ESPHome gives Sendspin speakers control over which music servers may play through them. Device makers can offer a fixed pairing code confirmed by a button press, or display a one-time code, and can turn off access for servers that have not paired. Unpaired access remains on by default.
Kevin Ahrendt adds a switch that changes that permission without rebuilding firmware. Turning access off saves the setting immediately, so a power cut cannot undo it. Makers can also configure the switch to default to closed if its saved value is lost.
The encrypted connection requires Music Assistant 2.11.0b4 or newer and the ESP-IDF framework; older Sendspin protocol versions are incompatible. Separate firmware and Python-client support exposes a pairing token through the encrypted Home Assistant connection. That prepares a route for pairing without someone at the speaker, rather than supplying the complete Home Assistant workflow.