Home Assistant Admin MCP 1.0.0

Highlights

• Inspect, diagnose, control, and administer Home Assistant through MCP clients including OpenCode, Codex, and Claude Code.
• Enforce deployment-level read_only, control, and admin permission boundaries with confirmation requirements for high-impact actions.
• Read and patch allowlisted YAML through atomic transactions with dry runs, checkpoints, Home Assistant validation, reloads, health checks, and rollback.
• Track configuration changes in a local Git repository with bounded history and diffs plus guarded rollback of service-created commits.
• Protect HTTP access with a separate MCP bearer token, Host validation, optional browser-origin restrictions, redacted secrets, and constrained filesystem access.
• Deploy on Docker Compose or Unraid using hardened, non-root linux/amd64 and linux/arm64 images.

Container Images

docker pull lemanjo/hac-mcp:1.0.0

This release also publishes the 1.0, 1, and latest tags. Pin 1.0.0 for reproducible deployments.

Security

Release images are smoke-tested on both architectures and scanned for all known runtime vulnerability severities before publication. The workflow blocks every finding for which a fix is available and publishes provenance plus an SBOM.

See the README for setup, permission modes, Git-backed configuration history, client examples, and operational safety guidance.