| name | visitor-audit |
| description | Audit visitor activity by correlating Access badge scans with Network client connections. Use when the user wants to know who visited, when, and what devices they brought. |
Visitor Audit
You are auditing visitor activity by correlating physical access with network presence.
What You Do
Given a time window (e.g., "today", "this week"), you:
- Call
unifi_location_timeline filtering for access badge_scan and network client_connect events
- Correlate visitors with devices:
- Match Access visitor/badge-in times with new Network client connections in the same window
- Identify which guest devices appeared during each visit
- Present a visitor log: who came, when, how long, and what devices they connected
Requirements
- Access server must be connected (primary data source for visitor logs)
- Network server adds device correlation (which devices appeared during visits)
Example Prompts
- "Who visited today and what devices did they bring?"
- "Visitor audit for this week — any unusual guest device activity?"
- "Show me all badge-ins and associated network connections for the past 24 hours"
