Back to MCP Trust Indexm8ven
66
/ 100
1 month ago
glama

UnifiyMe

A Model Context Protocol (MCP) server for UniFi Network Controllers that enables LLMs to interact with UniFi infrastructure for monitoring and control.

→ lobsterclause/UnifiyMe· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 4 credentials: DISCORD_TOKEN, GATEWAY_API_KEY, SSH_PASSWORD, UNIFI_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical2 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@4.0.18GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@modelcontextprotocol/sdk@1.25.3GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

highexpress-rate-limit@8.2.1GHSA-46wh-pxpv-q5gq

express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAP_MAC
configDISCORD_CLIENT_ID— your-discord-client-id
🔐 secretDISCORD_TOKEN— your-discord-bot-token
configDISCORD_WEBHOOK_URL
🔐 secretGATEWAY_API_KEY
configGATEWAY_PORT
configIOT_LOW_GROUP_ID
configMETRICS_PORT
configNEXTDNS_CONFIG_ID
configPALWORLD_HOST_IP
configSONY_TV_MAC
configSSH_HOST— 192.168.1.1
🔐 secretSSH_PASSWORD— your-ssh-password
configSSH_USER
configSSH_USERNAME
configSWITCH_TIME
configTARGET_CLIENT_IP
configTARGET_DEVICE_MAC
configTARGET_MAC
configTARGET_ROKU_IP
configUNIFI_GATEWAY_URL
configUNIFI_HOST— "": "https://<CONTROLLER-IP>",
🔐 secretUNIFI_PASSWORD— your-password
configUNIFI_SITE— "": "default"
configUNIFI_USERNAME— your-username
configVIP_MACS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/lobsterclause-unifiyme-jvjkt0)](https://m8ven.ai/mcp/lobsterclause-unifiyme-jvjkt0)
commit: e6ab57bbd0dcc317c2f2ee5ea733fb8e10b60e7d
code hash: 2e6af2d59af902c7042b12ac8f637bf2e3ec1c881beccbce26a85e84a1495974
verified: 6/21/2026, 10:32:48 AM
view raw JSON →