unifi_set_switch_port_profile

What unifi_set_switch_port_profile does on UniFi Access MCP

AI agents use unifi_set_switch_port_profile to create or update resources in UniFi Access MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your UniFi Access MCP environment.

Why unifi_set_switch_port_profile is rated Medium

This tool modifies network infrastructure configuration by assigning port profiles to switch ports. While it creates or updates configuration state (Write category), it is reversible and does not delete data or execute arbitrary code. The severity is medium because misconfiguration could disrupt network connectivity or create security gaps, but the blast radius is limited to network port settings.

From the tool's definition The tool name 'unifi_set_switch_port_profile' and description 'Assign a port profile to a specific switch port' indicate a modification operation that changes network switch configuration. This is a reversible change (a profile can be reassigned or reverted).

The rule that runs unifi_set_switch_port_profile safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_set_switch_port_profile, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_set_switch_port_profile": {
      "limits": [
        {
          "counter": "unifi_set_switch_port_profile_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about unifi_set_switch_port_profile