UniFi Gateway MCP Server

Safety-first MCP server for self-hosted UniFi. Dry-run previews, JSONL audit log, composite rollback. Network + Protect + Access.

People who work with docker, fastmcp and homelab and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-17 · ★ 22 · #101 OF 153 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-09-18

MIT · Python servers · how we verify → /methodology

01 · Install UniFi Gateway

before you install - you'll need

Set MCP_UNIFI_TOKEN, STUB_MODE, MCP_UNIFI_AUTH_TOKENS, MCP_UNIFI_AUTH_REQUIRED, UNIFI_HOST before connecting. UNIFI_API_KEY is optional or environment-specific per the README.

Docker

docker run -i --rm ghcr.io/pete-builds/mcp-unifi:0.23.0

Claude Desktop - add to config

{
  "mcpServers": {
    "pete-builds-mcp-unifi": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/pete-builds/mcp-unifi:0.23.0"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

registry namespace io.github.pete-builds is GitHub-verified and matches the repo owner

03 · What UniFi Gateway can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.23.0 · 2026-09-15

Security · OpenVPN key material is redacted. A remote-user-vpn network record · on UniFi OS 5.1 carries the server's whole OpenVPN PKI in x_ca_key, · x_server_key, x_dh_key, x_shared_client_key and x_auth_key. None…

mcp-unifi-0.2.9 · 2026-09-15

MCP server for self-hosted UniFi gateway management (Network + Protect + Access)

v0.22.0 · 2026-09-13

Added · list_firewall_policies and list_firewall_zones read the Zone-Based · Firewall through the v2 API (/v2/api/site/<site>/firewall-policies and · /firewall/zone). Sites on Network 9.x and newer that have migrated…

04 · Who maintains UniFi Gateway

UniFi Gateway is maintained by pete-builds. It's the only MCP server we track from this author; the repo dates to May 2026.

05 · Facts

repository: github.com/pete-builds/mcp-unifi
website: https://pete-builds.github.io/mcp-unifi/
category: cloud infrastructure - ranked #101 of 153 actively-maintained cloud infrastructure servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-15)
registry: io.github.pete-builds/unifi (active, first published 2026-05-09 · 22 versions)
packages: oci:ghcr.io/pete-builds/mcp-unifi:0.23.0

06 · UniFi Gateway FAQ

What is UniFi Gateway?

Safety-first MCP server for self-hosted UniFi. Dry-run previews, JSONL audit log, composite rollback. Network + Protect + Access.

Is UniFi Gateway still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-17 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install UniFi Gateway?

Run `docker run -i --rm ghcr.io/pete-builds/mcp-unifi:0.23.0`. The README documents 6 environment variables (MCP_UNIFI_TOKEN, STUB_MODE, MCP_UNIFI_AUTH_TOKENS…) to set first. Set MCP_UNIFI_TOKEN, STUB_MODE, MCP_UNIFI_AUTH_TOKENS, MCP_UNIFI_AUTH_REQUIRED, UNIFI_HOST before connecting. UNIFI_API_KEY is optional or environment-specific per the README. You can also paste the ready-made client config above.

07 · Alternatives to UniFi Gateway

Alternatives to UniFi Gateway

Maintained cloud infrastructure servers if UniFi Gateway isn't the fit.

Pairs well with

Servers that cover what UniFi Gateway doesn't - only shown when the pairing reason fits the companion.

More cloud infrastructure MCP servers · OWASP ZAP MCP Server · AINumbers Fintech Intelligence Suite · Audiolla · Claudebox · Hybrid S3

More Python MCP servers · Oncofiles · Skill Total · CallRail MCP · Palinode · Fabricator Panel MCP · see all