evite-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited evite-mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Evite — read and act on your events as both guest (invitations received) and host (events you created): list events, view guest lists & RSVP tallies, RSVP, message guests, and create/edit events.
Add to .mcp.json in your project or ~/.claude/mcp.json:
{
"mcpServers": {
"evite": {
"command": "npx",
"args": ["-y", "evite-mcp"],
"env": {
"EVITE_EMAIL": "[email protected]",
"EVITE_PASSWORD": "yourpassword"
}
}
}
}npm install -g evite-mcpThe server resolves a session in priority order (see the README for details):
cookie: header copied from a signed-in evite.com tab.EVITE_DISABLE_FETCHPROXY=1.Read (6 + healthcheck): evite_list_events, evite_get_event, evite_list_guests, evite_rsvp_summary, evite_list_messages, evite_list_templates, evite_healthcheck.
Write (confirm-gated): evite_rsvp, evite_send_message, evite_broadcast, evite_create_event, evite_update_event, evite_add_guest, evite_update_guest, evite_remove_guest, evite_send, evite_cancel_event, evite_reinstate_event, evite_duplicate_event.
Every write tool takes confirm: boolean. Without `confirm: true` it makes no network call and returns a dry-run preview of exactly what would be sent — the safe default. The authoring flow is evite_create_event → evite_add_guest → evite_send.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.