Habitify Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Habitify Mcp Server (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for seamless Habitify API integration with AI assistants. Track habits, manage mood logs, create notes, and automate habit tracking workflows directly from Claude, Cursor, and other MCP-compatible AI tools.
Add use habitify to your prompt in Cursor or Claude.
Before installation, you'll need a Habitify API key:
<details> <summary><b>Installing via Smithery</b></summary>
To install Habitify MCP Server for any client automatically via Smithery:
npx -y @smithery/cli@latest install @sargonpiraev/habitify-mcp-server --client <CLIENT_NAME></details>
<details> <summary><b>Install in Cursor</b></summary>
#### Cursor One-Click Installation
#### Manual Configuration
Add to your Cursor ~/.cursor/mcp.json file:
{
"mcpServers": {
"habitify-mcp-server": {
"command": "npx",
"args": ["-y", "@sargonpiraev/habitify-mcp-server"],
"env": {
"HABITIFY_API_KEY": "your-habitify-api-key"
}
}
}
}</details>
<details> <summary><b>Install in VS Code</b></summary>
Or add manually to your VS Code settings:
"mcp": {
"servers": {
"habitify-mcp-server": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@sargonpiraev/habitify-mcp-server"],
"env": {
"HABITIFY_API_KEY": "your-habitify-api-key"
}
}
}
}</details>
<details> <summary><b>Install in Claude Desktop</b></summary>
Add to your claude_desktop_config.json:
{
"mcpServers": {
"habitify-mcp-server": {
"command": "npx",
"args": ["-y", "@sargonpiraev/habitify-mcp-server"],
"env": {
"HABITIFY_API_KEY": "your-habitify-api-key"
}
}
}
}</details>
Tool Selection
Enable specific tools using glob patterns:
# Enable only 'get' tools
TOOL_GLOB_PATTERNS="get-*" npx @sargonpiraev/habitify-mcp-server
# Enable all except delete operations
TOOL_GLOB_PATTERNS="*,!delete-*" npx @sargonpiraev/habitify-mcp-server
# Enable specific tools
TOOL_GLOB_PATTERNS="get-journal,add-log,create-mood" npx @sargonpiraev/habitify-mcp-serverTools List
Total: 23 tools available 🎯
Hi! I'm Sargon, a software engineer passionate about AI tools and automation. I create open-source MCP servers to help developers integrate AI assistants with their favorite services.
Your support helps me continue developing and maintaining these tools, and motivates me to create new integrations that make AI assistants even more powerful! 🚀
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.