Scrumdo MCP Server
scrumdo-mcp
PyPI
v0.7.0
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for ScrumDo boards — connect any AI tool directly to your board
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 8 = 92. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: get_agent_run → update_loop_state → create_webhook. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow get_agent_run → update_loop_state → create_webhook
Tools 152
Each tool and what it can reach — statically extracted from the published source.
create_webhooknetwork egressdelete_webhooknetwork egressget_agent_runingests untrusted inputget_boardingests untrusted inputget_loop_statusingests untrusted inputnotification_countsingests untrusted inputupdate_loop_statereads sensitive dataaccept_proofno sensitive capabilityaccept_spec_proposalno sensitive capabilityadd_attachmentno sensitive capability
Show 142 more tools ↓
add_card_labelno sensitive capabilityadd_card_memoryno sensitive capabilityadd_commentno sensitive capabilityadd_room_contextno sensitive capabilityapprove_agent_planno sensitive capabilityarchive_cardno sensitive capabilityassign_cardno sensitive capabilityattach_evidenceno sensitive capabilityattest_spec_understoodno sensitive capabilityblock_cardno sensitive capabilitycancel_agent_runno sensitive capabilitycancel_loopno sensitive capabilitycard_schemano sensitive capabilitycheck_spec_driftno sensitive capabilityclear_card_memoryno sensitive capabilitycockpit_helpno sensitive capabilitycollaboration.suggestions.feedbackno sensitive capabilitycollaboration.suggestions.getno sensitive capabilitycollaboration.suggestions.listno sensitive capabilitycomplete_taskno sensitive capabilitycreate_cardno sensitive capabilitycreate_taskno sensitive capabilitycurate_room_contextno sensitive capabilitydelete_commentno sensitive capabilitydelete_taskno sensitive capabilitydraft_spec_from_cardno sensitive capabilitydrop_blackboard_noteno sensitive capabilityevents.ackno sensitive capabilityevents.waitno sensitive capabilityexecute_taskno sensitive capabilityfind_cardno sensitive capabilityfind_memberno sensitive capabilitygenerate_spec_proposalno sensitive capabilityget_activity_logno sensitive capabilityget_agent_identityno sensitive capabilityget_all_card_fieldsno sensitive capabilityget_board_cellsno sensitive capabilityget_cardno sensitive capabilityget_card_cockpit_contextno sensitive capabilityget_card_fieldno sensitive capabilityget_card_memoryno sensitive capabilityget_card_specno sensitive capabilityget_decision_inboxno sensitive capabilityget_effective_governanceno sensitive capabilityget_github_reposno sensitive capabilityget_handoff_briefno sensitive capabilityget_loop_stateno sensitive capabilityget_mcp_capabilitiesno sensitive capabilityget_room_contextno sensitive capabilityget_spec_complexityno sensitive capabilityget_spec_historyno sensitive capabilityget_spec_networkno sensitive capabilityget_spec_parentno sensitive capabilityget_velocity_forecastno sensitive capabilityget_verification_statusno sensitive capabilityget_workspace_activityno sensitive capabilityinvoke_cockpit_commandno sensitive capabilitylink_github_commitno sensitive capabilitylink_github_issueno sensitive capabilitylink_github_prno sensitive capabilitylist_active_loopsno sensitive capabilitylist_agent_accountsno sensitive capabilitylist_agent_runsno sensitive capabilitylist_blockersno sensitive capabilitylist_board_specsno sensitive capabilitylist_boardsno sensitive capabilitylist_card_github_linksno sensitive capabilitylist_card_spec_documentsno sensitive capabilitylist_cardsno sensitive capabilitylist_commentsno sensitive capabilitylist_custom_fieldsno sensitive capabilitylist_epicsno sensitive capabilitylist_iterationsno sensitive capabilitylist_labelsno sensitive capabilitylist_membersno sensitive capabilitylist_memory_disputesno sensitive capabilitylist_milestonesno sensitive capabilitylist_notificationsno sensitive capabilitylist_okrsno sensitive capabilitylist_skillsno sensitive capabilitylist_spec_draftsno sensitive capabilitylist_spec_proposalsno sensitive capabilitylist_tasksno sensitive capabilitylist_time_entriesno sensitive capabilitylist_webhooksno sensitive capabilitylist_work_typesno sensitive capabilityload_skillno sensitive capabilitylog_activityno sensitive capabilitylog_loop_stepno sensitive capabilitylog_timeno sensitive capabilitymark_all_notifications_readno sensitive capabilitymark_notificationno sensitive capabilitymove_cardno sensitive capabilitymove_card_to_iterationno sensitive capabilitypatch_card_specno sensitive capabilitypause_loopno sensitive capabilitypost_blackboard_noteno sensitive capabilitypreview_spec_decisionno sensitive capabilitypreview_spec_decompositionno sensitive capabilitypromote_blackboard_noteno sensitive capabilitypublish_card_specno sensitive capabilityread_blackboardno sensitive capabilityread_spec_documentno sensitive capabilityread_spec_draftno sensitive capabilityread_spec_generationno sensitive capabilityread_spec_proposalno sensitive capabilityreject_spec_proposalno sensitive capabilityremove_card_labelno sensitive capabilityreopen_taskno sensitive capabilityreport_agent_progressno sensitive capabilityrequest_agent_replanno sensitive capabilityrequest_spec_proposal_changesno sensitive capabilityresearch_cardno sensitive capabilityresolve_memory_disputeno sensitive capabilityrestore_spec_versionno sensitive capabilityresume_loopno sensitive capabilityrevise_spec_draftno sensitive capabilityrevise_spec_proposalno sensitive capabilityroute_to_agentno sensitive capabilityrun_card_testsno sensitive capabilityrun_distillerno sensitive capabilityrun_verifierno sensitive capabilitysearch_by_field_valueno sensitive capabilitysearch_cardsno sensitive capabilitysend_cockpit_chatno sensitive capabilityset_card_fieldno sensitive capabilityset_card_fieldsno sensitive capabilityset_card_specno sensitive capabilityset_card_spec_documentno sensitive capabilityspec_generation_optionsno sensitive capabilitystart_agent_runno sensitive capabilitystart_loopno sensitive capabilitystart_spec_generationno sensitive capabilitystart_verification_loopno sensitive capabilitytasks_from_specno sensitive capabilityunblock_cardno sensitive capabilityupdate_cardno sensitive capabilityupdate_taskno sensitive capabilityverify_behavior_contractno sensitive capabilityverify_cardno sensitive capabilitywait_for_notificationsno sensitive capabilitywrite_spec_draftno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (152 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 6
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.7.0 latest |
A 92/100 | 1 | 1.13.0 | 2026-09-08 |
v0.6.4 |
A 92/100 | 1 | 1.13.0 | 2026-09-04 |
v0.6.1 |
A 92/100 | 1 | 1.13.0 | 2026-08-29 |
v0.6.0 |
A 92/100 | 1 | 1.13.0 | 2026-08-28 |
v0.4.7 |
A 93/100 | 1 | 1.13.0 | 2026-08-27 |
Show 1 more version ↓
v0.4.5 |
A 93/100 | 1 | 1.13.0 | 2026-08-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan scrumdo-mcp --online --registry pypiMore in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.