u/Orion111

Narwal Freo Z Ultra — anyone working on cloud API reverse engineering for HA integration?
▲ 6 r/homeassistant+2 crossposts

Narwal Freo Z Ultra — anyone working on cloud API reverse engineering for HA integration?

I have a Narwal Freo Z Ultra (CX7) and I've been trying to get it properly integrated into Home Assistant. Here's what I've found so far:

**What works:**

- Google Assistant SDK integration — send text commands like "start cleaning" / "stop cleaning" / "clean living room" through Google Home. It's one-way only (no status feedback, no map, no battery level), but the commands do work.

**What doesn't work:**

- The sjmotew/NarwalIntegration (https://github.com/sjmotew/NarwalIntegration) — amazing project for the Narwal Flow and Z10 Ultra, but the Freo Z Ultra (CX7) is explicitly listed as incompatible. Port 9002 is open but sends no local broadcasts. It's cloud-only.

- Valetudo — doesn't support Narwal at all.

- Tuya — Narwal uses their own proprietary cloud, not Tuya.

**What I'm planning to try next:**

- Running the Narwal Android app in an Android emulator with mitmproxy to intercept and reverse-engineer the cloud API endpoints. If the app uses SSL pinning, I'll try Frida/apk-mitm to bypass it.

**My questions:**

  1. Has anyone already intercepted the Narwal cloud API traffic? I don't want to duplicate work if someone is already on this.

  2. For those who've done similar work with other robot vacuums (Dreame, Ecovacs, etc.) — any tips on what to expect? Is the cloud API usually REST or WebSocket?

  3. Anyone know if the Freo Z Ultra's firmware could eventually support the local WebSocket protocol that the Flow uses? Or is it a hardware limitation?

Happy to share whatever I find. There seem to be a lot of people asking about Narwal + HA integration with no good answers yet.

u/Orion111 — 18 hours ago