---
bezeichner: "io.github.pete-builds/unifi"
art: "mcp_server"
slug: "io-github-pete-builds-unifi"
paketkoordinate: "oci:ghcr.io/pete-builds/mcp-unifi:0.25.0"
status: "aktiv"
homepage: "https://pete-builds.github.io/mcp-unifi/"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.pete-builds"
registerseite: "https://tracevero.de/mcp/io-github-pete-builds-unifi"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "entfernt"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log."
version: "0.25.0"
roh_umgebungsvariablen: "STUB_MODE, UNIFI_HOST, UNIFI_API_KEY, UNIFI_SITE, UNIFI_VERIFY_SSL, MCP_UNIFI_CONTROLLERS_FILE, MCP_UNIFI_MODULES_ENABLED, UNIFI_ACCESS_HOST, UNIFI_ACCESS_API_KEY, UNIFI_ACCESS_PORT, MCP_UNIFI_AUDIT_SINK, MCP_UNIFI_AUDIT_PATH"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "streamable-http"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/pete-builds/mcp-unifi"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-10-02"
roh_aktualisiert_am: "2026-10-02"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/pete-builds/mcp-unifi:0.25.0"
roh_paketversionen: ""
roh_laufzeithinweise: "docker"
roh_umgebungsformate: "string"
roh_umgebungsbeschreibungen: "MCP_UNIFI_AUDIT_PATH=Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD. · MCP_UNIFI_AUDIT_SINK=Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed. · MCP_UNIFI_CONTROLLERS_FILE=Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl. · MCP_UNIFI_MODULES_ENABLED=Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred. · STUB_MODE=When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box. · UNIFI_ACCESS_API_KEY=UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false. · UNIFI_ACCESS_HOST=UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST. · UNIFI_ACCESS_PORT=HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port). · UNIFI_API_KEY=Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_HOST=IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_SITE=UniFi controller site name. Defaults to 'default'. · UNIFI_VERIFY_SSL=Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/pete-builds/mcp-unifi:0.25.0\",\"runtimeHint\":\"docker\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"STUB_MODE\",\"description\":\"When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_HOST\",\"description\":\"IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_API_KEY\",\"description\":\"Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"UNIFI_SITE\",\"description\":\"UniFi controller site name. Defaults to 'default'.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_VERIFY_SSL\",\"description\":\"Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_CONTROLLERS_FILE\",\"description\":\"Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_MODULES_ENABLED\",\"description\":\"Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_ACCESS_HOST\",\"description\":\"UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UNIFI_ACCESS_API_KEY\",\"description\":\"UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"UNIFI_ACCESS_PORT\",\"description\":\"HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port).\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_AUDIT_SINK\",\"description\":\"Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_UNIFI_AUDIT_PATH\",\"description\":\"Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# UniFi Gateway

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | entfernt | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: streamable-http |
| Pfadargument vorhanden | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository-Adresse geführt | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/pete-builds/mcp-unifi |
| Beschreibung (Rohangabe) | Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Deklarierte Version | 0.25.0 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | STUB_MODE, UNIFI_HOST, UNIFI_API_KEY, UNIFI_SITE, UNIFI_VERIFY_SSL, MCP_UNIFI_CONTROLLERS_FILE, MCP_UNIFI_MODULES_ENABLED, UNIFI_ACCESS_HOST, UNIFI_ACCESS_API_KEY, UNIFI_ACCESS_PORT, MCP_UNIFI_AUDIT_SINK, MCP_UNIFI_AUDIT_PATH | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transportarten (Rohangabe) | streamable-http | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/pete-builds/mcp-unifi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | oci | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2026-10-02 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2026-10-02 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | ghcr.io/pete-builds/mcp-unifi:0.25.0 | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft |  |
| Paketversionen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) | docker | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | MCP_UNIFI_AUDIT_PATH=Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD. · MCP_UNIFI_AUDIT_SINK=Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed. · MCP_UNIFI_CONTROLLERS_FILE=Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl. · MCP_UNIFI_MODULES_ENABLED=Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred. · STUB_MODE=When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box. · UNIFI_ACCESS_API_KEY=UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false. · UNIFI_ACCESS_HOST=UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST. · UNIFI_ACCESS_PORT=HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port). · UNIFI_API_KEY=Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_HOST=IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset. · UNIFI_SITE=UniFi controller site name. Defaults to 'default'. · UNIFI_VERIFY_SSL=Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/pete-builds/mcp-unifi:0.25.0","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"STUB_MODE","description":"When true, the server returns realistic mock data and requires no UniFi hardware. Defaults to true so the image is functional out of the box.","format":"string","required":false,"secret":false},{"name":"UNIFI_HOST","description":"IP address or hostname of the UniFi OS gateway (UCG-Fiber, UDM Pro, etc). Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.","format":"string","required":false,"secret":false},{"name":"UNIFI_API_KEY","description":"Local API key generated under Settings -> Control Plane -> Integrations on the gateway. Required when STUB_MODE=false and MCP_UNIFI_CONTROLLERS_FILE is unset.","format":"string","required":false,"secret":true},{"name":"UNIFI_SITE","description":"UniFi controller site name. Defaults to 'default'.","format":"string","required":false,"secret":false},{"name":"UNIFI_VERIFY_SSL","description":"Whether to verify the gateway's TLS certificate. Defaults to false because most home gateways use a self-signed cert.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_CONTROLLERS_FILE","description":"Path to a YAML file describing multiple named controllers for multi-site management. When set, the legacy UNIFI_HOST / UNIFI_API_KEY env vars are ignored. Each entry needs name, host, api_key, and optionally port, site, verify_ssl.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_MODULES_ENABLED","description":"Comma-separated list of modules to load. Known values: 'network', 'protect', 'access'. Defaults to 'network'. Set to 'network,protect,access' to enable Protect and Access tools alongside Network. Access currently ships read-only; door unlocks and credential issuance require session-token auth and are deferred.","format":"string","required":false,"secret":false},{"name":"UNIFI_ACCESS_HOST","description":"UniFi Access hub IP or hostname. Required when the access module is enabled and STUB_MODE=false. Often the same host as UNIFI_HOST.","format":"string","required":false,"secret":false},{"name":"UNIFI_ACCESS_API_KEY","description":"UniFi Access API key. Separate from the Network API key; generated on the Access controller's developer settings. Required when the access module is enabled and STUB_MODE=false.","format":"string","required":false,"secret":true},{"name":"UNIFI_ACCESS_PORT","description":"HTTPS port for the Access hub. Defaults to 12445 (the direct Access app port).","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_AUDIT_SINK","description":"Audit log sink. One of 'file' (default), 'stdout', or 'syslog'. Every tool call is recorded to a JSONL stream with secrets scrubbed.","format":"string","required":false,"secret":false},{"name":"MCP_UNIFI_AUDIT_PATH","description":"Path for the audit log file when MCP_UNIFI_AUDIT_SINK=file. Defaults to audit.jsonl in the process CWD.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-03T01:17:02.187Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-pete-builds|io.github.pete-builds]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-pete-builds-unifi>
- Abgerufen am: 2026-10-11
