@owine/unifi-protect-mcp 2.6.0 → 2.7.0

package/dist/schemas/misc.d.ts

@@ -0,0 +1,184 @@
+import { z } from "zod";
+/**
+ * Schemas below are verified against live UniFi Protect Integration API 7.1.60
+ * responses (Melrose NVR Pro console, 2026-05-15). The Integration API surface
+ * is much thinner than the internal Protect app API — only the fields observed
+ * in real responses are typed; `.passthrough()` still allows anything extra a
+ * different firmware/hardware mix might add.
+ */
+export declare const infoOutputSchema: {
+    applicationVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+};
+export declare const nvrSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    doorbellSettings: z.ZodOptional<z.ZodObject<{
+        defaultMessageText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        defaultMessageResetTimeoutMs: z.ZodOptional<z.ZodUnknown>;
+        customMessages: z.ZodOptional<z.ZodUnknown>;
+        customImages: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>;
+    armMode: z.ZodOptional<z.ZodObject<{
+        status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        armedAt: z.ZodOptional<z.ZodUnknown>;
+        willBeArmedAt: z.ZodOptional<z.ZodUnknown>;
+        breachDetectedAt: z.ZodOptional<z.ZodUnknown>;
+        breachEventCount: z.ZodOptional<z.ZodUnknown>;
+        breachTriggerEventId: z.ZodOptional<z.ZodUnknown>;
+        breachEventId: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export declare const nvrOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    doorbellSettings: z.ZodOptional<z.ZodObject<{
+        defaultMessageText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        defaultMessageResetTimeoutMs: z.ZodOptional<z.ZodUnknown>;
+        customMessages: z.ZodOptional<z.ZodUnknown>;
+        customImages: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>;
+    armMode: z.ZodOptional<z.ZodObject<{
+        status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        armedAt: z.ZodOptional<z.ZodUnknown>;
+        willBeArmedAt: z.ZodOptional<z.ZodUnknown>;
+        breachDetectedAt: z.ZodOptional<z.ZodUnknown>;
+        breachEventCount: z.ZodOptional<z.ZodUnknown>;
+        breachTriggerEventId: z.ZodOptional<z.ZodUnknown>;
+        breachEventId: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>;
+};
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ucoreUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export declare const userOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ucoreUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+};
+export declare const userListOutputSchema: {
+    result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        ucoreUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$loose>>;
+};
+export declare const ulpUserSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    fullName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export declare const ulpUserOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    fullName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+};
+export declare const ulpUserListOutputSchema: {
+    result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        firstName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        lastName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        fullName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$loose>>;
+};
+export declare const liveviewSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isDefault: z.ZodOptional<z.ZodUnknown>;
+    isGlobal: z.ZodOptional<z.ZodUnknown>;
+    layout: z.ZodOptional<z.ZodUnknown>;
+    owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        cameras: z.ZodOptional<z.ZodUnknown>;
+        cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        cycleInterval: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>>;
+}, z.core.$loose>;
+export declare const liveviewOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isDefault: z.ZodOptional<z.ZodUnknown>;
+    isGlobal: z.ZodOptional<z.ZodUnknown>;
+    layout: z.ZodOptional<z.ZodUnknown>;
+    owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        cameras: z.ZodOptional<z.ZodUnknown>;
+        cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        cycleInterval: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>>;
+};
+export declare const liveviewListOutputSchema: {
+    result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        isDefault: z.ZodOptional<z.ZodUnknown>;
+        isGlobal: z.ZodOptional<z.ZodUnknown>;
+        layout: z.ZodOptional<z.ZodUnknown>;
+        owner: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        slots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            cameras: z.ZodOptional<z.ZodUnknown>;
+            cycleMode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            cycleInterval: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$loose>>>;
+    }, z.core.$loose>>;
+};
+export declare const armProfileSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export declare const armProfileListOutputSchema: {
+    result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$loose>>;
+};
+export declare const armProfileOutputSchema: {
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+};
+export declare const fileSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export declare const fileListOutputSchema: {
+    result: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$loose>>;
+};
+export declare const subscriptionOutputSchema: {
+    messages: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    duration: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+};

package/dist/schemas/misc.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.subscriptionOutputSchema = exports.fileListOutputSchema = exports.fileSchema = exports.armProfileOutputSchema = exports.armProfileListOutputSchema = exports.armProfileSchema = exports.liveviewListOutputSchema = exports.liveviewOutputSchema = exports.liveviewSchema = exports.ulpUserListOutputSchema = exports.ulpUserOutputSchema = exports.ulpUserSchema = exports.userListOutputSchema = exports.userOutputSchema = exports.userSchema = exports.nvrOutputSchema = exports.nvrSchema = exports.infoOutputSchema = void 0;
+const zod_1 = require("zod");
+const common_js_1 = require("./common.js");
+/**
+ * Schemas below are verified against live UniFi Protect Integration API 7.1.60
+ * responses (Melrose NVR Pro console, 2026-05-15). The Integration API surface
+ * is much thinner than the internal Protect app API — only the fields observed
+ * in real responses are typed; `.passthrough()` still allows anything extra a
+ * different firmware/hardware mix might add.
+ */
+// --- System ---
+exports.infoOutputSchema = {
+    applicationVersion: (0, common_js_1.nullableString)("Current Protect application version"),
+};
+// GET /nvrs returns a SINGLE nvr object (not an array, despite the tool name).
+const armModeSchema = (0, common_js_1.passthroughObject)({
+    status: (0, common_js_1.nullableString)("disabled | armed | ..."),
+    armedAt: (0, common_js_1.unknownField)("Unix epoch ms when armed, or null (number|null)"),
+    willBeArmedAt: (0, common_js_1.unknownField)("Scheduled arm time, or null (number|null)"),
+    breachDetectedAt: (0, common_js_1.unknownField)("Unix epoch ms of last breach, or null"),
+    breachEventCount: (0, common_js_1.unknownField)("Count of breach events (number)"),
+    breachTriggerEventId: (0, common_js_1.unknownField)("Triggering event ID, or null (string|null)"),
+    breachEventId: (0, common_js_1.unknownField)("Breach event ID, or null (string|null)"),
+});
+const doorbellSettingsSchema = (0, common_js_1.passthroughObject)({
+    defaultMessageText: (0, common_js_1.nullableString)("Default doorbell LCD message"),
+    defaultMessageResetTimeoutMs: (0, common_js_1.unknownField)("Reset timeout in ms (number)"),
+    customMessages: (0, common_js_1.unknownField)("Configured custom LCD messages (array of strings)"),
+    customImages: (0, common_js_1.unknownField)("Configured custom LCD images (array)"),
+});
+exports.nvrSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("NVR ID"),
+    modelKey: (0, common_js_1.nullableString)('Always "nvr"'),
+    name: (0, common_js_1.nullableString)("NVR name"),
+    doorbellSettings: doorbellSettingsSchema.optional(),
+    armMode: armModeSchema.optional(),
+});
+// Single object — use the shape directly, NOT a list wrapper.
+exports.nvrOutputSchema = { ...exports.nvrSchema.shape };
+// --- Users ---
+exports.userSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("User ID"),
+    modelKey: (0, common_js_1.nullableString)('Always "user"'),
+    name: (0, common_js_1.nullableString)("Display name"),
+    firstName: (0, common_js_1.nullableString)("First name"),
+    lastName: (0, common_js_1.nullableString)("Last name"),
+    email: (0, common_js_1.nullableString)("Email address"),
+    ucoreUserId: (0, common_js_1.nullableString)("UniFi Core user UUID"),
+});
+exports.userOutputSchema = { ...exports.userSchema.shape };
+exports.userListOutputSchema = (0, common_js_1.listResultSchema)(exports.userSchema);
+exports.ulpUserSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("ULP user UUID"),
+    modelKey: (0, common_js_1.nullableString)('Always "ulpUser"'),
+    firstName: (0, common_js_1.nullableString)("First name"),
+    lastName: (0, common_js_1.nullableString)("Last name"),
+    fullName: (0, common_js_1.nullableString)("Full name"),
+    status: (0, common_js_1.nullableString)("Account status, e.g. ACTIVE"),
+});
+exports.ulpUserOutputSchema = { ...exports.ulpUserSchema.shape };
+exports.ulpUserListOutputSchema = (0, common_js_1.listResultSchema)(exports.ulpUserSchema);
+// --- Liveviews ---
+const liveviewSlotSchema = (0, common_js_1.passthroughObject)({
+    cameras: (0, common_js_1.unknownField)("Camera IDs shown in this slot (array of strings)"),
+    cycleMode: (0, common_js_1.nullableString)('Slot cycle mode, e.g. "time"'),
+    cycleInterval: (0, common_js_1.unknownField)("Cycle interval in seconds (number)"),
+});
+exports.liveviewSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("Liveview ID"),
+    modelKey: (0, common_js_1.nullableString)('Always "liveview"'),
+    name: (0, common_js_1.nullableString)("Liveview name"),
+    isDefault: (0, common_js_1.unknownField)("Whether this is the default liveview (boolean)"),
+    isGlobal: (0, common_js_1.unknownField)("Whether shared across all users (boolean)"),
+    layout: (0, common_js_1.unknownField)("Grid layout / slot count (number)"),
+    owner: (0, common_js_1.nullableString)("Owning user ID"),
+    slots: zod_1.z.array(liveviewSlotSchema).optional().describe("Camera slots"),
+});
+exports.liveviewOutputSchema = { ...exports.liveviewSchema.shape };
+exports.liveviewListOutputSchema = (0, common_js_1.listResultSchema)(exports.liveviewSchema);
+// --- Arm profiles ---
+// No instances on the verification console — fields unverified. Kept minimal:
+// only the identity field is typed; everything else flows via passthrough.
+exports.armProfileSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("Arm profile ID"),
+    modelKey: (0, common_js_1.nullableString)("Resource kind"),
+    name: (0, common_js_1.nullableString)("Arm profile name"),
+});
+exports.armProfileListOutputSchema = (0, common_js_1.listResultSchema)(exports.armProfileSchema);
+exports.armProfileOutputSchema = { ...exports.armProfileSchema.shape };
+// --- Files ---
+// `protect_list_files` (only fileType=animations supported) — unverified shape.
+exports.fileSchema = (0, common_js_1.passthroughObject)({
+    id: (0, common_js_1.idField)("File ID"),
+    modelKey: (0, common_js_1.nullableString)("Resource kind"),
+    name: (0, common_js_1.nullableString)("File name"),
+});
+exports.fileListOutputSchema = (0, common_js_1.listResultSchema)(exports.fileSchema);
+// --- Subscriptions ---
+exports.subscriptionOutputSchema = {
+    messages: zod_1.z
+        .array(zod_1.z.unknown())
+        .optional()
+        .describe("Captured WebSocket messages (add/update/remove or event envelopes)"),
+    duration: (0, common_js_1.unknownField)("Actual listen duration in seconds (number)"),
+    error: (0, common_js_1.nullableString)("Connection error, if any"),
+};

package/dist/tools/arm-profiles.js

@@ -5,10 +5,12 @@ const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
+const misc_js_1 = require("../schemas/misc.js");
 const ACTIVATION_DELAY_VALUES = [0, 60000, 300000, 600000];
 function registerArmProfileTools(server, client, readOnly) {
     server.registerTool("protect_list_arm_profiles", {
-        description: "List all arm profiles. Only available when using local alarm manager.",
+        description: "List all arm profiles (only available when using the local alarm manager — the standalone NVR alarm system, not Protect cloud alerts). Returns array. Response shape is NOT verified against Protect 7.1.60 (no arm profiles on the reference console); expect at least id, modelKey, name plus profile configuration fields — inspect a live response to confirm.",
+        outputSchema: misc_js_1.armProfileListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
@@ -33,6 +35,7 @@ function registerArmProfileTools(server, client, readOnly) {
                 .describe("Activation delay in milliseconds. Allowed: 0 (none), 60000 (1m), 300000 (5m), 600000 (10m)."),
             dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
         },
+        outputSchema: misc_js_1.armProfileOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ name, automations, schedules, recordEverything, activationDelay, dryRun }) => {
         try {
@@ -76,6 +79,7 @@ function registerArmProfileTools(server, client, readOnly) {
                 .describe(`Partial arm profile settings. Known fields: name (string 1-255 chars), automations (array of strings), schedules (array of objects), recordEverything (boolean), activationDelay (number, allowed: ${ACTIVATION_DELAY_VALUES.join(", ")})`),
             dryRun: zod_1.z.boolean().optional().describe("If true, return what would happen without making changes"),
         },
+        outputSchema: misc_js_1.armProfileOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ id, settings, dryRun }) => {
         try {

package/dist/tools/cameras.js

@@ -5,10 +5,12 @@ const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
+const cameras_js_1 = require("../schemas/cameras.js");
 function registerCameraTools(server, client, readOnly) {
     // --- Read-only tools (always registered) ---
     server.registerTool("protect_list_cameras", {
-        description: "List all cameras managed by UniFi Protect",
+        description: "List all cameras managed by UniFi Protect. Returns array; each camera includes (Integration API 7.1.60-verified fields): id, mac, name, modelKey, state (CONNECTED/DISCONNECTED), activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags (hasHdr, hasMic, hasSpeaker, hasLedStatus, smartDetectTypes[], smartDetectAudioTypes[], videoModes[], supportFullHdSnapshot), lcdMessage, ledSettings (isEnabled, floodLed, welcomeLed), osdSettings (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation), smartDetectSettings (objectTypes[], audioTypes[]). The Integration API does NOT expose recording state, motion timestamps, connection/last-seen, firmware, host, or per-channel stream config.",
+        outputSchema: cameras_js_1.cameraListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
@@ -20,8 +22,9 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_camera", {
-        description: "Get details for a specific camera by ID",
+        description: "Get details for a specific camera by ID. The Protect Integration API returns the SAME field set as protect_list_cameras entries (id, mac, name, modelKey, state, activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags, lcdMessage, ledSettings, osdSettings, smartDetectSettings) — there is no extended/by-id-only payload. Recording state, motion events, zones, and channel/RTSP config are NOT exposed by this API surface.",
         inputSchema: { id: zod_1.z.string().describe("Camera ID") },
+        outputSchema: cameras_js_1.cameraOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ id }) => {
         try {
@@ -33,7 +36,7 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_snapshot", {
-        description: "Get a JPEG snapshot from a camera (returns image)",
+        description: "Get a JPEG snapshot from a camera. Returns a base64-encoded image/jpeg (rendered directly by MCP clients). Use highQuality=true for full-resolution capture from the camera's main channel; otherwise a low-res thumbnail is returned.",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             highQuality: zod_1.z
@@ -63,8 +66,9 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_rtsp_streams", {
-        description: "Get active RTSPS stream sessions for a camera",
+        description: "Get active RTSPS stream sessions for a camera. Returns the per-quality stream URLs currently published (keys typically: high, medium, low, package). Empty/missing keys mean no session is currently active at that quality — use protect_create_rtsp_stream to start one.",
         inputSchema: { id: zod_1.z.string().describe("Camera ID") },
+        outputSchema: cameras_js_1.rtspStreamOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ id }) => {
         try {
@@ -90,6 +94,7 @@ function registerCameraTools(server, client, readOnly) {
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: cameras_js_1.cameraOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ id, settings, dryRun }) => {
         try {
@@ -115,6 +120,7 @@ function registerCameraTools(server, client, readOnly) {
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: cameras_js_1.rtspStreamOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ id, qualities, dryRun }) => {
         try {
@@ -164,6 +170,7 @@ function registerCameraTools(server, client, readOnly) {
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: cameras_js_1.talkbackSessionOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ id, dryRun }) => {
         try {

package/dist/tools/devices.d.ts

@@ -6,6 +6,7 @@ interface DeviceConfig {
     plural: string;
     label: string;
     hint: string;
+    returns: string;
 }
 export declare function registerDeviceTools(server: McpServer, client: ProtectClient, readOnly: boolean): void;
 /** Exported for tests */

package/dist/tools/devices.js

@@ -6,6 +6,7 @@ const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
+const devices_js_1 = require("../schemas/devices.js");
 const DEVICES = [
     {
         urlPath: "lights",
@@ -13,6 +14,7 @@ const DEVICES = [
         plural: "lights",
         label: "Light",
         hint: "Known fields: name (string), isLightForceEnabled (boolean), lightModeSettings (object with mode, enableAt), lightDeviceSettings (object with isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "sensors",
@@ -20,6 +22,7 @@ const DEVICES = [
         plural: "sensors",
         label: "Sensor",
         hint: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "chimes",
@@ -27,6 +30,7 @@ const DEVICES = [
         plural: "chimes",
         label: "Chime",
         hint: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of ring tone configurations)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "viewers",
@@ -34,6 +38,7 @@ const DEVICES = [
         plural: "viewers",
         label: "Viewer",
         hint: "Known fields: name (string), liveview (string, liveview ID to display)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "sirens",
@@ -41,6 +46,7 @@ const DEVICES = [
         plural: "sirens",
         label: "Siren",
         hint: "Known fields: name (string), volume (integer 1-100), ledSettings (object with isEnabled boolean)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "fobs",
@@ -48,6 +54,7 @@ const DEVICES = [
         plural: "fobs",
         label: "Fob",
         hint: "Known fields: name (string)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "relays",
@@ -55,6 +62,7 @@ const DEVICES = [
         plural: "relays",
         label: "Relay",
         hint: "Known fields: name (string), ledSettings (object with isEnabled boolean)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "speakers",
@@ -62,6 +70,7 @@ const DEVICES = [
         plural: "speakers",
         label: "Speaker",
         hint: "Known fields: name (string), volume (integer 0-100), micVolume (integer 0-100), isMicEnabled (boolean)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "bridges",
@@ -69,6 +78,7 @@ const DEVICES = [
         plural: "bridges",
         label: "Bridge",
         hint: "Known fields: name (string)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "link-stations",
@@ -76,6 +86,7 @@ const DEVICES = [
         plural: "link_stations",
         label: "Link station",
         hint: "Known fields: name (string)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
     {
         urlPath: "alarm-hubs",
@@ -83,11 +94,14 @@ const DEVICES = [
         plural: "alarm_hubs",
         label: "Alarm hub",
         hint: "Known fields: name (string)",
+        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
     },
 ];
 function registerDeviceCrud(server, client, cfg, readOnly) {
+    const schemaKey = cfg.singular;
     server.registerTool(`protect_list_${cfg.plural}`, {
-        description: `List all ${cfg.label.toLowerCase()}s managed by UniFi Protect`,
+        description: `List all ${cfg.label.toLowerCase()}s managed by UniFi Protect. Returns array; each ${cfg.label.toLowerCase()} includes: ${cfg.returns}.`,
+        outputSchema: (0, devices_js_1.listOutputShape)(schemaKey),
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
@@ -99,8 +113,9 @@ function registerDeviceCrud(server, client, cfg, readOnly) {
         }
     });
     server.registerTool(`protect_get_${cfg.singular}`, {
-        description: `Get details for a specific ${cfg.label.toLowerCase()} by ID`,
+        description: `Get full details for a specific ${cfg.label.toLowerCase()} by ID. Returns: ${cfg.returns}.`,
         inputSchema: { id: zod_1.z.string().describe(`${cfg.label} ID`) },
+        outputSchema: (0, devices_js_1.itemOutputShape)(schemaKey),
         annotations: safety_js_1.READ_ONLY,
     }, async ({ id }) => {
         try {
@@ -124,6 +139,7 @@ function registerDeviceCrud(server, client, cfg, readOnly) {
                     .optional()
                     .describe("If true, return what would happen without making changes"),
             },
+            outputSchema: (0, devices_js_1.itemOutputShape)(schemaKey),
             annotations: safety_js_1.WRITE,
         }, async ({ id, settings, dryRun }) => {
             try {

package/dist/tools/files.js

@@ -5,14 +5,16 @@ const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
+const misc_js_1 = require("../schemas/misc.js");
 function registerFileTools(server, client, readOnly) {
     server.registerTool("protect_list_files", {
-        description: "List files of a given type (only 'animations' is supported)",
+        description: "List files of a given type (only 'animations' is currently supported — GIF clips uploadable to G4 Doorbell screens). Returns array. Per-record shape is NOT verified against Protect 7.1.60 (no files on the reference console) — inspect a live response to confirm fields.",
         inputSchema: {
             fileType: zod_1.z
                 .string()
                 .describe("File type to list (only 'animations' is currently supported)"),
         },
+        outputSchema: misc_js_1.fileListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ fileType }) => {
         try {

package/dist/tools/liveviews.js

@@ -5,9 +5,11 @@ const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
+const misc_js_1 = require("../schemas/misc.js");
 function registerLiveviewTools(server, client, readOnly) {
     server.registerTool("protect_list_liveviews", {
-        description: "List all live views configured in UniFi Protect",
+        description: "List all live views (camera grid layouts shown on viewers / in the Protect UI). Returns array; each liveview includes (Integration API 7.1.60-verified): id, modelKey, name, isDefault, isGlobal, layout (number, slot count), owner (user ID), slots (array of {cameras: string[], cycleMode, cycleInterval}). NOTE: slots use a `cameras` string-array, not a single `cameraId`.",
+        outputSchema: misc_js_1.liveviewListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
@@ -19,8 +21,9 @@ function registerLiveviewTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_liveview", {
-        description: "Get details for a specific live view by ID",
+        description: "Get details for a specific live view by ID. Returns: id, modelKey, name, isDefault, isGlobal, layout, owner, slots (each slot: cameras string[], cycleMode, cycleInterval). The full slot list is needed when updating because PATCH replaces the slots array.",
         inputSchema: { id: zod_1.z.string().describe("Liveview ID") },
+        outputSchema: misc_js_1.liveviewOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ id }) => {
         try {
@@ -44,6 +47,7 @@ function registerLiveviewTools(server, client, readOnly) {
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: misc_js_1.liveviewOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ settings, dryRun }) => {
         try {
@@ -69,6 +73,7 @@ function registerLiveviewTools(server, client, readOnly) {
                 .optional()
                 .describe("If true, return what would happen without making changes"),
         },
+        outputSchema: misc_js_1.liveviewOutputSchema,
         annotations: safety_js_1.WRITE,
     }, async ({ id, settings, dryRun }) => {
         try {

package/dist/tools/subscriptions.js

@@ -4,6 +4,7 @@ exports.registerSubscriptionTools = registerSubscriptionTools;
 const zod_1 = require("zod");
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
+const misc_js_1 = require("../schemas/misc.js");
 const durationSchema = zod_1.z
     .number()
     .min(1)
@@ -43,8 +44,9 @@ function collectMessages(client, path, duration) {
 }
 function registerSubscriptionTools(server, client) {
     server.registerTool("protect_subscribe_devices", {
-        description: "Connect to the device update WebSocket and collect messages for a specified duration. Returns real-time add/update/remove events for Protect-managed hardware devices.",
+        description: "Connect to the device update WebSocket and collect messages for a specified duration (1-30s). Returns {messages, duration, error?}; each message has {type: 'add'|'update'|'remove', modelKey: 'camera'|'light'|'sensor'|..., id, payload: partial device fields that changed}. Use to detect state changes like isRecording flipping, battery drops, or new devices being adopted — fields delivered are only those that changed, not the full device object.",
         inputSchema: { duration: durationSchema },
+        outputSchema: misc_js_1.subscriptionOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ duration }) => {
         try {
@@ -56,8 +58,9 @@ function registerSubscriptionTools(server, client) {
         }
     });
     server.registerTool("protect_subscribe_events", {
-        description: "Connect to the Protect event WebSocket and collect messages for a specified duration. Returns events including motion, ring (doorbell), and smartDetect (person/vehicle/animal/package).",
+        description: "Connect to the Protect event WebSocket and collect messages for a specified duration (1-30s). Returns {messages, duration, error?}; each event message includes: id, type ('motion' | 'ring' | 'smartDetectZone' | 'smartDetectLine' | 'sensorMotion' | 'sensorAlarm' | 'fingerprint' | 'nfcCard' | ...), start, end (null while ongoing), camera/sensor id, score, smartDetectTypes (['person','vehicle','animal','package','license_plate','face']), metadata (e.g. detected license plate text, NFC card id, fingerprint id, ULP user match).",
         inputSchema: { duration: durationSchema },
+        outputSchema: misc_js_1.subscriptionOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async ({ duration }) => {
         try {

package/dist/tools/system.js

@@ -3,9 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerSystemTools = registerSystemTools;
 const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
+const misc_js_1 = require("../schemas/misc.js");
 function registerSystemTools(server, client) {
     server.registerTool("protect_get_info", {
-        description: "Get UniFi Protect system information and version details",
+        description: "Get UniFi Protect application information. Returns: applicationVersion (string).",
+        outputSchema: misc_js_1.infoOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {
@@ -17,7 +19,8 @@ function registerSystemTools(server, client) {
         }
     });
     server.registerTool("protect_list_nvrs", {
-        description: "List all NVR (Network Video Recorder) devices",
+        description: "Get the NVR (Network Video Recorder) console info. NOTE: despite the name, the Protect Integration API's /nvrs endpoint returns a SINGLE NVR object, not an array. Returns: id, modelKey, name, doorbellSettings (defaultMessageText, defaultMessageResetTimeoutMs, customMessages[], customImages[]), armMode (status, armedAt, willBeArmedAt, breachDetectedAt, breachEventCount, breachTriggerEventId, breachEventId).",
+        outputSchema: misc_js_1.nvrOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
         try {