Is Moodle Mcp safe to install?

SaferSkills independently audited Moodle Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md3.9 KB · Markdown

Moodle-MCP

A Model Context Protocol (MCP) server implementation that provides capabilities to interact with Moodle LMS.

Features

The server exposes the following tools.

Courses & content

Tool	Description
`get_my_courses`	Get all courses the current user is enrolled in
`get_course_content`	Get sections and modules for a specific course by its ID
`search_course_materials`	Search across all course materials by query string
`get_course_announcements`	Get announcements from course news forums, optionally filtered by course ID
`get_recent_activity`	Get recent activity and updates across courses since a given time

Assignments & deadlines

Tool	Description
`get_assignments`	Get assignments for courses, optionally filtered by course IDs
`get_assignment_status`	Get submission and grading status for a specific assignment
`get_upcoming_deadlines`	Get upcoming assignment deadlines across all courses, sorted by due date
`get_overdue_assignments`	Get unsubmitted assignments past their due date, most overdue first
`get_actionable_tasks`	Get a prioritized list of tasks needing action, sorted by urgency
`analyze_assignment`	Analyze an assignment: status, requirements, materials, progress, deadline
`extract_assignment_requirements`	Extract requirements, deliverables, constraints, and evaluation criteria from an assignment
`find_relevant_materials`	Find course content relevant to an assignment, ranked by relevance
`decompose_task`	Break an assignment into subtasks with effort, dependencies, and critical path
`create_implementation_plan`	Build a step-by-step plan with timeline, resources, milestones, and risks

Grades & progress

Tool	Description
`get_grades`	Get a grade overview for all courses, or detailed grades for one course
`get_course_progress`	Get progress and completion for one course or all courses
`get_course_health`	Health check for a course: progress, grades, unsubmitted and overdue counts
`get_study_load`	Analyze assignment distribution by week to identify heavy weeks

Aggregated overviews

Tool	Description
`get_upcoming_events`	Get upcoming events from Moodle
`semester_dashboard`	Combined overview of courses, upcoming deadlines, and grades
`daily_briefing`	Daily summary of overdue count, today's deadlines, recent grades, events, and tasks
`weekly_review`	Weekly summary of submitted/graded counts, deadlines, overdue count, and progress
`ask_moodle`	Ask a natural language question and have it routed to the right data sources

API Reference

For available Moodle API functions, please refer to the official documentation.

Setup Instructions

Method 1: Using `mcp` CLI (recommended)

Create your own .env file from .env.example
Assume you have uv installed, run uv add "mcp[cli]" to install the MCP CLI tools
Run mcp install main.py -f .env to add the moodle-mcp server to Claude app

Method 2: Using `uvx`

Go to Claude > Settings > Developer > Edit Config > claude_desktop_config.json to include the following

{
  "mcpServers": {
    "moodle-mcp": {
      "command": "uvx",
      "args": ["moodle-mcp"],
      "env": {
        "MOODLE_URL": "https://{your-moodle-url}/webservice/rest/server.php",
        "MOODLE_TOKEN": "{your-moodle-token}"
      }
    }
  }
}

Authentication

Getting your Moodle token

Navigate to your Moodle token management page https://{your-moodle-url}/user/managetoken.php
Use the token with Moodle mobile web service in the Service column
Add this token to your .env file

Moodle Mcp— agent skill

Is Moodle Mcp safe to install?

Moodle-MCP

Features

Courses & content

Assignments & deadlines

Grades & progress

Aggregated overviews

API Reference

Setup Instructions

Method 1: Using `mcp` CLI (recommended)

Method 2: Using `uvx`

Authentication

Getting your Moodle token

Audit the pieces. Scan the whole. Decide.

Is Moodle Mcp safe to install?

Moodle-MCP

Features

Courses & content

Assignments & deadlines

Grades & progress

Aggregated overviews

API Reference

Setup Instructions

Method 1: Using mcp CLI (recommended)

Method 2: Using uvx

Authentication

Getting your Moodle token

Audit the pieces. Scan the whole. Decide.

Method 1: Using `mcp` CLI (recommended)

Method 2: Using `uvx`