unifi-mcp-rw
by Oceanswave
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| backend | No | cloud (Site Manager connector) or local (UDM on the LAN). Default cloud. | |
| site_id | No | Integration site UUID. | |
| site_name | No | Classic site name. Default default. | |
| console_id | No | Console id from GET https://api.ui.com/v1/hosts. Required for cloud. | |
| local_host | No | UDM hostname or IPv4, optional :port. Required for local. | |
| allow_writes | No | Register write tools and allow non-GET requests. Default false. Overridden by UNIFI_ALLOW_WRITES. | |
| local_site_id | No | Alias for site_id. | |
| rw_token_file | No | MCP bearer token file, mode 0600, at least 32 characters. Default ~/.config/unifi-connectivity/mcp-rw-token. | |
| rw_listen_host | No | Listen host. Default 127.0.0.1. | |
| rw_listen_port | No | Listen port. Default 18778. | |
| MCP_PUBLIC_HOST | No | Name the reverse proxy serves, used for Host and Origin checks, e.g. the machine's *.ts.net name. | |
| UNIFI_WRITE_LOG | No | Absolute path to a JSON Lines write-call log. Unset disables it. | |
| local_site_name | No | Alias for site_name. | |
| UNIFI_WRITE_TOOLS | No | Comma-separated write tool names to register. Empty or none registers no write tools; unset registers every write tool. | |
| cloud_rw_key_file | No | Site Manager API key file, mode 0600. Default ~/.config/unifi-connectivity/cloud-rw-key. | |
| local_rw_key_file | No | UDM integration API key file, mode 0600. Default ~/.config/unifi-connectivity/local-rw-key. | |
| local_tls_ca_file | No | CA file for the UDM; use one of local_tls_cert_sha256 or local_tls_ca_file. | |
| UNIFI_ALLOW_WRITES | No | Overrides allow_writes. true or 1 enables writes, false or 0 disables them; empty or unset leaves the decision to config. | |
| UNIFI_WAN_ZONE_IDS | No | Comma-separated zone UUIDs treated as WAN, in addition to firewall_wan_zone_ids. | |
| UNIFI_MCP_RW_CONFIG | No | Path to config.json. Default ~/.config/unifi-connectivity/config.json. | |
| cloud_allow_classic | No | false, true (all), or a subset of [firewallrule, fixed_ip, radio]. Default false. | |
| firewall_wan_zone_ids | No | Zone UUIDs for WAN zones used by zone-based policy checks. | |
| local_tls_cert_sha256 | No | Certificate pin for the UDM; use one of local_tls_cert_sha256 or local_tls_ca_file. | |
| UNIFI_MCP_RW_STATE_DIR | No | Directory containing writes.log. Default ~/.local/state/unifi-mcp-rw. | |
| UNIFI_ALLOW_WAN_EXPOSURE | No | Set true (any case) to disable WAN-exposure refusals; unset keeps refusals on. | |
| firewall_internal_zone_ids | No | Zone UUIDs for internal zones used by zone-based policy checks. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo recent community issues