ccu MCP Setup & Guide

{
  "id": "io.github.claymore666/ccu-mcp",
  "type": "mcp-server",
  "version": "1.11.3",
  "displayName": "ccu-mcp",
  "description": "MCP server for controlling HomeMatic smart home devices via the CCU JSON-RPC API",
  "repository": {
    "url": "https://github.com/claymore666/ccu-mcp",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "npm",
        "identifier": "ccu-mcp",
        "version": "1.11.3",
        "runtimeHint": "npx",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "CCU_HOST",
            "description": "Hostname or IP of your HomeMatic CCU (debmatic, CCU3, or OpenCCU/RaspberryMatic)",
            "isRequired": true
          },
          {
            "name": "CCU_PASSWORD",
            "description": "CCU admin password (same as the WebUI login). Must be set; the value may be empty for a CCU with no password",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "CCU_USER",
            "description": "CCU username"
          },
          {
            "name": "CCU_HTTPS",
            "description": "Connect to the CCU via HTTPS (self-signed certificates supported)"
          },
          {
            "name": "CCU_PORT",
            "description": "CCU API port (80 for HTTP, 443 for HTTPS)"
          },
          {
            "name": "CACHE_DIR",
            "description": "Directory for the device type cache and session persistence"
          },
          {
            "name": "MCP_ALLOWED_ORIGINS",
            "description": "Comma-separated allowlist of browser origins. Unset = no cross-origin browser access (default-deny). An allowlisted origin is reflected exactly in Access-Control-Allow-Origin (never '*'); the list also drives DNS-rebinding origin checks"
          },
          {
            "name": "MCP_ALLOWED_HOSTS",
            "description": "Extra Host header values accepted by DNS-rebinding protection (comma-separated host:port); add your hostname when behind a proxy or container DNS name"
          },
          {
            "name": "CCU_PROFILES",
            "description": "Comma-separated names of multiple CCU targets (e.g. 'prod,dev'). Each profile takes the flat CCU_* settings prefixed CCU_<NAME>_ (CCU_PROD_HOST, ...), plus policy flags CCU_<NAME>_PROTECTED (writes need confirm:true) and CCU_<NAME>_READONLY. Unset = single default profile from the flat CCU_* vars"
          },
          {
            "name": "CCU_DEFAULT_PROFILE",
            "description": "Which profile from CCU_PROFILES is active at startup (default: the first listed)"
          },
          {
            "name": "CCU_TLS_VERIFY",
            "description": "Verify the CCU's TLS certificate against the system trust store. Only meaningful with CCU_HTTPS=true. Default false, because a CCU ships a self-signed certificate — prefer CCU_TLS_FINGERPRINT or CCU_CA_CERT to verify one of those"
          },
          {
            "name": "CCU_TLS_FINGERPRINT",
            "description": "Pin the CCU's self-signed leaf certificate by its SHA-256 fingerprint (hex, colons optional). The strongest option for an appliance: the connection is rejected unless the presented certificate matches. Takes precedence over CCU_CA_CERT"
          },
          {
            "name": "CCU_CA_CERT",
            "description": "Path to a PEM file holding the CCU's CA or self-signed certificate. The connection is then validated against it with standard chain verification"
          },
          {
            "name": "CCU_TIMEOUT",
            "description": "Timeout for a CCU JSON-RPC call, in MILLISECONDS"
          },
          {
            "name": "CCU_SCRIPT_TIMEOUT",
            "description": "Timeout for HomeMatic Script execution (ReGa), in MILLISECONDS — scripts are slower than plain API calls"
          },
          {
            "name": "CACHE_TTL",
            "description": "Lifetime of the on-disk device-type schema cache, in SECONDS"
          },
          {
            "name": "CCU_RATE_LIMIT_BURST",
            "description": "Token-bucket burst size for CCU requests — how many may be issued back to back"
          },
          {
            "name": "CCU_RATE_LIMIT_RATE",
            "description": "Sustained CCU request rate, in requests per second"
          },
          {
            "name": "RESOURCE_POLL_INTERVAL",
            "description": "How often MCP resources are polled for change notifications, in SECONDS"
          },
          {
            "name": "LOG_LEVEL",
            "description": "error | warn | info | debug. Logs are structured JSON on stderr"
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.claymore666/ccu-mcp",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.claymore666%2Fccu-mcp/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}