// SCAN REPORT

UniFi Access MCP

272 tools. 122 can modify or destroy data without limits.

23 destructive tools with no built-in limits. Policy required.

Last updated:

122 can modify or destroy data
150 read-only
272 tools total

Community server · catalogue entry checked 21/07/2026

How to control UniFi Access MCP ↓

TOOL MAP

What UniFi Access MCP exposes to your agents

Read (150) Write / Execute (97) Destructive / Financial (23)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous UniFi Access MCP tools

Destructive · High access_delete_visitor The tool performs deletion of visitor records in an access control system, which is an irreversible operation that cannot be undone. Destructive · High access_revoke_credential Revoking a credential removes access rights, which is typically an irreversible or hard-to-undo action. Destructive · High protect_alarm_delete_rule The 'delete_rule' operation irreversibly removes alarm protection rules from the system. Destructive · High protect_delete_known_face The tool deletes a known face from what appears to be a biometric database used for access control.

122 of UniFi Access MCP's 272 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control UniFi Access MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and UniFi Access MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "access_delete_visitor": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "access_create_credential": {
    "limits": [
      {
        "counter": "access_create_credential_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "access_get_activity_summary": {
    "limits": [
      {
        "counter": "access_get_activity_summary_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register UniFi Access MCP — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON UNIFI ACCESS →

Instant setup, no code required.

FULL CATALOGUE

All 272 UniFi Access MCP tools

DESTRUCTIVE 23 tools
Destructive access_delete_visitor access_delete_visitor Destructive access_revoke_credential access_revoke_credential Destructive protect_alarm_delete_rule protect_alarm_delete_rule Destructive protect_delete_known_face protect_delete_known_face Destructive protect_delete_known_license_plate protect_delete_known_license_plate Destructive protect_delete_liveview protect_delete_liveview Destructive protect_delete_recording protect_delete_recording Destructive unifi_delete_acl_rule Delete a MAC ACL rule. Requires confirmation. WARNING: Removing an ALLOW rule Destructive unifi_delete_ap_group unifi_delete_ap_group Destructive unifi_delete_backup Delete a backup file from the controller. Use unifi_list_backups to find filenames. Destructive unifi_delete_client_group Delete a client group. Requires confirmation. Destructive unifi_delete_content_filter Delete a content filtering profile. Requires confirmation. Destructive unifi_delete_dns_record Delete a static DNS record. Use unifi_list_dns_records to find record IDs. Requires confirmation. Destructive unifi_delete_dynamic_dns Delete a Dynamic DNS entry. Use unifi_list_dynamic_dns to find entry IDs. Requires confirmation. Destructive unifi_delete_firewall_group Delete a firewall group. Requires confirmation. Destructive unifi_delete_firewall_policy unifi_delete_firewall_policy Destructive unifi_delete_oon_policy Delete an OON policy. Requires confirmation. Destructive unifi_delete_port_forward Delete a port forwarding rule by ID. Requires confirmation. Destructive unifi_delete_port_profile Delete a port profile. System profiles with attr_no_delete=true cannot be deleted. Destructive unifi_delete_wlan unifi_delete_wlan Destructive unifi_forget_client Remove/forget a client from the controller Destructive unifi_revoke_voucher Revoke/delete a hotspot voucher by its ID, preventing further use Destructive unifi_unauthorize_guest Revoke authorization for a guest client by MAC address
EXECUTE 29 tools
Execute access_lock_door access_lock_door Execute access_reboot_device access_reboot_device Execute access_unlock_door access_unlock_door Execute protect_ptz_move protect_ptz_move Execute protect_ptz_preset protect_ptz_preset Execute protect_reboot_camera protect_reboot_camera Execute protect_trigger_chime protect_trigger_chime Execute unifi_batch Execute multiple UniFi tools in a single request. Each call is an object with Execute unifi_block_client Block a client/device from the network by MAC address Execute unifi_configure_port_aggregation Configure link aggregation (LACP/LAG) on a switch. Bonds consecutive ports Execute unifi_configure_port_mirror Configure port mirroring on a switch. Mirrors traffic from one port to a Execute unifi_execute Execute a UniFi tool by name. Use unifi_tool_index to discover available tools first. Execute unifi_force_provision_device Force re-provision a device, pushing the current configuration from the Execute unifi_force_reconnect_client Force a client to reconnect to the network (kick) by MAC address Execute unifi_locate_device Toggle device locate mode (LED blinking) to physically identify a device. Execute unifi_power_cycle_port Power cycle PoE on a specific switch port. This briefly cuts power to the Execute unifi_reboot_device Reboot a specific device by MAC address Execute unifi_reorder_firewall_policies unifi_reorder_firewall_policies Execute unifi_set_outlet_state unifi_set_outlet_state Execute unifi_toggle_device unifi_toggle_device Execute unifi_toggle_firewall_policy Enable or disable a specific firewall policy by ID. Execute unifi_toggle_port_forward Toggle a port forwarding rule on or off on your Unifi Network controller. Execute unifi_toggle_traffic_route Toggle a traffic route on/off by ID. Execute unifi_toggle_wlan Toggle a WLAN/SSID on or off. Requires confirmation. Execute unifi_trigger_rf_scan unifi_trigger_rf_scan Execute unifi_trigger_speedtest Trigger a speedtest on the gateway device. Returns immediately; Execute unifi_update_vpn_client_state Enable or disable a specific VPN client by ID. Execute unifi_update_vpn_server_state Enable or disable a specific VPN server by ID. Execute unifi_upgrade_device Initiate a firmware upgrade for a device by MAC address (uses cached firmware by default)
WRITE 68 tools
Write access_create_credential access_create_credential Write access_create_visitor access_create_visitor Write access_update_device_config access_update_device_config Write access_update_policy access_update_policy Write protect_acknowledge_event protect_acknowledge_event Write protect_alarm_create_rule protect_alarm_create_rule Write protect_alarm_update_rule protect_alarm_update_rule Write protect_create_liveview protect_create_liveview Write protect_export_clip protect_export_clip Write protect_merge_known_faces protect_merge_known_faces Write protect_update_camera_settings protect_update_camera_settings Write protect_update_chime protect_update_chime Write protect_update_known_face protect_update_known_face Write protect_update_known_license_plate protect_update_known_license_plate Write protect_update_light protect_update_light Write protect_update_sensor_settings protect_update_sensor_settings Write protect_update_viewer protect_update_viewer Write unifi_archive_alarm Archive (resolve/dismiss) a specific alarm by its ID Write unifi_archive_all_alarms Archive (resolve/dismiss) all active alarms Write unifi_authorize_guest Authorize a guest client to access the guest network by MAC address Write unifi_create_acl_rule Create a new MAC ACL rule for Layer 2 access control within a VLAN. Write unifi_create_ap_group Create a new AP group to control which APs broadcast which SSIDs. Requires confirmation. Write unifi_create_backup Create a new backup of the controller configuration. Write unifi_create_client_group Create a new client group (network member group). Write unifi_create_dns_record Create a new static DNS record. Write unifi_create_dynamic_dns Create a new Dynamic DNS provider entry. Write unifi_create_firewall_group Create a new firewall group (address or port group). Write unifi_create_firewall_policy unifi_create_firewall_policy Write unifi_create_network Create a new network (LAN/VLAN) with schema validation. Requires confirmation. Write unifi_create_oon_policy Create a new OON (Object-Oriented Network) policy for internet access scheduling, Write unifi_create_port_forward Create a new port forwarding rule on your Unifi Network controller using schema validation. Write unifi_create_port_profile Create a new port profile. forward values: Write unifi_create_qos_rule Create a new QoS rule on the Unifi Network controller. Requires confirmation. Write unifi_create_simple_port_forward unifi_create_simple_port_forward Write unifi_create_simple_qos_rule unifi_create_simple_qos_rule Write unifi_create_usergroup unifi_create_usergroup Write unifi_create_voucher unifi_create_voucher Write unifi_rename_client Rename a client/device in the Unifi Network controller by MAC address Write unifi_rename_device Rename a device in the Unifi Network controller by MAC address Write unifi_set_client_ip_settings unifi_set_client_ip_settings Write unifi_set_device_led unifi_set_device_led Write unifi_set_jumbo_frames Enable or disable jumbo frames on a switch. Write unifi_set_site_leds unifi_set_site_leds Write unifi_set_switch_port_profile Assign a port profile to a specific switch port. Write unifi_toggle_qos_rule_enabled Enable or disable a specific QoS rule by ID. Requires confirmation. Write unifi_unblock_client Unblock a previously blocked client/device by MAC address Write unifi_update_acl_rule Update an existing MAC ACL rule. Pass only the fields you want to change — Write unifi_update_ap_group unifi_update_ap_group Write unifi_update_autobackup_settings Update auto-backup settings. Pass only the fields you want to change — Write unifi_update_client_group Update an existing client group. Pass only the fields you want to change — Write unifi_update_content_filter Update an existing content filtering profile. Pass only the fields you want to change — Write unifi_update_device_radio unifi_update_device_radio Write unifi_update_dns_record Update an existing DNS record. Write unifi_update_dynamic_dns Update an existing Dynamic DNS entry. Write unifi_update_firewall_group Update an existing firewall group. Requires the full group object Write unifi_update_firewall_policy unifi_update_firewall_policy Write unifi_update_gateway_settings Update gateway (USG) settings. Pass only the fields you want to change; current Write unifi_update_network Update specific fields of an existing network (LAN/VLAN). Write unifi_update_oon_policy Update an existing OON policy. Pass only the fields you want to change — Write unifi_update_port_forward Update specific fields of an existing port forwarding rule using schema validation. Requires confirmation. Write unifi_update_port_profile Update an existing port profile. Pass only the fields you want to change — Write unifi_update_qos_rule Update specific fields of an existing QoS rule. Requires confirmation. Write unifi_update_route unifi_update_route Write unifi_update_snmp_settings Update SNMP settings for the site (enable/disable, set community string). Requires confirm=true to apply chang Write unifi_update_switch_stp Update STP (Spanning Tree Protocol) configuration for a switch. Write unifi_update_traffic_route unifi_update_traffic_route Write unifi_update_usergroup unifi_update_usergroup Write unifi_update_wlan Update specific fields of an existing WLAN (SSID).
READ 150 tools
Read access_get_activity_summary access_get_activity_summary Read access_get_credential Get detailed credential information by ID. Read access_get_device Get detailed device information by ID. Read access_get_device_configs access_get_device_configs Read access_get_door Get detailed door information by ID. Read access_get_door_status Get current door lock/position status. Read access_get_event Get a single event by ID. Read access_get_health Get Access system health metrics. Read access_get_policy Get detailed policy information by ID. Read access_get_system_info Get Access system information. Read access_get_visitor Get detailed visitor information by ID. Read access_list_credentials access_list_credentials Read access_list_devices access_list_devices Read access_list_door_groups List all door groups. Read access_list_doors List all doors. Read access_list_events access_list_events Read access_list_policies List all access policies. Read access_list_schedules Lists all access schedules configured on the Access controller. Read access_list_users access_list_users Read access_list_visitors List all visitors. Read access_recent_events access_recent_events Read access_subscribe_events Return subscription instructions for event streaming. Read protect_alarm_arm protect_alarm_arm Read protect_alarm_disarm protect_alarm_disarm Read protect_alarm_get_rule protect_alarm_get_rule Read protect_alarm_get_status Get the current arm status. Read protect_alarm_list_profiles List all arm profiles. Read protect_alarm_list_rules protect_alarm_list_rules Read protect_detection_search_labels protect_detection_search_labels Read protect_get_camera Get detailed camera information by ID. Read protect_get_camera_analytics protect_get_camera_analytics Read protect_get_camera_streams protect_get_camera_streams Read protect_get_event protect_get_event Read protect_get_event_thumbnail protect_get_event_thumbnail Read protect_get_firmware_status protect_get_firmware_status Read protect_get_health Get Protect NVR health metrics. Read protect_get_recording_status protect_get_recording_status Read protect_get_snapshot protect_get_snapshot Read protect_get_system_info Get Protect NVR system information. Read protect_list_cameras List all cameras. Read protect_list_chimes List all chimes. Read protect_list_events protect_list_events Read protect_list_known_faces protect_list_known_faces Read protect_list_known_license_plates protect_list_known_license_plates Read protect_list_lights List all lights. Read protect_list_liveviews List all liveviews. Read protect_list_recordings protect_list_recordings Read protect_list_sensors protect_list_sensors Read protect_list_smart_detections protect_list_smart_detections Read protect_list_viewers protect_list_viewers Read protect_ptz_zoom protect_ptz_zoom Read protect_recent_events protect_recent_events Read protect_search_detections protect_search_detections Read protect_subscribe_events Return subscription instructions for event streaming. Read protect_toggle_recording protect_toggle_recording Read protect_toggle_rtsp protect_toggle_rtsp Read unifi_adopt_device Adopt a pending device into the Unifi Network by MAC address Read unifi_get_acl_rule_details Get detailed configuration for a specific MAC ACL rule by ID. Read unifi_get_alerts Get recent alerts from the Unifi Network controller Read unifi_get_anomalies Get network anomaly detection events. Read unifi_get_ap_group_details Get details of a specific AP group by ID, including member APs and WLANs. Read unifi_get_autobackup_settings Get auto-backup settings (enabled state, schedule, retention count, cloud backup). Read unifi_get_client_details unifi_get_client_details Read unifi_get_client_dpi_traffic unifi_get_client_dpi_traffic Read unifi_get_client_group_details Get detailed configuration for a specific client group by ID. Read unifi_get_client_sessions unifi_get_client_sessions Read unifi_get_client_stats Get statistics for a specific client/device Read unifi_get_client_wifi_details Implementation for getting detailed WiFi stats for a wireless client. Read unifi_get_content_filter_details Get detailed configuration for a specific content filtering profile by ID. Read unifi_get_dashboard unifi_get_dashboard Read unifi_get_device_details unifi_get_device_details Read unifi_get_device_radio unifi_get_device_radio Read unifi_get_device_stats unifi_get_device_stats Read unifi_get_dns_record_details Get details for a specific DNS record by ID. Read unifi_get_dpi_stats Get Deep Packet Inspection (DPI) statistics (applications and categories) Read unifi_get_dynamic_dns_entry_details Get details for a specific Dynamic DNS entry by ID. The provider password/token is redacted. Read unifi_get_event_types Get list of event type prefixes. Read unifi_get_firewall_group_details Get detailed configuration for a specific firewall group by ID. Read unifi_get_firewall_policy_details Get detailed configuration for a specific firewall policy by ID. Read unifi_get_firewall_policy_ordering unifi_get_firewall_policy_ordering Read unifi_get_gateway_settings Get the gateway (USG) settings: security (GeoIP filtering, SYN cookies, ICMP Read unifi_get_gateway_stats Get gateway WAN/LAN performance history including bandwidth, CPU, and memory utilization. Read unifi_get_ips_events unifi_get_ips_events Read unifi_get_lldp_neighbors Get LLDP neighbor discovery table for a switch. Shows what devices are Read unifi_get_network_details unifi_get_network_details Read unifi_get_network_health unifi_get_network_health Read unifi_get_network_stats Get network statistics from the Unifi Network controller Read unifi_get_oon_policy_details Get detailed configuration for a specific OON policy by ID. Read unifi_get_pdu_outlets unifi_get_pdu_outlets Read unifi_get_port_forward Get a specific port forwarding rule by ID from your Unifi Network controller. Read unifi_get_port_profile_details Get detailed configuration for a specific port profile by ID. Read unifi_get_port_stats Get live port statistics for a switch. Returns per-port data including Read unifi_get_qos_rule_details Get details for a specific QoS rule by ID. Read unifi_get_rf_scan_results unifi_get_rf_scan_results Read unifi_get_route_details Get detailed information about a specific static route by its ID Read unifi_get_site_dpi_traffic Implementation for getting site-wide DPI traffic data. Read unifi_get_site_settings Get current site settings (e.g., country code, timezone, connectivity monitoring). Read unifi_get_snmp_settings Get current SNMP settings for the site (enabled state, community string). Read unifi_get_speedtest_results Get historical speedtest results including download, upload (Mbps), and latency (ms). Read unifi_get_speedtest_status Check the status of a running speedtest on the gateway. Read unifi_get_switch_capabilities Get switch hardware capabilities including max ACL rules, max VLANs, Read unifi_get_switch_ports Get port assignments for a specific switch. Shows which port profile is assigned Read unifi_get_system_info unifi_get_system_info Read unifi_get_top_clients Get a list of top clients by usage (sorted by total bytes) Read unifi_get_traffic_flow_statistics unifi_get_traffic_flow_statistics Read unifi_get_traffic_flows unifi_get_traffic_flows Read unifi_get_traffic_route_details Get detailed information for a specific traffic route by ID. Read unifi_get_usergroup_details Get detailed information about a specific user group by its ID Read unifi_get_voucher_details Get detailed information about a specific voucher by its ID Read unifi_get_vpn_client_details Get details for a specific VPN client by ID. Read unifi_get_vpn_server_details Get details for a specific VPN server by ID. Read unifi_get_wlan_details Get details for a specific WLAN by ID. Read unifi_list_acl_rules List MAC ACL rules (Policy Engine) for Layer 2 access control. Read unifi_list_active_routes List all active routes from the routing table. Read unifi_list_alarms unifi_list_alarms Read unifi_list_ap_groups List all AP groups. Read unifi_list_available_channels List allowed RF channels for the site's regulatory domain. Read unifi_list_backups List available backups on the controller. Returns filename, datetime, size, and version for each backup. Read unifi_list_blocked_clients Lists clients/devices currently blocked from the network. Each entry includes mac, hostname, name, last_seen, Read unifi_list_client_groups List client groups (network member groups). Read unifi_list_clients unifi_list_clients Read unifi_list_content_filters List content filtering profiles. Read unifi_list_devices unifi_list_devices Read unifi_list_dns_records List all static DNS records configured on the controller. Read unifi_list_dpi_applications List DPI applications available for use in firewall rules and OON policies. Read unifi_list_dpi_categories List DPI application categories (e.g., Read unifi_list_dynamic_dns List all Dynamic DNS provider entries configured on the controller. Read unifi_list_events unifi_list_events Read unifi_list_firewall_groups List firewall groups (address and port groups) used as reusable objects in firewall policies. Read unifi_list_firewall_policies unifi_list_firewall_policies Read unifi_list_firewall_zones List controller firewall zones (V2 API). Read unifi_list_networks unifi_list_networks Read unifi_list_oon_policies List OON (Object-Oriented Network) policies. Read unifi_list_port_forwards List all port forwarding rules on your Unifi Network controller. Read unifi_list_port_profiles List all port profiles (port configurations) on the controller. Read unifi_list_qos_rules List all QoS rules on the Unifi Network controller for the current site. Read unifi_list_rogue_aps unifi_list_rogue_aps Read unifi_list_routes List all user-defined static routes. Read unifi_list_traffic_routes List all traffic routes. Read unifi_list_usergroups List all user groups. Read unifi_list_vouchers List all hotspot vouchers. Read unifi_list_vpn_clients List all configured VPN clients (Wireguard, OpenVPN, etc). Read unifi_list_vpn_servers List all configured VPN servers (Wireguard, OpenVPN, L2TP, etc). Read unifi_list_wlans unifi_list_wlans Read unifi_location_timeline Query events across all connected UniFi products (Network, Protect, Access) Read unifi_lookup_by_ip Quick IP-to-client lookup. Returns essential fields (hostname, name, mac, is_online, last_seen) to minimize to Read unifi_recent_events unifi_recent_events Read unifi_subscribe_events Return a handle describing how to subscribe to live network events. Read unifi_toggle_oon_policy Toggle an OON policy on or off. Fetches the current state, Read unifi_tool_index Discover available UniFi tools. Returns names and descriptions by default.
OTHER 2 tools
Other unifi_create_route unifi_create_route Other unifi_create_wlan unifi_create_wlan
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about UniFi Access MCP

Can an AI agent delete data through the UniFi Access MCP server? +

Yes. The UniFi Access MCP server exposes 23 destructive tools including access_delete_visitor, access_revoke_credential, protect_alarm_delete_rule. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through UniFi Access MCP? +

The UniFi Access MCP server has 68 write tools including access_create_credential, access_create_visitor, access_update_device_config. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach UniFi Access MCP.

How many tools does the UniFi Access MCP server expose? +

272 tools across 4 categories: Destructive, Execute, Read, Write. 150 are read-only. 122 can modify, create, or delete data.

How do I enforce a policy on UniFi Access MCP? +

Register the UniFi Access MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every UniFi Access MCP tool call.

Deterministic rules across all 272 UniFi Access MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON UNIFI ACCESS →

Instant setup, no code required.

272 UniFi Access MCP tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from UniFi Access's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.