Tool Manifest

Auto-generated by scripts/generate_tool_manifest.py. One row per registered tool, sorted alphabetically. Re-run the generator after changing any tool’s registration; the pre-commit hook enforces this.

Total tools: 129

Tool	Summary
`audit_expiring_credentials`	Return credentials expiring within `days_ahead` days.
`audit_network_drift`	Compare current controller state to a declared YAML spec.
`audit_open_ports`	Audit WAN-facing exposure (port forwards and WAN_IN accept rules).
`backup_config`	Snapshot every persistent resource on the controller into one envelope.
`block_client`	Block a client by MAC so it cannot rejoin until unblocked.
`confirm_destructive_action`	Execute a queued destructive action by its preview token.
`create_dynamic_dns`	Create a Dynamic DNS update configuration.
`create_firewall_group`	Create a reusable firewall group of addresses, IPv6 addresses, or ports.
`create_firewall_rule`	Create a firewall rule on the controller.
`create_guest_network`	Provision an isolated guest network end-to-end: VLAN + guest SSID + drop rule.
`create_honeypot`	Add a honeypot trap to a network.
`create_iot_network`	Provision an isolated IoT network end-to-end: VLAN + SSID + drop rule.
`create_port_forward`	Create a port-forward (DNAT) rule on the WAN.
`create_port_profile`	Create a switch port profile.
`create_route`	Create a static next-hop route.
`create_static_dhcp_lease`	Reserve a fixed IP for a client by MAC.
`create_traffic_rule`	Create a v2 traffic rule from a full rule object.
`create_vlan`	Create a VLAN-tagged network on the controller.
`create_wlan`	Create a WiFi SSID bound to an existing network/VLAN.
`delete_content_filter`	Preview deletion of a content-filtering profile.
`delete_dynamic_dns`	Preview deletion of a Dynamic DNS config.
`delete_firewall_group`	Preview deletion of a firewall group.
`delete_firewall_rule`	Preview deletion of a firewall rule.
`delete_honeypot`	Preview deletion of a honeypot entry.
`delete_port_forward`	Preview deletion of a port-forward (DNAT) rule.
`delete_port_profile`	Preview deletion of a switch port profile.
`delete_route`	Preview deletion of a static route.
`delete_static_dhcp_lease`	Preview deletion of a static DHCP reservation.
`delete_vlan`	Preview deletion of a VLAN/network.
`delete_wlan`	Preview deletion of a WiFi SSID.
`get_access_device`	Fetch one Access device’s full record by ID.
`get_access_policy`	Fetch one access policy’s full record by ID.
`get_access_system_info`	Return controller version, license tier, and capacity.
`get_anomalies`	List client-impacting anomalies the controller has detected.
`get_camera`	Fetch a single camera’s full record by ID.
`get_client_sessions`	List recent client connection sessions over a time window.
`get_client_stats`	Report per-client traffic, signal, and uptime for one client by MAC.
`get_content_filter_details`	Show one content-filtering profile’s full record by `_id`.
`get_credential`	Fetch one credential’s full record by ID.
`get_device_radios`	Show per-radio RF settings for an access point.
`get_device_stats`	Report per-device stats for one UniFi device by MAC.
`get_door`	Fetch one door’s full record by ID.
`get_dynamic_dns_details`	Show one Dynamic DNS config’s full record by `_id`.
`get_event_thumbnail`	Fetch the JPEG thumbnail for a Protect event, base64-encoded.
`get_firewall_group_details`	Show one firewall group’s full record by `_id`.
`get_gateway_stats`	Report gateway resource stats: CPU, memory, temperature, throughput.
`get_network_details`	Show one network’s full record, grouped into readable sections.
`get_recent_access_events`	Return the most recent N events across every door.
`get_route_details`	Show one static route’s full record by `_id`.
`get_site_health`	Report per-subsystem health (wan, lan, wlan, www, vpn).
`get_snapshot`	Fetch a current JPEG snapshot from a camera, base64-encoded.
`get_speedtest_results`	List recent speed-test results, newest first.
`get_system_info`	Report controller/system info: version, uptime, device type.
`get_teleport_config`	Return Teleport VPN state and any wireguard-server networks.
`get_threat_management`	Return current Threat Management (IDS/IPS) configuration.
`get_traffic_route_details`	Show one traffic route’s full record by `_id`.
`get_traffic_rule_details`	Show one traffic rule’s full record by `_id`.
`get_visitor`	Fetch one visitor pass’s full record by ID.
`get_wan_ipv6`	Show the current IPv6 configuration of the WAN uplink(s).
`get_wan_status`	Report current WAN status: link, ISP, public IP, throughput, latency.
`list_access_devices`	List hubs, readers, relays, and intercoms bonded to the controller.
`list_access_events`	List badge-scan / door events with filters.
`list_access_policies`	List every access policy on the controller.
`list_access_users`	List every user enrolled in the Access system.
`list_alarms`	List controller alarms, active or archived.
`list_ap_groups`	List access-point groups configured on the controller.
`list_cameras`	List every camera bonded to the Protect controller.
`list_clients`	List currently active wireless and wired clients.
`list_content_filters`	List DNS content-filtering profiles (category blocking, safe-search).
`list_credentials`	List every credential enrolled in the Access controller.
`list_devices`	List every UniFi device adopted by this controller.
`list_dhcp_leases`	List static DHCP reservations on the controller.
`list_door_groups`	List every door group defined on the controller.
`list_doorbell_messages`	List doorbell cameras (those with `isDoorbell=True`).
`list_doors`	List every door bonded to the Access controller.
`list_dynamic_dns`	List Dynamic DNS update configurations on the controller.
`list_events`	List recent controller events (connections, disconnections, etc.).
`list_failed_access_attempts`	Return only `result == "denied"` events within the window.
`list_firewall_groups`	List reusable firewall groups (address, IPv6-address, and port groups).
`list_firewall_rules`	List every firewall rule on the controller.
`list_honeypots`	List configured honeypots and the global honeypot toggle.
`list_motion_events`	List motion events in the last `hours_back` hours.
`list_networks`	List every network/VLAN configured on the controller.
`list_port_forwards`	List every port-forward (DNAT) rule on the controller.
`list_port_profiles`	List switch port profiles configured on the controller.
`list_recordings`	List Protect recordings for one camera over the last `hours_back` hours.
`list_routes`	List user-defined static (next-hop) routes on the controller.
`list_smart_detections`	List smart-detection events (person, vehicle, animal, package).
`list_top_talkers`	List top clients by total bytes (DPI by-station report).
`list_traffic_routes`	List v2 traffic routes (policy-based routing, e.g. VPN-client routes).
`list_traffic_rules`	List v2 traffic rules (app/domain/IP-based allow & block policies).
`list_visitors`	List every visitor pass on the controller (active and expired).
`list_wlans`	List every WiFi SSID configured on the controller.
`locate_device`	Toggle the LED locate beacon on a device.
`provision_camera`	Configure a camera end-to-end: recording mode + sensitivity + privacy.
`provision_homelab_service`	Stand up a homelab service: DHCP lease + firewall allow + (optional) port forwards.
`quarantine_client`	Block a client and log the quarantine action with a reason.
`reconnect_client`	Force a client to reconnect (kick-sta).
`rename_device`	Rename an adopted UniFi device (AP, switch, or gateway).
`restart_device`	Restart an adopted UniFi device (gateway, AP, or switch).
`restore_config`	Restore controller state from a `backup_config` envelope.
`set_camera_privacy_mode`	Toggle a camera’s privacy mask (lens cover) on or off.
`set_camera_recording_mode`	Set a camera’s recording mode (`always`, `motion`, or `never`).
`set_lan_ipv6`	Set the IPv6 configuration of one LAN/VLAN network.
`set_motion_sensitivity`	Set a camera’s motion sensitivity (0-100).
`set_port_state`	Override settings on a single switch port.
`set_radio_channel`	Set the channel and/or channel width of one radio on an AP.
`set_radio_min_rssi`	Enable, tune, or disable minimum RSSI on one radio of an AP.
`set_radio_tx_power`	Set the transmit power mode of one radio on an access point.
`set_teleport_enabled`	Toggle the Teleport VPN listener.
`set_threat_management`	Update Threat Management (IDS/IPS) configuration.
`set_wan_ipv6`	Set the WAN uplink’s IPv6 connection type and prefix delegation.
`summarize_access_activity`	Aggregate badge events by door, user, and outcome.
`toggle_traffic_route`	Enable or disable a traffic route without editing its other fields.
`toggle_traffic_rule`	Enable or disable a traffic rule without editing its other fields.
`trigger_speedtest`	Kick off a UniFi speed test on the WAN link.
`unblock_client`	Unblock a previously-blocked client by MAC.
`update_content_filter`	Patch fields on an existing content-filtering profile (read-modify-write).
`update_dynamic_dns`	Patch fields on an existing Dynamic DNS config.
`update_firewall_group`	Rename a firewall group or replace its members (read-modify-write).
`update_firewall_rule`	Patch fields on an existing firewall rule.
`update_port_forward`	Patch fields on an existing port-forward rule.
`update_port_profile`	Patch fields on an existing port profile.
`update_route`	Patch fields on an existing static route.
`update_static_dhcp_lease`	Convert or update an existing client to a fixed-IP reservation.
`update_traffic_route`	Patch fields on an existing traffic route (read-modify-write).
`update_traffic_rule`	Patch fields on an existing traffic rule (read-modify-write).
`update_vlan`	Patch fields on an existing VLAN/network record.
`update_wlan`	Patch fields on an existing WiFi SSID.