homelab-mcp

The project demonstrates strong security awareness through comprehensive documentation (SECURITY.md, pre_publish_check.py) and a pre-push Git hook to prevent accidental exposure of sensitive data. It explicitly warns about the inherent security risks of some services (e.g., Docker/Podman APIs often using unencrypted HTTP without authentication) and provides mitigation strategies like firewall rules and TLS. However, some key services, such as the Unifi exporter, by default disable SSL verification for HTTPS connections (`verify_ssl=False`, `urllib3.disable_warnings`), which is a significant security vulnerability to Man-in-the-Middle attacks. Other integrations primarily use unencrypted HTTP, relying on network isolation for security. While risks are acknowledged and documented, the default insecure network settings for Unifi are a notable concern.