unifi-mcp

An open-source Model Context Protocol server for Ubiquiti UniFi Network that lets AI assistants monitor and manage sites, devices, clients, WiFi, firewall, and more via 145 tools. It runs in Docker or as a one-click Claude Desktop bundle, supporting Streamable HTTP or stdio, with read-only defaults and safe write/delete controls.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Community listingLocal stdioSource reviewed; not executedPublished by Matt Oddie

You need:API key or local account

Vendor documentation

What you can do with it

Ask about devices, clients, WiFi and firewall in plain English
Create one-day guest vouchers limited to specific bandwidth
Block or unblock specific clients from the network
Review port forwards and firewall policies for risks

Source and maintenance

Community listingRegistry 0.6.1

mcp-registry: io.github.mattoddie/unifi-mcp@0.6.1 Source repository Project website

Maintenance checked: Nov 1, 2026, 11:26 AM UTC

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

ghcr.io/mattoddie/unifi-mcp:0.6.1

oci

ghcr.io/mattoddie/unifi-mcp:0.6.1 package definition

{
  "transport": "stdio",
  "identifier": "ghcr.io/mattoddie/unifi-mcp:0.6.1",
  "registryType": "oci",
  "environmentVariables": [
    {
      "name": "MCP_TRANSPORT",
      "value": "stdio",
      "description": "The image serves HTTP by default; this runs it over stdio."
    },
    {
      "name": "UNIFI_URL",
      "isRequired": true,
      "description": "Address of your UniFi console. For a legacy self-hosted Network application, include the port.",
      "placeholder": "https://192.168.1.1"
    },
    {
      "name": "UNIFI_API_KEY",
      "description": "API key from UniFi Network → Settings → Control Plane → Integrations. Or use a username and password."
    },
    {
      "name": "UNIFI_USERNAME",
      "description": "A local (not Ubiquiti cloud) account, used instead of an API key. Required for legacy controllers."
    },
    {
      "name": "UNIFI_PASSWORD",
      "description": "The local account's password, used with the username."
    },
    {
      "name": "UNIFI_TLS_FINGERPRINT",
      "description": "Recommended for an https controller with a self-signed certificate: its SHA-256 fingerprint, to pin it.",
      "placeholder": "AA:BB:CC:…"
    },
    {
      "name": "UNIFI_VERIFY_SSL",
      "format": "boolean",
      "description": "Leave empty when you set a fingerprint. true: publicly trusted certificate. false: skip the check (insecure)."
    },
    {
      "name": "UNIFI_SITE",
      "default": "default",
      "description": "The site's short name, used when a request doesn't name a site."
    },
    {
      "name": "UNIFI_ALLOW_WRITES",
      "format": "boolean",
      "default": "false",
      "description": "Allow changes: restart devices, block clients, edit WiFi, firewall and networks. Off means read-only."
    },
    {
      "name": "UNIFI_ALLOW_DELETES",
      "format": "boolean",
      "default": "false",
      "description": "Also allow deleting configuration and forgetting clients. Needs UNIFI_ALLOW_WRITES."
    },
    {
      "name": "UNIFI_TOOLSETS",
      "description": "Optional comma-separated list to expose fewer tools, e.g. overview,devices,clients. Empty means all."
    },
    {
      "name": "UNIFI_AUDIT_LOG",
      "description": "Set to stderr to log every change the assistant makes or previews as JSON lines. Off when empty."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.

Cursor configuration

{
  "mcpServers": {
    "unifi-mcp-0-6-1": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
        "-e",
        "UNIFI_URL=<YOUR_UNIFI_URL>",
        "-e",
        "UNIFI_API_KEY=<YOUR_UNIFI_API_KEY>",
        "-e",
        "UNIFI_USERNAME=<YOUR_UNIFI_USERNAME>",
        "-e",
        "UNIFI_PASSWORD=<YOUR_UNIFI_PASSWORD>",
        "-e",
        "UNIFI_TLS_FINGERPRINT=<YOUR_UNIFI_TLS_FINGERPRINT>",
        "-e",
        "UNIFI_VERIFY_SSL=<YOUR_UNIFI_VERIFY_SSL>",
        "-e",
        "UNIFI_SITE=<YOUR_UNIFI_SITE>",
        "-e",
        "UNIFI_ALLOW_WRITES=<YOUR_UNIFI_ALLOW_WRITES>",
        "-e",
        "UNIFI_ALLOW_DELETES=<YOUR_UNIFI_ALLOW_DELETES>",
        "-e",
        "UNIFI_TOOLSETS=<YOUR_UNIFI_TOOLSETS>",
        "-e",
        "UNIFI_AUDIT_LOG=<YOUR_UNIFI_AUDIT_LOG>",
        "ghcr.io/mattoddie/unifi-mcp:0.6.1"
      ],
      "env": {
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "UNIFI_URL": "<YOUR_UNIFI_URL>",
        "UNIFI_API_KEY": "<YOUR_UNIFI_API_KEY>",
        "UNIFI_USERNAME": "<YOUR_UNIFI_USERNAME>",
        "UNIFI_PASSWORD": "<YOUR_UNIFI_PASSWORD>",
        "UNIFI_TLS_FINGERPRINT": "<YOUR_UNIFI_TLS_FINGERPRINT>",
        "UNIFI_VERIFY_SSL": "<YOUR_UNIFI_VERIFY_SSL>",
        "UNIFI_SITE": "<YOUR_UNIFI_SITE>",
        "UNIFI_ALLOW_WRITES": "<YOUR_UNIFI_ALLOW_WRITES>",
        "UNIFI_ALLOW_DELETES": "<YOUR_UNIFI_ALLOW_DELETES>",
        "UNIFI_TOOLSETS": "<YOUR_UNIFI_TOOLSETS>",
        "UNIFI_AUDIT_LOG": "<YOUR_UNIFI_AUDIT_LOG>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.

Cline configuration

{
  "mcpServers": {
    "unifi-mcp-0-6-1": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
        "-e",
        "UNIFI_URL=<YOUR_UNIFI_URL>",
        "-e",
        "UNIFI_API_KEY=<YOUR_UNIFI_API_KEY>",
        "-e",
        "UNIFI_USERNAME=<YOUR_UNIFI_USERNAME>",
        "-e",
        "UNIFI_PASSWORD=<YOUR_UNIFI_PASSWORD>",
        "-e",
        "UNIFI_TLS_FINGERPRINT=<YOUR_UNIFI_TLS_FINGERPRINT>",
        "-e",
        "UNIFI_VERIFY_SSL=<YOUR_UNIFI_VERIFY_SSL>",
        "-e",
        "UNIFI_SITE=<YOUR_UNIFI_SITE>",
        "-e",
        "UNIFI_ALLOW_WRITES=<YOUR_UNIFI_ALLOW_WRITES>",
        "-e",
        "UNIFI_ALLOW_DELETES=<YOUR_UNIFI_ALLOW_DELETES>",
        "-e",
        "UNIFI_TOOLSETS=<YOUR_UNIFI_TOOLSETS>",
        "-e",
        "UNIFI_AUDIT_LOG=<YOUR_UNIFI_AUDIT_LOG>",
        "ghcr.io/mattoddie/unifi-mcp:0.6.1"
      ],
      "env": {
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "UNIFI_URL": "<YOUR_UNIFI_URL>",
        "UNIFI_API_KEY": "<YOUR_UNIFI_API_KEY>",
        "UNIFI_USERNAME": "<YOUR_UNIFI_USERNAME>",
        "UNIFI_PASSWORD": "<YOUR_UNIFI_PASSWORD>",
        "UNIFI_TLS_FINGERPRINT": "<YOUR_UNIFI_TLS_FINGERPRINT>",
        "UNIFI_VERIFY_SSL": "<YOUR_UNIFI_VERIFY_SSL>",
        "UNIFI_SITE": "<YOUR_UNIFI_SITE>",
        "UNIFI_ALLOW_WRITES": "<YOUR_UNIFI_ALLOW_WRITES>",
        "UNIFI_ALLOW_DELETES": "<YOUR_UNIFI_ALLOW_DELETES>",
        "UNIFI_TOOLSETS": "<YOUR_UNIFI_TOOLSETS>",
        "UNIFI_AUDIT_LOG": "<YOUR_UNIFI_AUDIT_LOG>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.

VS Code configuration

{
  "servers": {
    "unifi-mcp-0-6-1": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
        "-e",
        "UNIFI_URL=<YOUR_UNIFI_URL>",
        "-e",
        "UNIFI_API_KEY=<YOUR_UNIFI_API_KEY>",
        "-e",
        "UNIFI_USERNAME=<YOUR_UNIFI_USERNAME>",
        "-e",
        "UNIFI_PASSWORD=<YOUR_UNIFI_PASSWORD>",
        "-e",
        "UNIFI_TLS_FINGERPRINT=<YOUR_UNIFI_TLS_FINGERPRINT>",
        "-e",
        "UNIFI_VERIFY_SSL=<YOUR_UNIFI_VERIFY_SSL>",
        "-e",
        "UNIFI_SITE=<YOUR_UNIFI_SITE>",
        "-e",
        "UNIFI_ALLOW_WRITES=<YOUR_UNIFI_ALLOW_WRITES>",
        "-e",
        "UNIFI_ALLOW_DELETES=<YOUR_UNIFI_ALLOW_DELETES>",
        "-e",
        "UNIFI_TOOLSETS=<YOUR_UNIFI_TOOLSETS>",
        "-e",
        "UNIFI_AUDIT_LOG=<YOUR_UNIFI_AUDIT_LOG>",
        "ghcr.io/mattoddie/unifi-mcp:0.6.1"
      ],
      "env": {
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "UNIFI_URL": "<YOUR_UNIFI_URL>",
        "UNIFI_API_KEY": "<YOUR_UNIFI_API_KEY>",
        "UNIFI_USERNAME": "<YOUR_UNIFI_USERNAME>",
        "UNIFI_PASSWORD": "<YOUR_UNIFI_PASSWORD>",
        "UNIFI_TLS_FINGERPRINT": "<YOUR_UNIFI_TLS_FINGERPRINT>",
        "UNIFI_VERIFY_SSL": "<YOUR_UNIFI_VERIFY_SSL>",
        "UNIFI_SITE": "<YOUR_UNIFI_SITE>",
        "UNIFI_ALLOW_WRITES": "<YOUR_UNIFI_ALLOW_WRITES>",
        "UNIFI_ALLOW_DELETES": "<YOUR_UNIFI_ALLOW_DELETES>",
        "UNIFI_TOOLSETS": "<YOUR_UNIFI_TOOLSETS>",
        "UNIFI_AUDIT_LOG": "<YOUR_UNIFI_AUDIT_LOG>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.

Claude Desktop configuration

{
  "mcpServers": {
    "unifi-mcp-0-6-1": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
        "-e",
        "UNIFI_URL=<YOUR_UNIFI_URL>",
        "-e",
        "UNIFI_API_KEY=<YOUR_UNIFI_API_KEY>",
        "-e",
        "UNIFI_USERNAME=<YOUR_UNIFI_USERNAME>",
        "-e",
        "UNIFI_PASSWORD=<YOUR_UNIFI_PASSWORD>",
        "-e",
        "UNIFI_TLS_FINGERPRINT=<YOUR_UNIFI_TLS_FINGERPRINT>",
        "-e",
        "UNIFI_VERIFY_SSL=<YOUR_UNIFI_VERIFY_SSL>",
        "-e",
        "UNIFI_SITE=<YOUR_UNIFI_SITE>",
        "-e",
        "UNIFI_ALLOW_WRITES=<YOUR_UNIFI_ALLOW_WRITES>",
        "-e",
        "UNIFI_ALLOW_DELETES=<YOUR_UNIFI_ALLOW_DELETES>",
        "-e",
        "UNIFI_TOOLSETS=<YOUR_UNIFI_TOOLSETS>",
        "-e",
        "UNIFI_AUDIT_LOG=<YOUR_UNIFI_AUDIT_LOG>",
        "ghcr.io/mattoddie/unifi-mcp:0.6.1"
      ],
      "env": {
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "UNIFI_URL": "<YOUR_UNIFI_URL>",
        "UNIFI_API_KEY": "<YOUR_UNIFI_API_KEY>",
        "UNIFI_USERNAME": "<YOUR_UNIFI_USERNAME>",
        "UNIFI_PASSWORD": "<YOUR_UNIFI_PASSWORD>",
        "UNIFI_TLS_FINGERPRINT": "<YOUR_UNIFI_TLS_FINGERPRINT>",
        "UNIFI_VERIFY_SSL": "<YOUR_UNIFI_VERIFY_SSL>",
        "UNIFI_SITE": "<YOUR_UNIFI_SITE>",
        "UNIFI_ALLOW_WRITES": "<YOUR_UNIFI_ALLOW_WRITES>",
        "UNIFI_ALLOW_DELETES": "<YOUR_UNIFI_ALLOW_DELETES>",
        "UNIFI_TOOLSETS": "<YOUR_UNIFI_TOOLSETS>",
        "UNIFI_AUDIT_LOG": "<YOUR_UNIFI_AUDIT_LOG>"
      }
    }
  }
}

Let your agent find its tools

Find servers like unifi-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 546