Home Assistant MQTT auto-discovery implementation requirements

[nicohirsch]

@mclei

It’s called “reducing vectors of attacks”.

@alexdelprete

Anyway, you can solve the problem at the MQTT broker level: configure ACLs on topics, and set HA’s mqtt user to readonly on the nuki device topics, so HA can’t write and it won’t trigger an action on the device. Mosquitto supports it, other brokers too.

That’s nice to have, but I still stand by my opinion that a safety-critical device must have such an option. After all, the cloud API can do that too.