Ha MCP is an MCP server that the Unofficial and Awesome Home Assistant MCP Server. Its tool list has not been published yet over http, requires no API key, and scores 83/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktophttp · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"ha-mcp": {
"args": [
"ha-mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/ha-mcp)
Read me
What Ha Mcp does
Breaking change (v7.3.0): ha_config_set_yaml has been moved to beta.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'ha-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
83/100across 5 weighted dimensions
0255075100
30
16
12
15
10
−17
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev4 fixed
CVE-2026-32112medium · fixedCVSS 6.8
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
### Summary The ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who can reach the OAuth endpoint and convince the server operator to follow a crafted authorization URL could execute JavaScript in the operator's browser. This affects only users running the beta OAuth mode (`ha-mcp-oauth`), which is not part of the standard setup and requires explicit configuration. ### Details **Unescaped f-string rendering** `consent_form.p
CVE-2026-32111medium · fixedCVSS 5.3
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
### Summary The ha-mcp OAuth consent form (beta feature) accepts a user-supplied `ha_url` and makes a server-side HTTP request to `{ha_url}/api/config` with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same primitive. The primary deployment method (private URL with pre-configured `HOMEASSISTANT_TOKEN`) is not affected
GHSA-q855-8rh5-jfgqmedium · fixedCVSS 6.5
ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
### Summary In add-on mode, the ha-mcp settings UI routes are mounted both under the MCP secret path **and** at the bare root of the published port (`:9583`), so Home Assistant ingress can serve the "Open Web UI" button. The root-mounted routes perform no authentication — no secret, no `Origin` check, no CSRF token — so any client that can reach `:9583` without the MCP secret can invoke them. ### Affected configurations Home Assistant **add-on** installations (`host_network: true` with port `
GHSA-g39v-cvjh-8fpfmedium · fixedCVSS 6.5
Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/
### Summary When `ENABLE_YAML_CONFIG_EDITING=true`, every `ha_config_set_yaml` call backs up the pre-edit file to `<config>/www/yaml_backups/`, which Home Assistant serves at `/local/` with **no authentication**. Anyone who can reach the HA web interface can download the most recent pre-edit `configuration.yaml` (or other YAML file) — typically containing plaintext MQTT passwords, REST credentials, webhook IDs, geofence coordinates, and `shell_command` definitions — with zero credentials. ###
Inventory
Tools (47)
Click any tool to inspect its schema.
~1.8k tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Ha Mcp safe to use?
- Ha Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install Ha Mcp?
- Ha Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Ha Mcp do?
- Ha Mcp provides 47 tools: ha_call_addon_api, ha_get_addon, ha_config_list_areas, ha_config_list_floors, ha_config_remove_area and 42 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Ha Mcp?
- Ha Mcp is compatible with claude-desktop, cursor, claude-code. It uses http transport.
- Is Ha Mcp actively maintained?
- Ha Mcp is actively maintained — last commit was 0 days ago. It has 4,518 GitHub stars.
Related
Similar servers
Others in productivity
S
Superlocalmemory MCP Server94Local-first AI memory with knowledge graphs and hybrid search. 17+ AI tools via MCP. Free.
222 6
C
com.monday/monday.com94MCP server for monday.com integration.
420 4
O
Obsidian Sync MCP Server93Give AI agents access to your Obsidian vault via local files or Self-hosted LiveSync.
48 9
Simple Memory Extension MCP Server92An MCP server to extend the context of agents. Useful when coding big features or vibe coding and need to store/recall progress, key moments or changes or anything worth remembering. Simply ask the agent to store memories and recall whenever you want.
8
MCP Security Weekly
Get CVE alerts and security updates for Ha Mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.