Comprehensive Home Assistant MCP Server with 60 tools for AI-driven smart home control including SSH/SFTP file management. Production-ready k3s deployment for Pi4 cluster.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×2 in agarib/homeassistant-mcp-server
- HIGH code analysis flagged dynamic code execution ×2 in agarib/homeassistant-mcp-server
transport http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 99955a9 · analyzer v28 · 1d ago
danger signals2
- dynamic code execution eval()/exec() agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/code_execution.py :70
exec(request.code, safe_globals) - dynamic code execution __import__() agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/server.py :29
__import__(lib)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 34
filesystem 7
- fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/core/clients.py :7
from pathlib import Path - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/core/config.py :4
from pathlib import Path - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/automations.py :107
async with aiofiles.open(automations_file, 'r') as f: - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/entity_registry.py :85
from pathlib import Path - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/file_management.py :65
import shutil - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/scripts.py :18
from pathlib import Path - fs agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/utilities.py :39
from pathlib import Path
shell / exec 1
- shell agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/server.py :13
import subprocess # auto-install fallback
network 2
- net agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/core/clients.py :4
import httpx - net agarib-homeassistant-mcp-server-99955a9/ha-openapi-server/app/routers/history_logs.py :3
from urllib.parse import quote
declared dependencies 12
- fastapi@>=0.100.0
- uvicorn@>=0.23.0
- pydantic@>=2.0.0
- pydantic-settings@>=2.12.0
- httpx@>=0.24.0
- websockets@>=11.0
- aiofiles@>=23.0.0
- pyyaml@>=6.0
- pandas@>=2.0.0
- numpy@>=1.24.0
- matplotlib@>=3.7.0
- seaborn@>=0.12.0