# compile_device

Compile ESPHome firmware for a device via Dashboard API. Blocks until done (~60-120s).

Agent View of the PolicyLayer registry record for `compile_device`. HTML page: https://policylayer.com/tools/fistacho-ha-nexus-agent/compile-device

## Facts

- Tool: `compile_device`
- Server: Ha Nexus Agent (`fistacho/ha-nexus-agent`) — https://policylayer.com/tools/fistacho-ha-nexus-agent.md
- Homepage: https://github.com/Fistacho/ha-nexus-agent
- Risk category: Execute (High risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "compile_device",
    "arguments": {}
  }
}
```

## Why compile_device is rated High

This tool executes a build/compilation process for embedded device firmware. While it doesn't directly delete data or move money, it runs an external operation (ESPHome compiler) whose effects depend on what firmware is being compiled. An AI agent could be tricked into compiling malicious firmware, disabling device security, or creating denial-of-service conditions.

From the tool's own definition: "Compile ESPHome firmware for a device via Dashboard API. Blocks until done (~60-120s) — explicitly invokes a firmware compilation process, a code execution operation that triggers external toolchain actions."

## Use case

AI agents invoke compile_device to trigger actions in Ha Nexus Agent. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Ha Nexus Agent:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "compile_device": {
      "limits": [
        {
          "counter": "compile_device_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Ha Nexus Agent (308)

- `abort_config_flow` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/abort-config-flow.md
- `abort_options_flow` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/abort-options-flow.md
- `clean_mqtt` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/clean-mqtt.md
- `delete_area` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-area.md
- `delete_automation` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-automation.md
- `delete_backup` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-backup.md
- `delete_blueprint` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-blueprint.md
- `delete_card` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-card.md
- `delete_category` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-category.md
- `delete_config_file` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-config-file.md
- `delete_css_custom_property` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-css-custom-property.md
- `delete_event` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-event.md
- `delete_label` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-label.md
- `delete_media` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-media.md
- `delete_pipeline` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-pipeline.md
- `delete_scene` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-scene.md
- `delete_script` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-script.md
- `delete_style_preset` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-style-preset.md
- `delete_theme` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-theme.md
- `delete_zone` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/delete-zone.md
- `git_rollback_file` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/git-rollback-file.md
- `git_rollback_to_commit` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/git-rollback-to-commit.md
- `lvgl_delete_widget` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/lvgl-delete-widget.md
- `notify_persistent_dismiss` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/notify-persistent-dismiss.md
- `notify_persistent_dismiss_all` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/notify-persistent-dismiss-all.md
- `remove_dashboard_resource` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/remove-dashboard-resource.md
- `remove_device` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/remove-device.md
- `remove_energy_source` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/remove-energy-source.md
- `remove_group` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/remove-group.md
- `remove_integration` — Destructive — https://policylayer.com/tools/fistacho-ha-nexus-agent/remove-integration.md
- …and 278 more: https://policylayer.com/tools/fistacho-ha-nexus-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=fistacho-ha-nexus-agent · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/fistacho-ha-nexus-agent
