debmatic-mcp
An open-source MCP server that enables AI agents to control HomeMatic smart home devices by interacting with the CCU JSON-RPC API. It supports configuration via environment variables, handles HTTPS connections with self-signed certificates, and includes security features like brute-force protection via fail2ban.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
Checks and signals
Each line is separate evidence, not a trust score.
- Popularity 9 GitHub stars
What you can do with it
- Control HomeMatic smart home devices
- Interact with CCU JSON-RPC API
- Manage smart home automation via LLM
Source and maintenance
- Last repository push
- Latest release
- v1.11.7
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
debmatic-mcp 1.3.0
{
"version": "1.3.0",
"transport": "stdio",
"identifier": "debmatic-mcp",
"runtimeHint": "npx",
"registryType": "npm",
"packageArguments": [
{
"type": "positional",
"value": "--stdio"
}
],
"environmentVariables": [
{
"name": "CCU_HOST",
"format": "string",
"isRequired": true,
"description": "Hostname or IP of your HomeMatic CCU (debmatic, CCU3, or RaspberryMatic)"
},
{
"name": "CCU_PASSWORD",
"format": "string",
"isRequired": true,
"description": "CCU admin password (same as the WebUI login)"
},
{
"name": "CCU_USER",
"format": "string",
"default": "Admin",
"description": "CCU username"
},
{
"name": "CCU_HTTPS",
"format": "boolean",
"default": "false",
"description": "Connect to the CCU via HTTPS (self-signed certificates supported)"
},
{
"name": "CCU_PORT",
"format": "number",
"default": "80",
"description": "CCU API port (80 for HTTP, 443 for HTTPS)"
},
{
"name": "CACHE_DIR",
"format": "string",
"default": "/data",
"description": "Directory for the device type cache and session persistence"
},
{
"name": "MCP_ALLOWED_ORIGINS",
"format": "string",
"description": "Comma-separated allowlist of browser origins. Unset = no cross-origin browser access (default-deny). An allowlisted origin is reflected exactly in Access-Control-Allow-Origin (never '*'); the list also drives DNS-rebinding origin checks"
},
{
"name": "MCP_ALLOWED_HOSTS",
"format": "string",
"description": "Extra Host header values accepted by DNS-rebinding protection (comma-separated host:port); add your hostname when behind a proxy or container DNS name"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"debmatic-mcp": {
"command": "npx",
"args": [
"-y",
"debmatic-mcp@1.3.0",
"--stdio"
],
"env": {
"CCU_HOST": "<YOUR_CCU_HOST>",
"CCU_PASSWORD": "<YOUR_CCU_PASSWORD>",
"CCU_USER": "<YOUR_CCU_USER>",
"CCU_HTTPS": "<YOUR_CCU_HTTPS>",
"CCU_PORT": "<YOUR_CCU_PORT>",
"CACHE_DIR": "<YOUR_CACHE_DIR>",
"MCP_ALLOWED_ORIGINS": "<YOUR_MCP_ALLOWED_ORIGINS>",
"MCP_ALLOWED_HOSTS": "<YOUR_MCP_ALLOWED_HOSTS>"
}
}
}
}Cline
{
"mcpServers": {
"debmatic-mcp": {
"command": "npx",
"args": [
"-y",
"debmatic-mcp@1.3.0",
"--stdio"
],
"env": {
"CCU_HOST": "<YOUR_CCU_HOST>",
"CCU_PASSWORD": "<YOUR_CCU_PASSWORD>",
"CCU_USER": "<YOUR_CCU_USER>",
"CCU_HTTPS": "<YOUR_CCU_HTTPS>",
"CCU_PORT": "<YOUR_CCU_PORT>",
"CACHE_DIR": "<YOUR_CACHE_DIR>",
"MCP_ALLOWED_ORIGINS": "<YOUR_MCP_ALLOWED_ORIGINS>",
"MCP_ALLOWED_HOSTS": "<YOUR_MCP_ALLOWED_HOSTS>"
}
}
}
}VS Code
{
"servers": {
"debmatic-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"debmatic-mcp@1.3.0",
"--stdio"
],
"env": {
"CCU_HOST": "<YOUR_CCU_HOST>",
"CCU_PASSWORD": "<YOUR_CCU_PASSWORD>",
"CCU_USER": "<YOUR_CCU_USER>",
"CCU_HTTPS": "<YOUR_CCU_HTTPS>",
"CCU_PORT": "<YOUR_CCU_PORT>",
"CACHE_DIR": "<YOUR_CACHE_DIR>",
"MCP_ALLOWED_ORIGINS": "<YOUR_MCP_ALLOWED_ORIGINS>",
"MCP_ALLOWED_HOSTS": "<YOUR_MCP_ALLOWED_HOSTS>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"debmatic-mcp": {
"command": "npx",
"args": [
"-y",
"debmatic-mcp@1.3.0",
"--stdio"
],
"env": {
"CCU_HOST": "<YOUR_CCU_HOST>",
"CCU_PASSWORD": "<YOUR_CCU_PASSWORD>",
"CCU_USER": "<YOUR_CCU_USER>",
"CCU_HTTPS": "<YOUR_CCU_HTTPS>",
"CCU_PORT": "<YOUR_CCU_PORT>",
"CACHE_DIR": "<YOUR_CACHE_DIR>",
"MCP_ALLOWED_ORIGINS": "<YOUR_MCP_ALLOWED_ORIGINS>",
"MCP_ALLOWED_HOSTS": "<YOUR_MCP_ALLOWED_HOSTS>"
}
}
}
}Let your agent find its tools
Find servers like debmatic-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.