ccu-mcp
mcpkey · packageMCP server for controlling HomeMatic smart home devices via the CCU JSON-RPC API
run it
on your own machines, one way per deploy method#!/usr/bin/env bash # ccu (io.github.claymore666/ccu-mcp), recipe baremetal (generated). # Generated by Hub for toolset "my-agent"; started by mcp-my-agent-ccu.service. set -euo pipefail export HOST=127.0.0.1 PORT=8101 exec npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful --host 127.0.0.1 --port 8101 --streamableHttpPath /mcp --healthEndpoint /healthz [Unit] Description=MCP server ccu (toolset my-agent), generated by Hub After=network-online.target Wants=network-online.target [Service] Type=simple User=mcp Group=mcp EnvironmentFile=/etc/mcp/my-agent.env Environment=HOME=/var/lib/mcp/ccu WorkingDirectory=/var/lib/mcp/ccu ExecStart=/opt/mcp/my-agent/bin/ccu.sh Restart=on-failure RestartSec=5 NoNewPrivileges=true ProtectSystem=strict ProtectHome=true PrivateTmp=true ReadWritePaths=/var/lib/mcp/ccu [Install] WantedBy=multi-user.target
docker run --rm -p 127.0.0.1:8101:8000 -e CCU_HOST -e CCU_PASSWORD -e CCU_USER -e CCU_HTTPS -e CCU_PORT -e CACHE_DIR -e MCP_ALLOWED_ORIGINS -e MCP_ALLOWED_HOSTS -e CCU_PROFILES -e CCU_DEFAULT_PROFILE -e CCU_TLS_VERIFY -e CCU_TLS_FINGERPRINT -e CCU_CA_CERT -e CCU_TIMEOUT -e CCU_SCRIPT_TIMEOUT -e CACHE_TTL -e CCU_RATE_LIMIT_BURST -e CCU_RATE_LIMIT_RATE -e RESOURCE_POLL_INTERVAL -e LOG_LEVEL node:22-alpine sh -c 'npx -y supergateway@4 --stdio '"'"'npx -y [email protected]'"'"' --outputTransport streamableHttp --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz'
# Generated by Hub for toolset "my-agent" (2026-10-18T05:46:08+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
# cp .env.example .env # fill the ${VAR}s
# docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
ccu:
image: node:22-alpine
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful
--host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
ports:
- 127.0.0.1:8101:8000
volumes:
- npm-cache:/root/.npm
healthcheck:
test:
- CMD-SHELL
- wget -qO- http://127.0.0.1:8000/healthz || exit 1
interval: 30s
timeout: 5s
retries: 5
start_period: 2m
restart: unless-stopped
environment:
CCU_HOST: ${CCU_HOST}
CCU_PASSWORD: ${CCU_PASSWORD}
CCU_USER: ${CCU_USER}
CCU_HTTPS: ${CCU_HTTPS}
CCU_PORT: ${CCU_PORT}
CACHE_DIR: ${CACHE_DIR}
MCP_ALLOWED_ORIGINS: ${MCP_ALLOWED_ORIGINS}
MCP_ALLOWED_HOSTS: ${MCP_ALLOWED_HOSTS}
CCU_PROFILES: ${CCU_PROFILES}
CCU_DEFAULT_PROFILE: ${CCU_DEFAULT_PROFILE}
CCU_TLS_VERIFY: ${CCU_TLS_VERIFY}
CCU_TLS_FINGERPRINT: ${CCU_TLS_FINGERPRINT}
CCU_CA_CERT: ${CCU_CA_CERT}
CCU_TIMEOUT: ${CCU_TIMEOUT}
CCU_SCRIPT_TIMEOUT: ${CCU_SCRIPT_TIMEOUT}
CACHE_TTL: ${CACHE_TTL}
CCU_RATE_LIMIT_BURST: ${CCU_RATE_LIMIT_BURST}
CCU_RATE_LIMIT_RATE: ${CCU_RATE_LIMIT_RATE}
RESOURCE_POLL_INTERVAL: ${RESOURCE_POLL_INTERVAL}
LOG_LEVEL: ${LOG_LEVEL}
volumes:
npm-cache: {}
uv-cache: {}
# Generated by Hub for toolset "my-agent" (2026-10-18T05:46:08+00:00).
# kubectl create namespace mcp
# kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
# kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: ccu
namespace: mcp
labels: &id001
app: ccu
spec:
replicas: 1
selector:
matchLabels: *id001
template:
metadata:
labels: *id001
spec:
containers:
- name: ccu
image: node:22-alpine
ports:
- containerPort: 8000
name: http
env:
- name: CCU_HOST
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_HOST
- name: CCU_PASSWORD
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PASSWORD
- name: CCU_USER
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_USER
- name: CCU_HTTPS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_HTTPS
- name: CCU_PORT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PORT
- name: CACHE_DIR
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CACHE_DIR
- name: MCP_ALLOWED_ORIGINS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: MCP_ALLOWED_ORIGINS
- name: MCP_ALLOWED_HOSTS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: MCP_ALLOWED_HOSTS
- name: CCU_PROFILES
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PROFILES
- name: CCU_DEFAULT_PROFILE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_DEFAULT_PROFILE
- name: CCU_TLS_VERIFY
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TLS_VERIFY
- name: CCU_TLS_FINGERPRINT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TLS_FINGERPRINT
- name: CCU_CA_CERT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_CA_CERT
- name: CCU_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TIMEOUT
- name: CCU_SCRIPT_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_SCRIPT_TIMEOUT
- name: CACHE_TTL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CACHE_TTL
- name: CCU_RATE_LIMIT_BURST
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_RATE_LIMIT_BURST
- name: CCU_RATE_LIMIT_RATE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_RATE_LIMIT_RATE
- name: RESOURCE_POLL_INTERVAL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: RESOURCE_POLL_INTERVAL
- name: LOG_LEVEL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: LOG_LEVEL
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful
--host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
readinessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 10
---
apiVersion: v1
kind: Service
metadata:
name: ccu
namespace: mcp
spec:
selector:
app: ccu
ports:
- port: 8000
targetPort: http
name: http
# Generated by Hub for toolset "my-agent" (2026-10-18T05:46:08+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
ccu:
enabled: true
replicas: 1
port: 8000
path: /mcp
container:
name: ccu
image: node:22-alpine
ports:
- containerPort: 8000
name: http
env:
- name: CCU_HOST
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_HOST
- name: CCU_PASSWORD
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PASSWORD
- name: CCU_USER
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_USER
- name: CCU_HTTPS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_HTTPS
- name: CCU_PORT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PORT
- name: CACHE_DIR
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CACHE_DIR
- name: MCP_ALLOWED_ORIGINS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: MCP_ALLOWED_ORIGINS
- name: MCP_ALLOWED_HOSTS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: MCP_ALLOWED_HOSTS
- name: CCU_PROFILES
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_PROFILES
- name: CCU_DEFAULT_PROFILE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_DEFAULT_PROFILE
- name: CCU_TLS_VERIFY
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TLS_VERIFY
- name: CCU_TLS_FINGERPRINT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TLS_FINGERPRINT
- name: CCU_CA_CERT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_CA_CERT
- name: CCU_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_TIMEOUT
- name: CCU_SCRIPT_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_SCRIPT_TIMEOUT
- name: CACHE_TTL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CACHE_TTL
- name: CCU_RATE_LIMIT_BURST
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_RATE_LIMIT_BURST
- name: CCU_RATE_LIMIT_RATE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: CCU_RATE_LIMIT_RATE
- name: RESOURCE_POLL_INTERVAL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: RESOURCE_POLL_INTERVAL
- name: LOG_LEVEL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: LOG_LEVEL
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful
--host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
readinessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 10
# helm install my-agent helm/my-agent -n mcp
in the cloud
one click: the provider's deploy form opens filled in, in your own account- koyeb
-
The form opens with CHANGE_ME for each value you supply: CCU_HOST, CCU_PASSWORD, CCU_USER, CCU_HTTPS, CCU_PORT, CACHE_DIR, MCP_ALLOWED_ORIGINS, MCP_ALLOWED_HOSTS, CCU_PROFILES, CCU_DEFAULT_PROFILE, CCU_TLS_VERIFY, CCU_TLS_FINGERPRINT, CCU_CA_CERT, CCU_TIMEOUT, CCU_SCRIPT_TIMEOUT, CACHE_TTL, CCU_RATE_LIMIT_BURST, CCU_RATE_LIMIT_RATE, RESOURCE_POLL_INTERVAL, LOG_LEVEL. Fill them in before you deploy.
Clients connect to the service's https://…koyeb.app address plus /mcp.
- azure
-
A Container Apps environment with one app per server, each with HTTPS ingress and one replica. The portal asks for each value you supply as a secure parameter; the deployment's outputs list the endpoints.
connect to it
copy what your client needsnpx -y [email protected] # env: CCU_HOST, CCU_PASSWORD, CCU_USER, CCU_HTTPS, CCU_PORT, CACHE_DIR, MCP_ALLOWED_ORIGINS, MCP_ALLOWED_HOSTS, CCU_PROFILES, CCU_DEFAULT_PROFILE, CCU_TLS_VERIFY, CCU_TLS_FINGERPRINT, CCU_CA_CERT, CCU_TIMEOUT, CCU_SCRIPT_TIMEOUT, CACHE_TTL, CCU_RATE_LIMIT_BURST, CCU_RATE_LIMIT_RATE, RESOURCE_POLL_INTERVAL, LOG_LEVEL
{
"mcpServers": {
"ccu": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CCU_HOST": "${CCU_HOST}",
"CCU_PASSWORD": "${CCU_PASSWORD}",
"CCU_USER": "${CCU_USER}",
"CCU_HTTPS": "${CCU_HTTPS}",
"CCU_PORT": "${CCU_PORT}",
"CACHE_DIR": "${CACHE_DIR}",
"MCP_ALLOWED_ORIGINS": "${MCP_ALLOWED_ORIGINS}",
"MCP_ALLOWED_HOSTS": "${MCP_ALLOWED_HOSTS}",
"CCU_PROFILES": "${CCU_PROFILES}",
"CCU_DEFAULT_PROFILE": "${CCU_DEFAULT_PROFILE}",
"CCU_TLS_VERIFY": "${CCU_TLS_VERIFY}",
"CCU_TLS_FINGERPRINT": "${CCU_TLS_FINGERPRINT}",
"CCU_CA_CERT": "${CCU_CA_CERT}",
"CCU_TIMEOUT": "${CCU_TIMEOUT}",
"CCU_SCRIPT_TIMEOUT": "${CCU_SCRIPT_TIMEOUT}",
"CACHE_TTL": "${CACHE_TTL}",
"CCU_RATE_LIMIT_BURST": "${CCU_RATE_LIMIT_BURST}",
"CCU_RATE_LIMIT_RATE": "${CCU_RATE_LIMIT_RATE}",
"RESOURCE_POLL_INTERVAL": "${RESOURCE_POLL_INTERVAL}",
"LOG_LEVEL": "${LOG_LEVEL}"
}
}
}
}
#!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add ccu -e "CCU_HOST=${CCU_HOST}" -e "CCU_PASSWORD=${CCU_PASSWORD}" -e "CCU_USER=${CCU_USER}" -e "CCU_HTTPS=${CCU_HTTPS}" -e "CCU_PORT=${CCU_PORT}" -e "CACHE_DIR=${CACHE_DIR}" -e "MCP_ALLOWED_ORIGINS=${MCP_ALLOWED_ORIGINS}" -e "MCP_ALLOWED_HOSTS=${MCP_ALLOWED_HOSTS}" -e "CCU_PROFILES=${CCU_PROFILES}" -e "CCU_DEFAULT_PROFILE=${CCU_DEFAULT_PROFILE}" -e "CCU_TLS_VERIFY=${CCU_TLS_VERIFY}" -e "CCU_TLS_FINGERPRINT=${CCU_TLS_FINGERPRINT}" -e "CCU_CA_CERT=${CCU_CA_CERT}" -e "CCU_TIMEOUT=${CCU_TIMEOUT}" -e "CCU_SCRIPT_TIMEOUT=${CCU_SCRIPT_TIMEOUT}" -e "CACHE_TTL=${CACHE_TTL}" -e "CCU_RATE_LIMIT_BURST=${CCU_RATE_LIMIT_BURST}" -e "CCU_RATE_LIMIT_RATE=${CCU_RATE_LIMIT_RATE}" -e "RESOURCE_POLL_INTERVAL=${RESOURCE_POLL_INTERVAL}" -e "LOG_LEVEL=${LOG_LEVEL}" -- npx -y [email protected]
{
"mcpServers": {
"ccu": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CCU_HOST": "${CCU_HOST}",
"CCU_PASSWORD": "${CCU_PASSWORD}",
"CCU_USER": "${CCU_USER}",
"CCU_HTTPS": "${CCU_HTTPS}",
"CCU_PORT": "${CCU_PORT}",
"CACHE_DIR": "${CACHE_DIR}",
"MCP_ALLOWED_ORIGINS": "${MCP_ALLOWED_ORIGINS}",
"MCP_ALLOWED_HOSTS": "${MCP_ALLOWED_HOSTS}",
"CCU_PROFILES": "${CCU_PROFILES}",
"CCU_DEFAULT_PROFILE": "${CCU_DEFAULT_PROFILE}",
"CCU_TLS_VERIFY": "${CCU_TLS_VERIFY}",
"CCU_TLS_FINGERPRINT": "${CCU_TLS_FINGERPRINT}",
"CCU_CA_CERT": "${CCU_CA_CERT}",
"CCU_TIMEOUT": "${CCU_TIMEOUT}",
"CCU_SCRIPT_TIMEOUT": "${CCU_SCRIPT_TIMEOUT}",
"CACHE_TTL": "${CACHE_TTL}",
"CCU_RATE_LIMIT_BURST": "${CCU_RATE_LIMIT_BURST}",
"CCU_RATE_LIMIT_RATE": "${CCU_RATE_LIMIT_RATE}",
"RESOURCE_POLL_INTERVAL": "${RESOURCE_POLL_INTERVAL}",
"LOG_LEVEL": "${LOG_LEVEL}"
}
}
}
}
{
"servers": {
"ccu": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CCU_HOST": "${CCU_HOST}",
"CCU_PASSWORD": "${CCU_PASSWORD}",
"CCU_USER": "${CCU_USER}",
"CCU_HTTPS": "${CCU_HTTPS}",
"CCU_PORT": "${CCU_PORT}",
"CACHE_DIR": "${CACHE_DIR}",
"MCP_ALLOWED_ORIGINS": "${MCP_ALLOWED_ORIGINS}",
"MCP_ALLOWED_HOSTS": "${MCP_ALLOWED_HOSTS}",
"CCU_PROFILES": "${CCU_PROFILES}",
"CCU_DEFAULT_PROFILE": "${CCU_DEFAULT_PROFILE}",
"CCU_TLS_VERIFY": "${CCU_TLS_VERIFY}",
"CCU_TLS_FINGERPRINT": "${CCU_TLS_FINGERPRINT}",
"CCU_CA_CERT": "${CCU_CA_CERT}",
"CCU_TIMEOUT": "${CCU_TIMEOUT}",
"CCU_SCRIPT_TIMEOUT": "${CCU_SCRIPT_TIMEOUT}",
"CACHE_TTL": "${CACHE_TTL}",
"CCU_RATE_LIMIT_BURST": "${CCU_RATE_LIMIT_BURST}",
"CCU_RATE_LIMIT_RATE": "${CCU_RATE_LIMIT_RATE}",
"RESOURCE_POLL_INTERVAL": "${RESOURCE_POLL_INTERVAL}",
"LOG_LEVEL": "${LOG_LEVEL}"
}
}
}
}
name: my-agent target: local servers: - hub: io.github.claymore666/ccu-mcp
- not probed yet: tools unpinned, ingest lists them