I have built an unofficial Home Assistant integration for the MrSteam iSteamX steam generator, since there is no official one. It gives you a switch (start/stop), a program selector, and status sensors.
Features
- Switch: start/stop steam
- Select: choose a program (default plus any you have created in the app)
- Sensors: remaining time, session length, steam-head and room temperature, aroma level
- Binary sensors: steaming (running), generator water
Install (custom repository for now; a HACS default listing is in review)
- HACS, then the menu, then Custom repositories. Add
https://github.com/pedantique/mrsteam-homeassistant, category Integration. - Install, restart Home Assistant.
- Settings, Devices & Services, Add Integration, MrSteam iSteamX.
- Sign in with your MrSteam app email and password. The model defaults to SU-70; pick your device if you have more than one.
Credentials: the integration signs in to MrSteam’s own cloud (AWS Cognito, the same login the app uses) and stores the token in your Home Assistant config entry. Your password goes only to MrSteam’s endpoint; the project has no server of its own. There is no local device API, so cloud sign-in is the only path.
How it came about: while I was working out how to connect my own steam shower, I found that MrSteam’s cloud did not keep customers apart. An authenticated app user could reach not only their own generator but connected units belonging to other customers, reading their device data and starting or stopping them. I never accessed anyone else’s device or data. I reported it to CISA through CERT/CC’s coordination process. MrSteam remediated the flaw by 18 September 2026, and I independently verified the fix against my own account. It is now published as CVE-2026-95699 (CISA advisory VA-26-267-01, CVSS 9.6). This integration is the harmless result: it only ever talks to your own device.
Built with AI assistance. Not affiliated with MrSteam. Tested only against my own unit, so expect rough edges; please open an issue if something misbehaves.
Safety: steam generators are powerful. Only automate activation when you are certain the room is unoccupied and the door is closed.