Best for
- Network administrators who want to manage a UniFi Network controller through an AI assistant.
- Home-lab or small-organization environments running a local UniFi deployment and seeking network-operations automation.
U
UniFi Network MCP
Community
Manage UniFi network infrastructure through MCP.
GitHub source repository ↗
60FMRS · C
The supplied material identifies this as an MIT-licensed UniFi Network MCP server maintained by sirkirby, not by Ubiquiti. Its scope is limited to Network controller management; Protect, Access, relay, and standalone API components must not be attributed to this server.
UniFi Network MCP is an independent open-source MCP server for managing UniFi Network controllers, including network devices, clients, firewalls, VLANs, VPNs, and related network operations. The repository also contains Protect and Access servers; this profile covers only the Network server defined by apps/network/server.json. The server is version 0.27.0, provides 189 tools, and uses stdio transport.
Tools
The tool list has not been reviewed yet.
Setup
Run unifi-network-mcp with uvx and configure UNIFI_HOST, UNIFI_USERNAME, and UNIFI_PASSWORD. The server connects to a local UniFi controller and requires a local administrator or service account; do not use a Ubiquiti SSO cloud account. UNIFI_API_KEY, UNIFI_PORT, UNIFI_VERIFY_SSL, and UNIFI_SITE are optional settings.
claude_desktop_config.json
{"mcpServers":{"unifi-network":{"command":"uvx","args":["unifi-network-mcp@latest"],"env":{"UNIFI_HOST":"192.168.1.1","UNIFI_USERNAME":"admin","UNIFI_PASSWORD":"your-password","UNIFI_PORT":"443","UNIFI_VERIFY_SSL":"false","UNIFI_SITE":"default"}}}}
Fit and risk
Not for
- Accounts configured only with Ubiquiti SSO, SSO MFA, or local 2FA.
- Users without a UniFi Network controller.
- Camera or door-access workflows; those belong to separate servers in the same repository.
Required permissions
- The controller IP address or hostname.
- A local UniFi administrator or service-account username and password.
- Sufficient controller permissions for the intended network operations.
- An optional UniFi API key for selected capabilities.
Risks and side effects
- The server can manage firewalls, VLANs, VPNs, and network devices; incorrect changes may disrupt connectivity or weaken security boundaries.
- Administrator credentials are highly sensitive and should be held by a dedicated local service account.
- UNIFI_VERIFY_SSL defaults to false, which may reduce TLS certificate-validation protection.
- Disabling sensitive-field redaction can expose Wi-Fi, VPN, or other secrets to agent context and logs.
Troubleshooting
- Verify that UNIFI_HOST points to a reachable UniFi controller and that the HTTPS port is correct.
- Verify that the credentials belong to a local administrator or service account rather than a Ubiquiti SSO account.
- Check the username, password, site name, and optional API key.
- If certificate validation prevents connection, inspect the UNIFI_VERIFY_SSL setting.
- Confirm that the account has the permissions required for the requested network operation.
Use cases
Query UniFi network device and client status.
Manage firewall rules, VLANs, and VPNs.
Inspect guest-VLAN clients, signal strength, and data usage.
Audit firewall policies and analyze network traffic.
Supported clients
Claude DesktopFull support
CodexFull support
OpenClawFull support