Model Context Protocol moderate risk

Homeassistant

MCP server for Home Assistant enables natural language control of smart home devices and automations, with real-time updates and secure API access.

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

readwriteexecadmin

Quickstart

Install

npm install

npm

Config

{
  "tool": "control",
  "command": "turn_on",  // or "turn_off", "toggle"
  "entity_id": "light.living_room"
}

Exposed MCP Tools (4)

high

control

Controls Home Assistant entities (lights, switches, etc.)

Directly manipulates device states, potentially causing unintended consequences.

high

addon

Manages Home Assistant add-ons (list, install, start, stop, restart).

Allows installation of potentially malicious add-ons with system-level privileges.

high

package

Manages HACS packages (integrations, themes, etc.).

Enables installation of untrusted code from community repositories.

high

automation_config

Creates, duplicates, and modifies Home Assistant automations.

Can create automations that cause unintended or harmful actions.

Safety Assessment

This server provides powerful control over a Home Assistant instance, which can be risky if not configured properly. Secure token management and careful automation design are essential. The ability to manage add-ons and packages introduces additional risk if untrusted sources are used.

Token-based authentication
Rate limiting
Comprehensive error handling
State validation

Direct control over physical devices
Potential for unintended automation triggers
Exposure of Home Assistant instance to network
Add-on and package management capabilities