Securing home automation integrations (Home Assistant and Homey)

Tokens between Leafy Energy and your smart home

Leafy Energy integrates in the demo with platforms like Home Assistant and Homey. This is powerful but requires careful token security.

Integration principle

• Create a dedicated API key or token for your automation platform.
• Limit scopes to reading prices and writing automation actions.

Security tips

• Use a separate key per home or installation.
• Restrict access to the configuration pages in Home Assistant and Homey.
• Rotate tokens when a device or person leaves the household.

In demo flows you can show how a “smart washing-machine flow” works without giving the automation platform more rights than necessary.