Safe-by-default UniFi MCP: Network + Protect + Access, multi-site, dry-run, audit log.
Safety-first MCP server for self-hosted UniFi. Dry-run previews, JSONL audit log, composite rollback. Network + Protect + Access. An MCP server built around the assumption that LLM-driven infrastructure calls need guardrails. Every destructive tool accepts and returns the predicted change set without writing. Composite tools (, , , ) capture pre-state and roll back applied steps on partial…
Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.
Forge hat zu diesem Eintrag keinen Scan verzeichnet und hat daher keine Beobachtung seiner Tool-Oberfläche. Das ist das Fehlen eines Belegs, nicht der Beleg, dass er keine Tools offenlegt.
Safety-first MCP server for self-hosted UniFi. Dry-run previews, JSONL audit log, composite rollback. Network + Protect + Access. An MCP server built around the assumption that LLM-driven infrastructure calls need guardrails. Every destructive tool accepts and returns the predicted change set without writing. Composite tools (, , , ) capture pre-state and roll back applied steps on partial failure. Every call — dry-run or real — lands in a JSONL audit log with secrets scrubbed; the included CLI…