/ 100

1 month ago

github_topic

ha-mcp

Item: ha-mcp
Rating: 69
Author: M8ven

The Unofficial and Awesome Home Assistant MCP Server

→ homeassistant-ai/ha-mcp · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHub Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

71 tools verified — handlers match their declared behaviour

36 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: SUPERVISOR_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configENABLE_BETA_FEATURES

🔐 secretSUPERVISOR_TOKEN

configBACKUP_HINT

configENABLE_TOOL_SEARCH— false Replace full tool catalog with search-based discovery (tools deferred behind on-demand search).

configENABLE_TOOL_SECURITY_POLICIES

configREAD_ONLY_MODE

configENABLE_MANDATORY_BPS

configENABLE_YAML_CONFIG_EDITING

configENABLE_YAML_PACKAGES_AUTOMATION

configENABLE_YAML_PACKAGES_SCRIPT

configENABLE_YAML_PACKAGES_SCENE

configHAMCP_ENABLE_FILESYSTEM_TOOLS— [@ekobres](https://github.com/ekobres) — Feature flags for and HAMCP_ENABLE_CUSTOM_COMPONENT_INTEGRATION in the add-on config, with beta tagging in source and docs.

configHAMCP_ENABLE_CUSTOM_COMPONENT_INTEGRATION— [@ekobres](https://github.com/ekobres) — Feature flags for HAMCP_ENABLE_FILESYSTEM_TOOLS and in the add-on config, with beta tagging in source and docs.

configHAMCP_ENABLE_DASHBOARD_SCREENSHOT

configENABLE_CODE_MODE

configENABLE_LITE_DOCSTRINGS

configENABLE_AUTO_BACKUP

configAUTO_BACKUP_THROTTLE_MINUTES

configAUTO_BACKUP_RETAIN_PER_ENTITY

configTOOL_SEARCH_MAX_RESULTS— 5 Max results returned by ha_search_tools (range 2–10).

configDISABLED_TOOLS

configPINNED_TOOLS— empty Comma-separated tool names to keep always visible. The web settings UI is the primary way to manage this.

configHA_VERIFY_SSL

configMCP_HOST

configGITHUB_STEP_SUMMARY

configLOG_LEVEL

configMCP_PORT

configMCP_SECRET_PATH

configMCP_BASE_URL

configHA_MCP_BUILD_VERSION

configSUPERVISOR_BASE_URL

configXDG_DATA_HOME

configHAMCP_ENV_FILE

configFLAG

configHA_MCP_DISABLE_SETTINGS_UI

configFASTMCP_TRANSPORT

configMCP_HTTP_PORT

configFASTMCP_PORT

configHA_MCP_CONFIG_DIR

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/homeassistant-ai-ha-mcp-wa7m21)](https://m8ven.ai/mcp/homeassistant-ai-ha-mcp-wa7m21)

commit: b8811bc89c336dd1f66ebd9a1ba37f384b6bc7de

code hash: 81144a4978c54f06714b9f3efb7d784fe9918cdc641623416c904757d01da3fa

verified: 6/22/2026, 12:05:42 PM

view raw JSON →