Dav Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Dav Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Give your AI agents the power of organization — Transform them into orchestrating assistants managing calendars, contacts, and tasks.
Built on 26 production-ready tools spanning CalDAV, CardDAV, and VTODO protocols.
Add to your MCP config file:
{
"mcpServers": {
"dav-mcp": {
"command": "npx",
"args": ["-y", "dav-mcp"],
"env": {
"CALDAV_SERVER_URL": "https://dav.example.com",
"CALDAV_USERNAME": "your_username",
"CALDAV_PASSWORD": "your_password"
}
}
}
}Config file locations:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.jsonRestart Claude Desktop after adding the configuration.
Start the HTTP server:
CALDAV_SERVER_URL=https://dav.example.com \
CALDAV_USERNAME=your_username \
CALDAV_PASSWORD=your_password \
BEARER_TOKEN=your-secret-token \
npx dav-mcp --httpThen in n8n:
http://localhost:3000/mcpCustom port:
npx dav-mcp --http --port=8080git clone https://github.com/PhilflowIO/dav-mcp.git
cd dav-mcp
cp .env.example .env
# Edit .env with your credentials
docker-compose upWhen partial tools force your AI to improvise, complete tools let it execute precise operations across all components.
| Capability | dav-mcp | Most MCPs |
|---|---|---|
| Calendar Management | Full CRUD (11 tools) | Create + list only (2-3 tools) |
| Contact Management | Complete CardDAV (8 tools) | Often missing entirely |
| Task Management | Full VTODO support (7 tools) | Rarely included |
| Field-Based Updates | All RFC properties + custom fields | Rarely available |
| Server-Side Filtering | Efficient queries | Dumps all data |
| Multi-Provider | Any CalDAV/CardDAV server | Limited provider support |
| Total Tools | 26 tools | 2-6 tools |
Works with any CalDAV/CardDAV server that follows RFC 4791 and RFC 6352:
The GitHub Actions workflows expect the following secrets/variables:
| Name | Type | Purpose |
|---|---|---|
GHCR_USERNAME | Secret (optional) | Username for GHCR login. Defaults to ${{ github.actor }} if not set. |
GH_PACKAGES_TOKEN | Secret (required) | PAT with write:packages + read:packages for the classic GitHub Packages Docker registry. |
GH_PACKAGES_USERNAME | Secret (optional) | Username for GitHub Packages login. Defaults to ${{ github.actor }} if not set. |
GHCR_REGISTRY | Repository variable (optional) | Override registry host for GHCR (defaults to ghcr.io). |
GITHUB_PACKAGES_REGISTRY | Repository variable (optional) | Override registry host for the legacy GitHub Packages Docker registry (defaults to docker.pkg.github.com). |
GH_PAT_TOKEN | Secret (required for Dependabot) | PAT with read:packages to authenticate to the GitHub npm registry (npm.pkg.github.com). |
engines.node field in package.json so Dependabot-managed updates stay in sync.package.json/package-lock.json through the weekly npm check.PAT scopes:GHCR_TOKENandGH_PACKAGES_TOKENshould includewrite:packagesandread:packages.GH_PAT_TOKENonly needsread:packagesfor Dependabot.
For Google Calendar, use OAuth2 authentication:
{
"mcpServers": {
"dav-mcp": {
"command": "npx",
"args": ["-y", "dav-mcp"],
"env": {
"AUTH_METHOD": "OAuth",
"GOOGLE_USER": "[email protected]",
"GOOGLE_CLIENT_ID": "your-client-id",
"GOOGLE_CLIENT_SECRET": "your-client-secret",
"GOOGLE_REFRESH_TOKEN": "your-refresh-token"
}
}
}
}Pull requests are welcome! Please read CONTRIBUTING.md for guidelines.
MIT License - see LICENSE for details
Built with:
Questions? Issues? Create a GitHub issue
Built for AI agents managing calendars, contacts, and tasks
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.