Server providing Argo CD integration for MCP clients.
Nothing to run from here
UniFi is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
59
tools declared
—
trust score
local
runs on your machine
—
calls last 7d
What it does
Manage a Ubiquiti UniFi network: devices, clients, WiFi, firewall and VPN. Read-only by default.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --env 'UNIFI_URL=${UNIFI_URL}' --transport stdio mattoddie-unifi-mcp '--' docker run -i --rm -e UNIFI_URL ghcr.io/mattoddie/unifi-mcp:0.6.1
# 2 — ask your agent for something these tools do
# unifi_api_request, unifi_check_updates, unifi_get_client and 56 more
It needs UNIFI_URL: this reads it from your environment, so export it first.
UniFi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
MAAll 6 servers
mattoddie6 servers
3 categories
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts UniFi as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. It has not been scanned here, so read the surface, and its source, before you approve it.
Claude Codedeclared by this listing
This is a public server: you run it yourself and this marketplace is not in the path. You need Docker installed and running. Only the required variables are passed into the container. To set an optional one (MCP_TRANSPORT, UNIFI_API_KEY, UNIFI_USERNAME, UNIFI_PASSWORD, UNIFI_TLS_FINGERPRINT, UNIFI_VERIFY_SSL and 5 more), add -e NAME before the image name and give it a value in the entry’s env: an unset -e would clear the default the image sets. Claude Code registers it in one command; --scope user makes it available in every project. Claude Code reads UNIFI_URL (Address of your UniFi console. For a legacy self-hosted Network application, include the port) from your environment each time it starts the server, so the value stays out of its config: export it in your shell profile (macOS, Linux), or run setx UNIFI_URL … and open a new terminal (Windows). The '--' is in quotes so that PowerShell passes it on.
claude mcp add --scope user --env 'UNIFI_URL=${UNIFI_URL}' --transport stdio mattoddie-unifi-mcp '--' docker run -i --rm -e UNIFI_URL ghcr.io/mattoddie/unifi-mcp:0.6.1Reconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it runs from its publisher’s own image: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it asks of you
It reaches a system of yours, so it needs settings only you can give it: UNIFI_URL — Address of your UniFi console. For a legacy self-hosted Network application, include the port.. You set it in your own client’s config, on your machine — this marketplace never holds it.
What it writes
One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.
What you approve
59 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Read from its source code. A server that builds its tool list when it starts can list more tools than this.
Call any UniFi Network API endpoint directly, for anything the other tools don't cover. path is relative to the Network application, e.g. /api/s/default/stat/ccode, /v2/api/site/default/trafficroutes or /integration/v1/sites (official API, API-key auth). Only GET is allowed because write access…
No parameter schema on file.
Report whether a newer Network application version is available, and which devices have firmware upgrades. With refresh: true (requires writes enabled) the controller first re-checks Ubiquiti's servers for device firmware.
No parameter schema on file.
Get everything known about a client by MAC: stored settings plus live connection details if it is online.
No parameter schema on file.
Get the aggregated dashboard the UniFi UI shows: WAN/ISP quality history (latency, packet loss, availability, throughput), WiFi experience and client mix. v2 API, Network 7.4+; large response.
No parameter schema on file.
Get detailed information about one device by MAC: summary, switch ports, radio config and stats, uplink, LED and system stats.
No parameter schema on file.
Get deep packet inspection (traffic identification) statistics, by application or by category: site-wide, or per client when macs are given. Requires traffic identification to be enabled.
No parameter schema on file.
Get the evaluation order of user-defined policies between a source and destination zone (beforeSystemDefined / afterSystemDefined policy ID lists). Uses the official integration API, so it requires API-key authentication (UNIFI_API_KEY) and Network 9.0+.
No parameter schema on file.
Show each device's current firmware and whether an upgrade is available. Optionally ask the controller to refresh its firmware cache first (requires writes enabled), and/or list the firmware images it knows about.
No parameter schema on file.
Get guest portal / hotspot settings: authentication method, session length, voucher/password/payment options, redirect, allowed subnets.
No parameter schema on file.
Get the state and results of an access point's RF/spectrum scan (channel utilization and interference per channel). Start one with unifi_run_rf_scan.
No parameter schema on file.
Get threat management (IDS/IPS mode, categories, protected networks), traffic identification (DPI) and country/region blocking (geo-IP) settings. Optionally list the IPS categories the controller supports (Network 8+).
No parameter schema on file.
Get the health of each subsystem (WAN, LAN, WLAN, VPN, www) for a site: status, ISP, WAN IP, latency, throughput, device and client counts.
No parameter schema on file.
Get site-wide settings. Each setting is an object identified by key, e.g. mgmt (auto-upgrade, LEDs, SSH), country, locale, ntp, snmp, mdns (multicast DNS), rsyslogd (remote syslog), connectivity, guest_access, ips, dpi, usg (gateway: DNS, geo-IP, UPnP...), radius, network_optimization,…
No parameter schema on file.
Get historical WAN speed test results run by the gateway.
No parameter schema on file.
Get controller/Network application version, hostname, timezone, uptime and update availability.
No parameter schema on file.
Read the v2 system log (Network 8+), one class at a time, paged: device-alert, client-alert, admin-activity (logins and config changes), update-alert, threat-alert (IPS/honeypot), vpn-alert, triggers (traffic/firewall rule hits), next-ai-alert.
No parameter schema on file.
Get historical time-series statistics. scope=site for whole-site traffic and client counts, gw for gateway CPU/memory/WAN traffic, ap for per-AP traffic, user for per-client traffic (pass macs).
No parameter schema on file.
Get the standard WIFI: join string for an SSID, which phones understand when encoded as a QR code. NOTE: this reveals the WiFi password.
No parameter schema on file.
List switch ACL rules (MAC ACLs that allow or block traffic between devices inside one network, enforced by UniFi switches). Rules are processed in acl_index order. Needs Network 9.4+.
No parameter schema on file.
List administrator accounts for a site, or for all sites (all_sites: true).
No parameter schema on file.
List controller alarms (alerts). By default only active (unarchived) alarms are returned.
No parameter schema on file.
List anomalies the controller detected (e.g. high latency, DNS timeouts, poor WiFi experience) per client/device. Not available on every Network version.
No parameter schema on file.
List access point groups (used to choose which APs broadcast each WiFi network). Network 7.x+ (v2 API).
No parameter schema on file.
List the controller's stored (auto) backups.
No parameter schema on file.
List bandwidth profiles (user groups) that cap client download/upload rates; assign them to WLANs or clients.
No parameter schema on file.
List client connection sessions (association history): when each client connected, for how long, to which AP/network, and traffic used.
No parameter schema on file.
List clients that are currently connected, with IP, network, AP/switch port, signal, rates, usage and uptime.
No parameter schema on file.
List content filtering profiles (blocked categories, safe search, target networks/clients). v2 API, Network 8.1+.
No parameter schema on file.
List UniFi network devices (gateways, switches, access points...) with state, model, firmware, uptime, load and client counts.
No parameter schema on file.
List local DNS records served by the gateway (v2 static-dns; UniFi Network 8.2+).
No parameter schema on file.
List dynamic DNS configurations (passwords redacted unless include_secrets).
No parameter schema on file.
List recent controller events (client connects/roams, device restarts, upgrades...). Uses the classic event log and falls back to the v2 system log (device and client alerts) on Network versions where the classic log is gone or empty. For other log classes use unifi_get_system_log.
No parameter schema on file.
List firewall groups (address groups, IPv6 address groups and port groups) referenced by firewall rules and policies.
No parameter schema on file.
List zone-based firewall policies (UniFi Network 9.0+). Predefined (system) policies are hidden unless include_predefined is set.
No parameter schema on file.
List classic firewall rules (WAN_IN, LAN_IN, ...). On Network 9+ with zone-based firewall use unifi_list_firewall_policies instead.
No parameter schema on file.
List zone-based firewall zones and the networks in each (UniFi Network 9.0+).
No parameter schema on file.
List hotspot/guest portal authorizations (who was authorized, how, when and until when).
No parameter schema on file.
List hotspot operator accounts (staff who can log in to the hotspot manager to issue vouchers).
No parameter schema on file.
List all clients the controller has ever seen (including offline ones), with alias, note, fixed IP and block status.
No parameter schema on file.
List custom NAT rules (DNAT, SNAT and masquerade) from the v2 API, including the predefined ones. Port forwards are separate (unifi_list_port_forwards). Needs Network 9.0+ with a UniFi gateway and the zone-based firewall.
No parameter schema on file.
List configured networks (LANs/VLANs, WANs, VPNs) with subnet, VLAN ID and DHCP settings.
No parameter schema on file.
List object-oriented networking (OON) policies: rules attached to clients or client groups that schedule or block internet access and apps (secure), limit bandwidth (qos) or route through a VPN (route). Needs Network 9.4+ with a UniFi gateway.
No parameter schema on file.
List port forwarding rules.
No parameter schema on file.
List switch port profiles (port configurations) with native/tagged networks and PoE settings.
No parameter schema on file.
List QoS rules from the policy table (recent Network 9.x/10.x with a UniFi gateway): objective (LIMIT, PRIORITIZE or LIMIT_AND_PRIORITIZE), rate limits in kbps, the clients/networks they apply to and the apps, IPs, regions or domains they match.
No parameter schema on file.
List users of the built-in RADIUS server (used for L2TP VPN and WPA-Enterprise). Passwords redacted unless include_secrets.
No parameter schema on file.
List RADIUS profiles used by WPA-Enterprise WiFi, 802.1X switch ports and L2TP VPN (secrets redacted unless include_secrets).
No parameter schema on file.
List nearby access points seen by your APs (neighbours and potential rogue APs).
No parameter schema on file.
List user-defined static routes. With active=true, return the gateway's live routing table instead (stat/routing; not available on every version).
No parameter schema on file.
List the UniFi sites on the controller. The name field is the site ID used by the site argument of other tools.
No parameter schema on file.
List a switch's ports with link state, speed, PoE, assigned profile, LLDP neighbours (what is plugged in: chassis ID, description and remote port), link aggregation and any per-port overrides configured on the device.
No parameter schema on file.
List IDS/IPS threat events detected by the gateway (newest first): signature, category, source/destination, action taken.
No parameter schema on file.
List recent traffic flows seen by the gateway (Insights > Flows): source and destination client, IP, domain and network, app/service, allowed or blocked, risk, bytes and the policies that matched. This is an expensive query on the gateway, so it looks back 15 minutes and returns 50 flows by…
No parameter schema on file.
List traffic routes (policy-based routing): which clients/networks and destinations are sent out a specific WAN or VPN client.
No parameter schema on file.
List traffic management rules (block/allow/limit by app, domain, IP, region or internet) from the v2 API.
No parameter schema on file.
List guest hotspot vouchers with code, duration, usage and status.
No parameter schema on file.
List VPN servers (WireGuard, OpenVPN, L2TP), VPN clients and site-to-site VPNs configured on the gateway. Use raw: true to see every field.
No parameter schema on file.
List WAN interfaces with connection type, VLAN, static/PPPoE settings, failover/load-balancing and Smart Queues, plus live WAN health.
No parameter schema on file.
List wireless networks (SSIDs) with security, bands, linked network and enabled state.
No parameter schema on file.
Free
$0 forever
- Every tool, no call limit
- No card, and mcprush charges nothing for it
- Source published under MIT
- Runs on your machine — nothing of it reaches our gateway
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install UniFi or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
—Grade not published
No rule-by-rule report on file for this release
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing ships as a container image. The scanner reads packages on npm and PyPI and public source; an image is neither, so there is no grade here — not a withheld one, an unmeasured one.
Release history
It installs from a container image rather than from a versioned package, so the command cannot be pinned to a release. The history below is for reading; the current release on file is 0.6.1.
0.6.1
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish UniFi can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.