{
  "slug": "io-github-claymore666-ccu-mcp",
  "name": "io.github.claymore666/ccu-mcp",
  "title": "ccu-mcp",
  "description": "MCP server for controlling HomeMatic smart home devices via the CCU JSON-RPC API",
  "version": "1.11.7",
  "publishedAt": "2026-10-25T17:03:29.755312Z",
  "updatedAt": "2026-10-25T17:03:29.755312Z",
  "repoUrl": "https://github.com/claymore666/ccu-mcp",
  "websiteUrl": null,
  "namespace": {
    "type": "github",
    "owner": "claymore666"
  },
  "kind": "local",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "ccu-mcp",
      "version": "1.11.7",
      "transport": "stdio",
      "runtimeHint": "npx"
    }
  ],
  "remotes": [],
  "envVars": [
    {
      "name": "CCU_HOST",
      "isSecret": false,
      "isRequired": true,
      "description": "Hostname or IP of your HomeMatic CCU (debmatic, CCU3, or OpenCCU/RaspberryMatic)"
    },
    {
      "name": "CCU_PASSWORD",
      "isSecret": true,
      "isRequired": true,
      "description": "CCU admin password (same as the WebUI login). Must be set; the value may be empty for a CCU with no password"
    },
    {
      "name": "CCU_USER",
      "isSecret": false,
      "isRequired": false,
      "description": "CCU username"
    },
    {
      "name": "CCU_HTTPS",
      "isSecret": false,
      "isRequired": false,
      "description": "Connect to the CCU via HTTPS (self-signed certificates supported)"
    },
    {
      "name": "CCU_PORT",
      "isSecret": false,
      "isRequired": false,
      "description": "CCU API port (80 for HTTP, 443 for HTTPS)"
    },
    {
      "name": "CACHE_DIR",
      "isSecret": false,
      "isRequired": false,
      "description": "Directory for the device type cache and session persistence"
    },
    {
      "name": "MCP_ALLOWED_ORIGINS",
      "isSecret": false,
      "isRequired": false,
      "description": "Comma-separated allowlist of browser origins. Unset = no cross-origin browser access (default-deny). An allowlisted origin is reflected exactly in Access-Control-Allow-Origin (never '*'); the list also drives DNS-rebinding origin checks"
    },
    {
      "name": "MCP_ALLOWED_HOSTS",
      "isSecret": false,
      "isRequired": false,
      "description": "Extra Host header values accepted by DNS-rebinding protection (comma-separated host:port); add your hostname when behind a proxy or container DNS name"
    },
    {
      "name": "CCU_PROFILES",
      "isSecret": false,
      "isRequired": false,
      "description": "Comma-separated names of multiple CCU targets (e.g. 'prod,dev'). Each profile takes the flat CCU_* settings prefixed CCU_<NAME>_ (CCU_PROD_HOST, ...), plus policy flags CCU_<NAME>_PROTECTED (writes need confirm:true) and CCU_<NAME>_READONLY. Unset = single default profile from the flat CCU_* vars"
    },
    {
      "name": "CCU_DEFAULT_PROFILE",
      "isSecret": false,
      "isRequired": false,
      "description": "Which profile from CCU_PROFILES is active at startup (default: the first listed)"
    },
    {
      "name": "CCU_TLS_VERIFY",
      "isSecret": false,
      "isRequired": false,
      "description": "Verify the CCU's TLS certificate against the system trust store. Only meaningful with CCU_HTTPS=true. Default false, because a CCU ships a self-signed certificate — prefer CCU_TLS_FINGERPRINT or CCU_CA_CERT to verify one of those"
    },
    {
      "name": "CCU_TLS_FINGERPRINT",
      "isSecret": false,
      "isRequired": false,
      "description": "Pin the CCU's self-signed leaf certificate by its SHA-256 fingerprint (hex, colons optional). The strongest option for an appliance: the connection is rejected unless the presented certificate matches. Takes precedence over CCU_CA_CERT"
    },
    {
      "name": "CCU_CA_CERT",
      "isSecret": false,
      "isRequired": false,
      "description": "Path to a PEM file holding the CCU's CA or self-signed certificate. The connection is then validated against it with standard chain verification"
    },
    {
      "name": "CCU_TIMEOUT",
      "isSecret": false,
      "isRequired": false,
      "description": "Timeout for a CCU JSON-RPC call, in MILLISECONDS"
    },
    {
      "name": "CCU_SCRIPT_TIMEOUT",
      "isSecret": false,
      "isRequired": false,
      "description": "Timeout for HomeMatic Script execution (ReGa), in MILLISECONDS — scripts are slower than plain API calls"
    },
    {
      "name": "CACHE_TTL",
      "isSecret": false,
      "isRequired": false,
      "description": "Lifetime of the on-disk device-type schema cache, in SECONDS"
    },
    {
      "name": "CCU_RATE_LIMIT_BURST",
      "isSecret": false,
      "isRequired": false,
      "description": "Token-bucket burst size for CCU requests — how many may be issued back to back"
    },
    {
      "name": "CCU_RATE_LIMIT_RATE",
      "isSecret": false,
      "isRequired": false,
      "description": "Sustained CCU request rate, in requests per second"
    },
    {
      "name": "RESOURCE_POLL_INTERVAL",
      "isSecret": false,
      "isRequired": false,
      "description": "How often MCP resources are polled for change notifications, in SECONDS"
    },
    {
      "name": "LOG_LEVEL",
      "isSecret": false,
      "isRequired": false,
      "description": "error | warn | info | debug. Logs are structured JSON on stderr"
    }
  ],
  "category": "files-docs",
  "subcategory": "formats",
  "company": "",
  "categoryAuto": true,
  "checks": [
    {
      "id": "source-linked",
      "label": "Source repository linked",
      "result": "pass",
      "detail": "https://github.com/claymore666/ccu-mcp"
    },
    {
      "id": "version-pinned",
      "label": "Version pinned",
      "result": "pass",
      "detail": "Every package has an explicit version"
    },
    {
      "id": "secrets-requested",
      "label": "Secrets requested",
      "result": "info",
      "detail": "Asks for 1 secret: CCU_PASSWORD"
    },
    {
      "id": "known-registry",
      "label": "Known package registry",
      "result": "pass",
      "detail": "All packages come from npm, PyPI, OCI, NuGet or MCPB"
    },
    {
      "id": "namespace",
      "label": "Namespace ownership",
      "result": "info",
      "detail": "Name verified via GitHub account claymore666"
    },
    {
      "id": "meta-text",
      "label": "Registry text aimed at the AI",
      "result": "pass",
      "detail": "Description and settings contain no hidden characters or instructions to the AI"
    },
    {
      "id": "install-scripts",
      "label": "Install scripts",
      "result": "pass",
      "detail": "ccu-mcp@1.11.7 runs nothing at install"
    },
    {
      "id": "code-flags",
      "label": "Code red flags",
      "result": "pass",
      "detail": "Read 81 files in ccu-mcp@1.11.7: no obfuscation, encoded execution, credential reads or data-collection endpoints found"
    },
    {
      "id": "ai-text",
      "label": "Text aimed at the AI",
      "result": "pass",
      "detail": "No hidden characters or instructions to the AI in 81 files, including comments and the README"
    }
  ],
  "scannedAt": "2026-10-29",
  "level": "Scanned",
  "install": [
    {
      "label": "Claude Desktop (npm)",
      "kind": "claude_desktop_json",
      "text": "{\n  \"mcpServers\": {\n    \"ccu-mcp\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"ccu-mcp@1.11.7\"\n      ],\n      \"env\": {\n        \"CCU_HOST\": \"<your value>\",\n        \"CCU_PASSWORD\": \"<your value>\"\n      }\n    }\n  }\n}"
    }
  ],
  "curated": true,
  "stars": 9,
  "archived": false,
  "pushedAt": "2026-10-26T22:59:32Z",
  "health": {
    "score": 65,
    "parts": {
      "popularity": 0.3683733199315173,
      "activity": 0.6,
      "issues": 1,
      "security": 1
    },
    "fail": 0,
    "warn": 0,
    "raw": {
      "stars": 9,
      "forks": 2,
      "downloads": 470,
      "hn": null,
      "issuesOpen": 0,
      "issuesClosed": 80,
      "prsMerged": 225,
      "commits90": 0,
      "release": "2026-10-25T16:29:12Z",
      "pushed": "2026-10-26T22:59:32Z",
      "growth": null,
      "growthDays": null,
      "archived": false
    },
    "at": "2026-10-31T07:35:52.424Z"
  }
}