@owine/unifi-protect-mcp 2.14.2 → 2.15.0

package/dist/tools/arm-profiles.js

@@ -6,10 +6,21 @@ const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
-const ACTIVATION_DELAY_VALUES = [0, 60000, 300000, 600000];
+const activationDelay = zod_1.z
+    .union([zod_1.z.literal(0), zod_1.z.literal(60000), zod_1.z.literal(300000), zod_1.z.literal(600000)])
+    .describe("Activation delay in milliseconds. Allowed: 0 (none), 60000 (1m), 300000 (5m), 600000 (10m).");
+const armProfileFields = {
+    name: zod_1.z.string().min(1).max(255).describe("Name of the arm profile"),
+    automations: zod_1.z.array(zod_1.z.string()).describe("List of automation IDs associated with this arm profile"),
+    schedules: zod_1.z
+        .array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()))
+        .describe('List of arm schedules, e.g. [{ start: "0 22 * * *", end: "0 6 * * *" }] (cron strings)'),
+    recordEverything: zod_1.z.boolean().describe("Whether to record everything when this arm profile is active"),
+    activationDelay,
+};
 function registerArmProfileTools(server, client, readOnly) {
     server.registerTool("protect_list_arm_profiles", {
-        description: "List all arm profiles (only available when using the local alarm manager — the standalone NVR alarm system, not Protect cloud alerts). Returns array; each profile (7.1.83 docs): id, name, automations[], creator, schedules[], recordEverything, activationDelay (0 | 60000 | 300000 | 600000), createdAt, updatedAt.",
+        description: "List all arm profiles (only available when using the local alarm manager — the standalone NVR alarm system, not Protect cloud alerts). Returns array; each profile (7.3.70 docs): id, name, automations[], creator, schedules[], recordEverything, activationDelay (0 | 60000 | 300000 | 600000), createdAt, updatedAt.",
         outputSchema: misc_js_1.armProfileListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -26,13 +37,7 @@ function registerArmProfileTools(server, client, readOnly) {
     server.registerTool("protect_create_arm_profile", {
         description: "Create a new arm profile. Only available when using local alarm manager.",
         inputSchema: {
-            name: zod_1.z.string().min(1).max(255).describe("Name of the arm profile"),
-            automations: zod_1.z.array(zod_1.z.string()).describe("List of automation IDs associated with this arm profile"),
-            schedules: zod_1.z.array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())).describe("List of arm schedules"),
-            recordEverything: zod_1.z.boolean().describe("Whether to record everything when this arm profile is active"),
-            activationDelay: zod_1.z
-                .union([zod_1.z.literal(0), zod_1.z.literal(60000), zod_1.z.literal(300000), zod_1.z.literal(600000)])
-                .describe("Activation delay in milliseconds. Allowed: 0 (none), 60000 (1m), 300000 (5m), 600000 (10m)."),
+            ...armProfileFields,
             dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
         },
         outputSchema: misc_js_1.armProfileOutputSchema,
@@ -75,8 +80,11 @@ function registerArmProfileTools(server, client, readOnly) {
         inputSchema: {
             id: zod_1.z.string().describe("Arm profile ID"),
             settings: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe(`Partial arm profile settings. Known fields: name (string 1-255 chars), automations (array of strings), schedules (array of objects), recordEverything (boolean), activationDelay (number, allowed: ${ACTIVATION_DELAY_VALUES.join(", ")})`),
+                .object(armProfileFields)
+                .partial()
+                .passthrough()
+                .refine((o) => Object.keys(o).length > 0, "settings must include at least one field")
+                .describe("Partial arm profile settings to update"),
             dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
         },
         outputSchema: misc_js_1.armProfileOutputSchema,

package/dist/tools/cameras.js

@@ -9,7 +9,7 @@ const cameras_js_1 = require("../schemas/cameras.js");
 function registerCameraTools(server, client, readOnly) {
     // --- Read-only tools (always registered) ---
     server.registerTool("protect_list_cameras", {
-        description: "List all cameras managed by UniFi Protect. Returns array; each camera includes (Integration API 7.3.47-verified fields): id, mac, name, modelKey, state (CONNECTED/DISCONNECTED), type (hardware model name, e.g. UVC G6 Turret), guid (hardware MODEL GUID — every camera of the same model returns the same value, so it is NOT a per-camera identifier; use id), activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags (hasHdr, hasMic, hasSpeaker, hasLedStatus, smartDetectTypes[], smartDetectAudioTypes[], videoModes[], supportFullHdSnapshot), lcdMessage (type, resetAt, text), ledSettings (isEnabled, floodLed, welcomeLed), osdSettings (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation), smartDetectSettings (objectTypes[], audioTypes[]). The Integration API does NOT expose recording state, motion timestamps, connection/last-seen, firmware, host, or per-channel stream config.",
+        description: "List all cameras managed by UniFi Protect. Returns array; each camera includes (Integration API 7.3.70-verified fields): id, mac, name, modelKey, state (CONNECTED/DISCONNECTED), type (hardware model name, e.g. UVC G6 Turret), guid (hardware MODEL GUID — every camera of the same model returns the same value, so it is NOT a per-camera identifier; use id), activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags (hasHdr, hasMic, hasSpeaker, hasLedStatus, smartDetectTypes[], smartDetectAudioTypes[], videoModes[], supportFullHdSnapshot), lcdMessage (type, resetAt, text), ledSettings (isEnabled, floodLed, welcomeLed), osdSettings (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation), smartDetectSettings (objectTypes[], audioTypes[]). The Integration API does NOT expose recording state, motion timestamps, connection/last-seen, firmware, host, or per-channel stream config.",
         outputSchema: cameras_js_1.cameraListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -22,7 +22,7 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_camera", {
-        description: "Get details for a specific camera by ID. The Protect Integration API returns the SAME field set as protect_list_cameras entries (id, mac, name, modelKey, state, type, guid, activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags, lcdMessage, ledSettings, osdSettings, smartDetectSettings) — there is no extended/by-id-only payload (confirmed live on 7.3.47). Recording state, motion events, zones, and channel/RTSP config are NOT exposed by this API surface.",
+        description: "Get details for a specific camera by ID. The Protect Integration API returns the SAME field set as protect_list_cameras entries (id, mac, name, modelKey, state, type, guid, activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags, lcdMessage, ledSettings, osdSettings, smartDetectSettings) — there is no extended/by-id-only payload (confirmed live on 7.3.70). Recording state, motion events, zones, and channel/RTSP config are NOT exposed by this API surface.",
         inputSchema: { id: zod_1.z.string().describe("Camera ID") },
         outputSchema: cameras_js_1.cameraOutputSchema,
         annotations: safety_js_1.READ_ONLY,
@@ -36,13 +36,13 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_snapshot", {
-        description: "Get a JPEG snapshot from a camera. Returns a base64-encoded image/jpeg (rendered directly by MCP clients). Use highQuality=true for full-resolution capture; set channel=package to capture from the secondary package camera on doorbells with hasPackageCamera=true.",
+        description: "Get a JPEG snapshot from a camera. Returns a base64-encoded image/jpeg (rendered directly by MCP clients). Use highQuality=true to force a 1080p-or-higher capture; set channel=package to capture from the secondary package camera on doorbells with hasPackageCamera=true. Fails with HTTP 503 when the camera is offline or unreachable.",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             highQuality: zod_1.z
                 .boolean()
                 .optional()
-                .describe("If true, request a high-quality snapshot"),
+                .describe("If true, force a 1080p-or-higher resolution snapshot"),
             channel: zod_1.z
                 .enum(["main", "package"])
                 .optional()
@@ -76,7 +76,7 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_rtsp_streams", {
-        description: "Get active RTSPS stream sessions for a camera. Returns the per-quality stream URLs currently published (keys typically: high, medium, low, package). Empty/missing keys mean no session is currently active at that quality — use protect_create_rtsp_stream to start one.",
+        description: "Get active RTSPS stream sessions for a camera. Returns: high, medium, low, package — each an rtsps:// URL, or null (or absent) when no session is active at that quality. Use protect_create_rtsp_stream to start one.",
         inputSchema: { id: zod_1.z.string().describe("Camera ID") },
         outputSchema: cameras_js_1.rtspStreamOutputSchema,
         annotations: safety_js_1.READ_ONLY,
@@ -93,12 +93,38 @@ function registerCameraTools(server, client, readOnly) {
     if (readOnly)
         return;
     server.registerTool("protect_update_camera", {
-        description: "Update camera settings (partial update via PATCH)",
+        description: "Update camera settings (partial update via PATCH). Returns: the full updated camera (same fields as protect_get_camera).",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             settings: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("Partial camera settings to update. Known fields: name (string), osdSettings (object), ledSettings (object), lcdMessage (object: type, resetAt, text), videoMode (string: \"default\" | \"highFps\" | \"sport\" | \"slowShutter\" | \"lprReflex\" | \"lprNoneReflex\"), hdrType (string: \"auto\" | \"on\" | \"off\"), micVolume (number 0-100), smartDetectSettings (object)"),
+                .object({
+                name: zod_1.z.string().optional().describe("Camera name"),
+                osdSettings: zod_1.z
+                    .record(zod_1.z.string(), zod_1.z.unknown())
+                    .optional()
+                    .describe("On-screen display (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation)"),
+                ledSettings: zod_1.z
+                    .record(zod_1.z.string(), zod_1.z.unknown())
+                    .optional()
+                    .describe("LED settings (isEnabled, welcomeLed, floodLed)"),
+                lcdMessage: zod_1.z
+                    .record(zod_1.z.string(), zod_1.z.unknown())
+                    .optional()
+                    .describe('Doorbell LCD message (type, resetAt, text), e.g. { type: "DO_NOT_DISTURB", resetAt: 0 }'),
+                micVolume: zod_1.z.number().min(0).max(100).optional().describe("Mic volume (0-100)"),
+                videoMode: zod_1.z
+                    .enum(["default", "highFps", "sport", "slowShutter", "lprReflex", "lprNoneReflex"])
+                    .optional()
+                    .describe("Video mode"),
+                hdrType: zod_1.z.enum(["auto", "on", "off"]).optional().describe("HDR mode"),
+                smartDetectSettings: zod_1.z
+                    .record(zod_1.z.string(), zod_1.z.unknown())
+                    .optional()
+                    .describe("Smart detection (objectTypes[], audioTypes[])"),
+            })
+                .passthrough()
+                .refine((o) => Object.keys(o).length > 0, "settings must include at least one field")
+                .describe("Partial camera settings to update"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
@@ -119,12 +145,13 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_create_rtsp_stream", {
-        description: "Create an RTSPS stream session for a camera",
+        description: "Create an RTSPS stream session for a camera. Returns: one key per requested quality (high, medium, low, package), each an rtsps:// URL. The package quality is only available on cameras with hasPackageCamera=true.",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             qualities: zod_1.z
                 .array(zod_1.z.enum(["high", "medium", "low", "package"]))
-                .describe("Quality levels to include in the RTSPS stream"),
+                .min(1)
+                .describe("Quality levels to include in the RTSPS stream (at least one)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
@@ -152,7 +179,8 @@ function registerCameraTools(server, client, readOnly) {
             id: zod_1.z.string().describe("Camera ID"),
             qualities: zod_1.z
                 .array(zod_1.z.enum(["high", "medium", "low", "package"]))
-                .describe("Quality levels to remove from the RTSPS stream"),
+                .min(1)
+                .describe("Quality levels to remove from the RTSPS stream (at least one)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
@@ -161,10 +189,16 @@ function registerCameraTools(server, client, readOnly) {
         annotations: safety_js_1.DESTRUCTIVE,
     }, async ({ id, qualities, dryRun }) => {
         try {
+            // Protect expects repeated keys (qualities=high&qualities=medium), not
+            // a comma-joined value — safePath would encode the comma as %2C.
+            const params = new URLSearchParams();
+            for (const quality of qualities)
+                params.append("qualities", quality);
+            const url = (0, url_js_1.safePath) `/cameras/${id}/rtsps-stream` + `?${params.toString()}`;
             if (dryRun) {
-                return (0, safety_js_1.formatDryRun)("DELETE", (0, url_js_1.safePath) `/cameras/${id}/rtsps-stream?qualities=${qualities.join(",")}`);
+                return (0, safety_js_1.formatDryRun)("DELETE", url);
             }
-            const data = await client.delete((0, url_js_1.safePath) `/cameras/${id}/rtsps-stream?qualities=${qualities.join(",")}`);
+            const data = await client.delete(url);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {
@@ -195,19 +229,27 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_disable_mic", {
-        description: "IRREVERSIBLE: Permanently disable the microphone on a camera. Can only be re-enabled by factory resetting the camera.",
+        description: "IRREVERSIBLE: Permanently disable the microphone on a camera. Can only be re-enabled by factory resetting the camera. Returns: the full updated camera (same fields as protect_get_camera).",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             confirm: zod_1.z
                 .literal(true)
                 .describe("Must be true to confirm this irreversible action"),
+            dryRun: zod_1.z
+                .boolean()
+                .optional()
+                .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: cameras_js_1.cameraOutputSchema,
         annotations: safety_js_1.DESTRUCTIVE,
-    }, async ({ id, confirm }) => {
+    }, async ({ id, confirm, dryRun }) => {
         const denied = (0, safety_js_1.requireConfirmation)(confirm, "permanently disable the microphone");
         if (denied)
             return denied;
         try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/cameras/${id}/disable-mic-permanently`);
+            }
             const data = await client.post((0, url_js_1.safePath) `/cameras/${id}/disable-mic-permanently`);
             return (0, responses_js_1.formatSuccess)(data);
         }
@@ -264,7 +306,11 @@ function registerCameraTools(server, client, readOnly) {
         description: "Move camera PTZ to a preset position",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
-            slot: zod_1.z.number().int().min(-1).max(4).describe("PTZ preset slot number (0-4, or -1 for home position)"),
+            slot: zod_1.z
+                .number()
+                .int()
+                .min(-1)
+                .describe("PTZ preset slot: -1 for the home position, 0 or higher for saved presets"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()

package/dist/tools/devices.d.ts

@@ -7,6 +7,7 @@ interface DeviceConfig {
     label: string;
     hint: string;
     returns: string;
+    note?: string;
 }
 export declare function registerDeviceTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;
 /** Exported for tests */

package/dist/tools/devices.js

@@ -7,10 +7,11 @@ const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
 const devices_js_1 = require("../schemas/devices.js");
-// Field lists below are from the UniFi Protect Integration API 7.3.47 docs.
+// Field lists below are from the UniFi Protect Integration API 7.3.70 docs.
 // 7.3.x added `type` (hardware model name) and `guid` to every device. NOTE:
 // `guid` identifies the hardware MODEL, not the unit — every camera of the same
-// model returns the same guid (verified live 7.3.47). `id` is the device identity.
+// model returns the same guid (verified live 7.3.47 and 7.3.70). `id` is the
+// device identity.
 // Chimes are additionally verified against live console responses; the rest
 // have no instances on the available console (top-level fields documented,
 // nested shapes intentionally left opaque in the output schema).
@@ -21,23 +22,23 @@ const DEVICES = [
         plural: "lights",
         label: "Light",
         hint: "Known fields: name (string), isLightForceEnabled (boolean), lightModeSettings (object with mode, enableAt), lightDeviceSettings (object with isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)",
-        returns: "id, modelKey, name, mac, state, type, guid, lightModeSettings (mode, enableAt), lightDeviceSettings (isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel), isDark, isLightOn, isLightForceEnabled, lastMotion, isPirMotionDetected, camera (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, lightModeSettings (mode, enableAt), lightDeviceSettings (isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel), isDark, isLightOn, isLightForceEnabled, lastMotion, isPirMotionDetected, camera (7.3.70 docs)",
     },
     {
         urlPath: "sensors",
         singular: "sensor",
         plural: "sensors",
         label: "Sensor",
-        hint: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object), glassBreakSettings (object), leakSettings (object), scheduleMode (\"always\" | \"when_armed\"), armProfileIds (array of up to 32 strings), hasCustomSensitivityWhenArmed (boolean)",
-        returns: "id, modelKey, name, mac, state, type, guid, mountType, featureFlags (temperature, humidity, light, motion, waterLeak, open, tamper, smoke — each {channelCount}), batteryStatus (percentage, isLow), stats (light, humidity, temperature), lightSettings, humiditySettings, temperatureSettings, isOpened, openStatusChangedAt, isMotionDetected, motionDetectedAt, motionSettings, glassBreakSettings, scheduleMode, armProfileIds, hasCustomSensitivityWhenArmed, alarmTriggeredAt, alarmSettings, leakDetectedAt, externalLeakDetectedAt, leakSettings, tamperingDetectedAt, wirelessConnectionState (7.3.47 docs)",
+        hint: "Known fields: name (string), lightSettings / humiditySettings / temperatureSettings (objects: isEnabled, margin, lowThreshold, highThreshold), motionSettings / glassBreakSettings (objects: isEnabled, sensitivity, sensitivityWhenArmed), alarmSettings (object: isEnabled), scheduleMode (\"always\" | \"when_armed\"), armProfileIds (array of up to 32 strings, or null), hasCustomSensitivityWhenArmed (boolean). leakSettings is read-only. Returns HTTP 409 if a setting is not supported by this sensor",
+        returns: "id, modelKey, name, mac, state, type, guid, mountType, featureFlags (temperature, humidity, light, motion, waterLeak, open, tamper, smoke — each {channelCount}), batteryStatus (percentage, isLow), stats (light, humidity, temperature — each {value, status}), lightSettings / humiditySettings / temperatureSettings (isEnabled, margin, lowThreshold, highThreshold), isOpened, openStatusChangedAt, isMotionDetected, motionDetectedAt, motionSettings / glassBreakSettings (isEnabled, sensitivity, sensitivityWhenArmed), scheduleMode, armProfileIds, hasCustomSensitivityWhenArmed, alarmTriggeredAt, alarmSettings, leakDetectedAt, externalLeakDetectedAt, leakSettings (isInternalEnabled, isExternalEnabled), tamperingDetectedAt, wirelessConnectionState (signalState: signalQuality, signalStrength; batteryStatus: percentage, isLow; bridge) (7.3.70 docs)",
     },
     {
         urlPath: "chimes",
         singular: "chime",
         plural: "chimes",
         label: "Chime",
-        hint: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes)",
-        returns: "id, modelKey, name, mac, state, type, guid, cameraIds (array of camera IDs), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes) — verified live 7.3.47",
+        hint: "Known fields: name (string), cameraIds (array of doorbell camera IDs linked to the chime), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes)",
+        returns: "id, modelKey, name, mac, state, type, guid, cameraIds (array of camera IDs), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes) — verified live 7.3.70",
     },
     {
         urlPath: "viewers",
@@ -45,7 +46,7 @@ const DEVICES = [
         plural: "viewers",
         label: "Viewer",
         hint: "Known fields: name (string), liveview (string, liveview ID to display, or null)",
-        returns: "id, modelKey, name, mac, state, type, guid, liveview, streamLimit (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, liveview, streamLimit (7.3.70 docs)",
     },
     {
         urlPath: "sirens",
@@ -53,7 +54,7 @@ const DEVICES = [
         plural: "sirens",
         label: "Siren",
         hint: "Known fields: name (string), volume (integer 1-100), ledSettings (object with isEnabled boolean)",
-        returns: "id, modelKey, name, mac, state, type, guid, volume, ledSettings (isEnabled), sirenStatus (isActive, activatedAt, duration), connectionType, wirelessConnectionState (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, volume, ledSettings (isEnabled), sirenStatus (isActive, activatedAt, duration), connectionType, wirelessConnectionState (signalState: signalQuality, signalStrength; batteryStatus: percentage, isLow; bridge) (7.3.70 docs)",
     },
     {
         urlPath: "fobs",
@@ -61,7 +62,7 @@ const DEVICES = [
         plural: "fobs",
         label: "Fob",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state, type, guid, awayState, buttonLabels, featureFlags (buttons[]), hasKeypad, armControlSettings (enabled, armProfileId, nightProfileId), keypadSettings (beepEnabled, beepVolume, backlightEnabled, backlightBrightness), wirelessConnectionState (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, awayState, buttonLabels, featureFlags (buttons[], hasKeypad), armControlSettings (enabled, armProfileId, nightProfileId), keypadSettings (beepEnabled, beepVolume), wirelessConnectionState (signalState: signalQuality, signalStrength; batteryStatus: percentage, isLow; bridge) (7.3.70 docs)",
     },
     {
         urlPath: "relays",
@@ -69,7 +70,7 @@ const DEVICES = [
         plural: "relays",
         label: "Relay",
         hint: "Known fields: name (string), ledSettings (object with isEnabled boolean)",
-        returns: "id, modelKey, name, mac, state, type, guid, ledSettings (isEnabled), outputs (array), inputs (array), wirelessConnectionState (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, ledSettings (isEnabled), outputs (array of objects: id, name, type, delay, pulseDuration, state, rebootState — id is the outputId for protect_activate_relay_output), inputs (array of objects: id, name, state, actionTrigger, actionType, actionOutputId), wirelessConnectionState (signalState: signalQuality, signalStrength; batteryStatus: percentage, isLow; bridge) (7.3.70 docs)",
     },
     {
         urlPath: "speakers",
@@ -77,7 +78,7 @@ const DEVICES = [
         plural: "speakers",
         label: "Speaker",
         hint: "Known fields: name (string), volume (integer 0-100), micVolume (integer 0-100), isMicEnabled (boolean)",
-        returns: "id, modelKey, name, mac, state, type, guid, volume, micVolume, isMicEnabled, speakerState (status, mode), featureFlags (hasMic) (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, volume, micVolume, isMicEnabled, speakerState (status, mode), featureFlags (hasMic) (7.3.70 docs)",
     },
     {
         urlPath: "bridges",
@@ -85,15 +86,16 @@ const DEVICES = [
         plural: "bridges",
         label: "Bridge",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state, type, guid, platform, clients (array of MACs), maxClients (7.3.47 docs)",
+        returns: "id, modelKey, name, mac, state, type, guid, platform, clients (array of MACs), maxClients (7.3.70 docs)",
     },
     {
         urlPath: "link-stations",
         singular: "link_station",
         plural: "link_stations",
         label: "Link station",
+        note: "Link stations are non-alarm-hub gateways (use protect_list_alarm_hubs for alarm hubs).",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey (\"linkstation\"), name, mac, state, type, guid, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (object), deviceTamperStatus, threadState (network: status, role, networkName, channel, panId, extendedPanId, joinedDeviceCount, errorReason, lastUpdatedAt) (7.3.47 docs)",
+        returns: "id, modelKey (\"linkstation\"), name, mac, state, type, guid, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (armed, battery, buckboost, connector, cover, deviceTamperStatus (e.g. \"tampered\"), currentMeterChannelStatus, currentMeterStatus, inputPower, poeout, powerMeter, output and input (maps keyed by channel), inputTerminalStatus, outputTerminalStatus, emergencyTerminalStatus, auxiliaryPowerTerminalStatus), threadState (network: status, role, networkName, channel, panId, extendedPanId, joinedDeviceCount, errorReason, lastUpdatedAt) (7.3.70 docs)",
     },
     {
         urlPath: "alarm-hubs",
@@ -101,13 +103,14 @@ const DEVICES = [
         plural: "alarm_hubs",
         label: "Alarm hub",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey (\"linkstation\"), name, mac, state, type, guid, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (object), deviceTamperStatus, threadState (network: status, role, networkName, channel, panId, extendedPanId, joinedDeviceCount, errorReason, lastUpdatedAt) (7.3.47 docs)",
+        returns: "id, modelKey (\"linkstation\"), name, mac, state, type, guid, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (armed, battery, buckboost, connector, cover, deviceTamperStatus (e.g. \"tampered\"), currentMeterChannelStatus, currentMeterStatus, inputPower, poeout, powerMeter, output and input (maps keyed by channel), inputTerminalStatus, outputTerminalStatus, emergencyTerminalStatus, auxiliaryPowerTerminalStatus), threadState (network: status, role, networkName, channel, panId, extendedPanId, joinedDeviceCount, errorReason, lastUpdatedAt) (7.3.70 docs)",
     },
 ];
 function registerDeviceCrud(server, client, cfg, readOnly) {
     const schemaKey = cfg.singular;
+    const note = cfg.note ? `${cfg.note} ` : "";
     server.registerTool(`protect_list_${cfg.plural}`, {
-        description: `List all ${cfg.label.toLowerCase()}s managed by UniFi Protect. Returns array; each ${cfg.label.toLowerCase()} includes: ${cfg.returns}.`,
+        description: `List all ${cfg.label.toLowerCase()}s managed by UniFi Protect. ${note}Returns array; each ${cfg.label.toLowerCase()} includes: ${cfg.returns}.`,
         outputSchema: (0, devices_js_1.listOutputShape)(schemaKey),
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -120,7 +123,7 @@ function registerDeviceCrud(server, client, cfg, readOnly) {
         }
     });
     server.registerTool(`protect_get_${cfg.singular}`, {
-        description: `Get full details for a specific ${cfg.label.toLowerCase()} by ID. Returns: ${cfg.returns}.`,
+        description: `Get full details for a specific ${cfg.label.toLowerCase()} by ID. ${note}Returns: ${cfg.returns}.`,
         inputSchema: { id: zod_1.z.string().describe(`${cfg.label} ID`) },
         outputSchema: (0, devices_js_1.itemOutputShape)(schemaKey),
         annotations: safety_js_1.READ_ONLY,
@@ -140,6 +143,7 @@ function registerDeviceCrud(server, client, cfg, readOnly) {
                 id: zod_1.z.string().describe(`${cfg.label} ID`),
                 settings: zod_1.z
                     .record(zod_1.z.string(), zod_1.z.unknown())
+                    .refine((o) => Object.keys(o).length > 0, "settings must include at least one field")
                     .describe(`Partial ${cfg.label.toLowerCase()} settings to update. ${cfg.hint}`),
                 dryRun: zod_1.z
                     .boolean()

package/dist/tools/files.js

@@ -6,14 +6,23 @@ const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
+// The only asset file type the API accepts (path param `assetFileType`).
+const FILE_TYPE = zod_1.z
+    .literal("animations")
+    .describe("Asset file type (only 'animations' is supported)");
+const UPLOAD_CONTENT_TYPES = [
+    "image/gif",
+    "image/jpeg",
+    "image/png",
+    "audio/mpeg",
+    "audio/mp4",
+    "audio/wave",
+    "audio/x-caf",
+];
 function registerFileTools(server, client, readOnly) {
     server.registerTool("protect_list_files", {
-        description: "List files of a given type (only 'animations' is currently supported — clips uploadable to G4 Doorbell screens). Returns array; each record (7.1.83 docs): name (server-generated), type, originalName, path.",
-        inputSchema: {
-            fileType: zod_1.z
-                .string()
-                .describe("File type to list (only 'animations' is currently supported)"),
-        },
+        description: "List device asset files (only 'animations' is supported — clips uploadable to G4 Doorbell screens). Returns array; each record (verified live 7.3.70): id, name (server-generated), type, originalName, path, size, createdAt, updatedAt, metadata. An image upload (verified for GIF) later gains a derived <name>.gif preview record, created asynchronously, so a listing taken right after the upload may show only the stored image.",
+        inputSchema: { fileType: FILE_TYPE },
         outputSchema: misc_js_1.fileListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ fileType }) => {
@@ -27,52 +36,39 @@ function registerFileTools(server, client, readOnly) {
     });
     if (readOnly)
         return;
-    server.registerTool("protect_trigger_alarm_webhook", {
-        description: "Trigger an alarm manager webhook by ID. This fires an external alarm action.",
-        inputSchema: {
-            id: zod_1.z.string().describe("User-defined webhook ID matching an alarm manager configuration"),
-            confirm: zod_1.z
-                .literal(true)
-                .describe("Must be true to confirm triggering the alarm webhook"),
-        },
-        annotations: safety_js_1.DESTRUCTIVE,
-    }, async ({ id, confirm }) => {
-        const denied = (0, safety_js_1.requireConfirmation)(confirm, "trigger the alarm webhook");
-        if (denied)
-            return denied;
-        try {
-            await client.post((0, url_js_1.safePath) `/alarm-manager/webhook/${id}`);
-            return (0, responses_js_1.formatSuccess)({ triggered: true, webhookId: id });
-        }
-        catch (err) {
-            return (0, responses_js_1.formatError)(err);
-        }
-    });
     server.registerTool("protect_upload_file", {
-        description: "Upload a base64-encoded file to UniFi Protect",
+        description: "Upload a base64-encoded device asset file (sent as multipart/form-data). Observed for GIF image uploads: Protect stores the image as PNG (appending the stored extension to originalName) and a few seconds later creates a separate <name>.gif preview asset, which protect_list_files shows once it exists. Audio uploads have not been observed. Returns: id, name (server-generated), type, originalName, path, size, createdAt, updatedAt, metadata.",
         inputSchema: {
-            fileType: zod_1.z.string().describe("File type category for upload"),
+            fileType: FILE_TYPE,
             base64Data: zod_1.z.string().describe("Base64-encoded file content"),
             contentType: zod_1.z
-                .string()
+                .enum(UPLOAD_CONTENT_TYPES)
                 .default("image/gif")
-                .describe("MIME type of the file (accepted: image/gif, image/jpeg, image/png, audio/mpeg, audio/mp4, audio/wave, audio/x-caf)"),
+                .describe("MIME type of the file"),
+            fileName: zod_1.z
+                .string()
+                .min(1)
+                .optional()
+                .describe("Original file name to record. Reported back as originalName, with the stored extension appended when Protect converts the file (e.g. welcome.gif → welcome.gif.png)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: misc_js_1.fileOutputSchema,
         annotations: safety_js_1.WRITE,
-    }, async ({ fileType, base64Data, contentType, dryRun }) => {
+    }, async ({ fileType, base64Data, contentType, fileName, dryRun }) => {
         try {
+            const name = fileName ?? defaultFileName(contentType);
             if (dryRun) {
                 return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/files/${fileType}`, {
                     contentType,
+                    fileName: name,
                     dataLength: base64Data.length,
                 });
             }
             const buffer = Buffer.from(base64Data, "base64");
-            const data = await client.postBinary((0, url_js_1.safePath) `/files/${fileType}`, buffer, contentType);
+            const data = await client.postFile((0, url_js_1.safePath) `/files/${fileType}`, buffer, contentType, name);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {
@@ -80,3 +76,15 @@ function registerFileTools(server, client, readOnly) {
         }
     });
 }
+const EXTENSIONS = {
+    "image/gif": "gif",
+    "image/jpeg": "jpg",
+    "image/png": "png",
+    "audio/mpeg": "mp3",
+    "audio/mp4": "m4a",
+    "audio/wave": "wav",
+    "audio/x-caf": "caf",
+};
+function defaultFileName(contentType) {
+    return `upload.${EXTENSIONS[contentType]}`;
+}

package/dist/tools/index.js

@@ -7,6 +7,7 @@ const devices_js_1 = require("./devices.js");
 const device_actions_js_1 = require("./device-actions.js");
 const liveviews_js_1 = require("./liveviews.js");
 const files_js_1 = require("./files.js");
+const alarm_manager_js_1 = require("./alarm-manager.js");
 const subscriptions_js_1 = require("./subscriptions.js");
 const arm_profiles_js_1 = require("./arm-profiles.js");
 const users_js_1 = require("./users.js");
@@ -19,6 +20,7 @@ function registerAllTools(server, client, readOnly) {
     (0, device_actions_js_1.registerDeviceActionTools)(server, client, readOnly);
     (0, liveviews_js_1.registerLiveviewTools)(server, client, readOnly);
     (0, files_js_1.registerFileTools)(server, client, readOnly);
+    (0, alarm_manager_js_1.registerAlarmManagerTools)(server, client, readOnly);
     (0, arm_profiles_js_1.registerArmProfileTools)(server, client, readOnly);
     (0, users_js_1.registerUserTools)(server, client);
     (0, pos_js_1.registerPosTools)(server, client, readOnly);

package/dist/tools/liveviews.js

@@ -6,9 +6,31 @@ const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
+// POST and PATCH both take the full liveview object; every field is required
+// (7.3.70 docs). Slot item schema is not rendered in the docs, so slots pass
+// through beyond the observed { cameras, cycleMode, cycleInterval }.
+const liveviewSlotInput = zod_1.z
+    .object({
+    cameras: zod_1.z.array(zod_1.z.string()).describe("Camera IDs shown in this slot"),
+    cycleMode: zod_1.z.string().describe('Cycle mode, e.g. "time" or "motion"'),
+    cycleInterval: zod_1.z.number().describe("Cycle interval in seconds"),
+})
+    .passthrough();
+const liveviewBody = zod_1.z
+    .object({
+    id: zod_1.z.string().describe("Liveview ID"),
+    modelKey: zod_1.z.literal("liveview").describe('Must be "liveview"'),
+    name: zod_1.z.string().describe("Liveview name"),
+    isDefault: zod_1.z.boolean().describe("Whether this is the default liveview for all viewers"),
+    isGlobal: zod_1.z.boolean().describe("Whether this liveview is available to all users"),
+    owner: zod_1.z.string().describe("Owning user ID"),
+    layout: zod_1.z.number().min(1).max(26).describe("Number of slots (1-26)"),
+    slots: zod_1.z.array(liveviewSlotInput).describe("Per-slot cameras and cycling settings"),
+})
+    .passthrough();
 function registerLiveviewTools(server, client, readOnly) {
     server.registerTool("protect_list_liveviews", {
-        description: "List all live views (camera grid layouts shown on viewers / in the Protect UI). Returns array; each liveview includes (Integration API 7.1.83-verified): id, modelKey, name, isDefault, isGlobal, layout (number, slot count), owner (user ID), slots (array of {cameras: string[], cycleMode, cycleInterval}). NOTE: slots use a `cameras` string-array, not a single `cameraId`.",
+        description: "List all live views (camera grid layouts shown on viewers / in the Protect UI). Returns array; each liveview includes (Integration API 7.3.70-verified): id, modelKey, name, isDefault, isGlobal, layout (number, slot count), owner (user ID), slots (array of {cameras: string[], cycleMode, cycleInterval}). NOTE: slots use a `cameras` string-array, not a single `cameraId`.",
         outputSchema: misc_js_1.liveviewListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -37,11 +59,9 @@ function registerLiveviewTools(server, client, readOnly) {
     if (readOnly)
         return;
     server.registerTool("protect_create_liveview", {
-        description: "Create a new live view",
+        description: "Create a new live view. Returns: the created liveview (same fields as protect_get_liveview).",
         inputSchema: {
-            settings: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("Liveview configuration. Required fields: id (string), modelKey (string, must be 'liveview'), owner (string, user ID), name (string), layout (number of slots), slots (array of {cameras: string[], cycleMode: string, cycleInterval: number}), isDefault (boolean), isGlobal (boolean)"),
+            settings: liveviewBody.describe("Full liveview object (all fields required)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
@@ -62,12 +82,10 @@ function registerLiveviewTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_update_liveview", {
-        description: "Update an existing live view (full replacement via PUT-style PATCH — include all fields)",
+        description: "Update an existing live view (full replacement via PUT-style PATCH — include all fields). Returns: the updated liveview.",
         inputSchema: {
             id: zod_1.z.string().describe("Liveview ID"),
-            settings: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("Full liveview object for update (all fields required). Known fields: id (string), modelKey (string, must be 'liveview'), owner (string, user ID), name (string), layout (number), slots (array of {cameras: string[], cycleMode: string, cycleInterval: number}), isDefault (boolean), isGlobal (boolean)"),
+            settings: liveviewBody.describe("Full liveview object (all fields required — fetch it with protect_get_liveview first)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()

package/dist/tools/pos.d.ts

@@ -3,8 +3,10 @@ import { ProtectClient } from "../client.js";
 /**
  * Point-of-sale event ingestion (added in Protect 7.3.x).
  *
- * `lineItems` entries use `.passthrough()` because the 7.3.47 docs render the
- * item schema collapsed — the request sample shows `{ title, quantity }`, but
+ * `lineItems` entries use `.passthrough()` because the 7.3.70 docs render the
+ * item schema collapsed — the request sample shows `{ title, quantity: 1 }`, but
  * an undocumented extra field should reach the API rather than be stripped.
+ * Since the item constraints are not published, `quantity` is only required
+ * to be positive (fractional quantities such as weights are allowed).
  */
 export declare function registerPosTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;

package/dist/tools/pos.js

@@ -9,9 +9,11 @@ const pos_js_1 = require("../schemas/pos.js");
 /**
  * Point-of-sale event ingestion (added in Protect 7.3.x).
  *
- * `lineItems` entries use `.passthrough()` because the 7.3.47 docs render the
- * item schema collapsed — the request sample shows `{ title, quantity }`, but
+ * `lineItems` entries use `.passthrough()` because the 7.3.70 docs render the
+ * item schema collapsed — the request sample shows `{ title, quantity: 1 }`, but
  * an undocumented extra field should reach the API rather than be stripped.
+ * Since the item constraints are not published, `quantity` is only required
+ * to be positive (fractional quantities such as weights are allowed).
  */
 function registerPosTools(server, client, readOnly) {
     if (readOnly)
@@ -19,7 +21,7 @@ function registerPosTools(server, client, readOnly) {
     const lineItemSchema = zod_1.z
         .object({
         title: zod_1.z.string().describe("Line item name"),
-        quantity: zod_1.z.number().min(1).describe("Quantity purchased (>= 1)"),
+        quantity: zod_1.z.number().positive().describe("Quantity purchased (> 0)"),
     })
         .passthrough();
     server.registerTool("protect_ingest_pos_transaction", {