Scan MCP Online API Star

Hass (hannoeru) MCP Server

hass-mcp npm v0.1.7 Source verified

Published by hannoeru — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.

MCP server for Home Assistant (REST/WebSocket) control.

View on npm ↗ Repository ↗ Raw report (JSON) ↗
Trust grade
A
97/100
Last scanned get badge →
Trust
A · 97/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
Moderate
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
Share this Trust Score
𝕏 Share LinkedIn Reddit
A Why this grade threat 100 − adoption risk = 97/100

The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.

1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:

The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.

2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:

PointsAdoption-risk factor
−3 capability blast radius (moderate) — client exposure if the model is manipulated

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind a deduction.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

Tools 13

Each tool and what it can reach — statically extracted from the published source.

  • ha_get_historyingests untrusted input
  • ha_get_logbookingests untrusted input
  • ha_area_lights_offno sensitive capability
  • ha_area_lights_onno sensitive capability
  • ha_call_serviceno sensitive capability
  • ha_get_stateno sensitive capability
  • ha_light_turn_offno sensitive capability
  • ha_light_turn_onno sensitive capability
  • ha_list_areasno sensitive capability
  • ha_list_devicesno sensitive capability
Show 3 more tools ↓
  • ha_list_entity_registryno sensitive capability
  • ha_list_servicesno sensitive capability
  • ha_list_statesno sensitive capability

What this scan could not see

Versions 1

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

VersionScoreFindingsEngineScanned
v0.1.7 latest A 97/100 0 1.13.0 2026-09-07

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

MCP Trust Score: A · 97/100
Markdown (GitHub README)
[![MCP Trust Score](https://mcptrustchecker.com/registry/hass-mcp-2/badge.svg)](https://mcptrustchecker.com/registry/hass-mcp-2)
HTML
<a href="https://mcptrustchecker.com/registry/hass-mcp-2"><img src="https://mcptrustchecker.com/registry/hass-mcp-2/badge.svg" alt="MCP Trust Score" height="20"></a>
Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/hass-mcp-2/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan hass-mcp --online

Use the free API → How scoring works

Other implementations of Hass 2

Independent packages implementing the same tool, scanned with the same engine. Compare all 3 side by side →

Hass (PyPI) PyPI
A
hass-mcp

Home Assistant Model Context Protocol (MCP) server

AI & Agents Score 98/100 2 findings Cap. Minimal
Hass (jarahkon) Source verified npm
A
@jarahkon/hass-mcp-server

MCP server for full Home Assistant control — dashboards, files, automations, add-ons, and more

API Development Score 94/100 7 findings 92/wk Cap. High

More in Analytics & Monitoring

Admin Contracts Source verified npm
A
@plasius/mcp-admin-contracts

Public-safe MCP admin discovery contract descriptors and response builders.

Analytics & Monitoring Score 100/100 0 findings 307/wk Cap. Minimal
Ai Rotom Source verified npm
A
@nonz250/ai-rotom

Pokemon Champions battle advisor MCP server

Analytics & Monitoring Score 100/100 0 findings 202/wk Cap. Minimal
Airflow Source verified npm
A
@us-all/airflow-mcp

Airflow MCP server — DAG list, runs, task instances, log tails, trigger and clear over the Airflow REST API

Analytics & Monitoring Score 100/100 0 findings 79/wk Cap. Minimal
Analytics Source verified npm
A
@armature-tech/mcp-analytics

MCP analytics wrapper SDK that instruments MCP tool declarations with telemetry.

Analytics & Monitoring Score 100/100 0 findings 2.3k/wk Cap. Minimal
Atlasemoji Remote
A
https://atlasemoji.com/api/mcp

AI-ready GIS, geofencing, DataSynch, CRM, inventory, routing, APIs, telemetry and workflows.

Analytics & Monitoring Score 100/100 0 findings Cap. Minimal
Catchintent Remote
A
https://engine.catchintent.com/mcp

AI-native social listening. Monitor buying signals and run GTM workflows via natural language.

Analytics & Monitoring Score 100/100 0 findings Cap. Minimal