Hebcal Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hebcal Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Hebcal (pronounced HEEB-kal, as in Hebrew calendar) is a free Jewish calendar and holiday web site.
Our mission is to increase awareness of Jewish holidays and to help Jews to be observant of the mitzvot.
This repository is the MCP server equivalent of the powerful custom Jewish calendar tool that lets you generate a list of Jewish holidays for any year (past, present or future).
Also available are a Hebrew date converter, Shabbat candle lighting times and Torah readings (both full kriyah and triennial system), and a page to look up yahrzeits, birthdays and anniversaries.
This MCP server can run in two modes:
npm install
npm run build
node build/cli.js npm install
npm run build
node build/server.jsThe SSE endpoint will be available at http://localhost:8080/mcp by default. You can configure the port using the NODE_PORT environment variable (e.g., NODE_PORT=3000 node build/server.js).
You can test the SSE endpoint with curl:
curl -N http://localhost:8080/mcpThen, in a separate terminal, you can send MCP requests (as JSON) to the server via its stdin if you are also running it in stdio mode, or by sending HTTP POST requests if you were to implement an HTTP ingress for requests. For now, the SSE transport only handles outgoing messages. For a full duplex SSE communication, the client would also need to send requests to the server (e.g. via POST requests to a different endpoint). This example focuses on the server sending events to the client.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.