Read-Only UniFi API Access — Without Giving Full Admin
UniFi requires an admin account to access the API. Read-only admins can't generate keys, so you're forced to hand out full write access to any tool that needs network data.
The Problem with UniFi API Access
UniFi's API is tied to admin accounts. If a user has read-only admin permissions, they cannot generate API keys. The only way to get API access is through a full admin account — which grants write access to sites, devices, WLANs, and network settings.
For MSPs managing multiple UniFi sites, this is a significant security blind spot. Every dashboard, monitoring tool, or AI agent that reads UniFi data holds a key that could reconfigure or take down the network.
The Ubiquiti community has been requesting read-only API keys for years. Until that ships, the workaround is a proxy that blocks writes.
The only way to get a UniFi API key is through an admin account. GuardProxy makes that key read-only in one step.
How GuardProxy Fixes It
Point your UniFi tools at a GuardProxy endpoint instead of the controller directly. Same key, same session cookie auth.
Write operations are blocked at the proxy. Site configs, WLAN settings, and device configurations are safe.
Monitoring dashboards and reporting tools get read-only access to everything they need.
Works with UniFi Network Controller and UniFi OS. Set up in 60 seconds.
Lock down your UniFi API key in 60 seconds.
Free for 14 days. No credit card. Cancel anytime.
Start your free trial