simplisafe-mcp
This server provides comprehensive monitoring and control for SimpliSafe home security systems through Claude. It offers read-only status and state-changing operations that require explicit confirmation.
System monitoring: List all systems on the account with current alarm state, connectivity, and power; get detailed state for a specific system including base-station messages, health, and pending alerts.
Sensors and devices: List all sensors (entry, motion, glass break, smoke/CO, keypads, sirens) with battery, offline, and triggered status; filter by type or problems. View smart locks with locked/unlocked/jammed state and battery/connectivity.
Events and settings: Retrieve recent base-station events (arm/disarm, sensor opens, alarms, lock actions) with timestamps and filters. Read system settings like entry/exit delays, alarm volume, door chime, and base-station health (WiFi/cellular signal, power, battery, RF jamming).
PINs: Access alarm PINs (master, duress, user) in cleartext, but only with explicit confirmation.
Arm/Disarm: Change alarm state to off, home, or away; requires confirmation and provides a dry-run preview and post-action verification.
Lock/Unlock: Control smart locks by serial number; requires confirmation with dry-run preview and verification.
Health check: Verify authentication, API reachability, and active systems to diagnose connectivity.
All sensitive operations (PINs, arming/disarming, lock control) are confirm-gated to prevent accidental changes.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@simplisafe-mcpcheck if my alarm is armed"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
simplisafe-mcp
MCP server for SimpliSafe home security. Check whether the system is armed, review sensors and events, arm/disarm, and control smart locks — from Claude.
This server can disarm a home alarm and unlock doors. Every tool that changes physical state, plus the tool that reads alarm PINs, is gated behind an explicit
confirm: true. Without it, no request is sent at all and you get a dry-run preview of exactly what would happen. Install it only where you'd be comfortable with that capability.
Developed and maintained by AI (Claude Code).
What you get
Tool | |
| Systems on the account with current alarm state |
| One system's state, connectivity, base-station messages |
| Sensors with battery / offline / triggered status, filterable |
| Smart locks with locked / unlocked / jammed state |
| Recent base-station events (arm, disarm, opens, alarms) |
| Entry/exit delays, volumes, base-station health |
| Alarm PINs — cleartext, confirm-gated |
| Arm home / arm away / disarm — confirm-gated |
| Lock / unlock a door — confirm-gated |
| Auth + API reachability |
Supports SimpliSafe 3 systems. Legacy SS2 systems are rejected with an explanation rather than an opaque upstream 404.
Related MCP server: mcp-hs4
Install
npm install -g simplisafe-mcpOr add to .mcp.json:
{
"mcpServers": {
"simplisafe": {
"command": "npx",
"args": ["-y", "simplisafe-mcp"],
"env": { "SIMPLISAFE_REFRESH_TOKEN": "${SIMPLISAFE_REFRESH_TOKEN}" }
}
}
}Authentication — one browser login, once
SimpliSafe issues no API keys. The credential is an OAuth2 refresh token, minted by a browser login you perform one time:
git clone https://github.com/chrischall/simplisafe-mcp && cd simplisafe-mcp
node scripts/bootstrap-auth.mjs # prints an authorize URL
# sign in (MFA included), then copy the com.simplisafe.mobile:// URL
node scripts/bootstrap-auth.mjs "<that URL>"The token is written to .env (mode 0600) after being verified against the live
API. SimpliSafe does not rotate refresh tokens, so it stays valid until you
sign out of all devices in the SimpliSafe app — which is how you revoke it.
Capturing the code: open DevTools → Network and tick Preserve log before
signing in; afterwards the browser fails to open a com.simplisafe.mobile://…
link, and that failed entry's link address is what you paste. The code is
single-use and expires in about two minutes.
Treat the resulting token like a house key: it grants full control of the alarm.
Writes are gated, and verified
Calling a write tool without confirm: true sends nothing and returns a
preview, including a plain statement of the physical consequence:
{
"dryRun": true,
"action": "set alarm state to away",
"method": "POST",
"path": "/ss3/subscriptions/7858153/state/away",
"currentState": "OFF",
"warning": "Arms ALL sensors including interior motion. Starts an exit delay; anyone still moving inside when it expires can trigger the siren and a monitoring-center dispatch.",
"note": "Nothing was sent. Re-run with confirm: true to execute."
}With confirm: true, the tool executes and then re-reads the system to check
what actually happened, reporting confirmed, in_progress (the exit delay is
counting down), or unconfirmed. A 2xx is never treated as proof.
Shell access without the server
For quick one-off queries there's a curl-based skill in
skills/simplisafe-api/ — same API, no MCP
process, sharing the same refresh token.
Development
npm install
npm run build
npm testVerified endpoint shapes live in docs/SIMPLISAFE-API.md, including several things that are easy to get backwards:
lock state is encoded 1 = locked, 2 = unlocked;
system version for routing is at
location.system.version, not the top-levelsystemVersion;events and doorlock control are not under the
ss3/prefix;numEventshas an undocumented hard ceiling of 50;settings.pinsreturns alarm codes in cleartext alongside harmless settings.
Disclaimer
Unofficial. Not affiliated with or endorsed by SimpliSafe. It uses the same private API the SimpliSafe mobile app uses, with your own account credentials. Use at your own discretion.
License
MIT
Available Tools
10 toolssimplisafe_get_eventsARead-only
Get recent events recorded by the base station — arm/disarm, sensor opens, lock and unlock, alarms, errors — newest first. Each event carries an ISO timestamp alongside the raw epoch seconds.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| event_type | No | Only return events with this eventType, e.g. "activity" or "alarm". | |
| num_events | No | How many events to return, 1-50 (SimpliSafe rejects more than 50). Defaults to 50. | |
| from_timestamp | No | Only events at or after this Unix timestamp (seconds). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=true, so the agent knows it's safe. The description adds behavioral details: returns newest first, includes ISO and epoch timestamps, and lists event types. This provides useful context beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose and key details, no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
All 4 parameters are documented, and the description covers timestamp output format and ordering. However, without an output schema, the full response structure is not described. Sibling tools provide context. Mostly complete but lacks explicit output fields.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with each parameter described. The tool description does not add extra parameter-level meaning; it only reinforces overall behavior. Baseline 3 is appropriate as schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves recent events from the base station, including types like arm/disarm and alarms, ordered newest first, with timestamp details. It distinguishes from sibling tools that handle systems, settings, pins, sensors, locks, and state changes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for retrieving event logs but does not explicitly state when to use this tool versus alternatives or provide exclusions. Among sibling tools, only this one gets events, so usage is clear but not elaborated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_get_pinsARead-only
Read the system's user PINs (master, duress and named users). CONFIRM-GATED: these are the live alarm codes and are returned in cleartext, so calling this puts them into the conversation. Without confirm: true it returns a warning and fetches nothing.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| confirm | No | Must be true to proceed. Without this, the tool returns a preview. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses that PINs are returned in cleartext and that the call puts them into the conversation. The 'readOnlyHint' annotation is consistent, and the description adds value by warning about sensitivity and the fallback behavior without confirmation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, each earning its place. First sentence states purpose and scope. Second sentence explains the confirm gating and sensitivity. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read tool with two parameters and no output schema, the description sufficiently covers return values (cleartext PINs), input behavior, and safety warning. No missing context needed for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds meaningful context: it explains the effect of 'confirm' (warning vs. actual retrieval) and the optionality of 'sid' based on number of systems. This goes slightly beyond the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads user PINs (master, duress, named users), which is a specific verb and resource. It distinguishes from sibling tools like 'simplisafe_get_settings' or 'simplisafe_list_sensors' by being the only PIN-reading tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly explains the confirm-gated nature: without 'confirm: true' it returns a warning and does nothing. Warns that PINs are live alarm codes in cleartext, advising caution. No alternative tool is named, but no sibling duplicates this function.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_get_settingsARead-only
Get base-station settings for a system: entry/exit delays, alarm volume and duration, door chime, voice prompts, plus base-station health (wifi/cellular signal, wall power, backup battery, RF jamming). Does not include PINs — use simplisafe_get_pins for those.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide readOnlyHint=true, and description adds detail on what data is returned (settings and health) and excludes (PINs). No contradictions. Adds value beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two focused sentences: first enumerates what the tool retrieves, second clarifies exclusions and points to an alternative. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one optional parameter, no output schema), the description covers purpose, included data, exclusions, and a sibling reference. Complete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description for the single parameter 'sid'. The tool description does not add extra semantic information beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Get' and the resource 'base-station settings', listing specific items (delays, volume, health metrics). It explicitly distinguishes from a sibling by stating what it does not include (PINs) and directs to simplisafe_get_pins.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear guidance on when not to use (for PINs) and an alternative (simplisafe_get_pins). However, it does not explicitly contrast with other siblings like simplisafe_get_system or simplisafe_list_systems.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_get_systemARead-only
Get the current state of one SimpliSafe system: alarm state, whether it is alarming, base-station connectivity, power/battery status and any pending base-station messages.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already signals safety, and the description adds value by detailing the returned state fields (alarm state, connectivity, power/battery). This goes beyond annotations to inform the agent of what to expect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that efficiently lists key state components. It is front-loaded and wastes no words, though a slightly more structured format could improve readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with one parameter and no output schema, the description adequately covers returned state. However, it lacks details on value formats or error cases, leaving some ambiguity for the agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a well-described optional 'sid' parameter. The description adds no extra meaning beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves the current state of one SimpliSafe system, listing specific aspects like alarm state, connectivity, and power status. It distinguishes from siblings like list_systems (lists systems) and get_settings (settings), making its purpose precise.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives is provided. While the purpose is clear, the description does not mention when not to use it or suggest sibling tools, leaving the agent to infer from context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_healthcheckARead-only
Check that the server can authenticate to SimpliSafe and reach the API. Reports whether the refresh token is configured and working, the resolved user id, and how many active systems the account has. Start here when other tools fail.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already indicates no side effects. The description adds value by detailing exactly what the tool checks (refresh token, user id, active systems), providing full behavioral context beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with no wasted words. The purpose is front-loaded, and the usage guidance is clear and direct.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters, no output schema, and a simple read-only health check, the description is complete. It covers what is checked and when to use it, meeting the needs of an AI agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are no parameters, so schema coverage is 100% by default. The description does not need to add parameter details. The baseline for 0 parameters is 4, which is appropriate as there is no missing information.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it checks server authentication to SimpliSafe and API reachability, reporting refresh token status, user id, and active systems. It distinguishes from sibling tools which focus on listing systems, settings, or modifying state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Start here when other tools fail,' providing clear guidance on when to use the tool as a diagnostic first step, implying it should be used before troubleshooting other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_list_locksARead-only
List the smart locks on a system with their current state (locked / unlocked / jammed), lock and keypad battery status, and keypad connectivity. Returns the serial that simplisafe_set_lock_state takes. Polls the base station fresh by default, because a stale answer to "is my door locked?" is worse than a slow one.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| force_update | No | Re-poll the base station before answering. Defaults to TRUE for locks — set false to accept a possibly-stale cached reading in exchange for speed. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true, and the description adds that it polls the base station fresh by default, with a justification. This provides valuable behavioral context beyond annotations, such as the trade-off and return of serial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the main purpose, and includes essential details without redundancy. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (2 parameters, no output schema), the description covers purpose, return values, parameter defaults, and behavioral nuance. It is sufficiently complete for an agent to use effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description adds context for force_update (defaults to TRUE, reason for default) and sid (optional vs required). This adds meaning beyond the schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifically states it lists smart locks with their state, battery status, and keypad connectivity, and mentions returning the serial used by simplisafe_set_lock_state. This clearly distinguishes it from sibling tools like simplisafe_list_sensors.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains the default polling behavior and the trade-off between freshness and speed via the force_update parameter, providing implicit guidance on when to use it. However, it does not explicitly state when not to use it or compare with alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_list_sensorsARead-only
List the sensors and devices paired to a system — entry sensors, motion, glass break, smoke/CO, keypads, sirens and locks — with battery, offline and triggered status. Filter by type with type_name (e.g. "entry", "motion_v2", "lock").
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| type_name | No | Only return devices of this type name, e.g. "entry", "lock", "smoke". | |
| force_update | No | Ask the base station to re-poll its devices first (slower). Defaults to false. | |
| problems_only | No | Only return devices that are offline, low battery, or triggered. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true, and the description adds that sensors have battery, offline, and triggered status. It also discloses the force_update parameter behavior (slower re-poll). No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, minimal waste. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers all 4 parameters' behavior and includes device categories. No output schema exists, so return format is not described, but the context is sufficient for an agent to use the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds value by explaining type_name with examples, force_update behavior, and problems_only purpose. It goes beyond the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List the sensors and devices paired to a system' with specific examples like entry sensors, motion, locks. It distinguishes from siblings such as simplisafe_list_systems and simplisafe_list_locks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use the optional type_name filter and notes the sid requirement for multi-system accounts. It implies alternatives but does not explicitly state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_list_systemsARead-only
List the SimpliSafe systems on this account with their current alarm state (off/home/away), alarming status, connectivity and power status. Start here to get the sid other tools take.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations set readOnlyHint=true, and the description adds specific behavioral details (what fields are returned, the tool as a starting point). No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences, front-loaded with purpose and additional usage guidance. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless list tool with no output schema, the description fully covers purpose, returned data, and usage context (getting 'sid'). Complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters and 100% schema coverage, baseline is 4. The description doesn't need to add parameter info; it's sufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'list', the resource 'SimpliSafe systems', and details the attributes returned (alarm state, alarming, connectivity, power). It also notes the tool's role in getting the 'sid' for other tools, distinguishing it from siblings like simplisafe_get_system.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Start here to get the `sid` other tools take,' indicating the primary use case. No explicit when-not or alternatives, but the context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_set_alarm_stateAIdempotent
Arm or disarm the alarm system: "off" (disarm), "home" (perimeter only) or "away" (all sensors). CONFIRM-GATED — without confirm: true nothing is sent and you get a dry-run preview. This physically changes a security system: disarming leaves the house unmonitored, and arming can trigger a siren and a monitoring-center dispatch. After executing, the new state is verified by re-reading the system.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| state | Yes | Target state: off (disarm), home, or away. | |
| confirm | No | Must be true to proceed. Without this, the tool returns a preview. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses the confirm gate, dry-run preview, physical consequences (siren, dispatch), and post-execution verification, going well beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single dense paragraph with key information front-loaded, no redundant sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose, states, confirm gate, consequences, and verification. Lacks explicit output format, but acceptable for a simple set tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already describes all parameters (100% coverage). Description adds no extra semantics for parameters beyond the tool's behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool arms or disarms the alarm system with specific states (off, home, away). Distinct from sibling tools that list or get system info, locks, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage for changing alarm state, but does not explicitly mention when not to use or compare to alternatives like simplisafe_set_lock_state.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simplisafe_set_lock_stateAIdempotent
Lock or unlock a SimpliSafe smart lock. CONFIRM-GATED — without confirm: true nothing is sent and you get a dry-run preview. Unlocking physically opens a door lock, so it is gated even though it is technically reversible. After executing, the result is verified by re-reading the lock state.
| Name | Required | Description | Default |
|---|---|---|---|
| sid | No | System id. Optional when the account has exactly one system; required when it has several. | |
| state | Yes | Target: lock or unlock. | |
| serial | Yes | Lock serial, from simplisafe_list_locks. | |
| confirm | No | Must be true to proceed. Without this, the tool returns a preview. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds significant behavioral context beyond annotations: confirm-gating, dry-run preview, physical unlocking safety, and verification by re-reading. Annotations already indicate non-readOnly, openWorld, idempotent; description enriches this with concrete safety and execution details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three well-structured sentences: purpose, confirm-gated mechanism, and additional safety/verification. No wasted words; every sentence adds essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose, confirm gating, physical safety, and verification. Lacks explicit mention of return values or error conditions, but given no output schema, the description is fairly complete for this mutation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaning for 'confirm' (must be true to proceed, else preview) and 'serial' (source from simplisafe_list_locks), which goes beyond the schema. For 'state' and 'sid', schema is sufficient; overall adds value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (lock/unlock) and resource (SimpliSafe smart lock), distinguishing it from sibling tools like simplisafe_set_alarm_state and simplisafe_list_locks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains the confirm-gated behavior and the dry-run preview, but does not explicitly guide when to use this tool vs alternatives. It implies usage for lock state changes but lacks when-not or explicit alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
10 tool updates
v0.1.1- First observed
simplisafe_get_events - First observed
simplisafe_get_pins - First observed
simplisafe_get_settings - First observed
simplisafe_get_system - First observed
simplisafe_healthcheck - First observed
simplisafe_list_locks - First observed
simplisafe_list_sensors - First observed
simplisafe_list_systems - First observed
simplisafe_set_alarm_state - First observed
simplisafe_set_lock_state
TDQS
Each tool targets a distinct aspect of the SimpliSafe system: listing systems, getting state, settings, pins, sensors, locks, events, and two setter actions. No two tools have overlapping purposes.
All tools use the 'simplisafe_' prefix followed by a clear verb_noun pattern (e.g., list_systems, get_pins, set_alarm_state). The single exception 'healthcheck' is still intuitive and consistent with the pattern.
10 tools is well-scoped for a home security system MCP server. It covers enumeration, state retrieval, and two essential state-changing operations without being excessive or sparse.
The tool surface covers the core workflow: view systems, devices, pins, events, arm/disarm, and lock/unlock. Missing are tools to update settings (e.g., entry delays) or manage users, but these are niche for the typical agent use case.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
MCP server wrapping the Tesla Fleet API and TeslaMate API
An MCP server that provides an API to LLMs to manage their JumpCloud resources.
The official Planning Center MCP server for interacting with your ministry's data.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceMCP server for controlling Nuki Smart Locks via Home Assistant, enabling lock/unlock, intercom buzzing, and battery checks.1MIT
- AlicenseBqualityCmaintenanceMCP server for controlling HomeSeer HS4 with safe, auditable, and guarded write operations.631MIT
- AlicenseAqualityBmaintenanceMCP server for the entire Shelly smart-home ecosystem, enabling local-first control, automation, and energy monitoring of Shelly devices with cloud fallback.47MIT
- FlicenseNot gradedqualityCmaintenanceMCP server for controlling Somfy TaHoma devices locally via the box's API, without cloud dependency.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/chrischall/simplisafe-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server