🏠 Home Assistant via MCP protocol

The skill for control Home Assistant smart home devices and query states using MCP protocol.

Security Scan

The skill's requests and instructions match its stated purpose (controlling Home Assistant via MCP); required env vars and the mcporter tool are proportionate and expected.

Purpose & Capability

Name/description (Home Assistant via MCP) align with requirements: mcporter (or npx) is the MCP CLI and HASS_ACCESS_TOKEN/HASS_BASE_URL are exactly what a Home Assistant MCP client needs.

Instruction Scope

SKILL.md only instructs using mcporter (or npx mcporter) to call MCP methods and to configure mcporter with HASS_BASE_URL/HASS_ACCESS_TOKEN; it does not request unrelated files, credentials, or system-wide data.

Install Mechanism

Install spec uses the 'mcporter' npm package (node). This is an expected way to obtain the MCP CLI but is a moderate-risk install vector (public registry package will be installed/placed on disk). Verify the mcporter package/source before installing.

Credentials

Only HASS_ACCESS_TOKEN (primary) and HASS_BASE_URL are required. Both are necessary and proportionate for connecting to a Home Assistant MCP endpoint.

Persistence & Privilege

The skill does not request always:true and is not asking to modify other skills or system configs; it runs on-demand or autonomously per platform defaults (normal for skills).

Assessment

This skill appears to be what it says: it uses the mcporter CLI to talk to a Home Assistant MCP endpoint and needs your HASS_BASE_URL and HASS_ACCESS_TOKEN. Before installing: 1) Verify you trust the mcporter npm package (review its GitHub repo/source and recent releases) instead of blindly installing from npm. 2) Use a Home Assistant token with minimal necessary scope and treat it like a secret; don't paste it into public places. 3) Prefer using npx for ephemeral invocation if you don't want a global binary, or install in a controlled environment. 4) Confirm HASS_BASE_URL points to your internal/Home Assistant instance (avoid exposing the token to external endpoints). 5) If you are concerned about autonomous invocation, restrict or review the skill's permissions in your agent platform—autonomous invocation is normal but increases blast radius if the token is compromised.

Home Assistant

Control Home Assistant smart home and query states using MCP protocol.

Prerequisites

Enable MCP server in Home Assistant:

• Browse to your Home Assistant instance.
• Go to Settings > Devices & services.
• In the bottom right corner, select the + Add Integration button.
• From the list, select Model Context Protocol.
• Follow the instructions on screen to complete the setup.

Usage

# Get states
mcporter call home-assistant.GetLiveContext

# Turn on the device
mcporter call home-assistant.HassTurnOn(name: "Bedroom Light")
mcporter call home-assistant.HassTurnOn(name: "Light", area: "Bedroom")

# Turn off the device
mcporter call home-assistant.HassTurnOff(name: "Bedroom Light")
mcporter call home-assistant.HassTurnOff(area: "Bedroom", domain: ["light"])

# Control light
# brightness: The percentage of the light, where 0 is off and 100 is fully lit.
# color: Name of color
mcporter call home-assistant.HassLightSet(name: "Bedroom Light", brightness: 50)

# Control fan
# percentage: The percentage of the fan, where 0 is off and 100 is full speed.
mcporter call home-assistant.HassFanSetSpeed(name: "Fan", area: "Bedroom", percentage: 80)

Execute the following command to learn about specific usage methods:

• mcporter list home-assistant --schema --all-parameters

Config

When prompted that the MCP server does not exist, remind the user to configure the HASS_BASE_URL and HASS_ACCESS_TOKEN environment variables by executing the following command to add the configuration:

mcporter config add home-assistant \
  --transport http \
  --url "${HASS_BASE_URL:-http://homeassistant.local:8123}/api/mcp" \
  --header "Authorization=Bearer \${HASS_ACCESS_TOKEN}"

About mcporter

• When command mcporter does not exist, use npx -y mcporter instead.
• https://github.com/steipete/mcporter/raw/refs/heads/main/docs/call-syntax.md
• https://github.com/steipete/mcporter/raw/refs/heads/main/docs/cli-reference.md