UniFi Site Manager and Network (unofficial) MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add the-real-unifi-mcp -e 'UNIFI_API_KEY=<UNIFI_API_KEY>' -- npx -y the-real-unifi-mcp

{
  "mcpServers": {
    "the-real-unifi-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "the-real-unifi-mcp"
      ],
      "env": {
        "UNIFI_API_KEY": "<UNIFI_API_KEY>"
      }
    }
  }
}

[mcp_servers.the-real-unifi-mcp]
command = "npx"
args = ["-y", "the-real-unifi-mcp"]
env = { UNIFI_API_KEY = "<UNIFI_API_KEY>" }

{
  "mcpServers": {
    "the-real-unifi-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "the-real-unifi-mcp"
      ],
      "env": {
        "UNIFI_API_KEY": "<UNIFI_API_KEY>"
      }
    }
  }
}

{
  "servers": {
    "the-real-unifi-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "the-real-unifi-mcp"
      ],
      "env": {
        "UNIFI_API_KEY": "<UNIFI_API_KEY>"
      }
    }
  }
}

Put your own value in place of <UNIFI_API_KEY> (UniFi Site Manager API key with Network scope (unifi.ui.com, Settings > API). It controls your whole network: treat it like an admin password). The author’s registry entry marks it as required.

Optional settings from the registry entry, left out of the block above: UNIFI_CONFIRM_WRITES (Write confirmation: destructive tools return a preview and run only when called again with confirm "YES". Only false, 0, no or off turn it off), UNIFI_API_BASE (API base URL; this host receives the API key. https origin only (http only for loopback test stubs). Keep the default), UNIFI_TIMEOUT_MS (Per-request timeout in milliseconds, covering response headers and body), UNIFI_LOG_LEVEL (Log level on stderr: debug, info, warn or error), UNIFI_CONSOLE_ID (Pins the UniFi console instead of discovering it (needed when the account has several consoles)), UNIFI_NETWORK_SITE_ID (Pins the Network site instead of discovering it), UNIFI_SITE_MANAGER_SITE_ID (Pins the Site Manager site instead of discovering it), UNIFI_READ_ONLY (Read-only mode: every write tool returns an error and sends no request; reads still work. Off by default), UNIFI_REDACT_SECRETS (Masks passwords, WiFi passphrases, pre-shared keys and other secret fields in every tool result with (redacted); write tools refuse a body that contains that placeholder. Off by default), UNIFI_MAX_RESULT_BYTES (Cuts tool results longer than this many bytes and marks them as truncated. Unset or empty: 100000. 0, off or none: no cap).