Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Voice-led, FSRS-scheduled flashcards from YouTube, PDFs, web, or text. Auto-graded quizzes.
Quizlar's MCP server lets Claude, Cursor, Cline, Windsurf, or any MCP-compatible client:
This repo is the public discovery surface (server.json for the Official MCP Registry + a stdio bundle for clients that need it). The hosted MCP server itself is closed-source and runs at https://mcp.quizlar.app — /mcp/ for OAuth-capable clients, /mcp-apikey/ for apiKey Bearer auth (used by every snippet in this README).
io.github.quizlar/mcp-server v1.0.0sk-qz-<32 chars>).~/.cursor/mcp.json:
{
"mcpServers": {
"quizlar": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.quizlar.app/mcp-apikey/",
"--header",
"Authorization:Bearer ${QUIZLAR_API_KEY}"
],
"env": { "QUIZLAR_API_KEY": "sk-qz-..." }
}
}
}~/.codeium/windsurf/mcp_config.json — Windsurf supports Streamable HTTP natively, no wrapper needed:
{
"mcpServers": {
"quizlar": {
"serverUrl": "https://mcp.quizlar.app/mcp-apikey/",
"headers": { "Authorization": "Bearer ${QUIZLAR_API_KEY}" }
}
}
}Then export QUIZLAR_API_KEY=sk-qz-... in your shell.
Open Settings → Connectors → "Add custom connector":
https://mcp.quizlar.app/mcp-apikey/Authorization, Value: Bearer sk-qz-...Or edit claude_desktop_config.json directly using mcp-remote:
{
"mcpServers": {
"quizlar": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.quizlar.app/mcp-apikey/",
"--header",
"Authorization:Bearer ${QUIZLAR_API_KEY}"
],
"env": { "QUIZLAR_API_KEY": "sk-qz-..." }
}
}
}Edit cline_mcp_settings.json (Cline → Settings → MCP Servers → "Edit JSON"):
{
"mcpServers": {
"quizlar": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.quizlar.app/mcp-apikey/",
"--header",
"Authorization:Bearer ${QUIZLAR_API_KEY}"
],
"env": { "QUIZLAR_API_KEY": "sk-qz-..." }
}
}
}Detailed steps in llms-install.md.
npx -y @smithery/cli@latest install @quizlar/quizlar --client claudeReplace claude with cursor, windsurf, etc. Smithery walks you through pasting your API key.
22 tools mapped 1:1 to learner verbs:
create_deck, create_deck_from_text, create_deck_from_youtube, create_cards_batch, get_job_statusquiz_me (composite: build + start in one call), start_quiz, submit_answer, skip_question, end_quizlist_decks, get_deck, list_cards, search_decks, search_cards, list_sessionsget_progress, get_study_recommendations, get_learning_velocity, get_knowledge_gaps, get_retention_curves, get_card_difficulty_statsBearer API key (sk-qz-<32 chars>) is the simplest path; the /mcp-apikey/ mount used in every snippet above accepts the Bearer header directly and skips the OAuth handshake that some stdio bridges can't drive. Quizlar also exposes full OAuth 2.1 with Dynamic Client Registration + PKCE on https://mcp.quizlar.app/mcp/ (discovery card at /.well-known/oauth-authorization-server) for clients that prefer a browser flow.
sk-qz-… value, including the prefix, into the Authorization: Bearer … header.npx path issue. Run npx -y mcp-remote --help in a terminal to verify it resolves; if behind a corporate proxy, set HTTPS_PROXY in the client's env block or install mcp-remote globally with npm i -g mcp-remote.For anything not covered here, file an issue at <https://github.com/quizlar/mcp-server/issues> or email <[email protected]>.
bundle/ (used to publish to Smithery + any other stdio-only client)MIT for this configuration repo. The hosted MCP server itself is proprietary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.