@owine/unifi-protect-mcp 2.3.3 → 2.4.0

package/README.md

@@ -1,6 +1,6 @@
 # UniFi Protect MCP Server
 
-An MCP (Model Context Protocol) server that exposes UniFi Protect's Integration REST API as tools for Claude Code and other MCP clients. Provides 33 tools for managing cameras, lights, sensors, chimes, viewers, live views, and NVR status.
+An MCP (Model Context Protocol) server that exposes UniFi Protect's Integration REST API as tools for Claude Code and other MCP clients. Aligned with UniFi Protect API **7.1.47** — 73 tools covering cameras, lights, sensors, chimes, viewers, sirens, fobs, relays, speakers, bridges, link stations, alarm hubs, arm profiles, live views, files, users, NVR status, and WebSocket subscriptions.
 
 ## Prerequisites
 
@@ -75,7 +75,7 @@ This server provides layered safety controls for responsible operation:
 - **Confirmation parameter** — The most dangerous tools (`protect_disable_mic`, `protect_trigger_alarm_webhook`) require an explicit `confirm: true` parameter that must be present for the call to succeed
 - **Dry-run support** — All write tools (except those with `confirm`) accept an optional `dryRun: true` parameter that returns a preview of what would happen without making any changes
 
-## Tools (33 total)
+## Tools (73 total)
 
 ### System (2)
 | Tool | Description |
@@ -83,6 +83,12 @@ This server provides layered safety controls for responsible operation:
 | `protect_get_info` | Get system information and version details |
 | `protect_list_nvrs` | List all NVR devices |
 
+### Subscriptions (2)
+| Tool | Description |
+|---|---|
+| `protect_subscribe_devices` | Subscribe via WebSocket to device state updates |
+| `protect_subscribe_events` | Subscribe via WebSocket to event notifications |
+
 ### Cameras (12)
 | Tool | Description |
 |---|---|
@@ -127,6 +133,72 @@ This server provides layered safety controls for responsible operation:
 | `protect_get_viewer` | Get viewer details by ID |
 | `protect_update_viewer` | Update viewer settings |
 
+### Sirens (6)
+| Tool | Description |
+|---|---|
+| `protect_list_sirens` | List all sirens |
+| `protect_get_siren` | Get siren details by ID |
+| `protect_update_siren` | Update siren settings (name, volume, LED) |
+| `protect_play_siren` | Activate the siren alarm for a given duration (5/10/20/30s) |
+| `protect_stop_siren` | Stop an active siren |
+| `protect_test_siren_sound` | Test the siren sound for 5 seconds at a given volume |
+
+### Fobs (3)
+| Tool | Description |
+|---|---|
+| `protect_list_fobs` | List all key fobs |
+| `protect_get_fob` | Get fob details by ID |
+| `protect_update_fob` | Update fob settings |
+
+### Relays (4)
+| Tool | Description |
+|---|---|
+| `protect_list_relays` | List all relays |
+| `protect_get_relay` | Get relay details by ID |
+| `protect_update_relay` | Update relay settings |
+| `protect_activate_relay_output` | Set/toggle a relay output channel, with optional pulse duration |
+
+### Speakers (4)
+| Tool | Description |
+|---|---|
+| `protect_list_speakers` | List all speakers |
+| `protect_get_speaker` | Get speaker details by ID |
+| `protect_update_speaker` | Update speaker settings (volume, mic) |
+| `protect_test_speaker_sound` | Test the speaker sound at a given volume |
+
+### Bridges (3)
+| Tool | Description |
+|---|---|
+| `protect_list_bridges` | List all bridges |
+| `protect_get_bridge` | Get bridge details by ID |
+| `protect_update_bridge` | Update bridge settings |
+
+### Link Stations (3)
+| Tool | Description |
+|---|---|
+| `protect_list_link_stations` | List all link stations (non-alarm-hub gateways) |
+| `protect_get_link_station` | Get link station details by ID |
+| `protect_update_link_station` | Update link station settings |
+
+### Alarm Hubs (4)
+| Tool | Description |
+|---|---|
+| `protect_list_alarm_hubs` | List all alarm hubs |
+| `protect_get_alarm_hub` | Get alarm hub details by ID |
+| `protect_update_alarm_hub` | Update alarm hub settings |
+| `protect_trigger_alarm_hub_output` | Trigger an alarm hub output channel (sirens, lights, etc.) |
+
+### Arm Profiles (7) — local alarm manager
+| Tool | Description |
+|---|---|
+| `protect_list_arm_profiles` | List all arm profiles |
+| `protect_create_arm_profile` | Create a new arm profile |
+| `protect_set_current_arm_profile` | Set the active profile used when arming |
+| `protect_update_arm_profile` | Update an arm profile |
+| `protect_delete_arm_profile` | **DESTRUCTIVE:** Delete an arm profile by ID |
+| `protect_enable_arm_alarm` | Arm the alarm using the current profile |
+| `protect_disable_arm_alarm` | Disarm the alarm |
+
 ### Live Views (4)
 | Tool | Description |
 |---|---|
@@ -142,6 +214,14 @@ This server provides layered safety controls for responsible operation:
 | `protect_list_files` | List files by type |
 | `protect_upload_file` | Upload a file (base64-encoded) |
 
+### Users (4)
+| Tool | Description |
+|---|---|
+| `protect_list_users` | List Protect users (filtered by access permissions) |
+| `protect_get_user` | Get a Protect user by ID |
+| `protect_list_ulp_users` | List UniFi Identity (ULP) users with enrolled credentials |
+| `protect_get_ulp_user` | Get a UniFi Identity user by ID |
+
 ## Development
 
 ```bash

package/dist/tools/arm-profiles.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ProtectClient } from "../client.js";
+export declare function registerArmProfileTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;

package/dist/tools/arm-profiles.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerArmProfileTools = registerArmProfileTools;
+const zod_1 = require("zod");
+const responses_js_1 = require("../utils/responses.js");
+const safety_js_1 = require("../utils/safety.js");
+const url_js_1 = require("../utils/url.js");
+const ACTIVATION_DELAY_VALUES = [0, 60000, 300000, 600000];
+function registerArmProfileTools(server, client, readOnly) {
+    server.registerTool("protect_list_arm_profiles", {
+        description: "List all arm profiles. Only available when using local alarm manager.",
+        annotations: safety_js_1.READ_ONLY,
+    }, async () => {
+        try {
+            const data = await client.get("/arm-profiles");
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    if (readOnly)
+        return;
+    server.registerTool("protect_create_arm_profile", {
+        description: "Create a new arm profile. Only available when using local alarm manager.",
+        inputSchema: {
+            name: zod_1.z.string().min(1).max(255).describe("Name of the arm profile"),
+            automations: zod_1.z.array(zod_1.z.string()).describe("List of automation IDs associated with this arm profile"),
+            schedules: zod_1.z.array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())).describe("List of arm schedules"),
+            recordEverything: zod_1.z.boolean().describe("Whether to record everything when this arm profile is active"),
+            activationDelay: zod_1.z
+                .union([zod_1.z.literal(0), zod_1.z.literal(60000), zod_1.z.literal(300000), zod_1.z.literal(600000)])
+                .describe("Activation delay in milliseconds. Allowed: 0 (none), 60000 (1m), 300000 (5m), 600000 (10m)."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ name, automations, schedules, recordEverything, activationDelay, dryRun }) => {
+        try {
+            const body = { name, automations, schedules, recordEverything, activationDelay };
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", "/arm-profiles", body);
+            }
+            const data = await client.post("/arm-profiles", body);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_set_current_arm_profile", {
+        description: "Set the current arm profile to be used when enabling the arm alarm. Only available when using local alarm manager.",
+        inputSchema: {
+            armProfileId: zod_1.z.string().describe("The arm profile ID to set as current"),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ armProfileId, dryRun }) => {
+        try {
+            const body = { armProfileId };
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("PATCH", "/arm-profiles/settings", body);
+            }
+            const data = await client.patch("/arm-profiles/settings", body);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_update_arm_profile", {
+        description: "Update an existing arm profile (partial update via PATCH). Only available when using local alarm manager.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Arm profile ID"),
+            settings: zod_1.z
+                .record(zod_1.z.string(), zod_1.z.unknown())
+                .describe(`Partial arm profile settings. Known fields: name (string 1-255 chars), automations (array of strings), schedules (array of objects), recordEverything (boolean), activationDelay (number, allowed: ${ACTIVATION_DELAY_VALUES.join(", ")})`),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, settings, dryRun }) => {
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("PATCH", (0, url_js_1.safePath) `/arm-profiles/${id}`, settings);
+            }
+            const data = await client.patch((0, url_js_1.safePath) `/arm-profiles/${id}`, settings);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_delete_arm_profile", {
+        description: "Delete an arm profile by ID. Only available when using local alarm manager.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Arm profile ID"),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.DESTRUCTIVE,
+    }, async ({ id, dryRun }) => {
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("DELETE", (0, url_js_1.safePath) `/arm-profiles/${id}`);
+            }
+            const data = await client.delete((0, url_js_1.safePath) `/arm-profiles/${id}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_enable_arm_alarm", {
+        description: "Enable the arm alarm using the currently selected arm profile. Only available when using local alarm manager.",
+        inputSchema: {
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ dryRun }) => {
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", "/arm-profiles/enable");
+            }
+            const data = await client.post("/arm-profiles/enable");
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_disable_arm_alarm", {
+        description: "Disable the arm alarm. Only available when using local alarm manager.",
+        inputSchema: {
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ dryRun }) => {
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", "/arm-profiles/disable");
+            }
+            const data = await client.post("/arm-profiles/disable");
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+}

package/dist/tools/device-actions.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ProtectClient } from "../client.js";
+export declare function registerDeviceActionTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;

package/dist/tools/device-actions.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDeviceActionTools = registerDeviceActionTools;
+const zod_1 = require("zod");
+const responses_js_1 = require("../utils/responses.js");
+const safety_js_1 = require("../utils/safety.js");
+const url_js_1 = require("../utils/url.js");
+function registerDeviceActionTools(server, client, readOnly) {
+    if (readOnly)
+        return;
+    // --- Sirens ---
+    server.registerTool("protect_play_siren", {
+        description: "Activate the siren alarm for a duration. Tracks status and can be stopped early.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Siren ID"),
+            duration: zod_1.z
+                .union([zod_1.z.literal(5), zod_1.z.literal(10), zod_1.z.literal(20), zod_1.z.literal(30)])
+                .optional()
+                .describe("Duration of siren activation in seconds (5, 10, 20, or 30). Defaults to 5."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, duration, dryRun }) => {
+        try {
+            const body = duration !== undefined ? { duration } : undefined;
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/sirens/${id}/play`, body);
+            }
+            const data = await client.post((0, url_js_1.safePath) `/sirens/${id}/play`, body);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_stop_siren", {
+        description: "Stop an active siren",
+        inputSchema: {
+            id: zod_1.z.string().describe("Siren ID"),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, dryRun }) => {
+        try {
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/sirens/${id}/stop`);
+            }
+            const data = await client.post((0, url_js_1.safePath) `/sirens/${id}/stop`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_test_siren_sound", {
+        description: "Test the siren sound for 5 seconds at the specified volume",
+        inputSchema: {
+            id: zod_1.z.string().describe("Siren ID"),
+            volume: zod_1.z.number().int().min(1).max(100).optional().describe("Test volume 1-100. Defaults to configured device volume."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, volume, dryRun }) => {
+        try {
+            const body = volume !== undefined ? { volume } : undefined;
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/sirens/${id}/test-sound`, body);
+            }
+            const data = await client.post((0, url_js_1.safePath) `/sirens/${id}/test-sound`, body);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    // --- Speakers ---
+    server.registerTool("protect_test_speaker_sound", {
+        description: "Test the speaker sound at the specified volume",
+        inputSchema: {
+            id: zod_1.z.string().describe("Speaker ID"),
+            volume: zod_1.z.number().int().min(0).max(100).optional().describe("Test volume 0-100. Defaults to configured device volume."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, volume, dryRun }) => {
+        try {
+            const body = volume !== undefined ? { volume } : undefined;
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", (0, url_js_1.safePath) `/speakers/${id}/test-sound`, body);
+            }
+            const data = await client.post((0, url_js_1.safePath) `/speakers/${id}/test-sound`, body);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    // --- Relays ---
+    server.registerTool("protect_activate_relay_output", {
+        description: "Control a relay output. Set state to \"on\"/\"off\" to set explicitly, or omit to toggle. When state is \"on\", pulseDuration auto-turns off after the given milliseconds.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Relay ID"),
+            outputId: zod_1.z.number().int().min(0).describe("Output channel ID (0 or 1)"),
+            state: zod_1.z.enum(["on", "off"]).optional().describe("Desired output state. If omitted, toggles current state."),
+            pulseDuration: zod_1.z.number().int().min(0).optional().describe("Auto-off duration in milliseconds (only when state is \"on\"). 0 means stay on."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, outputId, state, pulseDuration, dryRun }) => {
+        try {
+            const body = {};
+            if (state !== undefined)
+                body.state = state;
+            if (pulseDuration !== undefined)
+                body.pulseDuration = pulseDuration;
+            const path = (0, url_js_1.safePath) `/relays/${id}/outputs/${outputId}/activate`;
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", path, Object.keys(body).length > 0 ? body : undefined);
+            }
+            const data = await client.post(path, Object.keys(body).length > 0 ? body : undefined);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    // --- Alarm hubs ---
+    server.registerTool("protect_trigger_alarm_hub_output", {
+        description: "Trigger an alarm hub output channel. Used to turn on/off connected sirens, lights, or other actuators.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Alarm hub (link station) ID"),
+            outputId: zod_1.z.number().int().min(0).describe("Output channel ID (0 or 1)"),
+            enable: zod_1.z.boolean().optional().describe("True to turn on, false to turn off. If omitted, toggles current state."),
+            delay: zod_1.z.number().int().min(0).optional().describe("Delay in milliseconds before output activates"),
+            duration: zod_1.z.number().int().min(0).optional().describe("Duration in milliseconds to keep output active. 0 = indefinite."),
+            dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
+        },
+        annotations: safety_js_1.WRITE,
+    }, async ({ id, outputId, enable, delay, duration, dryRun }) => {
+        try {
+            const body = {};
+            if (enable !== undefined)
+                body.enable = enable;
+            if (delay !== undefined)
+                body.delay = delay;
+            if (duration !== undefined)
+                body.duration = duration;
+            const path = (0, url_js_1.safePath) `/alarm-hubs/${id}/outputs/${outputId}/trigger`;
+            if (dryRun) {
+                return (0, safety_js_1.formatDryRun)("POST", path, Object.keys(body).length > 0 ? body : undefined);
+            }
+            const data = await client.post(path, Object.keys(body).length > 0 ? body : undefined);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+}

package/dist/tools/devices.d.ts

@@ -1,3 +1,13 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ProtectClient } from "../client.js";
+interface DeviceConfig {
+    urlPath: string;
+    singular: string;
+    plural: string;
+    label: string;
+    hint: string;
+}
 export declare function registerDeviceTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;
+/** Exported for tests */
+export declare const _DEVICE_CONFIGS: DeviceConfig[];
+export {};

package/dist/tools/devices.js

@@ -1,38 +1,110 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports._DEVICE_CONFIGS = void 0;
 exports.registerDeviceTools = registerDeviceTools;
 const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
-const settingsHints = {
-    light: "Known fields: name (string), isLightForceEnabled (boolean), lightModeSettings (object with mode, enableAt), lightDeviceSettings (object with isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)",
-    sensor: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object)",
-    chime: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of ring tone configurations)",
-    viewer: "Known fields: name (string), liveview (string, liveview ID to display)",
-};
-function registerDeviceCrud(server, client, deviceType, readOnly) {
-    const plural = `${deviceType}s`;
-    const label = deviceType.charAt(0).toUpperCase() + deviceType.slice(1);
-    server.registerTool(`protect_list_${plural}`, {
-        description: `List all ${plural} managed by UniFi Protect`,
+const DEVICES = [
+    {
+        urlPath: "lights",
+        singular: "light",
+        plural: "lights",
+        label: "Light",
+        hint: "Known fields: name (string), isLightForceEnabled (boolean), lightModeSettings (object with mode, enableAt), lightDeviceSettings (object with isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)",
+    },
+    {
+        urlPath: "sensors",
+        singular: "sensor",
+        plural: "sensors",
+        label: "Sensor",
+        hint: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object)",
+    },
+    {
+        urlPath: "chimes",
+        singular: "chime",
+        plural: "chimes",
+        label: "Chime",
+        hint: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of ring tone configurations)",
+    },
+    {
+        urlPath: "viewers",
+        singular: "viewer",
+        plural: "viewers",
+        label: "Viewer",
+        hint: "Known fields: name (string), liveview (string, liveview ID to display)",
+    },
+    {
+        urlPath: "sirens",
+        singular: "siren",
+        plural: "sirens",
+        label: "Siren",
+        hint: "Known fields: name (string), volume (integer 1-100), ledSettings (object with isEnabled boolean)",
+    },
+    {
+        urlPath: "fobs",
+        singular: "fob",
+        plural: "fobs",
+        label: "Fob",
+        hint: "Known fields: name (string)",
+    },
+    {
+        urlPath: "relays",
+        singular: "relay",
+        plural: "relays",
+        label: "Relay",
+        hint: "Known fields: name (string), ledSettings (object with isEnabled boolean)",
+    },
+    {
+        urlPath: "speakers",
+        singular: "speaker",
+        plural: "speakers",
+        label: "Speaker",
+        hint: "Known fields: name (string), volume (integer 0-100), micVolume (integer 0-100), isMicEnabled (boolean)",
+    },
+    {
+        urlPath: "bridges",
+        singular: "bridge",
+        plural: "bridges",
+        label: "Bridge",
+        hint: "Known fields: name (string)",
+    },
+    {
+        urlPath: "link-stations",
+        singular: "link_station",
+        plural: "link_stations",
+        label: "Link station",
+        hint: "Known fields: name (string)",
+    },
+    {
+        urlPath: "alarm-hubs",
+        singular: "alarm_hub",
+        plural: "alarm_hubs",
+        label: "Alarm hub",
+        hint: "Known fields: name (string)",
+    },
+];
+function registerDeviceCrud(server, client, cfg, readOnly) {
+    server.registerTool(`protect_list_${cfg.plural}`, {
+        description: `List all ${cfg.label.toLowerCase()}s managed by UniFi Protect`,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
-            const data = await client.get(`/${plural}`);
+            const data = await client.get(`/${cfg.urlPath}`);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {
             return (0, responses_js_1.formatError)(err);
         }
     });
-    server.registerTool(`protect_get_${deviceType}`, {
-        description: `Get details for a specific ${deviceType} by ID`,
-        inputSchema: { id: zod_1.z.string().describe(`${label} ID`) },
+    server.registerTool(`protect_get_${cfg.singular}`, {
+        description: `Get details for a specific ${cfg.label.toLowerCase()} by ID`,
+        inputSchema: { id: zod_1.z.string().describe(`${cfg.label} ID`) },
         annotations: safety_js_1.READ_ONLY,
     }, async ({ id }) => {
         try {
-            const data = await client.get((0, url_js_1.safePath) `/${plural}/${id}`);
+            const data = await client.get((0, url_js_1.safePath) `/${cfg.urlPath}/${id}`);
             return (0, responses_js_1.formatSuccess)(data);
         }
         catch (err) {
@@ -40,13 +112,13 @@ function registerDeviceCrud(server, client, deviceType, readOnly) {
         }
     });
     if (!readOnly) {
-        server.registerTool(`protect_update_${deviceType}`, {
-            description: `Update ${deviceType} settings (partial update via PATCH)`,
+        server.registerTool(`protect_update_${cfg.singular}`, {
+            description: `Update ${cfg.label.toLowerCase()} settings (partial update via PATCH)`,
             inputSchema: {
-                id: zod_1.z.string().describe(`${label} ID`),
+                id: zod_1.z.string().describe(`${cfg.label} ID`),
                 settings: zod_1.z
                     .record(zod_1.z.string(), zod_1.z.unknown())
-                    .describe(`Partial ${deviceType} settings to update. ${settingsHints[deviceType]}`),
+                    .describe(`Partial ${cfg.label.toLowerCase()} settings to update. ${cfg.hint}`),
                 dryRun: zod_1.z
                     .boolean()
                     .optional()
@@ -56,9 +128,9 @@ function registerDeviceCrud(server, client, deviceType, readOnly) {
         }, async ({ id, settings, dryRun }) => {
             try {
                 if (dryRun) {
-                    return (0, safety_js_1.formatDryRun)("PATCH", (0, url_js_1.safePath) `/${plural}/${id}`, settings);
+                    return (0, safety_js_1.formatDryRun)("PATCH", (0, url_js_1.safePath) `/${cfg.urlPath}/${id}`, settings);
                 }
-                const data = await client.patch((0, url_js_1.safePath) `/${plural}/${id}`, settings);
+                const data = await client.patch((0, url_js_1.safePath) `/${cfg.urlPath}/${id}`, settings);
                 return (0, responses_js_1.formatSuccess)(data);
             }
             catch (err) {
@@ -68,8 +140,9 @@ function registerDeviceCrud(server, client, deviceType, readOnly) {
     }
 }
 function registerDeviceTools(server, client, readOnly) {
-    const deviceTypes = ["light", "sensor", "chime", "viewer"];
-    for (const dt of deviceTypes) {
-        registerDeviceCrud(server, client, dt, readOnly);
+    for (const cfg of DEVICES) {
+        registerDeviceCrud(server, client, cfg, readOnly);
     }
 }
+/** Exported for tests */
+exports._DEVICE_CONFIGS = DEVICES;

package/dist/tools/index.js

@@ -4,14 +4,20 @@ exports.registerAllTools = registerAllTools;
 const system_js_1 = require("./system.js");
 const cameras_js_1 = require("./cameras.js");
 const devices_js_1 = require("./devices.js");
+const device_actions_js_1 = require("./device-actions.js");
 const liveviews_js_1 = require("./liveviews.js");
 const files_js_1 = require("./files.js");
 const subscriptions_js_1 = require("./subscriptions.js");
+const arm_profiles_js_1 = require("./arm-profiles.js");
+const users_js_1 = require("./users.js");
 function registerAllTools(server, client, readOnly) {
     (0, system_js_1.registerSystemTools)(server, client);
     (0, subscriptions_js_1.registerSubscriptionTools)(server, client);
     (0, cameras_js_1.registerCameraTools)(server, client, readOnly);
     (0, devices_js_1.registerDeviceTools)(server, client, readOnly);
+    (0, device_actions_js_1.registerDeviceActionTools)(server, client, readOnly);
     (0, liveviews_js_1.registerLiveviewTools)(server, client, readOnly);
     (0, files_js_1.registerFileTools)(server, client, readOnly);
+    (0, arm_profiles_js_1.registerArmProfileTools)(server, client, readOnly);
+    (0, users_js_1.registerUserTools)(server, client);
 }

package/dist/tools/users.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ProtectClient } from "../client.js";
+export declare function registerUserTools(server: McpServer, client: ProtectClient): void;

package/dist/tools/users.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerUserTools = registerUserTools;
+const zod_1 = require("zod");
+const responses_js_1 = require("../utils/responses.js");
+const safety_js_1 = require("../utils/safety.js");
+const url_js_1 = require("../utils/url.js");
+function registerUserTools(server, client) {
+    server.registerTool("protect_list_users", {
+        description: "List all Protect users. Filtered by access permissions.",
+        annotations: safety_js_1.READ_ONLY,
+    }, async () => {
+        try {
+            const data = await client.get("/users");
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_get_user", {
+        description: "Get details for a specific Protect user by ID",
+        inputSchema: { id: zod_1.z.string().describe("User ID") },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ id }) => {
+        try {
+            const data = await client.get((0, url_js_1.safePath) `/users/${id}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_list_ulp_users", {
+        description: "List all UniFi Identity (ULP) users with enrolled credentials (NFC cards, fingerprints).",
+        annotations: safety_js_1.READ_ONLY,
+    }, async () => {
+        try {
+            const data = await client.get("/ulp-users");
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+    server.registerTool("protect_get_ulp_user", {
+        description: "Get details for a specific UniFi Identity (ULP) user by ID",
+        inputSchema: { id: zod_1.z.string().describe("ULP user ID") },
+        annotations: safety_js_1.READ_ONLY,
+    }, async ({ id }) => {
+        try {
+            const data = await client.get((0, url_js_1.safePath) `/ulp-users/${id}`);
+            return (0, responses_js_1.formatSuccess)(data);
+        }
+        catch (err) {
+            return (0, responses_js_1.formatError)(err);
+        }
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owine/unifi-protect-mcp",
-  "version": "2.3.3",
+  "version": "2.4.0",
   "description": "MCP server for UniFi Protect Integration API",
   "main": "dist/index.js",
   "bin": {
@@ -42,7 +42,7 @@
   },
   "devDependencies": {
     "@eslint/js": "10.0.1",
-    "@types/node": "24.12.2",
+    "@types/node": "24.12.3",
     "@types/ws": "8.18.1",
     "@vitest/coverage-v8": "4.1.5",
     "eslint": "10.3.0",