# UnifyMCP: Universal MCP Gateway

UnifyMCP connects AI agents to Git, cloud storage, Docker containers, and knowledge vaults through a single Model Context Protocol endpoint. Zero credential storage. Tiered safety controls.

## Providers

### Knowledge Vault (active by default)
- `search_notes(query)`: Full-text search across vault notes.
- `fetch_note(path)`: Retrieve exact Markdown content by path. Use search_notes first if path is unknown.

### Git / GitHub (activate with configure_provider)
- `git_list_repos()`: List repos for the authenticated user.
- `git_get_file(owner, repo, path, ref?)`: Read a file at a given ref.
- `git_search_code(q)`: Search code across repos.
- `git_list_branches(owner, repo)`: List branches.
- `git_get_diff(owner, repo, base, head)`: Diff between two refs.
- `git_list_commits(owner, repo, sha?, per_page?)`: Recent commits.
- `git_create_branch(owner, repo, branch, from_ref)`: Create a branch. [Write]
- `git_commit_file(owner, repo, path, content, message, branch)`: Commit a file. [Destructive]
- `git_create_pull_request(owner, repo, title, head, base)`: Open a PR. [Write]

### Nextcloud (activate with configure_provider)
- `nc_list_files(path)`: List files and folders.
- `nc_read_file(path)`: Download text content.
- `nc_search_files(pattern, path?)`: Search by filename.
- `nc_upload_file(path, content)`: Upload a file. [Write]
- `nc_delete_file(path)`: Delete a file. [Destructive]
- `nc_move_file(from, to)`: Move or rename. [Write]

### Docker (local socket only)
- `docker_list_containers(all?)`: List containers.
- `docker_inspect_container(id)`: Container details.
- `docker_list_images()`: List images.
- `docker_container_logs(id, tail?)`: Recent logs.
- `docker_start_container(id)`: Start a container. [Write]
- `docker_stop_container(id)`: Stop a container. [Destructive]
- `docker_restart_container(id)`: Restart. [Write]
- `docker_exec_command(id, cmd)`: Execute inside container. [Destructive]

### Atlassian (Jira & Confluence) (activate with configure_provider)
- `jira_search_issues(jql)`: Search Jira with JQL.
- `jira_get_issue(issueId)`: Fetch issue details.
- `confluence_search_pages(cql)`: Search Confluence with CQL.
- `jira_create_issue(...)`: Create an issue. [Write]
- `jira_add_comment(...)`: Comment on an issue. [Write]
- `jira_transition_issue(...)`: Move issue to new state. [Write]

### Linear (activate with configure_provider)
- `linear_search_issues(query)`: Search Linear issues.
- `linear_list_projects()`: List projects.
- `linear_create_issue(...)`: Create issue. [Write]
- `linear_update_issue_status(...)`: Update state. [Write]
- `linear_add_comment(...)`: Comment on issue. [Write]

### monday.com (activate with configure_provider)
- `monday_list_boards(limit)`: List boards.
- `monday_get_items(boardId)`: Get items on board.
- `monday_create_item(...)`: Create item. [Write]
- `monday_update_item(...)`: Update item columns. [Write]

### HubSpot (activate with configure_provider)
- `hubspot_search_contacts(query)`: Search contacts.
- `hubspot_get_company(id)`: Get company info.
- `hubspot_create_task(...)`: Create a CRM task. [Write]
- `hubspot_add_note(...)`: Add note to record. [Write]

### Stripe (activate with configure_provider)
- `stripe_list_customers(email)`: Search by email.
- `stripe_list_invoices(customerId)`: Recent invoices.
- `stripe_get_payment_intent(id)`: PI details.
- `stripe_issue_refund(...)`: Issue refund. [Destructive]

### TrueNAS (activate with configure_provider)
- `truenas_get_pool_health()`: Read pool health.
- `truenas_list_shares()`: List SMB/NFS shares.
- `truenas_list_snapshots(...)`: List ZFS snapshots.
- `truenas_create_snapshot(...)`: Create snapshot. [Write]
- `truenas_rollback_snapshot(...)`: Rollback snapshot. [Destructive]

### Proxmox VE (activate with configure_provider)
- `proxmox_get_cluster_health()`: Read cluster health.
- `proxmox_list_vms()`: List VMs and LXC.
- `proxmox_vm_snapshot(...)`: Create VM snapshot. [Write]
- `proxmox_vm_start(...)`: Start VM. [Write]
- `proxmox_vm_stop(...)`: Stop VM. [Destructive]

### Home Assistant (activate with configure_provider)
- `ha_get_states(...)`: Read entity states.
- `ha_call_service(...)`: Call standard service. [Write]
- `ha_call_sensitive_service(...)`: Call sensitive service (lock, cover, alarm). [Destructive]

### Portainer (activate with configure_provider)
- `portainer_list_endpoints()`: List environments.
- `portainer_list_stacks(...)`: List stacks.
- `portainer_stop_stack(...)`: Stop stack. [Destructive]
- `portainer_restart_stack(...)`: Restart stack. [Write]

### OPNsense (activate with configure_provider)
- `opnsense_get_status()`: Read gateway status.
- `opnsense_check_firmware()`: Check updates.
- `opnsense_toggle_rule(...)`: Toggle firewall rule. [Destructive]

## System Tools
- `configure_provider(provider, credentials)`: Supply per-session credentials. Never persisted.
- `confirm_action(confirmation_id)`: Approve a destructive action.
- `get_session_audit()`: View session audit log.

## Safety Model
- **Read** tools execute immediately with no side effects.
- **Write** tools modify resources. Agent should disclose intent.
- **Destructive** tools return a confirmation_id. Call confirm_action after user approval.
- All tools set `openWorldHint: false`. UnifyMCP only operates on user-owned resources.

## Credential Security
Credentials are held in session memory only. Zero storage at rest. Sessions are isolated. Tokens are garbage collected on disconnect.

## Endpoint
- Domain: `https://vaultmind.zionxai.com`
- Protocol: SSE via MCP SDK
- See `/agents.md` for full documentation.