Pretalx Local Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Pretalx Local Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
pretalx-mcp is a local MCP server for pretalx. It is designed to run as a child process of a local MCP client and communicates over stdio only.
Local MCP client -> local stdio MCP process -> outbound HTTPS -> pretalx APIOnly outbound HTTPS requests to pretalx are expected. No inbound network service is exposed.
stdio is the only supported transport.PRETALX_READ_ONLY=true)..env.uv.uv syncCopy .env.example to .env and fill in local values:
cp .env.example .env| Variable | Required | Default | Notes |
|---|---|---|---|
PRETALX_BASE_URL | Yes | none | pretalx base URL, no trailing slash |
PRETALX_API_TOKEN | Yes | empty | use a local token; never commit |
PRETALX_DEFAULT_EVENT | No | empty | optional fallback event slug |
PRETALX_TIMEOUT_SECONDS | No | 20 | HTTP timeout in seconds |
PRETALX_VERIFY_TLS | No | true | keep TLS verification enabled |
PRETALX_READ_ONLY | No | true | must remain true for v1 |
PRETALX_TRANSPORT | No | stdio | only supported value is stdio |
Run the server locally with stdio transport:
uv run pretalx-mcpThis process is intended to be launched by an MCP client, not exposed as a web service.
See docs/MCP_CLIENT_SETUP.md for a generic MCP client JSON configuration using:
uv --directory /path/to/pretalx-mcp run pretalx-mcpSee docs/SECURITY.md for full guidance.
Common local commands:
uv sync
uv run ruff check .
uv run pytestProject docs and metadata files:
.env.example.gitignoredocs/SECURITY.mddocs/MCP_CLIENT_SETUP.mdstdio) and avoid any remote server mode.configuration.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.