Scrumdo MCP Server
scrumdo-mcp
PyPI
v0.4.5
Published by scrumdollc — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: get_agent_run → update_loop_state → create_webhook. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow get_agent_run → update_loop_state → create_webhook
Tools 132
Each tool and what it can reach — statically extracted from the published source.
create_webhooknetwork egressdelete_webhooknetwork egressget_agent_runingests untrusted inputget_boardingests untrusted inputget_loop_statusingests untrusted inputnotification_countsingests untrusted inputupdate_loop_statereads sensitive dataaccept_proofno sensitive capabilityaccept_spec_proposalno sensitive capabilityadd_attachmentno sensitive capability
Show 122 more tools ↓
add_card_labelno sensitive capabilityadd_card_memoryno sensitive capabilityadd_commentno sensitive capabilityadd_room_contextno sensitive capabilityapprove_agent_planno sensitive capabilityarchive_cardno sensitive capabilityassign_cardno sensitive capabilityattach_evidenceno sensitive capabilityattest_spec_understoodno sensitive capabilityblock_cardno sensitive capabilitycancel_agent_runno sensitive capabilitycancel_loopno sensitive capabilitycard_schemano sensitive capabilitycheck_spec_driftno sensitive capabilityclear_card_memoryno sensitive capabilitycockpit_helpno sensitive capabilitycomplete_taskno sensitive capabilitycreate_cardno sensitive capabilitycreate_taskno sensitive capabilitycurate_room_contextno sensitive capabilitydelete_commentno sensitive capabilitydelete_taskno sensitive capabilitydraft_spec_from_cardno sensitive capabilitydrop_blackboard_noteno sensitive capabilityexecute_taskno sensitive capabilityfind_cardno sensitive capabilityfind_memberno sensitive capabilitygenerate_spec_proposalno sensitive capabilityget_activity_logno sensitive capabilityget_agent_identityno sensitive capabilityget_all_card_fieldsno sensitive capabilityget_board_cellsno sensitive capabilityget_cardno sensitive capabilityget_card_cockpit_contextno sensitive capabilityget_card_fieldno sensitive capabilityget_card_memoryno sensitive capabilityget_card_specno sensitive capabilityget_decision_inboxno sensitive capabilityget_effective_governanceno sensitive capabilityget_github_reposno sensitive capabilityget_handoff_briefno sensitive capabilityget_loop_stateno sensitive capabilityget_mcp_capabilitiesno sensitive capabilityget_room_contextno sensitive capabilityget_spec_complexityno sensitive capabilityget_spec_historyno sensitive capabilityget_velocity_forecastno sensitive capabilityget_verification_statusno sensitive capabilityget_workspace_activityno sensitive capabilityinvoke_cockpit_commandno sensitive capabilitylink_github_commitno sensitive capabilitylink_github_issueno sensitive capabilitylink_github_prno sensitive capabilitylist_active_loopsno sensitive capabilitylist_agent_accountsno sensitive capabilitylist_agent_runsno sensitive capabilitylist_blockersno sensitive capabilitylist_boardsno sensitive capabilitylist_card_github_linksno sensitive capabilitylist_card_spec_documentsno sensitive capabilitylist_cardsno sensitive capabilitylist_commentsno sensitive capabilitylist_custom_fieldsno sensitive capabilitylist_epicsno sensitive capabilitylist_iterationsno sensitive capabilitylist_labelsno sensitive capabilitylist_membersno sensitive capabilitylist_memory_disputesno sensitive capabilitylist_milestonesno sensitive capabilitylist_notificationsno sensitive capabilitylist_skillsno sensitive capabilitylist_spec_proposalsno sensitive capabilitylist_tasksno sensitive capabilitylist_time_entriesno sensitive capabilitylist_webhooksno sensitive capabilityload_skillno sensitive capabilitylog_activityno sensitive capabilitylog_loop_stepno sensitive capabilitylog_timeno sensitive capabilitymark_all_notifications_readno sensitive capabilitymark_notificationno sensitive capabilitymove_cardno sensitive capabilitymove_card_to_iterationno sensitive capabilitypatch_card_specno sensitive capabilitypause_loopno sensitive capabilitypost_blackboard_noteno sensitive capabilitypreview_spec_decisionno sensitive capabilitypromote_blackboard_noteno sensitive capabilityread_blackboardno sensitive capabilityread_spec_proposalno sensitive capabilityreject_spec_proposalno sensitive capabilityremove_card_labelno sensitive capabilityreopen_taskno sensitive capabilityreport_agent_progressno sensitive capabilityrequest_agent_replanno sensitive capabilityrequest_spec_proposal_changesno sensitive capabilityresearch_cardno sensitive capabilityresolve_memory_disputeno sensitive capabilityrestore_spec_versionno sensitive capabilityresume_loopno sensitive capabilityrevise_spec_proposalno sensitive capabilityroute_to_agentno sensitive capabilityrun_card_testsno sensitive capabilityrun_distillerno sensitive capabilityrun_verifierno sensitive capabilitysearch_by_field_valueno sensitive capabilitysearch_cardsno sensitive capabilitysend_cockpit_chatno sensitive capabilityset_card_fieldno sensitive capabilityset_card_fieldsno sensitive capabilityset_card_specno sensitive capabilityset_card_spec_documentno sensitive capabilitystart_agent_runno sensitive capabilitystart_loopno sensitive capabilitystart_verification_loopno sensitive capabilitytasks_from_specno sensitive capabilityunblock_cardno sensitive capabilityupdate_cardno sensitive capabilityupdate_taskno sensitive capabilityverify_behavior_contractno sensitive capabilityverify_cardno sensitive capabilitywait_for_notificationsno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (132 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.4.5 latest |
A 93/100 | 1 | 1.9.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan scrumdo-mcp --online --registry pypiMore in Productivity & Workflow
Security scan results for the Agentchat MCP server.
Security scan results for the Airthings Consumer MCP server.
Security scan results for the Anki MCP server.
Security scan results for the Apple Notes Ts MCP server.
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.