Back to Home
kungfusheep icon

hue

by kungfusheep

Overview

Controls Philips Hue lights and sensors via a command-line interface or as a Model Context Protocol (MCP) server for AI agents.

Installation

Run Command
./hue

Environment Variables

  • HUE_BRIDGE_IP
  • HUE_USERNAME

Security Notes

The HTTP client is configured with `InsecureSkipVerify: true` (line 1236 in `main.go`), which globally disables TLS certificate verification. While this is common for self-signed certificates on Philips Hue bridges, it is a critical security vulnerability that makes connections susceptible to Man-in-the-Middle (MitM) attacks. Additionally, the entertainment streaming feature uses UDP, and while the README mentions 'DTLS foundation ready', the provided code does not show full DTLS implementation for encryption/authentication of this real-time stream, which could expose it to local network manipulation or spoofing.

Similar Servers

Stats

Interest Score30
Security Score4
Cost ClassMedium
Avg Tokens100
Stars1
Forks1
Last Update2025-11-26

Tags

Philips HueHome AutomationLightingCLIMCP