Summary
Add firewall-zone create/update/delete to the Network MCP server. Zones are currently read-only (unifi_list_firewall_zones); there is no way to create, rename, or delete them.
Proposed tools:
unifi_create_firewall_zoneunifi_update_firewall_zoneunifi_delete_firewall_zone
Zone writes go through the integration API (/v1/sites/{site}/firewall/zones); the V2 POST /firewall/zone silently no-ops, so UNIFI_API_KEY is required. The manager should bridge the integration UUID id ↔ V2 external_id so the created zone exposes the V2 _id that firewall_zone_id (on networks) expects, and refuse deletion of default_zone (SYSTEM_DEFINED) zones.
Motivation
Zone-based firewall policies require custom zones (e.g. IoT, Guest, DMZ) to be created before networks can be assigned to them, which currently has to be done manually in the UI.
Summary
Add firewall-zone create/update/delete to the Network MCP server. Zones are currently read-only (
unifi_list_firewall_zones); there is no way to create, rename, or delete them.Proposed tools:
unifi_create_firewall_zoneunifi_update_firewall_zoneunifi_delete_firewall_zoneZone writes go through the integration API (
/v1/sites/{site}/firewall/zones); the V2POST /firewall/zonesilently no-ops, soUNIFI_API_KEYis required. The manager should bridge the integration UUIDid↔ V2external_idso the created zone exposes the V2_idthatfirewall_zone_id(on networks) expects, and refuse deletion ofdefault_zone(SYSTEM_DEFINED) zones.Motivation
Zone-based firewall policies require custom zones (e.g. IoT, Guest, DMZ) to be created before networks can be assigned to them, which currently has to be done manually in the UI.