@owine/unifi-protect-mcp 2.14.2 → 2.15.0

package/README.md

@@ -1,6 +1,6 @@
 # UniFi Protect MCP Server
 
-An MCP (Model Context Protocol) server that exposes UniFi Protect's Integration REST API as tools for Claude Code and other MCP clients. Aligned with UniFi Protect API **7.3.47** — 74 tools covering cameras, lights, sensors, chimes, viewers, sirens, fobs, relays, speakers, bridges, link stations, alarm hubs, arm profiles, live views, files, users, point-of-sale events, NVR status, and WebSocket subscriptions.
+An MCP (Model Context Protocol) server that exposes UniFi Protect's Integration REST API as tools for Claude Code and other MCP clients. Aligned with UniFi Protect API **7.3.70** — 74 tools covering cameras, lights, sensors, chimes, viewers, sirens, fobs, relays, speakers, bridges, link stations, alarm hubs, arm profiles, live views, files, users, point-of-sale events, NVR status, and WebSocket subscriptions.
 
 ## Prerequisites
 
@@ -243,8 +243,8 @@ server logs a warning and talks to that host directly.
 | Tool | Description |
 |---|---|
 | `protect_trigger_alarm_webhook` | Trigger an alarm webhook (fires external alarm action) |
-| `protect_list_files` | List files by type |
-| `protect_upload_file` | Upload a file (base64-encoded) |
+| `protect_list_files` | List device asset files (`animations`) |
+| `protect_upload_file` | Upload a device asset file (base64 in, sent as multipart/form-data) |
 
 ### Users (4)
 | Tool | Description |

package/dist/client.d.ts

@@ -14,6 +14,12 @@ export declare class ProtectClient {
         data: Buffer;
         mimeType: string;
     }>;
-    postBinary(path: string, data: Buffer, contentType: string): Promise<unknown>;
+    /**
+     * Upload a file as multipart/form-data (the documented encoding for
+     * POST /files/{fileType}). fetch sets the Content-Type with its boundary, so
+     * none is set here. The part name `file` is not in the published docs but
+     * was verified against a live 7.3.70 console.
+     */
+    postFile(path: string, data: Buffer, contentType: string, fileName: string): Promise<unknown>;
     connectWebSocket(path: string): WebSocket;
 }

package/dist/client.js

@@ -81,6 +81,12 @@ class ProtectClient {
         if (!response.ok) {
             throw new Error(`HTTP ${response.status}: ${await readErrorBody(response, MAX_JSON_BYTES)}`);
         }
+        // 204 No Content (action endpoints: siren/relay/speaker triggers, arm
+        // profile enable/disable, PTZ, …) has no body by definition — don't let a
+        // stray JSON content-type turn a success into an "empty body" error.
+        if (response.status === 204) {
+            return "";
+        }
         enforceSizeLimit(response, MAX_JSON_BYTES);
         const contentType = response.headers.get("content-type") ?? "";
         const text = await response.text();
@@ -122,15 +128,20 @@ class ProtectClient {
         const arrayBuffer = await response.arrayBuffer();
         return { data: Buffer.from(arrayBuffer), mimeType };
     }
-    async postBinary(path, data, contentType) {
+    /**
+     * Upload a file as multipart/form-data (the documented encoding for
+     * POST /files/{fileType}). fetch sets the Content-Type with its boundary, so
+     * none is set here. The part name `file` is not in the published docs but
+     * was verified against a live 7.3.70 console.
+     */
+    async postFile(path, data, contentType, fileName) {
         const url = `${this.baseUrl}${path}`;
+        const form = new FormData();
+        form.append("file", new Blob([new Uint8Array(data)], { type: contentType }), fileName);
         const response = await fetch(url, {
             method: "POST",
-            headers: {
-                "X-API-KEY": this.headers["X-API-KEY"],
-                "Content-Type": contentType,
-            },
-            body: new Uint8Array(data),
+            headers: { "X-API-KEY": this.headers["X-API-KEY"] },
+            body: form,
             redirect: "error",
             signal: AbortSignal.timeout(BINARY_TIMEOUT_MS),
         });

package/dist/schemas/cameras.js

@@ -3,7 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.talkbackSessionOutputSchema = exports.rtspStreamOutputSchema = exports.rtspStreamSchema = exports.cameraListOutputSchema = exports.cameraOutputSchema = exports.cameraSchema = void 0;
 const common_js_1 = require("./common.js");
 /**
- * Verified against live UniFi Protect Integration API 7.3.47 (2026-09-14).
+ * Verified against live UniFi Protect Integration API 7.3.47 (2026-09-14) and
+ * re-verified against live 7.3.70 (2026-10-12).
  * The Integration API camera object is far smaller than the internal Protect
  * app's camera model — no isRecording/lastMotion/channels/firmwareVersion/etc.
  * `list` and `get-by-id` return the same field set (confirmed live).

package/dist/schemas/devices.d.ts

@@ -94,7 +94,6 @@ export declare const fobSchema: import("zod").ZodObject<{
     awayState: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     buttonLabels: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     featureFlags: import("zod").ZodOptional<import("zod").ZodUnknown>;
-    hasKeypad: import("zod").ZodOptional<import("zod").ZodUnknown>;
     armControlSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     keypadSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     wirelessConnectionState: import("zod").ZodOptional<import("zod").ZodUnknown>;
@@ -150,7 +149,6 @@ export declare const linkStationSchema: import("zod").ZodObject<{
     ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
     alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-    deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
 }, import("zod/v4/core").$loose>;
 export declare const alarmHubSchema: import("zod").ZodObject<{
@@ -165,7 +163,6 @@ export declare const alarmHubSchema: import("zod").ZodObject<{
     ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
     alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-    deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
 }, import("zod/v4/core").$loose>;
 export declare const DEVICE_SCHEMAS: {
@@ -265,7 +262,6 @@ export declare const DEVICE_SCHEMAS: {
         awayState: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         buttonLabels: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         featureFlags: import("zod").ZodOptional<import("zod").ZodUnknown>;
-        hasKeypad: import("zod").ZodOptional<import("zod").ZodUnknown>;
         armControlSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         keypadSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         wirelessConnectionState: import("zod").ZodOptional<import("zod").ZodUnknown>;
@@ -321,7 +317,6 @@ export declare const DEVICE_SCHEMAS: {
         ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
         alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-        deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
     }, import("zod/v4/core").$loose>;
     readonly alarm_hub: import("zod").ZodObject<{
@@ -336,7 +331,6 @@ export declare const DEVICE_SCHEMAS: {
         ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
         alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-        deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
     }, import("zod/v4/core").$loose>;
 };
@@ -431,7 +425,6 @@ export declare function itemOutputShape(key: keyof typeof DEVICE_SCHEMAS): {
     awayState: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     buttonLabels: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     featureFlags: import("zod").ZodOptional<import("zod").ZodUnknown>;
-    hasKeypad: import("zod").ZodOptional<import("zod").ZodUnknown>;
     armControlSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     keypadSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     wirelessConnectionState: import("zod").ZodOptional<import("zod").ZodUnknown>;
@@ -483,7 +476,6 @@ export declare function itemOutputShape(key: keyof typeof DEVICE_SCHEMAS): {
     ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
     lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
     alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-    deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
 };
 export declare function listOutputShape(key: keyof typeof DEVICE_SCHEMAS): {
@@ -578,7 +570,6 @@ export declare function listOutputShape(key: keyof typeof DEVICE_SCHEMAS): {
         awayState: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         buttonLabels: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         featureFlags: import("zod").ZodOptional<import("zod").ZodUnknown>;
-        hasKeypad: import("zod").ZodOptional<import("zod").ZodUnknown>;
         armControlSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         keypadSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         wirelessConnectionState: import("zod").ZodOptional<import("zod").ZodUnknown>;
@@ -630,7 +621,6 @@ export declare function listOutputShape(key: keyof typeof DEVICE_SCHEMAS): {
         ledSettings: import("zod").ZodOptional<import("zod").ZodUnknown>;
         lastEvent: import("zod").ZodOptional<import("zod").ZodUnknown>;
         alarmHub: import("zod").ZodOptional<import("zod").ZodUnknown>;
-        deviceTamperStatus: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         threadState: import("zod").ZodOptional<import("zod").ZodUnknown>;
     }, import("zod/v4/core").$loose>>;
 };

package/dist/schemas/devices.js

@@ -7,11 +7,11 @@ const common_js_1 = require("./common.js");
 /**
  * Device schemas for the config-driven Protect device types.
  *
- * Field sets are derived from the UniFi Protect Integration API 7.3.47 docs
+ * Field sets are derived from the UniFi Protect Integration API 7.3.70 docs
  * (per-type response samples). Chimes were additionally verified against live
- * console responses (2026-09-14); the rest have no instances on the available
- * console, so their TOP-LEVEL fields are typed from the published docs while
- * every nested object/array is left as `unknownField()` (z.unknown()) — naming
+ * console responses (7.3.47 on 2026-09-14, 7.3.70 on 2026-10-12); the rest
+ * have no instances on the available console, so their TOP-LEVEL fields are
+ * typed from the published docs while every nested object/array is left as `unknownField()` (z.unknown()) — naming
  * the field for the LLM without risking SDK output-validation failures on a
  * shape we have not observed live. `.passthrough()` lets any extra field flow.
  *
@@ -45,16 +45,16 @@ exports.sensorSchema = (0, common_js_1.passthroughObject)({
     featureFlags: (0, common_js_1.unknownField)("Sensor capability flags, added in 7.3.x (object: temperature, humidity, " +
         "light, motion, waterLeak, open, tamper, smoke — each { channelCount })"),
     batteryStatus: (0, common_js_1.unknownField)("Battery status (object: percentage, isLow)"),
-    stats: (0, common_js_1.unknownField)("Environmental stats (object: light, humidity, temperature)"),
-    lightSettings: (0, common_js_1.unknownField)("Light threshold settings (object)"),
-    humiditySettings: (0, common_js_1.unknownField)("Humidity threshold settings (object)"),
-    temperatureSettings: (0, common_js_1.unknownField)("Temperature threshold settings (object)"),
+    stats: (0, common_js_1.unknownField)("Environmental stats (object: light, humidity, temperature — each { value, status })"),
+    lightSettings: (0, common_js_1.unknownField)("Light threshold settings (object: isEnabled, margin, lowThreshold, highThreshold)"),
+    humiditySettings: (0, common_js_1.unknownField)("Humidity threshold settings (object: isEnabled, margin, lowThreshold, highThreshold)"),
+    temperatureSettings: (0, common_js_1.unknownField)("Temperature threshold settings (object: isEnabled, margin, lowThreshold, highThreshold)"),
     isOpened: (0, common_js_1.unknownField)("Open/close contact state (boolean)"),
     openStatusChangedAt: (0, common_js_1.unknownField)("Open-status change timestamp in epoch ms (number)"),
     isMotionDetected: (0, common_js_1.unknownField)("Motion currently detected (boolean)"),
     motionDetectedAt: (0, common_js_1.unknownField)("Last motion timestamp in epoch ms (number)"),
-    motionSettings: (0, common_js_1.unknownField)("Motion detection settings (object)"),
-    glassBreakSettings: (0, common_js_1.unknownField)("Glass-break detection settings (object)"),
+    motionSettings: (0, common_js_1.unknownField)("Motion detection settings (object: isEnabled, sensitivity, sensitivityWhenArmed)"),
+    glassBreakSettings: (0, common_js_1.unknownField)("Glass-break detection settings (object: isEnabled, sensitivity, sensitivityWhenArmed)"),
     scheduleMode: (0, common_js_1.nullableString)('Schedule mode: "always" | "when_armed"'),
     armProfileIds: (0, common_js_1.unknownField)("Arm profile IDs this sensor belongs to (array of strings)"),
     hasCustomSensitivityWhenArmed: (0, common_js_1.unknownField)("Custom armed sensitivity enabled (boolean)"),
@@ -62,12 +62,13 @@ exports.sensorSchema = (0, common_js_1.passthroughObject)({
     alarmSettings: (0, common_js_1.unknownField)("Alarm settings (object: isEnabled)"),
     leakDetectedAt: (0, common_js_1.unknownField)("Last leak timestamp in epoch ms (number)"),
     externalLeakDetectedAt: (0, common_js_1.unknownField)("Last external-leak timestamp in epoch ms (number)"),
-    leakSettings: (0, common_js_1.unknownField)("Leak detection settings (object)"),
+    leakSettings: (0, common_js_1.unknownField)("Leak detection settings, read-only (object: isInternalEnabled, isExternalEnabled)"),
     tamperingDetectedAt: (0, common_js_1.unknownField)("Last tampering timestamp in epoch ms (number)"),
-    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState, batteryStatus, bridge)"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState { signalQuality, signalStrength }, " +
+        "batteryStatus { percentage, isLow }, bridge)"),
 });
-// Verified live (7.1.83): chimes return cameraIds[] and ringSettings[] whose
-// items are { cameraId, volume, ringtoneId, repeatTimes }.
+// Verified live (7.1.83, re-verified 7.3.70): chimes return cameraIds[] and
+// ringSettings[] whose items are { cameraId, volume, ringtoneId, repeatTimes }.
 exports.chimeSchema = (0, common_js_1.passthroughObject)({
     ...deviceIdentity(),
     cameraIds: (0, common_js_1.unknownField)("Paired camera IDs (array of strings)"),
@@ -84,25 +85,29 @@ exports.sirenSchema = (0, common_js_1.passthroughObject)({
     ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
     sirenStatus: (0, common_js_1.unknownField)("Current siren status (object: isActive, activatedAt, duration)"),
     connectionType: (0, common_js_1.nullableString)('Connection type, e.g. "lora"'),
-    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState { signalQuality, signalStrength }, " +
+        "batteryStatus { percentage, isLow }, bridge)"),
 });
 exports.fobSchema = (0, common_js_1.passthroughObject)({
     ...deviceIdentity(),
     awayState: (0, common_js_1.nullableString)('Away state, e.g. "ONLINE"'),
     buttonLabels: (0, common_js_1.nullableString)('Button label preset, e.g. "securityActions"'),
-    featureFlags: (0, common_js_1.unknownField)("Feature flags (object: buttons[])"),
-    hasKeypad: (0, common_js_1.unknownField)("Whether this fob has a keypad, added in 7.3.x (boolean)"),
+    featureFlags: (0, common_js_1.unknownField)("Feature flags (object: buttons[], hasKeypad — hasKeypad added in 7.3.x)"),
     armControlSettings: (0, common_js_1.unknownField)("Arm-control config, added in 7.3.x (object: enabled, armProfileId, nightProfileId)"),
-    keypadSettings: (0, common_js_1.unknownField)("Keypad config, added in 7.3.x (object: beepEnabled, beepVolume, " +
-        "backlightEnabled, backlightBrightness)"),
-    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+    keypadSettings: (0, common_js_1.unknownField)("Keypad config, added in 7.3.x (object: beepEnabled, beepVolume). The " +
+        "backlightEnabled/backlightBrightness fields were dropped in 7.3.70."),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState { signalQuality, signalStrength }, " +
+        "batteryStatus { percentage, isLow }, bridge)"),
 });
 exports.relaySchema = (0, common_js_1.passthroughObject)({
     ...deviceIdentity(),
     ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
-    outputs: (0, common_js_1.unknownField)("Output channels (array of objects)"),
-    inputs: (0, common_js_1.unknownField)("Input channels (array of objects)"),
-    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+    outputs: (0, common_js_1.unknownField)("Output channels (array of objects: id, name, type, delay, pulseDuration, " +
+        "state, rebootState). `id` is the outputId for protect_activate_relay_output"),
+    inputs: (0, common_js_1.unknownField)("Input channels (array of objects: id, name, state, actionTrigger, " +
+        "actionType, actionOutputId)"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState { signalQuality, signalStrength }, " +
+        "batteryStatus { percentage, isLow }, bridge)"),
 });
 exports.speakerSchema = (0, common_js_1.passthroughObject)({
     ...deviceIdentity(),
@@ -125,8 +130,12 @@ const linkStationLikeSchema = () => (0, common_js_1.passthroughObject)({
     isAlarmHub: (0, common_js_1.unknownField)("Whether this device is an alarm hub (boolean)"),
     ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
     lastEvent: (0, common_js_1.unknownField)("Last event timestamp in epoch ms (number)"),
-    alarmHub: (0, common_js_1.unknownField)("Alarm hub status (object: armed, battery, connector, cover, output, input, …)"),
-    deviceTamperStatus: (0, common_js_1.nullableString)('Tamper status, added in 7.3.x, e.g. "tampered"'),
+    alarmHub: (0, common_js_1.unknownField)("Alarm hub status (object: armed, battery, buckboost, connector, cover, " +
+        'deviceTamperStatus (e.g. "tampered", added in 7.3.x), ' +
+        "currentMeterChannelStatus, currentMeterStatus, inputPower, poeout, " +
+        "powerMeter, output and input (maps keyed by channel), " +
+        "inputTerminalStatus, outputTerminalStatus, emergencyTerminalStatus, " +
+        "auxiliaryPowerTerminalStatus)"),
     threadState: (0, common_js_1.unknownField)("Thread radio state, added in 7.3.x (object: network — status, role, " +
         "networkName, channel, panId, extendedPanId, joinedDeviceCount, " +
         "errorReason, lastUpdatedAt)"),

package/dist/schemas/misc.d.ts

@@ -1,9 +1,9 @@
 import { z } from "zod";
 /**
  * Schemas below are verified against live UniFi Protect Integration API 7.3.47
- * responses (Melrose NVR Pro console, 2026-09-14) where instances exist, and
- * against the 7.3.47 published docs otherwise (arm profiles, files — no
- * instances on the console). The Integration API surface is much thinner than
+ * responses (Melrose NVR Pro console, 2026-09-14) where instances exist —
+ * re-verified live on 7.3.70 (2026-10-12) — and against the 7.3.70 published
+ * docs otherwise (arm profiles, files — no instances on the console). The Integration API surface is much thinner than
  * the internal Protect app API — only observed/documented fields are typed;
  * `.passthrough()` still allows anything extra a firmware/hardware mix adds.
  */
@@ -17,13 +17,13 @@ export declare const nvrSchema: z.ZodObject<{
     modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     mac: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    doorbellSettings: z.ZodOptional<z.ZodObject<{
+    doorbellSettings: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         defaultMessageText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         defaultMessageResetTimeoutMs: z.ZodOptional<z.ZodUnknown>;
         customMessages: z.ZodOptional<z.ZodUnknown>;
         customImages: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>;
-    armMode: z.ZodOptional<z.ZodObject<{
+    }, z.core.$loose>>>;
+    armMode: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armedAt: z.ZodOptional<z.ZodUnknown>;
@@ -32,7 +32,7 @@ export declare const nvrSchema: z.ZodObject<{
         breachEventCount: z.ZodOptional<z.ZodUnknown>;
         breachTriggerEventId: z.ZodOptional<z.ZodUnknown>;
         breachEventId: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>;
+    }, z.core.$loose>>>;
 }, z.core.$loose>;
 export declare const nvrOutputSchema: {
     type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -41,13 +41,13 @@ export declare const nvrOutputSchema: {
     modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     mac: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    doorbellSettings: z.ZodOptional<z.ZodObject<{
+    doorbellSettings: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         defaultMessageText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         defaultMessageResetTimeoutMs: z.ZodOptional<z.ZodUnknown>;
         customMessages: z.ZodOptional<z.ZodUnknown>;
         customImages: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>;
-    armMode: z.ZodOptional<z.ZodObject<{
+    }, z.core.$loose>>>;
+    armMode: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armedAt: z.ZodOptional<z.ZodUnknown>;
@@ -56,7 +56,7 @@ export declare const nvrOutputSchema: {
         breachEventCount: z.ZodOptional<z.ZodUnknown>;
         breachTriggerEventId: z.ZodOptional<z.ZodUnknown>;
         breachEventId: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>;
+    }, z.core.$loose>>>;
 };
 export declare const userSchema: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
@@ -124,11 +124,11 @@ export declare const liveviewSchema: z.ZodObject<{
     isGlobal: z.ZodOptional<z.ZodUnknown>;
     layout: z.ZodOptional<z.ZodUnknown>;
     owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    slots: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         cameras: z.ZodOptional<z.ZodUnknown>;
         cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         cycleInterval: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>>;
+    }, z.core.$loose>>>>;
 }, z.core.$loose>;
 export declare const liveviewOutputSchema: {
     id: z.ZodOptional<z.ZodString>;
@@ -138,11 +138,11 @@ export declare const liveviewOutputSchema: {
     isGlobal: z.ZodOptional<z.ZodUnknown>;
     layout: z.ZodOptional<z.ZodUnknown>;
     owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    slots: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         cameras: z.ZodOptional<z.ZodUnknown>;
         cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         cycleInterval: z.ZodOptional<z.ZodUnknown>;
-    }, z.core.$loose>>>;
+    }, z.core.$loose>>>>;
 };
 export declare const liveviewListOutputSchema: {
     result: z.ZodArray<z.ZodObject<{
@@ -153,11 +153,11 @@ export declare const liveviewListOutputSchema: {
         isGlobal: z.ZodOptional<z.ZodUnknown>;
         layout: z.ZodOptional<z.ZodUnknown>;
         owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        slots: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             cameras: z.ZodOptional<z.ZodUnknown>;
             cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             cycleInterval: z.ZodOptional<z.ZodUnknown>;
-        }, z.core.$loose>>>;
+        }, z.core.$loose>>>>;
     }, z.core.$loose>>;
 };
 export declare const armProfileSchema: z.ZodObject<{
@@ -196,19 +196,40 @@ export declare const armProfileOutputSchema: {
     updatedAt: z.ZodOptional<z.ZodUnknown>;
 };
 export declare const fileSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     originalName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    size: z.ZodOptional<z.ZodUnknown>;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    metadata: z.ZodOptional<z.ZodUnknown>;
 }, z.core.$loose>;
 export declare const fileListOutputSchema: {
     result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         originalName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        size: z.ZodOptional<z.ZodUnknown>;
+        createdAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        updatedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        metadata: z.ZodOptional<z.ZodUnknown>;
     }, z.core.$loose>>;
 };
+export declare const fileOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    originalName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    size: z.ZodOptional<z.ZodUnknown>;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    metadata: z.ZodOptional<z.ZodUnknown>;
+};
 export declare const subscriptionOutputSchema: {
     messages: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     duration: z.ZodOptional<z.ZodUnknown>;

package/dist/schemas/misc.js

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.subscriptionOutputSchema = exports.fileListOutputSchema = exports.fileSchema = exports.armProfileOutputSchema = exports.armProfileListOutputSchema = exports.armProfileSchema = exports.liveviewListOutputSchema = exports.liveviewOutputSchema = exports.liveviewSchema = exports.ulpUserListOutputSchema = exports.ulpUserOutputSchema = exports.ulpUserSchema = exports.userListOutputSchema = exports.userOutputSchema = exports.userSchema = exports.nvrOutputSchema = exports.nvrSchema = exports.infoOutputSchema = void 0;
+exports.subscriptionOutputSchema = exports.fileOutputSchema = exports.fileListOutputSchema = exports.fileSchema = exports.armProfileOutputSchema = exports.armProfileListOutputSchema = exports.armProfileSchema = exports.liveviewListOutputSchema = exports.liveviewOutputSchema = exports.liveviewSchema = exports.ulpUserListOutputSchema = exports.ulpUserOutputSchema = exports.ulpUserSchema = exports.userListOutputSchema = exports.userOutputSchema = exports.userSchema = exports.nvrOutputSchema = exports.nvrSchema = exports.infoOutputSchema = void 0;
 const zod_1 = require("zod");
 const common_js_1 = require("./common.js");
 /**
  * Schemas below are verified against live UniFi Protect Integration API 7.3.47
- * responses (Melrose NVR Pro console, 2026-09-14) where instances exist, and
- * against the 7.3.47 published docs otherwise (arm profiles, files — no
- * instances on the console). The Integration API surface is much thinner than
+ * responses (Melrose NVR Pro console, 2026-09-14) where instances exist —
+ * re-verified live on 7.3.70 (2026-10-12) — and against the 7.3.70 published
+ * docs otherwise (arm profiles, files — no instances on the console). The Integration API surface is much thinner than
  * the internal Protect app API — only observed/documented fields are typed;
  * `.passthrough()` still allows anything extra a firmware/hardware mix adds.
  */
@@ -30,7 +30,7 @@ const doorbellSettingsSchema = (0, common_js_1.passthroughObject)({
     defaultMessageText: (0, common_js_1.nullableString)("Default doorbell LCD message"),
     defaultMessageResetTimeoutMs: (0, common_js_1.unknownField)("Reset timeout in ms (number)"),
     customMessages: (0, common_js_1.unknownField)("Configured custom LCD messages (array of strings)"),
-    customImages: (0, common_js_1.unknownField)("Configured custom LCD images (array)"),
+    customImages: (0, common_js_1.unknownField)("Configured custom LCD images (array of objects: preview, sprite)"),
 });
 exports.nvrSchema = (0, common_js_1.passthroughObject)({
     id: (0, common_js_1.idField)("NVR ID"),
@@ -38,8 +38,8 @@ exports.nvrSchema = (0, common_js_1.passthroughObject)({
     name: (0, common_js_1.nullableString)("NVR name"),
     ...(0, common_js_1.hardwareModelFields)(),
     mac: (0, common_js_1.nullableString)("MAC address, added in 7.3.x"),
-    doorbellSettings: doorbellSettingsSchema.optional(),
-    armMode: armModeSchema.optional(),
+    doorbellSettings: doorbellSettingsSchema.nullable().optional(),
+    armMode: armModeSchema.nullable().optional(),
 });
 // Single object — use the shape directly, NOT a list wrapper.
 exports.nvrOutputSchema = { ...exports.nvrSchema.shape };
@@ -62,7 +62,7 @@ exports.ulpUserSchema = (0, common_js_1.passthroughObject)({
     lastName: (0, common_js_1.nullableString)("Last name"),
     fullName: (0, common_js_1.nullableString)("Full name"),
     email: (0, common_js_1.nullableString)("Email address, added in 7.3.x. Empty string for service accounts " +
-        "(verified live 7.3.47)"),
+        "(verified live 7.3.70)"),
     status: (0, common_js_1.nullableString)("Account status, e.g. ACTIVE"),
 });
 exports.ulpUserOutputSchema = { ...exports.ulpUserSchema.shape };
@@ -81,12 +81,12 @@ exports.liveviewSchema = (0, common_js_1.passthroughObject)({
     isGlobal: (0, common_js_1.unknownField)("Whether shared across all users (boolean)"),
     layout: (0, common_js_1.unknownField)("Grid layout / slot count (number)"),
     owner: (0, common_js_1.nullableString)("Owning user ID"),
-    slots: zod_1.z.array(liveviewSlotSchema).optional().describe("Camera slots"),
+    slots: zod_1.z.array(liveviewSlotSchema).nullable().optional().describe("Camera slots"),
 });
 exports.liveviewOutputSchema = { ...exports.liveviewSchema.shape };
 exports.liveviewListOutputSchema = (0, common_js_1.listResultSchema)(exports.liveviewSchema);
 // --- Arm profiles ---
-// Fields from the 7.1.83 docs (no instances on the console to verify live).
+// Fields from the 7.3.70 docs (no instances on the console to verify live).
 // Arm profiles carry no `modelKey`. Nested arrays stay unknownField.
 exports.armProfileSchema = (0, common_js_1.passthroughObject)({
     id: (0, common_js_1.idField)("Arm profile ID"),
@@ -102,15 +102,22 @@ exports.armProfileSchema = (0, common_js_1.passthroughObject)({
 exports.armProfileListOutputSchema = (0, common_js_1.listResultSchema)(exports.armProfileSchema);
 exports.armProfileOutputSchema = { ...exports.armProfileSchema.shape };
 // --- Files ---
-// Device asset files (only fileType=animations supported). Shape from 7.1.83
-// docs: { name, type, originalName, path } — no id/modelKey.
+// Device asset files (only fileType=animations supported). The 7.3.70 docs show
+// { name, type, originalName, path }; live 7.3.70 records (2026-10-12) also
+// carry id (equal to name), size, createdAt, updatedAt and metadata. No modelKey.
 exports.fileSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("File ID (same value as name)"),
     name: (0, common_js_1.nullableString)("Stored file name (server-generated)"),
     type: (0, common_js_1.nullableString)('Asset file type, e.g. "animations"'),
-    originalName: (0, common_js_1.nullableString)("Original uploaded file name"),
+    originalName: (0, common_js_1.nullableString)('Uploaded file name; Protect appends the stored extension, e.g. "welcome.gif.png"'),
     path: (0, common_js_1.nullableString)("Server-side storage path"),
+    size: (0, common_js_1.unknownField)("File size in bytes (number)"),
+    createdAt: (0, common_js_1.nullableString)("Creation time (ISO 8601)"),
+    updatedAt: (0, common_js_1.nullableString)("Last update time (ISO 8601)"),
+    metadata: (0, common_js_1.unknownField)("Asset metadata (object, empty in observed records)"),
 });
 exports.fileListOutputSchema = (0, common_js_1.listResultSchema)(exports.fileSchema);
+exports.fileOutputSchema = { ...exports.fileSchema.shape };
 // --- Subscriptions ---
 exports.subscriptionOutputSchema = {
     messages: zod_1.z

package/dist/schemas/pos.d.ts

@@ -2,7 +2,7 @@
  * Point-of-sale event ingestion, added in UniFi Protect 7.3.x
  * (POST /v1/pos/cameras/{id}/transactions).
  *
- * Shape taken from the 7.3.47 published docs with the response sample expanded
+ * Shape taken from the 7.3.70 published docs with the response sample expanded
  * — there is no POS-capable register on the available console, so this is
  * doc-verified rather than live-verified. `created` stays `unknownField()`
  * because we have not observed the boolean live; `eventId` publishes the string

package/dist/schemas/pos.js

@@ -6,7 +6,7 @@ const common_js_1 = require("./common.js");
  * Point-of-sale event ingestion, added in UniFi Protect 7.3.x
  * (POST /v1/pos/cameras/{id}/transactions).
  *
- * Shape taken from the 7.3.47 published docs with the response sample expanded
+ * Shape taken from the 7.3.70 published docs with the response sample expanded
  * — there is no POS-capable register on the available console, so this is
  * doc-verified rather than live-verified. `created` stays `unknownField()`
  * because we have not observed the boolean live; `eventId` publishes the string

package/dist/tools/alarm-manager.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ProtectClient } from "../client.js";
+export declare function registerAlarmManagerTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;

package/dist/tools/alarm-manager.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAlarmManagerTools = registerAlarmManagerTools;
+const zod_1 = require("zod");
+const responses_js_1 = require("../utils/responses.js");
+const safety_js_1 = require("../utils/safety.js");
+const url_js_1 = require("../utils/url.js");
+function registerAlarmManagerTools(server, client, readOnly) {
+    if (readOnly)
+        return;
+    server.registerTool("protect_trigger_alarm_webhook", {
+        description: "Trigger an alarm manager webhook by ID. This fires an external alarm action.",
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .min(1)
+                .describe("User-defined webhook ID matching an alarm manager configuration"),
+            confirm: zod_1.z
+                .literal(true)
+                .describe("Must be true to confirm triggering the alarm webhook"),
+            dryRun: zod_1.z
+                .boolean()
+                .optional()
+                .describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.DESTRUCTIVE,
+    }, async ({ id, confirm, dryRun }) => {
+        const denied = (0, safety_js_1.requireConfirmation)(confirm, "trigger the alarm webhook");
+        if (denied)
+            return denied;
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/alarm-manager/webhook/${id}`);
+            }
+            await client.post((0, url_js_1.safePath) `/alarm-manager/webhook/${id}`);
+            return (0, responses_js_1.formatSuccess)({ triggered: true, webhookId: id });
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+}