Jobber Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Jobber Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read-only MCP connector for Jobber field-service operations.
OpsConduit helps owners and operators ask practical questions about the tools that run their business. This first connector is for Jobber and is designed to stay read-only by default.
Plain buyer-facing overview: docs/index.md. Common buyer questions are answered in docs/faq.md. Example owner/operator prompts are in docs/operator-prompts.md. First paid-install deliverable shape: docs/first-report.md.
More buyer-facing examples are in docs/use-cases.md.
A fictional sample output is available in docs/demo-output.md, or run:
npm run demoThe paid pilot handoff format is documented in docs/pilot-deliverable-template.md.
Early-access pricing is documented in docs/offer.md.
For pilot setup, email [email protected] with the subject Jobber pilot. Do not send Jobber passwords, tokens, API secrets, or private customer data by email.
Requires Node.js 20+.
mkdir opsconduit-jobber
cd opsconduit-jobber
npm install @opsconduit/jobber-mcp
cp node_modules/@opsconduit/jobber-mcp/.env.example .env
npx opsconduit-jobber-auth
npx opsconduit-jobber-mcpFill JOBBER_CLIENT_ID and JOBBER_CLIENT_SECRET in .env before running the auth helper. The helper prints a Jobber OAuth URL, receives the local callback at http://localhost:3333/oauth/callback, and stores tokens in .opsconduit/jobber-tokens.json.
Detailed setup notes are in docs/install.md. Paid pilot validation steps are in docs/pilot-checklist.md. Implementation notes for Jobber's GraphQL API are in docs/jobber-api-notes.md.
jobber_auth_url - create the one-time Jobber OAuth authorization link for a customer-hosted install.jobber_exchange_code - exchange the redirected OAuth code and store tokens locally without exposing them in chat.jobber_refresh_token - refresh the stored access token for continued read-only reporting.jobber_account - validate the connected account before running operational queries.jobber_clients_sample - validate read access with a capped client sample.jobber_graphql_read - run read-only Jobber GraphQL for owner reports; mutations are blocked before sending.This repository is in early implementation. The first usable target is a customer-hosted MCP server with local OAuth setup and read-only Jobber GraphQL access.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.