Find enabled tools by intent, ranked over names, descriptions and parameter schemas.

Default returns ten matches. Choose any positive limit, or null for every match; no tool or search result is hard-capped. Empty query browses tools. Use describe_tool for the exact schema, then call_read_tool or call_write_tool.

Args: query: Natural language intent, for example "camera recordings"; empty browses all tools. family: Optional exact family slug from list_tool_families, for example "protect". writes: Optional filter: true for mutations, false for reads, null for both. limit: Number of results (default 10); any positive integer or null for every match. Enabled families (tool counts): carrier: 11; clients: 14; connector: 5; devices: 34; firewall: 32; hotspot: 4; innerspace: 32; mobility: 8; network: 347; protect: 227; site_manager: 19; statistics: 14; vpn: 39.

Return the complete enabled tool schema, identical to its full-mode tools/list entry.

Args: name: Exact enabled tool name from search_tools, for example "get_acl_rule_ordering".

Execute a read tool with its original validation, guards, audit and result format.

Refuses write calls, including state-changing routes of the mixed GET relay. Describe the target first; its schema and permissions apply. Read-only mode and secret scrubbing are preserved.

Args: name: Exact enabled read tool name, for example "get_acl_rule_ordering". arguments: Target schema arguments, for example {"host": "console", "site": "default"}.

Execute a tool that may mutate live configuration through registered dispatch.

Describe the target first. Target validation, per-area opt-outs, UNIFI_READ_ONLY, OAuth permissions, dry-run, audit and secret scrubbing match a direct call.

Args: name: Exact enabled tool name, for example "set_firewall_policy_ordering". arguments: Target schema arguments from describe_tool; for example {"host": "console", "site": "default"} plus the target's required fields.

List enabled families and counts; use their slugs as search_tools family filters.