@owine/unifi-protect-mcp 2.7.5 → 2.8.0

package/dist/schemas/devices.js

@@ -5,40 +5,123 @@ exports.itemOutputShape = itemOutputShape;
 exports.listOutputShape = listOutputShape;
 const common_js_1 = require("./common.js");
 /**
- * UNVERIFIED DOMAINS.
+ * Device schemas for the config-driven Protect device types.
  *
- * The verification console (Protect 7.1.60) has zero instances of any of these
- * device types (lights, sensors, chimes, viewers, sirens, fobs, relays,
- * speakers, bridges, link-stations, alarm-hubs), so their real Integration API
- * response shapes could not be observed.
+ * Field sets are derived from the UniFi Protect Integration API 7.1.83 docs
+ * (per-type response samples). Chimes were additionally verified against live
+ * console responses (2026-06-20); the rest have no instances on the available
+ * console, so their TOP-LEVEL fields are typed from the published docs while
+ * every nested object/array is left as `unknownField()` (z.unknown()) — naming
+ * the field for the LLM without risking SDK output-validation failures on a
+ * shape we have not observed live. `.passthrough()` lets any extra field flow.
  *
- * Per the unifi-api-update skill's "soften unverifiable claims" rule, we do NOT
- * assert device-specific field lists here. The schema only types the universal
- * identity fields seen consistently across every *verified* Protect resource
- * (camera, nvr, user): id, modelKey, name, mac, state. `.passthrough()` lets
- * every real (unverified) field through without rejection.
- *
- * When a console with these devices is available, capture live samples and
- * tighten these per the skill (Step 4/5).
+ * Convention (see schemas/common.ts): only `id` is strictly typed; strings use
+ * `nullableString()` (API returns explicit null for absent strings); booleans,
+ * numbers, and unverified nested structures use `unknownField()`.
  */
-const unverifiedDeviceSchema = () => (0, common_js_1.passthroughObject)({
+/** Identity fields common to every Protect device resource. */
+const deviceIdentity = () => ({
     id: (0, common_js_1.idField)("Device ID"),
     modelKey: (0, common_js_1.nullableString)("Resource kind"),
     name: (0, common_js_1.nullableString)("Device name"),
     mac: (0, common_js_1.nullableString)("MAC address"),
     state: (0, common_js_1.nullableString)("CONNECTED | DISCONNECTED | ..."),
 });
-exports.lightSchema = unverifiedDeviceSchema();
-exports.sensorSchema = unverifiedDeviceSchema();
-exports.chimeSchema = unverifiedDeviceSchema();
-exports.viewerSchema = unverifiedDeviceSchema();
-exports.sirenSchema = unverifiedDeviceSchema();
-exports.fobSchema = unverifiedDeviceSchema();
-exports.relaySchema = unverifiedDeviceSchema();
-exports.speakerSchema = unverifiedDeviceSchema();
-exports.bridgeSchema = unverifiedDeviceSchema();
-exports.linkStationSchema = unverifiedDeviceSchema();
-exports.alarmHubSchema = unverifiedDeviceSchema();
+exports.lightSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    lightModeSettings: (0, common_js_1.unknownField)("Activation settings (object: mode, enableAt)"),
+    lightDeviceSettings: (0, common_js_1.unknownField)("Hardware settings (object: isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)"),
+    isDark: (0, common_js_1.unknownField)("Whether it is currently dark out (boolean)"),
+    isLightOn: (0, common_js_1.unknownField)("Whether the light is currently on (boolean)"),
+    isLightForceEnabled: (0, common_js_1.unknownField)("Main LED force-enabled (boolean)"),
+    lastMotion: (0, common_js_1.unknownField)("Last motion timestamp in epoch ms (number)"),
+    isPirMotionDetected: (0, common_js_1.unknownField)("PIR motion currently detected (boolean)"),
+    camera: (0, common_js_1.nullableString)("Paired camera ID"),
+});
+exports.sensorSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    mountType: (0, common_js_1.nullableString)('Mount type, e.g. "door", "leak", "garage"'),
+    batteryStatus: (0, common_js_1.unknownField)("Battery status (object: percentage, isLow)"),
+    stats: (0, common_js_1.unknownField)("Environmental stats (object: light, humidity, temperature)"),
+    lightSettings: (0, common_js_1.unknownField)("Light threshold settings (object)"),
+    humiditySettings: (0, common_js_1.unknownField)("Humidity threshold settings (object)"),
+    temperatureSettings: (0, common_js_1.unknownField)("Temperature threshold settings (object)"),
+    isOpened: (0, common_js_1.unknownField)("Open/close contact state (boolean)"),
+    openStatusChangedAt: (0, common_js_1.unknownField)("Open-status change timestamp in epoch ms (number)"),
+    isMotionDetected: (0, common_js_1.unknownField)("Motion currently detected (boolean)"),
+    motionDetectedAt: (0, common_js_1.unknownField)("Last motion timestamp in epoch ms (number)"),
+    motionSettings: (0, common_js_1.unknownField)("Motion detection settings (object)"),
+    glassBreakSettings: (0, common_js_1.unknownField)("Glass-break detection settings (object)"),
+    scheduleMode: (0, common_js_1.nullableString)('Schedule mode: "always" | "when_armed"'),
+    armProfileIds: (0, common_js_1.unknownField)("Arm profile IDs this sensor belongs to (array of strings)"),
+    hasCustomSensitivityWhenArmed: (0, common_js_1.unknownField)("Custom armed sensitivity enabled (boolean)"),
+    alarmTriggeredAt: (0, common_js_1.unknownField)("Last alarm timestamp in epoch ms (number)"),
+    alarmSettings: (0, common_js_1.unknownField)("Alarm settings (object: isEnabled)"),
+    leakDetectedAt: (0, common_js_1.unknownField)("Last leak timestamp in epoch ms (number)"),
+    externalLeakDetectedAt: (0, common_js_1.unknownField)("Last external-leak timestamp in epoch ms (number)"),
+    leakSettings: (0, common_js_1.unknownField)("Leak detection settings (object)"),
+    tamperingDetectedAt: (0, common_js_1.unknownField)("Last tampering timestamp in epoch ms (number)"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object: signalState, batteryStatus, bridge)"),
+});
+// Verified live (7.1.83): chimes return cameraIds[] and ringSettings[] whose
+// items are { cameraId, volume, ringtoneId, repeatTimes }.
+exports.chimeSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    cameraIds: (0, common_js_1.unknownField)("Paired camera IDs (array of strings)"),
+    ringSettings: (0, common_js_1.unknownField)("Per-camera ring config (array of objects: cameraId, volume, ringtoneId, repeatTimes)"),
+});
+exports.viewerSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    liveview: (0, common_js_1.nullableString)("Assigned live view ID, or null"),
+    streamLimit: (0, common_js_1.unknownField)("Max concurrent streams (number)"),
+});
+exports.sirenSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    volume: (0, common_js_1.unknownField)("Siren volume (number)"),
+    ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
+    sirenStatus: (0, common_js_1.unknownField)("Current siren status (object: isActive, activatedAt, duration)"),
+    connectionType: (0, common_js_1.nullableString)('Connection type, e.g. "lora"'),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+});
+exports.fobSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    awayState: (0, common_js_1.nullableString)('Away state, e.g. "ONLINE"'),
+    buttonLabels: (0, common_js_1.nullableString)('Button label preset, e.g. "securityActions"'),
+    featureFlags: (0, common_js_1.unknownField)("Feature flags (object: buttons[])"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+});
+exports.relaySchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
+    outputs: (0, common_js_1.unknownField)("Output channels (array of objects)"),
+    inputs: (0, common_js_1.unknownField)("Input channels (array of objects)"),
+    wirelessConnectionState: (0, common_js_1.unknownField)("Wireless link state (object)"),
+});
+exports.speakerSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    volume: (0, common_js_1.unknownField)("Speaker volume (number)"),
+    micVolume: (0, common_js_1.unknownField)("Microphone volume (number)"),
+    isMicEnabled: (0, common_js_1.unknownField)("Microphone enabled (boolean)"),
+    speakerState: (0, common_js_1.unknownField)("Speaker state (object: status, mode)"),
+    featureFlags: (0, common_js_1.unknownField)("Feature flags (object: hasMic)"),
+});
+exports.bridgeSchema = (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    platform: (0, common_js_1.nullableString)('Hardware platform, e.g. "mt7621"'),
+    clients: (0, common_js_1.unknownField)("Connected client MACs (array of strings)"),
+    maxClients: (0, common_js_1.unknownField)("Max client capacity (number)"),
+});
+// Link stations and alarm hubs share one shape (both report modelKey
+// "linkstation"); /alarm-hubs is the same resource filtered to alarm hubs.
+const linkStationLikeSchema = () => (0, common_js_1.passthroughObject)({
+    ...deviceIdentity(),
+    isAlarmHub: (0, common_js_1.unknownField)("Whether this device is an alarm hub (boolean)"),
+    ledSettings: (0, common_js_1.unknownField)("LED settings (object: isEnabled)"),
+    lastEvent: (0, common_js_1.unknownField)("Last event timestamp in epoch ms (number)"),
+    alarmHub: (0, common_js_1.unknownField)("Alarm hub status (object: armed, battery, connector, cover, output, input, …)"),
+});
+exports.linkStationSchema = linkStationLikeSchema();
+exports.alarmHubSchema = linkStationLikeSchema();
 exports.DEVICE_SCHEMAS = {
     light: exports.lightSchema,
     sensor: exports.sensorSchema,

package/dist/schemas/misc.d.ts

@@ -1,10 +1,11 @@
 import { z } from "zod";
 /**
- * Schemas below are verified against live UniFi Protect Integration API 7.1.60
- * responses (Melrose NVR Pro console, 2026-05-15). The Integration API surface
- * is much thinner than the internal Protect app API — only the fields observed
- * in real responses are typed; `.passthrough()` still allows anything extra a
- * different firmware/hardware mix might add.
+ * Schemas below are verified against live UniFi Protect Integration API 7.1.83
+ * responses (Melrose NVR Pro console, 2026-06-20) where instances exist, and
+ * against the 7.1.83 published docs otherwise (arm profiles, files — no
+ * instances on the console). The Integration API surface is much thinner than
+ * the internal Protect app API — only observed/documented fields are typed;
+ * `.passthrough()` still allows anything extra a firmware/hardware mix adds.
  */
 export declare const infoOutputSchema: {
     applicationVersion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -21,6 +22,7 @@ export declare const nvrSchema: z.ZodObject<{
     }, z.core.$loose>>;
     armMode: z.ZodOptional<z.ZodObject<{
         status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        armProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armedAt: z.ZodOptional<z.ZodUnknown>;
         willBeArmedAt: z.ZodOptional<z.ZodUnknown>;
         breachDetectedAt: z.ZodOptional<z.ZodUnknown>;
@@ -41,6 +43,7 @@ export declare const nvrOutputSchema: {
     }, z.core.$loose>>;
     armMode: z.ZodOptional<z.ZodObject<{
         status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        armProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         armedAt: z.ZodOptional<z.ZodUnknown>;
         willBeArmedAt: z.ZodOptional<z.ZodUnknown>;
         breachDetectedAt: z.ZodOptional<z.ZodUnknown>;
@@ -150,31 +153,51 @@ export declare const liveviewListOutputSchema: {
 };
 export declare const armProfileSchema: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
-    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    automations: z.ZodOptional<z.ZodUnknown>;
+    creator: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    schedules: z.ZodOptional<z.ZodUnknown>;
+    recordEverything: z.ZodOptional<z.ZodUnknown>;
+    activationDelay: z.ZodOptional<z.ZodUnknown>;
+    createdAt: z.ZodOptional<z.ZodUnknown>;
+    updatedAt: z.ZodOptional<z.ZodUnknown>;
 }, z.core.$loose>;
 export declare const armProfileListOutputSchema: {
     result: z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
-        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        automations: z.ZodOptional<z.ZodUnknown>;
+        creator: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        schedules: z.ZodOptional<z.ZodUnknown>;
+        recordEverything: z.ZodOptional<z.ZodUnknown>;
+        activationDelay: z.ZodOptional<z.ZodUnknown>;
+        createdAt: z.ZodOptional<z.ZodUnknown>;
+        updatedAt: z.ZodOptional<z.ZodUnknown>;
     }, z.core.$loose>>;
 };
 export declare const armProfileOutputSchema: {
     id: z.ZodOptional<z.ZodString>;
-    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    automations: z.ZodOptional<z.ZodUnknown>;
+    creator: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    schedules: z.ZodOptional<z.ZodUnknown>;
+    recordEverything: z.ZodOptional<z.ZodUnknown>;
+    activationDelay: z.ZodOptional<z.ZodUnknown>;
+    createdAt: z.ZodOptional<z.ZodUnknown>;
+    updatedAt: z.ZodOptional<z.ZodUnknown>;
 };
 export declare const fileSchema: z.ZodObject<{
-    id: z.ZodOptional<z.ZodString>;
-    modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    originalName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$loose>;
 export declare const fileListOutputSchema: {
     result: z.ZodArray<z.ZodObject<{
-        id: z.ZodOptional<z.ZodString>;
-        modelKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        originalName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$loose>>;
 };
 export declare const subscriptionOutputSchema: {

package/dist/schemas/misc.js

@@ -4,11 +4,12 @@ exports.subscriptionOutputSchema = exports.fileListOutputSchema = exports.fileSc
 const zod_1 = require("zod");
 const common_js_1 = require("./common.js");
 /**
- * Schemas below are verified against live UniFi Protect Integration API 7.1.60
- * responses (Melrose NVR Pro console, 2026-05-15). The Integration API surface
- * is much thinner than the internal Protect app API — only the fields observed
- * in real responses are typed; `.passthrough()` still allows anything extra a
- * different firmware/hardware mix might add.
+ * Schemas below are verified against live UniFi Protect Integration API 7.1.83
+ * responses (Melrose NVR Pro console, 2026-06-20) where instances exist, and
+ * against the 7.1.83 published docs otherwise (arm profiles, files — no
+ * instances on the console). The Integration API surface is much thinner than
+ * the internal Protect app API — only observed/documented fields are typed;
+ * `.passthrough()` still allows anything extra a firmware/hardware mix adds.
  */
 // --- System ---
 exports.infoOutputSchema = {
@@ -16,7 +17,8 @@ exports.infoOutputSchema = {
 };
 // GET /nvrs returns a SINGLE nvr object (not an array, despite the tool name).
 const armModeSchema = (0, common_js_1.passthroughObject)({
-    status: (0, common_js_1.nullableString)("disabled | armed | ..."),
+    status: (0, common_js_1.nullableString)("disabled | arming | armed | ..."),
+    armProfileId: (0, common_js_1.nullableString)("Active arm profile ID (present when arming/armed)"),
     armedAt: (0, common_js_1.unknownField)("Unix epoch ms when armed, or null (number|null)"),
     willBeArmedAt: (0, common_js_1.unknownField)("Scheduled arm time, or null (number|null)"),
     breachDetectedAt: (0, common_js_1.unknownField)("Unix epoch ms of last breach, or null"),
@@ -80,21 +82,29 @@ exports.liveviewSchema = (0, common_js_1.passthroughObject)({
 exports.liveviewOutputSchema = { ...exports.liveviewSchema.shape };
 exports.liveviewListOutputSchema = (0, common_js_1.listResultSchema)(exports.liveviewSchema);
 // --- Arm profiles ---
-// No instances on the verification console — fields unverified. Kept minimal:
-// only the identity field is typed; everything else flows via passthrough.
+// Fields from the 7.1.83 docs (no instances on the console to verify live).
+// Arm profiles carry no `modelKey`. Nested arrays stay unknownField.
 exports.armProfileSchema = (0, common_js_1.passthroughObject)({
     id: (0, common_js_1.idField)("Arm profile ID"),
-    modelKey: (0, common_js_1.nullableString)("Resource kind"),
     name: (0, common_js_1.nullableString)("Arm profile name"),
+    automations: (0, common_js_1.unknownField)("Associated automation IDs (array of strings)"),
+    creator: (0, common_js_1.nullableString)("ID of the user who created the profile"),
+    schedules: (0, common_js_1.unknownField)("Arm schedules (array of objects)"),
+    recordEverything: (0, common_js_1.unknownField)("Record everything while active (boolean)"),
+    activationDelay: (0, common_js_1.unknownField)("Activation delay in ms: 0 | 60000 | 300000 | 600000 (number)"),
+    createdAt: (0, common_js_1.unknownField)("Creation timestamp in epoch ms (number)"),
+    updatedAt: (0, common_js_1.unknownField)("Last update timestamp in epoch ms (number)"),
 });
 exports.armProfileListOutputSchema = (0, common_js_1.listResultSchema)(exports.armProfileSchema);
 exports.armProfileOutputSchema = { ...exports.armProfileSchema.shape };
 // --- Files ---
-// `protect_list_files` (only fileType=animations supported) — unverified shape.
+// Device asset files (only fileType=animations supported). Shape from 7.1.83
+// docs: { name, type, originalName, path } — no id/modelKey.
 exports.fileSchema = (0, common_js_1.passthroughObject)({
-    id: (0, common_js_1.idField)("File ID"),
-    modelKey: (0, common_js_1.nullableString)("Resource kind"),
-    name: (0, common_js_1.nullableString)("File name"),
+    name: (0, common_js_1.nullableString)("Stored file name (server-generated)"),
+    type: (0, common_js_1.nullableString)('Asset file type, e.g. "animations"'),
+    originalName: (0, common_js_1.nullableString)("Original uploaded file name"),
+    path: (0, common_js_1.nullableString)("Server-side storage path"),
 });
 exports.fileListOutputSchema = (0, common_js_1.listResultSchema)(exports.fileSchema);
 // --- Subscriptions ---

package/dist/tools/arm-profiles.js

@@ -9,7 +9,7 @@ const misc_js_1 = require("../schemas/misc.js");
 const ACTIVATION_DELAY_VALUES = [0, 60000, 300000, 600000];
 function registerArmProfileTools(server, client, readOnly) {
     server.registerTool("protect_list_arm_profiles", {
-        description: "List all arm profiles (only available when using the local alarm manager — the standalone NVR alarm system, not Protect cloud alerts). Returns array. Response shape is NOT verified against Protect 7.1.60 (no arm profiles on the reference console); expect at least id, modelKey, name plus profile configuration fields — inspect a live response to confirm.",
+        description: "List all arm profiles (only available when using the local alarm manager — the standalone NVR alarm system, not Protect cloud alerts). Returns array; each profile (7.1.83 docs): id, name, automations[], creator, schedules[], recordEverything, activationDelay (0 | 60000 | 300000 | 600000), createdAt, updatedAt.",
         outputSchema: misc_js_1.armProfileListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {

package/dist/tools/cameras.js

@@ -9,7 +9,7 @@ const cameras_js_1 = require("../schemas/cameras.js");
 function registerCameraTools(server, client, readOnly) {
     // --- Read-only tools (always registered) ---
     server.registerTool("protect_list_cameras", {
-        description: "List all cameras managed by UniFi Protect. Returns array; each camera includes (Integration API 7.1.60-verified fields): id, mac, name, modelKey, state (CONNECTED/DISCONNECTED), activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags (hasHdr, hasMic, hasSpeaker, hasLedStatus, smartDetectTypes[], smartDetectAudioTypes[], videoModes[], supportFullHdSnapshot), lcdMessage, ledSettings (isEnabled, floodLed, welcomeLed), osdSettings (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation), smartDetectSettings (objectTypes[], audioTypes[]). The Integration API does NOT expose recording state, motion timestamps, connection/last-seen, firmware, host, or per-channel stream config.",
+        description: "List all cameras managed by UniFi Protect. Returns array; each camera includes (Integration API 7.1.83-verified fields): id, mac, name, modelKey, state (CONNECTED/DISCONNECTED), activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags (hasHdr, hasMic, hasSpeaker, hasLedStatus, smartDetectTypes[], smartDetectAudioTypes[], videoModes[], supportFullHdSnapshot), lcdMessage (type, resetAt, text), ledSettings (isEnabled, floodLed, welcomeLed), osdSettings (isNameEnabled, isDateEnabled, isLogoEnabled, isDebugEnabled, overlayLocation), smartDetectSettings (objectTypes[], audioTypes[]). The Integration API does NOT expose recording state, motion timestamps, connection/last-seen, firmware, host, or per-channel stream config.",
         outputSchema: cameras_js_1.cameraListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -22,7 +22,7 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_camera", {
-        description: "Get details for a specific camera by ID. The Protect Integration API returns the SAME field set as protect_list_cameras entries (id, mac, name, modelKey, state, activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags, lcdMessage, ledSettings, osdSettings, smartDetectSettings) — there is no extended/by-id-only payload. Recording state, motion events, zones, and channel/RTSP config are NOT exposed by this API surface.",
+        description: "Get details for a specific camera by ID. The Protect Integration API returns the SAME field set as protect_list_cameras entries (id, mac, name, modelKey, state, activePatrolSlot, hasPackageCamera, hdrType, isMicEnabled, micVolume, videoMode, featureFlags, lcdMessage, ledSettings, osdSettings, smartDetectSettings) — there is no extended/by-id-only payload (confirmed live on 7.1.83). Recording state, motion events, zones, and channel/RTSP config are NOT exposed by this API surface.",
         inputSchema: { id: zod_1.z.string().describe("Camera ID") },
         outputSchema: cameras_js_1.cameraOutputSchema,
         annotations: safety_js_1.READ_ONLY,
@@ -36,19 +36,29 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_get_snapshot", {
-        description: "Get a JPEG snapshot from a camera. Returns a base64-encoded image/jpeg (rendered directly by MCP clients). Use highQuality=true for full-resolution capture from the camera's main channel; otherwise a low-res thumbnail is returned.",
+        description: "Get a JPEG snapshot from a camera. Returns a base64-encoded image/jpeg (rendered directly by MCP clients). Use highQuality=true for full-resolution capture; set channel=package to capture from the secondary package camera on doorbells with hasPackageCamera=true.",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             highQuality: zod_1.z
                 .boolean()
                 .optional()
                 .describe("If true, request a high-quality snapshot"),
+            channel: zod_1.z
+                .enum(["main", "package"])
+                .optional()
+                .describe('Camera channel to capture. Use "package" for cameras with hasPackageCamera=true (defaults to main)'),
         },
         annotations: safety_js_1.READ_ONLY,
-    }, async ({ id, highQuality }) => {
+    }, async ({ id, highQuality, channel }) => {
         try {
-            const url = highQuality
-                ? (0, url_js_1.safePath) `/cameras/${id}/snapshot?highQuality=true`
+            const params = new URLSearchParams();
+            if (highQuality)
+                params.set("highQuality", "true");
+            if (channel)
+                params.set("channel", channel);
+            const query = params.toString();
+            const url = query
+                ? (0, url_js_1.safePath) `/cameras/${id}/snapshot` + `?${query}`
                 : (0, url_js_1.safePath) `/cameras/${id}/snapshot`;
             const { data, mimeType } = await client.getBinary(url);
             return {
@@ -88,7 +98,7 @@ function registerCameraTools(server, client, readOnly) {
             id: zod_1.z.string().describe("Camera ID"),
             settings: zod_1.z
                 .record(zod_1.z.string(), zod_1.z.unknown())
-                .describe("Partial camera settings to update. Known fields: name (string), osdSettings (object), ledSettings (object), lcdMessage (object), videoMode (string: \"default\" | \"highFps\" | \"slo-mo\"), hdrType (string: \"off\" | \"normal\" | \"always\"), micVolume (number 0-100), smartDetectSettings (object)"),
+                .describe("Partial camera settings to update. Known fields: name (string), osdSettings (object), ledSettings (object), lcdMessage (object: type, resetAt, text), videoMode (string: \"default\" | \"highFps\" | \"sport\" | \"slowShutter\" | \"lprReflex\" | \"lprNoneReflex\"), hdrType (string: \"auto\" | \"on\" | \"off\"), micVolume (number 0-100), smartDetectSettings (object)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()
@@ -162,7 +172,7 @@ function registerCameraTools(server, client, readOnly) {
         }
     });
     server.registerTool("protect_create_talkback", {
-        description: "Create a talkback (two-way audio) session for a camera",
+        description: "Create a talkback (two-way audio) session for a camera. Returns: url, codec, samplingRate, bitsPerSample (the audio config for encoding outbound audio).",
         inputSchema: {
             id: zod_1.z.string().describe("Camera ID"),
             dryRun: zod_1.z

package/dist/tools/devices.js

@@ -7,6 +7,10 @@ const responses_js_1 = require("../utils/responses.js");
 const safety_js_1 = require("../utils/safety.js");
 const url_js_1 = require("../utils/url.js");
 const devices_js_1 = require("../schemas/devices.js");
+// Field lists below are from the UniFi Protect Integration API 7.1.83 docs.
+// Chimes are additionally verified against live console responses; the rest
+// have no instances on the available console (top-level fields documented,
+// nested shapes intentionally left opaque in the output schema).
 const DEVICES = [
     {
         urlPath: "lights",
@@ -14,31 +18,31 @@ const DEVICES = [
         plural: "lights",
         label: "Light",
         hint: "Known fields: name (string), isLightForceEnabled (boolean), lightModeSettings (object with mode, enableAt), lightDeviceSettings (object with isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, lightModeSettings (mode, enableAt), lightDeviceSettings (isIndicatorEnabled, pirDuration, pirSensitivity, ledLevel), isDark, isLightOn, isLightForceEnabled, lastMotion, isPirMotionDetected, camera (7.1.83 docs)",
     },
     {
         urlPath: "sensors",
         singular: "sensor",
         plural: "sensors",
         label: "Sensor",
-        hint: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        hint: "Known fields: name (string), motionSettings (object), humiditySettings (object), temperatureSettings (object), lightSettings (object), alarmSettings (object), glassBreakSettings (object), leakSettings (object), scheduleMode (\"always\" | \"when_armed\"), armProfileIds (array of up to 32 strings), hasCustomSensitivityWhenArmed (boolean)",
+        returns: "id, modelKey, name, mac, state, mountType, batteryStatus (percentage, isLow), stats (light, humidity, temperature), lightSettings, humiditySettings, temperatureSettings, isOpened, openStatusChangedAt, isMotionDetected, motionDetectedAt, motionSettings, glassBreakSettings, scheduleMode, armProfileIds, hasCustomSensitivityWhenArmed, alarmTriggeredAt, alarmSettings, leakDetectedAt, externalLeakDetectedAt, leakSettings, tamperingDetectedAt, wirelessConnectionState (7.1.83 docs)",
     },
     {
         urlPath: "chimes",
         singular: "chime",
         plural: "chimes",
         label: "Chime",
-        hint: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of ring tone configurations)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        hint: "Known fields: name (string), cameraIds (array of camera IDs linked to the chime), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes)",
+        returns: "id, modelKey, name, mac, state, cameraIds (array of camera IDs), ringSettings (array of objects: cameraId, volume, ringtoneId, repeatTimes) — verified live 7.1.83",
     },
     {
         urlPath: "viewers",
         singular: "viewer",
         plural: "viewers",
         label: "Viewer",
-        hint: "Known fields: name (string), liveview (string, liveview ID to display)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        hint: "Known fields: name (string), liveview (string, liveview ID to display, or null)",
+        returns: "id, modelKey, name, mac, state, liveview, streamLimit (7.1.83 docs)",
     },
     {
         urlPath: "sirens",
@@ -46,7 +50,7 @@ const DEVICES = [
         plural: "sirens",
         label: "Siren",
         hint: "Known fields: name (string), volume (integer 1-100), ledSettings (object with isEnabled boolean)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, volume, ledSettings (isEnabled), sirenStatus (isActive, activatedAt, duration), connectionType, wirelessConnectionState (7.1.83 docs)",
     },
     {
         urlPath: "fobs",
@@ -54,7 +58,7 @@ const DEVICES = [
         plural: "fobs",
         label: "Fob",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, awayState, buttonLabels, featureFlags (buttons[]), wirelessConnectionState (7.1.83 docs)",
     },
     {
         urlPath: "relays",
@@ -62,7 +66,7 @@ const DEVICES = [
         plural: "relays",
         label: "Relay",
         hint: "Known fields: name (string), ledSettings (object with isEnabled boolean)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, ledSettings (isEnabled), outputs (array), inputs (array), wirelessConnectionState (7.1.83 docs)",
     },
     {
         urlPath: "speakers",
@@ -70,7 +74,7 @@ const DEVICES = [
         plural: "speakers",
         label: "Speaker",
         hint: "Known fields: name (string), volume (integer 0-100), micVolume (integer 0-100), isMicEnabled (boolean)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, volume, micVolume, isMicEnabled, speakerState (status, mode), featureFlags (hasMic) (7.1.83 docs)",
     },
     {
         urlPath: "bridges",
@@ -78,7 +82,7 @@ const DEVICES = [
         plural: "bridges",
         label: "Bridge",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey, name, mac, state, platform, clients (array of MACs), maxClients (7.1.83 docs)",
     },
     {
         urlPath: "link-stations",
@@ -86,7 +90,7 @@ const DEVICES = [
         plural: "link_stations",
         label: "Link station",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey (\"linkstation\"), name, mac, state, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (object) (7.1.83 docs)",
     },
     {
         urlPath: "alarm-hubs",
@@ -94,7 +98,7 @@ const DEVICES = [
         plural: "alarm_hubs",
         label: "Alarm hub",
         hint: "Known fields: name (string)",
-        returns: "id, modelKey, name, mac, state (universal identity fields). Protect Integration API 7.1.60 returns a thin object; additional device-specific fields are NOT verified (no instances on reference console) — inspect a live response before relying on them",
+        returns: "id, modelKey (\"linkstation\"), name, mac, state, isAlarmHub, ledSettings (isEnabled), lastEvent, alarmHub (object) (7.1.83 docs)",
     },
 ];
 function registerDeviceCrud(server, client, cfg, readOnly) {

package/dist/tools/files.js

@@ -8,7 +8,7 @@ const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
 function registerFileTools(server, client, readOnly) {
     server.registerTool("protect_list_files", {
-        description: "List files of a given type (only 'animations' is currently supported — GIF clips uploadable to G4 Doorbell screens). Returns array. Per-record shape is NOT verified against Protect 7.1.60 (no files on the reference console) — inspect a live response to confirm fields.",
+        description: "List files of a given type (only 'animations' is currently supported — clips uploadable to G4 Doorbell screens). Returns array; each record (7.1.83 docs): name (server-generated), type, originalName, path.",
         inputSchema: {
             fileType: zod_1.z
                 .string()
@@ -56,7 +56,7 @@ function registerFileTools(server, client, readOnly) {
             contentType: zod_1.z
                 .string()
                 .default("image/gif")
-                .describe("MIME type of the file (accepted: image/gif, image/png, image/jpeg)"),
+                .describe("MIME type of the file (accepted: image/gif, image/jpeg, image/png, audio/mpeg, audio/mp4, audio/wave, audio/x-caf)"),
             dryRun: zod_1.z
                 .boolean()
                 .optional()

package/dist/tools/liveviews.js

@@ -8,7 +8,7 @@ const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
 function registerLiveviewTools(server, client, readOnly) {
     server.registerTool("protect_list_liveviews", {
-        description: "List all live views (camera grid layouts shown on viewers / in the Protect UI). Returns array; each liveview includes (Integration API 7.1.60-verified): id, modelKey, name, isDefault, isGlobal, layout (number, slot count), owner (user ID), slots (array of {cameras: string[], cycleMode, cycleInterval}). NOTE: slots use a `cameras` string-array, not a single `cameraId`.",
+        description: "List all live views (camera grid layouts shown on viewers / in the Protect UI). Returns array; each liveview includes (Integration API 7.1.83-verified): id, modelKey, name, isDefault, isGlobal, layout (number, slot count), owner (user ID), slots (array of {cameras: string[], cycleMode, cycleInterval}). NOTE: slots use a `cameras` string-array, not a single `cameraId`.",
         outputSchema: misc_js_1.liveviewListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {

package/dist/tools/users.js

@@ -8,7 +8,7 @@ const url_js_1 = require("../utils/url.js");
 const misc_js_1 = require("../schemas/misc.js");
 function registerUserTools(server, client) {
     server.registerTool("protect_list_users", {
-        description: "List all Protect users (filtered by the API key's access permissions). Returns array; each user includes (Integration API 7.1.60-verified): id, modelKey, name, firstName, lastName, email, ucoreUserId. The Integration API does NOT expose roles, permissions, login history, groups, or notification settings.",
+        description: "List all Protect users (filtered by the API key's access permissions). Returns array; each user includes (Integration API 7.1.83-verified): id, modelKey, name, firstName, lastName, email, ucoreUserId. The Integration API does NOT expose roles, permissions, login history, groups, or notification settings.",
         outputSchema: misc_js_1.userListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {
@@ -35,7 +35,7 @@ function registerUserTools(server, client) {
         }
     });
     server.registerTool("protect_list_ulp_users", {
-        description: "List all UniFi Identity (ULP) users. Returns array; each ULP user includes (Integration API 7.1.60-verified): id, modelKey, firstName, lastName, fullName, status (e.g. ACTIVE). Enrolled-credential detail (NFC cards, fingerprints) is NOT exposed by this API surface.",
+        description: "List all UniFi Identity (ULP) users. Returns array; each ULP user includes (Integration API 7.1.83-verified): id, modelKey, firstName, lastName, fullName, status (e.g. ACTIVE). Enrolled-credential detail (NFC cards, fingerprints) is NOT exposed by this API surface.",
         outputSchema: misc_js_1.ulpUserListOutputSchema,
         annotations: safety_js_1.READ_ONLY,
     }, async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owine/unifi-protect-mcp",
-  "version": "2.7.5",
+  "version": "2.8.0",
   "description": "MCP server for UniFi Protect Integration API",
   "main": "dist/index.js",
   "bin": {
@@ -22,7 +22,7 @@
   "engines": {
     "node": "^22.13.0 || ^24.0.0"
   },
-  "packageManager": "pnpm@11.6.0",
+  "packageManager": "pnpm@11.8.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/owine/unifi-protect-mcp.git"
@@ -45,11 +45,11 @@
     "@eslint/js": "10.0.1",
     "@types/node": "24.13.2",
     "@types/ws": "8.18.1",
-    "@vitest/coverage-v8": "4.1.8",
+    "@vitest/coverage-v8": "4.1.9",
     "eslint": "10.5.0",
     "lefthook": "2.1.9",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.61.0",
-    "vitest": "4.1.8"
+    "typescript-eslint": "8.61.1",
+    "vitest": "4.1.9"
   }
 }