Is io.github.homeassistant-ai/ha-mcp safe?

Probably. Read the findings first.

C55/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing

highWhole environment serialized (possible credential exfil)
highcurl | sh in a script

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

2 high2 medium

Code scan659 source files scanned0/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (4)

highWhole environment serialized (possible credential exfil)env.dump

ha_mcp-8.5.0/src/ha_mcp/_vendor/fastmcp/client/transports/stdio.py: …or project_directory: env = os.environ.copy() if project_directory: …

mediumNetwork call to a raw IP addressnet.raw-ip

ha_mcp-8.5.0/src/ha_mcp/_vendor/fastmcp/server/auth/redirect_validation.py: …1` would let a web client register `https://127.0.0.2/callback` and slip past the non-loop…

highcurl | sh in a scriptinstall.curl-pipe

ha_mcp-8.5.0/src/ha_mcp/_vendor/fastmcp/utilities/mcp_server_config/v1/environments/uv.py: …ase install it with: " "curl -LsSf https://astral.sh/uv/install.sh | sh" ) if not self._mu…

mediumsubprocess with shell=Trueexec.shell-true

ha_mcp-8.5.0/src/ha_mcp/_vendor/mcp/cli/cli.py: …ion"], check=True, capture_output=True, shell=True) return cmd …

Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Full listing, tools and install