How to Get a Xiaomi Robot Vacuum Token: All Working Methods for 2026

The Xiaomi Robot Vacuum Token is a unique digital key that allows third-party applications (such as Home Assistant, ioBroker or Node-RED) to control the device via a device. API, Without this token, you won’t be able to integrate a vacuum cleaner into a smart ecosystem, automate scheduled cleaning, or use advanced features like zoning through Alice Yandex.

The problem is that Xiaomi doesn’t provide the token openly — it needs to be extracted independently. Since 2020, the company has tightened protections, and old methods (like receiving through mi.io without authorization) have stopped working. In this article, we will discuss 5 current ways to get a token for Mi Robot Vacuum, Dreame, Viomi and others, including bypassing new restrictions.

⚠️ Note: Removing the token may violate Xiaomi’s user agreement. Use it only for personal purposes. Do not distribute the tokens publicly, this will lead to the device being blocked.

1.What is a robot vacuum cleaner token and why is it needed

The token is a 64-digit hex key that identifies your device in the Xiaomi cloud.It is tied to a specific Mi Account account and vacuum cleaner model.Without the token, third-party systems will not be able to send commands through the Xiaomi cloud. API, Xiaomi server will reject the request as unauthorized.

The main scenarios where a token is required:

• 🏠 Integration with Home Assistant or ioBroker to control the vacuum cleaner through the dashboard.
• 🤖 Automating trigger cleaning (for example, starting after you leave home).
• 🗺️ Extended zoning (indication of exact coordinates of cleaning areas not available in the official annex).
• 📱 Control via voice assistants (Alice, Google Assistant) with custom commands.
• 🔧 Debugging and diagnostics of the device through API (check status, errors, charge level).

Without a token, you are limited to the functionality of the Mi Home app, where, for example, you can not clean a schedule in increments of less than an hour or tie a vacuum cleaner to geofences. D9) In Russia, there are no functions that can be unlocked through API.

⚠️ Warning: The token is valid until you log out of your Mi Account on the device or reset it to factory settings.

2. Method 1: Receiving a token through HTTP-Interception (Mi Home App)

This is the most reliable method for 2026, working for most models (Mi Robot Vacuum-Mop 2 Pro, Dreame). L10 Pro, Viomi V3 The idea is to intercept the network traffic of the Mi Home app at the time of device authorization.

You'll need:

• 📱 Android smartphone (on iOS traffic interception blocked).
• 🔌 Annex HTTP Toolkit or Packet Capture (for interception) HTTPS).
• 🔑 Mi Account Account with a tied vacuum cleaner.

Step-by-step:

1. Install. HTTP Toolkit on PC and connect your smartphone to the same network.
2. In Android settings, activate the developer mode (Settings) → The phone. → Build number - tap 7 times) and turn on Debugging by USB.
3. Launch it. HTTP Toolkit, select Intercept → Android and Follow the Instructions for Certificate Installation.
4. Open Mi Home, go to your vacuum cleaner page and update the data (pull the screen down).
5. V HTTP Toolkit search for a request to the domain api.io.mi.com with the path /app/genToken or /home/rpc/....
6. The server response will be the line "token": "your token here" - copy it.

Install HTTP Toolkit on PC

Enable debugging on USB Android

Connect your smartphone and PC to the same network

Installation of certificate HTTP Toolkit

Update data in Mi Home

Find a request to api.io.mi.com-->

🔹 Challenges and solutions:

• ❌ No requests visible: Check that Mi Home is disabled VPN and the intercept is on. HTTPS into HTTP Toolkit.
• ❌ Token not found: Try restarting the application or using another interceptor (e.g. Fiddler).
• ❌ Certificate Error: Remove Old Certificates in Settings → Security → Trusted credentials.

💡

If the token does not appear in the answer, try to start cleaning through the application – sometimes the key is transferred in the request. /home/rpc/MiRobotVacuum_....

3. Method 2: Use of the Miio-Cli utility (for experienced ones)

If the traffic interception didn’t work, you can extract the token using Xiaomi’s official miio-cli utility, which requires command line knowledge but produces 100% results for devices connected to the same account as the PC.

Requirements:

• 💻 Computer with Node.js (version 14)+).
• 🔑 Login and password from Mi Account.
• 📡 The vacuum cleaner and PC should be on the same network.

Instructions:

1. Install miio-cli via command: npm install -g miio-cli
2. Log in to Xiaomi: miio login your email@mail.ru Your password (if two-factor authentication is enabled, use the key) --password app-password).
3. Get a list of devices: miio devices Find your vacuum cleaner in the list - the Token column will have the desired key.

🔹 Advantages of the method:

• ✅ It works even if the traffic interception is blocked.
• ✅ Does not require manual analysis HTTP-request.
• ✅ You can get tokens for all Xiaomi devices in your account.

⚠️ Note: If you have an Invalid credentials error when logging in, check if your account is linked to the cn region (China). --country cn:

miio login your email@mail.ru your password --country cn

Interception. HTTP-traffic

Miio-cli utility

Third-party applications (Token Extractor)

Manual input via Mi Home API

Another way.-->

Method 3: Third-party applications (Token Extractor)

For users who don't want to deal with command line or traffic interception, there are specialized utilities.

• 📱 Mi Home Token Extractor (Android) – automatically extracts the token from the Mi Home cache.
• 🖥️ Xiaomi Cloud Tokens Extractor (Windows) – works through authorization emulation.
• 🌐 Online services (for example, yaho.smarthome.hu) – require login / password.

How to use Token Extractor on Android:

1. Download. APK-GitHub file (check repository reputation!).
2. Install the application by pre-allowing installation from unknown sources.
3. Sign in to Mi Home and start Token Extractor.
4. Click Get Token and the key will appear in the list of devices.

🔹 Risks of using third-party utilities:

• ⚠️ Phishing: Some "extractors" steal logins/passwords. download only from trusted sources (GitHub, 4PDA).
• ⚠️ Account lock: Xiaomi may regard automatic token extraction as hacking and temporarily block access.
• ⚠️ Outdated versions: Many utilities have not been updated since 2022 and do not work with new models of vacuum cleaners.

5. Method 4: Manual input via Mi Home API (developer)

This method is suitable for those who understand API And I'm willing to work with Postman or cURL. It allows you to get a token without third-party utilities, but it requires technical knowledge.

Algorithm of action:

1. Get your vacuum cleaner's deviceID (can be found in Mi Home) → Settings of the device → General information).
2. Generate nonce and signature for authorization (use Python script from this repository).
3. Send. POST-request https://account.xiaomi.com/pass/serviceLoginAuth2 with parameters: {"clientId": "your_client_id", "password": "your_encrypted_password", "serviceToken": "your_service_token", "nonce": "generated_nonce", "signature": "generated_signature" }
4. The answer will be miotSpec with a token.

🔹 Ready-made scripts for automation:

⚠️ Note: When you manually generate requests, it is easy to make a signature error, which will result in a 30-minute lock.

Method 5: Alternative methods (for Chinese firmware)

If your vacuum cleaner is bought in China or sewn into the cn region, standard methods may not work.

Method 1: Resetting to global firmware

• 🔧 Use the MiHome Hack utility to change the region of the device to ru or eu.
• 🔄 After resetting, the token can be obtained by any of the methods described above.

Method 2: Receiving a token through Mi Home (China)

1. Install the Chinese version of Mi Home (APK You can download it from APKPure).
2. Sign in with a Chinese phone number (required) SMS-confirmation).
3. Add a vacuum cleaner to the app and use it HTTP-interception).

Method 3: Appealing for Xiaomi

In rare cases, support can provide a token on request if you prove ownership of the device.

1. Write to the chat Mi Home (Feedback section).
2. Attach a photo of the box with the serial number and a purchase check.
3. Indicate the reason: “You need to integrate a vacuum cleaner into a smart home through API".

💡

For Chinese models (Mi Robot Vacuum-Mop 2 Lite C), the token can be obtained only after changing the region to a global one or through the Chinese version of Mi Home.

7 How to check the token for performance

Once you get a token, you have to check it to make sure it's correct.

Method 1: Through miio-cli

miio --debug call your deviceID info

If the token is correct, the team will return it. JSON with device data (model, charge, status).

Method 2: Through Python scripting

from miio import Vacuum


vacuum = Vacuum(ip="IP_ vacuum cleaner", token="your token"




print(vacuum.info())

Method 3: Through Postman

Send. GET-request:

http://IP_ vacuum cleaner/miIO/info

In the headings, indicate:

X-MIIO-TOKEN: Your Token

🔹 Frequent errors and their causes:

⚠️ Note: If the vacuum cleaner produces a Token expired error, it means that the key has been reset (for example, after updating the firmware), in which case you will have to receive the token again.

8. Frequent questions and problems