// SCAN REPORT

UniFi Network MCP Server

52 tools. 21 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated:

21 can modify or destroy data
31 read-only
52 tools total

Community server · catalogue entry verified 29/06/2026

How to control UniFi Network MCP Server ↓

TOOL MAP

What UniFi Network MCP Server exposes to your agents

Read (31) Write / Execute (14) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous UniFi Network MCP Server tools

Destructive · High unifi_bulk_delete_vouchers Deleting vouchers cannot be undone and constitutes permanent data loss. Destructive · High unifi_delete_acl_rule Deletion of ACL rules is irreversible and can cause immediate network access disruptions. Destructive · High unifi_delete_firewall_zone Deleting a firewall zone is a destructive operation that cannot be undone and would immediately impact network security posture and traffic routing. Destructive · High unifi_delete_network Deleting a network is an irreversible operation that removes network configuration and potentially impacts all devices and clients connected to that network.

21 of UniFi Network MCP Server's 52 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control UniFi Network MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and UniFi Network MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "unifi_bulk_delete_vouchers": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "unifi_create_acl_rule": {
    "limits": [
      {
        "counter": "unifi_create_acl_rule_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "unifi_adopt_device": {
    "limits": [
      {
        "counter": "unifi_adopt_device_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register UniFi Network MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON UNIFI NETWORK →

Instant setup, no code required.

FULL CATALOGUE

All 52 UniFi Network MCP Server tools

DESTRUCTIVE 7 tools
Destructive unifi_bulk_delete_vouchers Bulk delete hotspot vouchers based on filter criteria (e.g., Destructive unifi_delete_acl_rule Delete an ACL rule Destructive unifi_delete_firewall_zone Delete a custom firewall zone Destructive unifi_delete_network Delete a network Destructive unifi_delete_traffic_matching_list Delete a traffic matching list Destructive unifi_delete_voucher Delete a hotspot voucher Destructive unifi_delete_wifi Delete a WiFi network
EXECUTE 3 tools
Execute unifi_locate_device Enable or disable the locate function (flashing LED) on a device Execute unifi_power_cycle_port Power cycle a specific port on a device (PoE restart) Execute unifi_restart_device Restart a device
WRITE 11 tools
Write unifi_create_acl_rule Create a new ACL (firewall) rule Write unifi_create_firewall_zone Create a new custom firewall zone Write unifi_create_network Create a new network Write unifi_create_traffic_matching_list Create a new traffic matching list Write unifi_create_voucher Create hotspot vouchers Write unifi_create_wifi Create a new WiFi network (SSID) Write unifi_update_acl_rule Update an ACL rule Write unifi_update_firewall_zone Update a firewall zone Write unifi_update_network Update an existing network Write unifi_update_traffic_matching_list Update a traffic matching list Write unifi_update_wifi Update an existing WiFi network
READ 31 tools
Read unifi_adopt_device Adopt a pending device Read unifi_authorize_guest Authorize a guest client on a hotspot network Read unifi_get_acl_rule Get a specific ACL rule by ID Read unifi_get_client Get a specific client by ID Read unifi_get_device Get a specific device by ID Read unifi_get_device_statistics Get latest statistics for a device Read unifi_get_firewall_zone Get a specific firewall zone by ID Read unifi_get_info Get application information including version and whether it Read unifi_get_network Get a specific network by ID Read unifi_get_network_references Get references to a network (what WiFi broadcasts, firewall zones, etc. use this network) Read unifi_get_traffic_matching_list Get a specific traffic matching list by ID Read unifi_get_voucher Get a specific hotspot voucher by ID Read unifi_get_wifi Get a specific WiFi network by ID Read unifi_list_acl_rules List all ACL (firewall) rules at a site Read unifi_list_clients List all connected clients (wired, wireless, VPN) at a site Read unifi_list_countries List all countries/regions for geo-based rules (ISO codes and names) Read unifi_list_device_tags List all device tags at a site (used for WiFi broadcast assignments) Read unifi_list_devices List all adopted devices at a site Read unifi_list_dpi_applications List all DPI applications for traffic identification and filtering Read unifi_list_dpi_categories List all DPI (Deep Packet Inspection) categories for traffic identification Read unifi_list_firewall_zones List all firewall zones at a site Read unifi_list_networks List all networks at a site Read unifi_list_pending_devices List devices pending adoption (global, not site-specific) Read unifi_list_radius_profiles List all RADIUS profiles at a site Read unifi_list_sites List all sites available to the API key Read unifi_list_traffic_matching_lists List all traffic matching lists at a site (port groups, IP groups) Read unifi_list_vouchers List all hotspot vouchers at a site Read unifi_list_vpn_servers List all VPN servers at a site Read unifi_list_vpn_tunnels List all site-to-site VPN tunnels at a site Read unifi_list_wans List all WAN interfaces at a site Read unifi_list_wifi List all WiFi broadcasts (SSIDs) at a site
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about UniFi Network MCP Server

Can an AI agent delete data through the UniFi Network MCP Server MCP server? +

Yes. The UniFi Network MCP Server server exposes 7 destructive tools including unifi_bulk_delete_vouchers, unifi_delete_acl_rule, unifi_delete_firewall_zone. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through UniFi Network MCP Server? +

The UniFi Network MCP Server server has 11 write tools including unifi_create_acl_rule, unifi_create_firewall_zone, unifi_create_network. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach UniFi Network MCP Server.

How many tools does the UniFi Network MCP Server MCP server expose? +

52 tools across 4 categories: Destructive, Execute, Read, Write. 31 are read-only. 21 can modify, create, or delete data.

How do I enforce a policy on UniFi Network MCP Server? +

Register the UniFi Network MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every UniFi Network MCP Server tool call.

Deterministic rules across all 52 UniFi Network MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON UNIFI NETWORK →

Instant setup, no code required.

52 UniFi Network MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.