Freelo Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Freelo Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server for Freelo project management API.
Key Features:
--readonly flag)Fork of karlost/FreeloMCP.
Note: This package is not published to npm registry. Install directly from GitHub.
# Install globally from GitHub
npm install -g github:sesonet/freelo-mcp-server# Set credentials
export FREELO_EMAIL="[email protected]"
export FREELO_API_KEY="your-api-key"
# Run in readonly mode (default)
freelo-mcp-server
# Run with all tools (including edit operations)
FREELO_READONLY=false freelo-mcp-server| Category | Tools | Description |
|---|---|---|
| Projects | 4 | List, details, workers |
| Tasks | 11 | CRUD, finish, activate, templates |
| Tasklists | 2 | List, details |
| Subtasks | 2 | List, create |
| Comments | 1 | List all comments |
| Notes | 3 | Get, create, update |
| Users | 2 | List, assignable workers |
| Time Tracking | 2 | Start, stop timer |
| Work Reports | 3 | List, create, update |
| Search | 2 | Elasticsearch, custom filters |
| States | 1 | List task states |
Total: 33 tools (20 readonly + 13 edit)
FREELO_READONLY=true freelo-mcp-serverOnly 20 read-only tools available. Safe for browsing and reporting.
FREELO_READONLY=false freelo-mcp-serverAll 33 tools available including create, update, and finish operations.
All tool calls are logged to audit.jsonl:
{"timestamp":"2025-01-12T10:30:00.000Z","tool":"freelo_get_projects","params":{},"status":"success","durationMs":245}Configure via environment:
FREELO_AUDIT_LOG=./logs/audit.jsonl # Log file path
FREELO_AUDIT_WEBHOOK=https://... # Optional webhook URL
FREELO_AUDIT_ENABLED=false # Disable logging| Variable | Required | Description |
|---|---|---|
FREELO_EMAIL | Yes | Freelo account email |
FREELO_API_KEY | Yes | Freelo API key |
FREELO_USER_AGENT | No | Custom User-Agent |
FREELO_READONLY | No | Enable readonly mode |
FREELO_AUDIT_LOG | No | Audit log path |
FREELO_AUDIT_WEBHOOK | No | Webhook URL |
FREELO_AUDIT_ENABLED | No | Enable/disable audit |
Add to ~/.claude.json (macOS/Linux) or %USERPROFILE%\.claude.json (Windows):
{
"mcpServers": {
"freelo": {
"type": "stdio",
"command": "freelo-mcp-server",
"env": {
"FREELO_EMAIL": "[email protected]",
"FREELO_API_KEY": "your-api-key",
"FREELO_READONLY": "true"
}
}
}
}See Installation Guide for Cursor, VS Code, Windsurf, and Continue.dev setup.
MIT License - see LICENSE for details.
Dual copyright:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.