@owine/unifi-network-mcp 2.11.4 → 2.13.0

package/README.md

@@ -81,7 +81,7 @@ This server provides layered safety controls for responsible operation:
 
 58 of the 74 tools (all 41 read tools, plus the 17 write tools whose API responses return the affected resource) declare an MCP `outputSchema` and return `structuredContent` alongside the usual text content. Clients that understand structured output get typed, machine-readable results instead of parsing JSON out of a text blob.
 
-The schemas live in `src/utils/output-schemas.ts` and are verified against UniFi Network API 10.5.43. They deliberately use a **loose strategy**: every non-key field is optional and nested objects use `.passthrough()`, so firmware- and hardware-specific fields flow through unchanged rather than being stripped or triggering a validation error. This keeps the contract stable across console versions and hardware models.
+The schemas live in `src/utils/output-schemas.ts` and are verified against UniFi Network API 10.6.106. They deliberately use a **loose strategy**: every non-key field is optional and nested objects use `.passthrough()`, so firmware- and hardware-specific fields flow through unchanged rather than being stripped or triggering a validation error. This keeps the contract stable across console versions and hardware models.
 
 ## Tools (74 total)
 

package/dist/tools/acl.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerAclTools(server, client, readOnly = false) {
     server.registerTool("unifi_list_acl_rules", {
-        description: "List ACL rules (switch/AP-level access control lists, distinct from zone-based firewall policies) at a site. Returns: id, type (IPV4/MAC), name, enabled, action (ALLOW/BLOCK), description, protocolFilter, source/destination matchers. ACLs apply earlier in the path than firewall policies.",
+        description: "List ACL rules (switch/AP-level access control lists, distinct from zone-based firewall policies) at a site. Returns: id, type (IPV4/MAC), name, enabled, action (ALLOW/BLOCK), description, protocolFilter, sourceFilter/destinationFilter matchers, enforcingDeviceFilter (which devices apply the rule), index (evaluation order — read-only; change it with unifi_reorder_acl_rules), metadata.origin. ACLs apply earlier in the path than firewall policies.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerAclTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),

package/dist/tools/clients.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerClientTools(server, client, readOnly = false) {
     server.registerTool("unifi_list_clients", {
-        description: "List currently connected clients at a site. Returns per client: id, name, type (WIRED/WIRELESS/VPN/TELEPORT), macAddress, ipAddress, connectedAt, uplinkDeviceId (the switch/AP they're attached to), access.type. NOTE: verified against 10.5.43 — the Integration API client schema is minimal and identical across types; it does NOT expose signal strength, channel, or per-port binding. Use for: who's online right now. Disconnected/historical clients are NOT in the Integration API.",
+        description: "List currently connected clients at a site. Returns per client: id, name, type (WIRED/WIRELESS/VPN/TELEPORT), macAddress, ipAddress (frequently absent — do not rely on it being present), connectedAt, uplinkDeviceId (the switch/AP they're attached to), access.type. NOTE: verified against 10.6.106 — the Integration API client schema is minimal and identical across types; it does NOT expose signal strength, channel, or per-port binding. Use for: who's online right now. Disconnected/historical clients are NOT in the Integration API.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerClientTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -58,7 +58,7 @@ function registerClientTools(server, client, readOnly = false) {
     if (readOnly)
         return;
     server.registerTool("unifi_authorize_guest", {
-        description: "Authorize a guest client through a captive-portal hotspot. Optional limits override hotspot defaults. Idempotency: not safe to retry — re-authorizing extends the session.",
+        description: "Authorize a guest client through a captive-portal hotspot. Optional limits override hotspot defaults. Returns (per 10.6.106 docs, not live-verified): action, grantedAuthorization and revokedAuthorization objects (authorizedAt, authorizationMethod, expiresAt, dataUsageLimitMBytes, rxRateLimitKbps, txRateLimitKbps, usage). Idempotency: not safe to retry — re-authorizing extends the session.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             clientId: zod_1.z.string().describe("Client ID"),
@@ -116,7 +116,7 @@ function registerClientTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_unauthorize_guest", {
-        description: "Revoke guest authorization; the client returns to the captive portal on next request. Idempotent.",
+        description: "Revoke guest authorization; the client returns to the captive portal on next request. Returns (per 10.6.106 docs, not live-verified): action plus a revokedAuthorization object. Idempotent.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             clientId: zod_1.z.string().describe("Client ID"),

package/dist/tools/devices.js

@@ -22,7 +22,7 @@ function registerDeviceTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -41,7 +41,7 @@ function registerDeviceTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_get_device", {
-        description: "Get full configuration for a device. Returns (in addition to list fields): supported, firmwareUpdatable, provisionedAt, configurationId, uplink.deviceId, features (object keyed by capability: switching {lags[]} / accessPoint {}), interfaces.ports[] for switches ({idx, state, connector, maxSpeedMbps, speedMbps, poe:{standard, type, enabled, state}}), interfaces.radios[] for APs ({wlanStandard, frequencyGHz, channelWidthMHz, channel}). NOTE: in the LIST endpoint, features/interfaces are capability-tag string arrays instead. Use for: switch port layout/PoE state, AP radio config, uplink topology. For live throughput/CPU/memory, use unifi_get_device_statistics.",
+        description: "Get full configuration for a device. Returns (in addition to list fields): supported, firmwareUpdatable, adoptedAt, provisionedAt, configurationId, uplink.deviceId, features (object keyed by capability: switching {lags[]} / accessPoint {}), interfaces.ports[] for switches ({idx, state, connector, maxSpeedMbps, speedMbps, poe:{standard, type, enabled, state}}), interfaces.radios[] for APs ({wlanStandard, frequencyGHz, channelWidthMHz, channel}). NOTE: in the LIST endpoint, features/interfaces are capability-tag string arrays instead. Use for: switch port layout/PoE state, AP radio config, uplink topology. For live throughput/CPU/memory, use unifi_get_device_statistics.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             deviceId: zod_1.z.string().describe("Device ID"),
@@ -58,7 +58,7 @@ function registerDeviceTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_get_device_statistics", {
-        description: "Get latest live statistics for a device. Returns: uptimeSec, lastHeartbeatAt, nextHeartbeatAt, loadAverage1/5/15Min, cpuUtilizationPct, memoryUtilizationPct, uplink (txRateBps, rxRateBps), interfaces.radios[] for APs ({frequencyGHz, txRetriesPct}). NOTE: verified against 10.5.43 — the Integration API does NOT expose per-switch-port byte/error/PoE-power counters here; port-level live stats are unavailable. Use for: device health and AP radio metrics. For config (channel, power, port assignment), use unifi_get_device.",
+        description: "Get latest live statistics for a device. Returns: uptimeSec, lastHeartbeatAt, nextHeartbeatAt, loadAverage1/5/15Min, cpuUtilizationPct, memoryUtilizationPct, uplink (txRateBps, rxRateBps), interfaces.radios[] for APs ({frequencyGHz, txRetriesPct}). NOTE: verified against 10.6.106 — the Integration API does NOT expose per-switch-port byte/error/PoE-power counters here; port-level live stats are unavailable. Use for: device health and AP radio metrics. For config (channel, power, port assignment), use unifi_get_device.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             deviceId: zod_1.z.string().describe("Device ID"),
@@ -75,7 +75,7 @@ function registerDeviceTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_list_pending_devices", {
-        description: "List devices pending adoption across all sites (global endpoint, not site-scoped). Returns: basic device info per pending device (macAddress, model, ipAddress, firmwareVersion, etc. — exact per-row schema is not rendered in the 10.5.43 docs). Use for: discovering new devices on the network before calling unifi_adopt_device.",
+        description: "List devices pending adoption across all sites (global endpoint, not site-scoped). Returns: basic device info per pending device (macAddress, model, ipAddress, firmwareVersion, etc. — exact per-row schema is not rendered in the 10.6.106 docs). Use for: discovering new devices on the network before calling unifi_adopt_device.",
         inputSchema: {
             offset: zod_1.z
                 .number()
@@ -86,7 +86,7 @@ function registerDeviceTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -111,7 +111,9 @@ function registerDeviceTools(server, client, readOnly = false) {
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             macAddress: zod_1.z.string().describe("MAC address of the device"),
-            ignoreDeviceLimit: zod_1.z.boolean().optional().describe("Ignore device limit when adopting (default: false)"),
+            // Required by the API; kept optional here and defaulted to false below
+            // so callers need not pass it explicitly.
+            ignoreDeviceLimit: zod_1.z.boolean().optional().describe("Ignore device limit when adopting (required by the API; sent as false when omitted)"),
             dryRun: zod_1.z.boolean().optional().describe("Preview this action without executing it"),
         },
         outputSchema: adoptDeviceOutputSchema,

package/dist/tools/dns-policies.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerDnsPolicyTools(server, client, readOnly = false) {
     server.registerTool("unifi_list_dns_policies", {
-        description: "List DNS policies (local DNS records and forward rules served by the gateway) at a site. Returns: id, type (A_RECORD, AAAA_RECORD, CNAME_RECORD, MX_RECORD, TXT_RECORD, SRV_RECORD, FORWARD_DOMAIN), enabled, domain, ipv4Address, ttlSeconds.",
+        description: "List DNS policies (local DNS records and forward rules served by the gateway) at a site. Returns: id, type (A_RECORD, AAAA_RECORD, CNAME_RECORD, MX_RECORD, TXT_RECORD, SRV_RECORD, FORWARD_DOMAIN), enabled, domain, ipv4Address, ttlSeconds, metadata.origin.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerDnsPolicyTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),

package/dist/tools/firewall.js

@@ -20,7 +20,7 @@ function registerFirewallTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -71,7 +71,7 @@ function registerFirewallTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -270,7 +270,7 @@ function registerFirewallTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_patch_firewall_policy", {
-        description: "Partially update a firewall policy without resending all fields. Common use: toggle loggingEnabled or enabled. Idempotent for fields supplied.",
+        description: "Partially update a firewall policy without resending all fields. loggingEnabled is the only field documented as patchable in API 10.6.106; other fields may be rejected — use unifi_update_firewall_policy for a full update. Idempotent for fields supplied.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             firewallPolicyId: zod_1.z.string().describe("Firewall policy ID"),

package/dist/tools/hotspot.js

@@ -21,7 +21,7 @@ function registerHotspotTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(1000)
                 .optional()
                 .default(100)
@@ -143,7 +143,7 @@ function registerHotspotTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_delete_voucher", {
-        description: "DESTRUCTIVE: Delete a hotspot voucher",
+        description: "DESTRUCTIVE: Delete a hotspot voucher. Returns: vouchersDeleted (count of vouchers removed).",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             voucherId: zod_1.z.string().describe("Voucher ID"),
@@ -173,12 +173,12 @@ function registerHotspotTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_bulk_delete_vouchers", {
-        description: "DESTRUCTIVE: Bulk delete hotspot vouchers based on filter criteria",
+        description: "DESTRUCTIVE: Bulk delete hotspot vouchers based on filter criteria. Returns: vouchersDeleted (count of vouchers removed).",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             filter: zod_1.z
                 .string()
-                .describe("Required filter expression (e.g., 'expired.eq(true)', 'name.like(guest*)')"),
+                .describe("Required filter expression (e.g., 'expired.eq(true)', name.like('guest*'))"),
             confirm: zod_1.z
                 .boolean()
                 .optional()

package/dist/tools/networks.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerNetworkTools(server, client, readOnly = false) {
     server.registerTool("unifi_list_networks", {
-        description: "List all networks (VLANs/LAN segments) at a site. Returns: id, name, management (UNMANAGED/GATEWAY/SWITCH), enabled, vlanId, default (true for the default network), dhcpGuarding, metadata.origin. NOTE: the list view is sparse — for subnet/DHCP/NTP detail (ipv4Configuration), call unifi_get_network on a specific id. Use for: VLAN inventory; pair with unifi_get_network_references to find what consumes a network.",
+        description: "List all networks (VLANs/LAN segments) at a site. Returns: id, name, management (UNMANAGED/GATEWAY/SWITCH), enabled, vlanId, default (true for the default network), zoneId (the firewall zone the network sits in), dhcpGuarding, metadata.origin. NOTE: the list view is sparse — for subnet/DHCP/NTP detail (ipv4Configuration/ipv6Configuration), call unifi_get_network on a specific id. Use for: VLAN inventory; pair with unifi_get_network_references to find what consumes a network.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerNetworkTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -42,7 +42,7 @@ function registerNetworkTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_get_network", {
-        description: "Get a network/VLAN by ID. Returns the list fields PLUS (live-verified) zoneId, isolationEnabled, internetAccessEnabled, mdnsForwardingEnabled, cellularBackupEnabled, and a full ipv4Configuration object (hostIpAddress, prefixLength, dhcpConfiguration with ipAddressRange/leaseTimeSeconds/domainName/ntpServerIpAddresses). NOTE: subnet/DHCP detail appears here at get-by-id but NOT in unifi_list_networks (sparse list view).",
+        description: "Get a network/VLAN by ID. Returns the list fields PLUS (live-verified) isolationEnabled, internetAccessEnabled, mdnsForwardingEnabled, cellularBackupEnabled, a full ipv4Configuration object (autoScaleEnabled, hostIpAddress, prefixLength, dhcpConfiguration with mode/ipAddressRange/leaseTimeSeconds/domainName/pingConflictDetectionEnabled/ntpServerIpAddresses), and an ipv6Configuration object (interfaceType, clientAddressAssignment, routerAdvertisement, hostIpAddress, prefixLength). NOTE: subnet/DHCP detail appears here at get-by-id but NOT in unifi_list_networks (sparse list view).",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             networkId: zod_1.z.string().describe("Network ID"),

package/dist/tools/sites.js

@@ -19,14 +19,14 @@ function registerSiteTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
             filter: zod_1.z
                 .string()
                 .optional()
-                .describe("Filter expression (e.g., 'name.like(office*)')"),
+                .describe("Filter expression (e.g., name.like('office*'))"),
         },
         outputSchema: output_schemas_js_1.listSitesOutputSchema,
         annotations: safety_js_1.READ_ONLY,

package/dist/tools/supporting.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerSupportingTools(server, client) {
     server.registerTool("unifi_list_wans", {
-        description: "List WAN interface definitions at a site. Returns: id, name only (verified against 10.5.43 — the Integration API exposes no live link status or throughput rates here). Use for: WAN inventory, multi-WAN topology.",
+        description: "List WAN interface definitions at a site. Returns: id, name only (verified against 10.6.106 — the Integration API exposes no live link status or throughput rates here). Use for: WAN inventory, multi-WAN topology.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -38,7 +38,7 @@ function registerSupportingTools(server, client) {
         }
     });
     server.registerTool("unifi_list_vpn_tunnels", {
-        description: "List site-to-site VPN tunnels (IPsec, WireGuard, OpenVPN site-to-site) at a site. Returns: tunnel definitions per row (per-row schema not rendered in 10.5.43 docs — call to inspect). For roaming client VPN servers, see unifi_list_vpn_servers.",
+        description: "List site-to-site VPN tunnels (IPsec, WireGuard, OpenVPN site-to-site) at a site. Returns: tunnel definitions per row (per-row schema not rendered in 10.6.106 docs — call to inspect). For roaming client VPN servers, see unifi_list_vpn_servers.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -50,7 +50,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -84,7 +84,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -118,7 +118,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -152,7 +152,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -185,7 +185,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -218,7 +218,7 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -251,14 +251,14 @@ function registerSupportingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
             filter: zod_1.z
                 .string()
                 .optional()
-                .describe("Filter expression (e.g., 'name.like(United*)')"),
+                .describe("Filter expression (e.g., name.like('United*'))"),
         },
         outputSchema: output_schemas_js_1.listCountriesOutputSchema,
         annotations: safety_js_1.READ_ONLY,

package/dist/tools/switching.js

@@ -8,7 +8,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerSwitchingTools(server, client) {
     server.registerTool("unifi_list_switch_stacks", {
-        description: "List Switch Stacks (multiple physical switches managed as one logical unit) at a site. Returns: id, name, members[], lags[] (LAGs spanning the stack), metadata.origin. Use for: identifying stacked switches; individual member configs/stats still come from unifi_get_device.",
+        description: "List Switch Stacks (multiple physical switches managed as one logical unit) at a site. Returns: id, deviceId (the stack's primary device), name, units[] (the stacked switches — named `members` on consoles older than 10.6.106), lags[] (LAGs spanning the stack), metadata.origin. Per-unit schema is not rendered in the 10.6.106 docs — call unifi_get_switch_stack to inspect. Use for: identifying stacked switches; individual member configs/stats still come from unifi_get_device.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             offset: zod_1.z
@@ -20,7 +20,7 @@ function registerSwitchingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -42,7 +42,7 @@ function registerSwitchingTools(server, client) {
         }
     });
     server.registerTool("unifi_get_switch_stack", {
-        description: "Get full details of a Switch Stack including all members and stacking topology. Returns the same fields as the list response but for a single stack.",
+        description: "Get full details of a Switch Stack including all units and stacking topology. Returns the same fields as the list response but for a single stack: id, deviceId, name, units[] (named `members` before 10.6.106), lags[], metadata.origin.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             switchStackId: zod_1.z.string().describe("Switch Stack ID"),
@@ -71,7 +71,7 @@ function registerSwitchingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -122,7 +122,7 @@ function registerSwitchingTools(server, client) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),

package/dist/tools/system.js

@@ -6,7 +6,7 @@ const safety_js_1 = require("../utils/safety.js");
 const output_schemas_js_1 = require("../utils/output-schemas.js");
 function registerSystemTools(server, client) {
     server.registerTool("unifi_get_info", {
-        description: "Get UniFi Network application info. Returns: applicationVersion. NOTE: verified against 10.5.43 on a UniFi OS console — the Integration API returns ONLY applicationVersion here; there is no isUniFiOSConsole or other field. Use for: version checks before calling version-gated tools.",
+        description: "Get UniFi Network application info. Returns: applicationVersion. NOTE: verified against 10.6.106 on a UniFi OS console — the Integration API returns ONLY applicationVersion here; there is no isUniFiOSConsole or other field. Use for: version checks before calling version-gated tools.",
         inputSchema: {},
         outputSchema: output_schemas_js_1.getInfoOutputSchema,
         annotations: safety_js_1.READ_ONLY,

package/dist/tools/traffic-matching.js

@@ -20,7 +20,7 @@ function registerTrafficMatchingTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),

package/dist/tools/wifi.js

@@ -20,7 +20,7 @@ function registerWifiTools(server, client, readOnly = false) {
             limit: zod_1.z
                 .number()
                 .int()
-                .min(1)
+                .min(0)
                 .max(200)
                 .optional()
                 .describe("Number of records to return (default: 25, max: 200)"),
@@ -68,8 +68,8 @@ function registerWifiTools(server, client, readOnly = false) {
             enabled: zod_1.z.boolean().describe("Enable the WiFi network"),
             type: zod_1.z.enum(["STANDARD", "IOT_OPTIMIZED"]).describe("WiFi type"),
             broadcastingFrequenciesGHz: zod_1.z
-                .array(zod_1.z.string())
-                .describe("Frequencies: 2.4, 5, 6"),
+                .array(zod_1.z.enum(["2.4", "5", "6"]))
+                .describe("Frequencies to broadcast on. Accepted as strings and sent to the API as numbers (2.4, 5, 6)."),
             securityConfiguration: zod_1.z
                 .record(zod_1.z.string(), zod_1.z.unknown())
                 .describe("Security configuration object"),
@@ -209,7 +209,7 @@ function registerWifiTools(server, client, readOnly = false) {
         }
     });
     server.registerTool("unifi_update_wifi", {
-        description: "Update an existing WiFi network",
+        description: "Update an existing WiFi network. NOTE: this is a full PUT — API 10.6.106 documents 14 of these fields as required (type, name, enabled, securityConfiguration, multicastToUnicastConversionEnabled, clientIsolationEnabled, hideName, uapsdEnabled, channel2gLockedTo6, dtimPeriod2gLockedTo3, broadcastingFrequenciesGHz, arpProxyEnabled, bssTransitionEnabled, advertiseDeviceName). They are optional here for convenience, but a sparse update may be rejected by the API — read the current values with unifi_get_wifi and resend the full set if you get a 400.",
         inputSchema: {
             siteId: zod_1.z.string().describe("Site ID"),
             wifiBroadcastId: zod_1.z.string().describe("WiFi Broadcast ID"),
@@ -220,9 +220,9 @@ function registerWifiTools(server, client, readOnly = false) {
                 .optional()
                 .describe("WiFi type"),
             broadcastingFrequenciesGHz: zod_1.z
-                .array(zod_1.z.string())
+                .array(zod_1.z.enum(["2.4", "5", "6"]))
                 .optional()
-                .describe("Frequencies: 2.4, 5, 6"),
+                .describe("Frequencies to broadcast on. Accepted as strings and sent to the API as numbers (2.4, 5, 6)."),
             securityConfiguration: zod_1.z
                 .record(zod_1.z.string(), zod_1.z.unknown())
                 .optional()

package/dist/utils/output-schemas.d.ts

@@ -3,7 +3,7 @@
  * field optional, every nested object uses .passthrough() to allow
  * firmware/hardware-specific fields to flow through unchanged).
  *
- * Verified against UniFi Network API 10.5.43. Where the docs collapse
+ * Verified against UniFi Network API 10.6.106. Where the docs collapse
  * nested arrays/objects (e.g. interfaces.ports[], radios[]), the schema
  * uses passthrough records so the contract doesn't lock to fields we
  * haven't verified.
@@ -37,6 +37,7 @@ export declare const networkOutputSchema: {
     cellularBackupEnabled: z.ZodOptional<z.ZodBoolean>;
     dhcpGuarding: z.ZodOptional<z.ZodUnknown>;
     ipv4Configuration: z.ZodOptional<z.ZodUnknown>;
+    ipv6Configuration: z.ZodOptional<z.ZodUnknown>;
     metadata: z.ZodOptional<z.ZodObject<{
         origin: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>>;
@@ -60,6 +61,7 @@ export declare const listNetworksOutputSchema: {
         cellularBackupEnabled: z.ZodOptional<z.ZodBoolean>;
         dhcpGuarding: z.ZodOptional<z.ZodUnknown>;
         ipv4Configuration: z.ZodOptional<z.ZodUnknown>;
+        ipv6Configuration: z.ZodOptional<z.ZodUnknown>;
         metadata: z.ZodOptional<z.ZodObject<{
             origin: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>>;
@@ -202,6 +204,7 @@ export declare const aclRuleOutputSchema: {
     sourceFilter: z.ZodOptional<z.ZodUnknown>;
     destinationFilter: z.ZodOptional<z.ZodUnknown>;
     enforcingDeviceFilter: z.ZodOptional<z.ZodUnknown>;
+    index: z.ZodOptional<z.ZodNumber>;
     metadata: z.ZodOptional<z.ZodObject<{
         origin: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>>;
@@ -222,6 +225,7 @@ export declare const listAclRulesOutputSchema: {
         sourceFilter: z.ZodOptional<z.ZodUnknown>;
         destinationFilter: z.ZodOptional<z.ZodUnknown>;
         enforcingDeviceFilter: z.ZodOptional<z.ZodUnknown>;
+        index: z.ZodOptional<z.ZodNumber>;
         metadata: z.ZodOptional<z.ZodObject<{
             origin: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>>;
@@ -233,6 +237,8 @@ export declare const aclRuleOrderingOutputSchema: {
 export declare const switchStackOutputSchema: {
     id: z.ZodString;
     name: z.ZodOptional<z.ZodString>;
+    deviceId: z.ZodOptional<z.ZodString>;
+    units: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     members: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     lags: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     metadata: z.ZodOptional<z.ZodObject<{
@@ -247,6 +253,8 @@ export declare const listSwitchStacksOutputSchema: {
     readonly data: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodOptional<z.ZodString>;
+        deviceId: z.ZodOptional<z.ZodString>;
+        units: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
         members: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
         lags: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
         metadata: z.ZodOptional<z.ZodObject<{

package/dist/utils/output-schemas.js

@@ -6,7 +6,7 @@ exports.listPendingDevicesOutputSchema = exports.listCountriesOutputSchema = exp
  * field optional, every nested object uses .passthrough() to allow
  * firmware/hardware-specific fields to flow through unchanged).
  *
- * Verified against UniFi Network API 10.5.43. Where the docs collapse
+ * Verified against UniFi Network API 10.6.106. Where the docs collapse
  * nested arrays/objects (e.g. interfaces.ports[], radios[]), the schema
  * uses passthrough records so the contract doesn't lock to fields we
  * haven't verified.
@@ -160,7 +160,7 @@ const WifiBroadcast = zod_1.z
     .passthrough();
 const ApplicationInfo = zod_1.z
     .object({
-    // Live-verified (10.5.43): only applicationVersion is returned.
+    // Live-verified (10.6.106): only applicationVersion is returned.
     applicationVersion: zod_1.z.string().optional(),
 })
     .passthrough();
@@ -185,8 +185,9 @@ const Network = zod_1.z
     mdnsForwardingEnabled: zod_1.z.boolean().optional(),
     cellularBackupEnabled: zod_1.z.boolean().optional(),
     dhcpGuarding: zod_1.z.unknown().optional(),
-    // get-by-id only (absent in list view); nested shape left loose.
+    // get-by-id only (absent in list view); nested shapes left loose.
     ipv4Configuration: zod_1.z.unknown().optional(),
+    ipv6Configuration: zod_1.z.unknown().optional(),
     metadata: Metadata.optional(),
 })
     .passthrough();
@@ -263,6 +264,9 @@ const AclRule = zod_1.z
     sourceFilter: zod_1.z.unknown().optional(),
     destinationFilter: zod_1.z.unknown().optional(),
     enforcingDeviceFilter: zod_1.z.unknown().optional(),
+    // Read-only in the response. Deprecated as a *request* field — ordering
+    // is set via the dedicated reorder endpoint, so no write tool accepts it.
+    index: zod_1.z.number().int().optional(),
     metadata: Metadata.optional(),
 })
     .passthrough();
@@ -275,6 +279,12 @@ const SwitchStack = zod_1.z
     .object({
     id: zod_1.z.string(),
     name: zod_1.z.string().optional(),
+    // The stack's primary device. Added in 10.6.106.
+    deviceId: zod_1.z.string().optional(),
+    // Renamed from `members` in 10.6.106 (was `members` through 10.4.57).
+    // `members` stays declared so responses from older consoles still
+    // describe themselves; both are optional, so either shape validates.
+    units: zod_1.z.array(zod_1.z.unknown()).optional(),
     members: zod_1.z.array(zod_1.z.unknown()).optional(),
     lags: zod_1.z.array(zod_1.z.unknown()).optional(),
     metadata: Metadata.optional(),
@@ -324,7 +334,7 @@ const TrafficMatchingList = zod_1.z
     metadata: Metadata.optional(),
 })
     .passthrough();
-// Verified against the live Integration API (10.5.43). The WAN and
+// Verified against the live Integration API (10.6.106). The WAN and
 // site-to-site-tunnel list rows are intentionally minimal in the API.
 const Wan = zod_1.z
     .object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owine/unifi-network-mcp",
-  "version": "2.11.4",
+  "version": "2.13.0",
   "description": "MCP server for the UniFi Network API",
   "main": "dist/index.js",
   "bin": {
@@ -22,7 +22,7 @@
   "engines": {
     "node": "^22.13.0 || ^24.0.0"
   },
-  "packageManager": "pnpm@11.24.0",
+  "packageManager": "pnpm@12.4.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/owine/unifi-network-mcp.git"
@@ -38,17 +38,17 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
-    "zod": "4.5.4"
+    "zod": "4.6.2"
   },
   "devDependencies": {
     "@eslint/js": "10.0.1",
-    "@types/node": "24.13.3",
+    "@types/node": "24.13.4",
     "@typescript/native": "npm:typescript@7.0.2",
-    "@vitest/coverage-v8": "4.1.11",
-    "eslint": "10.9.1",
+    "@vitest/coverage-v8": "5.0.0",
+    "eslint": "10.10.0",
     "lefthook": "2.1.12",
     "typescript": "npm:@typescript/typescript6@6.0.2",
-    "typescript-eslint": "8.68.0",
-    "vitest": "4.1.11"
+    "typescript-eslint": "8.70.0",
+    "vitest": "5.0.0"
   }
 }