@owine/unifi-network-mcp 2.1.0 → 2.2.1

package/README.md

@@ -1,6 +1,6 @@
 # UniFi Network MCP Server
 
-An MCP (Model Context Protocol) server that exposes the UniFi Network Integration API as tools for Claude Code and other MCP clients. Provides 68 tools for managing sites, devices, clients, networks, WiFi, firewalls, ACLs, DNS policies, hotspot vouchers, VPNs, and more.
+An MCP (Model Context Protocol) server that exposes the UniFi Network Integration API as tools for Claude Code and other MCP clients. Provides 74 tools for managing sites, devices, clients, networks, WiFi, firewalls, ACLs, switching, DNS policies, hotspot vouchers, VPNs, and more.
 
 ## Prerequisites
 
@@ -76,7 +76,7 @@ This server provides layered safety controls for responsible operation:
 - **Confirmation parameter** — The most dangerous tools (e.g., `unifi_remove_device`, `unifi_bulk_delete_vouchers`) require an explicit `confirm: true` parameter that must be present for the call to succeed
 - **Dry-run support** — All write tools accept an optional `dryRun: true` parameter that returns a preview of the HTTP request (method, path, body) without making any changes
 
-## Tools (67 total)
+## Tools (74 total)
 
 ### System (1)
 | Tool | Description |
@@ -136,7 +136,7 @@ This server provides layered safety controls for responsible operation:
 | `unifi_delete_voucher` | **DESTRUCTIVE:** Delete a hotspot voucher |
 | `unifi_bulk_delete_vouchers` | **DESTRUCTIVE:** Bulk delete vouchers matching a filter |
 
-### Firewall Zones & Policies (12)
+### Firewall Zones & Policies (13)
 | Tool | Description |
 |---|---|
 | `unifi_list_firewall_zones` | List all firewall zones at a site |
@@ -156,7 +156,7 @@ This server provides layered safety controls for responsible operation:
 ### ACL Rules (7)
 | Tool | Description |
 |---|---|
-| `unifi_list_acl_rules` | List all ACL (firewall) rules at a site |
+| `unifi_list_acl_rules` | List all ACL rules at a site |
 | `unifi_get_acl_rule` | Get a specific ACL rule by ID |
 | `unifi_get_acl_rule_ordering` | Get user-defined ACL rule ordering |
 | `unifi_create_acl_rule` | Create a new ACL rule |
@@ -164,6 +164,16 @@ This server provides layered safety controls for responsible operation:
 | `unifi_delete_acl_rule` | **DESTRUCTIVE:** Delete an ACL rule |
 | `unifi_reorder_acl_rules` | Reorder user-defined ACL rules |
 
+### Switching (6)
+| Tool | Description |
+|---|---|
+| `unifi_list_switch_stacks` | List all Switch Stacks at a site |
+| `unifi_get_switch_stack` | Get details of a specific Switch Stack |
+| `unifi_list_mc_lag_domains` | List all MC-LAG (Multi-Chassis LAG) Domains at a site |
+| `unifi_get_mc_lag_domain` | Get details of a specific MC-LAG Domain |
+| `unifi_list_lags` | List all LAGs (Link Aggregation Groups) at a site |
+| `unifi_get_lag` | Get details of a specific LAG |
+
 ### DNS Policies (5)
 | Tool | Description |
 |---|---|

package/dist/tools/acl.js

@@ -7,7 +7,7 @@ const query_js_1 = require("../utils/query.js");
 const safety_js_1 = require("../utils/safety.js");
 function registerAclTools(server, client, readOnly = false) {
     server.registerTool("unifi_list_acl_rules", {
-        description: "List all ACL (firewall) rules at a site",
+        description: "List all ACL rules at a site",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -73,7 +73,7 @@ function registerAclTools(server, client, readOnly = false) {
     if (readOnly)
         return;
     server.registerTool("unifi_create_acl_rule", {
-        description: "Create a new ACL (firewall) rule",
+        description: "Create a new ACL rule",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             type: zod_1.z.enum(["IPV4", "MAC"]).describe("Rule type"),
@@ -115,20 +115,34 @@ function registerAclTools(server, client, readOnly = false) {
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             aclRuleId: zod_1.z.string().describe("ACL rule ID"),
-            rule: zod_1.z
+            type: zod_1.z.string().describe("ACL rule type"),
+            name: zod_1.z.string().describe("ACL rule name"),
+            enabled: zod_1.z.boolean().describe("Whether the rule is enabled"),
+            action: zod_1.z.string().describe("Rule action (ALLOW, DENY, etc.)"),
+            description: zod_1.z
+                .string()
+                .optional()
+                .describe("Rule description"),
+            protocolFilter: zod_1.z
                 .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("ACL rule configuration (JSON object)"),
+                .optional()
+                .describe("Protocol filter configuration"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE,
-    }, async ({ siteId, aclRuleId, rule, dryRun }) => {
+    }, async ({ siteId, aclRuleId, type, name, enabled, action, description, protocolFilter, dryRun }) => {
         try {
+            const body = { type, name, enabled, action };
+            if (description !== undefined)
+                body.description = description;
+            if (protocolFilter !== undefined)
+                body.protocolFilter = protocolFilter;
             if (dryRun)
-                return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/acl-rules/${aclRuleId}`, rule);
-            const data = await client.put(`/sites/${siteId}/acl-rules/${aclRuleId}`, rule);
+                return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/acl-rules/${aclRuleId}`, body);
+            const data = await client.put(`/sites/${siteId}/acl-rules/${aclRuleId}`, body);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {

package/dist/tools/devices.js

@@ -104,13 +104,14 @@ function registerDeviceTools(server, client, readOnly = false) {
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             macAddress: zod_1.z.string().describe("MAC address of the device"),
+            ignoreDeviceLimit: zod_1.z.boolean().optional().describe("Ignore device limit when adopting (default: false)"),
             dryRun: zod_1.z.boolean().optional().describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE_NOT_IDEMPOTENT,
-    }, async ({ siteId, macAddress, dryRun }) => {
+    }, async ({ siteId, macAddress, ignoreDeviceLimit, dryRun }) => {
         const body = {
             macAddress,
-            ignoreDeviceLimit: false,
+            ignoreDeviceLimit: ignoreDeviceLimit ?? false,
         };
         if (dryRun)
             return (0, safety_js_1.formatDryRun)("POST", `/sites/${siteId}/devices`, body);

package/dist/tools/dns-policies.js

@@ -61,20 +61,38 @@ function registerDnsPolicyTools(server, client, readOnly = false) {
         description: "Create a new DNS policy",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
-            policy: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("DNS policy configuration (JSON object)"),
+            type: zod_1.z
+                .enum([
+                "A_RECORD",
+                "AAAA_RECORD",
+                "CNAME_RECORD",
+                "MX_RECORD",
+                "TXT_RECORD",
+                "SRV_RECORD",
+                "FORWARD_DOMAIN",
+            ])
+                .describe("DNS record type"),
+            enabled: zod_1.z.boolean().describe("Whether the DNS policy is enabled"),
+            domain: zod_1.z.string().min(1).max(127).describe("Domain name"),
+            ipv4Address: zod_1.z.string().describe("IPv4 address for the record"),
+            ttlSeconds: zod_1.z
+                .number()
+                .int()
+                .min(0)
+                .max(86400)
+                .describe("Time to live in seconds"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE_NOT_IDEMPOTENT,
-    }, async ({ siteId, policy, dryRun }) => {
+    }, async ({ siteId, type, enabled, domain, ipv4Address, ttlSeconds, dryRun }) => {
         try {
+            const body = { type, enabled, domain, ipv4Address, ttlSeconds };
             if (dryRun)
-                return (0, safety_js_1.formatDryRun)("POST", `/sites/${siteId}/dns/policies`, policy);
-            const data = await client.post(`/sites/${siteId}/dns/policies`, policy);
+                return (0, safety_js_1.formatDryRun)("POST", `/sites/${siteId}/dns/policies`, body);
+            const data = await client.post(`/sites/${siteId}/dns/policies`, body);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {
@@ -86,20 +104,38 @@ function registerDnsPolicyTools(server, client, readOnly = false) {
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             dnsPolicyId: zod_1.z.string().describe("DNS policy ID"),
-            policy: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("DNS policy configuration (JSON object)"),
+            type: zod_1.z
+                .enum([
+                "A_RECORD",
+                "AAAA_RECORD",
+                "CNAME_RECORD",
+                "MX_RECORD",
+                "TXT_RECORD",
+                "SRV_RECORD",
+                "FORWARD_DOMAIN",
+            ])
+                .describe("DNS record type"),
+            enabled: zod_1.z.boolean().describe("Whether the DNS policy is enabled"),
+            domain: zod_1.z.string().min(1).max(127).describe("Domain name"),
+            ipv4Address: zod_1.z.string().describe("IPv4 address for the record"),
+            ttlSeconds: zod_1.z
+                .number()
+                .int()
+                .min(0)
+                .max(86400)
+                .describe("Time to live in seconds"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE,
-    }, async ({ siteId, dnsPolicyId, policy, dryRun }) => {
+    }, async ({ siteId, dnsPolicyId, type, enabled, domain, ipv4Address, ttlSeconds, dryRun }) => {
         try {
+            const body = { type, enabled, domain, ipv4Address, ttlSeconds };
             if (dryRun)
-                return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/dns/policies/${dnsPolicyId}`, policy);
-            const data = await client.put(`/sites/${siteId}/dns/policies/${dnsPolicyId}`, policy);
+                return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/dns/policies/${dnsPolicyId}`, body);
+            const data = await client.put(`/sites/${siteId}/dns/policies/${dnsPolicyId}`, body);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {

package/dist/tools/firewall.js

@@ -108,15 +108,29 @@ function registerFirewallTools(server, client, readOnly = false) {
         description: "Get user-defined firewall policy ordering for a zone pair",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
-            sourceFirewallZoneId: zod_1.z.string().describe("Source firewall zone ID"),
+            sourceFirewallZoneId: zod_1.z
+                .string()
+                .optional()
+                .describe("Source firewall zone ID"),
             destinationFirewallZoneId: zod_1.z
                 .string()
+                .optional()
                 .describe("Destination firewall zone ID"),
         },
         annotations: safety_js_1.READ_ONLY,
     }, async ({ siteId, sourceFirewallZoneId, destinationFirewallZoneId }) => {
         try {
-            const query = `?sourceFirewallZoneId=${encodeURIComponent(sourceFirewallZoneId)}&destinationFirewallZoneId=${encodeURIComponent(destinationFirewallZoneId)}`;
+            let query = "";
+            const params = new URLSearchParams();
+            if (sourceFirewallZoneId !== undefined) {
+                params.set("sourceFirewallZoneId", sourceFirewallZoneId);
+            }
+            if (destinationFirewallZoneId !== undefined) {
+                params.set("destinationFirewallZoneId", destinationFirewallZoneId);
+            }
+            const qs = params.toString();
+            if (qs)
+                query = `?${qs}`;
             const data = await client.get(`/sites/${siteId}/firewall/policies/ordering${query}`);
             return (0, responses_js_1.formatSuccess)(data);
         }

package/dist/tools/index.js

@@ -12,6 +12,7 @@ const firewall_js_1 = require("./firewall.js");
 const acl_js_1 = require("./acl.js");
 const dns_policies_js_1 = require("./dns-policies.js");
 const traffic_matching_js_1 = require("./traffic-matching.js");
+const switching_js_1 = require("./switching.js");
 const supporting_js_1 = require("./supporting.js");
 function registerAllTools(server, client, readOnly = false) {
     (0, system_js_1.registerSystemTools)(server, client);
@@ -25,5 +26,6 @@ function registerAllTools(server, client, readOnly = false) {
     (0, acl_js_1.registerAclTools)(server, client, readOnly);
     (0, dns_policies_js_1.registerDnsPolicyTools)(server, client, readOnly);
     (0, traffic_matching_js_1.registerTrafficMatchingTools)(server, client, readOnly);
+    (0, switching_js_1.registerSwitchingTools)(server, client);
     (0, supporting_js_1.registerSupportingTools)(server, client);
 }

package/dist/tools/networks.js

@@ -88,15 +88,21 @@ function registerNetworkTools(server, client, readOnly = false) {
                 .min(1)
                 .max(4009)
                 .describe("VLAN ID (1 for default, 2+ for additional)"),
+            dhcpGuarding: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("DHCP Guarding settings (trustedDhcpServerIpAddresses)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE_NOT_IDEMPOTENT,
-    }, async ({ siteId, name, management, enabled, vlanId, dryRun }) => {
+    }, async ({ siteId, name, management, enabled, vlanId, dhcpGuarding, dryRun }) => {
         try {
             const body = { name, management, enabled, vlanId };
+            if (dhcpGuarding !== undefined)
+                body.dhcpGuarding = dhcpGuarding;
             if (dryRun)
                 return (0, safety_js_1.formatDryRun)("POST", `/sites/${siteId}/networks`, body);
             const data = await client.post(`/sites/${siteId}/networks`, body);
@@ -122,15 +128,21 @@ function registerNetworkTools(server, client, readOnly = false) {
                 .min(1)
                 .max(4009)
                 .describe("VLAN ID (1-4009)"),
+            dhcpGuarding: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("DHCP Guarding settings (trustedDhcpServerIpAddresses)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE,
-    }, async ({ siteId, networkId, name, management, enabled, vlanId, dryRun }) => {
+    }, async ({ siteId, networkId, name, management, enabled, vlanId, dhcpGuarding, dryRun }) => {
         try {
             const body = { name, management, enabled, vlanId };
+            if (dhcpGuarding !== undefined)
+                body.dhcpGuarding = dhcpGuarding;
             if (dryRun)
                 return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/networks/${networkId}`, body);
             const data = await client.put(`/sites/${siteId}/networks/${networkId}`, body);

package/dist/tools/switching.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { NetworkClient } from "../client.js";
+export declare function registerSwitchingTools(server: McpServer, client: NetworkClient): void;

package/dist/tools/switching.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerSwitchingTools = registerSwitchingTools;
+const zod_1 = require("zod");
+const responses_js_1 = require("../utils/responses.js");
+const query_js_1 = require("../utils/query.js");
+const safety_js_1 = require("../utils/safety.js");
+function registerSwitchingTools(server, client) {
+    server.registerTool("unifi_list_switch_stacks", {
+        description: "List all Switch Stacks at a site",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            offset: zod_1.z
+                .number()
+                .int()
+                .nonnegative()
+                .optional()
+                .describe("Number of records to skip (default: 0)"),
+            limit: zod_1.z
+                .number()
+                .int()
+                .min(1)
+                .max(200)
+                .optional()
+                .describe("Number of records to return (default: 25, max: 200)"),
+            filter: zod_1.z
+                .string()
+                .optional()
+                .describe("Filter expression"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, offset, limit, filter }) => {
+        try {
+            const query = (0, query_js_1.buildQuery)({ offset, limit, filter });
+            const data = await client.get(`/sites/${siteId}/switching/switch-stacks${query}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("unifi_get_switch_stack", {
+        description: "Get details of a specific Switch Stack",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            switchStackId: zod_1.z.string().describe("Switch Stack ID"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, switchStackId }) => {
+        try {
+            const data = await client.get(`/sites/${siteId}/switching/switch-stacks/${switchStackId}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("unifi_list_mc_lag_domains", {
+        description: "List all MC-LAG (Multi-Chassis LAG) Domains at a site",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            offset: zod_1.z
+                .number()
+                .int()
+                .nonnegative()
+                .optional()
+                .describe("Number of records to skip (default: 0)"),
+            limit: zod_1.z
+                .number()
+                .int()
+                .min(1)
+                .max(200)
+                .optional()
+                .describe("Number of records to return (default: 25, max: 200)"),
+            filter: zod_1.z
+                .string()
+                .optional()
+                .describe("Filter expression"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, offset, limit, filter }) => {
+        try {
+            const query = (0, query_js_1.buildQuery)({ offset, limit, filter });
+            const data = await client.get(`/sites/${siteId}/switching/mc-lag-domains${query}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("unifi_get_mc_lag_domain", {
+        description: "Get details of a specific MC-LAG (Multi-Chassis LAG) Domain",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            mcLagDomainId: zod_1.z.string().describe("MC-LAG Domain ID"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, mcLagDomainId }) => {
+        try {
+            const data = await client.get(`/sites/${siteId}/switching/mc-lag-domains/${mcLagDomainId}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("unifi_list_lags", {
+        description: "List all LAGs (Link Aggregation Groups) at a site",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            offset: zod_1.z
+                .number()
+                .int()
+                .nonnegative()
+                .optional()
+                .describe("Number of records to skip (default: 0)"),
+            limit: zod_1.z
+                .number()
+                .int()
+                .min(1)
+                .max(200)
+                .optional()
+                .describe("Number of records to return (default: 25, max: 200)"),
+            filter: zod_1.z
+                .string()
+                .optional()
+                .describe("Filter expression"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, offset, limit, filter }) => {
+        try {
+            const query = (0, query_js_1.buildQuery)({ offset, limit, filter });
+            const data = await client.get(`/sites/${siteId}/switching/lags${query}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("unifi_get_lag", {
+        description: "Get details of a specific LAG (Link Aggregation Group)",
+        inputSchema: {
+            siteId: zod_1.z.string().describe("Site ID"),
+            lagId: zod_1.z.string().describe("LAG ID"),
+        },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ siteId, lagId }) => {
+        try {
+            const data = await client.get(`/sites/${siteId}/switching/lags/${lagId}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+}

package/dist/tools/traffic-matching.js

@@ -64,9 +64,10 @@ function registerTrafficMatchingTools(server, client, readOnly = false) {
             type: zod_1.z
                 .enum(["PORTS", "IPV4_ADDRESSES", "IPV6_ADDRESSES"])
                 .describe("List type"),
-            name: zod_1.z.string().describe("List name"),
+            name: zod_1.z.string().min(1).describe("List name"),
             items: zod_1.z
                 .array(zod_1.z.unknown())
+                .min(1)
                 .describe("List items (ports or IP addresses)"),
             dryRun: zod_1.z
                 .boolean()
@@ -94,8 +95,8 @@ function registerTrafficMatchingTools(server, client, readOnly = false) {
             type: zod_1.z
                 .enum(["PORTS", "IPV4_ADDRESSES", "IPV6_ADDRESSES"])
                 .describe("List type"),
-            name: zod_1.z.string().describe("List name"),
-            items: zod_1.z.array(zod_1.z.unknown()).describe("List items"),
+            name: zod_1.z.string().min(1).describe("List name"),
+            items: zod_1.z.array(zod_1.z.unknown()).min(1).describe("List items"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()

package/dist/tools/wifi.js

@@ -63,24 +63,118 @@ function registerWifiTools(server, client, readOnly = false) {
             siteId: zod_1.z.string().describe("Site ID"),
             name: zod_1.z.string().describe("SSID name"),
             enabled: zod_1.z.boolean().describe("Enable the WiFi network"),
-            type: zod_1.z.enum(["STANDARD"]).describe("WiFi type"),
+            type: zod_1.z.enum(["STANDARD", "IOT_OPTIMIZED"]).describe("WiFi type"),
             broadcastingFrequenciesGHz: zod_1.z
                 .array(zod_1.z.string())
                 .describe("Frequencies: 2.4, 5, 6"),
+            securityConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .describe("Security configuration object"),
+            multicastToUnicastConversionEnabled: zod_1.z
+                .boolean()
+                .describe("Enable multicast to unicast conversion"),
+            clientIsolationEnabled: zod_1.z
+                .boolean()
+                .describe("Enable client isolation"),
+            hideName: zod_1.z.boolean().describe("Hide SSID name"),
+            uapsdEnabled: zod_1.z
+                .boolean()
+                .describe("Enable Unscheduled Automatic Power Save Delivery"),
+            arpProxyEnabled: zod_1.z.boolean().describe("Enable ARP proxy"),
+            bssTransitionEnabled: zod_1.z
+                .boolean()
+                .describe("Enable BSS transition"),
+            advertiseDeviceName: zod_1.z
+                .boolean()
+                .describe("Advertise device name in beacon frames"),
+            network: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Network reference"),
+            broadcastingDeviceFilter: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Custom scope of broadcasting devices"),
+            mdnsProxyConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("mDNS proxy configuration"),
+            multicastFilteringPolicy: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Multicast filtering policy"),
+            basicDataRateKbpsByFrequencyGHz: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Basic data rate in kbps by frequency"),
+            clientFilteringPolicy: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Client MAC address filtering policy"),
+            blackoutScheduleConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Blackout schedule configuration"),
+            hotspotConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Hotspot configuration"),
+            mloEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable MLO (Multi-Link Operation)"),
+            bandSteeringEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable band steering"),
+            dtimPeriodByFrequencyGHzOverride: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("DTIM period override by frequency"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE_NOT_IDEMPOTENT,
-    }, async ({ siteId, name, enabled, type, broadcastingFrequenciesGHz, dryRun, }) => {
+    }, async ({ siteId, name, enabled, type, broadcastingFrequenciesGHz, securityConfiguration, multicastToUnicastConversionEnabled, clientIsolationEnabled, hideName, uapsdEnabled, arpProxyEnabled, bssTransitionEnabled, advertiseDeviceName, network, broadcastingDeviceFilter, mdnsProxyConfiguration, multicastFilteringPolicy, basicDataRateKbpsByFrequencyGHz, clientFilteringPolicy, blackoutScheduleConfiguration, hotspotConfiguration, mloEnabled, bandSteeringEnabled, dtimPeriodByFrequencyGHzOverride, dryRun, }) => {
         try {
             const body = {
                 name,
                 enabled,
                 type,
                 broadcastingFrequenciesGHz: broadcastingFrequenciesGHz.map(Number),
+                securityConfiguration,
+                multicastToUnicastConversionEnabled,
+                clientIsolationEnabled,
+                hideName,
+                uapsdEnabled,
+                arpProxyEnabled,
+                bssTransitionEnabled,
+                advertiseDeviceName,
             };
+            if (network !== undefined)
+                body.network = network;
+            if (broadcastingDeviceFilter !== undefined)
+                body.broadcastingDeviceFilter = broadcastingDeviceFilter;
+            if (mdnsProxyConfiguration !== undefined)
+                body.mdnsProxyConfiguration = mdnsProxyConfiguration;
+            if (multicastFilteringPolicy !== undefined)
+                body.multicastFilteringPolicy = multicastFilteringPolicy;
+            if (basicDataRateKbpsByFrequencyGHz !== undefined)
+                body.basicDataRateKbpsByFrequencyGHz = basicDataRateKbpsByFrequencyGHz;
+            if (clientFilteringPolicy !== undefined)
+                body.clientFilteringPolicy = clientFilteringPolicy;
+            if (blackoutScheduleConfiguration !== undefined)
+                body.blackoutScheduleConfiguration = blackoutScheduleConfiguration;
+            if (hotspotConfiguration !== undefined)
+                body.hotspotConfiguration = hotspotConfiguration;
+            if (mloEnabled !== undefined)
+                body.mloEnabled = mloEnabled;
+            if (bandSteeringEnabled !== undefined)
+                body.bandSteeringEnabled = bandSteeringEnabled;
+            if (dtimPeriodByFrequencyGHzOverride !== undefined)
+                body.dtimPeriodByFrequencyGHzOverride = dtimPeriodByFrequencyGHzOverride;
             if (dryRun)
                 return (0, safety_js_1.formatDryRun)("POST", `/sites/${siteId}/wifi/broadcasts`, body);
             const data = await client.post(`/sites/${siteId}/wifi/broadcasts`, body);
@@ -97,19 +191,143 @@ function registerWifiTools(server, client, readOnly = false) {
             wifiBroadcastId: zod_1.z.string().describe("WiFi Broadcast ID"),
             name: zod_1.z.string().optional().describe("SSID name"),
             enabled: zod_1.z.boolean().optional().describe("Enable the WiFi network"),
+            type: zod_1.z
+                .enum(["STANDARD", "IOT_OPTIMIZED"])
+                .optional()
+                .describe("WiFi type"),
+            broadcastingFrequenciesGHz: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Frequencies: 2.4, 5, 6"),
+            securityConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Security configuration object"),
+            multicastToUnicastConversionEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable multicast to unicast conversion"),
+            clientIsolationEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable client isolation"),
+            hideName: zod_1.z.boolean().optional().describe("Hide SSID name"),
+            uapsdEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable Unscheduled Automatic Power Save Delivery"),
+            arpProxyEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable ARP proxy"),
+            bssTransitionEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable BSS transition"),
+            advertiseDeviceName: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Advertise device name in beacon frames"),
+            network: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Network reference"),
+            broadcastingDeviceFilter: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Custom scope of broadcasting devices"),
+            mdnsProxyConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("mDNS proxy configuration"),
+            multicastFilteringPolicy: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Multicast filtering policy"),
+            basicDataRateKbpsByFrequencyGHz: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Basic data rate in kbps by frequency"),
+            clientFilteringPolicy: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Client MAC address filtering policy"),
+            blackoutScheduleConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Blackout schedule configuration"),
+            hotspotConfiguration: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("Hotspot configuration"),
+            mloEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable MLO (Multi-Link Operation)"),
+            bandSteeringEnabled: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Enable band steering"),
+            dtimPeriodByFrequencyGHzOverride: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .optional()
+                .describe("DTIM period override by frequency"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("Preview this action without executing it"),
         },
         annotations: safety_js_1.WRITE,
-    }, async ({ siteId, wifiBroadcastId, name, enabled, dryRun }) => {
+    }, async ({ siteId, wifiBroadcastId, name, enabled, type, broadcastingFrequenciesGHz, securityConfiguration, multicastToUnicastConversionEnabled, clientIsolationEnabled, hideName, uapsdEnabled, arpProxyEnabled, bssTransitionEnabled, advertiseDeviceName, network, broadcastingDeviceFilter, mdnsProxyConfiguration, multicastFilteringPolicy, basicDataRateKbpsByFrequencyGHz, clientFilteringPolicy, blackoutScheduleConfiguration, hotspotConfiguration, mloEnabled, bandSteeringEnabled, dtimPeriodByFrequencyGHzOverride, dryRun, }) => {
         try {
             const body = {};
             if (name !== undefined)
                 body.name = name;
             if (enabled !== undefined)
                 body.enabled = enabled;
+            if (type !== undefined)
+                body.type = type;
+            if (broadcastingFrequenciesGHz !== undefined)
+                body.broadcastingFrequenciesGHz = broadcastingFrequenciesGHz.map(Number);
+            if (securityConfiguration !== undefined)
+                body.securityConfiguration = securityConfiguration;
+            if (multicastToUnicastConversionEnabled !== undefined)
+                body.multicastToUnicastConversionEnabled =
+                    multicastToUnicastConversionEnabled;
+            if (clientIsolationEnabled !== undefined)
+                body.clientIsolationEnabled = clientIsolationEnabled;
+            if (hideName !== undefined)
+                body.hideName = hideName;
+            if (uapsdEnabled !== undefined)
+                body.uapsdEnabled = uapsdEnabled;
+            if (arpProxyEnabled !== undefined)
+                body.arpProxyEnabled = arpProxyEnabled;
+            if (bssTransitionEnabled !== undefined)
+                body.bssTransitionEnabled = bssTransitionEnabled;
+            if (advertiseDeviceName !== undefined)
+                body.advertiseDeviceName = advertiseDeviceName;
+            if (network !== undefined)
+                body.network = network;
+            if (broadcastingDeviceFilter !== undefined)
+                body.broadcastingDeviceFilter = broadcastingDeviceFilter;
+            if (mdnsProxyConfiguration !== undefined)
+                body.mdnsProxyConfiguration = mdnsProxyConfiguration;
+            if (multicastFilteringPolicy !== undefined)
+                body.multicastFilteringPolicy = multicastFilteringPolicy;
+            if (basicDataRateKbpsByFrequencyGHz !== undefined)
+                body.basicDataRateKbpsByFrequencyGHz = basicDataRateKbpsByFrequencyGHz;
+            if (clientFilteringPolicy !== undefined)
+                body.clientFilteringPolicy = clientFilteringPolicy;
+            if (blackoutScheduleConfiguration !== undefined)
+                body.blackoutScheduleConfiguration = blackoutScheduleConfiguration;
+            if (hotspotConfiguration !== undefined)
+                body.hotspotConfiguration = hotspotConfiguration;
+            if (mloEnabled !== undefined)
+                body.mloEnabled = mloEnabled;
+            if (bandSteeringEnabled !== undefined)
+                body.bandSteeringEnabled = bandSteeringEnabled;
+            if (dtimPeriodByFrequencyGHzOverride !== undefined)
+                body.dtimPeriodByFrequencyGHzOverride = dtimPeriodByFrequencyGHzOverride;
             if (dryRun)
                 return (0, safety_js_1.formatDryRun)("PUT", `/sites/${siteId}/wifi/broadcasts/${wifiBroadcastId}`, body);
             const data = await client.put(`/sites/${siteId}/wifi/broadcasts/${wifiBroadcastId}`, body);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owine/unifi-network-mcp",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "MCP server for the UniFi Network API",
   "main": "dist/index.js",
   "bin": {
@@ -42,10 +42,10 @@
   "devDependencies": {
     "@eslint/js": "10.0.1",
     "@types/node": "24.12.0",
-    "@vitest/coverage-v8": "4.0.18",
-    "eslint": "10.0.3",
+    "@vitest/coverage-v8": "4.1.2",
+    "eslint": "10.1.0",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.56.1",
-    "vitest": "4.0.18"
+    "typescript-eslint": "8.57.2",
+    "vitest": "4.1.2"
   }
 }