// SCAN REPORT

Homeassistant

40 tools. 28 can modify or destroy data without limits.

28 write tools that can modify data. Rate limits recommended.

Last updated: 27 Jun 2026

28 can modify or destroy data

12 read-only

40 tools total

Community server · catalogue entry verified 27/06/2026

How to control Homeassistant ↓

TOOL MAP

What Homeassistant exposes to your agents

Read (12) Write / Execute (28) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Homeassistant tools

Execute · High intent_handle In Home Assistant, intent handling processes natural language intents and triggers actions on devices and services. Execute · High lock_control Based on the tool name and server context, this tool likely controls physical lock devices (lock/unlock doors). Execute · High switch_control The tool name strongly implies controlling switches (turning on/off smart home devices). Execute · High alarm_control The description is empty, so classification relies solely on the tool name.

28 of Homeassistant's 40 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Homeassistant

PolicyLayer is an MCP gateway — it sits between your AI agents and Homeassistant, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "input_datetime_control": {
    "limits": [
      {
        "counter": "input_datetime_control_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "api_info": {
    "limits": [
      {
        "counter": "api_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Homeassistant — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON HOMEASSISTANT →

Instant setup, no code required.

FULL CATALOGUE

All 40 Homeassistant tools

EXECUTE 23 tools

Execute alarm_control alarm_control Execute automation_control automation_control Execute call_service call_service Execute camera_control camera_control Execute climate_control climate_control Execute cover_control cover_control Execute events_control events_control Execute fan_control fan_control Execute humidifier_control humidifier_control Execute intent_handle intent_handle Execute lawn_mower_control lawn_mower_control Execute lights_control lights_control Execute lock_control lock_control Execute media_player_control media_player_control Execute scene_control scene_control Execute script_control script_control Execute services_control services_control Execute siren_control siren_control Execute switch_control switch_control Execute template_render template_render Execute vacuum_control vacuum_control Execute valve_control valve_control Execute water_heater_control water_heater_control

WRITE 5 tools

Write input_datetime_control input_datetime_control Write input_number_control input_number_control Write input_select_control input_select_control Write input_text_control input_text_control Write send_notification send_notification

READ 12 tools

Read api_info api_info Read calendar_access calendar_access Read camera_proxy_get camera_proxy_get Read config_check config_check Read discover_tools discover_tools Read error_log_get error_log_get Read history_query history_query Read input_boolean_control input_boolean_control Read list_devices list_devices Read logbook_query logbook_query Read states_control states_control Read weather_control weather_control

FAQ

Questions about Homeassistant

How do I prevent bulk modifications through Homeassistant? +

The Homeassistant server has 5 write tools including input_datetime_control, input_number_control, input_select_control. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Homeassistant.

How many tools does the Homeassistant MCP server expose? +

40 tools across 2 categories: Read, Write. 12 are read-only. 28 can modify, create, or delete data.

How do I enforce a policy on Homeassistant? +

Register the Homeassistant MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Homeassistant tool call.

Deterministic rules across all 40 Homeassistant tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HOMEASSISTANT →

Instant setup, no code required.

40 Homeassistant tools catalogued and risk-classified — across an index of 43,000+ MCP servers.