name

description

metadata

nest-devices

Control Nest smart home devices (thermostat, cameras, doorbell) via the Device Access API. Use when asked to check or adjust home temperature, view camera feeds, check who's at the door, monitor rooms, or set up temperature schedules.

clawdbot

emoji
🏠

Nest Device Access

Control Nest devices via Google's Smart Device Management API.

Setup

1. Google Cloud & Device Access

Create a Google Cloud project at console.cloud.google.com
Pay the $5 fee and create a Device Access project at console.nest.google.com/device-access
Create OAuth 2.0 credentials (Web application type)
Add https://www.google.com as an authorized redirect URI
Link your Nest account to the Device Access project

2. Get Refresh Token

Run the OAuth flow to get a refresh token:

# 1. Open this URL in browser (replace CLIENT_ID and PROJECT_ID):
https://nestservices.google.com/partnerconnections/PROJECT_ID/auth?redirect_uri=https://www.google.com&access_type=offline&prompt=consent&client_id=CLIENT_ID&response_type=code&scope=https://www.googleapis.com/auth/sdm.service

# 2. Authorize and copy the 'code' parameter from the redirect URL

# 3. Exchange code for tokens:
curl -X POST https://oauth2.googleapis.com/token \
  -d "client_id=CLIENT_ID" \
  -d "client_secret=CLIENT_SECRET" \
  -d "code=AUTH_CODE" \
  -d "grant_type=authorization_code" \
  -d "redirect_uri=https://www.google.com"

3. Store Credentials

Store in 1Password or environment variables:

1Password (recommended): Create an item with fields: project_id, client_id, client_secret, refresh_token

Environment variables:

export NEST_PROJECT_ID="your-project-id"
export NEST_CLIENT_ID="your-client-id"
export NEST_CLIENT_SECRET="your-client-secret"
export NEST_REFRESH_TOKEN="your-refresh-token"

Usage

List devices

python3 scripts/nest.py list

Thermostat

# Get status
python3 scripts/nest.py get <device_id>

# Set temperature (Celsius)
python3 scripts/nest.py set-temp <device_id> 21 --unit c --type heat

# Set temperature (Fahrenheit)
python3 scripts/nest.py set-temp <device_id> 70 --unit f --type heat

# Change mode (HEAT, COOL, HEATCOOL, OFF)
python3 scripts/nest.py set-mode <device_id> HEAT

# Eco mode
python3 scripts/nest.py set-eco <device_id> MANUAL_ECO

Cameras

# Generate live stream URL (RTSP, valid ~5 min)
python3 scripts/nest.py stream <device_id>

Python API

from nest import NestClient

client = NestClient()

# List devices
devices = client.list_devices()

# Thermostat control
client.set_heat_temperature(device_id, 21.0)  # Celsius
client.set_thermostat_mode(device_id, 'HEAT')
client.set_eco_mode(device_id, 'MANUAL_ECO')

# Camera stream
result = client.generate_stream(device_id)
rtsp_url = result['results']['streamUrls']['rtspUrl']

Configuration

The script checks for credentials in this order:

1Password: Set NEST_OP_VAULT and NEST_OP_ITEM (or use defaults: vault "Alfred", item "Nest Device Access API")
Environment variables: NEST_PROJECT_ID, NEST_CLIENT_ID, NEST_CLIENT_SECRET, NEST_REFRESH_TOKEN

Temperature Reference

Setting	Celsius	Fahrenheit
Eco (away)	15-17°C	59-63°F
Comfortable	19-21°C	66-70°F
Warm	22-23°C	72-73°F
Night	17-18°C	63-65°F

Real-Time Events (Doorbell, Motion, etc.)

For instant alerts when someone rings the doorbell or motion is detected, you need to set up Google Cloud Pub/Sub with a webhook.

Prerequisites

Google Cloud CLI (gcloud) installed and authenticated
Cloudflare account (free tier works) for the tunnel
Clawdbot hooks enabled in config

1. Enable Clawdbot Hooks

Add to your clawdbot.json:

{
  "hooks": {
    "enabled": true,
    "token": "your-secret-token-here"
  }
}

Generate a token: openssl rand -hex 24

2. Create Pub/Sub Topic

gcloud config set project YOUR_GCP_PROJECT_ID

# Create topic
gcloud pubsub topics create nest-events

# Grant SDM permission to publish (both the service account and publisher group)
gcloud pubsub topics add-iam-policy-binding nest-events \
  --member="serviceAccount:sdm-prod@sdm-prod.iam.gserviceaccount.com" \
  --role="roles/pubsub.publisher"

gcloud pubsub topics add-iam-policy-binding nest-events \
  --member="group:sdm-publisher@googlegroups.com" \
  --role="roles/pubsub.publisher"

3. Link Topic to Device Access

Go to console.nest.google.com/device-access → Your Project → Edit → Set Pub/Sub topic to:

projects/YOUR_GCP_PROJECT_ID/topics/nest-events

4. Set Up Cloudflare Tunnel

# Install cloudflared
curl -L -o ~/.local/bin/cloudflared https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64
chmod +x ~/.local/bin/cloudflared

# Authenticate (opens browser)
~/.local/bin/cloudflared tunnel login

# Create named tunnel
~/.local/bin/cloudflared tunnel create nest-webhook

# Note the Tunnel ID (UUID) from output

Create ~/.cloudflared/config.yml:

tunnel: nest-webhook
credentials-file: /home/YOUR_USER/.cloudflared/TUNNEL_ID.json

ingress:
  - hostname: nest.yourdomain.com
    service: http://localhost:8420
  - service: http_status:404

Create DNS route:

~/.local/bin/cloudflared tunnel route dns nest-webhook nest.yourdomain.com

5. Create Systemd Services

Webhook server (/etc/systemd/system/nest-webhook.service):

[Unit]
Description=Nest Pub/Sub Webhook Server
After=network.target

[Service]
Type=simple
User=YOUR_USER
Environment=CLAWDBOT_GATEWAY_URL=http://localhost:18789
Environment=CLAWDBOT_HOOKS_TOKEN=your-hooks-token-here
ExecStart=/usr/bin/python3 /path/to/skills/nest-devices/scripts/nest-webhook.py
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

Cloudflare tunnel (/etc/systemd/system/cloudflared-nest.service):

[Unit]
Description=Cloudflare Tunnel for Nest Webhook
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=YOUR_USER
ExecStart=/home/YOUR_USER/.local/bin/cloudflared tunnel run nest-webhook
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

Enable and start:

sudo systemctl daemon-reload
sudo systemctl enable --now nest-webhook cloudflared-nest

6. Create Pub/Sub Push Subscription

gcloud pubsub subscriptions create nest-events-sub \
  --topic=nest-events \
  --push-endpoint="https://nest.yourdomain.com/nest/events" \
  --ack-deadline=30

7. Test

# Test webhook endpoint
curl https://nest.yourdomain.com/health

# Simulate doorbell event
curl -X POST http://localhost:8420/nest/events \
  -H "Content-Type: application/json" \
  -d '{"message":{"data":"eyJyZXNvdXJjZVVwZGF0ZSI6eyJuYW1lIjoiZW50ZXJwcmlzZXMvdGVzdC9kZXZpY2VzL0RPT1JCRUxMLTAxIiwiZXZlbnRzIjp7InNkbS5kZXZpY2VzLmV2ZW50cy5Eb29yYmVsbENoaW1lLkNoaW1lIjp7ImV2ZW50SWQiOiJ0ZXN0In19fX0="}}'

Supported Events

Event	Behaviour
`DoorbellChime.Chime`	🔔 Alerts — sends photo to Telegram
`CameraPerson.Person`	🚶 Alerts — sends photo to Telegram
`CameraMotion.Motion`	📹 Logged only (no alert)
`CameraSound.Sound`	🔊 Logged only (no alert)
`CameraClipPreview.ClipPreview`	🎬 Logged only (no alert)

Staleness filter: Events older than 5 minutes are logged but never alerted. This prevents notification floods if queued Pub/Sub messages are delivered late.

Image Capture

When a doorbell or person event triggers an alert:

Primary: SDM GenerateImage API — fast, event-specific snapshot
Fallback: RTSP live stream frame capture via ffmpeg (requires ffmpeg installed)

Environment Variables

Variable	Required	Description
`CLAWDBOT_GATEWAY_URL`	No	Gateway URL (default: `http://localhost:18789`)
`CLAWDBOT_HOOKS_TOKEN`	Yes	Gateway hooks token for awareness notifications
`OP_SVC_ACCT_TOKEN`	Yes	1Password service account token for Nest API credentials
`TELEGRAM_BOT_TOKEN`	Yes	Telegram bot token for sending alerts
`TELEGRAM_CHAT_ID`	Yes	Telegram chat ID to receive alerts
`PORT`	No	Webhook server port (default: `8420`)

Important Setup Notes

Verify the full Pub/Sub topic path in Device Access Console matches your GCP project exactly: projects/YOUR_GCP_PROJECT_ID/topics/nest-events
Use a push subscription, not pull — the webhook expects HTTP POST delivery
Test end-to-end after setup: ring the doorbell and confirm a photo arrives. Don't rely on simulated POST requests alone.

Limitations

Camera event images expire after ~5 minutes (RTSP fallback captures current frame instead)
Real-time events require Pub/Sub setup (see above)
Quick tunnels (without Cloudflare account) have no uptime guarantee
Some older Nest devices may not support all features
Motion and sound events are intentionally not alerted to avoid notification fatigue

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Nest Device Access

Setup

1. Google Cloud & Device Access

2. Get Refresh Token

3. Store Credentials

Usage

List devices

Thermostat

Cameras

Python API

Configuration

Temperature Reference

Real-Time Events (Doorbell, Motion, etc.)

Prerequisites

1. Enable Clawdbot Hooks

2. Create Pub/Sub Topic

3. Link Topic to Device Access

4. Set Up Cloudflare Tunnel

5. Create Systemd Services

6. Create Pub/Sub Push Subscription

7. Test

Supported Events

Image Capture

Environment Variables

Important Setup Notes

Limitations

FilesExpand file tree

SKILL.md

Latest commit

History

SKILL.md

File metadata and controls

Nest Device Access

Setup

1. Google Cloud & Device Access

2. Get Refresh Token

3. Store Credentials

Usage

List devices

Thermostat

Cameras

Python API

Configuration

Temperature Reference

Real-Time Events (Doorbell, Motion, etc.)

Prerequisites

1. Enable Clawdbot Hooks

2. Create Pub/Sub Topic

3. Link Topic to Device Access

4. Set Up Cloudflare Tunnel

5. Create Systemd Services

6. Create Pub/Sub Push Subscription

7. Test

Supported Events

Image Capture

Environment Variables

Important Setup Notes

Limitations