Back to MCP Trust Indexm8ven
69
/ 100
16 days ago
glama

Home Assistant MCP Server

Enables AI assistants to control Home Assistant via natural language, including device control, automation management, and system monitoring.

→ harry189/ha-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
72 tools verified — handlers match their declared behaviour
36 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: SUPERVISOR_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configENABLE_BETA_FEATURES
🔐 secretSUPERVISOR_TOKEN
configBACKUP_HINT
configENABLE_TOOL_SEARCH— false Replace full tool catalog with search-based discovery (~46K → ~5K idle tokens).
configENABLE_TOOL_SECURITY_POLICIES
configREAD_ONLY_MODE
configENABLE_MANDATORY_BPS
configENABLE_YAML_CONFIG_EDITING
configENABLE_YAML_PACKAGES_AUTOMATION
configENABLE_YAML_PACKAGES_SCRIPT
configENABLE_YAML_PACKAGES_SCENE
configHAMCP_ENABLE_FILESYSTEM_TOOLS— [@ekobres](https://github.com/ekobres) — Feature flags for and HAMCP_ENABLE_CUSTOM_COMPONENT_INTEGRATION in the add-on config, with beta tagging in source and docs.
configHAMCP_ENABLE_CUSTOM_COMPONENT_INTEGRATION— [@ekobres](https://github.com/ekobres) — Feature flags for HAMCP_ENABLE_FILESYSTEM_TOOLS and in the add-on config, with beta tagging in source and docs.
configHAMCP_ENABLE_DASHBOARD_SCREENSHOT
configENABLE_CODE_MODE
configENABLE_LITE_DOCSTRINGS
configENABLE_AUTO_BACKUP
configAUTO_BACKUP_THROTTLE_MINUTES
configAUTO_BACKUP_RETAIN_PER_ENTITY
configTOOL_SEARCH_MAX_RESULTS— 5 Max results returned by ha_search_tools (range 2–10).
configDISABLED_TOOLS
configPINNED_TOOLS— empty Comma-separated tool names to keep always visible. The web settings UI is the primary way to manage this.
configHA_VERIFY_SSL
configMCP_HOST
configGITHUB_STEP_SUMMARY
configLOG_LEVEL
configMCP_PORT
configMCP_SECRET_PATH
configMCP_BASE_URL
configHA_MCP_BUILD_VERSION
configSUPERVISOR_BASE_URL
configXDG_DATA_HOME
configHAMCP_ENV_FILE
configFLAG
configHA_MCP_DISABLE_SETTINGS_UI
configFASTMCP_TRANSPORT
configMCP_HTTP_PORT
configFASTMCP_PORT
configHA_MCP_CONFIG_DIR
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/harry189-ha-mcp-yju6yq)](https://m8ven.ai/mcp/harry189-ha-mcp-yju6yq)
commit: e80da90b29d86b2bc7f703b085aa519b9f689754
code hash: ce22dd9692fa379fa7b4ed7c75f08980ad5bfe0f113ed9e4aae80a9690001cef
verified: 7/16/2026, 8:45:40 AM
view raw JSON →