Back to Browse

Tapo MCP Server

Developer ToolsLow Risk8.4MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for discovering and controlling TP-Link Tapo smart home devices via AI Agents

About

MCP server for discovering and controlling TP-Link Tapo smart home devices via AI Agents

Security Report

8.4
Low Risk8.4Low Risk

The Tapo MCP server is a well-structured Rust implementation that controls TP-Link Tapo smart home devices, with credentials read from environment variables, redacted in Debug output, and an optional bearer-token API key that is enforced by refusing to start on non-loopback binds without one. Key items to be aware of are that the server runs unauthenticated when bound to loopback without an API key, and that snapshot links are reachable without auth, relying on a random path token as their only credential; the visible code otherwise shows no exfiltration, shell execution, or hardcoded secrets.

11 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

TP-Link Tapo account emailRequired

Environment variable: TAPO_MCP_USERNAME

TP-Link Tapo account passwordRequired

Environment variable: TAPO_MCP_PASSWORD

Optional camera account username; required for taking camera snapshotsRequired

Environment variable: TAPO_MCP_CAMERA_USERNAME

Optional camera account password; required for taking camera snapshotsRequired

Environment variable: TAPO_MCP_CAMERA_PASSWORD

Network target for device discovery (e.g. 192.168.1.255)Optional

Environment variable: TAPO_MCP_DISCOVERY_TARGET

Optional Bearer token for API authenticationRequired

Environment variable: TAPO_MCP_API_KEY

Optional comma-separated Host header allowlist; replaces the loopback-only defaultOptional

Environment variable: TAPO_MCP_ALLOWED_HOSTS

Optional base URL clients reach the server at; enables short-lived snapshot linksOptional

Environment variable: TAPO_MCP_PUBLIC_URL

Device discovery timeout in seconds; must be between 1 and 60Optional

Environment variable: TAPO_MCP_DISCOVERY_TIMEOUT

Seconds between background device discoveries that refresh the device list; must be at least TAPO_MCP_DISCOVERY_TIMEOUT and at most 86400 (one day); tool calls wait while a discovery runs, so a short interval delays them more oftenOptional

Environment variable: TAPO_MCP_DISCOVERY_INTERVAL

Optional OpenTelemetry collector endpoint for tracingOptional

Environment variable: OTEL_EXPORTER_OTLP_ENDPOINT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mihai-dinculescu-tapo-mcp": {
      "env": {
        "TAPO_MCP_API_KEY": "your-tapo-mcp-api-key-here",
        "TAPO_MCP_PASSWORD": "your-tapo-mcp-password-here",
        "TAPO_MCP_USERNAME": "your-tapo-mcp-username-here",
        "TAPO_MCP_PUBLIC_URL": "your-tapo-mcp-public-url-here",
        "TAPO_MCP_ALLOWED_HOSTS": "your-tapo-mcp-allowed-hosts-here",
        "TAPO_MCP_CAMERA_PASSWORD": "your-tapo-mcp-camera-password-here",
        "TAPO_MCP_CAMERA_USERNAME": "your-tapo-mcp-camera-username-here",
        "TAPO_MCP_DISCOVERY_TARGET": "your-tapo-mcp-discovery-target-here",
        "TAPO_MCP_DISCOVERY_TIMEOUT": "your-tapo-mcp-discovery-timeout-here",
        "OTEL_EXPORTER_OTLP_ENDPOINT": "your-otel-exporter-otlp-endpoint-here",
        "TAPO_MCP_DISCOVERY_INTERVAL": "your-tapo-mcp-discovery-interval-here"
      },
      "args": [
        "tapo"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Tapo

License Crates Documentation Crates.io PyPI Python PyPI
Unofficial Tapo API Client. Works with TP-Link Tapo smart devices. Tested with light bulbs (L430C, L430P, L510, L520, L530, L535, L610, L630), light strips (L900, L920, L930), plugs (P100, P105, P110, P110M, P115, P125, P125M, TP10), power strips (P300, P304M, P306, P316M), hubs (H100, H110, H200, H500), switches (S200B, S200D, S210), sensors (KE100, T100, T110, T300, T310, T315) and cameras (C120, C210, C220, C225, C325WB, C520WS, TC40, TC70).

Supported Devices

See /SUPPORTED_DEVICES.md for the supported devices and feature matrix.

Rust Library

Usage

Cargo.toml

[dependencies]
tapo = "0.11"

main.rs

let device = ApiClient::new("<tapo-username>", "tapo-password")
    .p110("<device ip address>")
    .await?;

device.on().await?;

Examples

export TAPO_USERNAME=
export TAPO_PASSWORD=
export IP_ADDRESS=

cargo run --example tapo_l530

See all examples in /tapo/examples.

Python Library

Usage

pip install tapo
client = ApiClient("<tapo-username>", "tapo-password")
device = await client.p110("<device ip address>")

await device.on()

Examples

cd tapo-py
uv venv # On the initial run only
uv sync --group dev --locked
uv run maturin develop # On the initial run and whenever the Rust code is modified

export TAPO_USERNAME=
export TAPO_PASSWORD=
export IP_ADDRESS=
uv run python examples/tapo_p110.py

See all examples in /tapo-py/examples.

MCP Server

An MCP server that exposes Tapo devices as AI-callable tools and resources via the Model Context Protocol. See /tapo-mcp/README.md for setup and usage.

Community Projects

  • tapo-rest — a REST wrapper of this library that can be deployed as a service or serve as an advanced example.
  • tapoviz — audio-reactive and screen-reactive lighting for L920/L930 LED strips, with a local web UI.

Troubleshooting

See /TROUBLESHOOTING.md for solutions to common issues.

Contributing

Contributions are welcome and encouraged! See /CONTRIBUTING.md.

Sponsors

A big thank you to the sponsors of this project!

Credits

Created and maintained by Mihai Dinculescu.

Inspired by petretiandrea/plugp100 and python-kasa/python-kasa.

Reviews

No reviews yet

Be the first to review this server!