LIFX has a documented LAN-only protocol which doesn't require their cloud or any kind of authentication. Their own app and account system is only required upon first setup and I bet even that could be reverse-engineered.