Fizzy Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Fizzy Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for Fizzy, Basecamp's open-source Kanban tool.
Model Context Protocol lets AI assistants (like Claude) use external tools. This server gives Claude the ability to manage your Fizzy boards and cards.
git clone https://github.com/clawdcraft/fizzy-mcp.git
cd fizzy-mcp
npm install
npm run buildhttp://localhost:3000)#### Claude Code (macOS/Linux)
Edit ~/.claude.json:
{
"mcpServers": {
"fizzy": {
"command": "node",
"args": ["/full/path/to/fizzy-mcp/dist/index.js"],
"env": {
"FIZZY_URL": "http://localhost:3000",
"FIZZY_TOKEN": "your-api-token-here",
"FIZZY_ACCOUNT_ID": "1"
}
}
}
}#### Claude Desktop (macOS)
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"fizzy": {
"command": "node",
"args": ["/full/path/to/fizzy-mcp/dist/index.js"],
"env": {
"FIZZY_URL": "http://localhost:3000",
"FIZZY_TOKEN": "your-api-token-here",
"FIZZY_ACCOUNT_ID": "1"
}
}
}
}Then restart Claude.
Ask Claude things like:
| Variable | Description | Default |
|---|---|---|
FIZZY_URL | Your Fizzy instance URL | http://localhost:3000 |
FIZZY_TOKEN | API access token | (required) |
FIZZY_ACCOUNT_ID | Account ID (from URL path) | 1 |
| Tool | Description |
|---|---|
fizzy_list_boards | List all boards in the account |
fizzy_get_board | Get details of a specific board |
fizzy_create_board | Create a new board |
| Tool | Description |
|---|---|
fizzy_list_cards | List all cards (optionally filter by board_id) |
fizzy_get_card | Get card details |
fizzy_create_card | Create a new card |
fizzy_update_card | Update card title/description |
fizzy_move_card | Move to column, "done", or "not_now" |
| Tool | Description |
|---|---|
fizzy_add_tag | Add a tag to a card (creates tag if needed) |
fizzy_remove_tag | Remove a tag from a card |
| Tool | Description |
|---|---|
fizzy_list_columns | List columns on a board |
fizzy_add_comment | Add a comment to a card |
fizzy_list_comments | List comments on a card |
Create a card on board "03fjavj4afm5qrvuvluoi0po9" with:
- Title: "🔧 Fix database connection"
- Description with a link to the GitHub issueThe MCP server supports HTML in descriptions:
Fix the connection pooling issue.
📄 <a href="https://github.com/example/repo/issues/42">Issue #42</a>Move card 15 to "done"
Move card 12 to "not_now"Add tag "bug" to card 15
Remove tag "feature" from card 12Tags are created automatically if they don't exist.
# Install dependencies
npm install
# Build
npm run build
# Watch mode
npm run devexport FIZZY_URL="http://localhost:3000"
export FIZZY_TOKEN="your-token"
export FIZZY_ACCOUNT_ID="1"
# List tools
echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | node dist/index.js
# Call a tool
echo '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"fizzy_list_boards","arguments":{}}}' | node dist/index.jsFIZZY_TOKEN is set and valid11), not the CUIDMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.