71
/ 100
1 day ago
glama
Home Assistant MCP Server
A comprehensive MCP server that enables AI assistants to interact with Home Assistant, control smart home devices, query states, execute services, and manage automations via natural language.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
59 tools verified — handlers match their declared behaviour
28 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: SUPERVISOR_TOKEN, OIDC_VERIFY_ID_TOKEN, OIDC_CLIENT_SECRET, OIDC_JWT_SIGNING_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
HA_MCP_CONFIG_DIRconfig
HA_MCP_EMBEDDEDconfig
ENABLE_BETA_FEATURES— These tools also require beta feature flags. See [Beta Features](docs/beta.md) for how to enable them — including the master flag, which must be on before the filesystem/YAML sub-flags take effect.config
ENABLE_YAML_CONFIG_EDITINGconfig
ENABLE_YAML_PACKAGES_AUTOMATIONconfig
ENABLE_YAML_PACKAGES_SCRIPTconfig
ENABLE_YAML_PACKAGES_SCENEconfig
ENABLE_YAML_EDIT_CONFIRMconfig
HAMCP_ENABLE_FILESYSTEM_TOOLS— [@ekobres](https://github.com/ekobres) — Feature flags for and the (since removed) HAMCP_ENABLE_CUSTOM_COMPONENT_INTEGRATION in the add-on config, with beta tagging in source and docs.config
HAMCP_ENABLE_DASHBOARD_SCREENSHOTconfig
ENABLE_CODE_MODEconfig
ENABLE_LITE_DOCSTRINGS🔐 secret
SUPERVISOR_TOKENconfig
BACKUP_HINTconfig
ENABLE_TOOL_SEARCH— false Replace full tool catalog with search-based discovery (tools deferred behind on-demand search).config
ENABLE_TOOL_SECURITY_POLICIESconfig
READ_ONLY_MODEconfig
ENABLE_MANDATORY_BPSconfig
ENABLE_STRICT_MANDATORY_BPSconfig
ENABLE_AUTO_BACKUPconfig
AUTO_BACKUP_THROTTLE_MINUTESconfig
AUTO_BACKUP_RETAIN_PER_ENTITYconfig
ENABLE_SNAPSHOT_DELETEconfig
SNAPSHOT_DELETE_MIN_AGE_DAYSconfig
TOOL_SEARCH_MAX_RESULTS— 5 Max results returned by ha_search_tools (range 2–10).config
DISABLED_TOOLSconfig
PINNED_TOOLS— empty Comma-separated tool names to keep always visible. The web settings UI is the primary way to manage this.config
HA_VERIFY_SSLconfig
MCP_HOSTconfig
GITHUB_STEP_SUMMARYconfig
LOG_LEVELconfig
MCP_PORTconfig
MCP_SECRET_PATHconfig
MCP_HEALTHZ🔐 secret
OIDC_VERIFY_ID_TOKENconfig
OIDC_ALLOWED_CLIENT_REDIRECT_URISconfig
HA_MCP_DISABLE_SETTINGS_UIconfig
MCP_SETTINGS_SECRET_PATHconfig
MCP_BASE_URLconfig
OIDC_CONFIG_URLconfig
OIDC_CLIENT_ID🔐 secret
OIDC_CLIENT_SECRET🔐 secret
OIDC_JWT_SIGNING_KEYconfig
OIDC_AUDIENCEconfig
HA_MCP_BUILD_VERSIONconfig
SUPERVISOR_BASE_URLconfig
XDG_DATA_HOMEconfig
HAMCP_ENV_FILEconfig
FLAGconfig
FASTMCP_TRANSPORTconfig
MCP_HTTP_PORTconfig
FASTMCP_PORT// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/homeassistant-ai-ha-mcp-n831fj)commit: 562602e137d2419e0ccc88192611efa8e3bbc0be
code hash: 501e7a8bbcce3931c09a1989f88f16af1601f565427a8b640d64b79b53663e65
verified: 7/30/2026, 9:11:40 AM