Back to Home
mtebusi icon

ha-addons

by mtebusi

Overview

Enables Claude Desktop to interact with Home Assistant instances using the Model Context Protocol (MCP) for smart home control and automation.

Installation

Run Command
python rootfs/app/server.py --host 0.0.0.0 --port 8089 --ssl false --ha-url http://homeassistant.local:8123 --ha-token YOUR_HA_TOKEN

Environment Variables

  • SUPERVISOR_TOKEN
  • MCP_HOST
  • MCP_PORT
  • MCP_SSL
  • MCP_CERTFILE
  • MCP_KEYFILE
  • HA_URL
  • HA_TOKEN
  • LOG_LEVEL

Security Notes

The server's OAuth2 authentication handler (`auth.py`) uses a hardcoded JWT secret ('secret') for signing and validating tokens. The code explicitly notes this is for 'development' and that 'in production, this would be the actual access token from HA', but its presence as-is makes the server critically vulnerable to token forgery by anyone aware of the hardcoded secret. This is a severe security flaw for any deployment where authentication is required. While other aspects like `yaml.safe_load`, structured logging, and network handling appear reasonable, the hardcoded secret fundamentally compromises the security of the authentication mechanism.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Stars0
Forks0
Last Update2026-01-19

Tags

Home AssistantAI IntegrationSmart HomeMCPAutomation