
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@switchbot/openapi-cli
Advanced tools
SwitchBot smart home CLI β control devices, run scenes, stream real-time events, and integrate AI agents via MCP. Full API v1.1 coverage.
Command-line interface for the SwitchBot API v1.1. List devices, query live status, send control commands, run scenes, receive real-time events, and connect AI agents via the built-in MCP server β all from your terminal or shell scripts.
@switchbot/openapi-cliThree entry points, same binary β pick the one that matches how you use it:
| Audience | Where to start | What you get |
|---|---|---|
| Human | this README (Quick start) | Colored tables, helpful hints on errors, shell completion, switchbot doctor self-check. |
| Script | Output modes, Scripting examples | --json, --format=tsv/yaml/id, --fields, stable exit codes, history replay, audit log. |
| Agent | docs/agent-guide.md | switchbot mcp serve (stdio MCP server), schema export, plan run, destructive-command guard. |
Under the hood every surface shares the same catalog, cache, and HMAC client β switching between them costs nothing.
/v1.1 endpoint (devices, scenes, webhooks)--json passthrough for jq and scripting0600; env-var override for CInpm install -g @switchbot/openapi-cli
This adds the switchbot binary to your $PATH.
git clone https://github.com/OpenWonderLabs/switchbot-openapi-cli.git
cd switchbot-openapi-cli
npm install
npm run build
npm link # optional β expose `switchbot` globally
Verify:
switchbot --version
switchbot --help
# 1. Save your credentials (one-time)
switchbot config set-token <token> <secret>
# 2. List every device on your account
switchbot devices list
# 3. Control a device
switchbot devices command <deviceId> turnOn
The CLI reads credentials in this order (first match wins):
SWITCHBOT_TOKEN and SWITCHBOT_SECRET~/.switchbot/config.json (written by config set-token, mode 0600)Obtain the token and secret from the SwitchBot mobile app: Profile β Preferences β Developer Options β Get Token.
# One-time setup (writes ~/.switchbot/config.json)
switchbot config set-token <token> <secret>
# Or export environment variables (e.g. in CI)
export SWITCHBOT_TOKEN=...
export SWITCHBOT_SECRET=...
# Confirm which source is active and see the masked secret
switchbot config show
| Option | Description |
|---|---|
--json | Print the raw JSON response instead of a formatted table |
--format <fmt> | Output format: tsv, yaml, jsonl, json, id |
--fields <cols> | Comma-separated column names to include (e.g. deviceId,type) |
-v, --verbose | Log HTTP request/response details to stderr |
--dry-run | Print mutating requests (POST/PUT/DELETE) without sending them |
--timeout <ms> | HTTP request timeout in milliseconds (default: 30000) |
--config <path> | Override credential file location (default: ~/.switchbot/config.json) |
--profile <name> | Use a named credential profile (~/.switchbot/profiles/<name>.json) |
--cache <dur> | Set list and status cache TTL, e.g. 5m, 1h, off, auto (default) |
--cache-list <dur> | Set list-cache TTL independently (overrides --cache) |
--cache-status <dur> | Set status-cache TTL independently (default off; overrides --cache) |
--no-cache | Disable all cache reads for this invocation |
--retry-on-429 <n> | Max 429 retry attempts (default: 3) |
--no-retry | Disable automatic 429 retries |
--backoff <strategy> | Retry backoff: exponential (default) or linear |
--no-quota | Disable local request-quota tracking |
--audit-log | Append mutating commands to a JSONL audit log (default path: ~/.switchbot/audit.log) |
--audit-log-path <path> | Custom audit log path; use together with --audit-log |
-V, --version | Print the CLI version |
-h, --help | Show help for any command or subcommand |
Every subcommand supports --help, and most include a parameter-format reference and examples.
switchbot --help
switchbot devices command --help
Tip β required-value flags and subcommands. Flags like
--profile,--timeout,--max, and--intervaltake a value. If you omit it, Commander will happily consume the next token β including a subcommand name. Since v2.2.1 the CLI rejects that eagerly (exit 2 with a clear error), but if you ever hitunknown command 'list'after something likeswitchbot --profile list, use the--flag=valueform:switchbot --profile=home devices list.
--dry-runIntercepts every non-GET request: the CLI prints the URL/body it would have
sent, then exits 0 without contacting the API. GET requests (list, status,
query) are still executed so you can preview the state involved. Dry-run also
validates command names against the device catalog and rejects unknown commands
(exit 2) when the device type has a known catalog entry. Commands sent to
read-only sensors (e.g. Meter) are likewise rejected.
switchbot devices command ABC123 turnOn --dry-run
# [dry-run] Would POST https://api.switch-bot.com/v1.1/devices/ABC123/commands
# [dry-run] body: {"command":"turnOn","parameter":"default","commandType":"command"}
config β credential managementswitchbot config set-token <token> <secret> # Save to ~/.switchbot/config.json
switchbot config show # Print current source + masked secret
switchbot config list-profiles # List saved profiles
devices β list, status, control# List all physical devices and IR remote devices
# Default columns (4): deviceId, deviceName, type, category
# Pass --wide for the full 10-column operator view
switchbot devices list
switchbot devices ls # short alias for 'list'
switchbot devices list --wide
switchbot devices list --json | jq '.deviceList[].deviceId'
# IR remotes: type = remoteType (e.g. "TV"), category = "ir"
# Physical: category = "physical"
switchbot devices list --format=tsv --fields=deviceId,type,category
# Filter devices by type / name / category / room (server-side filter keys)
switchbot devices list --filter category=physical
switchbot devices list --filter type=Bot
switchbot devices list --filter name=living,category=physical
# Filter operators: = (substring; exact for `category`), ~ (substring),
# =/regex/ (case-insensitive regex). Clauses are AND-ed.
switchbot devices list --filter 'name~living'
switchbot devices list --filter 'type=/Hub.*/'
switchbot devices list --filter 'name~office,type=/Bulb|Strip/'
# Filter by family / room (family & room info requires the 'src: OpenClaw'
# header, which this CLI sends on every request)
switchbot devices list --json | jq '.deviceList[] | select(.familyName == "Home")'
switchbot devices list --json | jq '[.deviceList[], .infraredRemoteList[]] | group_by(.familyName)'
# Query real-time status of a physical device
switchbot devices status <deviceId>
switchbot devices status <deviceId> --json
# Resolve device by fuzzy name instead of ID (status, command, describe, expand, watch)
switchbot devices status --name "Living Room AC"
switchbot devices command --name "Office Light" turnOn
switchbot devices describe --name "Kitchen Bot"
# Batch status across multiple devices
switchbot devices status --ids ABC,DEF,GHI
switchbot devices status --ids ABC,DEF --fields power,battery # only show specific fields
switchbot devices status --ids ABC,DEF --format jsonl # one JSON line per device
# Send a control command
switchbot devices command <deviceId> <cmd> [parameter] [--type command|customize]
# Describe a specific device (1 API call): metadata + supported commands + status fields
switchbot devices describe <deviceId>
switchbot devices describe <deviceId> --json
# Discover what's supported (offline reference, no API call)
switchbot devices types # List all device types + IR remote types (incl. role column)
switchbot devices commands <type> # Show commands, parameter formats, and status fields
switchbot devices commands Bot
switchbot devices commands "Smart Lock"
switchbot devices commands curtain # Case-insensitive, substring match
Three commands accept --filter. They share one four-operator grammar,
but each exposes its own key set:
| Command | Operators | Supported keys |
|---|---|---|
devices list | = (substring; exact for category), != (negated), ~ (substring), =/regex/ (case-insensitive regex) | type, name, category, room |
devices batch | same | type, family, room, category |
events tail / events mqtt-tail | same (tail only; mqtt-tail uses --topic instead) | deviceId, type |
Clauses are comma-separated and AND-ed. No OR across clauses β use regex
alternation (=/A|B/) for that. category is the one key that stays exact
under = / != to preserve category=physical / category!=ir semantics.
A clause with an empty value (e.g. name~, type=) is rejected with exit 2 β
the parser refuses to guess whether an empty value means "no constraint" or
"match empty string". Drop the clause outright to remove the constraint.
parameter is optional β omit it for commands like turnOn/turnOff (auto-defaults to "default").
Numeric-only and JSON-object parameters are auto-parsed; strings with colons / commas / semicolons pass through as-is.
For the exact commands and parameter formats a specific device supports, query the built-in catalog:
switchbot devices commands <type> # e.g. Bot, Curtain, "Smart Lock", "Robot Vacuum Cleaner S10"
Generic parameter shapes (which one applies is decided by the device β see the catalog):
| Shape | Example |
|---|---|
| (none) | devices command <id> turnOn |
<integer> | devices command <id> setBrightness 75 |
<R:G:B> | devices command <id> setColor "255:0:0" |
<direction;angle> | devices command <id> setPosition "up;60" |
<a,b,c,β¦> | devices command <id> setAll "26,1,3,on" |
<json object> | '{"action":"sweep","param":{"fanLevel":2,"times":1}}' |
| Custom IR button | devices command <id> MyButton --type customize |
Parameters for setAll (Air Conditioner), setPosition (Curtain / Blind Tilt), setMode (Relay Switch), setBrightness (dimmable lights), and setColor (Color Bulb / Strip Light / Ceiling Light) are validated client-side before the request β malformed shapes, out-of-range values, and JSON for CSV fields all fail fast with exit 2. setColor accepts R:G:B, R,G,B, #RRGGBB, #RGB, and CSS named colors (red, blue, β¦); all normalize to R:G:B before hitting the API. Pass --skip-param-validation to bypass (escape hatch β prefer fixing the argument). Command names are also case-normalized against the catalog (e.g. turnon is auto-corrected to turnOn with a stderr warning); unknown names still exit 2 with the supported-commands list.
Unknown deviceIds (not in the local cache) exit 2 by default so --dry-run is a reliable pre-flight gate. Unknown command names and commands on read-only sensors are also rejected during dry-run when the device type has a catalog entry. Run switchbot devices list first, or pass --allow-unknown-device for scripted pass-through.
Negative numeric parameters (e.g. setBrightness -1 for a probe) are passed through to the command validator instead of being swallowed by the flag parser as an unknown option.
For the complete per-device command reference, see the SwitchBot API docs.
devices expand β named flags for packed parametersSome commands require a packed string like "26,2,2,on". devices expand builds it from readable flags:
# Air Conditioner β setAll
switchbot devices expand <acId> setAll --temp 26 --mode cool --fan low --power on
# Resolve by name
switchbot devices expand --name "Living Room AC" setAll --temp 26 --mode cool --fan low --power on
# Curtain / Roller Shade β setPosition
switchbot devices expand <curtainId> setPosition --position 50 --mode silent
# Blind Tilt β setPosition
switchbot devices expand <blindId> setPosition --direction up --angle 50
# Relay Switch β setMode
switchbot devices expand <relayId> setMode --channel 1 --mode edge
Run switchbot devices expand <id> <command> --help to see the available flags for any device command. expand is only meaningful for multi-parameter commands (the four above); single-parameter commands like setBrightness 50 or setColor "#FF0000" are already flag-free at the CLI level.
devices explain β one-shot device summary# Metadata + supported commands + live status in one call
switchbot devices explain <deviceId>
# Skip live status fetch (catalog-only output, no API call)
switchbot devices explain <deviceId> --no-live
Returns a combined view: static catalog info (commands, parameters, status fields) merged with the current live status. For Hub devices, also lists connected child devices. Prefer this over separate status + describe calls.
devices meta β local device metadataswitchbot devices meta set <deviceId> --alias "Office Light"
switchbot devices meta set <deviceId> --hide # hide from `devices list`
switchbot devices meta get <deviceId>
switchbot devices meta list # show all saved metadata
switchbot devices meta clear <deviceId>
Stores local annotations (alias, hidden flag, notes) in ~/.switchbot/device-meta.json. The alias is used as a display name; --show-hidden on devices list reveals hidden devices.
devices batch β bulk commands# Send the same command to every device matching a filter
switchbot devices batch turnOff --filter 'type=Bot'
switchbot devices batch setBrightness 50 --filter 'type~Light,family=Living'
# Explicit device IDs (comma-separated)
switchbot devices batch turnOn --ids ID1,ID2,ID3
# Pipe device IDs from `devices list`
switchbot devices list --format=id --filter 'type=Bot' | switchbot devices batch toggle -
# Destructive commands require --yes
switchbot devices batch unlock --filter 'type=Smart Lock' --yes
# Skip devices whose cached status is offline (default: off)
switchbot devices batch turnOn --ids ID1,ID2 --skip-offline
# --idempotency-key is an alias for --idempotency-key-prefix; both append -<deviceId>
switchbot devices batch turnOn --ids ID1,ID2 --idempotency-key morning-lights
Sends the same command to many devices in one run. Filter grammar matches devices list (= substring, ~ substring, =/regex/ regex β clauses AND-ed); supported keys here are type, family, room, category. Destructive commands (Smart Lock unlock, Garage Door Opener, etc.) require --yes to prevent accidents.
--skip-offline reads from the local status cache only (no new API calls);
skipped devices appear under summary.skipped with skippedReason:'offline'.
scenes β run manual scenesswitchbot scenes list # Columns: sceneId, sceneName
switchbot scenes execute <sceneId>
webhook β receive device events over HTTP# Register a receiver URL for events from ALL devices
switchbot webhook setup https://your.host/hook
# Query what is currently configured
switchbot webhook query
switchbot webhook query --details https://your.host/hook
# Enable / disable / re-submit the registered URL
switchbot webhook update https://your.host/hook --enable
switchbot webhook update https://your.host/hook --disable
# Remove the configuration
switchbot webhook delete https://your.host/hook
The CLI validates that <url> is an absolute http:// or https:// URL before calling the API. --enable and --disable are mutually exclusive.
events β receive device eventsTwo subcommands cover the two ways SwitchBot can push state changes to you.
events tail β local webhook receiver# Listen on port 3000 and print every incoming webhook POST
switchbot events tail
# Filter to one device
switchbot events tail --filter deviceId=ABC123
# Stop after 5 matching events
switchbot events tail --filter 'type=WoMeter' --max 5
# Stop after 10 minutes regardless of event count
switchbot events tail --for 10m
# Custom port / path
switchbot events tail --port 8080 --path /hook --json
Run switchbot webhook setup https://your.host/hook first to tell SwitchBot where to send events, then expose the local port via ngrok/cloudflared and point the webhook URL at it. events tail only runs the local receiver β tunnelling is up to you.
Output (one JSON line per matched event):
{ "t": "2024-01-01T12:00:00.000Z", "remote": "1.2.3.4:54321", "path": "/", "body": {...}, "matched": true }
Filter keys: deviceId, type. Operators: = (substring), ~ (substring), =/regex/ (case-insensitive regex). Clauses comma-separated and AND-ed.
events mqtt-tail β real-time MQTT stream# Stream all shadow-update events (runs in foreground until Ctrl-C)
switchbot events mqtt-tail
# Filter to a topic subtree
switchbot events mqtt-tail --topic 'switchbot/#'
# Stop after 10 events
switchbot events mqtt-tail --max 10 --json
# Stop after a fixed duration (emits __session_start under --json before connect)
switchbot events mqtt-tail --for 30s --json
Connects to the SwitchBot MQTT service automatically using the same credentials configured for the REST API (SWITCHBOT_TOKEN + SWITCHBOT_SECRET). No additional MQTT configuration is required β the client certificates are provisioned on first use.
Output (one JSON line per message):
{ "t": "2024-01-01T12:00:00.000Z", "topic": "switchbot/abc123/status", "payload": {...} }
This command runs in the foreground and streams events until you press Ctrl-C. To run it persistently in the background, use a process manager:
# pm2
pm2 start "switchbot events mqtt-tail --json" --name switchbot-events
# nohup
nohup switchbot events mqtt-tail --json >> ~/switchbot-events.log 2>&1 &
Run switchbot doctor to verify MQTT credentials are configured correctly before connecting.
mqtt-tail sinks β route events to external servicesBy default mqtt-tail prints JSONL to stdout. Use --sink (repeatable) to route events to one or more destinations instead:
| Sink | Required flags |
|---|---|
stdout | (default when no --sink given) |
file | --sink-file <path> β append JSONL |
webhook | --webhook-url <url> β HTTP POST each event |
openclaw | --openclaw-url, --openclaw-token (or $OPENCLAW_TOKEN), --openclaw-model |
telegram | --telegram-token (or $TELEGRAM_TOKEN), --telegram-chat <chatId> |
homeassistant | --ha-url <url> + --ha-webhook-id (no auth) or --ha-token (REST event API) |
# Push events to an OpenClaw agent (replaces the SwitchBot channel plugin)
switchbot events mqtt-tail \
--sink openclaw \
--openclaw-token <token> \
--openclaw-model my-home-agent
# Write to file + push to OpenClaw simultaneously
switchbot events mqtt-tail \
--sink file --sink-file ~/.switchbot/events.jsonl \
--sink openclaw --openclaw-token <token> --openclaw-model home
# Generic webhook (n8n, Make, etc.)
switchbot events mqtt-tail --sink webhook --webhook-url https://n8n.local/hook/abc
# Forward to Home Assistant via webhook trigger
switchbot events mqtt-tail --sink homeassistant --ha-url http://homeassistant.local:8123 --ha-webhook-id switchbot
Device state is also persisted to ~/.switchbot/device-history/<deviceId>.json (latest + 100-entry ring buffer) regardless of sink configuration. This enables the get_device_history MCP tool to answer state queries without an API call.
completion β shell tab-completion# Bash: load on every new shell
echo 'source <(switchbot completion bash)' >> ~/.bashrc
# Zsh
echo 'source <(switchbot completion zsh)' >> ~/.zshrc
# Fish
switchbot completion fish > ~/.config/fish/completions/switchbot.fish
# PowerShell (profile)
switchbot completion powershell >> $PROFILE
Supported shells: bash, zsh, fish, powershell (pwsh is accepted as an alias).
plan β declarative batch operations# Print the plan JSON Schema (give to your agent framework)
switchbot plan schema
# Validate a plan file without running it
switchbot plan validate plan.json
# Preview β mutations skipped, GETs still execute
switchbot --dry-run plan run plan.json
# Run β pass --yes to allow destructive steps
switchbot plan run plan.json --yes
switchbot plan run plan.json --continue-on-error
A plan file is a JSON document with version, description, and a steps array of command, scene, or wait steps. Steps execute sequentially; a failed step stops the run unless --continue-on-error is set. See docs/agent-guide.md for the full schema and agent integration patterns.
devices watch β poll status# Poll a device's status every 30 s until Ctrl-C
switchbot devices watch <deviceId>
# Custom interval; emit every tick even when nothing changed
switchbot devices watch <deviceId> --interval 10s --include-unchanged --json
# Time-bounded: stop after 5 minutes instead of a fixed tick count
switchbot devices watch <deviceId> --for 5m
Output is a JSONL stream of status-change events (with --json) or a refreshed table. Use --max <n> to stop after N ticks, or --for <duration> to stop after an elapsed wall-clock window (e.g. 30s, 1h, 2d). When both are set, whichever limit trips first wins.
mcp β Model Context Protocol server# Start the stdio MCP server (connect via Claude, Cursor, etc.)
switchbot mcp serve
Exposes 8 MCP tools (list_devices, describe_device, get_device_status, send_command, list_scenes, run_scene, search_catalog, account_overview) plus a switchbot://events resource for real-time shadow updates.
See docs/agent-guide.md for the full tool reference and safety rules (destructive-command guard).
doctor β self-checkswitchbot doctor
switchbot doctor --json
Runs 8 local checks (Node version, credentials, profiles, catalog, cache, quota file, clock, MQTT) and exits 1 if any check fails. warn results exit 0. The MQTT check reports ok when REST credentials are configured (auto-provisioned on first use). Use this to diagnose connectivity or config issues before running automation.
quota β API request counterswitchbot quota status # today's usage + last 7 days
switchbot quota reset # delete the counter file
Tracks daily API calls against the 10,000/day account limit. The counter is stored in ~/.switchbot/quota.json and incremented on every mutating request. Pass --no-quota to skip tracking for a single run.
history β audit logswitchbot history show # recent entries (newest first)
switchbot history show --limit 20 # last 20 entries
switchbot history replay 7 # re-run entry #7
switchbot --json history show --limit 50 | jq '.entries[] | select(.result=="error")'
Reads the JSONL audit log (~/.switchbot/audit.log by default; override with --audit-log --audit-log-path <path>). Each entry records the timestamp, command, device ID, result, and dry-run flag. replay re-runs the original command with the original arguments.
catalog β device type catalogswitchbot catalog show # all 42 built-in types
switchbot catalog list # alias for `show`
switchbot catalog show Bot # one type
switchbot catalog search Hub # fuzzy match across type / aliases / commands
switchbot catalog diff # what a local overlay changes vs built-in
switchbot catalog path # location of the local overlay file
switchbot catalog refresh # reload local overlay (clears in-process cache)
The built-in catalog ships with the package. Create ~/.switchbot/catalog-overlay.json to add, extend, or override type definitions without modifying the package.
schema β export catalog as JSONswitchbot schema export # all types as structured JSON
switchbot schema export --type 'Strip Light' # one type
switchbot schema export --role sensor # filter by role
Exports the effective catalog in a machine-readable format. Pipe the output into an agent's system prompt or tool schema to give it a complete picture of controllable devices.
capabilities β CLI manifestswitchbot capabilities --json
switchbot capabilities --used --json # only types seen in the local cache
Prints a versioned JSON manifest describing available surfaces (CLI, MCP, MQTT, plan runner), commands, and environment variables. Every subcommand leaf now carries a {mutating, consumesQuota, idempotencySupported, agentSafetyTier, verifiability, typicalLatencyMs} block, and the top-level payload publishes a flat commandMeta path-keyed lookup so agents don't have to walk the tree. --used filters the per-type summary to devices actually present in the local cache (same semantics as schema export --used).
cache β inspect and clear local cache# Show cache status (paths, age, entry counts)
switchbot cache show
# Clear everything
switchbot cache clear
# Clear only the device-list cache or only the status cache
switchbot cache clear --key list
switchbot cache clear --key status
list/status, key-value tables for details.--json β raw API payload passthrough. Output is the exact JSON the SwitchBot API returned, ideal for jq and scripting. Errors are also JSON on stderr: { "error": { "code", "kind", "message", "hint?" } }.--format=json β projected row view. Same JSON structure but built from the CLI's column model (--fields applies). Use this when you only want specific fields.--format=tsv|yaml|jsonl|id β tabular text formats; --fields filters columns.# Raw API payload (--json)
switchbot devices list --json | jq '.deviceList[] | {id: .deviceId, name: .deviceName}'
# Projected rows with field filter (--format)
switchbot devices list --format tsv --fields deviceId,deviceName,type,cloud
switchbot devices list --format id # one deviceId per line
switchbot devices status <id> --format yaml
The CLI maintains two local disk caches under ~/.switchbot/:
| File | Contents | Default TTL |
|---|---|---|
devices.json | Device metadata (id, name, type, category, hub, roomβ¦) | 1 hour |
status.json | Per-device status bodies | off (0) |
The device-list cache powers offline validation (command name checks, destructive-command guard) and the MCP server's send_command tool. It is refreshed automatically on every devices list call.
# Turn off all cache reads for one invocation
switchbot devices list --no-cache
# Set both list and status TTL to 5 minutes
switchbot devices status <id> --cache 5m
# Set TTLs independently
switchbot devices status <id> --cache-list 2h --cache-status 30s
# Disable only the list cache (keep status cache at its current TTL)
switchbot devices list --cache-list 0
# Show paths, age, and entry counts
switchbot cache show
# Clear all cached data
switchbot cache clear
# Scope the clear to one store
switchbot cache clear --key list
switchbot cache clear --key status
status.json entries are automatically evicted after 24 hours (or 10Γ the configured status TTL, whichever is longer), so the file cannot grow without bound even when the status cache is left enabled long-term.
| Code | Meaning |
|---|---|
0 | Success (including --dry-run intercept when validation passes) |
1 | Runtime error β API error, network failure, missing credentials |
2 | Usage error β bad flag, missing/invalid argument, unknown subcommand, unknown device type, invalid URL, conflicting flags |
Typical errors bubble up in the form Error: <message> on stderr. The SwitchBot-specific error codes that get mapped to readable English messages:
| Code | Meaning |
|---|---|
| 151 | Device type error |
| 152 | Device not found |
| 160 | Command not supported by this device |
| 161 | Device offline (BLE devices need a Hub) |
| 171 | Hub offline |
| 190 | Device internal error / server busy |
| 401 | Authentication failed (check token/secret) |
| 429 | Request rate too high (10,000 req/day cap) |
| Variable | Description |
|---|---|
SWITCHBOT_TOKEN | API token β takes priority over the config file |
SWITCHBOT_SECRET | API secret β takes priority over the config file |
NO_COLOR | Disable ANSI colors in all output (automatically respected) |
# Turn off every Bot device
switchbot devices list --json \
| jq -r '.deviceList[] | select(.deviceType == "Bot") | .deviceId' \
| while read id; do switchbot devices command "$id" turnOff; done
# Dump each scene as `<id> <name>`
switchbot scenes list --json | jq -r '.[] | "\(.sceneId) \(.sceneName)"'
git clone https://github.com/OpenWonderLabs/switchbot-openapi-cli.git
cd switchbot-openapi-cli
npm install
npm run dev -- <args> # Run from TypeScript sources via tsx
npm run build # Compile to dist/
npm test # Run the Vitest suite (692 tests)
npm run test:watch # Watch mode
npm run test:coverage # Coverage report (v8, HTML + text)
src/
βββ index.ts # Commander entry; mounts all subcommands; global flags
βββ auth.ts # HMAC-SHA256 signature (token + t + nonce β sign)
βββ config.ts # Credential load/save; env > file priority; --config override
βββ api/client.ts # axios instance + request/response interceptors;
β # --verbose / --dry-run / --timeout wiring
βββ devices/
β βββ catalog.ts # Static device catalog (commands, params, status fields)
β βββ cache.ts # Disk + in-memory cache for device list and status
βββ lib/
β βββ devices.ts # Shared logic: listDevices, describeDevice, isDestructiveCommand
βββ commands/
β βββ config.ts
β βββ devices.ts
β βββ expand.ts # `devices expand` β semantic flag builder
β βββ explain.ts # `devices explain` β one-shot device summary
β βββ device-meta.ts # `devices meta` β local aliases / hide flags
β βββ scenes.ts
β βββ webhook.ts
β βββ watch.ts # `devices watch <deviceId>`
β βββ events.ts # `events tail` / `events mqtt-tail`
β βββ mcp.ts # `mcp serve` (MCP stdio/HTTP server)
β βββ plan.ts # `plan run/validate`
β βββ cache.ts # `cache show/clear`
β βββ history.ts # `history show/replay`
β βββ quota.ts # `quota status/reset`
β βββ catalog.ts # `catalog show/diff/path`
β βββ schema.ts # `schema export`
β βββ doctor.ts # `doctor`
β βββ capabilities.ts # `capabilities`
β βββ completion.ts # `completion bash|zsh|fish|powershell`
βββ utils/
βββ flags.ts # Global flag readers (isVerbose / isDryRun / getCacheMode / β¦)
βββ output.ts # printTable / printKeyValue / printJson / handleError / buildErrorPayload
βββ format.ts # renderRows / filterFields / output-format dispatch
βββ audit.ts # JSONL audit log writer
βββ quota.ts # Local daily-quota counter
tests/ # Vitest suite (592 tests, mocked axios, no network)
Releases are cut on tag push and published to npm by GitHub Actions:
npm version patch # bump version + create git tag
git push --follow-tags
Then on GitHub β Releases β Draft a new release β select tag β Publish. The publish.yml workflow runs tests, verifies the tag matches package.json, and publishes @switchbot/openapi-cli to npm with provenance.
Bug reports, feature requests, and PRs are welcome.
npm test and npm run build locally β both must pass.main. CI runs on Node 18/20/22; all three must stay green.Tracked for a future v3.x line (OpenClaw B-17 / B-18 / B-19 / B-21) β each is a standalone track rather than a bug fix:
npx @switchbot/mcp-server β split the MCP server into its own tiny
published package so non-CLI users can npx it directly without installing
the full CLI.switchbot self-test β scripted end-to-end harness that checks a live
token + a representative device and prints a go/no-go report.MIT Β© chenliuyun
https://api.switch-bot.comFAQs
SwitchBot smart home CLI β control devices, run scenes, stream real-time events, and integrate AI agents via MCP. Full API v1.1 coverage.
The npm package @switchbot/openapi-cli receives a total of 851 weekly downloads. As such, @switchbot/openapi-cli popularity was classified as not popular.
We found that @switchbot/openapi-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.