Lifeos MCP Server
@starascendin/lifeos-mcp
npm
v0.7.75
Published by @starascendin — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for LifeOS Project Management - manage projects, tasks, notes, and contacts via AI assistants
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 3
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([get_beeper_thread_messages]) co-exist with external-action tools ([create_issue]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [get_beeper_thread_messages] → sinks [create_issue]
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow get_beeper_thread_messages → create_issue
medium Tool "unlink_meeting_from_business_contact" can modify the filesystemMTC-CAP-002
Tool "unlink_meeting_from_business_contact" can write, overwrite or delete files (keyword "unlink" in tool name). Verify it is scoped to a safe directory.
Fix: Constrain file operations to an explicit, non-sensitive root; reject path traversal.
Location: tool unlink_meeting_from_business_contact
low Mutating tool "unlink_meeting_from_business_contact" declares no destructiveHintMTC-CAP-005
Tool "unlink_meeting_from_business_contact" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool unlink_meeting_from_business_contact
Tools 200
Each tool and what it can reach — statically extracted from the published source.
create_issuenetwork egressget_beeper_thread_messagesingests untrusted inputunlink_meeting_from_business_contactwrites filesaccept_merge_suggestionno sensitive capabilityadd_daily_ai_commentno sensitive capabilityadd_monthly_ai_commentno sensitive capabilityadd_tags_to_noteno sensitive capabilityadd_weekly_ai_commentno sensitive capabilityapply_planning_patchno sensitive capabilityarchive_habitno sensitive capability
Show 190 more tools ↓
archive_initiativeno sensitive capabilityassign_issue_to_cycleno sensitive capabilityassign_issue_to_phaseno sensitive capabilitycheck_in_habitno sensitive capabilityclose_cycleno sensitive capabilitycreate_ai_convo_summaryno sensitive capabilitycreate_belief_reframeno sensitive capabilitycreate_calendar_blockno sensitive capabilitycreate_clientno sensitive capabilitycreate_client_noteno sensitive capabilitycreate_coach_insightno sensitive capabilitycreate_coaching_action_itemno sensitive capabilitycreate_coaching_sessionno sensitive capabilitycreate_cycleno sensitive capabilitycreate_design_interviewno sensitive capabilitycreate_failure_reframeno sensitive capabilitycreate_habitno sensitive capabilitycreate_habit_categoryno sensitive capabilitycreate_initiativeno sensitive capabilitycreate_journal_entryno sensitive capabilitycreate_labelno sensitive capabilitycreate_personno sensitive capabilitycreate_phaseno sensitive capabilitycreate_projectno sensitive capabilitycreate_prototypeno sensitive capabilitycreate_quick_noteno sensitive capabilitycreate_wayfinding_entryno sensitive capabilitydelete_ai_convo_summaryno sensitive capabilitydelete_clientno sensitive capabilitydelete_client_noteno sensitive capabilitydelete_coaching_action_itemno sensitive capabilitydelete_cycleno sensitive capabilitydelete_design_interviewno sensitive capabilitydelete_initiativeno sensitive capabilitydelete_issueno sensitive capabilitydelete_journal_entryno sensitive capabilitydelete_labelno sensitive capabilitydelete_odyssey_planno sensitive capabilitydelete_phaseno sensitive capabilitydelete_projectno sensitive capabilitydelete_prototypeno sensitive capabilitydelete_unified_graph_linkno sensitive capabilitydismiss_all_merge_suggestionsno sensitive capabilityfalkor_graph_linkno sensitive capabilityfalkor_graph_queryno sensitive capabilityfalkor_graph_schemano sensitive capabilitygenerate_cyclesno sensitive capabilityget_active_vision_graphno sensitive capabilityget_ai_convo_summariesno sensitive capabilityget_ai_convo_summaryno sensitive capabilityget_beeper_threadno sensitive capabilityget_beeper_threadsno sensitive capabilityget_beeper_threads_for_clientno sensitive capabilityget_beeper_threads_for_personno sensitive capabilityget_belief_reframesno sensitive capabilityget_business_contactsno sensitive capabilityget_cached_unified_graphno sensitive capabilityget_clientno sensitive capabilityget_client_noteno sensitive capabilityget_client_notesno sensitive capabilityget_client_success_workspaceno sensitive capabilityget_clientsno sensitive capabilityget_coach_insightsno sensitive capabilityget_coach_profileno sensitive capabilityget_coaching_action_itemsno sensitive capabilityget_coaching_sessionno sensitive capabilityget_coaching_sessionsno sensitive capabilityget_contact_dossierno sensitive capabilityget_current_cycleno sensitive capabilityget_cyclesno sensitive capabilityget_daily_agendano sensitive capabilityget_daily_ai_commentsno sensitive capabilityget_design_interviewsno sensitive capabilityget_failure_reframesno sensitive capabilityget_fathom_meetingno sensitive capabilityget_fathom_meetingsno sensitive capabilityget_fathom_transcriptno sensitive capabilityget_finance_accountsno sensitive capabilityget_finance_daily_spendingno sensitive capabilityget_finance_net_worthno sensitive capabilityget_finance_snapshotsno sensitive capabilityget_finance_transactionsno sensitive capabilityget_granola_meetingno sensitive capabilityget_granola_meetingsno sensitive capabilityget_granola_meetings_for_personno sensitive capabilityget_granola_meetings_for_threadno sensitive capabilityget_granola_transcriptno sensitive capabilityget_habitno sensitive capabilityget_habit_categoriesno sensitive capabilityget_habit_check_insno sensitive capabilityget_habitsno sensitive capabilityget_habits_for_dateno sensitive capabilityget_health_activityno sensitive capabilityget_health_cardio_ageno sensitive capabilityget_health_heart_rateno sensitive capabilityget_health_readinessno sensitive capabilityget_health_resilienceno sensitive capabilityget_health_sleepno sensitive capabilityget_health_spo2no sensitive capabilityget_health_stressno sensitive capabilityget_health_vo2_maxno sensitive capabilityget_health_workoutsno sensitive capabilityget_initiativeno sensitive capabilityget_initiative_graphno sensitive capabilityget_initiative_with_statsno sensitive capabilityget_initiative_yearly_rollupno sensitive capabilityget_initiativesno sensitive capabilityget_issueno sensitive capabilityget_journal_entriesno sensitive capabilityget_labelsno sensitive capabilityget_meeting_calendar_linksno sensitive capabilityget_memos_for_personno sensitive capabilityget_merge_suggestionsno sensitive capabilityget_monthly_agendano sensitive capabilityget_monthly_ai_commentsno sensitive capabilityget_odyssey_plansno sensitive capabilityget_overdue_tasksno sensitive capabilityget_peopleno sensitive capabilityget_personno sensitive capabilityget_person_graphno sensitive capabilityget_person_timelineno sensitive capabilityget_phaseno sensitive capabilityget_phasesno sensitive capabilityget_planning_contextno sensitive capabilityget_ppv_workspaceno sensitive capabilityget_projectno sensitive capabilityget_project_graphno sensitive capabilityget_projectsno sensitive capabilityget_projects_for_clientno sensitive capabilityget_prototypesno sensitive capabilityget_recent_notesno sensitive capabilityget_reflectionsno sensitive capabilityget_screentime_categoriesno sensitive capabilityget_screentime_sessionsno sensitive capabilityget_screentime_summaryno sensitive capabilityget_screentime_top_appsno sensitive capabilityget_tasksno sensitive capabilityget_todays_tasksno sensitive capabilityget_unified_life_graphno sensitive capabilityget_voice_memono sensitive capabilityget_voice_memo_graphno sensitive capabilityget_voice_memo_labelsno sensitive capabilityget_voice_memos_by_dateno sensitive capabilityget_voice_memos_by_labelsno sensitive capabilityget_wayfinding_entriesno sensitive capabilityget_weekly_agendano sensitive capabilityget_weekly_ai_commentsno sensitive capabilitylink_beeper_thread_to_personno sensitive capabilitylink_issue_to_initiativeno sensitive capabilitylink_memo_to_personno sensitive capabilitylink_project_to_initiativeno sensitive capabilitymark_issue_completeno sensitive capabilityrefresh_unified_graph_cacheno sensitive capabilityregenerate_daily_summaryno sensitive capabilityregenerate_monthly_summaryno sensitive capabilityregenerate_weekly_summaryno sensitive capabilityreject_merge_suggestionno sensitive capabilityrun_councilno sensitive capabilitysave_reflectionno sensitive capabilitysearch_ai_convo_summariesno sensitive capabilitysearch_beeper_messagesno sensitive capabilitysearch_fathom_meetingsno sensitive capabilitysearch_granola_meetingsno sensitive capabilitysearch_notesno sensitive capabilitysearch_peopleno sensitive capabilitysync_beeper_contacts_to_frmno sensitive capabilityupdate_ai_convo_summaryno sensitive capabilityupdate_belief_reframeno sensitive capabilityupdate_clientno sensitive capabilityupdate_client_noteno sensitive capabilityupdate_coach_insightno sensitive capabilityupdate_coaching_action_itemno sensitive capabilityupdate_coaching_sessionno sensitive capabilityupdate_cycleno sensitive capabilityupdate_design_interviewno sensitive capabilityupdate_failure_reframeno sensitive capabilityupdate_habitno sensitive capabilityupdate_initiativeno sensitive capabilityupdate_issueno sensitive capabilityupdate_journal_entryno sensitive capabilityupdate_labelno sensitive capabilityupdate_monthly_promptno sensitive capabilityupdate_personno sensitive capabilityupdate_phaseno sensitive capabilityupdate_projectno sensitive capabilityupdate_prototypeno sensitive capabilityupdate_weekly_promptno sensitive capabilityupsert_coach_profileno sensitive capabilityupsert_odyssey_planno sensitive capabilityupsert_unified_graph_linkno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.7.75 latest |
A 96/100 | 3 | 1.13.0 | 2026-09-08 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @starascendin/lifeos-mcp --onlineMore in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.