io.github.KallistoX/mcp-unifi-applications
PYPI · MCP-UNIFI-APPLICATIONS · SCANNED SEP 20
Queryable UniFi API docs: endpoint search, schemas, code examples. No controller access.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security50
- Malware scan not yet available for this package.Unverified
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs setuptools.build_meta at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 1 of 16 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: no license is declared. See how to fix → Fail
- Actively maintained (last published 9 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability76
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1577 tokens (~157/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
- Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the io.github.KallistoX/mcp-unifi-applications server?
io.github.KallistoX/mcp-unifi-applications runs locally as a PyPI package, launched with uvx mcp-unifi-applications. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · mcp-unifi-applications
claude mcp add kallistox-mcp-unifi-applications -- uvx mcp-unifi-applications
{
"mcpServers": {
"kallistox-mcp-unifi-applications": {
"command": "uvx",
"args": [
"mcp-unifi-applications"
]
}
}
} {
"servers": {
"kallistox-mcp-unifi-applications": {
"command": "uvx",
"args": [
"mcp-unifi-applications"
]
}
}
} codex mcp add kallistox-mcp-unifi-applications -- uvx mcp-unifi-applications
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"kallistox-mcp-unifi-applications": {
"type": "local",
"command": [
"uvx",
"mcp-unifi-applications"
],
"enabled": true
}
}
} openclaw mcp add kallistox-mcp-unifi-applications --command uvx --arg mcp-unifi-applications
mcp_servers:
kallistox-mcp-unifi-applications:
command: "uvx"
args: ["mcp-unifi-applications"] {
"McpServers": {
"kallistox-mcp-unifi-applications": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"mcp-unifi-applications"
]
}
}
} assistant mcp add kallistox-mcp-unifi-applications -t stdio -c uvx -a mcp-unifi-applications
{
"mcpServers": {
"kallistox-mcp-unifi-applications": {
"command": "uvx",
"args": [
"mcp-unifi-applications"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 10 Sept 26 0
- Malware scan: unverified → pass ▲ security
- Schema quality: pass → fail ▼ functional
- Stability: unverified → 0.03 ▲ functional
- Package version: 0.2.0 → 0.4.0 functional
- Package version: 0.2.0 → 0.3.1 functional
- 9 Sept 26 54
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/mcp-unifi-applications@0.4.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | setuptools.build_meta |
Background: Why install scripts are a supply-chain risk →
Dependencies 16 packages
| Packages resolved | 16 |
|---|---|
| Stale | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
find_field Find Field ~147
Locate a field by name across every endpoint, including inside discriminator variants. Returns one line per occurrence: endpoint slug, dotted path, and which schema section it sits in (request body, parameters, or response). Common names appear hundreds of times; the reply is capped at 50 and states the true total and how many endpoints are involved, so a short list is never mistaken for a complete one. Paths from here can be passed straight to get_field_schema. A name that matches nothing returns close alternatives.
| Name | Type | Req | Description |
|---|---|---|---|
| field_name | string | yes | The field name to search for (case-insensitive). |
| slug | – | – | Optional — limit search to a specific endpoint. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_docs_info Get Docs Info ~69
Report what documentation this server is serving. Returns one line per application: API version, when it was scraped, and how many endpoints and guides it holds. Worth checking before trusting an answer about a recent API change — the documentation is a point-in-time copy, not a live view.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_endpoint Get Endpoint ~204
Get everything documented about one endpoint: method, path, description, path and query parameters, request body and response fields. Returns readable text: a nested field list with types, required markers and descriptions, discriminator variants in brackets and enum values inline, folded at three levels deep. Large endpoints run to tens of thousands of characters — when you already know which field you need, get_field_schema returns that subtree alone. An unknown slug returns close matches rather than an error.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Endpoint identifier, app-qualified ('network/createnetwork') or bare ('createnetwork') when only one application has it. Use search_endpoints or list_endpoints to find one. |
| summary | boolean | – | True (default) returns the folded text above. False returns the raw scraped JSON — complete and unfolded to every depth, several times larger, and only worth it when the folding hides somet… |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_endpoint_group Get Endpoint Group ~120
See every operation on one resource at once, grouped by API path. Returns each matching resource path with its endpoints beneath it — method, slug, title and a one-line description — so the available verbs on a resource are visible together rather than found one at a time. Matching is a substring of the path, so 'networks' also finds nested paths, and one query can span applications.
| Name | Type | Req | Description |
|---|---|---|---|
| resource | string | yes | Resource name or path fragment (e.g. 'networks', 'acl-rules', 'wifi/broadcasts'). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_example Get Example ~234
Get a runnable request for one endpoint, in one language, as published by Ubiquiti. Returns a heading naming the endpoint, language and mode, followed by a single code block. The request shape is authoritative; host addresses, site ids and API keys are placeholders to fill in. Bodies show the schema's default values, not a worked example — combine with get_endpoint or get_field_schema when the payload matters. If the requested language and mode pair does not exist, the reply lists the pairs that do instead of failing.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | One of curl, go, nodejs, python, ansible. |
| mode | – | – | 'local' addresses the console directly (https://<console-ip>/proxy/…); 'remote' goes through the UniFi cloud API (api.ui.com). Defaults to 'local', except for the cloud-only applications — site-m… |
| slug | string | yes | Endpoint identifier, app-qualified or bare when unambiguous. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_field_schema Get Field Schema ~123
Drill into a specific field's schema within an endpoint. Instead of fetching the full 70KB endpoint schema, use this to get just the subtree you need. Paths from find_field output work directly.
| Name | Type | Req | Description |
|---|---|---|---|
| field_path | string | yes | Dotted path to the field, with discriminator variants in brackets. Examples: 'dhcpV4', 'management[GATEWAY].dhcpV4', 'management[GATEWAY].dhcpV4.gateway'. |
| slug | string | yes | Endpoint identifier (e.g. 'network/createnetwork'). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_guide Get Guide ~148
Read a prose guide page: filtering syntax, error handling, getting started, response formats. Returns the page as markdown with its title and source URL. Omit the topic to list what is available. Topics resolve by slug first, then by title; when the same slug exists in several applications the reply lists them and asks for an app rather than picking one. These pages carry the conventions that endpoint schemas assume but do not repeat.
| Name | Type | Req | Description |
|---|---|---|---|
| app | – | – | Optional app filter (network, protect, site-manager, innerspace, mobility, carrier-fabric). Omit to search all. |
| topic | – | – | Guide slug or search term. Omit to list all available guides. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_response_sample Get Response Sample ~96
Get the sample response body published for one endpoint. Returns raw JSON exactly as the documentation shows it, with placeholder values. About two thirds of endpoints have one; the rest say so plainly. This is the shape of a successful reply — for the field-by-field schema including types and which fields are optional, use get_endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Endpoint identifier (e.g. 'network/getnetworksoverviewpage'). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
list_endpoints List Endpoints ~134
Browse the endpoint catalogue: one line per endpoint with method, path, slug and title. Returns at most 200 lines; beyond that the reply says how many were withheld and which filters would narrow it. For finding a specific endpoint, search_endpoints ranks by relevance instead. Unknown filter values are rejected by name rather than returned as an empty result.
| Name | Type | Req | Description |
|---|---|---|---|
| app | – | – | Optional app filter (network, protect, site-manager, innerspace, mobility, carrier-fabric). Omit to list all. |
| method | – | – | Optional HTTP method filter (GET, POST, PUT, DELETE, PATCH). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
search_endpoints Search Endpoints ~163
Find endpoints by name, path fragment, method or description. Returns up to ten matches ranked by relevance, each as a slug, method, path, title and a one-line description. Matching is fuzzy but floored: a query that resembles nothing returns no matches rather than the least-bad guess. Pass a result's slug to get_endpoint for the full schema. Unknown filter values are rejected by name.
| Name | Type | Req | Description |
|---|---|---|---|
| app | – | – | Optional app filter (network, protect, site-manager, innerspace, mobility, carrier-fabric). Omit to search all. |
| method | – | – | Optional HTTP method filter (GET, POST, PUT, DELETE, PATCH). |
| query | string | yes | Search term (endpoint name, path fragment, or keyword). |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
What is the io.github.KallistoX/mcp-unifi-applications server?
io.github.KallistoX/mcp-unifi-applications is listed in the public MCP registry as io.github.KallistoX/mcp-unifi-applications. Queryable UniFi API docs: endpoint search, schemas, code examples. No controller access. This page covers its PyPI package (mcp-unifi-applications).
Is the io.github.KallistoX/mcp-unifi-applications server safe to use?
io.github.KallistoX/mcp-unifi-applications scores 58 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.KallistoX/mcp-unifi-applications server expose?
io.github.KallistoX/mcp-unifi-applications exposes 10 tools: list_endpoints, search_endpoints, get_endpoint, get_example, get_response_sample, and 5 more. Their descriptions and schemas cost roughly 1,438 tokens of context every time the server is loaded.
Is the io.github.KallistoX/mcp-unifi-applications server still maintained?
io.github.KallistoX/mcp-unifi-applications is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.