advanced users can leverage the Cloud Relay architecture, which utilizes a Cloudflare Worker gateway and a local Relay sidecar to enable secure remote access to local MCP endpoints. This setup supports multi-location routing and specific target-based write operations, facilitating complex management tasks across distributed UniFi deployments.

Our verdict

The Unifi MCP Server carries a high-risk rating with a security score of 48/100, primarily due to the lack of a read-only mode, which grants every installation full write access to your infrastructure. Furthermore, as a community-maintained project rather than an official vendor release, it lacks the oversight expected for critical network hardware management. It is best reserved for experimental environments where users can isolate the potential impact of autonomous write operations.

Supports hundreds of tools for Network, Protect, and Access.
Zero direct dependencies reduce the supply-chain surface area.
Features a robust Cloud Relay architecture for remote management.
Actively maintained with a commit history showing daily updates.

Every installation defaults to full write access permissions.
No official vendor maintenance or security-audited status.
Lacks native OAuth support for authentication workflows.

Tools

Tool	Description	Risk
Network Health Check	Batch diagnostics across devices, health subsystems, and alarms with reference docs for interpreting results	low
Firewall Manager	Natural language firewall management with policy templates, config snapshots, and change tracking	medium
Firewall Auditor	Security audit with 16 benchmarks, 100-point scoring, topology analysis, and trend tracking	low
Security Digest	Cross-product event intelligence — summarizes camera, door, and network events with severity classification and correlation rules	low
UniFi Access	Door control, credentials, visitors, access policies — with real-time event streaming and activity summaries	medium
unifi_tool_index	Returns the full known catalog from the generated manifest or runtime registry for Network.	low
unifi_execute	Calls a named domain tool through the Network server's lazy loader.	medium
unifi_batch	Provides an indirect execution path for multiple parallel operations for Network.	medium
unifi_batch_status	Checks the status of parallel batch operations for Network.	low
unifi_load_tools	Loads selected Network tools into the standard tools/list surface.	medium

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What are the system requirements for running UniFi MCP servers?

All servers require Python 3.13 or newer to function.

›How do I choose between lazy and eager discovery modes?

Lazy mode is the default and provides meta-tools to keep initial context small, while eager mode registers all domain tools directly for clients that prefer a full list.

›How can I configure MCP response formats for my client?

You can set the UNIFI_MCP_CONTENT_MODE environment variable to compact to force structured results or compat to force full JSON in content for older or specific client compatibility.

›How does the Cloud Relay differ from standard MCP server deployment?

The Cloud Relay uses a Cloudflare-hosted Worker gateway and a local Relay sidecar to allow remote access to UniFi infrastructure, supporting multi-location routing and outbound WebSockets.

›Can I interact with UniFi controllers without an MCP-compliant client?

Yes, you can use the unifi-api-server, an independent HTTP service that provides REST resources, GraphQL queries, and SSE streams without requiring MCP protocol support.